Edit tour

Windows Analysis Report
klWGq3yDcQ.exe

Overview

General Information

Sample Name:	klWGq3yDcQ.exe
Original Sample Name:	fe049ddd0ffd2df34da564208aff9cec.exe
Analysis ID:	1347877
MD5:	fe049ddd0ffd2df34da564208aff9cec
SHA1:	1df42bae63a1698b6070b198f9dceb3ac2b1338e
SHA256:	aa16eed6abd2118df6b0670813ae3b9dab59b458bdc76222866c9a9fc0fa1409
Tags:	32CMSBruteexetrojan
Infos:

Detection

Score:	99
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Antivirus detection for URL or domain

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Found Tor onion address

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Machine Learning detection for sample

Probes for web service weaknesses (weak passwords or vulnerabilities)

Injects a PE file into a foreign processes

Found C&C like URL pattern

Send many emails (e-Mail Spam)

Contains functionality to inject code into remote processes

Machine Learning detection for dropped file

May use the Tor software to hide its network traffic

Tries to resolve many domain names, but no domain seems valid

Drops PE files with benign system names

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

Drops PE files to the application program directory (C:\ProgramData)

One or more processes crash

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Internet Provider seen in connection with other malware

Detected potential crypto function

Found potential string decryption / allocating functions

Sample execution stops while process was sleeping (likely an evasion)

Found evasive API chain (may stop execution after checking a module file name)

Contains functionality to call native functions

Contains functionality to dynamically determine API calls

IP address seen in connection with other malware

Connects to many different domains

Abnormal high CPU Usage

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Sample file is different than original file name gathered from version info

Drops PE files

Tries to load missing DLLs

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Detected TCP or UDP traffic on non-standard ports

Checks if the current process is being debugged

Connects to several IPs in different countries

Uses SMTP (mail sending)

Uses FTP

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

klWGq3yDcQ.exe (PID: 7116 cmdline: C:\Users\user\Desktop\klWGq3yDcQ.exe MD5: FE049DDD0FFD2DF34DA564208AFF9CEC)

klWGq3yDcQ.exe (PID: 6240 cmdline: C:\Users\user\Desktop\klWGq3yDcQ.exe MD5: FE049DDD0FFD2DF34DA564208AFF9CEC)

WerFault.exe (PID: 12328 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 5984 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 4248 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 25500 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 13300 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38276 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 3804 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 260 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 7004 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38328 MD5: C31336C1EFC2CCB44B4326EA793040F2)

csrss.exe (PID: 6216 cmdline: "C:\ProgramData\Drivers\csrss.exe" MD5: FE049DDD0FFD2DF34DA564208AFF9CEC)

csrss.exe (PID: 6544 cmdline: "C:\ProgramData\Drivers\csrss.exe" MD5: FE049DDD0FFD2DF34DA564208AFF9CEC)

cleanup

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x778:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B

Snort Signatures

ETPRO TROJAN Win32/CMSBrute/Pifagor Attempted Bruteforcing - Source IP: 192.168.2.4 - Destination IP: 139.162.169.45

Timestamp:	192.168.2.4139.162.169.4551025802813008 11/26/23-06:59:44.879605
SID:	2813008
Source Port:	51025
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Parrot TDS Check M2 - Source IP: 34.136.104.255 - Destination IP: 192.168.2.4

Timestamp:	34.136.104.255192.168.2.4443562922047070 11/26/23-06:59:32.817382
SID:	2047070
Source Port:	443
Destination Port:	56292
Protocol:	TCP
Classtype:	A Network Trojan was detected

FTP traffic detected: 3.234.162.143:21 -> 192.168.2.4:50230 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed.220-Local time is now 05:59. Server port: 21. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed.220-Local time is now 05:59. Server port: 21.220-This is a private system - No anonymous login 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed.220-Local time is now 05:59. Server port: 21.220-This is a private system - No anonymous login220-IPv6 connections are also welcome on this server. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed.220-Local time is now 05:59. Server port: 21.220-This is a private system - No anonymous login220-IPv6 connections are also welcome on this server.220 You will be disconnected after 15 minutes of inactivity.

Source: unknown	Network traffic detected: HTTP traffic on port 58375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 56194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58462
Source: unknown	Network traffic detected: HTTP traffic on port 61946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56280
Source: unknown	Network traffic detected: HTTP traffic on port 58490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61621
Source: unknown	Network traffic detected: HTTP traffic on port 57117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50985
Source: unknown	Network traffic detected: HTTP traffic on port 55337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58227
Source: unknown	Network traffic detected: HTTP traffic on port 56307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61636
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56296
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56292
Source: unknown	Network traffic detected: HTTP traffic on port 59345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57148
Source: unknown	Network traffic detected: HTTP traffic on port 58421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57155
Source: unknown	Network traffic detected: HTTP traffic on port 59197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59345
Source: unknown	Network traffic detected: HTTP traffic on port 52506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62748
Source: unknown	Network traffic detected: HTTP traffic on port 49508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62749
Source: unknown	Network traffic detected: HTTP traffic on port 65072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58490
Source: unknown	Network traffic detected: HTTP traffic on port 61660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61650
Source: unknown	Network traffic detected: HTTP traffic on port 64089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61651
Source: unknown	Network traffic detected: HTTP traffic on port 55292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50933
Source: unknown	Network traffic detected: HTTP traffic on port 65497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61828
Source: unknown	Network traffic detected: HTTP traffic on port 61635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59748
Source: unknown	Network traffic detected: HTTP traffic on port 51673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56484
Source: unknown	Network traffic detected: HTTP traffic on port 51799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60737
Source: unknown	Network traffic detected: HTTP traffic on port 57543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62925
Source: unknown	Network traffic detected: HTTP traffic on port 56618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50955
Source: unknown	Network traffic detected: HTTP traffic on port 56801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50956
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50950
Source: unknown	Network traffic detected: HTTP traffic on port 55245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61604
Source: unknown	Network traffic detected: HTTP traffic on port 61613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55174
Source: unknown	Network traffic detected: HTTP traffic on port 55305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49519
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49517
Source: unknown	Network traffic detected: HTTP traffic on port 61944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50964
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57122
Source: unknown	Network traffic detected: HTTP traffic on port 56432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61613
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49508
Source: unknown	Network traffic detected: HTTP traffic on port 53224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49504
Source: unknown	Network traffic detected: HTTP traffic on port 51631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51428
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53607
Source: unknown	Network traffic detected: HTTP traffic on port 57825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 56884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 61639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61460
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63645
Source: unknown	Network traffic detected: HTTP traffic on port 50826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51673
Source: unknown	Network traffic detected: HTTP traffic on port 64229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51675
Source: unknown	Network traffic detected: HTTP traffic on port 57660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60140
Source: unknown	Network traffic detected: HTTP traffic on port 65441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61230
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52534
Source: unknown	Network traffic detected: HTTP traffic on port 56711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59179
Source: unknown	Network traffic detected: HTTP traffic on port 56346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58082
Source: unknown	Network traffic detected: HTTP traffic on port 56391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58084
Source: unknown	Network traffic detected: HTTP traffic on port 58848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49310
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55811
Source: unknown	Network traffic detected: HTTP traffic on port 57962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51693
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58091
Source: unknown	Network traffic detected: HTTP traffic on port 55067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51627
Source: unknown	Network traffic detected: HTTP traffic on port 55789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58017
Source: unknown	Network traffic detected: HTTP traffic on port 57219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51620
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58268
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57176
Source: unknown	Network traffic detected: HTTP traffic on port 57721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62753
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51636
Source: unknown	Network traffic detected: HTTP traffic on port 57033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51632
Source: unknown	Network traffic detected: HTTP traffic on port 56825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51631
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62767
Source: unknown	Network traffic detected: HTTP traffic on port 65483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64705
Source: unknown	Network traffic detected: HTTP traffic on port 56264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49362
Source: unknown	Network traffic detected: HTTP traffic on port 56882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51886
Source: unknown	Network traffic detected: HTTP traffic on port 51675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52730
Source: unknown	Network traffic detected: HTTP traffic on port 53012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63864
Source: unknown	Network traffic detected: HTTP traffic on port 50933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49355
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49351
Source: unknown	Network traffic detected: HTTP traffic on port 63148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55748
Source: unknown	Network traffic detected: HTTP traffic on port 53071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55508
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65309
Source: unknown	Network traffic detected: HTTP traffic on port 52662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52241
Source: unknown	Network traffic detected: HTTP traffic on port 59191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65302
Source: unknown	Network traffic detected: HTTP traffic on port 57547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56848
Source: unknown	Network traffic detected: HTTP traffic on port 52696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49296
Source: unknown	Network traffic detected: HTTP traffic on port 52478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55516
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55995
Source: unknown	Network traffic detected: HTTP traffic on port 53162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64229
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52494
Source: unknown	Network traffic detected: HTTP traffic on port 61620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64225
Source: unknown	Network traffic detected: HTTP traffic on port 53505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64228
Source: unknown	Network traffic detected: HTTP traffic on port 56314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56618
Source: unknown	Network traffic detected: HTTP traffic on port 51761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57704
Source: unknown	Network traffic detected: HTTP traffic on port 56805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55523
Source: unknown	Network traffic detected: HTTP traffic on port 56292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64236
Source: unknown	Network traffic detected: HTTP traffic on port 62841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58804
Source: unknown	Network traffic detected: HTTP traffic on port 64220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56630
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65335
Source: unknown	Network traffic detected: HTTP traffic on port 49479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 65067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55706
Source: unknown	Network traffic detected: HTTP traffic on port 62477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 64372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 57122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 53665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50499
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51345
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51350
Source: unknown	Network traffic detected: HTTP traffic on port 60811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60052
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56805
Source: unknown	Network traffic detected: HTTP traffic on port 62180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 61938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62485
Source: unknown	Network traffic detected: HTTP traffic on port 60845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57907
Source: unknown	Network traffic detected: HTTP traffic on port 59051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52696
Source: unknown	Network traffic detected: HTTP traffic on port 53186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55963
Source: unknown	Network traffic detected: HTTP traffic on port 62828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63585
Source: unknown	Network traffic detected: HTTP traffic on port 61460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63348
Source: unknown	Network traffic detected: HTTP traffic on port 59348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56827
Source: unknown	Network traffic detected: HTTP traffic on port 62944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56828
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52222
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56825
Source: unknown	Network traffic detected: HTTP traffic on port 52660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56820
Source: unknown	Network traffic detected: HTTP traffic on port 49504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51382
Source: unknown	Network traffic detected: HTTP traffic on port 60019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57697 -> 443

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-165.ec2.internalX-Request-Id: 4df277e5-902c-45ce-8955-cd14e6f7838dData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-67.ec2.internalX-Request-Id: 534af604-dfa1-47fe-b504-c3dc942f463bData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-53.ec2.internalX-Request-Id: 8fa00024-2a62-4b72-b0ac-9b7de3b85a6cData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout=15Date: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheX-Frame-Options: denyContent-Encoding: gzipData Raw: 32 33 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 6f d3 40 10 bd f7 57 4c 8d 50 40 c4 71 7a 43 89 dd 03 50 2a 10 d4 95 12 84 90 b8 ac bd 63 7b 5a 7b 37 da 5d e7 03 c4 7f 67 bc 4e a4 86 b8 24 97 68 e7 e3 bd dd f7 66 1c 5f 7e 48 df 2f 7f dc df 40 e5 9a fa fa 22 ee ff 20 ae 50 c8 eb 0b 80 b8 41 27 20 af 84 b1 e8 92 a0 75 45 f8 36 f0 09 eb 76 35 82 db ad 30 09 1c 6e 5d 94 5b eb 33 1e 6a 0c 99 96 bb 31 bc 58 09 e3 14 9a 31 50 61 44 83 f0 9b 41 8f 7f 15 52 59 b9 d9 d5 74 fa 72 7e 92 dc 90 74 d5 33 b9 46 98 92 d4 6c 7a da b5 12 52 92 2a 87 52 99 36 12 cd 50 46 b7 ae 26 85 43 a9 42 2b 17 5a fa 85 cf dc 64 8d c6 51 2e ea 50 d4 54 aa 59 26 2c 76 50 a7 17 cb 44 fe 58 1a dd 2a 39 73 46 28 cb ea a0 72 c7 75 7f 8e 44 e8 64 1c 10 4d 33 65 51 eb cd ac 22 29 51 9d 22 c4 91 37 e8 89 87 fc 06 e6 4a 82 bb f4 7b 00 8a bd 48 02 dc ae c8 60 6f db de e9 43 15 29 89 db 31 14 ba 66 96 31 88 ba 3e 34 dd a6 e9 ed 97 9b 77 e9 b2 9f 83 7e 40 ce b7 19 9d 69 b7 a7 ba 0c 43 f8 e8 91 d9 25 f8 ca 23 16 2e 45 09 05 6d d1 82 65 21 39 1c 92 b5 2d 1f b5 82 46 67 c4 b3 26 71 4d 39 47 c2 70 e0 55 7e 50 92 be 24 f4 87 39 90 22 47 ec 4a 87 88 c9 d5 64 3a 87 46 6c a9 69 9b a7 a1 d6 a2 f1 67 91 71 d5 74 7e 78 e7 9a 70 b3 d2 c6 75 cf 8c a3 fd 42 c4 9d 1f 9e 5e d2 1a 48 26 c1 7e c0 7b 31 22 8e fa ac cd 0d ad dc d3 f5 78 10 6b d1 47 fb 2d 91 3a 6f 1b 36 64 b2 31 e4 f0 d5 91 e9 87 05 19 c5 ff c5 81 5a a8 b2 15 25 3b f9 99 d1 17 9e 33 18 0d 42 1d 20 df c0 c8 9a 3c 09 a2 c8 a2 d4 7c f9 47 d6 7a 92 eb 26 2a 4c d3 1d a3 73 fd 1b 1e 0d bd 99 d4 3a 17 8e b4 9a 54 da 3a 60 d8 b3 8d a3 4f e9 5d ba b8 ef 29 bf 2d ce f1 8c a2 ee 3a 93 07 9e 99 e1 52 e6 8c 7f 46 bd 42 ff 94 bc ee 16 82 57 c0 2b e2 fd eb 7d 63 1f bb ef dc 5f 9a 51 15 c5 f7 04 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 239TMo@WLP@qzCPc{Z{7]gN$hf_~H/@" PA' uE6v50n][3j1X1PaDARYtr~t3FlzRR6PF&CB+ZdQ.PTY&,vPDX9sF(ruDdM3eQ")Q"7J{H`oC)1f1>4w~@iC%#.Eme!9-Fg&qM9GpU~P$9"GJd:Fligqt~xpuB^H&~{1"xkG-:o6d1Z%;3B <\|Gz&Ls:T:`O])-:RFBW+}c_Q0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-244.ec2.internalX-Request-Id: bf90e307-33ae-4a75-860a-6b98e1ef64c7Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout=15Date: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheX-Frame-Options: denyContent-Encoding: gzipData Raw: 32 33 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 6f d3 40 10 bd f7 57 4c 8d 50 40 c4 71 7a 43 89 dd 03 50 2a 10 d4 95 12 84 90 b8 ac bd 63 7b 5a 7b 37 da 5d e7 03 c4 7f 67 bc 4e a4 86 b8 24 97 68 e7 e3 bd dd f7 66 1c 5f 7e 48 df 2f 7f dc df 40 e5 9a fa fa 22 ee ff 20 ae 50 c8 eb 0b 80 b8 41 27 20 af 84 b1 e8 92 a0 75 45 f8 36 f0 09 eb 76 35 82 db ad 30 09 1c 6e 5d 94 5b eb 33 1e 6a 0c 99 96 bb 31 bc 58 09 e3 14 9a 31 50 61 44 83 f0 9b 41 8f 7f 15 52 59 b9 d9 d5 74 fa 72 7e 92 dc 90 74 d5 33 b9 46 98 92 d4 6c 7a da b5 12 52 92 2a 87 52 99 36 12 cd 50 46 b7 ae 26 85 43 a9 42 2b 17 5a fa 85 cf dc 64 8d c6 51 2e ea 50 d4 54 aa 59 26 2c 76 50 a7 17 cb 44 fe 58 1a dd 2a 39 73 46 28 cb ea a0 72 c7 75 7f 8e 44 e8 64 1c 10 4d 33 65 51 eb cd ac 22 29 51 9d 22 c4 91 37 e8 89 87 fc 06 e6 4a 82 bb f4 7b 00 8a bd 48 02 dc ae c8 60 6f db de e9 43 15 29 89 db 31 14 ba 66 96 31 88 ba 3e 34 dd a6 e9 ed 97 9b 77 e9 b2 9f 83 7e 40 ce b7 19 9d 69 b7 a7 ba 0c 43 f8 e8 91 d9 25 f8 ca 23 16 2e 45 09 05 6d d1 82 65 21 39 1c 92 b5 2d 1f b5 82 46 67 c4 b3 26 71 4d 39 47 c2 70 e0 55 7e 50 92 be 24 f4 87 39 90 22 47 ec 4a 87 88 c9 d5 64 3a 87 46 6c a9 69 9b a7 a1 d6 a2 f1 67 91 71 d5 74 7e 78 e7 9a 70 b3 d2 c6 75 cf 8c a3 fd 42 c4 9d 1f 9e 5e d2 1a 48 26 c1 7e c0 7b 31 22 8e fa ac cd 0d ad dc d3 f5 78 10 6b d1 47 fb 2d 91 3a 6f 1b 36 64 b2 31 e4 f0 d5 91 e9 87 05 19 c5 ff c5 81 5a a8 b2 15 25 3b f9 99 d1 17 9e 33 18 0d 42 1d 20 df c0 c8 9a 3c 09 a2 c8 a2 d4 7c f9 47 d6 7a 92 eb 26 2a 4c d3 1d a3 73 fd 1b 1e 0d bd 99 d4 3a 17 8e b4 9a 54 da 3a 60 d8 b3 8d a3 4f e9 5d ba b8 ef 29 bf 2d ce f1 8c a2 ee 3a 93 07 9e 99 e1 52 e6 8c 7f 46 bd 42 ff 94 bc ee 16 82 57 c0 2b e2 fd eb 7d 63 1f bb ef dc 5f 9a 51 15 c5 f7 04 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 239TMo@WLP@qzCPc{Z{7]gN$hf_~H/@" PA' uE6v50n][3j1X1PaDARYtr~t3FlzRR6PF&CB+ZdQ.PTY&,vPDX9sF(ruDdM3eQ")Q"7J{H`oC)1f1>4w~@iC%#.Eme!9-Fg&qM9GpU~P$9"GJd:Fligqt~xpuB^H&~{1"xkG-:o6d1Z%;3B <\|Gz&Ls:T:`O])-:RFBW+}c_Q0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:29 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:29 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 0809a905-3e9a-44dc-8e7b-9846c682d50aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-133.ec2.internalX-Request-Id: bc230627-bd1b-46ec-9823-cdff25e1e0bbData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:02 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 184Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e cd 0e 82 30 10 84 ef 7d 8a 95 bb 2c 1a 8e 4d 0f f2 13 49 10 89 29 07 8f 98 d6 94 04 28 b6 45 e3 db 4b e1 e2 71 76 e6 9b 59 ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 73 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c2 75 ae 97 2c 8e 62 a8 b4 83 5c cf a3 a0 b8 1d 09 c5 35 44 1f 5a 7c 3d 77 60 7f 99 45 11 3a 31 ae 24 18 f9 9a a5 75 52 40 73 2b 01 5b 31 74 63 67 9d 69 9d 36 08 9f d6 c2 b8 70 4f cf 81 1e c1 a9 ce 82 95 e6 2d 4d 48 71 f2 3b eb c2 d2 e9 3f 23 3f 1d 55 df e9 d4 00 00 00 Data Ascii: M0},MI)(EKqvYK9ExtsaU#TgTV,u,b\5DZ\|=w`E:1$uR@s+[1tcgi6pO-MHq;?#?U
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 191Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 39 0e c2 30 10 45 7b 9f 62 48 4f 26 20 4a cb 05 24 88 48 61 11 32 05 65 90 07 d9 12 b1 83 ed b0 dc 1e 07 1a ca bf cc fb c3 27 e5 7e 25 cf 87 0a 36 72 db c0 e1 b4 6c ea 15 64 53 c4 ba 92 6b c4 52 96 bf 64 9e 17 88 d5 2e 13 8c eb d8 dd 04 d7 d4 aa 24 a2 89 37 12 8b 62 01 3b 17 61 ed 06 ab 38 fe 4c c6 f1 5b e2 17 a7 de e3 dd 4c fc 75 92 62 bc 17 52 13 78 ba 0f 14 22 29 38 1d 1b c0 56 75 c6 9a 10 7d 1b 9d 47 63 15 bd f2 5e f7 f0 6c 03 d8 04 b8 8e 00 70 16 a2 36 01 02 f9 07 f9 9c 63 3f 0e 7e a7 12 7c 7c 91 7d 00 cc 66 b7 ab dd 00 00 00 Data Ascii: M90E{bHO& J$Ha2e'~%6rldSkRd.$7b;a8L[LubRx")8Vu}Gc^lp6c?~\|\|}f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-165.ec2.internalX-Request-Id: 81a04949-9058-4c59-ab6f-5d3f787a9479Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:02 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:30 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-127.ec2.internalX-Request-Id: 515e9e4a-fd29-4be9-b345-83d3b1b5d0c0Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:30 GMTserver: LiteSpeedData Raw: 32 66 39 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 32 33 0d 0a 0a 0a 20 20 20 20 54 68 65 20 6c 69 6e 6b 20 6f 6e 20 74 68 65 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 0d 0a 38 64 0d 0a 68 74 74 70 3a 2f 2f 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 72 65 66 65 72 72 69 6e 67 0a 20 20 20 20 70 61 67 65 3c 2f 61 3e 20 73 65 65 6d 73 20 74 6f 20 62 65 20 77 72 6f 6e 67 20 6f 72 20 6f 75 74 64 61 74 65 64 2e 20 50 6c 65 61 73 65 20 69 6e 66 6f 72 6d 20 74 68 65 20 61 75 74 68 6f 72 20 6f 66 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 0d 0a 35 34 0d 0a 68 74 74 70 3a 2f 2f 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 2f 61 64 6d 69 6e 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:31 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:03 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 212Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheX-Frame-Options: SAMEORIGINContent-Length: 94Content-Type: text/html; charset=iso-8859-1Data Raw: 46 6f 72 20 73 65 63 75 72 69 74 79 20 72 65 61 73 6f 6e 73 2c 20 74 68 69 73 20 55 52 4c 20 69 73 20 6f 6e 6c 79 20 61 63 63 65 73 73 69 62 6c 65 20 75 73 69 6e 67 20 6c 6f 63 61 6c 68 6f 73 74 20 28 31 32 37 2e 30 2e 30 2e 31 29 20 61 73 20 74 68 65 20 68 6f 73 74 6e 61 6d 65 2e Data Ascii: For security reasons, this URL is only accessible using localhost (127.0.0.1) as the hostname.
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-167.ec2.internalX-Request-Id: f953fd7d-07e5-4972-a064-412a9ffdaf9eData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-242.ec2.internalX-Request-Id: 279bbd8c-e9fb-452d-a555-9c5c62aa2151Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-17.ec2.internalX-Request-Id: d75c36b2-cac0-4124-ba0b-f91fc196e22dData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 26 Nov 2023 05:59:23 GMTContent-Length: 0Connection: keep-alivex-backend: deny_backendStrict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-167.ec2.internalX-Request-Id: 28c2f7ec-66a8-43c7-b694-011be95364ebData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:32 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:03 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 221Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/index.php was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:32 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Length: 262Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 27 41 72 69 61 6c 27 20 73 69 7a 65 3d 27 33 27 3e 45 72 72 6f 20 34 30 33 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 27 4d 53 20 53 61 6e 73 20 53 65 72 69 66 27 20 73 69 7a 65 3d 27 32 27 3e 41 63 65 73 73 6f 20 6e 65 67 61 64 6f 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e Data Ascii: <p align='center'> </p><p align='center'> </p><p align='center'> </p><p align='center'> </p><p align='center'><b><font face='Arial' size='3'>Erro 403</font></b></p><p align='center'><font face='MS Sans Serif' size='2'>Acesso negado</font></p>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Length: 212Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 184Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e cd 0e 82 30 10 84 ef 3c c5 ca 1d 16 0d c7 a6 07 f9 89 24 88 c4 94 83 47 4c ab 25 c1 b6 42 91 f8 f6 52 b8 78 9c 9d f9 66 96 ec d2 4b c2 6e 75 06 27 76 2e a1 6e 8e 65 91 80 1f 20 16 19 cb 11 53 96 6e ce 21 8c 10 b3 ca a7 1e 91 f6 d5 53 22 45 cb 17 61 3b db 0b 1a 47 31 54 da 42 ae 27 c5 09 6e 47 8f e0 1a 22 77 cd bf 8e db d3 bf cc a2 3c 62 28 93 02 06 f1 9e c4 68 05 87 e6 5a 02 ce 26 e8 f5 b3 53 a1 91 06 e6 76 04 b5 50 0f 47 81 56 60 65 37 c2 28 86 8f 18 42 82 c6 ad ac fd 4b a3 fb cb fb 01 96 3d a0 d1 d2 00 00 00 Data Ascii: M0<$GL%BRxfKnu'v.ne Sn!S"Ea;G1TB'nG"w<b(hZ&SvPGV`e7(BK=
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveKeep-Alive: timeout=20Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:03 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:03 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://gccb.co.in/wp-json/>; rel="https://api.w.org/"Vary: User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 2e 77 2e 6f 72 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /phpmyadmin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.57 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Length: 221Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/index.php was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 181Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3b 0f 82 40 10 84 fb fb 15 2b 3d 2c 1a ca cb 15 f2 88 24 88 c4 1c 85 25 e6 d6 1c 09 1c 08 87 c4 7f 2f 8f c6 72 76 e6 9b 59 7e 88 6e a1 7c 14 31 5c e4 35 83 a2 3c 67 69 08 8e 8b 98 c6 32 41 8c 64 b4 3b 27 cf 47 8c 73 47 30 ae 6d db 08 ae a9 52 8b b0 b5 6d 48 04 7e 00 79 67 21 e9 26 a3 38 ee 47 c6 71 0b f1 67 a7 be 2b 77 14 7f 99 45 31 de 0b a9 09 06 7a 4f 34 5a 52 50 de 33 c0 b9 77 2b d5 d6 06 61 ae 46 30 0b f2 5a 11 e8 0c 58 5d 8f 30 d2 f0 a1 c1 e3 d8 af 13 5b f9 52 b7 3e c5 7e 8f 8c 6e 79 cf 00 00 00 Data Ascii: M;@+=,$%/rvY~n\|1\5<gi2Ad;'GsG0mRmH~yg!&8Gqg+wE1zO4ZRP3w+aF0ZX]0[R>~ny
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:32 GMTSet-Cookie: publishedsite-xsrf=eyJpdiI6InZhbDJwVnlLUWhubGJIVTRxS1RyS3c9PSIsInZhbHVlIjoibEtHV0dCVjhVZFFxdXVPckRoandqSmJIM2VpRWo3WkE2ejZGY2pQbU5MVDEyaUwxT3czZzd6T2tYUFc2WjNmYm83eGJpaCtkTnU2eW1zMmcxN3N5eHJlbjdPL1drOGwyOUw5TjhsM0k1MnBoWDhYOHJucU5VWGN6Z3lZOC9qejUiLCJtYWMiOiJkYmI0NTNiNTQ5YzNhYzUxNjUyMDM2MWNlM2QzYzYxNGMyZTJhMWY2MzYyYWNiN2JjNzQ2ODI5NzJlMjU2MGQ0IiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:32 GMT; Max-Age=1209600; path=/; samesite=laxSet-Cookie: XSRF-TOKEN=eyJpdiI6IkxXaFVUaFNtTzd2ZGkvek9mQ0hvQmc9PSIsInZhbHVlIjoiZmhtK2lrVUlvZjdVZHpFVWVmMjR6b0VFRVYwWWdxaXNkRmpTQ202R0hubjNUM2czRThCblFXTXNOVjhQNC9kdS8yMmhialBBNGtpcW05eDZ0NDJzMGFDZ2VUemRuU2dvU01pdUNUdGEwc0wvUFRqdUt3MFl6RFlkblFaTWhZQy8iLCJtYWMiOiI2ZTM3MmEwZmUyNWQ5ZDgyYTFhNWQwMDg4OWNkNTdlNmI5ZDJhZmM1MzcwMzM3NDgxZjBlNDI5MTllNTVlN2VjIiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:32 GMT; Max-Age=1209600; path=/; samesite=laxSet-Cookie: PublishedSiteSession=eyJpdiI6Imo1aVN2WVJmWnBrNnZqSXJrYXFoblE9PSIsInZhbHVlIjoidVNWYlV1bDRTdmFsRnQ0anV4Zy9kK3RTUXdEQVFwV1I5OXo1Z0hKUTBWbWxoeFNDUGEwM3F0dData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.57 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-53.ec2.internalX-Request-Id: 21062e9b-de89-4f44-802e-371bfef32e49Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"content-length: 12182content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:32 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 17 f1 7d 4c 7f 68 ef ea 5c 57 9d Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:32 GMTserver: LiteSpeedData Raw: 32 66 39 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 35 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61 6e 63 65 66 61 73 74 2e 63 6f 6d 2e 62 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 64 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-234.ec2.internalX-Request-Id: 1875a92b-54bb-4cb4-94f5-3d85adb37108Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 26 Nov 2023 05:59:24 GMTContent-Length: 0Connection: keep-alivex-backend: deny_backendStrict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 210Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /wp-login.php was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: awselb/2.0Date: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlContent-Length: 118Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:33 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:05 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheContent-Encoding: gzipVary: Accept-EncodingTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 32 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 73 cb cc 49 55 c8 cb 2f 51 48 cb 2f cd 4b d1 e3 02 00 2b 90 a9 21 10 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 24sIU/QH/K+!0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=f76ae25ad37124bb1d3573f58740a00e; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 34 31 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 72 Data Ascii: 416<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:33 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 181Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e cd 0e 82 30 10 84 ef 7d 8a 95 bb 2c 1a 8e 4d 0f f2 13 49 10 89 29 07 8f 98 d6 94 04 da 0a 45 e3 db 5b e0 e2 71 76 e6 9b 59 ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 73 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 78 e1 3a d7 4b 16 47 31 54 c6 41 6e 66 2d 28 6e 47 42 71 0d d1 87 11 df 85 3b b0 bf 8c 57 84 5a c6 95 84 51 be 66 39 39 29 a0 b9 95 80 ad 18 3a 1d 5a 65 e1 d3 4e a0 3d f2 5c 10 30 1a 9c ea 26 98 e4 f8 96 63 48 d1 2e 13 6b b9 af 5b 9e 22 3f 00 0d 99 4b cf 00 00 00 Data Ascii: M0},MI)E[qvYK9ExtsaU#TgTVx:KG1TAnf-(nGBq;WZQf99):ZeN=\0&cH.k["?K
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-215.ec2.internalX-Request-Id: e97c1fd0-6030-4c04-abd8-29e5681fb18cData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 207Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 77 70 2d 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /wp-admin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 70 68 70 4d 79 41 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /phpMyAdmin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.57 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-234.ec2.internalX-Request-Id: 99d9ea9b-78d9-4e6b-8a6e-78f38b0dd422Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 35 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61 6e 63 65 66 61 73 74 2e 63 6f 6d 2e 62 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 64 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 26 Nov 2023 05:59:25 GMTContent-Length: 0Connection: keep-alivex-backend: deny_backendStrict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheX-Powered-By: PleskLinVary: User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 0d 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 10File not found.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.57 (Unix)Content-Length: 299Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 33 20 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 62 6c 65 20 74 6f 20 73 65 72 76 69 63 65 20 79 6f 75 72 0a 72 65 71 75 65 73 74 20 64 75 65 20 74 6f 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 64 6f 77 6e 74 69 6d 65 20 6f 72 20 63 61 70 61 63 69 74 79 0a 70 72 6f 62 6c 65 6d 73 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>503 Service Unavailable</title></head><body><h1>Service Unavailable</h1><p>The server is temporarily unable to service yourrequest due to maintenance downtime or capacityproblems. Please try again later.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheContent-Length: 207Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 77 70 2d 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /wp-admin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:34 GMTserver: LiteSpeedData Raw: 32 66 39 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:06 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 178Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3d 0f 82 30 14 45 f7 fe 8a 27 bb 3c 34 8c 4d 07 f9 88 24 88 c4 94 c1 11 d3 9a 92 40 8b b4 68 fc f7 52 58 1c ef bb e7 9d 5c ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 6b 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c1 75 ae 97 2c 8e 62 a8 8c 83 dc cc 5a 50 dc 8e 84 e2 0a d1 87 11 5f ff 77 60 7f cc 92 08 1d 19 57 12 26 f9 9a a5 75 52 40 73 2b 01 5b 31 74 1a 3e ad 05 bd e0 4f 8f 83 d1 e0 54 67 c1 ca e9 2d a7 90 e2 e8 f5 ab 78 51 f9 41 e4 07 03 db dd c9 cb 00 00 00 Data Ascii: M=0E'<4M$@hRX\K9ExtkaU#TgTV,u,bZP_w`W&uR@s+[1t>OTg-xQA
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=e07b21aaadc733c471861fff8037d281; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 31 35 33 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 Data Ascii: 1532<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:35 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:35 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:35 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://gccb.co.in/wp-json/>; rel="https://api.w.org/"Vary: User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 38 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 2e 77 2e 6f 72 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-242.ec2.internalX-Request-Id: efc0c331-db35-4906-89b3-c759afc17f2cData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-88.ec2.internalX-Request-Id: 44a54137-f06a-49d5-b31c-8e0c6d123a10Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 50 68 70 4d 79 41 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /PhpMyAdmin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 207Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /admin.php was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: awselb/2.0Date: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/htmlContent-Length: 118Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: awselb/2.0Date: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/htmlContent-Length: 118Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 35 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61 6e 63 65 66 61 73 74 2e 63 6f 6d 2e 62 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 64 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 178Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3d 0f 82 30 14 45 f7 fe 8a 27 bb 3c 34 8c 4d 07 f9 88 24 88 c4 94 c1 11 d3 9a 92 40 8b b4 68 fc f7 52 58 1c ef bb e7 9d 5c ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 6b 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c1 75 ae 97 2c 8e 62 a8 8c 83 dc cc 5a 50 dc 8e 84 e2 0a d1 87 11 5f ff 77 60 7f cc 92 08 1d 19 57 12 26 f9 9a a5 75 52 40 73 2b 01 5b 31 74 1a 3e ad 05 bd e0 4f 8f 83 d1 e0 54 67 c1 ca e9 2d a7 90 e2 e8 f5 ab 78 51 f9 41 e4 07 03 db dd c9 cb 00 00 00 Data Ascii: M=0E'<4M$@hRX\K9ExtkaU#TgTV,u,bZP_w`W&uR@s+[1t>OTg-xQA
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:10 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 8ac185b1-1c0f-4158-8516-d52c448d69f0Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=3d4fbfa0c8c9c298da08ca6e25da0fa4; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 66 37 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 72 Data Ascii: f7e<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-67.ec2.internalX-Request-Id: f847adbe-a03c-4114-a492-97129701714dData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:38 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.57 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheX-Powered-By: PleskLinVary: User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 0d 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 10File not found.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:38 GMTserver: LiteSpeedData Raw: 32 66 39 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 66 6e 66 72 b6 6e 4d e6 a8 20 12 92 30 43 11 5c 02 92 ed f5 f8 07 dd bf 71 7f d9 ad c6 83 04 29 ea 61 8f 93 73 3e 5c a5 32 26 41 a0 bb d1 68 34 1a 40 37 70 f5 22 62 a1 b8 4b 09 5a 88 65 7c 7d 74 05 7f 50 8c 93 f9 d8 21 89 f7 db 5b e7 a8 91 66 64 46 6f c7 0e 9b 8f d0 42 88 94 8f 3a 1d 36 4f fd 25 e9 24 fc d8 41 50 8a e0 e8 fa e8 6a 49 04 96 59 3c f2 cf 15 5d 8f 9d d7 2c 11 24 11 de bb bb 94 38 28 54 6f 63 47 90 5b d1 01 4c 97 28 5c e0 8c 13 31 fe ed dd f7 de b9 83 3a d7 47 47 57 2f 3c 0f fd cc a6 34 26 e8 6d 4a 42 3a a3 21 fa 99 08 cc d1 09 fa 1e af 69 c8 12 8e 3c cf 20 4c f0 92 8c 9d 35 25 37 29 cb 84 85 e6 86 46 62 31 8e c8 9a 86 c4 93 2f 2e a2 09 15 14 c7 1e 0f 71 4c c6 5d 17 2d f1 2d 5d ae 96 45 c2 8a 93 4c be e1 69 4c c6 81 73 7d 15 d3 e4 13 ca 48 3c 76 f8 82 65 22 5c 09 04 34 38 68 91 91 d9 d8 01 9e 8c 3a 9d c5 92 86 0b 4c 62 9c 44 21 f3 43 b6 ec dc a4 9e ae 72 67 95 c6 0c 47 bc d3 0b 7a 41 27 38 cd 33 fb 69 32 2f 61 c0 69 1a 13 4f b0 55 b8 f0 fe 44 24 9c fe 8b f0 b1 d3 ed 05 b7 dd 5e f0 27 d5 4c 23 3d 3b bd 3d 3b fd 73 51 76 87 bd db ee b0 f7 8c 48 41 66 ff c1 b2 e8 4d 46 38 47 6f c5 6a 36 93 22 8a b6 fc ae 78 98 d1 54 5c 1f 6d f9 2e 93 3b 2f d1 ff 66 2b 14 e2 04 e1 28 42 4b 96 11 e8 44 33 3a 5f 65 58 50 96 20 96 c2 1f 8e 04 43 37 64 3a 63 89 00 39 23 19 9a de a1 34 23 6b ca 56 3c be 43 11 99 d1 84 26 73 24 16 04 fd 83 4c bf 67 89 78 2d 01 a1 1b 2a 16 e8 8e ad b2 1c d6 cb ce 4e a2 e8 0c b5 10 a8 0c 36 ab 80 1a 8f c7 c8 59 25 12 19 89 1c d4 46 f7 3b 21 41 1d cb c4 8c 51 42 6e d0 2f d3 8f 24 14 ad f6 e5 ce d2 0f 3b bf 96 e0 be 6f ce 19 9b c7 a4 f9 01 8d d1 fd 0c 2f 69 4c 09 1f a1 f7 cd 9f 59 22 38 c9 32 2c 46 dd 20 70 7b 41 e0 f6 83 c0 1d 04 81 3b 0c 02 f7 34 08 dc b3 20 70 cf 83 c0 bd 08 02 b7 1b 04 54 e0 98 86 90 53 3f f5 f3 a7 41 fe 34 cc 9f 4e f3 a7 b3 fc e9 3c 7f ba 30 4f 4d 17 35 7f 49 49 f2 97 b7 38 e1 23 43 82 8d be 0e cd 4e e0 27 7c 35 05 cd 1a 63 41 93 e6 87 87 cb a3 9d 0c 6b cd 56 49 08 c2 d4 3a a4 d9 d6 38 43 37 33 34 46 11 0b 57 4b 92 08 3f cc 08 16 e4 bb 98 c0 5b 0b 35 95 7c 37 d1 9e 56 04 19 b8 99 f9 3c 0b d1 18 35 cd f0 82 3f e2 5b 5f b5 19 4e 29 97 da 14 d2 3a 31 9d f2 8e 96 f4 4e d7 1f fa 7d f3 e6 7f e4 cd dd 02 a3 51 c9 d1 6e 8c 9a 72 10 fa 88 d7 58 53 7a 50 61 cc ef 12 49 a9 c8 56 e4 00 7c c0 27 6e b3 69 4e 84 e6 11 ff f6 ee 1d 9e ff 1d 2f 89 cd ad f7 c1 87 fd 84 70 3f c5 19 49 c4 df 59 44 7c 9a 70 92 89 6f c9 8c 65 a4 85 6e 66 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 202Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 70 6d 61 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /pma/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 35 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61 6e 63 65 66 61 73 74 2e 63 6f 6d 2e 62 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 64 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 203Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /admin was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-181.ec2.internalX-Request-Id: 4cdb76f0-ac0c-447e-ab02-c7fd8c561499Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 522906a5-3a0f-413b-8b91-6520c6622fe0Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 7a17c252-4384-4a5c-92aa-b9c4d35f513bData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-215.ec2.internalX-Request-Id: d93bdd24-2e62-4221-ba7e-7b1503931066Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveKeep-Alive: timeout=20Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:11 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 178Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3d 0f 82 30 14 45 f7 fe 8a 27 bb 3c 34 8c 4d 07 f9 88 24 88 c4 94 c1 11 d3 9a 92 40 8b b4 68 fc f7 52 58 1c ef bb e7 9d 5c ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 6b 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c1 75 ae 97 2c 8e 62 a8 8c 83 dc cc 5a 50 dc 8e 84 e2 0a d1 87 11 5f ff 77 60 7f cc 92 08 1d 19 57 12 26 f9 9a a5 75 52 40 73 2b 01 5b 31 74 1a e1 d3 5a d0 0b ff f4 3c 18 0d 4e 75 16 ac 9c de 72 0a 29 8e de bf 9a 17 97 5f 44 7e e1 f7 2d aa cc 00 00 00 Data Ascii: M=0E'<4M$@hRX\K9ExtkaU#TgTV,u,bZP_w`W&uR@s+[1tZ<Nur)_D~-
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-17.ec2.internalX-Request-Id: 4fbb1219-31f6-4a77-adf9-ae1a3c8142a1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=4813b33e8d8de01341c2649c91eea2fb; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 66 37 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 72 Data Ascii: f7e<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"content-length: 8901content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:40 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91 78 16 e3 04 cf 08 07 c2 ca
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-137.ec2.internalX-Request-Id: 1d31691e-bca9-4d49-89fb-90b527477ecbData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 4814e0fe-084c-41d8-ac2d-b9719a8c0144Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-53.ec2.internalX-Request-Id: 159770e6-894b-4e9a-9c76-e9dfca7b456aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 203Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /admin was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheContent-Length: 208Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 61 64 6d 69 6e 2f 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /admin/on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:40 GMTserver: LiteSpeedData Raw: 32 66 38 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-181.ec2.internalX-Request-Id: 18898dca-c113-4e77-a143-5ea2092e8276Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-234.ec2.internalX-Request-Id: fdfcc70f-f991-49e4-ae8c-d9ffecc944b8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-88.ec2.internalX-Request-Id: 12fb08d3-8df7-4320-9aae-036c44547809Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-167.ec2.internalX-Request-Id: 3b4f90a7-9821-45a7-a5ff-3f061b4255f7Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-67.ec2.internalX-Request-Id: 0059ca8a-5d7d-4a1e-a631-34d08909dfebData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-167.ec2.internalX-Request-Id: bbca6acf-61ae-429f-84d6-137cf384224aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveKeep-Alive: timeout=20Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 204Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /admin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=38bf644626892adcd16b79fed6cf8f99; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 34 31 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 72 Data Ascii: 416<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-215.ec2.internalX-Request-Id: a8075867-cb03-4190-9960-1b8336cbf9eaData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-17.ec2.internalX-Request-Id: e0e5031e-5c15-4c07-9f60-ad8d31eb8c0aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-133.ec2.internalX-Request-Id: eae44be1-86d7-44c1-9a6e-538d81bea93aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-137.ec2.internalX-Request-Id: a78b2832-5f62-455e-9566-63c3c97326deData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-181.ec2.internalX-Request-Id: c91faefd-56a1-4ffa-88fa-926ab46c9e3fData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheContent-Length: 208Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 61 64 6d 69 6e 2f 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /admin/on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-234.ec2.internalX-Request-Id: 4ee270f3-d117-4284-a804-0f3e608c95e5Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheContent-Length: 208Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 61 64 6d 69 6e 2f 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /admin/on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:43 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 30 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:46 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:47 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 30 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:58 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:58 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:59 GMTSet-Cookie: publishedsite-xsrf=eyJpdiI6IlorckNMbEF4ZmhzaXNzWkRXUFF1anc9PSIsInZhbHVlIjoib21hQzNVNm1JbzZvdHlPZlUzYW1QeVFpR0g2VkRNbkw2a1l3K0RIdHNxdHNhWStrSUN6dHN0L2FPd3JTdjh4WjVvd3UxbEMzb3VMeWRBVE1sRlFJQTBVTURsc3RtczhlWCtzQlIvZ2RQQ3FGVHRUUWJSRzVKejZzamVEaytkUzIiLCJtYWMiOiI5YzViNmZhZmM4OTAyMWQ1OGUyZjZlMjg2NTMzY2Y1NDA4YTQzNDMwMTZhMzNlNDU2MDhkYzM3N2E2MDc5ZGM3IiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:59 GMT; Max-Age=1209600; path=/; samesite=laxSet-Cookie: XSRF-TOKEN=eyJpdiI6IkJZOU9NdmcrSEc1ZUlKdlc5UE4xTFE9PSIsInZhbHVlIjoiK0pDVEJMdGlkclhya09EMnMxVmVuWGtEdkd4ZXEzdDVTVlF0c0lvQzM3U0hTWFU3emtLRkExSmtrTlJ2aTlHMHhIR1d0dzZzS0FFN0srZklkbkhzNnJJQ1hsUlJrbUJKc0s2c0xZSlIrNmU3Qm5YUHpqeUhTWVZMMjVwZ1I2WVQiLCJtYWMiOiIwOGM2OTU4OWY1NjRkZGY5NTgyMzRhMzQ0Y2IzMWI3Y2Y5YWRhYWU0OGNmMTE3ZjIyMmY2ZmY4NjQyMzFjZmY2IiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:59 GMT; Max-Age=1209600; path=/; samesite=laxSet-Cookie: PublishedSiteSession=eyJpdiI6Imp2NHlXTVlGa2hBNktWcnFZelRIR0E9PSIsInZhbHVlIjoiYjJyM3F4TkJrU09nUzkrRElWNjcvNVErcUpXNVZua0xPQlVVMVZHbnJwVUNnV09iUG52RWxoZData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:59 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 06:00:00 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 06:00:02 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 06:00:05 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:34 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:38 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2117content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:39 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 41 fe fb 81 a4 e4 28 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f 2f 7e 7f 7e f2 df b7 2f a1 b0 55 39 dd 1a 64 ee 09 25 95 8b 9c a0 8c df bf 23 5b 83 5a e3 5c 5c e6 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 35 62 99 93 e7 4a 5a 94 36 3e 59 d7 48 80 85 51 4e 2c 5e da d4 ad 35 01 56 50 6d d0 e6 ef 4f fe 1e 1f 13 48 9d 19 2b 6c 89 d3 d7 6a 01 af 24 3c 2a 0d fd d4 a8 09 fc f3 8d 60 05 c5 12 1e d1 aa 9e c0 73 95 c0 a3 5f 8f f7 46 7b 13 f8 43 69 fe 56 a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 97 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 5d 90 4a 48 8e 97 ee 85 6a 56 88 25 46 0e 52 56 0a 79 01 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 5c d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 a7 4b d4 f9 61 32 4c 0e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3f 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 bb bd 75 83 c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 e7 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 4e 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 65 26 d1 58 97 94 e1 76 e4 11 45 bb d1 b9 89 76 26 5b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 56 ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 2d b3 67 a8 b5 d2 64 3a c8 8c d5 4a 2e a6 2f dd 38 4b db d1 18 4e 0a 84 c6 a0 76 de 84 4e 88 72 5c 0b 79 41 37 72 20 0c 48 65 41 e3 42 18 eb 97 57 12 6c 21 0c 18 61 31 81 57 73 58 ab 06 a8 46 68 a4 69 34 82 f2 5f f4 c6 f8 2e 58 bd 76 42 1a b0 a2 a2 04 ca b9 db 15 08 69 2c 52 9e 64 33 ed 2b 6a ca c5 72 ba e5 08 72 49 0b 3e cc 02 47 6e 4c 6e 28 0b c3 e0 e7 dc d3 f5 b5 5a e9 83 20 a9 8b 9a 40 85 b6 50 3c 27 b5 32 d6 73 3e c8 6a e7 8d c1 20 2b e9 0c 4b 98 2b Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvA(i>IgyP//~~/U9d%#[Z\\D-PX[q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 2324Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 79 73 db 36 16 ff 3b 99 d9 ef 80 b2 5d 53 9a 88 a4 2e db 92 6d 29 e3 26 69 d7 b3 39 eb 1c b3 5b b7 1e 88 80 24 d8 24 c0 00 a0 64 c5 f6 77 df 07 80 94 28 c7 8a 9d 7a 9b f1 88 20 8e f7 7e ef 7e 60 0e 7e 78 fe e6 d9 fb ff bc 7d 81 a6 3a 4d 86 8f 1f 1d 98 27 4a 30 9f 0c 3c ca 83 0f c7 9e 9d a4 98 98 67 4a 35 86 9d 3a 0b e8 e7 9c cd 06 de 33 c1 35 e5 3a 78 bf c8 a8 87 62 f7 36 f0 34 bd d0 91 a1 b4 8f e2 29 96 8a ea c1 87 f7 bf 04 3d 2f 32 54 34 d3 09 1d be 14 13 74 c4 d1 56 a2 f0 e7 5c ec a3 57 2c 96 22 78 4e 15 9b 70 58 88 d1 15 fc 72 31 c3 9a cd 28 72 f3 0d 98 d2 74 22 61 4e 70 74 4c e5 8c c5 54 21 cc 09 7a 2b 05 c9 63 ad d0 d6 8f bd 76 ab bd 8f 3e 09 49 de 4a aa d4 41 e4 18 3e 7e 84 e0 df 81 d2 0b 78 09 13 31 61 3c c0 b1 a1 14 24 42 e9 0c 2b 35 87 33 e8 47 bb 74 4a a5 14 f2 92 30 95 25 78 b1 c7 05 a7 d7 07 91 3b fc d8 12 b2 ca e0 38 a5 03 5f 8a 91 d0 ca 5f 2a c0 e7 82 71 42 2f 1a 68 2c 92 44 cc 7d 90 fb 20 61 fc 1c 49 9a 0c 7c c2 55 90 49 3a a6 3a 9e fa 68 0a a3 81 1f 45 ac 19 ce b3 30 16 e9 8d dd 96 a7 9a 52 aa 7d c4 08 9c c6 6a ca 80 93 0a 62 a5 ca e3 c6 28 7b 51 94 5a 25 12 ab 2c 43 2a 9a 67 01 e3 71 92 c3 54 04 db a3 c3 70 79 3c 4c 19 ec 51 aa f1 79 46 e5 a0 d7 da ee b5 47 64 d4 de ee e2 7e 97 76 bb 3b dd 6e bb db ec ed c6 3b dd dd 3e ee 85 19 9e 50 95 51 4a c2 78 1c 3e ff 98 1e be 7b a5 df 11 4b c1 47 29 25 0c 0f 7c 9c 24 77 80 1f e5 5a ff 65 e8 c5 e1 87 00 7f f7 df ed f6 c7 dd fe eb 20 f8 4e e0 63 21 d3 fb c2 c6 04 10 5a cc f6 54 89 f7 a9 81 bb 13 b6 c2 d6 77 f0 4d 5a 4d fe dd 6c cd a1 87 71 b5 d1 f1 dd 6c cd a9 bb f9 3e 5a 0b 1d 08 03 29 a9 ac 04 8f d2 92 c5 3a 10 92 19 10 f3 29 e4 21 e0 aa 54 31 63 49 54 69 78 33 46 e7 99 90 ba 92 81 e6 8c e8 e9 80 50 93 20 02 fb e2 72 cf 52 64 cf c4 80 e7 a4 f3 8c 74 6a af 12 82 b7 0a 5a 10 8f f2 2c 11 98 a8 a8 dd 6c 77 a2 66 2f c2 59 76 04 6b 61 c6 27 4f c7 4c 0f 3a ed 7f b6 9f 75 da 1e 52 ec 0b 55 03 af d3 be 80 b7 35 85 ff 8d dc 5b 7d c3 1e 7e 97 fc 61 7c 61 de d7 11 c0 b9 84 06 5a e4 f1 34 f8 1b d1 f4 9a 06 4d af 69 b9 57 6c 96 2a 03 80 c5 36 95 07 ef 59 42 8f 52 08 d4 8a 09 ff 2e b5 58 3f 88 ca 92 36 12 64 81 e2 04 92 ff c0 b3 fe 8b b8 08 ce 14 ba 51 1f cc 82 e5 26 69 90 33 04 cb 31 06 f5 81 6b e6 ca 96 48 15 4b 96 69 a4 a1 10 16 f5 ef 0c cf b0 9b f5 86 44 c4 79 0a 30 43 c3 2e b4 ec 5e 1b 35 6c 98 0f 25 85 aa 13 d3 9a 6f c1 f8 0d 1f 7e ea fb 50 7f 2c 3d eb ff 84 cd 4c a8 3a d0 9e 9d 9a b6 86 07 f8 86 19 4d 49 cb 4c 19 0c Data Ascii: Yys6;]S.m)&i9[$$dw
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:40 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3A2CHXdwjjebSrgiWVZJj%2BAe8l; path=/Set-Cookie: tk_ai=jetpack%3A2CHXdwjjebSrgiWVZJj%2BAe8l; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2{9X`
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2055content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:41 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 9c 45 24 d9 49 9a a4 b6 e4 a2 97 f6 ee 16 68 77 8b 6b 7b 8b 43 53 04 34 39 b2 e8 48 a4 4a 52 56 bc 41 fe fb 82 a4 e4 c8 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 c9 4f cf 7f 3f 7b fb bf d7 2f 50 6e ca 62 3e 1c 24 f6 89 0a 22 96 29 06 11 be 7b 83 87 83 4a 41 c6 af 52 2c 97 53 94 1b 53 e9 69 1c cb 65 15 95 10 0b fd 33 46 4e 0d 08 b3 cf 12 0c 71 42 21 7c ac f9 3a c5 67 52 18 10 26 7c bb a9 00 23 ea 47 29 36 70 65 62 bb d6 0c d1 9c 28 0d 26 7d f7 f6 9f e1 29 46 b1 35 63 b8 29 60 fe 52 2e d1 af 02 3d 2a 34 f9 58 cb 19 fa f7 2b 4e 73 02 05 7a 44 ca 6a 86 ce 64 84 1e fd 7c 7a 30 39 98 a1 3f a4 62 af 15 68 9d c4 5e b7 c3 22 48 09 69 a0 e4 42 1a 1d 6c d7 0f 4a 72 15 f2 92 2c 21 ac 14 ac 39 34 d3 82 a8 25 ec 23 21 b9 60 70 65 5f 88 a2 39 5f 43 60 21 25 05 17 97 48 41 91 06 4c 68 ab 94 81 a1 79 80 72 05 59 1a c4 b1 8e 9a 48 aa e5 a7 c2 da 6c 0a d0 39 80 09 10 67 69 c0 88 ce 39 95 42 87 54 eb 00 b5 ea 96 d5 69 1c e7 a5 df 1f 11 8c ca 88 ca 32 6e aa 90 0b 5a d4 0c 74 4c b5 8e b7 ea 51 c9 45 44 b5 7e ba 06 95 1e 47 e3 e8 38 40 66 53 41 1a 38 66 9d f1 12 18 27 69 40 8a e2 2e 54 8b da 98 ef c6 d4 2a ff 58 44 99 54 e5 b7 73 44 58 c9 85 23 c8 e9 fd 58 28 c5 64 2c be d9 5b b7 48 ac da 0f 06 22 97 fc bb 90 58 bd ef 80 d2 66 73 9b 41 90 81 52 a0 7a 39 a4 8d e2 d4 84 52 71 8b ab c9 41 84 54 49 ad db 2f 2e e8 06 7d 23 d8 26 5a 25 95 e9 15 82 86 33 93 a7 0c d6 9c 42 e8 06 be 04 0c 92 38 6f 6b ca 42 b2 0d a2 05 d1 3a c5 85 dd 0b 12 32 5c 69 e4 de 43 42 0d 97 22 f4 13 4d 15 52 a9 20 ac 39 42 85 a4 a4 80 10 44 58 6b 6c 8b 8a a6 8a 57 c6 a7 89 2f 40 2b b2 26 fe ab 15 18 30 49 eb 12 84 89 ec 8a 91 5b f1 37 52 02 4a d1 17 66 22 05 55 41 28 8c 02 87 28 d8 0f 56 3a d8 9b 0d 07 49 ec cd 5a ab 09 e3 6b 9b fb 1e bb 5b 28 c9 27 f3 84 f8 e4 c7 5d 49 6d a4 62 95 2d 61 b6 8e c4 78 fe 5a 36 a0 80 a1 c5 a6 5f dd c8 3c 89 f3 89 dd ce 8e d9 0b 50 4a 2a 3c 1f bc 13 97 42 36 02 41 49 78 81 08 63 ce 22 3a cb 81 5e 22 b2 24 5c 20 a9 90 51 1b b4 91 b5 42 b5 06 65 1d 1c 25 0b e5 ea 5c cc f8 7a 3e b4 b0 6d 2a 21 e7 7c 8f dc 8e f1 ed 46 fc d0 b3 9f ba 4d 7c a9 82 39 d7 44 55 5e 61 54 82 c9 25 4b 71 25 b5 71 4c 0c 92 ca 72 34 18 24 05 59 40 81 32 a9 52 6c 41 5d 38 2d 3c 7f d7 02 b4 a8 5f b8 3d 3d f3 7b 4a 62 a7 d1 6a 73 51 d5 7d d7 e2 5b e4 1e 73 cf 26 22 8a 93 90 81 75 d1 02 d8 62 d3 ba a6 Data Ascii: Xmo8l.E$Ihwk{CS49HJRVAi>IgyPO?{/Pnb>$"){JAR,SSi
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3A19ix9dr6L3gvA8MloaHMsYa9; path=/Set-Cookie: tk_ai=jetpack%3A19ix9dr6L3gvA8MloaHMsYa9; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3120Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 a3 56 54 f8 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:42 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2114content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:43 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 41 fe fb 81 a4 e4 28 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f 2f 7e 7f 7e f2 df b7 2f a1 b0 55 39 dd 1a 64 ee 09 25 95 8b 9c a0 8c df bf 23 5b 83 5a e3 5c 5c e6 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 35 62 99 93 e7 4a 5a 94 36 3e 59 d7 48 80 85 51 4e 2c 5e da d4 ad 35 01 56 50 6d d0 e6 ef 4f fe 1e 1f 13 48 9d 19 2b 6c 89 d3 d7 6a 01 af 24 3c 2a 0d fd d4 a8 09 fc f3 8d 60 05 c5 12 1e d1 aa 9e c0 73 95 c0 a3 5f 8f f7 46 7b 13 f8 43 69 fe 56 a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 97 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 5d 90 4a 48 8e 97 ee 85 6a 56 88 25 46 0e 52 56 0a 79 01 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 5c d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 a7 4b d4 f9 61 32 4c 0e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3f 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 bb bd 75 83 c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 e7 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 4e 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 65 26 d1 58 97 94 e1 76 e4 11 45 bb d1 b9 89 76 26 5b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 56 ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 2d b3 67 a8 b5 d2 64 3a c8 8c d5 4a 2e a6 2f dd 38 4b db d1 18 4e 0a 84 c6 a0 76 de 84 4e c8 47 eb 46 08 84 01 a9 2c 68 5c 08 63 fd da 4a 82 2d 84 01 23 2c 26 f0 6a 0e 6b d5 00 d5 08 8d 34 8d 46 50 fe 8b de 58 de 05 ab d7 4e 48 03 56 54 94 40 39 77 5b 02 21 8d 45 ca 93 6c a6 7d 39 4d b9 58 4e b7 1c 3b 2e 63 c1 c7 58 20 c8 8d c9 0d 5f 61 18 9c 9c 7b ae be 56 28 7d 04 24 75 51 13 a8 d0 16 8a e7 a4 56 c6 7a c2 07 59 ed 5c 31 18 64 25 9d 61 09 73 a5 73 e2 e8 Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvA(i>IgyP//~~/U9d%#[Z\\D-PX[q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3AUG%2BWezStktybx3ixIHHSKvpS; path=/Set-Cookie: tk_ai=jetpack%3AUG%2BWezStktybx3ixIHHSKvpS; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2{9X`
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:44 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3ANFiqaQ%2FO6ceDZf4yTzVpj1Ju; path=/Set-Cookie: tk_ai=jetpack%3ANFiqaQ%2FO6ceDZf4yTzVpj1Ju; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2{9X`
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2117content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:45 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 41 fe fb 81 a4 e4 28 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f 2f 7e 7f 7e f2 df b7 2f a1 b0 55 39 dd 1a 64 ee 09 25 95 8b 9c a0 8c df bf 23 5b 83 5a e3 5c 5c e6 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 35 62 99 93 e7 4a 5a 94 36 3e 59 d7 48 80 85 51 4e 2c 5e da d4 ad 35 01 56 50 6d d0 e6 ef 4f fe 1e 1f 13 48 9d 19 2b 6c 89 d3 d7 6a 01 af 24 3c 2a 0d fd d4 a8 09 fc f3 8d 60 05 c5 12 1e d1 aa 9e c0 73 95 c0 a3 5f 8f f7 46 7b 13 f8 43 69 fe 56 a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 97 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 5d 90 4a 48 8e 97 ee 85 6a 56 88 25 46 0e 52 56 0a 79 01 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 5c d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 a7 4b d4 f9 61 32 4c 0e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3f 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 bb bd 75 83 c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 e7 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 4e 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 65 26 d1 58 97 94 e1 76 e4 11 45 bb d1 b9 89 76 26 5b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 56 ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 2d b3 67 a8 b5 d2 64 3a c8 8c d5 4a 2e a6 2f dd 38 4b db d1 18 4e 0a 84 c6 a0 76 de 84 4e c8 47 ab 30 56 53 db 13 06 61 40 2a 0b 1a 17 c2 58 8f 41 49 b0 85 30 60 84 c5 04 5e cd 61 ad 1a a0 1a a1 91 a6 d1 08 ca 7f d1 9b 15 76 c1 ea b5 13 d2 80 15 15 25 50 ce dd d6 40 48 63 91 f2 24 9b 69 5f 56 53 2e 96 d3 2d c7 92 cb 5c f0 b1 16 88 72 63 72 c3 5b 18 06 67 e7 9e b3 af 15 4c 1f 09 49 5d d4 04 2a b4 85 e2 39 a9 95 b1 9e f8 41 56 3b 97 0c 06 59 49 67 58 c2 5c Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvA(i>IgyP//~~/U9d%#[Z\\D-PX[q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3AfyVeqqpdqiQOFuJdHFGv78ot; path=/Set-Cookie: tk_ai=jetpack%3AfyVeqqpdqiQOFuJdHFGv78ot; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 a3 56 54 f8 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:46 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3ACqJc6yk%2FN%2Bd5xJ3DocyYRWfa; path=/Set-Cookie: tk_ai=jetpack%3ACqJc6yk%2FN%2Bd5xJ3DocyYRWfa; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2{9X`PI
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2114content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:47 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 45 fe fb 81 a4 e4 c8 ed b6 69 8b e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f cf 7e 7f 7a f6 df d7 cf a1 b0 55 39 dd 19 64 ee 09 25 95 8b 9c a0 8c df be 21 3b 83 5a e3 5c 5c e7 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 34 62 99 93 a7 4a 5a 94 36 3e 5b d7 48 80 85 51 4e 2c 5e db d4 ad 35 01 56 50 6d d0 e6 6f cf fe 1e 9f 12 48 9d 19 2b 6c 89 d3 97 6a 01 2f 24 3c 28 0d fd d0 a8 09 fc f3 95 60 05 c5 12 1e d0 aa 9e c0 53 95 c0 83 5f 4f 0f 46 07 13 f8 43 69 fe 5a a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 d7 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 7d 90 4a 48 8e d7 ee 85 6a 56 88 25 46 0e 52 56 0a 79 05 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 54 d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 c7 4b d4 f9 71 32 4c 8e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3b 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 9b bd 75 8b c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 97 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 49 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 61 26 d1 58 97 94 e1 6e e4 11 45 fb d1 a5 89 f6 26 3b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 5a ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 96 d9 0b d4 5a 69 32 1d 64 c6 6a 25 17 d3 e7 6e 9c a5 ed 68 0c 67 05 42 63 50 3b 6f 42 27 b4 55 70 36 c2 20 0c 48 65 41 e3 42 18 eb 31 28 09 b6 10 06 8c b0 98 c0 8b 39 ac 55 03 54 23 34 d2 34 1a 41 f9 2f 7a b3 c2 3e 58 bd 76 42 1a b0 a2 a2 04 ca b9 db 1a 08 69 2c 52 9e 64 33 ed cb 6a ca c5 72 ba e3 58 72 99 0b 3e d6 02 51 6e 4c 6e 79 0b c3 e0 ec dc 73 f6 a5 82 e9 23 21 a9 8b 9a 40 85 b6 50 3c 27 b5 32 d6 13 3f c8 6a e7 92 c1 20 2b e9 0c 4b 98 2b 9d 13 47 Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvEi>IgyP/~zU9d%!;Z\\D-PX[q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:59 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2121content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:59 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 41 fe fb 81 a4 e4 28 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f 2f 7e 7f 7e f2 df b7 2f a1 b0 55 39 dd 1a 64 ee 09 25 95 8b 9c a0 8c df bf 23 5b 83 5a e3 5c 5c e6 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 35 62 99 93 e7 4a 5a 94 36 3e 59 d7 48 80 85 51 4e 2c 5e da d4 ad 35 01 56 50 6d d0 e6 ef 4f fe 1e 1f 13 48 9d 19 2b 6c 89 d3 d7 6a 01 af 24 3c 2a 0d fd d4 a8 09 fc f3 8d 60 05 c5 12 1e d1 aa 9e c0 73 95 c0 a3 5f 8f f7 46 7b 13 f8 43 69 fe 56 a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 97 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 5d 90 4a 48 8e 97 ee 85 6a 56 88 25 46 0e 52 56 0a 79 01 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 5c d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 a7 4b d4 f9 61 32 4c 0e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3f 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 bb bd 75 83 c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 e7 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 4e 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 65 26 d1 58 97 94 e1 76 e4 11 45 bb d1 b9 89 76 26 5b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 56 ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 2d b3 67 a8 b5 d2 64 3a c8 8c d5 4a 2e a6 2f dd 38 4b db d1 18 4e 0a 84 c6 a0 76 de 84 4e c8 d2 f3 86 23 ca bd e3 a3 e1 46 16 84 01 a9 2c 68 5c 08 63 3d 04 25 c1 16 c2 80 11 16 13 78 35 87 b5 6a 80 6a 84 46 9a 46 23 28 ff 45 6f 16 d8 05 ab d7 4e 48 03 56 54 94 40 39 77 3b 03 21 8d 45 ca 93 6c a6 7d 55 4d b9 58 4e b7 1c 49 2e 71 c1 87 5a e0 c9 8d c9 0d 6d 61 18 7c 9d 7b ca be 56 2f 7d 20 24 75 51 13 a8 d0 16 8a e7 a4 56 c6 7a de 07 59 ed 3c 32 18 64 25 9d Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvA(i>IgyP//~~/U9d%#[Z\\D-PX[q

Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 46.19.141.85
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50

Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <a href="//https://www.facebook.com/celogic/" target="_blank"> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="icon"><a href="https://www.facebook.com/BeachFMCG/" target="_blank" ><img style="" alt="" title="" width="43" height="43" src="https://www.beachrecruitment.com/_images_upload/_tn_32e9ebcbe59b1800.png"></a></div> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="icon"><a href="https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl" target="_blank" ><img style="" alt="" title="" width="43" height="43" src="https://www.beachrecruitment.com/_images_upload/_tn_b305a79b79183216.png"></a></div> equals www.linkedin.com (Linkedin)
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="txt"><A href="https://www.facebook.com/BeachFMCG/" target=_blank>Facebook</A></div> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="txt"><A href="https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl" target=_blank>LinkedIn</A></div> equals www.linkedin.com (Linkedin)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: src="https://www.facebook.com/tr?id=287328172859647&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <ul class="top-right text-right"><li><a target="_blank" href="https://www.facebook.com/Talentius-391801550902724" class="facebook"><i class="fa fa-facebook"></i></a></li><li><a target="_blank" href="https://twitter.com/etalentius" class="twitter"><i class="fa fa-twitter"></i></a></li><li><a target="_blank" href="https://www.linkedin.com/company/talentius/" class="linkedin"><i class="fa fa-linkedin"></i></a></li></ul> <nav class="navbar navbar-default"> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <ul class="top-right text-right"><li><a target="_blank" href="https://www.facebook.com/Talentius-391801550902724" class="facebook"><i class="fa fa-facebook"></i></a></li><li><a target="_blank" href="https://twitter.com/etalentius" class="twitter"><i class="fa fa-twitter"></i></a></li><li><a target="_blank" href="https://www.linkedin.com/company/talentius/" class="linkedin"><i class="fa fa-linkedin"></i></a></li></ul> <nav class="navbar navbar-default"> equals www.linkedin.com (Linkedin)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <ul class="top-right text-right"><li><a target="_blank" href="https://www.facebook.com/Talentius-391801550902724" class="facebook"><i class="fa fa-facebook"></i></a></li><li><a target="_blank" href="https://twitter.com/etalentius" class="twitter"><i class="fa fa-twitter"></i></a></li><li><a target="_blank" href="https://www.linkedin.com/company/talentius/" class="linkedin"><i class="fa fa-linkedin"></i></a></li></ul> <nav class="navbar navbar-default"> equals www.twitter.com (Twitter)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000003FFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.facebook.com/aquapapafamily/" target="_blank"> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="fb-page" data-href="https://www.facebook.com/harasduberry/" data-hide-cover="false" data-show-facepile="false" data-show-posts="false" data-width="207"></div> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <a class="cc-sharebuttons-facebook" href="http://www.facebook.com/sharer.php?u=https://www.harasduberry.com/&t=%C3%80%20propos%20de%20nous" title="Facebook" target="_blank"></a><a class="cc-sharebuttons-mail" href="mailto:?subject=%C3%80%20propos%20de%20nous&body=https://www.harasduberry.com/" title="E-mail" target=""></a> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="views-row"><a href="https://www.linkedin.com/company/avient-corporation/" class="field-group-link" target="_blank"> <img loading="lazy" src="/sites/default/files/2019-09/linkedin.png" width="34" height="32" alt="linkedin" typeof="foaf:Image" /> equals www.linkedin.com (Linkedin)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="views-row"><a href="https://www.youtube.com/channel/UCR8Y1oz_wfVPTUpgFwsX9Dg" class="field-group-link" target="_blank"> <img loading="lazy" src="/sites/default/files/2019-09/youtube.png" width="40" height="28" alt="youtube logo" typeof="foaf:Image" /> equals www.youtube.com (Youtube)
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "},"image":{"@id":"https://samson.pe/#/schema/logo/image/"},"sameAs":["https://www.youtube.com/user/SAMSONGROUP"]}]}</script> equals www.youtube.com (Youtube)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: IO SAFETY SA DE CV"},"image":{"@id":"https://gruporegiosafety.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/gruporegiosafety","https://twitter.com/gporegiosafety","https://www.instagram.com/gruporegiosafety"]}]}</script> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: IO SAFETY SA DE CV"},"image":{"@id":"https://gruporegiosafety.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/gruporegiosafety","https://twitter.com/gporegiosafety","https://www.instagram.com/gruporegiosafety"]}]}</script> equals www.twitter.com (Twitter)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: term_string"}],"inLanguage":"es-MX"},{"@type":"Organization","@id":"https://gruporegiosafety.com/#organization","name":"GRUPO REGIO SAFETY SA DE CV","url":"https://gruporegiosafety.com/","logo":{"@type":"ImageObject","inLanguage":"es-MX","@id":"https://gruporegiosafety.com/#/schema/logo/image/","url":"https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg","contentUrl":"https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg","width":512,"height":512,"caption":"GRUPO REGIO SAFETY SA DE CV"},"image":{"@id":"https://gruporegiosafety.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/gruporegiosafety","https://twitter.com/gporegiosafety","https://www.instagram.com/gruporegiosafety"]}]}</script> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: term_string"}],"inLanguage":"es-MX"},{"@type":"Organization","@id":"https://gruporegiosafety.com/#organization","name":"GRUPO REGIO SAFETY SA DE CV","url":"https://gruporegiosafety.com/","logo":{"@type":"ImageObject","inLanguage":"es-MX","@id":"https://gruporegiosafety.com/#/schema/logo/image/","url":"https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg","contentUrl":"https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg","width":512,"height":512,"caption":"GRUPO REGIO SAFETY SA DE CV"},"image":{"@id":"https://gruporegiosafety.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/gruporegiosafety","https://twitter.com/gporegiosafety","https://www.instagram.com/gruporegiosafety"]}]}</script> equals www.twitter.com (Twitter)
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: www.google.com,www.mit.edu,www.yahoo.com,www.slashdot.org equals www.yahoo.com (Yahoo)
Source: klWGq3yDcQ.exe, 00000001.00000002.2868945282.00000000026D0000.00000004.00000020.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3485332021.0000000002812000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.yahoo.com equals www.yahoo.com (Yahoo)

Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://117.20.63.148:2030/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://2brosandahosepressurewashing.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000408A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://2brosandahosepressurewashing.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/PhpMyAdmin/6?
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/phpmyadmin/3?
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/pma/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://americanrecords.it/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aoiit.store/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aoiit.store/d.edu.au
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CC0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7cQv
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://awb-apparatebau.de/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://awb-apparatebau.de/wp-login.phpadministrator/0.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://beachrecruitment.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://beachrecruitment.com/om
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://browsehappy.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/admin
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://c.parkingcrew.net/scripts/sale_form.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CD8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt0
Source: klWGq3yDcQ.exe, 00000001.00000002.2888005557.000000000487E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt
Source: klWGq3yDcQ.exe, 00000001.00000002.2888005557.000000000487E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crtv
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/U
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/phpMyAdmin/S
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/pma/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl0v
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certificates.godaddy.com/repository/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certificates.starfieldtech.com/repository/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certs.godaddy.com/repository/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000433E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certs.godaddy.com/repository//CN=Go
Source: klWGq3yDcQ.exe, 00000001.00000002.2888110543.0000000004A1D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2877202481.000000000342E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certs.godaddy.com/repository/1301
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certs.godaddy.com/repository/ij~
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://coralparkchristian.org/wp-content/uploads/2015/10/CPCA-Shield.jpg)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cps.root-x1.letsencrypt.org
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cps.root-x1.letsencrypt.org%
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CC0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cps.root-x1.letsencrypt.org0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cringemonster.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036EB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000038B8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/gsrsaovsslca2018.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/gsrsaovsslca2018.crl0
Source: klWGq3yDcQ.exe, 00000001.00000002.2868964891.0000000002A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/root-r3.crl0G
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000408A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdig2s1-9532.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdig2s1-9532.crl:
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdig2s1-9532.crlsn
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdroot-g2.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdroot-g2.crl0F
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000408A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.identrust.com/DSTROOTCAX3CRL.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CC0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.identrust.com/DSTROOTCAX3CRL.crl0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.identrust.com/DSTROOTCAX3CRL.crlht
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.r2m01.amazontrust.com/r2m01.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootg2.amazontrust.com/rootg2.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/CloudflareIncECCCA-3.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl0?
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crlEncod
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl-
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl5
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crlcrlJ
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crlhu
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crln.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl.
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/GeoTrustEVRSACAG2.crl04
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/Omniroot2025.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/CloudflareIncECCCA-3.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/CloudflareIncECCCA-3.crl8t
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crlM
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crlNh
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/GeoTrustEVRSACAG2.crl0J
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2888110543.0000000004A1D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt0#
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004319000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/phpmyadmin/m
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dbschooldelhi.ac.in/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dbschooldelhi.ac.in/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://digdig.org/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/phpMyAdmin/Q
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/pma/k
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dkrs.gov.ua/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/pma//phpmyadm
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eco-landeck.at/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eco-landeck.at/.comsO
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eco-landeck.at/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgewater.group/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://elitebusinesshn.com/admin
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://elitebusinesshn.com/admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://elitebusinesshn.com/admin/BsdW1hcnVuaWZvcm1lcy5jb20ATHV
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://elitebusinesshn.com/adminOGIN
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://esistem.com.br/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://esoft.academy/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://esoft.academy/.com:2222
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://formacion.talentius.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gasp-ga.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gasp-ga.com/administrator/20
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gasp-ga.com/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gasp-ga.com/administrator/index.phpp-
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gatewaytoearlylearning.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gatewaytoearlylearning.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gccb.co.in/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gccb.co.in/ministrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/ac.uk
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/phpMyAdmin/c
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/phpmyadmin/H
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/pma/.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmail.io/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmail.io/)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmail.io/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmail.io/administrator/index.php1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmpg.org/xfn/11
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/PhpMyAdmin/(-V
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/phpMyAdmin/T-
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/ta.eu
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/pma/a
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/wp-login.phpen)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/wp-login.phpen)f
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/wp-login.phpm
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://harasduberry.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://highstreet-re.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/pma/V
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ibright.net/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/?
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/administrator/index.php#y
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jamiesonmullin.com/admin.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jamiesonmullin.com/admin.phph/I
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jamiesonmullin.com/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jamiesonmullin.com/administrator/index.phpmOq
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/PhpMyAdmin/7o
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/n.comm
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/phpmyadmin/$o
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/0e.orgxyz
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/pma/ld.edu.au
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/.at
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kvsroraipur.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://leeberg.dk/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgs-strategies.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgs-strategies.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgs-strategies.com/phpMyAdmin/-v
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgs-strategies.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://linkan-group.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://linkan-group.com/wp-admin/com/wp-login.php5p7c
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://locandafrancigena.it/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/administrator/index.phpotrust
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/administrator/index.phprh
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/phpmyadmin/D
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/PhpMyAdmin/it.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/et?
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/phpMyAdmin/ustin.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/phpmyadmin/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/PhpMyAdmin/Admin/tea.edu
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/phpmyadmin/admin/view.ac
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://maxiv.lu.se/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://maxiv.lu.se/co:990m
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004319000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mdystudent.net/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/css/forms.min.css?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/css/l10n.min.css?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/css/login.min.css?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/js/password-strength-meter.min.js?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/js/user-profile.min.js?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-content/plugins/jetpack/css/A.jetpack.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/css/A.buttons.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/css/A.dashicons.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/dist/vendor
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/jquery/jquery-migrate.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/jquery/jquery.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/underscore.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-login.php?action=lostpassword
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/PhpMyAdmin/f
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/phpmyadmin/yAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/pma/#
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mnit.uc.in/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mnit.uc.in/administrator/index.phpO
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mnit.uc.in/administrator/index.phpk
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/O
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/phpMyAdmin/5
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/phpmyadmin/-
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/pma/Admin/-
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/PhpMyAdmin/1
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/phpMyAdmin/e
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nyklawfirm.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000038B8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.comer
Source: klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.coms
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CD8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0=
Source: klWGq3yDcQ.exe, 00000001.00000002.2888005557.000000000487E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0Q
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.globalsign.com/gsrsaovsslca20180V
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.godaddy.com/05
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2888110543.0000000004A1D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0=
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.comS
Source: klWGq3yDcQ.exe, 00000001.00000002.2868964891.0000000002A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp2.globalsign.com/rootr306
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocspx.digicert.com0E
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/pma/D
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/PhpMyAdmin/y
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/phpmyadmin/B
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/pma/admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/3tf
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/PhpMyAdmin/V%
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/pma/l
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://prettypollycleaning.ae/admin
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://prettypollycleaning.ae/adminmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://prettypollycleaning.ae/adminmin/eN9
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/PhpMyAdmin/.
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/es.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/phpMyAdmin/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/phpmyadmin/)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000408A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0-
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0X
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/4.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/lvz.
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/90
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/PhpMyAdmin/n/dmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/phpMyAdmin//Admin/Dy
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rechagricola.com.br/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rechagricola.com.br/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rechagricola.com.br/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/phpmyadmin/)~
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://samson.pe/wp-content/plugins/carousel-block/dist/assets/vendor/slick/slick.min.css?ver=169951
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://samson.pe/wp-content/plugins/carousel-block/dist/blocks.style.build.css?ver=1699519196
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://samson.pe/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schema.org
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt07
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/PhpMyAdmin/v8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/ac.in
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/phpMyAdmin/Q
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/phpmyadmin/O
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/pma/Admin/=
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://status.rapidssl.com0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/pma/admin/rtgag
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/mycom
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/phpmyadmin/=
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/pma/om
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/PhpMyAdmin/p-
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/administrator/index.phpca
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/phpMyAdmin/B-m
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/pma/Admin/g-H
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/PhpMyAdmin/6
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/phpMyAdmin/n/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/pma/Admin/m
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/#contact
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/#experties
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/#responsive
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/#servicios
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/aviso-legal/#aviso-legal
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/politica-de-cookies/#politica-de-cookies
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/politica-de-privacidad/#politica-de-privacidad
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/wp-content/uploads/2017/02/logo-white.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/dj2m6eq
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/phpMyAdmin/u
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/phpmyadmin/0n
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/pma/com
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com//?
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/wp-admin/micro-design.com2111Li
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/phpmyadmin/)x
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/pma/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/phpMyAdmin/Pwo
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NTYyZGVkMzNi
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/administrator/?subid1=20231126-1659-4566-b4f3-ee8b4e33b307
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/administrator/?subid1=20231126-1659-4566-b4f3-ee8b4e33b307bx
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/administrator/index.php?subid1=20231126-1659-59fe-8cf7-5e631aeffacc
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/administrator/index.php?subid1=20231126-1659-59fe-8cf7-5e631aeffacca
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0s
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPSe
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPSv?
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.grantstech.io/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.grg17geblergasse.at/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.grg17geblergasse.at/xmlrpc.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.karinshobbyfotografie.nl/index.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.htmlTYPE=2OpenSSL
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004319000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.spamhaus.org/query/bl?ip=89.149.18.60
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FE2000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436E000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/i-
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/himontessori.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onion/hb.php?n=19EE1A200E1DF5D59DA8&
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000824000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000824000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onionT/reg.php?upd.php?/task.php?/re
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://y3.qj51acp/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://y3.qj51acp/administrator/index.phpopen)n~
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yahoo.comfreezed/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https:///phpMyAdmin//PhpMyAdmin//pma/rootmysqlimapssmtpspop3sscp://your_IP_is_greylisted_README.txt2
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://117.20.63.148:2031/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://a.jimdo.com/app/auth/signin/jumpcms/?page=2060364879
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_7-fvwaoy6tcz
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_LRl_HOP41vTvA9IKhSqNsg2.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0g
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_7-fvwaoy6t
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_LRl_HOP41vTvA9IKhSqNsg2.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://adm.uksw.edu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.w.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.canaldapeca.com.br/static/cws-theme-tokens.umd.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.cws.digital/static/bootstrap/4.6.2/js/bootstrap.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.cws.digital/static/popper.js/1.14.6/umd/popper.min.
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.cws.digital/static/popper.js/1.14.6/umd/popper.min.:
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.jimstatic.com/web.js.30196931e46e05701bed.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://beachrecruitment.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bunasta.eu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://c.la2-c2-ia5.salesforceliveagent.com/content
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://captcha.wpsecurity.godaddy.com/api/v1/captcha/script?trigger=wp_login
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cardenas.mtz.rimed.cu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://carelesscommunity.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://carelesscommunity.com/phpmyadmin//8
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.jsdelivr.net/npm/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.jsdelivr.net/npm/lg-video
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/animejs/2.0.2/anime.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/gsap/1.19.0/TweenLite.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/lightgallery/1.6.4/js/lightgallery.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/scrollify/1.0.5/jquery.scrollify.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/stickyfloat/7.5.0/stickyfloat.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ce-logic.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/l(
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/m
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/~)
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.starfieldtech.com/repository/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cms.e.jimdo.com/app/cms/logout.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://code.jquery.com/ui/1.12.1/jquery-ui.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.or
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-admin/css/forms.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-admin/css/l10n.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-admin/css/login.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-includes/css/buttons.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-includes/css/dashicons.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-login.php?action=lostpassword
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d.la2-c2-ia5.salesforceliveagent.com/chat
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://daisyokogyo.co.jp/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://directlendersllc.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dstaq.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dstaq.com/phpmyadmin/1
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dstaq.com/phpmyadmin/g
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eco-landeck.at/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eco-landeck.at/administrator/G-
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://embed.tawk.to/5d1dd8d87a48df6da242ee76/default
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-admin/js/password-strength-meter.min.js?ver=6.3.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-admin/js/user-profile.min.js?ver=6.3.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/underscore.min.js?ver=1.13.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-login.php?action=lostpassword
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fonts.gstatic.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/custom-facebook-feed/js/cff-scripts.js?ver=2.16.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/imag
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/responsive-accordion-and-collapse/js/accordion.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/responsive-accordion-and-collapse/js/bootstrap.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/assets/animations/animations.min.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/js/menu.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/js/parallax/translate3d.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/js/plugins.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/js/scripts.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gatewaytoearlylearning.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/css/forms.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/css/l10n.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/css/login.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/js/password-strength-meter.min.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/js/user-profile.min.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-content/uploads/2023/05/favicon.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/css/buttons.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/css/dashicons.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/underscore.min.js?ver=1.13.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/wp-util.min.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-login.php?action=lostpassword
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gethsemane.org/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gethsemane.org/phpmyadmin/Y
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getquipu.com/
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getquipu.com/ca/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getquipu.com/en/
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getquipu.com/fr/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gmpg.org/xfn/11
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grantstech.io/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grantstech.io/phpmyadmin//
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://greenrworld.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/#/schema/logo/image/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/#organization
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/#website
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/?s=
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/phpmyadmin/E
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-admin/js/user-profile.min.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/3d-flipbook-dflip-lite/assets/js/dflip.min.js?ver=2.
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/chaty/js/cht-front-script.min.js?ver=3.1.81695051900
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.3
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.3
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/dg-divi-carousel/scripts/frontend-bundle.min.js?ver=
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/dg-divi-carousel/scripts/swiper.min.js?ver=2.0.26
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.23.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/j
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.23.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-includes/css/dist/block-library/style.min.css?ver=bb270fba1988038f56
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=bb270fba1988038
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-includes/js/wp-util.min.js?ver=bb270fba1988038f5680f75b7475565e
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-login.phpater.group995
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/xmlrpc.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/phpmyadmin/U
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/plugins/age-gate/dist/all.js?ver=3.3.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/plugins/dearpdf-lite/assets/js/dearpdf-lite.min.js?ver=2.0.38
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.23.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jqu
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.23.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://himontessori.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hmichaelandco.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/gasp-ga.com/wp-content/uploads/2018/05/cropped-favicon-1.jpg?fit=180%2C180&ss
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/gasp-ga.com/wp-content/uploads/2018/05/cropped-favicon-1.jpg?fit=192%2C192&ss
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/gasp-ga.com/wp-content/uploads/2018/05/cropped-favicon-1.jpg?fit=270%2C270&ss
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/gasp-ga.com/wp-content/uploads/2018/05/cropped-favicon-1.jpg?fit=32%2C32&ssl=
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/micro-design.com/wp-content/uploads/2023/08/appIcon.png?fit=180%2C180
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/micro-design.com/wp-content/uploads/2023/08/appIcon.png?fit=192%2C192
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/micro-design.com/wp-content/uploads/2023/08/appIcon.png?fit=32%2C32
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://image.jimcdn.com/app/cms/image/transf/dimension=175x10000:format=png/path/s5310617dc1962275/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://image.jimcdn.com/app/cms/image/transf/dimension=320x10000:format=png/path/s5310617dc1962275/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://image.jimcdn.com/app/cms/image/transf/dimension=350x10000:format=png/path/s5310617dc1962275/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://images.cws.digital/fornecedores/m/rech.jpg
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/css/main.ba077a97.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/js/main.ed307b3c.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://institucional.rech.com/lojas/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000003FFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://j-president.net/aichi/daisyokogyo/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com#identity
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com//assets/dist/main.cd86828fbd0190c4211a.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com/assets/uploads/Logo.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com/assets/uploads/_1200x630_fit_center-center_82_none/ogimage.jpg?mtime=1605
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com/assets/uploads/_600x60_fit_center-center_82_none/Logo.png?mtime=160565081
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://knu.ac.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://knu.ac.in/phpmyadmin/6
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://knu.ac.in/phpmyadmin/u3
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://knu.ac.in/phpmyadmin/x
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://krkconcord.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://krkconcord.com/phpmyadmin/:
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lgs-strategies.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lgs-strategies.com/phpmyadmin/jv
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/Me.htm?v=3
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/forgetme.srf?iframed_by=https%3a%2f%2flogin.microsoftonline.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/logout.srf?iframed_by=https%3a%2f%2flogin.microsoftonline.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf?scope=openid
Source: klWGq3yDcQ.exe, 00000001.00000002.2868964891.0000000002A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJLj9sgFIX
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/jsdisabled
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lumaruniformes.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lwindowelive.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lwindowelive.com/phpmyadmin/dmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lx13.hoststar.hosting
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://macisis.co.uk/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://macisis.co.uk/phpmyadmin/A
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://micro-design.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://micro-design.com/phpmyadmin/4f
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://midcapfunding.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://midcapfunding.com/phpmyadmin/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.calvary.qld.edu.au/login/?page=%2Fpma%2F
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.calvary.qld.edu.au/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.calvary.qld.edu.au/phpmyadmin/5
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.calvary.qld.edu.au/saml/index.php?page=%2Fwp-admin%2F
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nohonetworks.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nohonetworks.com/phpmyadmin/K
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nwzimg.wezhan.net/static-js/page404.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://octetpowers.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ogp.-
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ogp.-/hZ
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ondania.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ondania.com/phpmyadmin/O
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paintd.plus.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paintd.plus.com/phpmyadmin/J
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://parking-crew.com/track.
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com/api/player.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com/video/783205887?h=2af45961b5&badge=0&autopause=0&player_id=0&am
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://plus.google.com/115113864863866027522
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://polyone.my.salesforce.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://polyone.my.salesforce.com/embeddedservice/5.0/esw.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://polyone.secure.force.com/Feedbackpagetocustomer
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://privatemoe.ae/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=2466708&fmt=gif
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rdelealtad.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rdelealtad.com/phpmyadmin/W
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rech.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rechagricola.com.br/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rochester-gauges.be/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000003.1729833880.0000000002A57000.00000004.00000020.00020000.00000000.sdmp, unverified-microdesc-consensus.tmp.1.dr	String found in binary or memory: https://sabotage.net
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/#/schema/logo/image/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/#organization
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/#website
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/?s=
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/wp-content/uploads/2022/06/logo-samson.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://schema.org
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://schema.org/BreadcrumbList
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://schema.org/ListItem
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2888110543.0000000004A1D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://service.force.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://service.force.com/embeddedservice/5.0/esw.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sofia-communications.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://stats.wp.com/e-202347.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://student.debritto.sch.id/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://student.debritto.sch.id/phpmyadmin/z
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://student.ub.ac.id/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://students.kasralainy.edu.eg/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://students.kasralainy.edu.eg/phpmyadmin/n-A
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t1eng.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/administrator/outlook.com:220
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-admin/hp
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-admin/hpdmin/Y
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.6.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-20
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/js_composer/assets/css/vc_lte_ie9.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.3.1.5
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?v
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/slider-captcha/css/slider-captcha.css?ver=0.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/slider-captcha/js/jquery.ui.touch-punch-improved.js?ver=0.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/slider-captcha/js/slider-captcha.min.js?ver=1.4.3
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/animate.min.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/bootstrap.min.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/custom.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/icomoon-fonts.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/jPushMenu.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/jquery.fancybox.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/loader.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/onepage.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/owl.carousel.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/settings.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/zerogrid.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/bootstrap.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886468643.000000000412F000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/custom.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886468643.000000000412F000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/functions.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886468643.000000000412F000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jPushMenu.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery-countTo.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.appear.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.circliful.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.easing.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox-media.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox-thumbs.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.mixitup.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/owl.carousel.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/wow.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/style.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/uploads/2017/02/favicon-32x32.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/uploads/2017/02/favicon.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/css/dist/block-library/style.min.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/droppable.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/json2.min.js?ver=2015-05-03
Source: klWGq3yDcQ.exe, 00000001.00000002.2886468643.000000000412F000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/wp-embed.min.js?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/wlwmanifest.xml
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-json/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-login.phpen)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/xmlrpc.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/xmlrpc.php?rsd
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tiswheels.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tiswheels.com/wp-login.phpor/m=
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://townshipnjr.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://trac.torproject.org/projects/tor/ticket/14917.
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/about-us-2/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/cart/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/contact-us/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/my-account/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/beard-oil/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/body-wash-shower-gel/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/fragrance/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/hair-gel/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/serums/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/shampoo-conditioner/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/shaving-creame/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/garden-outdoor/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/kitchen-home/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/party-supplies/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/pets-grooming/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/toys-games/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/shop/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wishlist/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/wpforms-lite/assets/css/wpforms-full.min.css?ver=1.7.4.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/wysija-newsletters/css/validationEngine.jquery.css?ver=2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/yith-woocommerce-ajax-navigation/assets/css/shortcodes.c
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.cs
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.9.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/themes/porto/images/ajax-loader
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-1024x365.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-400x143.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-600x214.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-640x228.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-768x274.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/z1.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/xmlrpc.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/AvientCorp
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://united-domains.de/unternehmen/datenschutz/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://uploads-ssl.webflow.com/645b9de16fdfa3008037d227/645bd2cf9ed03860fa260365_icon-rounded-arrow
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000038B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://webstamp.ca
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wonka.cc/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wonka.cc/phpmyadmin/Dw
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wonka.cc/phpmyadmin/ad
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wonka.cc/phpmyadmin/bw
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wordpress.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.2brospw.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.2brospw.com/wp-login.phpd/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.above.com/marketplace/ondania.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.avient.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_css_global/slick.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_images_upload/_tn_b305a79b79183216.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_javascript/beach2018.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_javascript_global/jquery.gmap3.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_javascript_global/slick.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94677/bb/1/id/94677
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94677/id/94677/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94679/id/94679/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94680/id/94680/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94681/id/94681/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94682/id/94682/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/95756/id/95756/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/page/advsearchvacs/bb/1/command/startupresults/cms_catego
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/page/root_mailer_fl2/bb/1/command/mail
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.boldgrid.com/w3-total-cache/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bunasta.eu/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.ceuandalucia.es/wp/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/rpa-ua
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dstaq.com/en/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.enable-javascript.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.globalsign.com/repository/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2868964891.0000000002A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.globalsign.com/repository/1
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/adsense/domains/caf.js?abp=1
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B40000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-LV9BL7FLDY
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-117048573-1
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-182241991-1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TWN7C3P
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.grantstech.io/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.grg17geblergasse.at/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.grg17geblergasse.at/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.harasduberry.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.harasduberry.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/ce_logic/?hl=en
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.kfps.nl/Portals/0/Hengsten
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.kfps.nl/Portals/0/PDF
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.linkan-group.com/administrator
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.linkedin.com/company/avient-corporation/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/access-modes/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/access-modes/bag-access/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/call-for-proposals/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/find-your-beamline/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/after-you-leave/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/before-you-arrive/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/proposal-submission/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/proposal-submission/proposal-writing-guide/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/while-at-maxiv/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-content/uploads/2022/02/menu-user-entry.jpg);
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/a11y.min.js?ver=7032343a947cfccf5608
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/discos-de-corte
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/esteiras
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/filtros
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/fps
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/motor
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/oleos
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/pneus
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/politica/privacidade
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.spamhaus.org/query/ip/89.149.18.60
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/
Source: csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/documentation.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2885497565.0000000003FF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.weebly.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/channel/UCR8Y1oz_wfVPTUpgFwsX9Dg
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/user/SAMSONGROUP
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yahoo.comfreezed/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yahoo.comfreezed/phpmyadmin//.us
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown

HTTP traffic detected: POST /wp-login.php HTTP/1.1Host: samson.peAccept: */*Accept-Encoding: deflate, gzipCookie: wordpress_test_cookie=WP+Cookie+checkUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://samson.pe/wp-login.phpContent-Length: 141Content-Type: application/x-www-form-urlencoded

Source: unknown

DNS traffic detected: queries for: gethsemane.org

Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: krkconcord.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: directlendersllc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: t1eng.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gasp-ga.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: mdystudent.netAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: hmichaelandco.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: killicit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: esistem.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: prettypollycleaning.aeAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: americanrecords.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: ondania.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: octetpowers.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: student.debritto.sch.idAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: 2brosandahosepressurewashing.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gmailvz.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: tcetmumbai.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: quipuapp.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /login/?page=%2Fphpmyadmin%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=unid3p469s9hj2a6pka8sch23rUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: srmist.edu.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gccb.co.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: vivanettv.co.keAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: grg17geblergasse.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: coimbrausa.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: locandafrancigena.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: leeberg.dkAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: federwild.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: kappablu.deAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: financefast.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /cgi-sys/suspendedpage.cgi HTTP/1.1Host: vivanettv.co.keAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/administrator HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: tcetmumbai.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /saml/index.php?page=%2Fphpmyadmin%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=unid3p469s9hj2a6pka8sch23rUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://edgewater.group/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://jamiesonmullin.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://ce-logic.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /concord/phpMyAdmin/ HTTP/1.1Host: kidsrkids.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.linkan-group.com/administrator
Source: global traffic	HTTP traffic detected: GET /administrator HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://webstamp.ca/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/administrator/index.php HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.dstaq.com/en/administrator
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.2brospw.com/administrator
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://unaj.edu.pe/administrator/
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipCookie: site_version_phase=108; site_version=HDv3User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipCookie: dps_site_id=us-east-1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=rbm97dnas60169fmufv15tpfb5User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.grg17geblergasse.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://engel-firm.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=3dbfg2bnrmlhvmjhpi48421sg2User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://tiswheels.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipCookie: pbid=1edc227536cb7fc30f88097431cc67116634c85ffdbc8581853118f953068a74User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://capforge.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.avient.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=25spuedk1v8jkqk9dcaj8tnufuUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=k11oabf2270bqa8id9iv53haooUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://talentius.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=CCSTuNw27vjAGhe0LambVrEDd4CnmWBK1UKexrI2tUk-1700978372739-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://tradeavenida.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.harasduberry.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipCookie: SWSessionID=ba42e268-c765-4904-80e3-ade29c961f0f; AccountID=Xogon24LhVEF1Gfd40nUZQ==; APIKey=1bbe4818-f2c5-416c-a84a-2ce99b631f94; CSAN=zXOKKR3GedasH9m5g4E4RQ==; PSDB=lL7iN951F63+qccmbSPISkYpSYcXNAdZfwA6IkfZ1mg=; PSN=TYQOVZnyPCoiWL2kw/FH8w==User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.perrisesd.org/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://himontessori.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6IitSbkFTNmJDdjloOWhzTnFzTm9qZ1E9PSIsInZhbHVlIjoiaEFSQ29UbVZRQ29lczgrVDZYMGR4NDkyd1MwNkx2TG9kOUpoVEhxdUIzRSsydE50aGYxekF4RkRvNk1kaUh2c1hyYkVFalByeDJuOE9QckNwV21lMjVLTnY4cEV2TUtOZitzb1c0UVVLVWVCYTZ3NllZWmdiTXFYSlZyR0FhcHEiLCJtYWMiOiJhMjg5ZTNiNmRlMTdjMDllNTQzNTZjMmI5YTNhZmNhYzI4ZjExM2E0NTQ0ZDhiNGM4NjQ1Nzc0NDQ2MGViN2UyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6IjNpSDA4TTd2dzFidW15T3J0Q1EwNEE9PSIsInZhbHVlIjoiTTRWK1RrOHAzeFRlbWNaSm15TU1yWmdObVBKYW9rQk43THM3ZzZRekFpQlNvM00yNkRvSTNBeEFDVlBkT3FvYUp1aTZrNEdub2Q4aE9NbHp2VmVGS2lRcUs5dC8rdE5USEtJMFZYdGNGRXJDU2tweUluS01ST3FTSnQ1ZWkxN3MiLCJtYWMiOiI1YTdkOGYwZDQ0ZjkwN2VkZjUxMThkMzI2MWE2YWJhOGNlMjUwYjdiZTE3OWYzMjQ5YjdhNDFhMTMyMmFhNjlhIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InN0bXgycFppajByVzJ5VVFma0l6Q1E9PSIsInZhbHVlIjoiMHpVODVyYnBYREhlaXpTQS9mOTZkUUVYdjFHcWh4bWhnMytScHBadC9hbkF3RktMbXVBNmwwYVN4ZWVtQldJS2pwWm9rU0U4d2lYbGd4ZEFLNEVlOW5Bc0E3WFRCUmMwMjBjUFB1RDJ0NnZqR1ZlWWQ0ckxUWStRaWZqR1c4bmkiLCJtYWMiOiI2OTU4OWFkZGVkMzU2N2I5ZGJlMGVhMWJmZmUxYzA0NjdlYjBlNDM1M2M2ZTcyNDczYzkwNTNkOTc1NzdhMGU3IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://www.gatewaytoearlylearning.com/administrator
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipCookie: pbid=172ff377aa4b3bde11e2a50383ed15a74ccd93833e8072198de1d3f5028def60User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://mydirectlender.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.avient.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipCookie: pbid=1edc227536cb7fc30f88097431cc67116634c85ffdbc8581853118f953068a74User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://capforge.com/administrator/
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://getquipu.com/
Source: global traffic	HTTP traffic detected: GET /login/?page=%2Fadministrator%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://tiswheels.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://lumaruniformes.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.ceuandalucia.es/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=k11oabf2270bqa8id9iv53haooUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://talentius.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://gruporegiosafety.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://micro-design.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: student.debritto.sch.idAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://esoft.academy/administrator
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipCookie: pbid=172ff377aa4b3bde11e2a50383ed15a74ccd93833e8072198de1d3f5028def60User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://mydirectlender.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://edgewater.group/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Ftradeavenida.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=CCSTuNw27vjAGhe0LambVrEDd4CnmWBK1UKexrI2tUk-1700978372739-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://tradeavenida.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://lumaruniformes.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.grantstech.io/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipCookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.maxiv.lu.se/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://micro-design.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Fhimontessori.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://himontessori.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.ceuandalucia.es/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/wp-login.php HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /saml/index.php?page=%2Fadministrator%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipCookie: dps_site_id=us-east-1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=3dbfg2bnrmlhvmjhpi48421sg2User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /concord/PhpMyAdmin/ HTTP/1.1Host: kidsrkids.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.knu.ac.in/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6Ik9iRDZCclQ1UEJFcVRhU0M0Z2JWd0E9PSIsInZhbHVlIjoiLzhpMDY3eGRpRmFYNGZsVG5UN01DUGY3cGlYalNpc0lBVWhIc2o2VWlrQWRpV21uR01FVEJXSCszQTg5UTlDQk83RytmS296VWZQZGk4UGZlaE10QlpUa29sV3E5OG1rMzdZV2tNWEZscnUwK2k1NVpvR0hJOWswKzNPMTRXV3giLCJtYWMiOiJmZThhNzk4NzM0NGI2YWIwMzkzYzBiOGIzNTdkNjk5YTA2NDFlM2E0ZGY2ZGNkNTBmNTI4YTRkNDUzODhiMTMwIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InNSUUdPSlJvRjI4SU9XL0o1aG5yTmc9PSIsInZhbHVlIjoiaDROU2VITEgzb3IwMm1QU1FWM0hlZE94NWVBMW4vSEczTlN3YTBWc3had20wWmljdkJ2RHdJRWk3SFk3UHhGTGh5Nis5dzl2UlVNSW40cU9wWG5sZ0lyVkc0eUg2a3BJbTd2VWZwZjBkdDBWNDcrbDBKTHBrazg5S3E5cHdlQXYiLCJtYWMiOiI4ZjljNzY5YTJmMjg3Nzg5ZDk1ZGRhZTk4YzBlNGVhNTVmZWM3NGE3M2FjNjM5NWMxNDhhNjU2ODU5NDdlNzZkIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkI1ejVQMUpRYWxNcjgranNNVTBURFE9PSIsInZhbHVlIjoid3hpb3hCWENGcnU0M0ZDYktoTjAzMDQyOE8vZjRUUXJ2NjRuRzJ4Z0FtWitaNG00ckFqM0xzc1NHdWx5SGVwbzhPcldyUU5zK2hJMGVHUXlYQjBHcnM2WXVYUEZIS2hPKzA5UDl5dEoyRzUvYmkveVoxcHBJcmo5MVI3M0xjeUkiLCJtYWMiOiJiNDcwN2IyNzZjYzUyMzhmOTAyMzQ2ZmEwMjM0MTMwZmUzN2Y4ZTczNThjZmZiZGQ1NGU0MTcyN2Y3MTZiYWY0IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6Imo1aVN2WVJmWnBrNnZqSXJrYXFoblE9PSIsInZhbHVlIjoidVNWYlV1bDRTdmFsRnQ0anV4Zy9kK3RTUXdEQVFwV1I5OXo1Z0hKUTBWbWxoeFNDUGEwM3F0d1Y2d29pZFZoZm5GQUloWURIUW1SRUo0aHQ5Ry8xTEhUejRwYndPNVlGSDdtbXZMUkxVbjcwNmxQTVpKSnV1dVZsQ3B5ajZnOTkiLCJtYWMiOiJjZWU3NTQ4MWIwNzUyNDE5MDQ3NWZjNGY3YjYwMWJiZjMwNzk4ZDZmOGU2ZjFhYTNkNzA5N2RkOTgwNzBlMmJiIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InZhbDJwVnlLUWhubGJIVTRxS1RyS3c9PSIsInZhbHVlIjoibEtHV0dCVjhVZFFxdXVPckRoandqSmJIM2VpRWo3WkE2ejZGY2pQbU5MVDEyaUwxT3czZzd6T2tYUFc2WjNmYm83eGJpaCtkTnU2eW1zMmcxN3N5eHJlbjdPL1drOGwyOUw5TjhsM0k1MnBoWDhYOHJucU5VWGN6Z3lZOC9qejUiLCJtYWMiOiJkYmI0NTNiNTQ5YzNhYzUxNjUyMDM2MWNlM2QzYzYxNGMyZTJhMWY2MzYyYWNiN2JjNzQ2ODI5NzJlMjU2MGQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkxXaFVUaFNtTzd2ZGkvek9mQ0hvQmc9PSIsInZhbHVlIjoiZmhtK2lrVUlvZjdVZHpFVWVmMjR6b0VFRVYwWWdxaXNkRmpTQ202R0hubjNUM2czRThCblFXTXNOVjhQNC9kdS8yMmhialBBNGtpcW05eDZ0NDJzMGFDZ2VUemRuU2dvU01pdUNUdGEwc0wvUFRqdUt3MFl6RFlkblFaTWhZQy8iLCJtYWMiOiI2ZTM3MmEwZmUyNWQ5ZDgyYTFhNWQwMDg4OWNkNTdlNmI5ZDJhZmM1MzcwMzM3NDgxZjBlNDI5MTllNTVlN2VjIiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://www.gatewaytoearlylearning.com/administrator
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://gruporegiosafety.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://jamiesonmullin.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://ce-logic.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.grantstech.io/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.linkan-group.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.2brospw.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /en/wp-admin HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.dstaq.com/en/wp-login.php
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipCookie: site_version_phase=108; site_version=HDv3User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://webstamp.ca/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.knu.ac.inAccept: /Accept-Encoding: deflate, gzipCookie: laravel_session=eyJpdiI6IldVSVdPNGdUR2JDN2tFR2tvcjMzVXc9PSIsInZhbHVlIjoiR29jOElPY2pHK2ZKdjF3WnkwSWljS0sxNjMyc3Rrb3RZM0hsRHU0ZU1HN05jaEV6UVQyL2RLajNSV0VZYllpU2VObUhVVEdQVDE5OHRHUlZ1czZtOWozL0FJSUNFOTFTM255UW5tbzJ2MVhrdnp3VWgrUS9abDhpN1VkSW1SdDQiLCJtYWMiOiI1NmYxZWE0YTI5ZmE1NzcxMGY4NjhmMGJkZDFlOTcyZWNiYTIyMWQ0Nzk1N2RhMzgyYzNjYjhjMzMxOTIxMjM3In0%3D; XSRF-TOKEN=eyJpdiI6IkFPalpTRG5rdmUxUmNpVVMyVW9VL0E9PSIsInZhbHVlIjoiVmN5VjBEN0doZmxEdWNNOXh2RVFoUzNjb0pHcEdNZDZ2ay9zaWladjB5bmtoMk5HcTloeWZBb0p0aXBnK2kvQTVrOHpkOW8yelBQTmYzZDN0bWQwNnFnZENVTXN5OVBIdnJwYk9TTGpCa1o5TXZaMWZkZ1ZtdXIwcXdhMjFmZlQiLCJtYWMiOiI5OGQyNjEwOGYxMmJlNjUzZDYxZTEyMjM3ZjEzMWJkM2E0NjU0NzE5MzYyYjAyMTA5ZmY5MGY3NDZkNmI4NTk1In0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.knu.ac.in/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://unaj.edu.pe/wp-login.php
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=3dbfg2bnrmlhvmjhpi48421sg2User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.beachrecruitment.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=O9GVX4jId9RJuNoELP6FOmLes7L1Dv_lQ.oZC7Kt.D0-1700978377959-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=8ce644f91f3f0aa94249a98a8e2141b0\|11f187638643e13d7bd1963991fac52b; OF=ggr72avlfjvqinhaol7mprbv57User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=8257809a7475c7fa7752a0e86fe7cff7User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=R0qqCwK.17oONu7RjBLPHjggdQkWTgT9UHD8GB3iYHI-1700978378407-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.bunasta.eu/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipCookie: dps_site_id=us-east-1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: student.debritto.sch.idAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.avient.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://esoft.academy/wp-login.php
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=tsjerc0qbgetoevok3cpga3dv1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://talentius.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/admin.php HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.bunasta.euAccept: /Accept-Encoding: deflate, gzipCookie: CMSSESSID80f9fd3f=n9r0q6tfn1hneshgldk0v63lt6User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.bunasta.eu/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.harasduberry.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=ggr72avlfjvqinhaol7mprbv57User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipCookie: dps_site_id=us-east-1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://getquipu.com/
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/pages/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://esoft.academy/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=4f36ac64dc73c26adfab9dad01788b38\|11f187638643e13d7bd1963991fac52b; OF=9lma3oral9i39bi8q8vm70o157User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6InRCT085QUZJRjFua2xuMDJDT3JmbHc9PSIsInZhbHVlIjoiM3VwZ1JLbGxsM1JCcFR0U1RHbFZ4Wmk1OXNLN2ZLZ1BCa3Ezemo4Q2JnaFc1SnJ5OGt0ajUyRFpXc1ZlZkgyc002aEdTcWVIeldKVEdTT3hrZEhyQkxnOW45M3BxbHFoZFJTVlA2MHRkQUdud1RoM3hFc2R1TllxRE1DbWFQc0YiLCJtYWMiOiIzYzAwYjY4YWEyNjk2YTU4NDZjYmJlN2ZkOWEwNjQxMTY5YTVkYTg2NzA4MDhlNWNkZDQwMTRhYjMwNDhlN2IyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6ImdiYkFhd05JR2E4T1V1QzU0RmJ0R1E9PSIsInZhbHVlIjoiZ1dZODltbm1WZkZRajlLRjFpVVV6VXBiZWtJdWlpWitLRXd6V09BMHMvcHh0Si9LRG81QjBGelNBRnlLTDZPcHdaMTZqV0hldnFXZ2pWTEZPOTlzRC9maFJOMk5WQmNhNjlabTVCTktsVzYrdWpJb000SmhCMU16Z0hUQ1o3RXkiLCJtYWMiOiJhMTMzN2U5N2RhYjc0MmQwNmQyYjhjZWYzZGQ2ZGZjNWJhZDM0OWFiODU1MTFmZjYyYjA4ZmI1ZmE0NDI5YTkzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlJZU3NLbzFKdGUxMkI3Nm1jTjNaREE9PSIsInZhbHVlIjoidlEwV0taUnFVb1JOeXVHM2V6bXNaM3pEeWJSejdRUEE4R0cxcTYzZjVBYXYxVCs2elVaMW9MUFhESGVRa3RDQlY1R0lSVlA1bFJBWWJPRDNkaTBrRGl2amlDc0NoVFlpUjEvc25HeHFEaXc2N2ZrUk5DTmNteTFqZ3JWMnVaRDgiLCJtYWMiOiI2NTc0MTQyNjdkYzE4YWYwOTU3NDk3YzVjMTdlOWRkYmQ3MjMxMDBjNGUwMGVhMGRiN2U0Yzc5YTM5OTQ5YjI2IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6ImU4M05CeFdURWNUc0ZzQ2dqN1lFT3c9PSIsInZhbHVlIjoiaVhaYitWU0NGcUtJbFVXbHZDeTFZb3BvdXh5Y1dVajl2VDJEaXYrR29OVlJuWmVDUnB1SkZEVGN4NFVIak5CekRjdXdzVkd3R25zSWZXcVo5akRja0hsWDhNbzVCSGYwalk4QmxQWENlYzJQdDZLUGRIVm5QNTBhYiszNXkxTGkiLCJtYWMiOiJmOTVmY2Y3NzZjN2M0NTRkNGMxNDdmYWYxZjI1YzVlM2QxZmZlMDgwMmMzOGYzNjg4ZTE5YjNlZTMxNGI4MTQ2IiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InF3ZngrWVg5clBjRjFERUZvRVFCREE9PSIsInZhbHVlIjoiQjFQMzd6RTJFS0ovK2VYVVhaaUFWQjQxODRsWXA0RkZxUGZEWEhBZWFMK0tUTHNoZkVjQUJ5OE1BVHlPTThRbFlIaXNVL1JtRFllb2l3R0tLdURtZUkrVWIxL1AvR0hqdmRBWGNHSlFFWng1NzlTRmZ6QWFzZVFFRUdmalNieWgiLCJtYWMiOiJhYWJjOWRjYWY4NDFhNjhkMDY5MzM0YzQ1NTIxMTNhMGRjZDZkMmUxZTRkYzBlZGNmMDFhMjFhODk3Y2I3YjIzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Im5paEdlSlh3eDllRmZqM2VhVG5XbGc9PSIsInZhbHVlIjoiaTd1VWNrcEdXenVERFhjUEtQVFdzekd3a1ptYkZ3RE5lZ0NQdmtuYmE3U0pGZmVGNERmRWI2TzJWQnQvelArMUM5TEI1bHZSNnZHMGhuVkZseFd3am9ZSFNFNzQrbGRKSTNYeUV6VVJ2bUhHalFJY1lyWXRpK0lRQjdwZFlEdnUiLCJtYWMiOiI0NjM2ZjFlNjMzMDEyMDdhOGY0NTNmZTMyODdmMDhkZDk3NDBlZDMwMGQxNTI2Nzk2YTBiMDIxYzM0OWM0NGI2IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gccb.co.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /login/?page=%2Fphpmyadmin%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=m8r73sfk2fugohr6q21ktgilm1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.rech.com/
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=m4dctrurspuesp0b7frt4pped2User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp/wp-login.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/admin HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.bunasta.euAccept: /Accept-Encoding: deflate, gzipCookie: CMSSESSID80f9fd3f=n9r0q6tfn1hneshgldk0v63lt6User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.bunasta.eu/administrator/
Source: global traffic	HTTP traffic detected: GET /pma HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=LBk7ek8JijCF4DUXGuPIp.xw2i6pFPf2iviA637QaLY-1700978381416-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipCookie: originDirect=trueUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.rech.com/
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /404/ HTTP/1.1Host: www.grg17geblergasse.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://www.grg17geblergasse.at/-/-/-/-/-/-/-/-/-/-/
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=4f36ac64dc73c26adfab9dad01788b38\|11f187638643e13d7bd1963991fac52b; OF=9lma3oral9i39bi8q8vm70o157User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://beachrecruitment.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /saml/index.php?page=%2Fphpmyadmin%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=m8r73sfk2fugohr6q21ktgilm1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp/wp-login.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=9et5pla7nsi6m08nuam1qvco53User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/admin HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /login/?page=%2Fadministrator%2Findex.php HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/pages/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6IkRGblFZYmpUVTZaZXRlak41aDlickE9PSIsInZhbHVlIjoicDZZcjdvK2hoOHJhUmp5VXBPRmJnOXQxRDJkRXdNZnVUaUlZUWZNajY4Vlo5WUNZTG1ISDdVT1cwb1N4S0Y2MHZZU3hwODdRWDZWNjBFa251cXl2MGgvSFp3UEl6ZzNUME82N3Y1MVY5MGU5MmIyTWdKWDNNNXhMdGhMQ0RnRjAiLCJtYWMiOiI3N2M0YTFhMGY2YTc5NDgzMTIxNTNkZTA1YjY5Njk5YWJhYTE2Mzc4YzM5ODg5OWY1ZTNmYzNjYmI2NzQ3NDA5IiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6Ii9HaFdPWjhha0p0ZmprRks4OFhJMnc9PSIsInZhbHVlIjoiaWRxOTdEeUg5dVJqRHVtQ0g1R3VNUWJwSDFiZUkzMWNMUWQ3ZWU5bFNpS0t4Q0ViWExvRUJDamxtNkNwaVp1V205NHVvVlJlQUVRdVVsUzJEWEFwbnk3UzBtSHZscmc5UWZ4dkpxS1grRUY0WHAyQ1ZqZkRsOTNWakxwd21DZVMiLCJtYWMiOiI5ZmIxZGJiZmFiZjJlMzZjYTVjN2ZiODE0ZmMyZDlkNTQzNmFkMWRlOGI0YjBmMDhkOWZjNGNlZmZiMmI3ZjgzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjUxMTZseFR4OVdFOURpd3BzcUZ1TFE9PSIsInZhbHVlIjoiT1VlNmdtbmVOaityUVE0UzY3Qjh6TFUyeVEzUzBaL29ldUs3ZjBFbC9iV3FHdG9JQmlQampzeUdwOVg4Zk5vYytQdXJTd0dGK1M1ZVZ3MzFBVHRRRE0rMDFIbWZwaHVveEMrQXB4TTlvVjJIRTE2LytvdkZHNStHb0RTanAwajciLCJtYWMiOiI2ODUzMmM0MDU0YzY4ZjJlMzBjMjUwNTFjMjYyN2E2Y2Q4Y2Y5ODk4Y2QxYjIxNTVkYjExOTE2NzRmZDUyNWViIiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6ImFaN0VzMVVDbXAvRDkyTnVRTzV0dXc9PSIsInZhbHVlIjoiQ1RrUXRVb0ZpRlFJbEpYRG82SUhOc0tBL1l1enluT3MyWkE0cVVlb1czK21aUitnQUlQUWl3bmZkOEtINTBFRlZ6UG1RSVNNU01zK3AyS2R3c25WbXlqVFRubnp0VVNpVGJWVlI5d2d2STlkK1dvRHN3WmZXcktLUVZ4WVR0OHoiLCJtYWMiOiI4ODk3YmFiZWJhNWQ1OGM4OTM4YjdmNGJmYWI5M2JiM2Q1YjEyOGU2NTE1ZDE4MmE0MTFlOTc4OGIyZGUzNzAyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InVZN29GKzIwOFdCWTc0d3k1Y1J6OWc9PSIsInZhbHVlIjoiUnJhQ3h1dkxsVDJvOW1HeFFna3pqN2FsRWpPMEwwSjFwNVQwNjlmVUJkUmhjRjA5VXNaSTBkcGNUV0E2UXJNOGluNzN2bzhHN3Bnc2xySDQxdlNUVkp4OGhzSDlFNnR0SUtISHBETzhIUjMzcE83MWtjc2dOL3hnMHpiWWQ1Q20iLCJtYWMiOiI0NzYxMjc3MWRkYjMxOTk5NDRjNjc4ZTY5MDJjY2U2OTk3ZjgwMjc1Yzg5ZDFmOGEzMzRhMGViNmI1YTU3NGQ4IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InpSM1A3WnZQd1FBWE0zYndjS3lTMVE9PSIsInZhbHVlIjoiSVV2dW5TdHArb1liMVNCeG5EVjFwR1RJN1dWYmhLRE5scXJaOXFyVlF2d1RkcXNSVnZkTk5xeWJCTkh6dFl4STF4NzIwL25sWTZJUUs4T1hvYzBTKzBwWi9HZDZSR0lreDlFQzBkanB3eTFLWHExbTg3SmM3Rm9raklEZmFBL08iLCJtYWMiOiJlNjI4YTJlZjk4YTk5M2MzYzRkMTAwNmY2NTNiMzIxZmY1MzE1MGM0Y2VhMDc5YmFmYTRkMjk3YTgzYzZiZDY2IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.grantstech.io/wp-login.php
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=9lma3oral9i39bi8q8vm70o157User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://beachrecruitment.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.rech.com/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://bunasta.eu/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gccb.co.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=90qdef5au19fnromgduipcu8s5User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Ftradeavenida.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/admin HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipCookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.maxiv.lu.se/
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=9et5pla7nsi6m08nuam1qvco53User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=GmdO4O16OvcSRs1S5vpImz7iIXsw5EPzJkhrzhXEoHc-1700978384404-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Fhimontessori.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.grantstech.io/wp-login.php
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /saml/index.php?page=%2Fadministrator%2Findex.php HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: student.debritto.sch.idAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.rech.comAccept: /Accept-Encoding: deflate, gzipCookie: originDirect=true; SESSION=d0ba3db7-afea-40d5-bf45-8ca13b5deab0User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.rech.com/
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipCookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.maxiv.lu.se/
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=LvH4Xrnl0rVYyhoO4XsyXtrl76eVXmaMNVuqhXVgIEc-1700978385041-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://bunasta.eu/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.knu.ac.in/wp-login.php
Source: global traffic	HTTP traffic detected: GET /admin/pages/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp/wp-login.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=5afd37c218f5676376cb43a26fed2bbc\|11f187638643e13d7bd1963991fac52b; OF=8jsqh0b6dova9dpfri4i3ad415User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=qn6eh6oumdk5qmj0m5efhe7rurUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6Ik5ObEFRd1R1Zi9HT0oxV2Ircm5UQ2c9PSIsInZhbHVlIjoicURnaEVheXRneW9LMExZd0ZVKzFSYkhteHBSSitDM05jMVF2ZWhOZGJ1TTBkNkFFdi9ZaTN0RVBRTU9GUFM2a0hibWNlYTltcDBJczk3cThMRklYbjBESVh1S1lYbEFIbDAzeS9mbmpzRURJbnAzM3RsdWJsM2tRQUMvQ1ExL3giLCJtYWMiOiI3ZDdiZTY1OTI1YTQ0M2YyMzE2NjE4MTdjNTcyOGY4ZDdkNzNiYzgwNTJmMjA0MWI3Mjc5NjIyMjYzN2M3MmZiIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6Im5SMUR5aGVYRzk5eVNWOVlBMjdGT2c9PSIsInZhbHVlIjoialJJbk1nRlhJdHVqUlovcjZvNHlVaTlWMWFMTUd2RG5TVFVCekxiU25vcjBGTSt5UWNlRDRiT1BuNWR1WVg0OG5RSVhrblVqcmI0SGpsRjhBNnFtR3NZODdNVEx4RUFxaHgyaFhyUjRXTzhuQ1hsbTNleU1PcUkwUXhQWExZazkiLCJtYWMiOiIyMmJkMjM0YTE0OWMxOWZjYWU0MGE1NTc4OTE1NzNkNGEzNzRhNTY4YjVlMmE5OTNkMTAyYjQ4ZWU2ZWE5NDdkIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlJrY2ZQV0RLNEsvZ3BJNUk0VFF1dkE9PSIsInZhbHVlIjoibFFjeElYVkxjYWFLc0UwczNUSUZFeEtvNm5OSmN1M0lpQ2doUHJFUzBqVnRpWUZsWEk1aE92YTVGVmVINUpFWWN4YjM5M29WSHFLb29SNlMvUWFsU09FaFR5blJOV0VVMHYrL3JaTGF6bVY1KzdFeGxxa1dxQUZGUC9rNGF4UGQiLCJtYWMiOiIyOWRkODg5NWE1ZWZiODk5MjM0YjZkMTNkZGZhNjcxMGViOWQyMGVlOWM1OWQyZWY4YzA5YWQ2YjFmZjYzYWY2IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6Ii9jTlJlSTdIWDBqUjEwQkxxQ08weUE9PSIsInZhbHVlIjoiUExnZVdPTGtiWGxNS0xlOHc2YzFtQXNkaGp0bHUyb1I3K2FsNDR2UzJSSld0VGtPbGEybFZEMll6VHZRUFgzK0pTMldRczdXeWkxV20xd0VSRzlyaFliYWVWMFZWRUhVQ2Ixb1NwY3d3NTlyUk1ESHhFOTg1cmVxMHp5VE9QQW4iLCJtYWMiOiIwNjY5NDEyZmY4NTJjNmI4ZjA4ZGEwNjlkMjliZDBhNGJmMzdhYmMzMjcxZWVlNTJkODhmZTlhYTMxMjA4OTRkIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6IjlLZ3o3ZitXTkJMMTc1MHBUSTZrd0E9PSIsInZhbHVlIjoiTTN5QlA4M2RDQmFXR1F6WnV0MjVLRGUyTC82bzlvYnBRSlBuaXJMME96WnZrYjYxL1NRNm1TUFFoREFUOStoM0hRRTNkVGZqa2M5bW5QT21lbG50NmpZcS9kK2ZvWGpoRkhMRzZGekcwaU9kaEV5N29GaTNtQ2oyczZXbEZYaWciLCJtYWMiOiI0NTU5ZTk1NGViNDFjZTAwNWIzZGYyMzEwZjg2YmJlN2JjODZkMzcyNGU0ZGMwMGU1ZjAyMDE1ZDk5ODVmODlhIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkJqLzRuT0dNWE1NT1lhV3g3TzdmOHc9PSIsInZhbHVlIjoiVHJuQWlySXVLTURJWG5zd1JjcXFaQzMvQ2ZrRGVhMlZyK0hyL3RkYk9qbXFFaFZPejJmS3J1dDFaYmVIL0xYQTg2RWZxc0xBVitoRU56dHdyMnB3R0c3V29kTmkxdzZaZFkxVmdjdjhucHcyR1ZSY1hrSVA0NGdXSGYwT09QbmwiLCJtYWMiOiIzZDQ1MTNkMDg5OWE3OTQ3NmE3YmM5N2YwMGI3OTI1N2Q2YTM2YjcwZGEzNzJiMDIxMTNkMDg5NTM1NmVmNTU4IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=LvH4Xrnl0rVYyhoO4XsyXtrl76eVXmaMNVuqhXVgIEc-1700978385041-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=tDrWrpYz0sQSHfLN2QI5clVhMz.ytyo40IGQr8aDz4A-1700978385868-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.knu.ac.inAccept: /Accept-Encoding: deflate, gzipCookie: laravel_session=eyJpdiI6IjhxTUZQUlJiWjZFZnVkTkdlVzBJT1E9PSIsInZhbHVlIjoiK2pwQ2VQblNuTkxzcTE4aGRCVmQ1cTZHVVlVODhEL1hyaXBSMUx2azFoUmVkdXdYSFhEQzFnK1ZzTGdnR1Y5d1RrZU4rNlB1d2RlMDZ0a2RiNExSV25STnBUZEFoS1p4OGVacDdUckdxazdmL3hDOWtZaFJpUHJiSnRPQUlzbjciLCJtYWMiOiI4NjI2OGU4MDVhZmY1ZDg2Yjk0ZGY0NDhkMTQxNzAyMDZmNTNhNDUyYWZhYzVmZWQwYTVhYTU5M2RjMzVhNzdmIn0%3D; XSRF-TOKEN=eyJpdiI6IjFVQUlOU0JNOEkvUDBEKytURkN5V0E9PSIsInZhbHVlIjoiUllCNGk4WHF2aTloUjJpZHBmSzZHU0RZMWRHYmY1eEdWd1AxRFlVZTd5RVpjTXE4bE9PRktraFNYem9JbWtBRFVYc2tzME9QM3VRVXg0cWpScjFRak1JdUI1RGxwOG10YVJkMDI5UGY1UW9Ea0hGbUxkM01ycjBFMlYvSUhRRUciLCJtYWMiOiI1OWU0MDk3YTE4MGU1NTZiN2Y4YTkyOGNjY2VmMGNhMGRlNWQ3OTRjNzAzZjM2YWM0YThlZTA5NzgyMTBjM2ZkIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.knu.ac.in/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=1203cc93bf326997096bfdc5c2cf4d3f\|11f187638643e13d7bd1963991fac52b; OF=1qiejf8u62psuvsa49d0c1jep6User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=dbce043fd5773e46115905cf1a6992b8\|11f187638643e13d7bd1963991fac52b; OF=68racb9qa4tcicisten4cggps0User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/pages/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=afubt268smo3j604dfnlk2tqckUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:50256 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.237.190.156:443 -> 192.168.2.4:50350 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.234.162.143:443 -> 192.168.2.4:50333 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:50671 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.33.130.190:443 -> 192.168.2.4:50933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.230.63.107:443 -> 192.168.2.4:51000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.230.63.171:443 -> 192.168.2.4:51068 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.219.53.183:443 -> 192.168.2.4:50497 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:50603 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.224.218:443 -> 192.168.2.4:50766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:50997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.162.169.45:443 -> 192.168.2.4:50950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:50961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:50953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:50951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:51631 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:50971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:51058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 191.6.210.8:443 -> 192.168.2.4:50999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:51675 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:51486 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:51752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.96.211.44:443 -> 192.168.2.4:51781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:51774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:51761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 109.168.109.224:443 -> 192.168.2.4:51627 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:51386 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:52336 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.224.212.226:443 -> 192.168.2.4:52342 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 148.66.138.193:443 -> 192.168.2.4:50955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.226.37.158:443 -> 192.168.2.4:52329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:53656 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:51886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.205.16.72:443 -> 192.168.2.4:55011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:53665 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:55160 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:55052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:55178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.230.63.186:443 -> 192.168.2.4:55227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:55174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.33.130.190:443 -> 192.168.2.4:55292 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:53670 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:55326 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:55230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.81.150.60:443 -> 192.168.2.4:55269 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.144.64.233:443 -> 192.168.2.4:55288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:55239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.168.2.4:55239 -> 72.167.58.161:443 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:55181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:55235 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:55067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.234.155.54:443 -> 192.168.2.4:55166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.247.74.107:443 -> 192.168.2.4:55442 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:55508 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:55713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.19.159.64:443 -> 192.168.2.4:55510 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.124.249.13:443 -> 192.168.2.4:55832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:55523 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.252.247:443 -> 192.168.2.4:55485 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.63.202:443 -> 192.168.2.4:55789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:55811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.183.156.218:443 -> 192.168.2.4:55795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.169.145.157:443 -> 192.168.2.4:55792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 191.252.51.5:443 -> 192.168.2.4:55516 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:55995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:56010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:56194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:56215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:56241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:56280 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:56272 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:56294 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:56295 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:56500 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:56290 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56271 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:56573 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.144.64.233:443 -> 192.168.2.4:56382 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.205.16.72:443 -> 192.168.2.4:56630 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:56356 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:56608 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:56639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:56292 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:56484 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:56825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:56357 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:56824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:56808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:56951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:56954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:56707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.193.213.11:443 -> 192.168.2.4:57025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:56805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:56711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:57122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:57219 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:57220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:56708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:57010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:56703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:57320 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:57148 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:57304 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:56702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.205.16.72:443 -> 192.168.2.4:57541 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:57021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:57317 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:57547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:57546 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:57699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:57721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:57806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:57780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:57660 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:57697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.19.159.64:443 -> 192.168.2.4:57703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:57704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:57773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:58082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:58189 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:58092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:58376 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:58375 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:58227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:58084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:58091 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:58112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:58207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:58173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:58374 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.226.37.158:443 -> 192.168.2.4:58421 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:58653 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:58684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:58930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:58462 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:58881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:58897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:58848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:58761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:58740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:59748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:59753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:59750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:59690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:59735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:59949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:59691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:59950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:59948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:59954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:59774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.193.213.11:443 -> 192.168.2.4:60016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:59942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:60008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:60073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:59993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:59840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:60019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:60287 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:60030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:60021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:60288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:60052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:59989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:60140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:60415 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:60031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:60289 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:60633 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:60629 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:60622 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:60835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:60811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:60810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:60704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:60737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:61651 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:61770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:61744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:61604 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:61613 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:61650 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:61660 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:61608 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:61704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:61621 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:61639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:61598 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:61635 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:61633 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:61636 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:61620 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:61640 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:61622 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:61913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:61830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:61883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:62392 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:62180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:61944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:61943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:62480 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:62477 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:62478 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:62485 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:61828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:62479 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:61938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:62409 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:62657 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:62748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:62809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:62702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:62885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:62881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:62828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:62834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:62753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:62910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:62749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:62902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:62840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:62843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:62841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:62886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:62844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:63214 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:62908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:62925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:62944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:62909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.226.37.158:443 -> 192.168.2.4:62806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:62924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:62923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:62915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:62918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:63558 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:62884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:63278 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:63481 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:63476 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:63562 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:63517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:63568 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:63533 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:63567 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:63585 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:63587 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:63583 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:63732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:63590 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:63586 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:62899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:64149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:64232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:64335 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:64233 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:64236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:64473 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:64387 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:64311 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:64102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:64229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:64237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:64234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:64372 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:64304 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:64329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:64220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:64228 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:64225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:64388 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:64334 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:64308 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:65151 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:64895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:65122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:64705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:65065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:65067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:65072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:65117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:65200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:65206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:65203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:65482 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:65374 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:65302 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:65068 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:65483 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:49296 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:65301 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:65271 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:49351 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:49164 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:65493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:49517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:49519 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.19.159.64:443 -> 192.168.2.4:65467 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:49461 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:49413 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:49310 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:49479 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:49285 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:49504 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:49454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:49508 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:49452 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:49681 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:50255 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:50666 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:50463 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:50469 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:50818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:50826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:50488 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:51030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:50493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:51002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:50718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:50821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:50822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:50264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:51102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:51197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:51203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:51115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:51306 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:51330 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:51276 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:51315 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:51181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:51105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:51350 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:51189 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:51448 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:51277 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:51574 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.226.37.158:443 -> 192.168.2.4:51106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:51380 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:51620 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:51602 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:51428 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:51540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:51701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:51798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:51381 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:51799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:51382 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:51755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:51505 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:52052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:51334 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:51693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:52241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:52165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:52329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:52252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:52420 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:52337 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:52426 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:52390 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:52454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:52453 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:52494 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:52552 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:52534 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:52460 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:52478 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:52952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:52662 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:52720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:52696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:52666 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:53143 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:53083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:53186 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:53071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:53236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:52730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:53210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:53147 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:53145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:53224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:53272 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:53167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:53290 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:55752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:55748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:55749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:55727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:56103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:56109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:56108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:56066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:56118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:56209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:56197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:56200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:56222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56233 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56235 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:56237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56254 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56258 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:56137 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:56116 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:55706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:56264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:56300 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56306 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:56312 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:56317 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56320 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:56304 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:56351 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:56307 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56379 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56346 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:56352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56390 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56391 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:56417 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:56432 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:56411 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:56409 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:56421 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:56435 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:56451 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:56533 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56567 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:56577 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56618 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:56828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:56848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:56882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:56894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:57033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:57066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:57176 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:57161 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:57253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:57282 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:57155 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:57406 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:57389 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:57447 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:57801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:57825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:57854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:58017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:58194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:58314 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:59179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:59256 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Send many emails (e-Mail Spam)

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 40

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown

Source: klWGq3yDcQ.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 5984

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00410C9C	0_2_00410C9C
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00412DC6	0_2_00412DC6
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_004111E0	0_2_004111E0
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00411E1C	0_2_00411E1C
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_0040C7FA	0_2_0040C7FA

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: String function: 004095AC appears 35 times

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_025B0110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,		0_2_025B0110
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_02A00110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,		2_2_02A00110

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Process Stats: CPU usage > 49%

Source: klWGq3yDcQ.exe	Binary or memory string: OriginalFilename vs klWGq3yDcQ.exe
Source: klWGq3yDcQ.exe, 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameSoldier@ vs klWGq3yDcQ.exe
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000843000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCSRSS.Exej% vs klWGq3yDcQ.exe
Source: klWGq3yDcQ.exe, 00000001.00000000.1678882805.0000000000687000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameSoldier@ vs klWGq3yDcQ.exe
Source: klWGq3yDcQ.exe	Binary or memory string: OriginalFilenameSoldier@ vs klWGq3yDcQ.exe

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: csunsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: swift.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nfhwcrhk.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: surewarehook.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: csunsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: aep.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: atasi.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: swift.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nfhwcrhk.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nuronssl.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: surewarehook.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: ubsec.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: aep.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: atasi.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: swift.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nfhwcrhk.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nuronssl.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: surewarehook.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: ubsec.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: csunsapi.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: swift.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: nfhwcrhk.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: surewarehook.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: mswsock.dll	Jump to behavior

Source: klWGq3yDcQ.exe	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: csrss.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: klWGq3yDcQ.exe	ReversingLabs: Detection: 70%
Source: klWGq3yDcQ.exe	Virustotal: Detection: 67%

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File read: C:\Users\user\Desktop\klWGq3yDcQ.exe

Jump to behavior

Source: klWGq3yDcQ.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\klWGq3yDcQ.exe C:\Users\user\Desktop\klWGq3yDcQ.exe
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Users\user\Desktop\klWGq3yDcQ.exe C:\Users\user\Desktop\klWGq3yDcQ.exe
Source: unknown	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 5984
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 25500
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38276
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 260
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38328
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Users\user\Desktop\klWGq3yDcQ.exe C:\Users\user\Desktop\klWGq3yDcQ.exe	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"	Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File created: C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\

Jump to behavior

Source: classification engine

Classification label: mal99.spre.troj.expl.evad.winEXE@11/20@846/100

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_023E97C6 CreateToolhelp32Snapshot,Module32First,

0_2_023E97C6

Source: C:\Windows\SysWOW64\WerFault.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6240

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Command line argument: Lt]		0_2_004043A4
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Command line argument: eyi		0_2_004043A4

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: klWGq3yDcQ.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: klWGq3yDcQ.exe

Static file information: File size 1973248 > 1048576

Source: klWGq3yDcQ.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x1d2400

Source: klWGq3yDcQ.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: "C:\telurayutejaxe.pdb source: klWGq3yDcQ.exe
Source:	Binary string: C:\telurayutejaxe.pdb source: klWGq3yDcQ.exe

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_004095F1 push ecx; ret	0_2_00409604
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_005D1E70 push eax; ret	0_2_005D1E8E
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_004066F3 push ecx; ret	0_2_00406706
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02543A58 push eax; retf	0_2_02543A5A
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02490A3E push ds; ret	0_2_02490A3F
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02537AE7 push esi; iretd	0_2_02537AF2
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02543AB7 push A7EF5AB4h; ret	0_2_02543ABE
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_024512BC push ebx; iretd	0_2_024512BD
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_0240B7AE push ebp; ret	0_2_0240B7BA
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02474415 push edx; ret	0_2_02474417
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 1_2_00696299 push ecx; ret	1_2_006962AC
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0295AA97 push A7EF5AB4h; ret	2_2_0295AA9E
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0286829C push ebx; iretd	2_2_0286829D
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0294EAC7 push esi; iretd	2_2_0294EAD2
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_028A7A1E push ds; ret	2_2_028A7A1F
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0295AA38 push eax; retf	2_2_0295AA3A
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0282278E push ebp; ret	2_2_0282279A
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0288B3F5 push edx; ret	2_2_0288B3F7
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 4_2_00696299 push ecx; ret	4_2_006962AC

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_0040410B LoadLibraryW,GetProcAddress,VirtualProtect,

0_2_0040410B

Source: initial sample	Static PE information: section name: .text entropy: 7.957840457952121
Source: initial sample	Static PE information: section name: .text entropy: 7.957840457952121

Persistence and Installation Behavior

Drops PE files with benign system names

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File created: C:\ProgramData\Drivers\csrss.exe

Jump to dropped file

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File created: C:\ProgramData\Drivers\csrss.exe

Jump to dropped file

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File created: C:\ProgramData\Drivers\csrss.exe

Jump to dropped file

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run CSRSS			Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run CSRSS			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 55306 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 55306
Source: unknown	Network traffic detected: HTTP traffic on port 59433 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 59433
Source: unknown	Network traffic detected: HTTP traffic on port 63912 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 63912
Source: unknown	Network traffic detected: HTTP traffic on port 52568 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 52568
Source: unknown	Network traffic detected: HTTP traffic on port 56380 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 56380
Source: unknown	Network traffic detected: HTTP traffic on port 57202 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 57202
Source: unknown	Network traffic detected: HTTP traffic on port 58605 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 58605

May use the Tor software to hide its network traffic

Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp

Binary or memory string: onion-port

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe TID: 2144	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe TID: 1696	Thread sleep count: 3246 > 30	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe TID: 1696	Thread sleep time: -324600s >= -30000s	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe TID: 1696	Thread sleep count: 6746 > 30	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe TID: 1696	Thread sleep time: -674600s >= -30000s	Jump to behavior

Source: C:\ProgramData\Drivers\csrss.exe	Last function: Thread delayed
Source: C:\ProgramData\Drivers\csrss.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep

graph_0-7968

Source: C:\ProgramData\Drivers\csrss.exe	Window / User API: threadDelayed 3246			Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Window / User API: threadDelayed 6746			Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_00404004 ReadConsoleInputA,CreateJobObjectW,EnumDateFormatsExA,CreateNamedPipeW,CreateFileMappingW,SetConsoleWindowInfo,TlsGetValue,OpenWaitableTimerW,CreateFileW,GetWindowsDirectoryA,GetSystemInfo,InitializeSListHead,GetModuleHandleW,

0_2_00404004

Source: klWGq3yDcQ.exe, 00000001.00000003.1742964639.0000000003A4C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: <BS3tF3Yb5O3GboaRnAiA-SFxZeDJJ/gxOHdfHb+UpPThHSQtie02t2IFTVwYTujg-SGqjdhy5z+UWie9qWpTVh7wQ02kxeu3pb2A/0831mTM-SGxPze+4w8vb7Ex+Grg4s8WcOhOAfglM7YRVR12n9FE-SHvHTqtQJVvtqhysj9MMDODzq/JBUw3cHbvvurAsctU-SH38y3G5LV1lzFVwpiKdUE0Lfs3ZLaK9z3SfIJRC7v4-SIBhDXnIiEZyyvWelB+D0NMCTWI4pbHSxxXQ8VMMIr0-SJwxpZ4u92Ce5KQ9i8DHmDbpLf4YMu9hIpCENr9bHgQ-SJ3t8o4RocIZ5xvdBegEpz+uzZ49YniQwLKrRumqkyI-SJ7bMbcPl3+K8PJP4yIgzh66MrsfPgkvC4WtfjJ98fU-SKBae+pSHMleIfk83TExYU83MytXzmkq/WMtSBJ/5kg-SKPjxSwh6I6au0I6QG9/6VPN0Otwxs56MaMzeyfUbo4-SKZBpcMoLsD23H6Ahk9z310inUH0K0gVWC7+TPANkeQ-SKm4S03VIfp9X8DDzHtm2J+0FbFb2NU6c1rHOPJ+s2w-SKn0NeC7YSf0U8OOT6SUAJjTUSMS2/wm0Oka7bnZHFM-SLWh2GoyF6OmTfcjnCk6x5vjIcAqR5S4Sz+TcRO5v8w-SL/Ftv+pjRFYI8FwoeCowlJ5RbnK8FxhAdZObGIg9Mg-SMFZ6GLlvmyuXTd02ktl9zxx++P7IT6chKCDyXK/DWc-SMVofzDNTBRFeeXvnyamlFsTqPujVbkVuNdz/6YBVP0-SNtStDR1RX7xWpbpT6x6pahujmTzkI4CtA6bljKRkIo-SN/19UXRnhKRbhdVJkk4cXVc2AFNlQHZGCT3EaC7/QE-SOfUNjKx6Poytu4t0fXHVjChyQT68rKeXoSmrMHR410-SOhuAUg4o/K+Og9FBpa6hFa3XvA8T/Y6zkzd/jPCcn8-SO797AiTXjmD6mGBQN4IFBZTU679jKiJtdZQF5361zc-SQ7jHGfSsmE5DB3dCbdtu7xJ7YSe34meVDElzhEjqOw-SQ+rCDgFcmDgCp8WSr+ncPa7KVMzHzmxpUp/DZ038e0-SRlLQu96bOX34GnWVnj7HKb1W7PGy4KVLPYaCASEXb0-SRmCBZPvpQ+wkH8nH0qaxoUvFknnB3pxfGy+2X98z6w-SR/vAM6NlcvJFiiMs+xS3Plg737DRZilY9PdRnC9BRY-SShTHduoxVaDwDbAYFt0gWov/VKOUwtM9v1iOniAnb4-SStAMGf3kcnKjDGuOM/tK5GnnkePqAJCgTYBmpSJCUg-STLJiib+1Fipo5pYdU9gXnubkoVuXuisubFbafq5JDU-STOSaNwHjJDMDrWN0IVDfmRxlks1gpkMa0DN85fMjiI-ST6M7rDVBZR0F3QDdommJaLr96AVWngSXL5FaljE4c0-SUNOAetLlTsBdCZB3hfr29w6S1QBSRovQrw+Zf0MlaU-SUQwkIBSzB46xSYyY/Jeb061jcikPjG16gk/OyzLC10-SUfVU5VURk3Eh+103rykejE+ULybpqf6wPWdsjrfnc0-SUijfeaqYEXjnhbxsrLU41Uk4N106EHKkhmyL/8gG0c-SWe2NoGcpMD60A0ioFTqH86dfC34F82HWZEV+vqXDcY-SWlCxrbVEMhNTjzLW38Ux1Rxxr+drXqnudfmAZlipAs-SWsawbviYlkBcdPHkVYJ/AXnR0XBr+dMY4X1QVDyJ1g-SZf/4bEJN/FO5zyzZXRL3SIegSI781Zrd4upKUFXNSk-SaAQg0iLLzFlj2xlOGD6wHlE9tlM5SX1n18kSTC9OYM-SaIr3HA3wIwKV/+DGtJ/OUYcYiVFsrE2oYPlTTf+xjk-SamgvU6xK4WjO8ZDggpWoR5sW/LsB27CGCkXeCNkpIM-Sax9zEP+qHFPFnCr+lmP5DXnazNB1get/GQaPQoQ4xU-SbT5uSdQ4cXoLhHLdb8Tm2HUHo62xQCaBMwyGDd/g3c-SbZKe8Ek5PjgoPvoza1uZiY2uJNcPZN4CAJ2I0LUEBY-ScOEAuntUl5HnjJOYP+nMfKuL4BGXX5C6G3PpKbAKLk-SdGzxbU34CIa72vReuGegm6T6dijeCow6qmjAV23Mlc-SdqkqoZZuVPuhIav1Apn1/P1IuNwBQNM3ykY70Su0gQ-SeG8k2YJ6K6A21McK2hL5JUbxeemynDBSQG2b5NIXBo-Sey5xGOPFayu9EwAN8EqGXQ+i84cwiar9YHtJqIBX8U-Se7R0hpqEM+10Coh94+iG5r2Y324wQ6Uy29LSR4H0ak-Se9R98FZeXW09AjvQM6iCj0TOMZTzDI/5oKXwE0BAKg-SfJ5PDNfU2WHZ9o6fRs3vq3B/La1zqyuxmNN4NCbMBs-SgJk+Jc/BiSYUsQDynvCuN+ijiVQdO84eHw5LnLSSsc-SgU5TakoWF3nj096twri43JGDuBiLW1LONGhwaaNBcY-Sgy4BhlFk6ZfvAYbCOOF2OLXmICA9GzDnc398GiVRX8-Sg3y8tIfSl8Wekmnsp4JCWgYzRjq4vOjLo3gLIfAU80-ShY9d0DOPMXOkyHsqiNCN9DE28mnKxLxuLDObaBzha0-ShirlXRl99R9PyGaKyHusxiTwumWU1qChjUqU7XjTDo-Shz/adTXIuj/5ZLFeNN1Hd+AJagKfryuIdaYDijCj+E-SiZzhbpI1t8jc/BXgvY8ZenjQTmrqOc1pmayzPKbczk-Si3X78ESpr35kPXqHNh+hYcoIYuanX/aWEvizl1nrb0-SjYLA7hp7gltG6Xdtytfdw70U6jmlfbbVRL2wKROh4I-SkWOdu1Og7Dex65sE9MhqIszly/363me10QVqeGM478-SlI3XeLKVSh321wIqYKaNwr3s5+LaK9UdZjJaeHtdJE-Slb7OP38mdPhxoHYQKu5t35fK37i26
Source: klWGq3yDcQ.exe, 00000001.00000003.1800315933.0000000003451000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887881053.00000000046E6000.00000004.00000020.00020000.00000000.sdmp, cached-microdescs.new.1.dr	Binary or memory string: MIGJAoGBALKN3lFV1+mkbPHYM6ZP8E5+CjY8GhgFSjM0ZHC8JvfLZt43yWBCSPq1
Source: klWGq3yDcQ.exe, 00000001.00000003.1725771282.000000000384C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.1724036596.00000000035A0000.00000004.00000020.00020000.00000000.sdmp, unverified-microdesc-consensus.tmp.1.dr	Binary or memory string: m y7GRJMAy3qGR1lhg6mTZzEgwSWdYxPtUKYtqEMUV8Yw
Source: klWGq3yDcQ.exe, 00000001.00000003.1823806958.0000000003453000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y/R51l2yYyphkOzNTCS/jkV76dFWOuP6pikJzol8tgOIVz1QEmulAgMBAAE=
Source: klWGq3yDcQ.exe, 00000001.00000003.1823806958.0000000003453000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: /3FVGQ/x4WLt2xC2h4eY01oA4VvQEMuhxxOJX7nHYk992+JGgImBAgMBAAE=
Source: csrss.exe, 00000004.00000002.3485243692.0000000000C49000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: klWGq3yDcQ.exe, 00000001.00000003.1827563459.000000000345A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MIGJAoGBANzbX9VMRjByYYiWI0aKIpBDV903CLdYwmj5NvMCii0IVR2ThY4/2N1k
Source: klWGq3yDcQ.exe, 00000001.00000003.1743043519.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: <qvlLhYhQn9q5uqU8TH7U-ymfjPOUfdZ+HhZgDxnIiOccmXbl9GzHcYzb8Azbyyls-ynZWfZ5IwPlGgjrQtltR10GIo3ImQgWfXr6oQ3Dl6j8-yoMG7IiJOzZ4DT9aGzFzbIzxit8ZtgNtQc9SvvNjtu8-yoMm7m99syUL9AYK1OUvjB3k0Ssvf23zJPZQrQtBo+k-yoZlNyQat1+2EsI1PE2htPvq2rJmKqED13mTCXvXyQ4-yo1alLeCsVHjkaVoa/kWrQWNIOsZGiNesJA9Eahby08-yo+lA5RSppAFJ5SqS5UjWw6MRfqQ3nvj5Rg1CAdAClc-yqfHsxbVzBe9FsgkmdM476jEpAuZu8G0EmBV0yWW0SE-yqyDmVy+CacgoyGd0M0fISMl/GeIN9PuGo/UMWTEgFM-yq3P8KmeJy1e6ZIX85/Vr7Qa8bifJtx3ANdPqjoJ5+Q-yr4CF87zl9rcjM1sCMsbN+hwQWbqridu/CTqxWWEXks-yr6Ecub/1tOFEXf/5BGYX90K7tE4GVIpuHQ7bt1Yp5A-ysZYQW/VYSpRkxehhnCPOzecdf8h/MEjzQMiBQOA+ow-ytq4Il9wnlvagWcP+AeDad0VeLaT9kFgLvsAmPdsW8o-yuIp28mGF/wACnkMUKYRUdcap2hx7cwUU/5xNIVlP8k-yugdI19RO6xX3hZtQlGblUCCCGjKsB/4IlUoo1/URLI-yvJ8sXeYwJjQQUawn+55Bw7JtMSkCmbK/NL/PMiKHMQ-ywj7SwXuD2oSMimnb8+F1q5HBJ0azc4T10zBXzk2OVo-yw2x2BQSf/4nKf7DtuTor3eVHVXaXqSuDMIZ1XIAyNU-yxMhQSkp1B3y2VeFjXEjYKhpAVamoO6zRVts1rVYAm8-yxYV4iNLlGjgMXpXwueb6OelyWI/bJPtFFnQGi++LWc-yxYqUQW7exz6gw7UEq2NCdR05Tl8dvZqWNQEMfMJZyU-yxkrdAZUaasj04rcaRJ3nDyopNn8SisRWvg99lMvvBQ-yzIn9tVvHfnIdx4CXj6l8qac55BiX676xyMjjf16eRs-yz4wqGdfDoEPCX1VX9BqnHyuJQwr/22reRmwlshhOwE-y1wsnyq1Mplx0bf0fepmkeDaGLEPek4hQbPVHU8d2lE-y3T0aR/MDwPgTS4kJo9wqMSANFRvMCDxE7xypysAFA4-y4AV78N9Os9jNMNGp183F8AUIGlk9rKjIelP6s4JFGg-y5IfzspsxZROwi7xnP6SlvVfqubd/7RenIYCHZeHRT8-y5QQ+v/ryxR+gG6U8VS7MQb9MTM5aSVXaUKI3ZFgPCs-y5YOyHyYkQ0uXquaRqeg5JCrtOfBw17Q5S18UteqKjw-y6MmfcINDklfKvXjYBEbru9ukdehNYKoRCOT1cA8ttQ-y7GRJMAy3qGR1lhg6mTZzEgwSWdYxPtUKYtqEMUV8Yw-y8Nu+mSH9Wx0fO7Qh4FrxH7XxZCpONnqS5cKT2UNwn8-y8l8arTODxevzAVo+hJ15tOagH7aD4yWiBJ3miiI43Q-y87ETtfQn5AqcIbrm1r1OMjMfzXLpGO7PpXFseCrv5o-y9c3PYzLowp9ceLSf7KXC4q04DzJ19sw4I9h5iANkvM-y+8asNcjUpF6AXpkhH+NqUHQZb1PXKZ1/SvvWVlPe9I-y//aokZz8acm53xCM2oRpyl71z70uHJCm4/m4k/Hra0-zAY51Nri+ghIddrndWIhyboYWi0X+f5KpMJmOqcn2rs-zBbVzi7xKUXqiSsuAGMwoqz6qWvKB7JO3GR7KRGAqhk-zBtKv73g5ycnCzUbH1CPuzYG0N+rOA08wJbTQrUJXOY-zCP5rsIbXHmJxV+38GQtjsB+r2AAAqHaSJbkUTtTgmA-zCmw9gD4hn0g5kDH6sx/aZNlTjnlxwulJJAXfBmwTO8-zEaudWGJthkurisjuFiN2xUVW9d8f/u6Mev50zPzync-zEvMvKEoR94v2PGRc/7hQ7U0JQG6ohQZ/bKZG1712Ws-zFfxVJeBGQlSiFPjy0G0arjf/OYTPwcGHD+8BWKpCKc-zF4qL0hMKwnZ37dQQ7ClnfQ7ABdi2WkEJcdnrbS55G4-zGS7pNaEZDPQkAjWxozgVjDqiBRTo3WupQlNtkPMXBk-zGfNDbCmzcE2NKMweNSFnUyQ96DKVaOVHjmZaZ3ba08-zG8hS7iRjiHMJ/CcdRZli0lWc6V/2oaGdcA5kaCFBlk-zHPyHoBHNqwnCOrR36gjGtWLrTnYxOSzL4TMM97ttkg-zIGK/4zDGkjYn/g4wCoNEHtl4+onEGwLkSxkABh6Btw-zJth0jE0ba2lhtrEXLWQNEhsz4H/Ssp2Bix57YigI6w-zJ62zqfTIuAz1kvV73AVwLG/72s6IHGHfVus5IQp7JA-zLdWMt6aYYnWUSEgZUAWNQyCS9NNZPxRkaV+Q4H7y8o-zMOsxSYkUBosOPWUncopJFVr+RIEOLd7znwjN0LKE8Y-zMRcloGTynfCrLdJ4KqY+HX/BfNepkAcBRyk9aLtcCM-zMsrKjBa7imfXE1z8hYzeAC7VJgQ1vhs1xhcVCetF6M-zNAG/AUd8DYuH7r1X7Zqu2Yrhf/0wiRlDkRC7Vovgyk-zNVhoiXx9T7znVA4ThjQfdGzNoWCLV2KVjOAACjW7yE-zOFOIjDhepPn+GTnh6gvsLbOzxXr1ZEfr+0h9i/u40U-zOSS2gaBOafiKY4fkXNwtEfWHoJyOAoZ33MAOqKCSG8-zOYZwwYMsgPkitvSwtfvm2ibt4Rm4qjKJiMcr6iLr28-zO1+Ktle/h9PwtZC/IIukThUlJyldvkH1Qn3byjcmnU-zP+0ZjtqgmyYuTpf1rGCQOMpw71iI/2776VwFroR4fI-zRDxbA/g0biXrNrBfWVNC5069DTrh71bFfctj2trysI-zRP44NqITqW3csw/GiH5EL11c+fsSs
Source: klWGq3yDcQ.exe, 00000001.00000003.1725771282.000000000384C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.1724036596.00000000035A0000.00000004.00000020.00020000.00000000.sdmp, unverified-microdesc-consensus.tmp.1.dr	Binary or memory string: m SQ7jHGfSsmE5DB3dCbdtu7xJ7YSe34meVDElzhEjqOw
Source: klWGq3yDcQ.exe, 00000001.00000003.1827563459.000000000345A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MIGJAoGBAK7h1VmCi65Obi5jNTRteVQcxmCUm10opeTD7+Q1UVttM/Hv6XudG/RA
Source: klWGq3yDcQ.exe, 00000001.00000003.1843189879.000000000345C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MIGJAoGBAKZKuJzV8ZX+cjLj4pS5kCOpDnhqEMu9pStjmoyoAgEAaM0J4FeJUTox
Source: csrss.exe, 00000004.00000002.3485243692.0000000000C49000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: klWGq3yDcQ.exe, 00000001.00000003.1742964639.0000000003A4C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: BS3tF3Yb5O3GboaRnAiA-SFxZeDJJ/gxOHdfHb+UpPThHSQtie02t2IFTVwYTujg-SGqjdhy5z+UWie9qWpTVh7wQ02kxeu3pb2A/0831mTM-SGxPze+4w8vb7Ex+Grg4s8WcOhOAfglM7YRVR12n9FE-SHvHTqtQJVvtqhysj9MMDODzq/JBUw3cHbvvurAsctU-SH38y3G5LV1lzFVwpiKdUE0Lfs3ZLaK9z3SfIJRC7v4-SIBhDXnIiEZyyvWelB+D0NMCTWI4pbHSxxXQ8VMMIr0-SJwxpZ4u92Ce5KQ9i8DHmDbpLf4YMu9hIpCENr9bHgQ-SJ3t8o4RocIZ5xvdBegEpz+uzZ49YniQwLKrRumqkyI-SJ7bMbcPl3+K8PJP4yIgzh66MrsfPgkvC4WtfjJ98fU-SKBae+pSHMleIfk83TExYU83MytXzmkq/WMtSBJ/5kg-SKPjxSwh6I6au0I6QG9/6VPN0Otwxs56MaMzeyfUbo4-SKZBpcMoLsD23H6Ahk9z310inUH0K0gVWC7+TPANkeQ-SKm4S03VIfp9X8DDzHtm2J+0FbFb2NU6c1rHOPJ+s2w-SKn0NeC7YSf0U8OOT6SUAJjTUSMS2/wm0Oka7bnZHFM-SLWh2GoyF6OmTfcjnCk6x5vjIcAqR5S4Sz+TcRO5v8w-SL/Ftv+pjRFYI8FwoeCowlJ5RbnK8FxhAdZObGIg9Mg-SMFZ6GLlvmyuXTd02ktl9zxx++P7IT6chKCDyXK/DWc-SMVofzDNTBRFeeXvnyamlFsTqPujVbkVuNdz/6YBVP0-SNtStDR1RX7xWpbpT6x6pahujmTzkI4CtA6bljKRkIo-SN/19UXRnhKRbhdVJkk4cXVc2AFNlQHZGCT3EaC7/QE-SOfUNjKx6Poytu4t0fXHVjChyQT68rKeXoSmrMHR410-SOhuAUg4o/K+Og9FBpa6hFa3XvA8T/Y6zkzd/jPCcn8-SO797AiTXjmD6mGBQN4IFBZTU679jKiJtdZQF5361zc-SQ7jHGfSsmE5DB3dCbdtu7xJ7YSe34meVDElzhEjqOw-SQ+rCDgFcmDgCp8WSr+ncPa7KVMzHzmxpUp/DZ038e0-SRlLQu96bOX34GnWVnj7HKb1W7PGy4KVLPYaCASEXb0-SRmCBZPvpQ+wkH8nH0qaxoUvFknnB3pxfGy+2X98z6w-SR/vAM6NlcvJFiiMs+xS3Plg737DRZilY9PdRnC9BRY-SShTHduoxVaDwDbAYFt0gWov/VKOUwtM9v1iOniAnb4-SStAMGf3kcnKjDGuOM/tK5GnnkePqAJCgTYBmpSJCUg-STLJiib+1Fipo5pYdU9gXnubkoVuXuisubFbafq5JDU-STOSaNwHjJDMDrWN0IVDfmRxlks1gpkMa0DN85fMjiI-ST6M7rDVBZR0F3QDdommJaLr96AVWngSXL5FaljE4c0-SUNOAetLlTsBdCZB3hfr29w6S1QBSRovQrw+Zf0MlaU-SUQwkIBSzB46xSYyY/Jeb061jcikPjG16gk/OyzLC10-SUfVU5VURk3Eh+103rykejE+ULybpqf6wPWdsjrfnc0-SUijfeaqYEXjnhbxsrLU41Uk4N106EHKkhmyL/8gG0c-SWe2NoGcpMD60A0ioFTqH86dfC34F82HWZEV+vqXDcY-SWlCxrbVEMhNTjzLW38Ux1Rxxr+drXqnudfmAZlipAs-SWsawbviYlkBcdPHkVYJ/AXnR0XBr+dMY4X1QVDyJ1g-SZf/4bEJN/FO5zyzZXRL3SIegSI781Zrd4upKUFXNSk-SaAQg0iLLzFlj2xlOGD6wHlE9tlM5SX1n18kSTC9OYM-SaIr3HA3wIwKV/+DGtJ/OUYcYiVFsrE2oYPlTTf+xjk-SamgvU6xK4WjO8ZDggpWoR5sW/LsB27CGCkXeCNkpIM-Sax9zEP+qHFPFnCr+lmP5DXnazNB1get/GQaPQoQ4xU-SbT5uSdQ4cXoLhHLdb8Tm2HUHo62xQCaBMwyGDd/g3c-SbZKe8Ek5PjgoPvoza1uZiY2uJNcPZN4CAJ2I0LUEBY-ScOEAuntUl5HnjJOYP+nMfKuL4BGXX5C6G3PpKbAKLk-SdGzxbU34CIa72vReuGegm6T6dijeCow6qmjAV23Mlc-SdqkqoZZuVPuhIav1Apn1/P1IuNwBQNM3ykY70Su0gQ-SeG8k2YJ6K6A21McK2hL5JUbxeemynDBSQG2b5NIXBo-Sey5xGOPFayu9EwAN8EqGXQ+i84cwiar9YHtJqIBX8U-Se7R0hpqEM+10Coh94+iG5r2Y324wQ6Uy29LSR4H0ak-Se9R98FZeXW09AjvQM6iCj0TOMZTzDI/5oKXwE0BAKg-SfJ5PDNfU2WHZ9o6fRs3vq3B/La1zqyuxmNN4NCbMBs-SgJk+Jc/BiSYUsQDynvCuN+ijiVQdO84eHw5LnLSSsc-SgU5TakoWF3nj096twri43JGDuBiLW1LONGhwaaNBcY-Sgy4BhlFk6ZfvAYbCOOF2OLXmICA9GzDnc398GiVRX8-Sg3y8tIfSl8Wekmnsp4JCWgYzRjq4vOjLo3gLIfAU80-ShY9d0DOPMXOkyHsqiNCN9DE28mnKxLxuLDObaBzha0-ShirlXRl99R9PyGaKyHusxiTwumWU1qChjUqU7XjTDo-Shz/adTXIuj/5ZLFeNN1Hd+AJagKfryuIdaYDijCj+E-SiZzhbpI1t8jc/BXgvY8ZenjQTmrqOc1pmayzPKbczk-Si3X78ESpr35kPXqHNh+hYcoIYuanX/aWEvizl1nrb0-SjYLA7hp7gltG6Xdtytfdw70U6jmlfbbVRL2wKROh4I-SkWOdu1Og7Dex65sE9MhqIszly/363me10QVqeGM478-SlI3XeLKVSh321wIqYKaNwr3s5+LaK9UdZjJaeHtdJE-Slb7OP38mdPhxoHYQKu5t35fK37i26O
Source: klWGq3yDcQ.exe, 00000001.00000003.1743043519.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: qvlLhYhQn9q5uqU8TH7U-ymfjPOUfdZ+HhZgDxnIiOccmXbl9GzHcYzb8Azbyyls-ynZWfZ5IwPlGgjrQtltR10GIo3ImQgWfXr6oQ3Dl6j8-yoMG7IiJOzZ4DT9aGzFzbIzxit8ZtgNtQc9SvvNjtu8-yoMm7m99syUL9AYK1OUvjB3k0Ssvf23zJPZQrQtBo+k-yoZlNyQat1+2EsI1PE2htPvq2rJmKqED13mTCXvXyQ4-yo1alLeCsVHjkaVoa/kWrQWNIOsZGiNesJA9Eahby08-yo+lA5RSppAFJ5SqS5UjWw6MRfqQ3nvj5Rg1CAdAClc-yqfHsxbVzBe9FsgkmdM476jEpAuZu8G0EmBV0yWW0SE-yqyDmVy+CacgoyGd0M0fISMl/GeIN9PuGo/UMWTEgFM-yq3P8KmeJy1e6ZIX85/Vr7Qa8bifJtx3ANdPqjoJ5+Q-yr4CF87zl9rcjM1sCMsbN+hwQWbqridu/CTqxWWEXks-yr6Ecub/1tOFEXf/5BGYX90K7tE4GVIpuHQ7bt1Yp5A-ysZYQW/VYSpRkxehhnCPOzecdf8h/MEjzQMiBQOA+ow-ytq4Il9wnlvagWcP+AeDad0VeLaT9kFgLvsAmPdsW8o-yuIp28mGF/wACnkMUKYRUdcap2hx7cwUU/5xNIVlP8k-yugdI19RO6xX3hZtQlGblUCCCGjKsB/4IlUoo1/URLI-yvJ8sXeYwJjQQUawn+55Bw7JtMSkCmbK/NL/PMiKHMQ-ywj7SwXuD2oSMimnb8+F1q5HBJ0azc4T10zBXzk2OVo-yw2x2BQSf/4nKf7DtuTor3eVHVXaXqSuDMIZ1XIAyNU-yxMhQSkp1B3y2VeFjXEjYKhpAVamoO6zRVts1rVYAm8-yxYV4iNLlGjgMXpXwueb6OelyWI/bJPtFFnQGi++LWc-yxYqUQW7exz6gw7UEq2NCdR05Tl8dvZqWNQEMfMJZyU-yxkrdAZUaasj04rcaRJ3nDyopNn8SisRWvg99lMvvBQ-yzIn9tVvHfnIdx4CXj6l8qac55BiX676xyMjjf16eRs-yz4wqGdfDoEPCX1VX9BqnHyuJQwr/22reRmwlshhOwE-y1wsnyq1Mplx0bf0fepmkeDaGLEPek4hQbPVHU8d2lE-y3T0aR/MDwPgTS4kJo9wqMSANFRvMCDxE7xypysAFA4-y4AV78N9Os9jNMNGp183F8AUIGlk9rKjIelP6s4JFGg-y5IfzspsxZROwi7xnP6SlvVfqubd/7RenIYCHZeHRT8-y5QQ+v/ryxR+gG6U8VS7MQb9MTM5aSVXaUKI3ZFgPCs-y5YOyHyYkQ0uXquaRqeg5JCrtOfBw17Q5S18UteqKjw-y6MmfcINDklfKvXjYBEbru9ukdehNYKoRCOT1cA8ttQ-y7GRJMAy3qGR1lhg6mTZzEgwSWdYxPtUKYtqEMUV8Yw-y8Nu+mSH9Wx0fO7Qh4FrxH7XxZCpONnqS5cKT2UNwn8-y8l8arTODxevzAVo+hJ15tOagH7aD4yWiBJ3miiI43Q-y87ETtfQn5AqcIbrm1r1OMjMfzXLpGO7PpXFseCrv5o-y9c3PYzLowp9ceLSf7KXC4q04DzJ19sw4I9h5iANkvM-y+8asNcjUpF6AXpkhH+NqUHQZb1PXKZ1/SvvWVlPe9I-y//aokZz8acm53xCM2oRpyl71z70uHJCm4/m4k/Hra0-zAY51Nri+ghIddrndWIhyboYWi0X+f5KpMJmOqcn2rs-zBbVzi7xKUXqiSsuAGMwoqz6qWvKB7JO3GR7KRGAqhk-zBtKv73g5ycnCzUbH1CPuzYG0N+rOA08wJbTQrUJXOY-zCP5rsIbXHmJxV+38GQtjsB+r2AAAqHaSJbkUTtTgmA-zCmw9gD4hn0g5kDH6sx/aZNlTjnlxwulJJAXfBmwTO8-zEaudWGJthkurisjuFiN2xUVW9d8f/u6Mev50zPzync-zEvMvKEoR94v2PGRc/7hQ7U0JQG6ohQZ/bKZG1712Ws-zFfxVJeBGQlSiFPjy0G0arjf/OYTPwcGHD+8BWKpCKc-zF4qL0hMKwnZ37dQQ7ClnfQ7ABdi2WkEJcdnrbS55G4-zGS7pNaEZDPQkAjWxozgVjDqiBRTo3WupQlNtkPMXBk-zGfNDbCmzcE2NKMweNSFnUyQ96DKVaOVHjmZaZ3ba08-zG8hS7iRjiHMJ/CcdRZli0lWc6V/2oaGdcA5kaCFBlk-zHPyHoBHNqwnCOrR36gjGtWLrTnYxOSzL4TMM97ttkg-zIGK/4zDGkjYn/g4wCoNEHtl4+onEGwLkSxkABh6Btw-zJth0jE0ba2lhtrEXLWQNEhsz4H/Ssp2Bix57YigI6w-zJ62zqfTIuAz1kvV73AVwLG/72s6IHGHfVus5IQp7JA-zLdWMt6aYYnWUSEgZUAWNQyCS9NNZPxRkaV+Q4H7y8o-zMOsxSYkUBosOPWUncopJFVr+RIEOLd7znwjN0LKE8Y-zMRcloGTynfCrLdJ4KqY+HX/BfNepkAcBRyk9aLtcCM-zMsrKjBa7imfXE1z8hYzeAC7VJgQ1vhs1xhcVCetF6M-zNAG/AUd8DYuH7r1X7Zqu2Yrhf/0wiRlDkRC7Vovgyk-zNVhoiXx9T7znVA4ThjQfdGzNoWCLV2KVjOAACjW7yE-zOFOIjDhepPn+GTnh6gvsLbOzxXr1ZEfr+0h9i/u40U-zOSS2gaBOafiKY4fkXNwtEfWHoJyOAoZ33MAOqKCSG8-zOYZwwYMsgPkitvSwtfvm2ibt4Rm4qjKJiMcr6iLr28-zO1+Ktle/h9PwtZC/IIukThUlJyldvkH1Qn3byjcmnU-zP+0ZjtqgmyYuTpf1rGCQOMpw71iI/2776VwFroR4fI-zRDxbA/g0biXrNrBfWVNC5069DTrh71bFfctj2trysI-zRP44NqITqW3csw/GiH5EL11c+fsSs9
Source: cached-microdescs.new.1.dr	Binary or memory string: ntor-onion-key lU8+UY0MaMkgsA/Uhhj0W+Pxb6vMcIQTtUzTTWL2iTE
Source: klWGq3yDcQ.exe, 00000001.00000003.1831704054.000000000345B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: id ed25519 5uD7nVmCI5DppHHtx2H+7AzbTP39/UvAQinqkc/a/lg
Source: klWGq3yDcQ.exe, 00000001.00000002.2867952335.00000000009F8000.00000004.00000020.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3485169660.0000000000C00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: klWGq3yDcQ.exe, 00000001.00000003.1838458063.0000000003452000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 0PJAMo57H/5p/LvmCi5uy4B2YM9XkLvneJ1FX6e/H4AYW3twOtPlAgMBAAE=

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_0040667B IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

0_2_0040667B

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_0040410B LoadLibraryW,GetProcAddress,VirtualProtect,

0_2_0040410B

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_023E90A3 push dword ptr fs:[00000030h]	0_2_023E90A3
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_025B0042 push dword ptr fs:[00000030h]	0_2_025B0042
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_02800083 push dword ptr fs:[00000030h]	2_2_02800083
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_02A00042 push dword ptr fs:[00000030h]	2_2_02A00042

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00405021 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00405021
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_0040B5B4 SetUnhandledExceptionFilter,	0_2_0040B5B4
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_0040667B IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_0040667B
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00407B74 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00407B74
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 4_2_006943E0 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	4_2_006943E0
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 4_2_00694A78 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	4_2_00694A78

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Memory written: C:\Users\user\Desktop\klWGq3yDcQ.exe base: 400000 value starts with: 4D5A			Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Memory written: C:\ProgramData\Drivers\csrss.exe base: 400000 value starts with: 4D5A			Jump to behavior

Contains functionality to inject code into remote processes

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_025B0110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,

0_2_025B0110

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Users\user\Desktop\klWGq3yDcQ.exe C:\Users\user\Desktop\klWGq3yDcQ.exe			Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"			Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: GetLocaleInfoA,

0_2_00412BC9

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

0_2_00404004

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_0040BABB GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

0_2_0040BABB

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	2 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 Brute Force	1 System Time Discovery	1 Exploitation of Remote Services	11 Archive Collected Data	1 Exfiltration Over Alternative Protocol	4 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	2 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	212 Process Injection	3 Obfuscated Files or Information	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Encrypted Channel	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	2 Software Packing	Security Account Manager	24 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	11 Non-Standard Port			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	121 Security Software Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Multi-hop Proxy			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	2 Virtualization/Sandbox Evasion	SSH	Keylogging	Scheduled Transfer	5 Non-Application Layer Protocol			Data Encrypted for Impact	Server	Gather Victim Network Information
Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Virtualization/Sandbox Evasion	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Data Transfer Size Limits	136 Application Layer Protocol			Service Stop	Botnet	Domain Properties
External Remote Services	Systemd Timers	Startup Items	Startup Items	212 Process Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over C2 Channel	2 Proxy			Inhibit System Recovery	Web Services	DNS

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Source: Traffic	Snort IDS: 2047070 ET CURRENT_EVENTS Parrot TDS Check M2 34.136.104.255:443 -> 192.168.2.4:56292
Source: Traffic	Snort IDS: 2813008 ETPRO TROJAN Win32/CMSBrute/Pifagor Attempted Bruteforcing 192.168.2.4:51025 -> 139.162.169.45:80

Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onion/hb.php?n=19EE1A200E1DF5D59DA8&i=1233538
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000824000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Referer: X-Requested-With: XMLHttpRequest Content-Type: application/json;127.0.0.1:--ignore-missing-torrcect[] = --SOCKSPort--DataDirectory--bridgehttp://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onionT/reg.php?upd.php?/task.php?/rep.phperr.php?&n=v=b=p=repsf=e=nocache=SEH exceptionSEHSTD: C++.dll4kPv6aJG8e\!update!sleep !regcheckcreateObjectwp-login.phpwp-admin/name="loginform"ionW[] = id="loginform"name="log"id="user_login"name="pwd"id="user_pass"administrator/administrator/index.php ] = id="form-login"action="/administrator= = id="mod-login-username"nd[] = name="username"id="mod-login-password" name="passwd"admin.phpDataLifesubactionusernamepasswordOK{
Source: csrss.exe, 00000004.00000002.3484645530.0000000000824000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Referer: X-Requested-With: XMLHttpRequest Content-Type: application/json;127.0.0.1:--ignore-missing-torrcect[] = --SOCKSPort--DataDirectory--bridgehttp://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onionT/reg.php?upd.php?/task.php?/rep.phperr.php?&n=v=b=p=repsf=e=nocache=SEH exceptionSEHSTD: C++.dll4kPv6aJG8e\!update!sleep !regcheckcreateObjectwp-login.phpwp-admin/name="loginform"ionW[] = id="loginform"name="log"id="user_login"name="pwd"id="user_pass"administrator/administrator/index.php ] = id="form-login"action="/administrator= = id="mod-login-username"nd[] = name="username"id="mod-login-password" name="passwd"admin.phpDataLifesubactionusernamepasswordOK{

Source: http	HTTP: esoft.academy/phpmyadmin
Source: http	HTTP: www.2brospw.com/phpmyadmin
Source: http	HTTP: www.gatewaytoearlylearning.com/phpmyadmin
Source: http	HTTP: esoft.academy/phpmyadmin
Source: http	HTTP: www.2brospw.com/phpmyadmin
Source: http	HTTP: gatewaytoearlylearning.com/phpmyadmin
Source: http	HTTP: www.gatewaytoearlylearning.com/phpmyadmin

Source: Joe Sandbox View	IP Address: 81.169.145.157 81.169.145.157
Source: Joe Sandbox View	IP Address: 81.169.145.157 81.169.145.157

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report
klWGq3yDcQ.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Memory Dumps

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Source: global traffic	TCP traffic: 162.250.126.5 ports 22,222,3,443,4,80,21
Source: global traffic	TCP traffic: 74.220.219.189 ports 22,143,110,220,990,222,3,443,465,993,4,587,995,2222,80,21
Source: global traffic	TCP traffic: 52.101.42.6 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.42.4 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 15.236.236.160 ports 25,26,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 212.159.8.200 ports 25,143,110,220,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 162.241.24.104 ports 143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 212.97.32.100 ports 25,143,110,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 68.168.209.252 ports 22,990,2,222,443,80,21
Source: global traffic	TCP traffic: 81.169.145.157 ports 22,990,110,1,2,222,443,995,2222,80,21
Source: global traffic	TCP traffic: 104.247.74.107 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 191.6.210.8 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 216.250.121.106 ports 22,990,1,2,443,995,80,21
Source: global traffic	TCP traffic: 144.76.107.16 ports 25,220,110,2525,465,587,5,995,9
Source: global traffic	TCP traffic: 117.20.63.148 ports 22,2031,2030,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 104.47.73.138 ports 25,143,110,220,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 185.135.132.105 ports 22,990,222,3,443,4,995,80,21
Source: global traffic	TCP traffic: 81.169.145.74 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 15.235.14.141 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 109.168.109.224 ports 22,990,2,222,443,80,21
Source: global traffic	TCP traffic: 52.206.191.232 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 164.52.221.51 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 193.203.239.23 ports 143,110,220,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 185.230.63.171 ports 22,990,222,3,443,4,2222,80,21
Source: global traffic	TCP traffic: 133.130.97.143 ports 22,143,990,110,2,222,443,465,993,587,995,80,21
Source: global traffic	TCP traffic: 184.106.54.2 ports 110,143,993,5,995,9
Source: global traffic	TCP traffic: 185.154.212.10 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 15.222.16.209 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 162.210.96.117 ports 22,0,222,443,995,8,80,21
Source: global traffic	TCP traffic: 72.167.58.161 ports 22,25,0,143,110,220,990,443,465,993,587,995,8,80,21
Source: global traffic	TCP traffic: 108.166.43.2 ports 143,110,993,5,995,9
Source: global traffic	TCP traffic: 74.208.5.3 ports 25,26,143,110,220,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 104.26.13.245 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 142.250.27.27 ports 25,26,143,220,110,2525,465,993,3535,587,5,995,9
Source: global traffic	TCP traffic: 185.230.63.186 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 193.227.5.222 ports 22,990,2,222,443,80,21
Source: global traffic	TCP traffic: 191.6.220.39 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 104.47.75.228 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 200.55.156.172 ports 143,110,220,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 200.55.156.171 ports 143,110,1,3,993,4,995
Source: global traffic	TCP traffic: 200.55.156.170 ports 143,110,993,5,995,9
Source: global traffic	TCP traffic: 185.183.156.218 ports 22,25,26,990,1,2525,2,443,3535,80,21
Source: global traffic	TCP traffic: 3.33.130.190 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 178.32.41.233 ports 22,990,222,3,443,4,995,2222,80,21
Source: global traffic	TCP traffic: 15.236.29.106 ports 22,990,222,3,443,4,2222,80,21
Source: global traffic	TCP traffic: 52.101.40.6 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 37.157.195.144 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 52.101.40.4 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 185.230.63.107 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 52.101.40.2 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.40.1 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 104.47.74.10 ports 25,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 162.159.205.25 ports 25,26,143,110,220,2525,465,993,3535,587,5,995,9
Source: global traffic	TCP traffic: 173.203.187.1 ports 25,26,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 81.19.159.64 ports 22,220,990,1,2,222,443,993,80,21
Source: global traffic	TCP traffic: 52.101.68.36 ports 143,110,465,993,587,5,9
Source: global traffic	TCP traffic: 62.146.106.50 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.9.0 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 185.54.192.125 ports 22,990,222,3,443,4,995,80,21
Source: global traffic	TCP traffic: 52.101.9.5 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.9.2 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 136.143.191.44 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 162.159.205.17 ports 25,110,143,220,993,465,587,5,995,9
Source: global traffic	TCP traffic: 162.159.205.11 ports 25,26,143,110,220,2525,993,465,3535,587,5,995,9
Source: global traffic	TCP traffic: 52.86.6.113 ports 22,143,990,110,1,2,222,465,993,587,995,21
Source: global traffic	TCP traffic: 34.136.104.255 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 76.223.105.230 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 66.81.203.8 ports 22,25,143,990,110,220,222,3,443,465,993,4,587,995,2222,80,21
Source: global traffic	TCP traffic: 66.81.203.198 ports 22,143,110,990,2,222,465,993,587,995,21
Source: global traffic	TCP traffic: 104.47.17.138 ports 143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 18.229.0.171 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 35.214.252.247 ports 22,143,990,1,2,222,443,993,80,21
Source: global traffic	TCP traffic: 13.234.155.54 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 199.34.228.177 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 104.47.73.10 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.42.10 ports 143,465,4,5,995,6
Source: global traffic	TCP traffic: 52.101.42.13 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 103.224.212.226 ports 22,990,143,2,222,443,995,80,21
Source: global traffic	TCP traffic: 68.178.213.244 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 3.111.240.6 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 164.90.197.105 ports 25,143,110,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 13.37.195.136 ports 143,110,1,2525,3,993,4,995
Source: global traffic	TCP traffic: 52.101.8.34 ports 110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 104.47.71.138 ports 25,465,4,587,5,6
Source: global traffic	TCP traffic: 147.182.160.18 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 52.101.8.36 ports 110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.73.30 ports 143,110,465,993,587,5,9
Source: global traffic	TCP traffic: 66.81.203.133 ports 22,143,110,990,1,222,3,465,993,4,587,995,21
Source: global traffic	TCP traffic: 116.202.203.176 ports 22,1,2,222,443,80,21
Source: global traffic	TCP traffic: 142.251.16.27 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 89.31.143.1 ports 22,0,990,222,443,2222,8,80,21
Source: global traffic	TCP traffic: 142.250.153.14 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 202.226.37.158 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 99.81.150.60 ports 22,990,222,3,443,4,995,80,21
Source: global traffic	TCP traffic: 15.236.187.69 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 68.178.213.243 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.73.22 ports 143,1,3,465,4,995
Source: global traffic	TCP traffic: 52.101.9.11 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.8.42 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 78.128.62.90 ports 25,143,110,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.8.44 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 216.69.141.82 ports 25,143,110,220,2525,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.8.46 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 3.234.162.143 ports 22,990,2,222,443,995,80,21
Source: global traffic	TCP traffic: 80.92.66.174 ports 25,465,4,587,5,6
Source: global traffic	TCP traffic: 52.101.9.14 ports 143,465,4,5,995,6
Source: global traffic	TCP traffic: 47.246.24.211 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 52.101.9.17 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 52.101.73.26 ports 110,465,993,587,5,9
Source: global traffic	TCP traffic: 104.21.63.202 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 142.250.153.27 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.68.0 ports 143,110,465,4,587,5,995,6
Source: global traffic	TCP traffic: 213.0.13.44 ports 22,990,1,2,443,80,21
Source: global traffic	TCP traffic: 34.208.26.152 ports 22,990,1,2,443,80,21
Source: global traffic	TCP traffic: 142.250.153.26 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 67.205.16.72 ports 22,990,1,2,443,80,21
Source: global traffic	TCP traffic: 104.47.75.164 ports 25,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 104.47.55.138 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 198.23.53.39 ports 25,26,143,110,220,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 66.45.228.7 ports 25,143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 104.47.59.138 ports 25,143,110,220,465,993,587,5,995,9
Source: global traffic	TCP traffic: 15.197.142.173 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 44.219.53.183 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 23.185.0.1 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 142.93.233.86 ports 25,26,143,110,220,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 209.85.202.27 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 209.85.202.26 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 198.23.53.42 ports 110,143,993,5,995,9
Source: global traffic	TCP traffic: 52.101.68.16 ports 143,110,465,587,5,995,9
Source: global traffic	TCP traffic: 52.101.68.18 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 3.94.41.167 ports 22,25,143,990,110,220,1,2,222,443,465,993,587,995,2222,80,21
Source: global traffic	TCP traffic: 52.101.68.32 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 92.62.143.50 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 146.20.161.1 ports 25,26,143,110,220,2525,465,993,587,5,995,9
Source: global traffic	TCP traffic: 54.83.33.36 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 45.40.150.54 ports 22,990,222,3,443,4,2222,80,21
Source: global traffic	TCP traffic: 35.164.64.246 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 164.90.197.143 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 120.88.73.238 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 35.237.190.156 ports 22,990,2,222,443,995,80,21
Source: global traffic	TCP traffic: 194.47.252.115 ports 22,26,110,990,1,2525,2,222,443,3535,995,80,21
Source: global traffic	TCP traffic: 52.101.137.0 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.137.2 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.40.24 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 15.222.16.210 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 15.222.16.211 ports 25,143,110,220,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 64.233.184.26 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 75.118.8.65 ports 22,990,1,2,222,443,995,80,21
Source: global traffic	TCP traffic: 13.248.243.5 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 147.182.130.78 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 162.241.62.220 ports 22,25,143,110,220,990,222,3,443,465,993,4,587,995,2222,80,21
Source: global traffic	TCP traffic: 104.26.12.245 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 212.159.9.200 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 3.33.152.147 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 104.200.30.31 ports 22,25,143,990,110,1,2525,2,443,465,993,587,995,80,21
Source: global traffic	TCP traffic: 164.90.197.79 ports 143,110,465,993,5,995,9
Source: global traffic	TCP traffic: 67.195.228.75 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 67.195.204.83 ports 25,143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 103.224.212.34 ports 25,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 35.181.18.45 ports 143,110,1,2525,3,993,4,995
Source: global traffic	TCP traffic: 77.75.77.146 ports 25,143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.73.11 ports 110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 95.168.220.222 ports 143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 35.154.156.7 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 104.47.17.74 ports 25,143,110,220,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.73.1 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 52.101.73.6 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 147.182.189.184 ports 143,110,465,993,5,995,9
Source: global traffic	TCP traffic: 52.101.132.28 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 95.168.220.210 ports 22,990,1,2,222,443,995,80,21
Source: global traffic	TCP traffic: 52.101.132.30 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 18.185.115.145 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 18.185.115.146 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 143.244.202.96 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 18.185.115.147 ports 25,143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 52.101.11.9 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 52.101.11.7 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 162.144.64.233 ports 22,1,2,222,443,80,21
Source: global traffic	TCP traffic: 52.101.11.3 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 139.162.169.45 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 66.235.200.147 ports 22,990,222,3,443,4,995,80,21
Source: global traffic	TCP traffic: 52.101.11.10 ports 143,465,4,5,995,6
Source: global traffic	TCP traffic: 52.101.11.2 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 162.241.224.218 ports 22,143,110,990,220,222,3,443,465,993,4,587,995,80,21
Source: global traffic	TCP traffic: 144.202.62.131 ports 22,990,2,222,443,995,80,21
Source: global traffic	TCP traffic: 148.66.138.193 ports 22,990,3,443,4,80,21
Source: global traffic	TCP traffic: 159.203.32.4 ports 22,990,2,222,443,995,80,21

Source: global traffic	TCP traffic: 192.168.2.4:49731 -> 194.55.13.50:9001
Source: global traffic	TCP traffic: 192.168.2.4:49732 -> 46.19.141.85:8100
Source: global traffic	TCP traffic: 192.168.2.4:49733 -> 80.66.135.13:9001
Source: global traffic	TCP traffic: 192.168.2.4:49734 -> 95.153.32.22:9001
Source: global traffic	TCP traffic: 192.168.2.4:49735 -> 217.160.251.63:29001
Source: global traffic	TCP traffic: 192.168.2.4:53371 -> 66.81.203.8:995
Source: global traffic	TCP traffic: 192.168.2.4:54603 -> 52.101.8.46:143
Source: global traffic	TCP traffic: 192.168.2.4:54625 -> 52.101.11.10:143
Source: global traffic	TCP traffic: 192.168.2.4:54999 -> 104.47.74.10:143
Source: global traffic	TCP traffic: 192.168.2.4:55003 -> 15.222.16.211:995
Source: global traffic	TCP traffic: 192.168.2.4:55004 -> 136.143.191.44:995
Source: global traffic	TCP traffic: 192.168.2.4:55006 -> 142.250.27.27:995
Source: global traffic	TCP traffic: 192.168.2.4:55009 -> 143.244.202.96:143
Source: global traffic	TCP traffic: 192.168.2.4:55014 -> 142.250.153.27:143
Source: global traffic	TCP traffic: 192.168.2.4:55015 -> 74.208.5.3:143
Source: global traffic	TCP traffic: 192.168.2.4:55017 -> 162.159.205.25:995
Source: global traffic	TCP traffic: 192.168.2.4:55020 -> 142.251.16.27:995
Source: global traffic	TCP traffic: 192.168.2.4:55064 -> 162.241.224.218:995
Source: global traffic	TCP traffic: 192.168.2.4:55141 -> 146.20.161.1:995
Source: global traffic	TCP traffic: 192.168.2.4:55146 -> 216.69.141.82:995
Source: global traffic	TCP traffic: 192.168.2.4:55150 -> 67.195.204.83:995
Source: global traffic	TCP traffic: 192.168.2.4:55152 -> 66.45.228.7:143
Source: global traffic	TCP traffic: 192.168.2.4:55155 -> 209.85.202.27:995
Source: global traffic	TCP traffic: 192.168.2.4:55162 -> 142.250.153.14:995
Source: global traffic	TCP traffic: 192.168.2.4:55168 -> 78.128.62.90:143
Source: global traffic	TCP traffic: 192.168.2.4:55171 -> 104.47.74.138:995
Source: global traffic	TCP traffic: 192.168.2.4:55248 -> 104.47.75.164:143
Source: global traffic	TCP traffic: 192.168.2.4:55306 -> 117.20.63.148:2030
Source: global traffic	TCP traffic: 192.168.2.4:55545 -> 142.250.153.26:143
Source: global traffic	TCP traffic: 192.168.2.4:55547 -> 164.90.197.105:143
Source: global traffic	TCP traffic: 192.168.2.4:55550 -> 162.241.62.220:143
Source: global traffic	TCP traffic: 192.168.2.4:55551 -> 15.236.236.160:143
Source: global traffic	TCP traffic: 192.168.2.4:55552 -> 64.233.184.27:143
Source: global traffic	TCP traffic: 192.168.2.4:55559 -> 103.224.212.34:143
Source: global traffic	TCP traffic: 192.168.2.4:55566 -> 62.146.106.50:995
Source: global traffic	TCP traffic: 192.168.2.4:55575 -> 52.101.68.0:995
Source: global traffic	TCP traffic: 192.168.2.4:55579 -> 104.47.55.138:995
Source: global traffic	TCP traffic: 192.168.2.4:55580 -> 104.47.73.138:143
Source: global traffic	TCP traffic: 192.168.2.4:55581 -> 52.101.11.2:995
Source: global traffic	TCP traffic: 192.168.2.4:55582 -> 74.220.219.189:143
Source: global traffic	TCP traffic: 192.168.2.4:55588 -> 72.167.58.161:143
Source: global traffic	TCP traffic: 192.168.2.4:55591 -> 64.233.184.26:995
Source: global traffic	TCP traffic: 192.168.2.4:55592 -> 3.94.41.167:143
Source: global traffic	TCP traffic: 192.168.2.4:55610 -> 104.200.30.31:143
Source: global traffic	TCP traffic: 192.168.2.4:55614 -> 162.241.24.104:143
Source: global traffic	TCP traffic: 192.168.2.4:55629 -> 198.23.53.39:995
Source: global traffic	TCP traffic: 192.168.2.4:55695 -> 52.101.9.5:995
Source: global traffic	TCP traffic: 192.168.2.4:55794 -> 209.85.202.26:995
Source: global traffic	TCP traffic: 192.168.2.4:55827 -> 52.101.132.30:143
Source: global traffic	TCP traffic: 192.168.2.4:55838 -> 52.101.11.7:143
Source: global traffic	TCP traffic: 192.168.2.4:55848 -> 81.19.159.64:993
Source: global traffic	TCP traffic: 192.168.2.4:55878 -> 200.55.156.172:143
Source: global traffic	TCP traffic: 192.168.2.4:55882 -> 18.185.115.147:143
Source: global traffic	TCP traffic: 192.168.2.4:55884 -> 191.6.220.39:143
Source: global traffic	TCP traffic: 192.168.2.4:55914 -> 133.130.97.143:995
Source: global traffic	TCP traffic: 192.168.2.4:55919 -> 52.101.73.22:143
Source: global traffic	TCP traffic: 192.168.2.4:55922 -> 52.101.42.10:143
Source: global traffic	TCP traffic: 192.168.2.4:55934 -> 52.101.68.16:995
Source: global traffic	TCP traffic: 192.168.2.4:55940 -> 142.93.233.86:143
Source: global traffic	TCP traffic: 192.168.2.4:55943 -> 173.203.187.1:143
Source: global traffic	TCP traffic: 192.168.2.4:55970 -> 193.203.239.23:143
Source: global traffic	TCP traffic: 192.168.2.4:55972 -> 104.47.17.74:995
Source: global traffic	TCP traffic: 192.168.2.4:55976 -> 212.159.8.200:143
Source: global traffic	TCP traffic: 192.168.2.4:55994 -> 194.47.252.115:995
Source: global traffic	TCP traffic: 192.168.2.4:56025 -> 77.75.77.146:995
Source: global traffic	TCP traffic: 192.168.2.4:56027 -> 212.97.32.100:143
Source: global traffic	TCP traffic: 192.168.2.4:56092 -> 144.76.107.16:995
Source: global traffic	TCP traffic: 192.168.2.4:56175 -> 177.153.23.242:220
Source: global traffic	TCP traffic: 192.168.2.4:56593 -> 52.101.40.24:995
Source: global traffic	TCP traffic: 192.168.2.4:56822 -> 95.168.220.222:995
Source: global traffic	TCP traffic: 192.168.2.4:57029 -> 216.250.121.106:990
Source: global traffic	TCP traffic: 192.168.2.4:57766 -> 45.40.150.54:222
Source: global traffic	TCP traffic: 192.168.2.4:58441 -> 66.81.203.198:995
Source: global traffic	TCP traffic: 192.168.2.4:58685 -> 52.101.9.11:143
Source: global traffic	TCP traffic: 192.168.2.4:58687 -> 52.101.9.2:143
Source: global traffic	TCP traffic: 192.168.2.4:58888 -> 15.222.16.210:143
Source: global traffic	TCP traffic: 192.168.2.4:58981 -> 68.178.213.244:995
Source: global traffic	TCP traffic: 192.168.2.4:58982 -> 67.195.228.75:995
Source: global traffic	TCP traffic: 192.168.2.4:58997 -> 104.47.75.228:143
Source: global traffic	TCP traffic: 192.168.2.4:59062 -> 164.90.197.143:143
Source: global traffic	TCP traffic: 192.168.2.4:59068 -> 200.55.156.171:143
Source: global traffic	TCP traffic: 192.168.2.4:59094 -> 162.159.205.11:995
Source: global traffic	TCP traffic: 192.168.2.4:59193 -> 104.47.73.10:143
Source: global traffic	TCP traffic: 192.168.2.4:59194 -> 35.181.18.45:143
Source: global traffic	TCP traffic: 192.168.2.4:59201 -> 52.101.73.6:995
Source: global traffic	TCP traffic: 192.168.2.4:59203 -> 52.101.40.6:995
Source: global traffic	TCP traffic: 192.168.2.4:59204 -> 52.101.40.1:143
Source: global traffic	TCP traffic: 192.168.2.4:59205 -> 104.47.59.138:995
Source: global traffic	TCP traffic: 192.168.2.4:59215 -> 52.86.6.113:143
Source: global traffic	TCP traffic: 192.168.2.4:59226 -> 52.101.137.0:995
Source: global traffic	TCP traffic: 192.168.2.4:59237 -> 52.101.9.17:143
Source: global traffic	TCP traffic: 192.168.2.4:59239 -> 18.185.115.145:143
Source: global traffic	TCP traffic: 192.168.2.4:59255 -> 52.101.11.3:143
Source: global traffic	TCP traffic: 192.168.2.4:59257 -> 52.101.137.2:995
Source: global traffic	TCP traffic: 192.168.2.4:59265 -> 212.159.9.200:995
Source: global traffic	TCP traffic: 192.168.2.4:59273 -> 104.47.17.138:995
Source: global traffic	TCP traffic: 192.168.2.4:59315 -> 52.101.42.4:143
Source: global traffic	TCP traffic: 192.168.2.4:59317 -> 52.101.9.14:143
Source: global traffic	TCP traffic: 192.168.2.4:59322 -> 15.222.16.209:143
Source: global traffic	TCP traffic: 192.168.2.4:59325 -> 66.81.203.133:143
Source: global traffic	TCP traffic: 192.168.2.4:59364 -> 68.178.213.243:995
Source: global traffic	TCP traffic: 192.168.2.4:59395 -> 52.101.42.9:995
Source: global traffic	TCP traffic: 192.168.2.4:59473 -> 13.37.195.136:143
Source: global traffic	TCP traffic: 192.168.2.4:59485 -> 52.101.132.28:995
Source: global traffic	TCP traffic: 192.168.2.4:59497 -> 18.185.115.146:995
Source: global traffic	TCP traffic: 192.168.2.4:59503 -> 52.101.40.2:995
Source: global traffic	TCP traffic: 192.168.2.4:59508 -> 52.101.73.24:995
Source: global traffic	TCP traffic: 192.168.2.4:59514 -> 52.101.8.44:143
Source: global traffic	TCP traffic: 192.168.2.4:59519 -> 200.55.156.170:995
Source: global traffic	TCP traffic: 192.168.2.4:59522 -> 147.182.130.78:143
Source: global traffic	TCP traffic: 192.168.2.4:59526 -> 52.101.68.32:143
Source: global traffic	TCP traffic: 192.168.2.4:60241 -> 139.162.169.45:222
Source: global traffic	TCP traffic: 192.168.2.4:60242 -> 185.54.192.125:990
Source: global traffic	TCP traffic: 192.168.2.4:60244 -> 178.32.41.233:222
Source: global traffic	TCP traffic: 192.168.2.4:60254 -> 52.101.11.9:143
Source: global traffic	TCP traffic: 192.168.2.4:60298 -> 89.31.143.1:990
Source: global traffic	TCP traffic: 192.168.2.4:60348 -> 52.101.73.11:143
Source: global traffic	TCP traffic: 192.168.2.4:60405 -> 52.101.42.13:995
Source: global traffic	TCP traffic: 192.168.2.4:60508 -> 52.101.9.0:995
Source: global traffic	TCP traffic: 192.168.2.4:60537 -> 147.182.160.18:143
Source: global traffic	TCP traffic: 192.168.2.4:60710 -> 52.101.8.34:143
Source: global traffic	TCP traffic: 192.168.2.4:60873 -> 52.101.8.32:143
Source: global traffic	TCP traffic: 192.168.2.4:60906 -> 52.101.73.1:995
Source: global traffic	TCP traffic: 192.168.2.4:60979 -> 52.101.8.36:143
Source: global traffic	TCP traffic: 192.168.2.4:60991 -> 52.101.40.4:143
Source: global traffic	TCP traffic: 192.168.2.4:61031 -> 52.101.68.18:995
Source: global traffic	TCP traffic: 192.168.2.4:61120 -> 147.182.189.184:995
Source: global traffic	TCP traffic: 192.168.2.4:61138 -> 52.101.42.6:995
Source: global traffic	TCP traffic: 192.168.2.4:61141 -> 52.101.73.30:995
Source: global traffic	TCP traffic: 192.168.2.4:61211 -> 52.101.73.4:995
Source: global traffic	TCP traffic: 192.168.2.4:61214 -> 52.101.68.36:995
Source: global traffic	TCP traffic: 192.168.2.4:61220 -> 164.90.197.79:995
Source: global traffic	TCP traffic: 192.168.2.4:61252 -> 52.101.73.26:995
Source: global traffic	TCP traffic: 192.168.2.4:61296 -> 52.101.68.5:143
Source: global traffic	TCP traffic: 192.168.2.4:62009 -> 52.101.8.42:995
Source: global traffic	TCP traffic: 192.168.2.4:62162 -> 80.92.66.174:587
Source: global traffic	TCP traffic: 192.168.2.4:62239 -> 177.153.23.241:2525
Source: global traffic	TCP traffic: 192.168.2.4:62928 -> 109.168.109.224:990
Source: global traffic	TCP traffic: 192.168.2.4:62932 -> 191.6.210.8:990
Source: global traffic	TCP traffic: 192.168.2.4:62977 -> 104.247.74.107:222
Source: global traffic	TCP traffic: 192.168.2.4:63144 -> 162.159.205.17:995
Source: global traffic	TCP traffic: 192.168.2.4:63510 -> 81.169.145.157:222
Source: global traffic	TCP traffic: 192.168.2.4:63557 -> 81.169.145.74:222
Source: global traffic	TCP traffic: 192.168.2.4:63560 -> 185.183.156.218:2525
Source: global traffic	TCP traffic: 192.168.2.4:63731 -> 35.214.252.247:143
Source: global traffic	TCP traffic: 192.168.2.4:65466 -> 202.226.37.158:990
Source: global traffic	TCP traffic: 192.168.2.4:49821 -> 92.62.143.50:222
Source: global traffic	TCP traffic: 192.168.2.4:50615 -> 184.106.54.2:995
Source: global traffic	TCP traffic: 192.168.2.4:50774 -> 198.23.53.42:995
Source: global traffic	TCP traffic: 192.168.2.4:50885 -> 54.83.33.36:222
Source: global traffic	TCP traffic: 192.168.2.4:51239 -> 13.234.155.54:990
Source: global traffic	TCP traffic: 192.168.2.4:51240 -> 3.33.130.190:222
Source: global traffic	TCP traffic: 192.168.2.4:51374 -> 74.208.5.21:995
Source: global traffic	TCP traffic: 192.168.2.4:51386 -> 15.197.142.173:222
Source: global traffic	TCP traffic: 192.168.2.4:51389 -> 44.219.53.183:222
Source: global traffic	TCP traffic: 192.168.2.4:51427 -> 15.236.29.106:222
Source: global traffic	TCP traffic: 192.168.2.4:51550 -> 104.21.63.202:222
Source: global traffic	TCP traffic: 192.168.2.4:51884 -> 76.223.105.230:222
Source: global traffic	TCP traffic: 192.168.2.4:52106 -> 185.230.63.107:990
Source: global traffic	TCP traffic: 192.168.2.4:52350 -> 185.230.63.171:990
Source: global traffic	TCP traffic: 192.168.2.4:52410 -> 104.47.71.202:587
Source: global traffic	TCP traffic: 192.168.2.4:53073 -> 185.230.63.186:990
Source: global traffic	TCP traffic: 192.168.2.4:53085 -> 104.26.12.245:990
Source: global traffic	TCP traffic: 192.168.2.4:53125 -> 108.166.43.2:995
Source: global traffic	TCP traffic: 192.168.2.4:55500 -> 159.203.32.4:222
Source: global traffic	TCP traffic: 192.168.2.4:55585 -> 47.246.24.211:222
Source: global traffic	TCP traffic: 192.168.2.4:55637 -> 18.229.0.171:222
Source: global traffic	TCP traffic: 192.168.2.4:55642 -> 68.168.209.252:222
Source: global traffic	TCP traffic: 192.168.2.4:55661 -> 103.224.212.226:222
Source: global traffic	TCP traffic: 192.168.2.4:55662 -> 34.208.26.152:990
Source: global traffic	TCP traffic: 192.168.2.4:55670 -> 193.227.5.222:222
Source: global traffic	TCP traffic: 192.168.2.4:55676 -> 23.185.0.1:990
Source: global traffic	TCP traffic: 192.168.2.4:55699 -> 185.135.132.105:222
Source: global traffic	TCP traffic: 192.168.2.4:55713 -> 66.235.200.147:222
Source: global traffic	TCP traffic: 192.168.2.4:55716 -> 199.34.228.177:222
Source: global traffic	TCP traffic: 192.168.2.4:55751 -> 99.81.150.60:222
Source: global traffic	TCP traffic: 192.168.2.4:55759 -> 164.52.221.51:222
Source: global traffic	TCP traffic: 192.168.2.4:55784 -> 185.154.212.10:990
Source: global traffic	TCP traffic: 192.168.2.4:55788 -> 95.168.220.210:990
Source: global traffic	TCP traffic: 192.168.2.4:55806 -> 162.210.96.117:222
Source: global traffic	TCP traffic: 192.168.2.4:55827 -> 162.144.64.233:222
Source: global traffic	TCP traffic: 192.168.2.4:55828 -> 34.136.104.255:222
Source: global traffic	TCP traffic: 192.168.2.4:55834 -> 52.206.191.232:990
Source: global traffic	TCP traffic: 192.168.2.4:55838 -> 67.205.16.72:990
Source: global traffic	TCP traffic: 192.168.2.4:55844 -> 15.235.14.141:222
Source: global traffic	TCP traffic: 192.168.2.4:55847 -> 35.164.64.246:990
Source: global traffic	TCP traffic: 192.168.2.4:55852 -> 37.157.195.144:222
Source: global traffic	TCP traffic: 192.168.2.4:55873 -> 213.0.13.44:990
Source: global traffic	TCP traffic: 192.168.2.4:56072 -> 116.202.203.176:222
Source: global traffic	TCP traffic: 192.168.2.4:56073 -> 3.234.162.143:222
Source: global traffic	TCP traffic: 192.168.2.4:56074 -> 75.118.8.65:222
Source: global traffic	TCP traffic: 192.168.2.4:56076 -> 35.237.190.156:222
Source: global traffic	TCP traffic: 192.168.2.4:56083 -> 120.88.73.238:990
Source: global traffic	TCP traffic: 192.168.2.4:56091 -> 144.202.62.131:222
Source: global traffic	TCP traffic: 192.168.2.4:56206 -> 104.47.71.138:587
Source: global traffic	TCP traffic: 192.168.2.4:56811 -> 3.111.240.6:222
Source: global traffic	TCP traffic: 192.168.2.4:56901 -> 15.197.148.33:222
Source: global traffic	TCP traffic: 192.168.2.4:56910 -> 3.33.152.147:222
Source: global traffic	TCP traffic: 192.168.2.4:56917 -> 104.21.12.154:990
Source: global traffic	TCP traffic: 192.168.2.4:56934 -> 15.236.187.69:222
Source: global traffic	TCP traffic: 192.168.2.4:56935 -> 35.154.156.7:990
Source: global traffic	TCP traffic: 192.168.2.4:56944 -> 13.248.243.5:990
Source: global traffic	TCP traffic: 192.168.2.4:57467 -> 104.26.13.245:222
Source: global traffic	TCP traffic: 192.168.2.4:58234 -> 148.66.138.193:990
Source: global traffic	TCP traffic: 192.168.2.4:58455 -> 162.250.126.5:222

Source: global traffic	TCP traffic: 192.168.2.4:56040 -> 142.250.27.27:587
Source: global traffic	TCP traffic: 192.168.2.4:56043 -> 185.183.156.218:25
Source: global traffic	TCP traffic: 192.168.2.4:56095 -> 177.153.23.241:25
Source: global traffic	TCP traffic: 192.168.2.4:57188 -> 162.159.205.25:587
Source: global traffic	TCP traffic: 192.168.2.4:60245 -> 146.20.161.1:587
Source: global traffic	TCP traffic: 192.168.2.4:60247 -> 66.45.228.7:587
Source: global traffic	TCP traffic: 192.168.2.4:60248 -> 74.208.5.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62162 -> 80.92.66.174:587
Source: global traffic	TCP traffic: 192.168.2.4:62971 -> 173.203.187.1:587
Source: global traffic	TCP traffic: 192.168.2.4:63075 -> 104.200.30.31:587
Source: global traffic	TCP traffic: 192.168.2.4:63511 -> 103.224.212.34:587
Source: global traffic	TCP traffic: 192.168.2.4:63514 -> 142.93.233.86:587
Source: global traffic	TCP traffic: 192.168.2.4:64230 -> 198.23.53.39:587
Source: global traffic	TCP traffic: 192.168.2.4:64407 -> 15.236.236.160:587
Source: global traffic	TCP traffic: 192.168.2.4:51236 -> 212.159.8.200:587
Source: global traffic	TCP traffic: 192.168.2.4:51263 -> 67.195.204.83:587
Source: global traffic	TCP traffic: 192.168.2.4:51497 -> 104.47.73.138:587
Source: global traffic	TCP traffic: 192.168.2.4:51507 -> 104.47.75.164:587
Source: global traffic	TCP traffic: 192.168.2.4:51910 -> 3.94.41.167:587
Source: global traffic	TCP traffic: 192.168.2.4:51936 -> 162.159.205.11:587
Source: global traffic	TCP traffic: 192.168.2.4:52124 -> 104.47.73.10:587
Source: global traffic	TCP traffic: 192.168.2.4:52132 -> 104.47.55.138:587
Source: global traffic	TCP traffic: 192.168.2.4:52245 -> 104.47.17.74:587
Source: global traffic	TCP traffic: 192.168.2.4:52330 -> 144.76.107.16:587
Source: global traffic	TCP traffic: 192.168.2.4:52410 -> 104.47.71.202:587
Source: global traffic	TCP traffic: 192.168.2.4:52440 -> 78.128.62.90:587
Source: global traffic	TCP traffic: 192.168.2.4:52492 -> 77.75.77.146:587
Source: global traffic	TCP traffic: 192.168.2.4:52850 -> 212.97.32.100:587
Source: global traffic	TCP traffic: 192.168.2.4:52866 -> 15.222.16.211:587
Source: global traffic	TCP traffic: 192.168.2.4:52870 -> 66.81.203.8:587
Source: global traffic	TCP traffic: 192.168.2.4:52890 -> 216.69.141.82:587
Source: global traffic	TCP traffic: 192.168.2.4:53262 -> 18.185.115.147:587
Source: global traffic	TCP traffic: 192.168.2.4:55741 -> 209.85.202.27:587
Source: global traffic	TCP traffic: 192.168.2.4:55745 -> 142.250.153.14:587
Source: global traffic	TCP traffic: 192.168.2.4:55757 -> 142.251.16.27:587
Source: global traffic	TCP traffic: 192.168.2.4:55770 -> 136.143.191.44:587
Source: global traffic	TCP traffic: 192.168.2.4:55774 -> 142.250.153.27:587
Source: global traffic	TCP traffic: 192.168.2.4:55776 -> 143.244.202.96:587
Source: global traffic	TCP traffic: 192.168.2.4:55802 -> 162.241.224.218:587
Source: global traffic	TCP traffic: 192.168.2.4:55893 -> 162.241.62.220:587
Source: global traffic	TCP traffic: 192.168.2.4:55904 -> 74.220.219.189:587
Source: global traffic	TCP traffic: 192.168.2.4:55911 -> 164.90.197.105:587
Source: global traffic	TCP traffic: 192.168.2.4:55913 -> 62.146.106.50:587
Source: global traffic	TCP traffic: 192.168.2.4:55927 -> 142.250.153.26:587
Source: global traffic	TCP traffic: 192.168.2.4:55934 -> 162.241.24.104:587
Source: global traffic	TCP traffic: 192.168.2.4:55937 -> 209.85.202.26:587
Source: global traffic	TCP traffic: 192.168.2.4:55943 -> 64.233.184.26:587
Source: global traffic	TCP traffic: 192.168.2.4:55951 -> 200.55.156.172:587
Source: global traffic	TCP traffic: 192.168.2.4:55974 -> 193.203.239.23:587
Source: global traffic	TCP traffic: 192.168.2.4:55989 -> 72.167.58.161:587
Source: global traffic	TCP traffic: 192.168.2.4:56019 -> 133.130.97.143:587
Source: global traffic	TCP traffic: 192.168.2.4:56058 -> 95.168.220.222:587
Source: global traffic	TCP traffic: 192.168.2.4:56064 -> 191.6.220.39:587
Source: global traffic	TCP traffic: 192.168.2.4:56101 -> 52.101.42.6:587
Source: global traffic	TCP traffic: 192.168.2.4:56127 -> 52.101.42.4:587
Source: global traffic	TCP traffic: 192.168.2.4:56139 -> 104.47.74.10:587
Source: global traffic	TCP traffic: 192.168.2.4:56146 -> 52.101.11.7:587
Source: global traffic	TCP traffic: 192.168.2.4:56149 -> 52.101.9.0:587
Source: global traffic	TCP traffic: 192.168.2.4:56157 -> 52.101.11.2:587
Source: global traffic	TCP traffic: 192.168.2.4:56161 -> 104.47.59.138:587
Source: global traffic	TCP traffic: 192.168.2.4:56166 -> 52.101.73.1:587
Source: global traffic	TCP traffic: 192.168.2.4:56170 -> 52.101.137.0:587
Source: global traffic	TCP traffic: 192.168.2.4:56171 -> 52.101.9.11:587
Source: global traffic	TCP traffic: 192.168.2.4:56181 -> 52.101.73.11:587
Source: global traffic	TCP traffic: 192.168.2.4:56184 -> 52.101.9.17:587
Source: global traffic	TCP traffic: 192.168.2.4:56189 -> 52.101.73.6:587
Source: global traffic	TCP traffic: 192.168.2.4:56193 -> 52.101.132.30:587
Source: global traffic	TCP traffic: 192.168.2.4:56206 -> 104.47.71.138:587
Source: global traffic	TCP traffic: 192.168.2.4:56214 -> 52.101.40.4:587
Source: global traffic	TCP traffic: 192.168.2.4:56634 -> 212.159.9.200:587
Source: global traffic	TCP traffic: 192.168.2.4:56900 -> 162.159.205.17:587
Source: global traffic	TCP traffic: 192.168.2.4:56920 -> 68.178.213.244:587
Source: global traffic	TCP traffic: 192.168.2.4:56926 -> 67.195.228.75:587
Source: global traffic	TCP traffic: 192.168.2.4:56928 -> 66.81.203.198:587
Source: global traffic	TCP traffic: 192.168.2.4:56955 -> 18.185.115.145:587
Source: global traffic	TCP traffic: 192.168.2.4:56959 -> 104.47.75.228:587
Source: global traffic	TCP traffic: 192.168.2.4:56962 -> 52.101.9.2:587
Source: global traffic	TCP traffic: 192.168.2.4:56974 -> 52.86.6.113:587
Source: global traffic	TCP traffic: 192.168.2.4:56986 -> 52.101.9.5:587
Source: global traffic	TCP traffic: 192.168.2.4:56990 -> 52.101.132.28:587
Source: global traffic	TCP traffic: 192.168.2.4:56997 -> 52.101.40.6:587
Source: global traffic	TCP traffic: 192.168.2.4:57008 -> 52.101.40.1:587
Source: global traffic	TCP traffic: 192.168.2.4:57020 -> 52.101.11.9:587
Source: global traffic	TCP traffic: 192.168.2.4:57044 -> 104.47.17.138:587
Source: global traffic	TCP traffic: 192.168.2.4:57476 -> 68.178.213.243:587
Source: global traffic	TCP traffic: 192.168.2.4:57479 -> 66.81.203.133:587
Source: global traffic	TCP traffic: 192.168.2.4:57574 -> 18.185.115.146:587
Source: global traffic	TCP traffic: 192.168.2.4:57599 -> 52.101.8.46:587
Source: global traffic	TCP traffic: 192.168.2.4:57619 -> 52.101.11.3:587
Source: global traffic	TCP traffic: 192.168.2.4:57631 -> 52.101.137.2:587
Source: global traffic	TCP traffic: 192.168.2.4:57634 -> 52.101.68.36:587
Source: global traffic	TCP traffic: 192.168.2.4:57658 -> 52.101.42.13:587
Source: global traffic	TCP traffic: 192.168.2.4:57702 -> 52.101.8.42:587
Source: global traffic	TCP traffic: 192.168.2.4:58013 -> 52.101.8.34:587
Source: global traffic	TCP traffic: 192.168.2.4:58068 -> 52.101.40.2:587
Source: global traffic	TCP traffic: 192.168.2.4:58087 -> 52.101.8.36:587
Source: global traffic	TCP traffic: 192.168.2.4:58219 -> 52.101.73.26:587
Source: global traffic	TCP traffic: 192.168.2.4:58233 -> 52.101.8.44:587
Source: global traffic	TCP traffic: 192.168.2.4:58238 -> 52.101.73.30:587
Source: global traffic	TCP traffic: 192.168.2.4:58258 -> 52.101.68.32:587
Source: global traffic	TCP traffic: 192.168.2.4:58343 -> 52.101.40.24:587
Source: global traffic	TCP traffic: 192.168.2.4:58346 -> 52.101.68.0:587
Source: global traffic	TCP traffic: 192.168.2.4:58470 -> 52.101.68.16:587
Source: global traffic	TCP traffic: 192.168.2.4:58536 -> 52.101.68.18:587

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report klWGq3yDcQ.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Memory Dumps

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Windows Analysis Report
klWGq3yDcQ.exe