Edit tour

Windows Analysis Report
https://hillsclerk.securityeducation.com/

Overview

General Information

Sample URL:	https://hillsclerk.securityeducation.com/
Analysis ID:	1417030
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,694522603986261116,3156022079628551790,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hillsclerk.securityeducation.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio...	HTTP Parser: Number of links: 0
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio...

HTTP Parser: Title: Redirecting does not match URL

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio...	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49785 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.6:49729 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49785 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/ie10-4d8fefae653b9ade02759391caba3c56.js HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform-ember/vendor-a951d76bce4e0eb0f86ae64748ba6fda.css HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform-ember/vendor-02d26fd8e43c2236915f27156ef6f4a3.js HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform-ember/chunk.131.abd4932d5d56930bc068.js HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform-ember/chunk.143.6d853b71ed5687725e31.js HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /platform-ember/platform-ember-a841ee5014fc18a82dc1fc9e41b64f7c.js HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /localizejs/localize.js HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wombat-style-guide/fonts/wombaticons.woff2?00965ec43b6dcef594e13da207312244 HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hillsclerk.securityeducation.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wombat-style-guide/fonts/roboto-latin-400italic.woff2 HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hillsclerk.securityeducation.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/companymanagement/api/companyLoginProfile/hillsclerk HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/vnd.api+jsonX-Requested-With: XMLHttpRequesttraceparent: 00-9df5594fc660ffa3c976f45e637aa009-73888404e5b568c7-01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/auth/jsonapi/authDetails/hillsclerk HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/vnd.api+jsonX-Requested-With: XMLHttpRequesttraceparent: 00-fca9b9409dd6638ac28d6fcaf7c06c4b-bb42b33b47890f9a-01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /images/android-chrome-144x144.png HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /api/companymanagement/api/companyLoginProfile/hillsclerk HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /api/lib/xG6eDWKawYmvs/tu?v=474 HTTP/1.1Host: global.localizecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hillsclerk.securityeducation.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/lib/xG6eDWKawYmvs/tl.gif?l=en&c=6828485 HTTP/1.1Host: global.localizecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/lib/xG6eDWKawYmvs/g?v=0&l=en HTTP/1.1Host: global.localizecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hillsclerk.securityeducation.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /api/auth/saml/login?targetUrl=https://hillsclerk.securityeducation.com/ HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wombat-style-guide/images/logo.png HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hillsclerk.securityeducation.com/sso-authAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /api/lib/xG6eDWKawYmvs/g?v=8209&l=en HTTP/1.1Host: global.localizecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hillsclerk.securityeducation.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wombat-style-guide/fonts/roboto-latin-400.woff2 HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hillsclerk.securityeducation.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /wombat-style-guide/fonts/roboto-latin-500.woff2 HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hillsclerk.securityeducation.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /api/auth/jsonapi/authDetails/hillsclerk HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /images/android-chrome-144x144.png HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /wombat-style-guide/images/logo.png HTTP/1.1Host: hillsclerk.securityeducation.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
Source: global traffic	HTTP traffic detected: GET /api/lib/xG6eDWKawYmvs/tu?v=474 HTTP/1.1Host: global.localizecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/lib/xG6eDWKawYmvs/tl.gif?l=en&c=6828485 HTTP/1.1Host: global.localizecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/lib/xG6eDWKawYmvs/g?v=0&l=en HTTP/1.1Host: global.localizecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/lib/xG6eDWKawYmvs/g?v=8209&l=en HTTP/1.1Host: global.localizecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f8c5973a-b6e5-4635-99d8-335ed112cd2f/winauth/ssoprobe?client-request-id=cc54fe41-ad30-4fb9-98bf-40b0918028c3&_=1711632820509 HTTP/1.1Host: autologon.microsoftazuread-sso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-signinname_en_8qvvLKBP0Aes1nPeyZ0lbw2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_c53074e74ebeb8e140d6_en.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: hillsclerk.securityeducation.com

Source: unknown

HTTP traffic detected: POST /v1/rum?auth=WNIydzf5FMPgsMK0kZosBA HTTP/1.1Host: rum-ingest.us2.signalfx.comConnection: keep-aliveContent-Length: 33394sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://hillsclerk.securityeducation.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://hillsclerk.securityeducation.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_97.2.dr	String found in binary or memory: http://dev.apollodata.com/core/fragments.html#unique-names
Source: chromecache_98.2.dr	String found in binary or memory: http://ember-concurrency.com/docs/task-cancelation-help
Source: chromecache_98.2.dr	String found in binary or memory: http://git.io/EKPpnA
Source: chromecache_98.2.dr	String found in binary or memory: http://git.io/yBU2rg
Source: chromecache_98.2.dr	String found in binary or memory: http://help.pendo.io/resources/support-library/installation/metadata.html
Source: chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_97.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_97.2.dr	String found in binary or memory: http://momentjs.com/timezone/docs/#/data-loading/.
Source: chromecache_98.2.dr	String found in binary or memory: http://testserver.example/v1/graph
Source: chromecache_97.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-C
Source: chromecache_98.2.dr	String found in binary or memory: https://api.feedback.us.pendo.io
Source: chromecache_98.2.dr	String found in binary or memory: https://app.pendo.io
Source: chromecache_97.2.dr	String found in binary or memory: https://code.highcharts.com/9.2.2/lib/
Source: chromecache_99.2.dr	String found in binary or memory: https://community.securityeducation.com/s/article/Interactive-Training-Section-508-WCAG-Compliant-Tr
Source: chromecache_99.2.dr	String found in binary or memory: https://community.securityeducation.com/s/article/SCORM-Export-to-SCORM
Source: chromecache_98.2.dr	String found in binary or memory: https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.
Source: chromecache_97.2.dr	String found in binary or memory: https://export.highcharts.com/
Source: chromecache_99.2.dr	String found in binary or memory: https://featbot.io
Source: chromecache_98.2.dr	String found in binary or memory: https://feedback.us.pendo.io
Source: chromecache_97.2.dr	String found in binary or memory: https://github.com/apollographql/invariant-packages)
Source: chromecache_98.2.dr	String found in binary or memory: https://github.com/emn178/js-sha1
Source: chromecache_97.2.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: chromecache_98.2.dr	String found in binary or memory: https://github.com/taylorhakes/promise-polyfill
Source: chromecache_97.2.dr	String found in binary or memory: https://github.com/theKashey/focus-lock/#focus-fighting
Source: chromecache_97.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_98.2.dr	String found in binary or memory: https://github.com/wombatsecurity/wombat-style-guide/blob/master/
Source: chromecache_98.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_98.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_98.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_98.2.dr	String found in binary or memory: https://local.pendo.io:8080
Source: chromecache_87.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_87.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_97.2.dr	String found in binary or memory: https://momentjs.com/timezone/docs/#/use-it/browser/
Source: chromecache_97.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_98.2.dr	String found in binary or memory: https://pendo-io-static.storage.googleapis.com/agent/static/df0188cb-fe67-4565-4bef-3746994b4333/pen
Source: chromecache_98.2.dr	String found in binary or memory: https://pendo-static-5736325425922048.storage.googleapis.com
Source: chromecache_98.2.dr	String found in binary or memory: https://portal.feedback.eu.pendo.io/app/#/pendo/auth?inIframe=true
Source: chromecache_98.2.dr	String found in binary or memory: https://raw.github.com/emberjs/ember.js/master/LICENSE
Source: chromecache_97.2.dr	String found in binary or memory: https://rum-ingest.$
Source: chromecache_98.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_97.2.dr	String found in binary or memory: https://www.highcharts.com?credits
Source: chromecache_98.2.dr	String found in binary or memory: https://www.pendo.io/pendo-free/nps?utm_source=pendo_app&utm_medium=branded-nps&utm_campaign=free-br
Source: chromecache_98.2.dr	String found in binary or memory: https://www.proofpoint.com/us/products/security-awareness-reporting

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.6:49729 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@18/107@28/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,694522603986261116,3156022079628551790,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hillsclerk.securityeducation.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,694522603986261116,3156022079628551790,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://hillsclerk.securityeducation.com/	0%	Avira URL Cloud	safe
https://hillsclerk.securityeducation.com/	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://js.foundation/	0%	URL Reputation	safe
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/tl.gif?l=en&c=6828485	0%	Avira URL Cloud	safe
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/g?v=8209&l=en	0%	Avira URL Cloud	safe
http://testserver.example/v1/graph	0%	Avira URL Cloud	safe
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/g?v=0&l=en	0%	Avira URL Cloud	safe
http://git.io/EKPpnA	0%	Avira URL Cloud	safe
https://featbot.io	0%	Avira URL Cloud	safe
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/tu?v=474	0%	Avira URL Cloud	safe
http://ember-concurrency.com/docs/task-cancelation-help	0%	Avira URL Cloud	safe
http://git.io/yBU2rg	0%	Avira URL Cloud	safe
http://git.io/EKPpnA	0%	Virustotal		Browse
https://rum-ingest.$	0%	Avira URL Cloud	safe
https://autologon.microsoftazuread-sso.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/winauth/ssoprobe?client-request-id=cc54fe41-ad30-4fb9-98bf-40b0918028c3&_=1711632820509	0%	Avira URL Cloud	safe
http://git.io/yBU2rg	0%	Virustotal		Browse
http://ember-concurrency.com/docs/task-cancelation-help	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
hillsclerk.securityeducation.com	18.211.106.230	true	false	high
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
global.localizecdn.com	104.18.4.175	true	false	unknown
ingest.us2.signalfx.com	35.199.162.154	true	false	high
www.google.com	172.253.62.104	true	false	high
cs1227.wpc.alphacdn.net	192.229.211.199	true	false	unknown
part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
autologon.microsoftazuread-sso.com	40.126.62.129	true	false	unknown
windowsupdatebg.s.llnwi.net	69.164.0.0	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	high
rum-ingest.us2.signalfx.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	high
account.live.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://hillsclerk.securityeducation.com/api/companymanagement/api/companyLoginProfile/hillsclerk	false		high
https://hillsclerk.securityeducation.com/favicon-32x32.png	false		high
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/g?v=0&l=en	false	Avira URL Cloud: safe	unknown
https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-400.woff2	false		high
https://hillsclerk.securityeducation.com/platform-ember/vendor-a951d76bce4e0eb0f86ae64748ba6fda.css	false		high
https://hillsclerk.securityeducation.com/api/auth/saml/login?targetUrl=https://hillsclerk.securityeducation.com/	false		high
https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-400italic.woff2	false		high
https://hillsclerk.securityeducation.com/wombat-style-guide/images/logo.png	false		high
https://hillsclerk.securityeducation.com/localizejs/localize.js	false		high
https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/wombaticons.woff2?00965ec43b6dcef594e13da207312244	false		high
https://hillsclerk.securityeducation.com/platform-ember/platform-ember-a841ee5014fc18a82dc1fc9e41b64f7c.js	false		high
https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css	false		high
https://hillsclerk.securityeducation.com/platform-ember/chunk.131.abd4932d5d56930bc068.js	false		high
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/g?v=8209&l=en	false	Avira URL Cloud: safe	unknown
https://hillsclerk.securityeducation.com/images/android-chrome-144x144.png	false		high
https://hillsclerk.securityeducation.com/platform-ember/chunk.143.6d853b71ed5687725e31.js	false		high
https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-500.woff2	false		high
https://hillsclerk.securityeducation.com/manifest.json	false		high
https://hillsclerk.securityeducation.com/api/auth/jsonapi/authDetails/hillsclerk	false		high
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/tl.gif?l=en&c=6828485	false	Avira URL Cloud: safe	unknown
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/tu?v=474	false	Avira URL Cloud: safe	unknown
https://hillsclerk.securityeducation.com/	false		high
https://hillsclerk.securityeducation.com/platform-ember/vendor-02d26fd8e43c2236915f27156ef6f4a3.js	false		high
https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US	false		high
https://autologon.microsoftazuread-sso.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/winauth/ssoprobe?client-request-id=cc54fe41-ad30-4fb9-98bf-40b0918028c3&_=1711632820509	false	Avira URL Cloud: safe	unknown
https://rum-ingest.us2.signalfx.com/v1/rum?auth=WNIydzf5FMPgsMK0kZosBA	false		high
https://hillsclerk.securityeducation.com/favicon.ico	false		high
https://hillsclerk.securityeducation.com/js/ie10-4d8fefae653b9ade02759391caba3c56.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://app.pendo.io	chromecache_98.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_97.2.dr	false		high
https://github.com/emn178/js-sha1	chromecache_98.2.dr	false		high
https://github.com/taylorhakes/promise-polyfill	chromecache_98.2.dr	false		high
http://momentjs.com/guides/#/warnings/add-inverted-param/	chromecache_98.2.dr, chromecache_97.2.dr	false		high
https://login.windows-ppe.net	chromecache_87.2.dr	false		high
https://www.pendo.io/pendo-free/nps?utm_source=pendo_app&utm_medium=branded-nps&utm_campaign=free-br	chromecache_98.2.dr	false		high
http://testserver.example/v1/graph	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/wombatsecurity/wombat-style-guide/blob/master/	chromecache_98.2.dr	false		high
https://login.microsoftonline.com	chromecache_87.2.dr	false		high
http://git.io/EKPpnA	chromecache_98.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/js-date/	chromecache_98.2.dr, chromecache_97.2.dr	false		high
http://momentjs.com/guides/#/warnings/define-locale/	chromecache_98.2.dr, chromecache_97.2.dr	false		high
https://github.com/theKashey/focus-lock/#focus-fighting	chromecache_97.2.dr	false		high
https://www.proofpoint.com/us/products/security-awareness-reporting	chromecache_98.2.dr	false		high
http://www.ecma-international.org/ecma-262/5.1/#sec-C	chromecache_97.2.dr	false		high
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	chromecache_97.2.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	chromecache_98.2.dr, chromecache_97.2.dr	false		high
https://local.pendo.io:8080	chromecache_98.2.dr	false		high
https://momentjs.com/timezone/docs/#/use-it/browser/	chromecache_97.2.dr	false		high
https://github.com/apollographql/invariant-packages)	chromecache_97.2.dr	false		high
https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.	chromecache_98.2.dr	false		high
https://feedback.us.pendo.io	chromecache_98.2.dr	false		high
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_98.2.dr, chromecache_97.2.dr	false		high
https://raw.github.com/emberjs/ember.js/master/LICENSE	chromecache_98.2.dr	false		high
https://featbot.io	chromecache_99.2.dr	false	Avira URL Cloud: safe	unknown
https://jquery.org/license	chromecache_98.2.dr	false		high
http://ember-concurrency.com/docs/task-cancelation-help	chromecache_98.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://git.io/yBU2rg	chromecache_98.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://jquery.com/	chromecache_98.2.dr	false		high
https://community.securityeducation.com/s/article/Interactive-Training-Section-508-WCAG-Compliant-Tr	chromecache_99.2.dr	false		high
https://code.highcharts.com/9.2.2/lib/	chromecache_97.2.dr	false		high
https://www.highcharts.com?credits	chromecache_97.2.dr	false		high
https://rum-ingest.$	chromecache_97.2.dr	false	Avira URL Cloud: safe	low
http://dev.apollodata.com/core/fragments.html#unique-names	chromecache_97.2.dr	false		high
http://momentjs.com/timezone/docs/#/data-loading/.	chromecache_97.2.dr	false		high
https://api.feedback.us.pendo.io	chromecache_98.2.dr	false		high
https://portal.feedback.eu.pendo.io/app/#/pendo/auth?inIframe=true	chromecache_98.2.dr	false		high
https://sizzlejs.com/	chromecache_98.2.dr	false		high
https://js.foundation/	chromecache_98.2.dr	false	URL Reputation: safe	unknown
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	chromecache_97.2.dr	false		high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_97.2.dr	false		high
http://help.pendo.io/resources/support-library/installation/metadata.html	chromecache_98.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.213.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.126.62.129	autologon.microsoftazuread-sso.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.253.62.104	www.google.com	United States	15169	GOOGLEUS	false
104.18.4.175	global.localizecdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.5.175	unknown	United States	13335	CLOUDFLARENETUS	false
192.229.211.199	cs1227.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
18.211.106.230	hillsclerk.securityeducation.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.199.162.154	ingest.us2.signalfx.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417030
Start date and time:	2024-03-28 14:32:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hillsclerk.securityeducation.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@18/107@28/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.111.94, 142.251.16.102, 142.251.16.139, 142.251.16.101, 142.251.16.100, 142.251.16.138, 142.251.16.113, 142.250.31.84, 34.104.35.123, 20.190.151.7, 20.190.151.134, 20.190.151.132, 20.190.151.6, 20.190.151.70, 20.190.151.131, 20.190.151.133, 20.190.151.68, 23.12.144.110, 20.190.190.196, 40.126.62.132, 20.190.190.194, 40.126.62.130, 20.190.190.130, 20.190.190.131, 20.190.190.132, 20.190.190.193, 142.251.16.95, 172.253.63.95, 172.253.122.95, 172.253.62.95, 172.253.115.95, 142.251.163.95, 142.251.167.95, 20.12.23.50, 20.190.151.9, 20.190.151.67, 20.190.151.8, 69.164.0.0, 192.229.211.108, 13.85.23.206, 13.107.42.22, 142.250.31.95, 142.251.179.95, 142.251.111.95, 20.189.173.13, 172.253.122.94, 23.12.144.103, 72.21.81.240
Excluded domains from analysis (whitelisted): lgincdnmsftuswe2.azureedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, clients2.google.com, ocsp.digicert.com, login.live.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, lgincdnvzeuno.ec.azureedge.net, aadcdn.msauth.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, onedscolprdwus12.westus.cloudapp.azure.com, aadcdnoriginwus2.afd.azureedge.net, account.msa.msidentity.com, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net, logincdn.msauth.net, a1894.dscb.akamai.net, acctcdn.msauth.net, wu.azureedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, login.mso.msidentity.com, glb.sls.prod.dcat.ds
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15708
Category:	downloaded
Size (bytes):	5512
Entropy (8bit):	7.968035355108244
Encrypted:	false
SSDEEP:	96:G7tBbRd2YmPbYfuJeBaCkiw4vCM5257nrGunGwVHG0DW80tMBZX/m5nyZf:GDz2Rxiwd7nrGuGeG0DvBdyyZf
MD5:	98421BE6893CF3AA929C5F6C4A0C5C67
SHA1:	2BB411BB6B6C31AE02B81F199C90219717F718AF
SHA-256:	019D26044CCF18F979DFBB8677828FA36BF5CBFC529CECD942644CFE86D90D04
SHA-512:	3142C929754027BA755A6633B51C87C52F1C27B14686C70A22CAB66BD859840F6E7847E0ECA61F4E1B399EEABECA6D28B8A9487CED42D976A9F9397F7C0F6230
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js
Preview:	...........[}w.F....Bh..i3.M....>./.......&9...P,$U#......HH..N..I...s...~...h.............{.ij.x.....u....M.........#.........8.c'.B..o.9.6...L.....>L..{".....f.].j.N.,..i.?.6o..X=....O.-..o.5'p%6.....,py..'.p.]z.8..(.b>..=6.3.on.4'...6..d...A.X..F.($8...\ .../..Db4.iM....@....I...."........M...st ....k...D..k!.cM2K...... ..6...X.m..s.1.S.$...r.`.y....1..$."...J.sOp+..M."....Eh....G'....L55I.H...^2...a8=v...w.H...p.....G_.Zp.xU.g.P.5....^.E.w6...q.....B7.~..7...A.q..1....4.......Ev..r..iE311>~...=~W{]..!...,`.\|.wpY.0^.,.G.d1>NL.....5..........g3;.~..x.MbH...r.RA....2. ...E..Z..Lq...O..C]....~.w..4.P..\...$NL..;....[R0.8..[A.t ......\|.Ln..3H......g.q"n...\|g..4..g....w....l..[........q...llW..]....L.'....$..m....-...svg'......]..cl..N.`7.......7f=..F....2.....f.<.oyB..f)w.0<.N.y..T......Y.p].\......7.....Vo./e...K..3....:d.......g..H...}=..l.<.{..".s .g.Q..\|v..O#HM.r.b...7..`a.c..i..j..Zm.=..@w.%..q..-yBV91.4.z..Y.....

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 4730
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	7.880369527871966
Encrypted:	false
SSDEEP:	24:XWA5ryO5wXZPvzC+c7WQikVIPg2wTXmro3ecF/oqeXL9mlpr5Thtit:XWA1BEGfFikVI4bT2MOcOzBO7W
MD5:	6B0D2BCDD2E39B2CB0BDAB6597E44505
SHA1:	C7199742BB5F63AEC0FD2DE7003A8B1C795D78A1
SHA-256:	9BCEC3FDDE9BED6ABFDA1A875B596571E3DEFD078E2050DC1B2D85F4483CCAE0
SHA-512:	B373318A6EC9781F51273A2EF88B6E996552516D0FB3CEA77B0B4061C348E18EEA381FF2BA24928BB9B973FF0DA1C951A136B737E86B2AA9FEB289A4152B54B1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js
Preview:	...........W.s.6...B.>..m.B...M.%].p.u..9N..+.%.$CX...G..LH.....`......{$._.B....?.......v~u.........~\|.r;....T.1.....K.#....2......D.\|..C4.<B* (...xJ..J.J#....9...j..%....F'.....9\|..b\Q. .\|c-..L..0..4.........X!A<B..D&..wa#,..D.1.X.pQOK.V.q..(.8..R...M....R.!....u8......1.7..)..<I..l. o.4~....@..O..0%.S.1...q.L....}..2....L.<s....AHD..!y...F1.1..H.......J.fm.....JT.U..N..T...V.T,... .....>O&!..........g.V..>-s.F.d.....0e...f..s..f...g.......'?..M...2..iFF1..>B........'2(^_..o.V.=N...*...0....-.J..G.dcx..l..J..S..p..5c..=..o2[./..%...iG..k..V...n"......T.K9..h.z=......fTy..Jf..z...b..;W.@<._.xJz.p...:..K....e.n...\|....%Jq6...:.ns7..(. S..Y.z..}.[.)f...Hc.H.l/...3.....=.D..9...$UN....0.... Z..~\p..m.V.....i....... ..^..Ves.....xw......x..i.....G.0&.......S...0+~.E('....+=.8.T.E.V......./.F........-..4b.L#<!..Cz..b...SCH..kx#o4:....Z?8.Uk.f.U.V..Z.....?..7...wX;l5....A.W.>..[..4.5WN./(.W\|Y......../.S.%........[.N..;.8#...<...)

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-400.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12877), with no line terminators
Category:	downloaded
Size (bytes):	12877
Entropy (8bit):	5.0106993563606395
Encrypted:	false
SSDEEP:	192:kLk9gvHjwr6T7eA+AC7Yz+zqRc+wH6A0htudp1dpcX:LgvHjwgeA+AuYKD+udp1dpcX
MD5:	A951D76BCE4E0EB0F86AE64748BA6FDA
SHA1:	57991CBA11163C6FADE50148FEABEA124E53C848
SHA-256:	E49335FCA147011A9057787F00204CA092FAEDA280B09452350BF225EECD82DA
SHA-512:	9DEE0B1DE9A312E3BDBA15674747CD10EE71E2D0DEDB3B0423A63923F046F578434AFAFAB4E8041A6926540EEC663BF654543E132DED5278CC7C153F9F02B0DD
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/platform-ember/vendor-a951d76bce4e0eb0f86ae64748ba6fda.css
Preview:	.vertical-collection-visual-debugger{height:100%;position:fixed;z-index:1000;top:0;left:0;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:left;-ms-flex-pack:left;justify-content:left;background:rgba(50,50,50,1);width:125px}.vertical-collection-visual-debugger .vc_visualization-container{-webkit-transform:scale(.25);transform:scale(.25);left:0;position:relative}.vertical-collection-visual-debugger .vc_visualization-screen{position:absolute;background:0 0;-webkit-box-sizing:content-box;box-sizing:content-box;border-top:2px dashed #ff0;border-bottom:2px dashed #ff0;width:500px}.vertical-collection-visual-debugger .vc_visualization-scroll-container{position:absolute;width:500px;background:rgba(100,230,100,.65)}.vertical-collection-visual-debugger .vc_visualization-item-container{position:absolute;width:500px;background:rgba(255,255,255,.15)}.vertical-collection-visual-debugger .vc_visualization-virtual-

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5559)
Category:	downloaded
Size (bytes):	18153
Entropy (8bit):	5.41342084503498
Encrypted:	false
SSDEEP:	384:evTdjRE5IwHQ5MLJWBwP+IdMyhtMJgnlkxoPWjr+:KdjRE5IwwMLJKwP+gzt2mGxoPi+
MD5:	713D6715A1F01D70776F9FE10CA8E9E9
SHA1:	545E49DF1F97EA15D6BD08E7B23B60704A831C94
SHA-256:	18B9E91884D30CFBE839F621D287F36E7E07C09BB4415ACD7DF95DF861EF0877
SHA-512:	A16DE35897DBDB493B91A6BEB82A54DB7DF9ACC5E138303BB2DFEE7A30719A5FC96171686AFAA5332FCB177017298743943B459CC6EBB03A8857041C4E30634A
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/platform-ember/chunk.143.6d853b71ed5687725e31.js
Preview:	var __ember_auto_import__;(()=>{var e,s,t,n,o,r={10769:(e,s,t)=>{var n={"./af":27359,"./af.js":27359,"./ar":4517,"./ar-dz":24822,"./ar-dz.js":24822,"./ar-kw":61014,"./ar-kw.js":61014,"./ar-ly":66620,"./ar-ly.js":66620,"./ar-ma":29216,"./ar-ma.js":29216,"./ar-sa":79850,"./ar-sa.js":79850,"./ar-tn":56411,"./ar-tn.js":56411,"./ar.js":4517,"./az":51548,"./az.js":51548,"./be":41500,"./be.js":41500,"./bg":95819,"./bg.js":95819,"./bm":71439,"./bm.js":71439,"./bn":60810,"./bn-bd":19435,"./bn-bd.js":19435,"./bn.js":60810,"./bo":90004,"./bo.js":90004,"./br":29716,"./br.js":29716,"./bs":66031,"./bs.js":66031,"./ca":48618,"./ca.js":48618,"./cs":83796,"./cs.js":83796,"./cv":37026,"./cv.js":37026,"./cy":87562,"./cy.js":87562,"./da":99570,"./da.js":99570,"./de":75382,"./de-at":92965,"./de-at.js":92965,"./de-ch":84854,"./de-ch.js":84854,"./de.js":75382,"./dv":37765,"./dv.js":37765,"./el":99720,"./el.js":99720,"./en-au":15820,"./en-au.js":15820,"./en-ca":85831,"./en-ca.js":85831,"./en-gb":72549,"./en-g

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 443045
Category:	downloaded
Size (bytes):	120844
Entropy (8bit):	7.99744633511201
Encrypted:	true
SSDEEP:	3072:TlQbKEdUx1YpkckNWPql4u6PZiHHuqDJNviqb:TlQePx3cEWVrP8nuqDfiqb
MD5:	714941E90C4A236DB6918F602672C07D
SHA1:	9B1D57F7998F6C9FB2DA297AB5EEF3E6D85653E8
SHA-256:	9DE5D02807E988FC7270F2F2F06803A8D896CB7C224DFF1AE851C51E5D794500
SHA-512:	B5153018D3FFD4A5CEBE52B4A09A0431B5977629E517A826705E2CA91F5731641B6E8B6B1777315C0C0A8EC5998BAB6382DD1DB22B42A2DB9255DF69AB4485AC
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js
Preview:	...........m{.8....~.......%..J...'..v.&Nu.n.G.hG.Y.Jr^.....@R.l9U5.w..s.....I..A....?........_et3...\.Tn>.^.U...?..7.........y....X.....y.(.Dq...(.G....2..c...8.U..V....M.J.')... z.T...\9q.Z9...~...S?..n4....i%.R.e.'....>.U.......>T.}7..h.Vb.2...I..^lB.81.$,.L.8}.x.+#...&..o1!p@......u.......8_@..L...u...2..C%...B`........,.v0=..P..nZ/t3a...........+A.+.e..I.Z..N.$....9....S...........L..$..s...R..~....?.(l..L.av....a.x.C.......>,.u7.}..4p.@.}..y..}ty..g...qZY....0..E3..e[W.O......K....4?./........."t...-..JX..+..O.._....o.;=.?....w...Q=`.4}8H..j...&w...gM.F?...9.?8..s.$.3`...c_ut......w..n}.H......t.a...@..[.k.Ue..Pe..wv....ow......[O..IZ.Uk+.A{...{.hY.. #C.d.'U.6...,].a...Oa"&.T..${.[..X;..2..ju .1,D8...........c.i.......zoo.....d$8..-%lu..7...vl..&4.j.C..-d..H=.c .....>.A'Ey..$.".K.q...Sq6c..q.....S1..t..8....>.....x..e..`Xb.S.S..}=$.;.y.Z...n."..)....}9.R..._..a-..L...K)U....+yH.H.W5.\......\|..e.S...$...7......@Z....).2%g<"....

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	90402
Entropy (8bit):	5.129625902274476
Encrypted:	false
SSDEEP:	768:UD0DWv23CW1lDGWDcoq7u2E0qAAe8usvHj+uewkI33FFvXdbbRAILHrK1mGgE7ik:UD0DWv2D1nDcoqMVzK1cD8t9
MD5:	B0D9409BBD26B8B65C567898D5446B95
SHA1:	3AAB7C63B7B0DEE51A97A2725A4F635DD7F44A22
SHA-256:	55DA314AAA8E458CF9AC380DCAD0415C4A41BBFE8E2362D90F0EF8469133B927
SHA-512:	0841A0373AD6B18C29A5184D3C4D90584CD4A3199CE47EE6AC92DD427BB4DF0886C92700EF72381DDF2D4C9E651BED84995F39CF2CD184F5F7608458A658F3A8
Malicious:	false
Reputation:	low
URL:	https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/g?v=8209&l=en
Preview:	[{"_id":"project-settings","settings":{"translateMetaTags":true,"translateAriaLabels":false,"translateTitle":false,"showWidget":true,"customWidget":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","position":"right","positionVertical":"bottom","border":"","borderRequired":false,"widgetCompact":true},"widgetLanguages":[],"activeLanguages":{"ja":"...","fr":"Fran.ais","es":"Espa.ol","de":"Deutsch","en":"English"},"enabledLanguages":["de","en","es","fr","ja"],"debugInfo":true,"displayBranding":false,"displayBrandingName":false,"localizeImages":false,"localizeImagesLimit":false,"localizeAudio":false,"localizeAudioLimit":false,"disabledPages":[],"regexPhrases":[{"phrase":"#Tenants: <var count-of-tenants=\"\"></var>","candidate":"#Tenants: ","variables":["<var count-of-tenants=\"\"></var>"],"regex":"^#Tenants: ([\\d ]+)$"},{"phrase":"#<var percentage-repeat-click=\"\"></var>% of all users have clicked on multiple campaigns","candidate":"#"

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2972)
Category:	dropped
Size (bytes):	12393
Entropy (8bit):	5.181457102579648
Encrypted:	false
SSDEEP:	192:qGbLcVFKcymlKFWCwvFNeVOFlHAzraViFa6ychTRSHyc4IVycmz/9PycN4qaNlZ6:BQcBPkK1NGzf+z/
MD5:	6B9E2A5AE6EC6FB2100430DA2C329E4C
SHA1:	AC66FCD917EE8ED8D73662119BD04CACD905C612
SHA-256:	5D1CBB16D3E0660037D1BB10DE2D07CD55AE94E3380BFCECE6AED5B9F1D1B2EC
SHA-512:	2D07810E3EAA3B8940E819E7D3EFFFE77C849920BCBF0268734F8AA186F30CA4709AF9CE94649F19E8D761D13931917A94C73206947AF485079F7B04AA5F2173
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <title notranslate>Security Education Platform</title>. Third party licenses used in this app can be viewed by visiting /licenses.txt -->. All third-party licensed modules used without modification -->. <meta name="description" content="" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=2.0". />. <script src="/js/ie10-4d8fefae653b9ade02759391caba3c56.js" type="text/javascript" integrity="sha256-0CObdF+QINPwN4WxMOY3AgL9J1l+/7Qzre1jOn5aoxE= sha512-lUXNPLUv57/hbEKKze+o9wpImvM7JX0DN7NZQorg8voQt+bOUKbOW0UFOjA3taQ6R4bftnp5ZS14wE1/dAk+bw==" ></script>.. .<meta name="platform-ember/config/environment" content="%7B%22EmberENV%22%3A%7B%22EXTEND_PROTOTYPES%22%3Afalse%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_T

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 71, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5850
Entropy (8bit):	7.774206445099974
Encrypted:	false
SSDEEP:	96:6YkknmWIM8p/uHAUvgn8u0IQaXTRotlp1DVLTCxTAPF23Q2bnF1R/YpxN6w:bkkndFg2XaDR4z1lCxQF2FnF1RwpxH
MD5:	F667124959DF088360A541A25AE7DDA8
SHA1:	B2DED73659F4CD8989780E17CADCF3E32CCDE048
SHA-256:	B5368A5A9AAC3F3E04C47D93805D6A3962F38108FA26A391C9BB2BCBBEC531A0
SHA-512:	87C4E4EDBBDC57EBCC2B77DD70532E3D965B7BCE4BACFC86B02163324346ED02000F7750CBE0544459E598D0F35E6508ACEA3E4BF601DBD8899A66B4FF769159
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/wombat-style-guide/images/logo.png
Preview:	.PNG........IHDR.......G.....B.......pHYs.........g..R... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2019-01-17T14:14:30-07:00" xmp:ModifyDate="2019-01-17T14:25:57-07:00" xmp:MetadataDate="2019-01-17T14:25:57-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:6a4895a3-09a5-4d35-a9e2-8162ff42110f" xmpMM:DocumentID="xmp.did:6a4895a3-09a5-4d35-a9e2-8162ff42110f" xmpMM:Ori

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9852, version 1.0
Category:	downloaded
Size (bytes):	9852
Entropy (8bit):	7.973765762438551
Encrypted:	false
SSDEEP:	192:ARQCW64dMMzKowEu9zj3Y4kf+6o0/QGYpQPfQ8nzh:OF6u3q+6+CfQOh
MD5:	89FE561B03A7E0CA54755CE4E3965636
SHA1:	4BBCAF90DB587FFDB12F8EA4F4980D2346439A8D
SHA-256:	344FFBE54608225F8CB560A16C806D08BFA62FD77219303B7CAEB2AF7984CAE1
SHA-512:	B8009EC4A64C9A8B868B3A6D32C799F6F30FD3CD1664AA9BB7800CDF297AA16E0AC1066A10C8EA495D3DB8CC4A56F1FC2AE1FF18BA1976D35DDAEC13CE4DC103
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/wombaticons.woff2?00965ec43b6dcef594e13da207312244
Preview:	wOF2......&\|......cp..&+..........................&.V.....X.+.6.$..8..^.. ..:.....U.T...n.=F....a..A.=M..j.J....Nz......!0(.UdP_S...G.Z..F..,.V..GSO........Q........A.u.....w.S..[..f.C.....t.}23o,y3I.NiJ2. .N...IZ.[J..E6k^.f...EW.............:......7k6....O[:.Ci.@"....../.......W.....Vq..O.L.EE..62{a......X~....~.a.s..E..!........@.....n.H...I...La.....\|?..^>..V.!.5..o.....J..~.>..%r<&.wwp^.#."..e..I.{U....wd.!.. .i....._6/k..U5...i2.L29...z.y.6.......U..t[....".u.@}..R%.cT5F ...........tz.a.0.6.N......:9d+..`9I[.%.....`...)).........D..a.(.~kUto...k.w.t.#..""".$..c...=.....P..:..(b..{M.y.8..(A=w".{6z;........Y..r.L(...2......H.H[.R.lT>UM.%-.]...s.]..}?>..q..H..t.u.~...{....#.+Q..>....2..$..\|....6m..+.'.5=k.....H...?.......Iu..\/r.?u.\...b.$...d..Vw....\|.v#.......x.U.V$....&...Ul!X..........ol....B...O..D../$l3aw..........M(.:P.].v...3.5..m,.......T*..%u~.Bn.A.3.)l.v`.>......K.obL..{QF........]!}s.....X4....}Q..%4...^..%.....ht..il.!@..a.F.T8.M..U

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2972)
Category:	downloaded
Size (bytes):	12393
Entropy (8bit):	5.181457102579648
Encrypted:	false
SSDEEP:	192:qGbLcVFKcymlKFWCwvFNeVOFlHAzraViFa6ychTRSHyc4IVycmz/9PycN4qaNlZ6:BQcBPkK1NGzf+z/
MD5:	6B9E2A5AE6EC6FB2100430DA2C329E4C
SHA1:	AC66FCD917EE8ED8D73662119BD04CACD905C612
SHA-256:	5D1CBB16D3E0660037D1BB10DE2D07CD55AE94E3380BFCECE6AED5B9F1D1B2EC
SHA-512:	2D07810E3EAA3B8940E819E7D3EFFFE77C849920BCBF0268734F8AA186F30CA4709AF9CE94649F19E8D761D13931917A94C73206947AF485079F7B04AA5F2173
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/favicon-32x32.png
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <title notranslate>Security Education Platform</title>. Third party licenses used in this app can be viewed by visiting /licenses.txt -->. All third-party licensed modules used without modification -->. <meta name="description" content="" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=2.0". />. <script src="/js/ie10-4d8fefae653b9ade02759391caba3c56.js" type="text/javascript" integrity="sha256-0CObdF+QINPwN4WxMOY3AgL9J1l+/7Qzre1jOn5aoxE= sha512-lUXNPLUv57/hbEKKze+o9wpImvM7JX0DN7NZQorg8voQt+bOUKbOW0UFOjA3taQ6R4bftnp5ZS14wE1/dAk+bw==" ></script>.. .<meta name="platform-ember/config/environment" content="%7B%22EmberENV%22%3A%7B%22EXTEND_PROTOTYPES%22%3Afalse%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_T

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 223759
Category:	downloaded
Size (bytes):	54325
Entropy (8bit):	7.996017457525811
Encrypted:	true
SSDEEP:	768:MBOXdNQNgHZp9Ga0EqoitKVFF9dMVtakANyFeDpz3ZSgaDpk4JGUISrX+pk7RU/P:bDQNg5pFneONYu9ZpfUv7+m7aITS2Du
MD5:	799F880143F17E47C4EFDBB3FF35A54C
SHA1:	8CECC74EB422322F78EDE1111F175A28725CCA9F
SHA-256:	EA70CC2977F4DEB5236041A7A0628FA671FB8AD20A5E9E3FD6885A11359EF2FE
SHA-512:	46E811AA3D03023596B47DB39B6FABCC1A4B7388C7F0A187A4C23B024695593702A70227F5B770174A258A265A48D4F87EF01281210229E51022E9BC6948214B
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
Preview:	...........k{.F.0.}...gF.L."..eR..v.y.O....g...............~...@....f<...F./...u...;............x.y.C...y...sx.....^=}.....N.W.I.Y$.....".w....$..\|..a...+.7O.eg.gW..2...8..2)J..<^f.:.4..;....<}.....ZK.......5..,;iV&Q...9......;U:....$....DyVd....Q...N......N..".;.,//.8...X..ZP7......&shpA...a.I.C\U0i.&K..}m..1..9.N.u....^.'I/:......r...a^Ee.f..oq..e'..y..U..;...T(...<L..;X.."..8-}.^L.._w.....f.w..V.x.kK..K../.A..[....oE....G..ao0...\........Qv.7..eX..70.....\|.s.}.#...:..t...$.}=....s..g.}Q..........SO.....p.%..v..\|.Fo.. ..,e.......=;;..7....J#......{7o....;.........<..?.....G._..}..(..k?....2.......J.E.z.^.O.....}...XWe.....O...,C...+......O.r..he.............$Y.;..?).y....&.$..u..m.~.Z...2./..\|9..(.m....W.8.?QO}.....]....Y..z..=..2........>..8...87.&..ajn.m.E.,.<...n.t..`......\|..s7..v.w.z....d{...m.^..Y..AA...,C^...:0.~A.]....,...........6xR..8.p,./?..~v.+../c..Z...$.....Ysg....U....H....._q....o..acC...fpv.fb.....\|.?.-V

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2972)
Category:	downloaded
Size (bytes):	12393
Entropy (8bit):	5.181457102579648
Encrypted:	false
SSDEEP:	192:qGbLcVFKcymlKFWCwvFNeVOFlHAzraViFa6ychTRSHyc4IVycmz/9PycN4qaNlZ6:BQcBPkK1NGzf+z/
MD5:	6B9E2A5AE6EC6FB2100430DA2C329E4C
SHA1:	AC66FCD917EE8ED8D73662119BD04CACD905C612
SHA-256:	5D1CBB16D3E0660037D1BB10DE2D07CD55AE94E3380BFCECE6AED5B9F1D1B2EC
SHA-512:	2D07810E3EAA3B8940E819E7D3EFFFE77C849920BCBF0268734F8AA186F30CA4709AF9CE94649F19E8D761D13931917A94C73206947AF485079F7B04AA5F2173
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/favicon.ico
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <title notranslate>Security Education Platform</title>. Third party licenses used in this app can be viewed by visiting /licenses.txt -->. All third-party licensed modules used without modification -->. <meta name="description" content="" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=2.0". />. <script src="/js/ie10-4d8fefae653b9ade02759391caba3c56.js" type="text/javascript" integrity="sha256-0CObdF+QINPwN4WxMOY3AgL9J1l+/7Qzre1jOn5aoxE= sha512-lUXNPLUv57/hbEKKze+o9wpImvM7JX0DN7NZQorg8voQt+bOUKbOW0UFOjA3taQ6R4bftnp5ZS14wE1/dAk+bw==" ></script>.. .<meta name="platform-ember/config/environment" content="%7B%22EmberENV%22%3A%7B%22EXTEND_PROTOTYPES%22%3Afalse%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_T

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-500.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16944, version 1.0
Category:	downloaded
Size (bytes):	16944
Entropy (8bit):	7.988141513824791
Encrypted:	false
SSDEEP:	384:fk343PBgJa2WKzrDDPixmD+OxWHBVPH3T7Mn/nu8E:M+C1rDDiU6SWHr3/0/u8E
MD5:	D8BCBE724FD6F4BA44D0EE6A2675890F
SHA1:	D276FD769BCB675F8EFE42EBE3003C1D3255F985
SHA-256:	AA4650A411DFE1C9BEB794FFAF08C7909CDFBB05672D79B3A9976672CBBA75EC
SHA-512:	23F757EA3AFE6FEBE1E8EA935F0EE8690E1B1B1DA511788B529CC2FC38F7E454153CDBA6F84A6A0E19B294E5311625A03617CF98AAC150F17B88A53F3ED8B72A
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-400italic.woff2
Preview:	wOF2......B0.......t..A..........................d..@..J.`..L.R..<...........^...x.6.$..6. .... ..D._.%.....H.Q9.d..xn'.\|.6.E.q.......cr2D!u...?T...M.6w;.;.4z..."..f..g#H.E.I../...U....4.P...5D...."..O...e....oSh{..=..D....\|pNu../...#4.I...../..n.I1..J@[V..0..I.....5.s.%..Q.b. )-.-..%GUK.'.B......(."...Q....64.M...._F.N.S......=...ve..t.z.P'...l.\..I2...;.K....f.../yN....H..S.6k2.d../........-..gS_....9....z.....3...XgO.R.$l(......A...u..x...iv.....S....x..........s4;Gs.....N....B.URQ.........k..P.'..m~N;..@....4....u...s..R..; {v..`W.....;I.Z......M'+h_...@T5..KQ.-...h-.?b.,.. .....n@%...^.Quu5.e...Q5..R...u..-.......'..;...+...9..]Tp.p....%1.....B...t.Ar..U..].*..sS... ..X,.7.E.....HRyv..Uv.X...1.Ql..M.=..~...._.ku..2.$...wu.C.{..C..6.;(A.(C.(K.(W..@..H..]..E.@..X.....P..X.1.pG.kf...J.....E......0.....k"...+.!NM.j.......P...6...F..:.a\h#.`.Nzgt{..Y\..C.O...hJ%.,0...T..6:~..i.8.g%..8S?.p.(.X.;...s."%.T.R.A...L.2c.....G.\..P.Z.:.M.6c.y..]

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90402
Entropy (8bit):	5.129625902274476
Encrypted:	false
SSDEEP:	768:UD0DWv23CW1lDGWDcoq7u2E0qAAe8usvHj+uewkI33FFvXdbbRAILHrK1mGgE7ik:UD0DWv2D1nDcoqMVzK1cD8t9
MD5:	B0D9409BBD26B8B65C567898D5446B95
SHA1:	3AAB7C63B7B0DEE51A97A2725A4F635DD7F44A22
SHA-256:	55DA314AAA8E458CF9AC380DCAD0415C4A41BBFE8E2362D90F0EF8469133B927
SHA-512:	0841A0373AD6B18C29A5184D3C4D90584CD4A3199CE47EE6AC92DD427BB4DF0886C92700EF72381DDF2D4C9E651BED84995F39CF2CD184F5F7608458A658F3A8
Malicious:	false
Reputation:	low
Preview:	[{"_id":"project-settings","settings":{"translateMetaTags":true,"translateAriaLabels":false,"translateTitle":false,"showWidget":true,"customWidget":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","position":"right","positionVertical":"bottom","border":"","borderRequired":false,"widgetCompact":true},"widgetLanguages":[],"activeLanguages":{"ja":"...","fr":"Fran.ais","es":"Espa.ol","de":"Deutsch","en":"English"},"enabledLanguages":["de","en","es","fr","ja"],"debugInfo":true,"displayBranding":false,"displayBrandingName":false,"localizeImages":false,"localizeImagesLimit":false,"localizeAudio":false,"localizeAudioLimit":false,"disabledPages":[],"regexPhrases":[{"phrase":"#Tenants: <var count-of-tenants=\"\"></var>","candidate":"#Tenants: ","variables":["<var count-of-tenants=\"\"></var>"],"regex":"^#Tenants: ([\\d ]+)$"},{"phrase":"#<var percentage-repeat-click=\"\"></var>% of all users have clicked on multiple campaigns","candidate":"#"

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 609680
Category:	downloaded
Size (bytes):	161862
Entropy (8bit):	7.9984032722098695
Encrypted:	true
SSDEEP:	3072:iDtFDFBLO2HEdtsl9XeDWbMQ40OzKEhqG9sXKWdkauuxpRRq1NK:oXBS2HOSl9XeKUDzkK2huurRso
MD5:	EB6A055A72B4F1993BEC800D3C68B6B6
SHA1:	979A945885E56B2C61900DE2712AAE38B32DDFCB
SHA-256:	78E21E121BC7A36B790B6F57CEE83E31B07E856C7F1DE054B723F7DC8F60A925
SHA-512:	4684D470939A49DFDC21CDB580AA3FD9E4B5C16BF900E58327EAAC85B281D5426F3551D1F71B2435EBC49BBCC13BBE55F86B6F0C4378F9C8AB9685E670C2DA22
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/js/reset-password-signinname_en_8qvvLKBP0Aes1nPeyZ0lbw2.js
Preview:	...........mw.H.(......%.t..........a....''K.....$'.....K.Jr.g.}....[.VwuuuwUuU...X_...i:.Y)..l....J.lm>..d.R......<)...o..Y.fY2.'2.~..^>.{s...Vk.q..Y.,.......I.&E%2Q.<.~.p.. 2..Mx.Y`CU......(.,x...^......y.U.k..j..h.'F...H..r.,..."..sZ........d.[+AYEz!.UR.."...E^.xg..._.Rs.2.T..R..u.Z...:WE...'.,L...l1.YU.CZ]QeI\|}..~.O..yR...p;l..z9..6.dx].jQdkE7-_.Y.Y.$...n...&_N.....eR.....U!.1..'..`.Nl.8N......'9..PK.I.D..(u>...e...RL._.^.N.i)..we9.y..b.x.G.`".t.........P.D..u:.:H..Yg=f.e.}.s"..A...\|=..66...>]..$...dc#H...=J.`.y!..E....(.Bq.?Y(fqo0{.t.....3n.4N.f..hy=H.Na..........nlL!...W.<..i8......u..%.0:....%.STR-....~...lp.9.....5~x.66:%%./.i%...hh[3...r....P...$...]...8.M..N.1.j.".....h........bh..N!..+9.8.;a........V..-..B.`=h+4).3...0.......T%..Q{.E>Ia..b.{b...E:..z.a...Sk....s..TR^e#..~.f..F...../=n...Z'.....0.[.(.).b;0.n+v2MK.m..Z..`yS.....E..+U.j-r:.G.UK}q...E6N..4...........Z...........c;..q..j............). .kJ...dP^....J1B.#.T..BX

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1390
Entropy (8bit):	4.59885945838392
Encrypted:	false
SSDEEP:	24:FKb2tHKbv1/EiRBMr4DpJ0ICsIShWI00ImZ32Ii8esIgriI/ScINTIL:VyZQnsnhWb0Z218F8KJ4TO
MD5:	10A089B88DC82AE5BFD300D96E73D0CE
SHA1:	D8853DB6363AB2C643D381CD34589EF5224E4E55
SHA-256:	6D0AA63AFDF0E65C17E3FDEB8B3B04505F3538B72497640652F8614CCC76618F
SHA-512:	C0B016C1F969D00A5A9BB6B8AD21EED723F75392C1874E389F4D8DCCF32B6A6FB004A4FE918380827FBFECA3DD6D089B19D91A9039A4E75633EEF674B04DFDA1
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/manifest.json
Preview:	{. "name": "Proofpoint Security Awareness Training",. "short_name": "Security Education Platform",. "description": "Proofpoint Security Awareness Training Platform",. "dir": "auto",. "lang": "en-US",. "display": "standalone",. "orientation": "any",. "start_url": "/?homescreen=1",. "background_color": "#fff",. "theme_color": "#fff",. "icons": [. {. "src": "/images/android-chrome-36x36.png",. "sizes": "36x36",. "type": "image/png". },. {. "src": "/images/android-chrome-48x48.png",. "sizes": "48x48",. "type": "image/png". },. {. "src": "/images/android-chrome-72x72.png",. "sizes": "72x72",. "type": "image/png". },. {. "src": "/images/android-chrome-96x96.png",. "sizes": "96x96",. "type": "image/png". },. {. "src": "/images/android-chrome-144x144.png",. "sizes": "144x144",. "type": "image/png". },. {. "src": "/images/android-chrome-192x192.png",. "sizes": "192x19

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55021
Category:	downloaded
Size (bytes):	15778
Entropy (8bit):	7.986972727572025
Encrypted:	false
SSDEEP:	384:UwXl87i4naaFtPESJ2DWOq1IcQSIHITlwd:UwXW7i4naTSOAkd
MD5:	0968BAC072F4DA3F1B3A6AD508025E94
SHA1:	75256B8965E8C571650745D8C393996E627DF5B8
SHA-256:	E865E78A66B5C75135E27CB03B8F6FA2281C170F454A505CC4F0D97F3C733403
SHA-512:	E00E545F10ABEF5D082C444278E2F6CC6E28A50743E8066D54B92CBC2E8F42C569441BFA76529C3AB415C2ADDD6209BE7DDD8F93F20BF29725E2E24483FAEF39
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9...B.AwUeeeeeefee..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<..j..N.....0.......=..ox/+...9.sB..p.q.ai...?.....qw.D.X..b..?.bOD.x.B1..X..`.N..b..E...%JWg..x8.ys..:...I.....b1...q.......[..a..7q..N........._..4....&.. ........m&6.F.\.@.e.B..`.'.....0............]/.........`..iZ6......./f8..BCz_...i....MQ>..E,/x>v......{.........._.........Z.rP+......e..R.\.Z.u..3@./.oJ7.'.......%.;.WP.9.b..z._..b....0......X...Ro^k.lI..t..K7~.ep.`.)......'."".."....../..S....M..B5nEc2..g..m..\|f.{...pbi(.0.@[_Lc.Z.....U`./!..@.....p.-..kQ@T..8...-...0.....AX.D.?...".....5.NE..\...VQa.....,......?..M.0......_<......C..fOq..bz'..z/BF.;&.K......%.....g........f!..^.:Z...g...j...7.._........S.2/.2.n.....>.<P!!.Bv..J........e!d....B.Ra$.......N........> f.C.....^.D.-.e.c+...............!....$.9x...{.....p~._.0.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 71, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5850
Entropy (8bit):	7.774206445099974
Encrypted:	false
SSDEEP:	96:6YkknmWIM8p/uHAUvgn8u0IQaXTRotlp1DVLTCxTAPF23Q2bnF1R/YpxN6w:bkkndFg2XaDR4z1lCxQF2FnF1RwpxH
MD5:	F667124959DF088360A541A25AE7DDA8
SHA1:	B2DED73659F4CD8989780E17CADCF3E32CCDE048
SHA-256:	B5368A5A9AAC3F3E04C47D93805D6A3962F38108FA26A391C9BB2BCBBEC531A0
SHA-512:	87C4E4EDBBDC57EBCC2B77DD70532E3D965B7BCE4BACFC86B02163324346ED02000F7750CBE0544459E598D0F35E6508ACEA3E4BF601DBD8899A66B4FF769159
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......G.....B.......pHYs.........g..R... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate="2019-01-17T14:14:30-07:00" xmp:ModifyDate="2019-01-17T14:25:57-07:00" xmp:MetadataDate="2019-01-17T14:25:57-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:6a4895a3-09a5-4d35-a9e2-8162ff42110f" xmpMM:DocumentID="xmp.did:6a4895a3-09a5-4d35-a9e2-8162ff42110f" xmpMM:Ori

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2972)
Category:	downloaded
Size (bytes):	12393
Entropy (8bit):	5.181457102579648
Encrypted:	false
SSDEEP:	192:qGbLcVFKcymlKFWCwvFNeVOFlHAzraViFa6ychTRSHyc4IVycmz/9PycN4qaNlZ6:BQcBPkK1NGzf+z/
MD5:	6B9E2A5AE6EC6FB2100430DA2C329E4C
SHA1:	AC66FCD917EE8ED8D73662119BD04CACD905C612
SHA-256:	5D1CBB16D3E0660037D1BB10DE2D07CD55AE94E3380BFCECE6AED5B9F1D1B2EC
SHA-512:	2D07810E3EAA3B8940E819E7D3EFFFE77C849920BCBF0268734F8AA186F30CA4709AF9CE94649F19E8D761D13931917A94C73206947AF485079F7B04AA5F2173
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/images/android-chrome-144x144.png
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <title notranslate>Security Education Platform</title>. Third party licenses used in this app can be viewed by visiting /licenses.txt -->. All third-party licensed modules used without modification -->. <meta name="description" content="" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=2.0". />. <script src="/js/ie10-4d8fefae653b9ade02759391caba3c56.js" type="text/javascript" integrity="sha256-0CObdF+QINPwN4WxMOY3AgL9J1l+/7Qzre1jOn5aoxE= sha512-lUXNPLUv57/hbEKKze+o9wpImvM7JX0DN7NZQorg8voQt+bOUKbOW0UFOjA3taQ6R4bftnp5ZS14wE1/dAk+bw==" ></script>.. .<meta name="platform-ember/config/environment" content="%7B%22EmberENV%22%3A%7B%22EXTEND_PROTOTYPES%22%3Afalse%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_T

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2972)
Category:	downloaded
Size (bytes):	12393
Entropy (8bit):	5.181457102579648
Encrypted:	false
SSDEEP:	192:qGbLcVFKcymlKFWCwvFNeVOFlHAzraViFa6ychTRSHyc4IVycmz/9PycN4qaNlZ6:BQcBPkK1NGzf+z/
MD5:	6B9E2A5AE6EC6FB2100430DA2C329E4C
SHA1:	AC66FCD917EE8ED8D73662119BD04CACD905C612
SHA-256:	5D1CBB16D3E0660037D1BB10DE2D07CD55AE94E3380BFCECE6AED5B9F1D1B2EC
SHA-512:	2D07810E3EAA3B8940E819E7D3EFFFE77C849920BCBF0268734F8AA186F30CA4709AF9CE94649F19E8D761D13931917A94C73206947AF485079F7B04AA5F2173
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <title notranslate>Security Education Platform</title>. Third party licenses used in this app can be viewed by visiting /licenses.txt -->. All third-party licensed modules used without modification -->. <meta name="description" content="" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=2.0". />. <script src="/js/ie10-4d8fefae653b9ade02759391caba3c56.js" type="text/javascript" integrity="sha256-0CObdF+QINPwN4WxMOY3AgL9J1l+/7Qzre1jOn5aoxE= sha512-lUXNPLUv57/hbEKKze+o9wpImvM7JX0DN7NZQorg8voQt+bOUKbOW0UFOjA3taQ6R4bftnp5ZS14wE1/dAk+bw==" ></script>.. .<meta name="platform-ember/config/environment" content="%7B%22EmberENV%22%3A%7B%22EXTEND_PROTOTYPES%22%3Afalse%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_T

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	90402
Entropy (8bit):	5.1295599867897055
Encrypted:	false
SSDEEP:	768:UD0DWv23CW1lDGWDcoq7u2E0qAAe8usvHj+uewkI33FFvXdbbRAILHrK1mGgE7ie:UD0DWv2D1nDcoqMVzK1cD8tD
MD5:	3547502C80B5D31848620538CEF2F4DE
SHA1:	DDC0AD4C8404C555D406F4186FE04A461011063A
SHA-256:	C7E67D837D9EBE0238D3213AE4A6CFF5ACA16707BFC8A45AAAA11340FBBEEA5D
SHA-512:	691441ECCC178587AC16C39567949450A7E34C560AFA0BEB5BCDE174938C8BC5229B2F3C9BC690BF79FCC791A38DE4341E1C3377143200FAB2DFE9D8B85D0609
Malicious:	false
Reputation:	low
URL:	https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/g?v=0&l=en
Preview:	[{"_id":"project-settings","settings":{"translateMetaTags":true,"translateAriaLabels":false,"translateTitle":false,"showWidget":true,"customWidget":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","position":"right","positionVertical":"bottom","border":"","borderRequired":false,"widgetCompact":true},"widgetLanguages":[],"activeLanguages":{"ja":"...","fr":"Fran.ais","es":"Espa.ol","de":"Deutsch","en":"English"},"enabledLanguages":["de","en","es","fr","ja"],"debugInfo":true,"displayBranding":false,"displayBrandingName":false,"localizeImages":false,"localizeImagesLimit":false,"localizeAudio":false,"localizeAudioLimit":false,"disabledPages":[],"regexPhrases":[{"phrase":"#Tenants: <var count-of-tenants=\"\"></var>","candidate":"#Tenants: ","variables":["<var count-of-tenants=\"\"></var>"],"regex":"^#Tenants: ([\\d ]+)$"},{"phrase":"#<var percentage-repeat-click=\"\"></var>% of all users have clicked on multiple campaigns","candidate":"#"

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084
Category:	downloaded
Size (bytes):	20314
Entropy (8bit):	7.979540464295058
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:9CGEiL/w7R8DW9Z5B6AasTv37T9Q
MD5:	92A840DC3D177339DAE03FEDF22A22B5
SHA1:	C1C9A6E6442388D07A9D9D72C12DA25094D6920F
SHA-256:	4A986BA8875F22A0EABC356112A6790F90E114ADB72EAEC4632E03812EC1EDE4
SHA-512:	98C705395DD249501D8069A03E0068BC9CCF4F2D139BEC63A00564C69CD21C05CB25CF56BA7B40822963737989D5048AD310E20D6022E84346C982CFCEF79E11
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113657
Category:	downloaded
Size (bytes):	35813
Entropy (8bit):	7.9933603091137355
Encrypted:	true
SSDEEP:	768:GuwXn8kBZAqgpsnCq63v9K6eodOamRz3YkdBSqwSsg84Yk5RFB6:Jc8kBBnChQodOamRz3YQFSLk3q
MD5:	57911010756C90D58754C91EF1EE2765
SHA1:	BAA48FEF4866D7DAFD9F59417745EE838F0E63CA
SHA-256:	87C5385BA17F84CC25FB7BBE1EDB4169BC702842BD74B758ACDC130986D55BC2
SHA-512:	FF5A7B638CD9117C89C277F6846506D41768D3A30F81B63768379294160AEE89F0D60E853F938D28A654226E18FE3389808ECCDA7D106F76EBE95A53A00DD560
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
Preview:	...........{..8.(.........,.-.......gglu.. .m..I....~..oRv......i.(....P(......k............o.6>.\|..d..........O...V..}.G..4......9.l..F.mDI.f.4...o,..EA.1...F1g..,...E..Gy...,No6.@..l....n..;....P.fQ...ty...b#I.(d.A2!j1$..m....6n.Q8.x..Y...b#c!....\|.p..w#..F..i..s.Gc..b..9U.k......&@pJ..'40J......e.$.k.L(b...F.n.+..nO..6@n...A.&.,LVa......Y......V..o..% ....,......:..e.-XR. <FE.w..b..P......r.b.["~..!.....y.......V...4.;M..Y.X.{.......0].N..,.r`=...Mv....;...k....w.1p.q...(.u.3....;).. }...s....'....c...o.d....Ax.W..._...?.9...........3..MWI..3.p3..u.m$~Vo:n.'.8..!5h....y...6=7...hz.......f.-.).......Nc..:...g...~.8..4.....0P......$.=.a....#._..3.t..7Q...-....6..j.\|....5-...B...}.VQ.&/...e.XeI.C../.y...{...1...Y..g..`'..F..h.o.]SHW...,..Ac_%y...M..u.O..U..`.&...Y.}....Tu..z..iv.....5..M.q.. .Bz.,..oSS.%..y.....gS1s.(.........%,fE.m.@~.4.........7.x.$0mQ..o....J.J^....~......u!.~Z.iw.b...Q~).=..Tq.:.7HH.E.&6.D`.(..Cxmf.(o...^y_.v.{..K<Y.5.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	112
Entropy (8bit):	4.851188181986455
Encrypted:	false
SSDEEP:	3:qHGs0UXRJXuKrsfBHzrRKsgDDNSkoOkADYrLvQAvRzv:qHGCRVuFvR3A+mYfYOR
MD5:	6DF5DDE38EC3C12329A97C5CDEF18D26
SHA1:	589B055AF4FFE981F073C7E3EC8C5E62B725B3AF
SHA-256:	D0239B745F9020D3F03785B130E6370202FD27597EFFB433ADED633A7E5AA311
SHA-512:	9545CD3CB52FE7BFE16C428ACDEFA8F70A489AF33B257D0337B359428AE0F2FA10B7E6CE50A6CE5B45053A3037B5A43A4786DFB67A79652D78C04D7F74093E6F
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/js/ie10-4d8fefae653b9ade02759391caba3c56.js
Preview:	var ua=window.navigator.userAgent,isIE=/MSIE\|Trident/.test(ua).isIE&&(window.location.href="/unsupported.html").

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	351291
Entropy (8bit):	5.010955181075871
Encrypted:	false
SSDEEP:	3072:bdprKdrzXZV7JDpZpvR/lLyYvoGgFd/uvkEnXdbdUjJLgj:bdt6D0dZEXdbdFj
MD5:	CC9F435BA7B105175F5D2DFBFB14D579
SHA1:	20890B7EE76629BDFF1E4A04967225238BD74FCF
SHA-256:	FE0FF23EE97F48E2F47FF5DA00EEC80B5986C5C569406E30C83A7441B119F77F
SHA-512:	152EA65B61A28215D07315D46D3A6A78D1A43EAEA91274EACB1946BECCA32DE8AF48658856A6DA257A99EF9FCB397478DDBF5776EAA945596384C3FE130FD6BF
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css
Preview:	@charset "UTF-8";.shadow-1,.shadow-1-hover{-webkit-box-shadow:0 2px 5px rgba(0,0,0,.11),0 3px 10px rgba(0,0,0,.09);box-shadow:0 2px 5px rgba(0,0,0,.11),0 3px 10px rgba(0,0,0,.09)}b,kbd kbd,optgroup,strong{font-weight:700}.wombat-select div.ember-power-select-multiple-trigger,sub,sup{line-height:0}.l-align-middle,img{vertical-align:middle}.btn-unbtn,.btn-unbtn.btn,.nav-user .nav-user-language,.nav-user-name,button,select{text-transform:none}hr,img{border:0}input[type=checkbox],input[type=radio],td,th{padding:0}.wombat-supertable-ng .st-cell.wrap-text,pre{word-break:break-all}.auto-save-container .btn-save:hover,.btn-unbtn.btn:hover,.btn-unbtn:hover,.wombat-supertable-ng .st-heading.is-sortable .st-heading-label,a:focus h1,a:focus h2,a:focus h3,a:focus h4,a:focus h5,a:focus h6,a:focus p,a:focus small,a:focus strong,a:hover h1,a:hover h2,a:hover h3,a:hover h4,a:hover h5,a:hover h6,a:hover p,a:hover small,a:hover strong,abbr[title]{text-decoration:underline}.navbar-fixed-bottom .navbar-col

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2972)
Category:	dropped
Size (bytes):	12393
Entropy (8bit):	5.181457102579648
Encrypted:	false
SSDEEP:	192:qGbLcVFKcymlKFWCwvFNeVOFlHAzraViFa6ychTRSHyc4IVycmz/9PycN4qaNlZ6:BQcBPkK1NGzf+z/
MD5:	6B9E2A5AE6EC6FB2100430DA2C329E4C
SHA1:	AC66FCD917EE8ED8D73662119BD04CACD905C612
SHA-256:	5D1CBB16D3E0660037D1BB10DE2D07CD55AE94E3380BFCECE6AED5B9F1D1B2EC
SHA-512:	2D07810E3EAA3B8940E819E7D3EFFFE77C849920BCBF0268734F8AA186F30CA4709AF9CE94649F19E8D761D13931917A94C73206947AF485079F7B04AA5F2173
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <title notranslate>Security Education Platform</title>. Third party licenses used in this app can be viewed by visiting /licenses.txt -->. All third-party licensed modules used without modification -->. <meta name="description" content="" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=2.0". />. <script src="/js/ie10-4d8fefae653b9ade02759391caba3c56.js" type="text/javascript" integrity="sha256-0CObdF+QINPwN4WxMOY3AgL9J1l+/7Qzre1jOn5aoxE= sha512-lUXNPLUv57/hbEKKze+o9wpImvM7JX0DN7NZQorg8voQt+bOUKbOW0UFOjA3taQ6R4bftnp5ZS14wE1/dAk+bw==" ></script>.. .<meta name="platform-ember/config/environment" content="%7B%22EmberENV%22%3A%7B%22EXTEND_PROTOTYPES%22%3Afalse%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_T

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141289
Category:	downloaded
Size (bytes):	49611
Entropy (8bit):	7.995268724057165
Encrypted:	true
SSDEEP:	768:UZoBcWYFXCBJFtbPWbFrVfU0zs3WRDCNenWRmIbM6m0AZAR9c79S0zuy5P24geCY:IohTdtbQZ43mCNJRmeKrygsVQ5gfbk
MD5:	462394CA2CEA9EFD7907540CBA6FF476
SHA1:	16B41B5BFDE870C38B481E3418B900AAFB0F6E29
SHA-256:	440AFCE54C4215A9A6CEAF3303E44CDBBD3D2A31FF17295074858DE108B1F880
SHA-512:	900589E07BD9EDE7A5B107CA59624E0DFBBF4EDC9CC0FF24EBDFA0DA8FF46603E057348DC645F30A7A1D7806300B606585DF0353814650110833C471F24C53C5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js
Preview:	...........m[.8.0........'&..hp.'.t73@...g.X.'V......4.9...d.C..}....K...,..JU.......T~.l..?...w>..?T.....g..g.?<.?..z.....+...w....A%.~0..Y....+.....2...Jr'.(.".I\..q..Fb.>V.P].U..(y....u._@m...@.q8{.....?..7.)......OD..;.\|W9..Q..........#....n$.H.0J.....!e.1}....84......u.~..~.M...X&..Ou..ie..\|.IXy...Y....x...;..U.M....f,..l.tZ..<...bl{E\|..@<}..Fn.(W...so#!.E.X.<AEGO..~....Y..'.l&.8.T.....".J.K......Rm5.;...F..$.......G.qx.....C.._.s../.......3....\|.-.......o...?.a.La...W...7.?.O.....6..clXU....T.x.....".w.......;.k.\^w.~}.....jf......!..a..0y........@.L.1..0.......2.^_..g..../.........$@.....]+...2.v\.1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F... [..y....K5qzQ.>i.1.......0..P...@...L.".n.x..!.0..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.T...n "..km..3..T..]......paJV.(J...g....!.\|.].......;.zN...%}....DZ..i.....j .a".i=O.R Q2..."....

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.202819531114783
Encrypted:	false
SSDEEP:	3:WRemVnCAd:rTAd
MD5:	7F6C2F2EC0AC79AF93AC42E55601E0D8
SHA1:	8DE377E67C5B4919C767A044051BFD52C77A985E
SHA-256:	5F1077DECBD2768AD99AF5D592C4DDE934F19682BB8BAD05599F9D403344DA27
SHA-512:	85DCD5AE0B75A54F30675AA864DC4526F9AAD07F9CAC63D9004B81EF2EA1D270909740137D72A9D8D0BBBD9D8674B8FFDDE1745E95E628D65B4F898F49FA9A91
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnw8PvhQPeM6xIFDewtwx0=?alt=proto
Preview:	ChUKEw3sLcMdGgQICRgBGgQIZBgCIAE=

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	dropped
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90402
Entropy (8bit):	5.1295599867897055
Encrypted:	false
SSDEEP:	768:UD0DWv23CW1lDGWDcoq7u2E0qAAe8usvHj+uewkI33FFvXdbbRAILHrK1mGgE7ie:UD0DWv2D1nDcoqMVzK1cD8tD
MD5:	3547502C80B5D31848620538CEF2F4DE
SHA1:	DDC0AD4C8404C555D406F4186FE04A461011063A
SHA-256:	C7E67D837D9EBE0238D3213AE4A6CFF5ACA16707BFC8A45AAAA11340FBBEEA5D
SHA-512:	691441ECCC178587AC16C39567949450A7E34C560AFA0BEB5BCDE174938C8BC5229B2F3C9BC690BF79FCC791A38DE4341E1C3377143200FAB2DFE9D8B85D0609
Malicious:	false
Reputation:	low
Preview:	[{"_id":"project-settings","settings":{"translateMetaTags":true,"translateAriaLabels":false,"translateTitle":false,"showWidget":true,"customWidget":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","position":"right","positionVertical":"bottom","border":"","borderRequired":false,"widgetCompact":true},"widgetLanguages":[],"activeLanguages":{"ja":"...","fr":"Fran.ais","es":"Espa.ol","de":"Deutsch","en":"English"},"enabledLanguages":["de","en","es","fr","ja"],"debugInfo":true,"displayBranding":false,"displayBrandingName":false,"localizeImages":false,"localizeImagesLimit":false,"localizeAudio":false,"localizeAudioLimit":false,"disabledPages":[],"regexPhrases":[{"phrase":"#Tenants: <var count-of-tenants=\"\"></var>","candidate":"#Tenants: ","variables":["<var count-of-tenants=\"\"></var>"],"regex":"^#Tenants: ([\\d ]+)$"},{"phrase":"#<var percentage-repeat-click=\"\"></var>% of all users have clicked on multiple campaigns","candidate":"#"

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2972)
Category:	dropped
Size (bytes):	12393
Entropy (8bit):	5.181457102579648
Encrypted:	false
SSDEEP:	192:qGbLcVFKcymlKFWCwvFNeVOFlHAzraViFa6ychTRSHyc4IVycmz/9PycN4qaNlZ6:BQcBPkK1NGzf+z/
MD5:	6B9E2A5AE6EC6FB2100430DA2C329E4C
SHA1:	AC66FCD917EE8ED8D73662119BD04CACD905C612
SHA-256:	5D1CBB16D3E0660037D1BB10DE2D07CD55AE94E3380BFCECE6AED5B9F1D1B2EC
SHA-512:	2D07810E3EAA3B8940E819E7D3EFFFE77C849920BCBF0268734F8AA186F30CA4709AF9CE94649F19E8D761D13931917A94C73206947AF485079F7B04AA5F2173
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <title notranslate>Security Education Platform</title>. Third party licenses used in this app can be viewed by visiting /licenses.txt -->. All third-party licensed modules used without modification -->. <meta name="description" content="" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=2.0". />. <script src="/js/ie10-4d8fefae653b9ade02759391caba3c56.js" type="text/javascript" integrity="sha256-0CObdF+QINPwN4WxMOY3AgL9J1l+/7Qzre1jOn5aoxE= sha512-lUXNPLUv57/hbEKKze+o9wpImvM7JX0DN7NZQorg8voQt+bOUKbOW0UFOjA3taQ6R4bftnp5ZS14wE1/dAk+bw==" ></script>.. .<meta name="platform-ember/config/environment" content="%7B%22EmberENV%22%3A%7B%22EXTEND_PROTOTYPES%22%3Afalse%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_T

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90613
Category:	downloaded
Size (bytes):	32748
Entropy (8bit):	7.992329865067804
Encrypted:	true
SSDEEP:	384:Rk71wwFxcfkQxFoFKrDsQtReHGqskPEoIJgLFg4AKxk9I0nis/7doaZCPtr3ZCS8:LwFxcceouDsQD5JUFFT2Isi6d5APXLAn
MD5:	B3DF30AE70C34BAC95FC91544D9209BD
SHA1:	68E1316DE3CD5FEEBCB4DA17AFC80EAFD7FB2234
SHA-256:	B06F7F7C91DA1E7A195A508913008E0427889447B9697E090CC8ADC7D4E6564E
SHA-512:	E209CF0223EBE5FDA949E721CB6794B7FF9173B95BC2B28FA5B70B576DD03AD36DCCED5B1C4764571C8CB1CF0B7FB965F1835DC9B3CB7A7AFA8B3C4CE684A7FC
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_c53074e74ebeb8e140d6_en.js
Preview:	...........iw.8.?.~>....%."9Kw.0:..t....Y..>...l.BR^b.O...A.N...yq.t,b!.....BU.....4kM.Lr..I.]DE.&..TF..K.J.9.7.$....(..7?.=.....O.....;~t,..y........Nq].~...ys.Rd...~....<.E..yr~\|..c..qqs.....Q.S.....3..g.......}.{..Q.2OF....)...d..D...R.>..v.<>=+.4.e..6..<KZ_..Z......P..h).o..}.}..v...'j.9..@N.,.....4N.j.....qS+(..~,.iS7^eK.B^.$6.~.._..i..4yo..S.5T..Rl_...F.LF7.U..t.=..$.Z...4...q>..... TJ.F....2#......o.QC./1JN.....Rf.'..>S.....Y.$r...i.X.......w..3..}Z...#.hq4..#..#..6..}m/Kg2+b.. {..w../U.y.7B.9A.b.VJ0.....S#.Y4.o..M.}M...M..M.4...*?6SJS.zD.i...tj.j;..OM...<....x..L..;!.>.....>....B.R...,..f.9.>..(M...lF.!...Mr.4%.........Y....F...............p.@.p.....G.=.....>#.9M..\|.-...2.ZY.bO....+...4...XNbj..Q...b.F.Y..iq3.bD..."rz.e..$.......FL.y.,.w...50_m...$.No...H'.....t.....P/..sQ.f.r......P.P.w....s.l>...0..m.\Bbh....... ....tZ.x..\...f..~...j:d..!s.W...C....w&.v.t..D..8.:..._...u8......h..El....................t.....E.9..G9.KH..6

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61641)
Category:	downloaded
Size (bytes):	61657
Entropy (8bit):	5.3715329486797545
Encrypted:	false
SSDEEP:	1536:O2+foe+MoXPYBc8QEKOOF9WeqKlgjdAV5SMqyQZdNPrafhwL:VehofYBBUWeq1jzMgPefiL
MD5:	B334E888CE2E9C455EC9B381FA5D067D
SHA1:	FE630F8042A90397AF33747FAC3D541A8DE17079
SHA-256:	AB70314B3A292BE07387E0548D0925724B3638994CFC3E65C097998CA833F913
SHA-512:	89276DEB9747E0A0C3FA757C23206B92E6454B9EF9BDB73452D4D291E8A2CBB47308811C341225F9E1F435BF41281A77099AFD4C5DFC66F1AA58AD40AC743AB7
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/localizejs/localize.js
Preview:	//Localize-v474.!function(ae,ie){"use strict";var e,r,a;ie.Localize&&ie.Localize.loaded\|\|(a={},r=function(e){return a[e]()},(e=function(e,t){var n,l={};a[e]=function(){return n\|\|(t(r,n={},l),n=l.exports\|\|n),n}})(0,function(o,e,t){for(var c=ie.Localize=ie.Localize\|\|{X:[]},n=(c.loaded=c.l=!0,["translate","untranslate","phrase","initialize","translatePage","setLanguage","getLanguage","getSourceLanguage","getAvailableLanguages","detectLanguage","untranslatePage","bootstrap","prefetch","on","off","getExchangeRate","number","currency","hideWidget","showWidget"]),l=0;l<n.length;l++)c[n[l]]=function(e,t){return function(){return c.X.push([e,arguments]),t?arguments[0]:undefined}}(n[l],l<3);e.init=function(){var e,t,n,l,r,a,i;ie.JSON&&ae&&(e=o(27),t=o(28),n=o(11),l=o(6),r=o(19),a=o(22),i=o(2),l.l107(),n.l179(c),a.l161(),t(function(){r.l99(),i._vueSafe\|\|r.overwriteRemoveChild(),e.l173(c.X\|\|[],function(e){c[e[0]].apply(c,e[1])}),delete c.X,c.onload&&c.onload()}))}}),e(1,function(e,t,n){var r=e(27)

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2409)
Category:	downloaded
Size (bytes):	2434026
Entropy (8bit):	5.94597722735466
Encrypted:	false
SSDEEP:	49152:50zGTkdU9oWQQCrjZldLshMf7ox/XhCKsXiucDPduGROo97tMHRjsh+Oo:k0/XhCKsXiucDPduGROo97tMHRjsh+P
MD5:	A1A803531FD35A357B75A720640A33E1
SHA1:	E87561EA0D30726D664294007AA6865AB0DEF326
SHA-256:	1DACB2946732A6781FB6FE226E3BC10CEB3172D33CCCB5BC223533705575B002
SHA-512:	36CACCED3181B49DCEA1618AD3D8C81764BAA13FB6F939F6C6F4574C825A4F8D936252BBB5C3DC89F0DF6658E7CAA9132B1FAAFAD45D5841A679D69EDDE2D56C
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/platform-ember/chunk.131.abd4932d5d56930bc068.js
Preview:	/! For license information please see chunk.131.abd4932d5d56930bc068.js.LICENSE.txt /.(globalThis.webpackChunk_ember_auto_import_=globalThis.webpackChunk_ember_auto_import_\|\|[]).push([[131],{13429:(e,t,n)=>{"use strict".n.d(t,{R:()=>i}).var r=n(60142),o=n(62541),i=function(){function e(){this.getFragmentDoc=(0,r.re)(o.Yk)}return e.prototype.recordOptimisticTransaction=function(e,t){this.performTransaction(e,t)},e.prototype.transformDocument=function(e){return e},e.prototype.identify=function(e){},e.prototype.gc=function(){return[]},e.prototype.modify=function(e){return!1},e.prototype.transformForLink=function(e){return e},e.prototype.readQuery=function(e,t){return void 0===t&&(t=!!e.optimistic),this.read({rootId:e.id\|\|"ROOT_QUERY",query:e.query,variables:e.variables,returnPartialData:e.returnPartialData,optimistic:t})},e.prototype.readFragment=function(e,t){return void 0===t&&(t=!!e.optimistic),this.read({query:this.getFragmentDoc(e.fragment,e.fragmentName),variables:e.variables,root

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1592)
Category:	downloaded
Size (bytes):	2862450
Entropy (8bit):	5.375321927815043
Encrypted:	false
SSDEEP:	49152:1963affu88bWVqjVoxxupdoTv1I+M0OezXyv:1WQD1Y
MD5:	76686B36170E28BA5519C5C93422C756
SHA1:	3DA991FF5A43B3930AB2BB04B2DF119FEE3CA68D
SHA-256:	FC3B6C90F6F15607329495E877119CCD40B5B1260184DC6DBE7E6D8DA4810307
SHA-512:	B1D418D6988F24CA84AFEAC8B50DB225060CCD22354680C034366D5F304AB2BD7482548B8863A8EF126CEED264EF5758F8D28BD9DD2EAEF780AB795D62F3EDB7
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/platform-ember/vendor-02d26fd8e43c2236915f27156ef6f4a3.js
Preview:	window.EmberENV=function(e,t){for(var r in t)e[r]=t[r].return e}(window.EmberENV\|\|{},{EXTEND_PROTOTYPES:!1,_APPLICATION_TEMPLATE_WRAPPER:!1,_DEFAULT_ASYNC_OBSERVERS:!0,_JQUERY_INTEGRATION:!0,_TEMPLATE_ONLY_GLIMMER_COMPONENTS:!0}).var runningTests=!1,loader,define,requireModule,require,requirejs.if("undefined"==typeof FastBoot&&function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.moment=t()}(this,(function(){"use strict".var e,t.function r(){return e.apply(null,arguments)}function n(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function i(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,t){return Object.prototype.hasOwnProperty.call(e,t)}function o(e){if(Object.getOwnPropertyNames)return 0===Object.getOwnPropertyNames(e).length.var t.for(t in e)if(a(e,t))return!1.return!0}function s(e){return void 0===e}function l(e){return"number"=

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3234)
Category:	downloaded
Size (bytes):	3069431
Entropy (8bit):	5.8836038272857785
Encrypted:	false
SSDEEP:	49152:MXDoCldSZtD+GRv5Zc/iRrm6fX8/SfBujyx/wVZJrUm:w2tbc/iRy/D
MD5:	24A6CD95A8B04ABEA1C913748F9BBF57
SHA1:	064FD8DD6DFDC71A2987ED1A2D71BB601785DF84
SHA-256:	F2739AF41961C433996F88F9E2DA960A98AD4D7BB6541E9A91CD4153365AC477
SHA-512:	2AFAE12CF443E3012B22CD4DECA4F7262E469E23A10D7EEA88ED030699624FD7FE18E026F12C4DE17F63BC68FE522F6AA46A9007AF4B431E8D55DD821D01FC4F
Malicious:	false
Reputation:	low
URL:	https://hillsclerk.securityeducation.com/platform-ember/platform-ember-a841ee5014fc18a82dc1fc9e41b64f7c.js
Preview:	"use strict".define("platform-ember/acceptance-tests/generated-route",["exports","ember-redirect/acceptance-tests/generated-route"],(function(e,i){Object.defineProperty(e,"__esModule",{value:!0}),Object.defineProperty(e,"default",{enumerable:!0,get:function(){return i.default}})})),define("platform-ember/adapters/-json-api",["exports","@ember-data/adapter/json-api"],(function(e,i){Object.defineProperty(e,"__esModule",{value:!0}),Object.defineProperty(e,"default",{enumerable:!0,get:function(){return i.default}})})),define("platform-ember/adapters/apikey",["exports","platform-auth-ember/adapters/auth","@ember/service"],(function(e,i,a){var t,n.Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0.let r=(t=class extends i.default{constructor(){var e,i,a,t,r,o,s.super(...arguments),e=this,i="wombatNamespaces",t=this,(a=n)&&Object.defineProperty(e,i,{enumerable:a.enumerable,configurable:a.configurable,writable:a.writable,value:a.initializer?a.initializer.call(t):void 0}),r=this,

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 14:33:24.464730024 CET	49673	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:24.464737892 CET	49674	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:24.792850018 CET	49672	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:30.644494057 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.644536018 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.644599915 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.645040989 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.645073891 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.645122051 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.645252943 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.645262957 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.645462036 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.645472050 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.955265045 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.955512047 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.955530882 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.955914021 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.956115007 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.956137896 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.956444025 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.956504107 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.957201958 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.957264900 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.957959890 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.958040953 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.958354950 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.958434105 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:30.958492041 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:30.958498001 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.010637999 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.010644913 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.010649920 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.058370113 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.058701038 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.058725119 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.058732986 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.058767080 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.058784962 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.058798075 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.058821917 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.058917046 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.058970928 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.058976889 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.058995962 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.059036970 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.070492029 CET	49705	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.070509911 CET	443	49705	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.082305908 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.082344055 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.082422018 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.082662106 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.082693100 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.082753897 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.082907915 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.082937956 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.082994938 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.083082914 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.083391905 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.083417892 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.083470106 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.083689928 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.083712101 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.083800077 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.084078074 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.084090948 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.084336042 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.084351063 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.084542990 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.084556103 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.084800005 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.084813118 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.085108042 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.085122108 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.124233007 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.181644917 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.181716919 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.181868076 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.182828903 CET	49704	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.182843924 CET	443	49704	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.183233976 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.183253050 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.183321953 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.183801889 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.183809042 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.314090014 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.314424992 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.314450979 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.314774036 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.315104961 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.315156937 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.315239906 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.325181007 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.325401068 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.325421095 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.325738907 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.326010942 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.326064110 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.326148033 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.342662096 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.342998981 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.343012094 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.344499111 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.344573975 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.344700098 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.345052958 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.345201969 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.345228910 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.345252037 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.345460892 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.345467091 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.346216917 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.346318007 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.346366882 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.346393108 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.346405983 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.346774101 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.346824884 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.346894026 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.346899986 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.348525047 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.348589897 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.348860025 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.348949909 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.348962069 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.360230923 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.368232012 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.378071070 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.378293037 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.378321886 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.379344940 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.379412889 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.379756927 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.379803896 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.379899025 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.379905939 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.387006998 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.387015104 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.396228075 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.402467012 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.402472973 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.430002928 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.449734926 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.507831097 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.507854939 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.507960081 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.507966042 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.507992983 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.508016109 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.508023024 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.508027077 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.508061886 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.509167910 CET	49706	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.509181976 CET	443	49706	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.511975050 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.511995077 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.512048960 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.512285948 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.512296915 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.617420912 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.617449999 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.617466927 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.617537022 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.617559910 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.617613077 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.619132042 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.619139910 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.619208097 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.619220972 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.619256973 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.625545025 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.625575066 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.625612974 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.625644922 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.625670910 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.625847101 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.625863075 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.625912905 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.626564026 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.626589060 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.626633883 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.626641989 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.626655102 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.626677036 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.627013922 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.627041101 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.627073050 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.627084017 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.627087116 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.627094030 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.627105951 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.627135038 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.627166033 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.627170086 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.628050089 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.628072977 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.628124952 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.628135920 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.628164053 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.658262968 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658288002 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658301115 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658399105 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.658411980 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658423901 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658431053 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658452034 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.658463955 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658480883 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658493042 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.658523083 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658524990 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.658535004 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658577919 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.658586025 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658855915 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.658901930 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.661691904 CET	49710	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.661708117 CET	443	49710	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.670226097 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.670248985 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.670283079 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.670295954 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.670308113 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.670341969 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.670365095 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.670382023 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.670406103 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.670958042 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.670984030 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.671020031 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.671025991 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.671050072 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.671112061 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.707289934 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.711507082 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.711534977 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.711982965 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.712328911 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.712414026 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.712512970 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.713747978 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.716165066 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.716197014 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.716243982 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.716265917 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.716293097 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.716310024 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.717766047 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.717782021 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.717864037 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.717876911 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.717910051 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.719337940 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.719352007 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.719422102 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.719434977 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.719470978 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.723828077 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.723850012 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.723932028 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.723947048 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.724088907 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.725039959 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.725056887 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.725127935 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.725136042 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.725173950 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.725837946 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.725915909 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.725938082 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.726625919 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.726649046 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.726712942 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.726720095 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.726756096 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.727353096 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.727418900 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.727432966 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.728370905 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.728395939 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.728425980 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.728436947 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.728461027 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.729227066 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.729240894 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.729294062 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.729304075 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.756237030 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.765495062 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.765567064 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.765625954 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.765784979 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.766067028 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.766127110 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.766133070 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.766175032 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.767218113 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.767239094 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.767302990 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.767307997 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.767347097 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.767368078 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.768445969 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.768460989 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.768538952 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.768543959 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.768582106 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.779695988 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.813107967 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.813134909 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.813221931 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.813249111 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.813285112 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.813643932 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.813663960 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.813697100 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.813705921 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.813730955 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.813746929 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.815773010 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.815793037 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.815829992 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.815846920 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.815860987 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.815890074 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.815926075 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.816942930 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.816961050 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.817013025 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.817023039 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.818556070 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.818578959 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.818645000 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.818655014 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.818675995 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.821182013 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.821202993 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.821281910 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.821300030 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.821343899 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.822664976 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.822680950 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.822737932 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.822746038 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.822777987 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.824274063 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.824286938 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.824347973 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.824374914 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.824392080 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.824410915 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.825328112 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.825341940 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.825385094 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.825397968 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.825427055 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.825445890 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.827188969 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.827217102 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.827259064 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.827269077 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.827308893 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.827833891 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.827852011 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.827902079 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.827914953 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.827929974 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.827945948 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.828768969 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.828787088 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.828851938 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.828865051 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.828907013 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.830127954 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.830162048 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.830189943 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.830205917 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.830229044 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.830246925 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.831146955 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.831166983 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.831218004 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.831228018 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.831254959 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.831273079 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.832082033 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.832103968 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.832155943 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.832165003 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.832194090 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.832212925 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.833097935 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.833118916 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.833157063 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.833163977 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.833187103 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.833204031 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.833961964 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.833983898 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.834028959 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.834042072 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.834062099 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.834079027 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.862451077 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.862481117 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.862556934 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.862575054 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.862705946 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.862705946 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.863543034 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.863564014 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.863610983 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.863616943 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.863662004 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.864471912 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.864486933 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.864537954 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.864543915 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.864573956 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.864823103 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.864840031 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.864878893 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.864882946 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.864922047 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.865176916 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.865194082 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.865231991 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.865236044 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.865267992 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.865562916 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.865581989 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.865611076 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.865616083 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.865642071 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.865680933 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.868793011 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.909154892 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.909181118 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.909262896 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.909280062 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.909317970 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.910070896 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.910090923 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.910156965 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.910167933 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.910208941 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.910758972 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.910780907 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.910820961 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.910830021 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.910852909 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.910870075 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.911281109 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.911297083 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.911329985 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.911338091 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.911361933 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.911380053 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.911839962 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.911861897 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.911886930 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.911909103 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.911922932 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.911942005 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.913126945 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.913146019 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.913181067 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.913191080 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.913213968 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.913230896 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.914010048 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914028883 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914082050 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.914091110 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914124966 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.914410114 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914427996 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914454937 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.914463997 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914484978 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.914501905 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.914716959 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914733887 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914792061 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.914800882 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.914834976 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.915747881 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.915766954 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.915808916 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.915823936 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.915849924 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.915863037 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.915924072 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.915971041 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.915977001 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.916003942 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.916037083 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.916804075 CET	49707	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.916821957 CET	443	49707	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.917062044 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.917088032 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.917133093 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.917150974 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.917171001 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.917187929 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.917517900 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.917566061 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.917581081 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.917587042 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.917614937 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.917702913 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.918313026 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.918334961 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.918370962 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.918378115 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.918426037 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.918426991 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.918874025 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.918900967 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.918930054 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.918936014 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.918962955 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.918981075 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.919840097 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.919867992 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.919909954 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.919918060 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.919953108 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.919967890 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.920594931 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.920614958 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.920679092 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.920686007 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.920733929 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.921084881 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.921109915 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.921145916 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.921153069 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.921176910 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.921192884 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.921708107 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.921727896 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.921763897 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.921771049 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.921797991 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.921817064 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.922610998 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.922631979 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.922687054 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.922693014 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.922717094 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.922744036 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.923140049 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.923166990 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.923218012 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.923243046 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.923259020 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.923290014 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.923605919 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.923623085 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.923667908 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.923676014 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.923708916 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.923727989 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.923999071 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.924026966 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.924053907 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.924062014 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.924101114 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.924118996 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.924478054 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.924498081 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.924530029 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.924535990 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.924563885 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.924581051 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.925122023 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925138950 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925172091 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.925179005 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925209045 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.925226927 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.925604105 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925632000 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925673008 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.925678968 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925693989 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.925717115 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.925894976 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925915003 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925959110 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.925965071 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.925986052 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.926002979 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.926384926 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.926400900 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.926434994 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.926441908 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.926477909 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.926477909 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.927053928 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.927073002 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.927140951 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.927149057 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.927190065 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.927341938 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.927357912 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.927432060 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.927432060 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.927439928 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.927479029 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.928082943 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.928107977 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.928149939 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.928157091 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.928183079 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.928201914 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.928365946 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.928381920 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.928426981 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.928433895 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.928473949 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.928941965 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.928961992 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.928992033 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.928999901 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.929028034 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.929033041 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.929611921 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.929629087 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.929663897 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.929672003 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.929699898 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.929718018 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.930047035 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930063009 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930123091 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.930130005 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930167913 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.930445910 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930460930 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930504084 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.930510044 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930530071 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.930551052 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.930862904 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930881023 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930926085 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.930937052 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.930967093 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.930973053 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.958087921 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.959291935 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.959316015 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.959377050 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.959393978 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.959422112 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.959436893 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.959858894 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.959877968 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.959924936 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.959928989 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.959964991 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.961391926 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.961410999 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.961461067 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.961464882 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.961512089 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.962224007 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.962246895 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.962285042 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.962290049 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.962313890 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.962330103 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.963052988 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.963068962 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.963110924 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.963114977 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.963167906 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.963505983 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.963521957 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.963598967 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.963603020 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.963639975 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.963943005 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.963967085 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.963995934 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.964000940 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.964018106 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.964040041 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.964399099 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.964416981 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.964449883 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.964456081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.964487076 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.964507103 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.964724064 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.964745045 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.964773893 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.964777946 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.964806080 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.964823008 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.965177059 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.965199947 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.965246916 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.965251923 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.965291977 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.965703964 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.965728998 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.965770006 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.965779066 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.965805054 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.965822935 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.966177940 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.966197968 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.966240883 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.966245890 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.966273069 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.966291904 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.966866970 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.966881037 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.966938972 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.966944933 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:31.966984034 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.975790024 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:31.984922886 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.013900995 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.013926983 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.014004946 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.014038086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.014172077 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.014216900 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.014234066 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.014276981 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.014286995 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.014317989 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.014637947 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.014658928 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.014686108 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.014692068 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.014714956 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.014733076 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.015049934 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.015067101 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.015094042 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.015101910 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.015125990 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.015145063 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.015814066 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.015837908 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.015867949 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.015878916 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.015902996 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.015922070 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.016283989 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.016303062 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.016333103 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.016340971 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.016365051 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.016381025 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.016717911 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.016745090 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.016772032 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.016777992 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.016798973 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.016817093 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.017056942 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.017083883 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.017112017 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.017118931 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.017148018 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.017158985 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.017517090 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.017534018 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.017570972 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.017579079 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.017617941 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.018017054 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018033981 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018079042 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.018085003 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018120050 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.018194914 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.018532991 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018558025 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018594027 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.018603086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018626928 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.018645048 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.018887043 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018912077 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018951893 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.018959999 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.018997908 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.019561052 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.019581079 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.019622087 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.019629002 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.019664049 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.019879103 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.019901991 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.019928932 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.019937992 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.019959927 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.019975901 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.020559072 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.020581007 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.020613909 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.020622015 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.020648003 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.020665884 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.021023989 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.021073103 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.021096945 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.021112919 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.021159887 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.021166086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.021198988 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.021831989 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.021847963 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.021913052 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.021920919 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.021955967 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.022886992 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.022903919 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.022937059 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.022943974 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.022965908 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.022974968 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.022983074 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.023005009 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.023035049 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.023046017 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.023072004 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.023085117 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.024466038 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.024483919 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.024519920 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.024527073 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.024555922 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.024571896 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.024625063 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.024642944 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.024672031 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.024677992 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.024701118 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.024719000 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.024725914 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.025206089 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.025228977 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.025274992 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.025280952 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.025310040 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.025327921 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.025420904 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.025439024 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.025485992 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.025495052 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.025533915 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.026310921 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.026328087 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.026381969 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.026388884 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.026423931 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.026928902 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.026945114 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.026977062 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.026984930 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.027010918 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.027029991 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.027278900 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.027302027 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.027335882 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.027343035 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.027367115 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.027384996 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.027657986 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.027679920 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.027712107 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.027719021 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.027741909 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.027759075 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.028043032 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.028063059 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.028090954 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.028099060 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.028126001 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.028172016 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.028517008 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.028533936 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.028574944 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.028582096 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.028608084 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.028625965 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.028932095 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.028949976 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.028986931 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.028992891 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.029020071 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.029037952 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.029947042 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.029962063 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.030002117 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.030009031 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.030042887 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.030061960 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.030389071 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.030411959 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.030448914 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.030455112 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.030479908 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.030498028 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.031239033 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.031267881 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.031303883 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.031311035 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.031338930 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.031357050 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.032021999 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032038927 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032089949 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.032097101 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032135963 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.032517910 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032535076 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032596111 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.032602072 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032639027 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.032849073 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032869101 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032902002 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.032907009 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.032932043 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.032951117 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.032994032 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.033288002 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.033312082 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.033348083 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.033354044 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.033384085 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.033396959 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034051895 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034077883 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034120083 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034126043 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034152985 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034172058 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034496069 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034516096 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034548998 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034555912 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034579039 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034598112 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034805059 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034822941 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034854889 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034861088 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.034884930 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.034905910 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.035310984 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.035331964 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.035371065 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.035377979 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.035402060 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.035422087 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.035586119 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.035610914 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.035636902 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.035645008 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.035666943 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.035686970 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.036194086 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.036211014 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.036250114 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.036257029 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.036283016 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.036303997 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.036482096 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.036798000 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.036818981 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.036875010 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.036880970 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.036909103 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.036926985 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.037201881 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.037220001 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.037252903 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.037260056 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.037285089 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.037305117 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.037560940 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.037580013 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.037616014 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.037622929 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.037648916 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.037662029 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.037976027 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.038000107 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.038033962 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.038042068 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.038069963 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.038090944 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.038517952 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.038533926 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.038577080 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.038583994 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.038614035 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.038630009 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.054291964 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.054311991 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.054512978 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.054512978 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.054529905 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.054569960 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.054780960 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.054792881 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.054797888 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.054847002 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.054857016 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.054896116 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.055160999 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.055176020 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.055214882 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.055221081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.055247068 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.055268049 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.055778027 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.055793047 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.055830002 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.055835009 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.055867910 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.055876017 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.056360960 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.056375980 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.056576967 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.056581974 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.056618929 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.056911945 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.056927919 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.056958914 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.056962967 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.056994915 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.057013035 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.057425976 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.057446957 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.057483912 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.057488918 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.057518959 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.057531118 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.058259964 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.058285952 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.058336973 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.058341980 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.058371067 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.058388948 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.058733940 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.058752060 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.058805943 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.058809996 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.058846951 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.059535980 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.059551954 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.059603930 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.059608936 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.059644938 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.060081005 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.060096979 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.060132980 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.060137987 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.060156107 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.060178041 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.060609102 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.060622931 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.060662031 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.060666084 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.060688972 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.060705900 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.061049938 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.061064005 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.061096907 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.061100006 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.061127901 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.061142921 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.061403036 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.061419964 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.061454058 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.061459064 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.061482906 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.061506033 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.061999083 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.062012911 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.062062979 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.062067032 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.062105894 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.062455893 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.062472105 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.062509060 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.062513113 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.062537909 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.062556028 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.063003063 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063016891 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063057899 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.063062906 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063096046 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.063221931 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.063308001 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063323975 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063374043 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.063376904 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063402891 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.063421011 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.063685894 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063700914 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063747883 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.063751936 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.063788891 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.064007998 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064023018 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064057112 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.064062119 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064085960 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.064101934 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.064374924 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064389944 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064435959 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.064439058 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064475060 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.064728022 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064742088 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064810991 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.064815998 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.064848900 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.065288067 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.065309048 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.065350056 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.065357924 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.065386057 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.065399885 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.065594912 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.065609932 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.065640926 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.065644979 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.065670967 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.065690994 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.108613014 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.135195971 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.135221958 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.135237932 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.135277987 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.135308027 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.135335922 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.135354042 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.136702061 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.136725903 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.136770010 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.136775970 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.136785984 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.136804104 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.136818886 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.136847973 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.136866093 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.136918068 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.137799025 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.137814999 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.137859106 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.137866974 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.137898922 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.139168978 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.139184952 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.139238119 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.139249086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.139286995 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.141439915 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.141458035 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.141489983 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.141496897 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.141530037 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.141561031 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.142111063 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.142127037 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.142163992 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.142170906 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.142198086 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.142216921 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.143212080 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.143227100 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.143259048 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.143299103 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.143305063 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.143337011 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.144010067 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.144027948 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.144067049 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.144076109 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.144110918 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.145944118 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.145963907 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.145998001 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.146006107 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.146030903 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.146053076 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.146414995 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.146434069 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.146466970 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.146473885 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.146503925 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.146528959 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.146811008 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.146826982 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.146869898 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.146876097 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.146908045 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.147526979 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.147542000 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.147591114 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.147600889 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.147635937 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.148274899 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.148299932 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.148327112 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.148338079 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.148364067 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.148396015 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.148766994 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.148782969 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.148822069 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.148829937 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.148859024 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.148875952 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.149269104 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.150751114 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150767088 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150816917 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.150824070 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150840044 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150862932 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150862932 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.150875092 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150892019 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.150919914 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150921106 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.150933027 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150964975 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.150969982 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.150985956 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.150990963 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.151017904 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.151042938 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.151926041 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.151942968 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.151983976 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.151990891 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.152029037 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.153179884 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.153196096 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.153223991 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.153264046 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.153270006 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.153306961 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.154661894 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.154680967 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.154731989 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.154740095 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.154769897 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.154787064 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.156800985 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.156816006 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.156853914 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.156862974 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.156899929 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.158858061 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.158874035 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.158896923 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.158922911 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.158941031 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.158945084 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.158979893 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.159778118 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.159794092 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.159835100 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.159842014 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.159882069 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.160247087 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.160260916 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.160283089 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.160315990 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.160320044 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.160353899 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.160604954 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.160620928 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.160653114 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.160660982 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.160696030 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.160711050 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.160980940 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161015034 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161030054 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.161036015 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161062956 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.161087990 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.161318064 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161334038 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161361933 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.161366940 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161391973 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.161408901 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.161623001 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161644936 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161670923 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.161678076 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.161719084 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.161719084 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.162018061 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162036896 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162064075 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.162069082 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162094116 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.162112951 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.162415028 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162429094 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162457943 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.162462950 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162491083 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.162508011 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.162755013 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162770033 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162811041 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.162817001 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.162851095 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.163191080 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.163217068 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.163239002 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.163247108 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.163270950 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.163288116 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.163544893 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.163563967 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.163589954 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.163598061 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.163638115 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.163651943 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.164870977 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.164894104 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.164936066 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.164947033 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.164973974 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.164988041 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.165199041 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.165222883 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.165247917 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.165251970 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.165277004 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.165293932 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.165559053 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.165585041 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.165607929 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.165657043 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.165662050 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.165693045 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.165994883 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166014910 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166043997 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.166049004 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166083097 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.166100025 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.166309118 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166327000 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166357994 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.166362047 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166393042 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.166415930 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.166632891 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166649103 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166687965 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.166692972 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.166719913 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.166743994 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.167042971 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167057037 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167089939 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.167093992 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167124987 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.167146921 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.167402983 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167418003 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167493105 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.167496920 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167543888 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.167741060 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167754889 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167787075 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.167792082 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.167819023 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.167840004 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.168061972 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.168096066 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.168122053 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.168127060 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.168153048 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.168163061 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.168395042 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.168411016 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.168476105 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.168479919 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.168514967 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.169029951 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169048071 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169101000 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.169106007 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169140100 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.169429064 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169445038 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169492006 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.169496059 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169537067 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.169802904 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169816971 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169897079 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.169897079 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.169900894 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.169935942 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.170121908 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170136929 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170173883 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.170177937 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170201063 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.170209885 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.170459032 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170473099 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170526028 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.170530081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170583010 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.170833111 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170846939 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170897007 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.170902014 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.170936108 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.171156883 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171173096 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171205044 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.171210051 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171236038 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.171252966 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.171576023 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171591997 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171650887 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.171654940 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171683073 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.171906948 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171921968 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171953917 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.171957970 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.171982050 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.172004938 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.172255993 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.172286034 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.172308922 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.172339916 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.172343969 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.172377110 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.172708035 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.172806025 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.172823906 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.172858000 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.172863960 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.172894001 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.172903061 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.176296949 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.230283022 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.230309963 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.230356932 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.230386972 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.230402946 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.230422974 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.230559111 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.230595112 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.230613947 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.230621099 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.230634928 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.230638981 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.230659008 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.230684996 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.275201082 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.275237083 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.275275946 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.275294065 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.275329113 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.275329113 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.275949955 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.275971889 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.276001930 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.276010036 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.276034117 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.276057005 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.276587009 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.276608944 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.276638031 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.276643038 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.276668072 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.276691914 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.289644003 CET	49714	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.289666891 CET	443	49714	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.327678919 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.327704906 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.327732086 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.327745914 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.327778101 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.327800035 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.328802109 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.328819990 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.328854084 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.328861952 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.328896999 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.329833031 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.329859972 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.329884052 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.329893112 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.329925060 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.329936028 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.330657005 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.330677032 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.330709934 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.330717087 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.330756903 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.332341909 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.332357883 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.332385063 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.332391977 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.332417011 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.332437992 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.333378077 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.333393097 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.333427906 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.333435059 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.333467007 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.334327936 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.334342003 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.334366083 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.334372997 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.334393978 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.334410906 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.335148096 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.335166931 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.335191965 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.335199118 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.335222006 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.335237980 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.336257935 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.336278915 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.336298943 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.336304903 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.336325884 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.336340904 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.337104082 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.337120056 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.337157965 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.337165117 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.337193966 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.337212086 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.338268995 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.338304043 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.338313103 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.338319063 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.338351011 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.338366985 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.339116096 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.339131117 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.339159012 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.339164972 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.339188099 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.339207888 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.339982986 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.340007067 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.340059042 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.340068102 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.340101957 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.340766907 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.340794086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.340815067 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.340821981 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.340853930 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.341541052 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.341566086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.341595888 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.341600895 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.341622114 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.341639042 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.342344046 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.342359066 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.342403889 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.342411041 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.342459917 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.343384027 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.343400002 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.343430996 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.343436956 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.343470097 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344065905 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344080925 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344113111 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344125032 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344146967 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344162941 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344444990 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344460964 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344494104 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344500065 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344516993 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344537973 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344541073 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344551086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344563007 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344587088 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344614029 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344630003 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344655037 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344660044 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344681025 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344692945 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344696999 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344703913 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344722033 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344734907 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344741106 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344765902 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344769955 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344783068 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344794035 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344808102 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344811916 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344850063 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344855070 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344866037 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344887018 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344887018 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344899893 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344914913 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344944000 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.344953060 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344971895 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.344995022 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345000982 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345020056 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345026970 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345032930 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345042944 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345057964 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345069885 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345087051 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345093012 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345117092 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345122099 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345141888 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345149040 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345156908 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345163107 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345197916 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345236063 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345257044 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345283985 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345289946 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345304966 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345305920 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345318079 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345326900 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345336914 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345351934 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345383883 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345393896 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345412016 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345438004 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345443964 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345463037 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345480919 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345485926 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345495939 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345515013 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345531940 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345537901 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345561981 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345566988 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345577955 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345582962 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345608950 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345609903 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345634937 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345638037 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345650911 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345663071 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345679998 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345695019 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345700979 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345721006 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345743895 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345750093 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345761061 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345782042 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345791101 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345805883 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345808983 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345819950 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345832109 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345844030 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345864058 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345874071 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345886946 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345906019 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345906973 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345917940 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345932007 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345947981 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345953941 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.345968008 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345987082 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.345993996 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346009970 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346039057 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346045017 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346064091 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346066952 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346082926 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346086025 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346095085 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346116066 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346148968 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346159935 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346177101 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346203089 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346209049 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346221924 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346240044 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346246958 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346265078 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346290112 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346293926 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346317053 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346318960 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346333981 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346343040 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346359968 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346380949 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346381903 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346391916 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346422911 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346437931 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346452951 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346477985 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346482038 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346503973 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346517086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346532106 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346538067 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346554995 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346568108 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346575022 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346596956 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346599102 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346615076 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346616030 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346626997 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346643925 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346672058 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346674919 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346689939 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346712112 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346714973 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346735954 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346740961 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346762896 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346765041 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346788883 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346795082 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346805096 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346815109 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346846104 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346851110 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346860886 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346879959 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346883059 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346889973 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346909046 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346946001 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.346985102 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.346998930 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347031116 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347035885 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347050905 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347050905 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347068071 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347074986 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347086906 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347100973 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347131014 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347141027 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347157955 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347189903 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347194910 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347213030 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347214937 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347225904 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347230911 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347244024 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347253084 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347290039 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347295046 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347327948 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347327948 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347345114 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347367048 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347372055 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347394943 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347398996 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347407103 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347424984 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347438097 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347455025 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347460032 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347477913 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347491026 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347502947 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347508907 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347521067 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347544909 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347549915 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347560883 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347568035 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347583055 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347584009 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347599030 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347611904 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347640991 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347671032 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347683907 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347718954 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347723961 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347734928 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347738028 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347752094 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347755909 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347771883 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347783089 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347815990 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347820997 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347831011 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347850084 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347855091 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347876072 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347878933 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347901106 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347904921 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347928047 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347945929 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347953081 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.347958088 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347973108 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.347978115 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348016024 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348020077 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348048925 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348054886 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348059893 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348078966 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348092079 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348098040 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348119974 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348120928 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348140001 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348145962 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348155022 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348167896 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348201990 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348211050 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348237038 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348256111 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348261118 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348283052 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348292112 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348298073 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348303080 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348321915 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348335981 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348341942 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348368883 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348381042 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348388910 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348407030 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348437071 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348442078 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348464966 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348467112 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348479986 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348490000 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348510981 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348521948 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348553896 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348560095 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348570108 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348587036 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348593950 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348598957 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348624945 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348650932 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348653078 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348664999 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348690033 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348695993 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348701000 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348731995 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348745108 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348750114 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348757982 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348778963 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348779917 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348803043 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348808050 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348829985 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348854065 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348865032 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348881006 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348912954 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348918915 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348938942 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348953962 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348956108 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.348964930 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348982096 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.348994017 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349025965 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349033117 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349042892 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349060059 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349064112 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349076033 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349091053 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349123001 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349136114 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349152088 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349179029 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349184036 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349199057 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349205017 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349219084 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349225044 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349240065 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349245071 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349273920 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349278927 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349311113 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349323034 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349337101 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349364042 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349369049 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349391937 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349392891 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349411964 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349416971 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349426985 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349441051 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349473000 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349509001 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349524975 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349553108 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349559069 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349571943 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349587917 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349610090 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349626064 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349662066 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349667072 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349677086 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349697113 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349701881 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349710941 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349726915 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349756002 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349775076 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349791050 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349817038 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349822998 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349836111 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349843979 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349854946 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349857092 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349872112 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349884987 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349914074 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.349931002 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349946976 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.349998951 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350004911 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350016117 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350038052 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350039005 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350050926 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350066900 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350099087 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350104094 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350110054 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350127935 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350137949 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350153923 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350157976 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350171089 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350183010 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350191116 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350215912 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350222111 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350239992 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350248098 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350263119 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350265980 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350276947 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350291967 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350317001 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350331068 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350347042 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350372076 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350377083 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350393057 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350399017 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350410938 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350419044 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350431919 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350441933 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350472927 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350481033 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350516081 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350531101 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350538015 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350553989 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350572109 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350631952 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350655079 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350677013 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350682974 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.350708008 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.350722075 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.351042986 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351068974 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351094007 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.351099968 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351123095 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.351136923 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.351473093 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351489067 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351541042 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.351551056 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351582050 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.351896048 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351912022 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351953983 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.351959944 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.351995945 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.352209091 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.352237940 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.352262020 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.352268934 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.352289915 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.352308989 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.352595091 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.352611065 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.352955103 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.352966070 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.352973938 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.353005886 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.353034019 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.353038073 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.353050947 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.353076935 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.353238106 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.372366905 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.372399092 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.372431040 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.372448921 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.372471094 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.372489929 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.373568058 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.373585939 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.373611927 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.373620033 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.373641968 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.373658895 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.373994112 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.374012947 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.374042034 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.374047995 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.374064922 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.374082088 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.374737024 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.374763012 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.374788046 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.374794960 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.374819994 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.374834061 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.375116110 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.375133038 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.375163078 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.375168085 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.375196934 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.375212908 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.383852005 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.383884907 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.383913994 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.383924007 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.383965015 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.384041071 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.384051085 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.384073019 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.384094954 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.384113073 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.384118080 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.384118080 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.384145021 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.384170055 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.384175062 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.384192944 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.384222984 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.419714928 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419738054 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419787884 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419806957 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.419815063 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419826031 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419863939 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419878006 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419888020 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.419895887 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419919968 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419925928 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.419939041 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419962883 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.419966936 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.419991016 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.419994116 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420047045 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420047045 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420056105 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420100927 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420105934 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420140028 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420152903 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420154095 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420161963 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420176983 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420176983 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420202971 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420205116 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420214891 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420234919 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420260906 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420262098 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420270920 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420310974 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420320988 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420332909 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420339108 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420344114 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420356989 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420382977 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420382977 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420391083 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420406103 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420422077 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420427084 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420432091 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420445919 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420450926 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420468092 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420471907 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420483112 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420489073 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420522928 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420526028 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420530081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420542955 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420555115 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420574903 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420578003 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420594931 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420597076 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420624018 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420628071 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420654058 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420656919 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420677900 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420681000 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420694113 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420712948 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420717955 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420739889 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420741081 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420758963 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420768976 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420773029 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420802116 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420804024 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420818090 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420834064 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420838118 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420856953 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420875072 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420887947 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420892000 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420914888 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420917034 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420931101 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420948029 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420950890 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420977116 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.420978069 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420989037 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.420999050 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421001911 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421034098 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421036959 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421049118 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421057940 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421061039 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421082020 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421092987 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421107054 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421113968 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421118021 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421133995 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421153069 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421164036 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421166897 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421175957 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421214104 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421216965 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421221972 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421240091 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421247959 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421263933 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421263933 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421272993 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421292067 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421293974 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421328068 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421336889 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421340942 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421354055 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421384096 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421396017 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421400070 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421431065 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421436071 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421456099 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421461105 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421464920 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421487093 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421504974 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421513081 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421516895 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421530962 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421550989 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421554089 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421564102 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421576977 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421581030 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421597958 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421601057 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421614885 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421617985 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421670914 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421672106 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421681881 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421701908 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421730042 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421735048 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421756983 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421789885 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421812057 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421828032 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421830893 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421838045 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421852112 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421864986 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421883106 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421886921 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421897888 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421911001 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421916008 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421931982 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421935081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421952009 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.421962023 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.421971083 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422005892 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422009945 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422019005 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422035933 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422038078 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422060013 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422063112 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422084093 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422086954 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422142982 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422146082 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422240973 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422280073 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422311068 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422312021 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422321081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422338009 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422343969 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422365904 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422382116 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422388077 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.422409058 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.422439098 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.435980082 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.443562031 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.443931103 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.469871044 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.469899893 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.469938993 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.469949007 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.470006943 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.471719980 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.471739054 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.471770048 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.471781969 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.471817970 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.472925901 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.472948074 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.473006010 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.473016024 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.473181009 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.474131107 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.474154949 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.474188089 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.474194050 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.474234104 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.474965096 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.474989891 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.475040913 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.475047112 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.475080013 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.481283903 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.481303930 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.481348038 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.481354952 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.481394053 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.481667042 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.481684923 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.481729031 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.481734991 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.481825113 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.482944012 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.482961893 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.482999086 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.483005047 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.483047962 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.484174013 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.484191895 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.484227896 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.484232903 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.484292030 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.484707117 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.484725952 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.484757900 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.484766960 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.484790087 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.484810114 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.486114025 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.486136913 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.486169100 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.486174107 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.486207962 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.487488985 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.487509966 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.487530947 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.487575054 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.487579107 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.487612009 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.487895012 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.487916946 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.487943888 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.487947941 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.487967968 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.487992048 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.488759995 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.488794088 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.488809109 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.488812923 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.488846064 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.488867044 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.488914013 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.489957094 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.489975929 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.490057945 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.490057945 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.490065098 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.490118980 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.490329981 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.490712881 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.490729094 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.490772009 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.490775108 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.490814924 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.491765022 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.491789103 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.491816044 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.491820097 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.491859913 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.491875887 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.492809057 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.492831945 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.492851973 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.492901087 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.492903948 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.492969036 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.493056059 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.493901968 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.493918896 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.493977070 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.493983030 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.494033098 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.494611025 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.494632959 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.494678020 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.494683027 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.494720936 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.494734049 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.495496035 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.495527983 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.495547056 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.495552063 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.495580912 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.495603085 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.495655060 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.496395111 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.496419907 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.496448040 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.496452093 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.496491909 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.497283936 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.497299910 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.497351885 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.497355938 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.497419119 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.498209000 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.498224020 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.498265028 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.498267889 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.498493910 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.498912096 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.498944998 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.498965025 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.498969078 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.499016047 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.499202013 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.499661922 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.499676943 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.499727964 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.499731064 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.499788046 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.500559092 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.500574112 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.500633001 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.500636101 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.500765085 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.501481056 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.501494884 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.501537085 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.501543045 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.501596928 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.503279924 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.503295898 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.503339052 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.503345013 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.503550053 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.504023075 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.504055023 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.504075050 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.504080057 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.504118919 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.504141092 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.504529953 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.504831076 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.505779028 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.505793095 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.505829096 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.505832911 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.505865097 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.505888939 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.506239891 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.506272078 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.506309032 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.506315947 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.506337881 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.506355047 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.507002115 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.507020950 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.507071018 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.507075071 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.507107019 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.507122040 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.508061886 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.508245945 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.508282900 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.508306980 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.508312941 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.508349895 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.508349895 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.509056091 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.517930031 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.517946005 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.518003941 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.518032074 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.518140078 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.518358946 CET	49709	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.518383026 CET	443	49709	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.570472002 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.570499897 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.570566893 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.570594072 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.570614100 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.570817947 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.571458101 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.571475983 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.571516037 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.571521997 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.571548939 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.571566105 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.572204113 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.572230101 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.572278976 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.572283030 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.572319984 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.573427916 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.573446035 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.573502064 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.573508978 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.573558092 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.577572107 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.577598095 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.577634096 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.577661991 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.577671051 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.577694893 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.580194950 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.580213070 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.580254078 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.580260038 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.580296040 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.580317974 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.582370996 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.582395077 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.582439899 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.582447052 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.582472086 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.582557917 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.586081982 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.586100101 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.586168051 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.586174965 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.586210012 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.597552061 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.597570896 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.597613096 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.597625017 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.597646952 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.597675085 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.598623037 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.598649979 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.598683119 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.598687887 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.598726988 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.598747015 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.601747990 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.601767063 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.601800919 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.601809025 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.601838112 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.601851940 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.602901936 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.602919102 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.602958918 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.602963924 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.602988958 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.603005886 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.603970051 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.603986025 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.604058981 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.604072094 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.604113102 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.605007887 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.605026007 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.605102062 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.605108023 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.605149031 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.605953932 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.605971098 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.606034040 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.606040955 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.606079102 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.606775999 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.606795073 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.606852055 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.606859922 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.606899977 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.607711077 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.607728004 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.607765913 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.607770920 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.607800007 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.607825994 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.608835936 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.608861923 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.608901978 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.608913898 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.608951092 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.609028101 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.610057116 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.610079050 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.610132933 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.610143900 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.610167980 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.610189915 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.613506079 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.613523960 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.613599062 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.613599062 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.613604069 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.613822937 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.614579916 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.614597082 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.614660025 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.614665031 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.614703894 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.615516901 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.615533113 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.615585089 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.615591049 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.615643024 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.615796089 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.615813017 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.615880966 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.615891933 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.615900993 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.615959883 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.616858006 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.616908073 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.616911888 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.616919994 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.616971970 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.617475033 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.617496967 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.617525101 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.617536068 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.617569923 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.617590904 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.618449926 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.618468046 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.618505955 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.618522882 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.618541956 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.618557930 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.619375944 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.619393110 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.619445086 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.619450092 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.619550943 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.620282888 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.620299101 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.620368004 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.620372057 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.620656013 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.621153116 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.621169090 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.621215105 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.621218920 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.621249914 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.621411085 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.622204065 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.622220039 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.622281075 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.622286081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.622386932 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.623189926 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.623203993 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.623265982 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.623270988 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.623357058 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.624038935 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.624053955 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.624111891 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.624116898 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.624160051 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.624176979 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.624783039 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.624799013 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.624844074 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.624849081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.624882936 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.624923944 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.625641108 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.625659943 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.625725031 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.625730991 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.625756979 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.625773907 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.626677036 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.626693010 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.626737118 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.626741886 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.626766920 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.626993895 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.627758980 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.627779961 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.627830982 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.627835989 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.627867937 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.627893925 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.628652096 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.628669977 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.628716946 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.628722906 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.628731966 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.628768921 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.629792929 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.629816055 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.629853010 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.629857063 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.629889011 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.630093098 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.630187988 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.630361080 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.630613089 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.630629063 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.630685091 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.630688906 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.630743980 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.631602049 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.631623983 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.631675959 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.631683111 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.631740093 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.632303953 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.632318020 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.632371902 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.632386923 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.632437944 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.633326054 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.633341074 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.633411884 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.633418083 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.633624077 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.634620905 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.634634972 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.634691000 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.634700060 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.634716988 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.634751081 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.635564089 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.635585070 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.635627031 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.635631084 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.635663033 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.635674000 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.636831999 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.636847019 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.636889935 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.636895895 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.636929035 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.636957884 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.637433052 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.637447119 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.637490034 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.637495995 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.637523890 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.637547970 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.638495922 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.638515949 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.638556004 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.638562918 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.638592958 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.638603926 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.689707994 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.689743996 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.689827919 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.689985037 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.692771912 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.692815065 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.696278095 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.736526012 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.736551046 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.736594915 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.736613035 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.736645937 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.736660957 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.738040924 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.738058090 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.738090992 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.738143921 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.738147974 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.738249063 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.750561953 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.750588894 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.750653028 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.750670910 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.750710011 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.750859976 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.750878096 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.750916004 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.750922918 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.750960112 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.750973940 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.763438940 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.763458014 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.763497114 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.763500929 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.763510942 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.763529062 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.763561010 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.763567924 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.763586044 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.763602018 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764286041 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764302015 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764353991 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764368057 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764378071 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764415026 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764430046 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764442921 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764446974 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764452934 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764475107 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764496088 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764509916 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764514923 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764523983 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764564991 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764576912 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764578104 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764586926 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764611959 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764635086 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764636993 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764643908 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764661074 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764681101 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764684916 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764712095 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764722109 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764735937 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764776945 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764780045 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764789104 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764818907 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764825106 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764833927 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764847994 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764880896 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764884949 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764899015 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764909029 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764916897 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764940023 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.764944077 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764959097 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764971972 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.764974117 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765005112 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765008926 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765016079 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765029907 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765036106 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765059948 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765064001 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765079975 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765088081 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765091896 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765117884 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765120983 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765141010 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765151978 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765160084 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765177011 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765181065 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765198946 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765225887 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765253067 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765259027 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765269041 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765285969 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765305042 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765321970 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765331984 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765336990 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765367031 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765379906 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765384912 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765393019 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765417099 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765430927 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765436888 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765440941 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765463114 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765475988 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765487909 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765491962 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765508890 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765513897 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765541077 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765544891 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765552998 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765567064 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765572071 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765590906 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765594959 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765602112 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765618086 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765620947 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765645027 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765649080 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765671968 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765686035 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765698910 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765737057 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765738964 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765748024 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765762091 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765767097 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765801907 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765803099 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765811920 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765830040 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765830994 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765861034 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765870094 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765881062 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765882015 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765899897 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765903950 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765909910 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765935898 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765942097 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765955925 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765969038 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.765973091 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765995026 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.765996933 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766014099 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766024113 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766031027 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766051054 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766057968 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766063929 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766093969 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766097069 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766117096 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766129017 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766135931 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766153097 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766155958 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766180992 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766186953 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766196966 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766207933 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766211033 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766235113 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766242027 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766258955 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766263008 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766273975 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766292095 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766304970 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766314030 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766316891 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766335011 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766346931 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766355991 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766366959 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766385078 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766618967 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766633987 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766673088 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766678095 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766727924 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.766978979 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.766993046 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.767024040 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.767028093 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.767052889 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.767075062 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.767486095 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.767501116 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.767573118 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.767576933 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.767616987 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.767931938 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.767946959 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.767993927 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.767997980 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.768028021 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.768105984 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.768254995 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.768270969 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.768321037 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.768326044 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.768364906 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.774941921 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.774970055 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.775018930 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.775039911 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.775055885 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.775109053 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.776058912 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.776079893 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.776128054 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.776133060 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.776166916 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.776186943 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.778769970 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.778790951 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.778856039 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.778862000 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.778898001 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.778918028 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.782430887 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.782449007 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.782489061 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.782493114 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.782532930 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.788662910 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.788680077 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.788744926 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.788752079 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.788794041 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.790946007 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.790962934 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.791049004 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.791054964 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.791100025 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.793201923 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.793219090 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.793292046 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.793298006 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.793337107 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.803580999 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.803596020 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.803682089 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.803687096 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.803725004 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.806989908 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.807020903 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.807049990 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.807061911 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.807113886 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.808125973 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.808145046 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.808181047 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.808187008 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.808229923 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.808243036 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.810750961 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.810772896 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.810843945 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.810847998 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.810887098 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.815164089 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.815182924 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.815221071 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.815226078 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.815258026 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.815274954 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.816921949 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.817193985 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.817208052 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.817240000 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.817285061 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.817289114 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.817358017 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.817545891 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.817564964 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.817605019 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.817608118 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.817652941 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.818059921 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.818077087 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.818128109 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.818131924 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.818191051 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.818593025 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.818612099 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.818653107 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.818656921 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.818700075 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.819113970 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.819133997 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.819189072 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.819192886 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.819228888 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.821172953 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.821191072 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.821229935 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.821233988 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.821274996 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.832593918 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.832628965 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.832652092 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.832658052 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.832679987 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.832684994 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.832691908 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.832705975 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.832709074 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.832762003 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.832787037 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.832875013 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.833482027 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.833501101 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.833545923 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.833549976 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.833579063 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.833600998 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.834745884 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.834767103 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.834800005 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.834805012 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.834865093 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.835695982 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.835711002 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.835786104 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.835791111 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.835899115 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.836657047 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.836677074 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.836747885 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.836747885 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.836755037 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.836957932 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.842283964 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.842308998 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.842499971 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.842513084 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.869509935 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.878417015 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.882534027 CET	49708	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.882549047 CET	443	49708	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.930480003 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.930507898 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.930572033 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.930596113 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.930608034 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.930761099 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.931241035 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931267977 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931299925 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.931307077 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931313992 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931349039 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931350946 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.931368113 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.931372881 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931400061 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.931422949 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.931713104 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931727886 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931787014 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.931797028 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.931924105 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.932602882 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.932617903 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.932667017 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.932677984 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.932703972 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.932786942 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.933666945 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.933681965 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.933743000 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.933753014 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.933810949 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.934545994 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.934561014 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.934606075 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.934613943 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.934637070 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.934714079 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935101986 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935117006 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935170889 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935178995 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935240030 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935259104 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935314894 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935314894 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935322046 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935383081 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935398102 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935441017 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935458899 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935496092 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935519934 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935519934 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935519934 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935519934 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935528994 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935548067 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935575008 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935638905 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935658932 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935681105 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.935684919 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935689926 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:32.935729027 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.938132048 CET	49712	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:32.938148022 CET	443	49712	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.044998884 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.045284986 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.045309067 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.045646906 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.046082020 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.046149015 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.046155930 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.048398018 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.048593044 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.048603058 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.048922062 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.049221992 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.049268961 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.049364090 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.088233948 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.088490963 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.096225977 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.239324093 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.239391088 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.239403009 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.239434958 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.239450932 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.239474058 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.239487886 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.239501953 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.239528894 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.239537954 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.240284920 CET	49715	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.240302086 CET	443	49715	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.337021112 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.337047100 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.337063074 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.337105036 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.337129116 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.337157965 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.337183952 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.337188959 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.337219954 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.337233067 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.337362051 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.338651896 CET	49716	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.338665962 CET	443	49716	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.421660900 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:33.421710968 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:33.421782017 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:33.422455072 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:33.422465086 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:33.646770000 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:33.652340889 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:33.652367115 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:33.653532028 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:33.653613091 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:33.656718016 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:33.656781912 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:33.696686983 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:33.696702957 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:33.744103909 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:33.943037987 CET	49718	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.943093061 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.943159103 CET	49718	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.943444967 CET	49718	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.943461895 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.944516897 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.944549084 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.944613934 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.944900990 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.944920063 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.945656061 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.945700884 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:33.945794106 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.946332932 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:33.946347952 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.074476957 CET	49673	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:34.074496031 CET	49674	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:34.126775980 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.126821995 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.126919985 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.136059046 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.138624907 CET	49718	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.138648987 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.138989925 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.139739990 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.139759064 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.140147924 CET	49718	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.140297890 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.140470028 CET	49718	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.151599884 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.151957035 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.180041075 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.180067062 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.180460930 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.180502892 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.180951118 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.182425976 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.182482958 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.182612896 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.182698965 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.183420897 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.183554888 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.184225082 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.184351921 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.184360027 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.188244104 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.228148937 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.232230902 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.335081100 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.335213900 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.335268021 CET	49718	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.336607933 CET	49718	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.336627007 CET	443	49718	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.340410948 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.340527058 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.340584040 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.402220964 CET	49672	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:34.414589882 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.414613962 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.414654970 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.414705992 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.414730072 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.414743900 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.414745092 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.414768934 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.414798021 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.456655979 CET	49722	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.456702948 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.456758022 CET	49722	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.459373951 CET	49722	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.459387064 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.467828989 CET	49719	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.467858076 CET	443	49719	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.473524094 CET	49720	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.473566055 CET	443	49720	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.477603912 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.477644920 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.477706909 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.479157925 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.479173899 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.479780912 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.479818106 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.479917049 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.480791092 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.480809927 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.499676943 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.499844074 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.522232056 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.522268057 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.522598982 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.560051918 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.560086012 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.560141087 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.560266972 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.560334921 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.560570955 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.560619116 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.560633898 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.560853958 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.560986996 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.561017036 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.561201096 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.561214924 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.561398029 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.561405897 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.572835922 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.595401049 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.603434086 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.603466988 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.603605986 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.604765892 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.604784966 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.636238098 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.651926041 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.652450085 CET	49722	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.652486086 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.652863026 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.653204918 CET	49722	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.653278112 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.653430939 CET	49722	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.675087929 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.675369978 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.675391912 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.676145077 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.676332951 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.676357031 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.676517963 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.676584005 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.676951885 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.677083969 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.677156925 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.677475929 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.677572012 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.677845955 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.677851915 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.677901030 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.696261883 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.720426083 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.724246979 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.786580086 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.786838055 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.786880970 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.787990093 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.788057089 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.789681911 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.789915085 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.789946079 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.791033983 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.791085958 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.791340113 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.791908979 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.791924953 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.793205976 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.793258905 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.797180891 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.797360897 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.797367096 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.798391104 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.798444986 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.798743010 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.798799992 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.798918009 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.840245008 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.842884064 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.842904091 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.844911098 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.844994068 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.845062971 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.845274925 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.845310926 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.845325947 CET	49721	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.845331907 CET	443	49721	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.852294922 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.852416039 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.852622032 CET	49722	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.855361938 CET	49722	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.855390072 CET	443	49722	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.878518105 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.878559113 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.878628969 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.878892899 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:34.878906965 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:34.889286041 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.906955957 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.906977892 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.907022953 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.907052994 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.907066107 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.907128096 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.908087015 CET	49723	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.908127069 CET	443	49723	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.918713093 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.918740988 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.918750048 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.918778896 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.918807030 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.918812037 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.918838978 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.918865919 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.919730902 CET	49724	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.919747114 CET	443	49724	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.934031963 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.934056997 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.934281111 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.934504032 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.934516907 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.935065985 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.935255051 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.935261965 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.935339928 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.935609102 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.935741901 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.935750008 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.935789108 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.937819004 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.937954903 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.938051939 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.938081026 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.947137117 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.947199106 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.947385073 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.948208094 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.948249102 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.948395014 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.948420048 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.948421955 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.953974009 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.953985929 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.981275082 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.981302977 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.981333971 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.981343031 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:34.981359005 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:34.997092009 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.997231960 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:34.997306108 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.999619961 CET	49728	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:34.999629021 CET	443	49728	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.028959990 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.029098988 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.055541992 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.055629015 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.055695057 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.056574106 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.056628942 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.056741953 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.056775093 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.056793928 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.056821108 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.056838036 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.057116985 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.057172060 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.057214975 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.057224035 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.057255030 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.057351112 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.057507038 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.057545900 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.057554007 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.057683945 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.057723999 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.057729006 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.058109045 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.058156013 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.058161974 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.058227062 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.058276892 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.058281898 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.058290958 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.058327913 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.058896065 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.059048891 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.059089899 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.059102058 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.059288025 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.059324980 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.059334993 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.059753895 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.059798002 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.059803963 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.059878111 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.059920073 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.059925079 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.060046911 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.060081959 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.060089111 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.060621977 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.060664892 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.060672998 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.060802937 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.060882092 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.060892105 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.061053038 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.061094999 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.061101913 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.061517954 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.061573029 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.061620951 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.061626911 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.061661959 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.061666012 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.061824083 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.061882019 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.061887980 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.062726021 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.062769890 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.062777996 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.080362082 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.081183910 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.081242085 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.095015049 CET	49727	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.095045090 CET	443	49727	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.095400095 CET	49725	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.095413923 CET	443	49725	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.105874062 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.132112980 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.132539034 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.132559061 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.133274078 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.133610964 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.133677959 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.133802891 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.144144058 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.144700050 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.144778967 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.145129919 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.146039009 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.146120071 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.146675110 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.150811911 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.151106119 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.151130915 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.151479006 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.151567936 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.151637077 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.151659966 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.151758909 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.151881933 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.151931047 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.152354002 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.152420044 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.152623892 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.152678013 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.153008938 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.153122902 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.153167963 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.153219938 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.153831959 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.153897047 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.154208899 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.154263020 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.154274940 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.154354095 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.154472113 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.176234007 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.188250065 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.196865082 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.236149073 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:35.236232042 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:35.327147007 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.327171087 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.327183962 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.327255964 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.327286005 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.327313900 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.342498064 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.342559099 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.342582941 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.342597961 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.342645884 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.347031116 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:35.347048044 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:35.347392082 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:35.400235891 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:35.405553102 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:35.410305023 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.410336018 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.410451889 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.412286997 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.412926912 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.412936926 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.416177034 CET	49731	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.416198969 CET	443	49731	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.430609941 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.430641890 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.430704117 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.431158066 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.431169033 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.432182074 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.432214975 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.432447910 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.433963060 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.433975935 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.434705019 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.436523914 CET	49730	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.436537981 CET	443	49730	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.437663078 CET	49726	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.437669992 CET	443	49726	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.452224970 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:35.456239939 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.550982952 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.551009893 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.551038980 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.551067114 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.551075935 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.551348925 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.553852081 CET	49732	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.553869963 CET	443	49732	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.595885992 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:35.595948935 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:35.596158981 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:35.600167036 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:35.600167036 CET	49729	443	192.168.2.6	23.221.242.90
Mar 28, 2024 14:33:35.600179911 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:35.600191116 CET	443	49729	23.221.242.90	192.168.2.6
Mar 28, 2024 14:33:35.609087944 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.609360933 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.609373093 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.610141039 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.610738039 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.610853910 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.610858917 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.610919952 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.623014927 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.623505116 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.623512030 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.623814106 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.624207020 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.624265909 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.624510050 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.628098965 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.628287077 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.628304958 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.629163980 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.629651070 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.629715919 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.629848003 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.645397902 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.645430088 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.645518064 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.646044016 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.646054983 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.648350954 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.648375034 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.648425102 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.648685932 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.648699045 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.650043964 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.650078058 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.650180101 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.650434017 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.661319971 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.661333084 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.668226957 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.676223040 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.680248976 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.680274010 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.680396080 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.680583954 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.680593967 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.781064987 CET	443	49698	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:35.781853914 CET	49698	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:35.841793060 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.844010115 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.860284090 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.866843939 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.866873980 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.866928101 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.866950035 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.867475986 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.867502928 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.867526054 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.867527962 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.867537975 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.867554903 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.867630005 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.867651939 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.867687941 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.867695093 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.867738008 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.867810965 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.868294954 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.868316889 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.868335962 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.868345022 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.868386030 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.868475914 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.868699074 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.868992090 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.868999958 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.869302034 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.869349003 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.869371891 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.869374990 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.869385004 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.869410038 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870120049 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870155096 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870163918 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870268106 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870291948 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870317936 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870322943 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870331049 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870363951 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870368004 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870381117 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870418072 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870424986 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870450974 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870475054 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870486021 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870492935 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870501995 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870517969 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870541096 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870556116 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870562077 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.870625019 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.870630026 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.872080088 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.872117996 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.872127056 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.872941017 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.872961998 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.873008013 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.873016119 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.873306990 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.873616934 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.873677015 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.875442028 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.875519991 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.875550985 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.875564098 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.875575066 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.875590086 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.878511906 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.887841940 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.888154030 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.901352882 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.910926104 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.910937071 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.911946058 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.911956072 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.911999941 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.912055016 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.912477970 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.912488937 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.912744045 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.912756920 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.912899971 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.913064003 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.913113117 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.913194895 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.913763046 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.913781881 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:35.913841963 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.914072990 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.914093018 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:35.914144039 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.914248943 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.914272070 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:35.914307117 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.914870977 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.914941072 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.915219069 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.915225029 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.915584087 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.915592909 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:35.915898085 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.915905952 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:35.916245937 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:35.916274071 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:35.918095112 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.919064999 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.919231892 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.919266939 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.919683933 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.919846058 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.920191050 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.920449018 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.920456886 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.920500994 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.925168991 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.961920023 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.961997986 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.962093115 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.962126970 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.962136030 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.962143898 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.962166071 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.962625027 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.962846994 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.963851929 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.963897943 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.963907003 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.963979006 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.964231968 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.965490103 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.965543032 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.967128038 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.967174053 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.967711926 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.967771053 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.967879057 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.967932940 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.967941046 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.968038082 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.968111992 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.968233109 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.970597029 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.970655918 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.970673084 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.970714092 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.971590996 CET	49733	443	192.168.2.6	104.18.4.175
Mar 28, 2024 14:33:35.971606016 CET	443	49733	104.18.4.175	192.168.2.6
Mar 28, 2024 14:33:35.972400904 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.972460985 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.972691059 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.972739935 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.972757101 CET	443	49735	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.972769976 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.972800016 CET	49735	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.975735903 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.975760937 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.975776911 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.975819111 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.975827932 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.975838900 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:35.975888014 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:35.975888014 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.008235931 CET	49734	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.008254051 CET	443	49734	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.040349960 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.040374041 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.040409088 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.040424109 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.040437937 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.040494919 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.040812016 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.040874958 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.040915966 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.042304993 CET	49738	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.042318106 CET	443	49738	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.042474031 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.042500019 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.042542934 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.042551994 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.042562962 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.042573929 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.042582989 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.042598963 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.042622089 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.046148062 CET	49737	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.046165943 CET	443	49737	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.054954052 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.054981947 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.055003881 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.055036068 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.055059910 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.055084944 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.055099964 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.055322886 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.055372000 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.055381060 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.055394888 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.055432081 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.060293913 CET	49739	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.060317993 CET	443	49739	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.081562996 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.081598043 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.081737041 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.081795931 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.081919909 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.081990957 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.082628965 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.082643032 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.083636999 CET	49740	443	192.168.2.6	18.211.106.230
Mar 28, 2024 14:33:36.083652973 CET	443	49740	18.211.106.230	192.168.2.6
Mar 28, 2024 14:33:36.116704941 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.121375084 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.121388912 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.122454882 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.122530937 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.122874975 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.122944117 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.123006105 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.129894018 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.132462978 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.132484913 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.133486986 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.133552074 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.137056112 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.137136936 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.137392998 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.137409925 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.139519930 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.139858007 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.139868975 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.140935898 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.141032934 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.143591881 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.143662930 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.143831968 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.143837929 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.164242983 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.172895908 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.172914028 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.188873053 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.188886881 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.222168922 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.279921055 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.280160904 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.280180931 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.281215906 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.281280994 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.281658888 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.281725883 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.281878948 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.281887054 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.334896088 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.345185995 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.345211983 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.345268011 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.345520973 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.345529079 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.346261978 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.346272945 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.346318007 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.346576929 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.346586943 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.364877939 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.364945889 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.365210056 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.365437031 CET	49744	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.365454912 CET	443	49744	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.387162924 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.387226105 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.387346983 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.388098955 CET	49742	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.388127089 CET	443	49742	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.388942957 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.388988018 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389019966 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389046907 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389056921 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.389065027 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389076948 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389096975 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.389122963 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.389245987 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389452934 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389483929 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389533997 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.389544010 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.389642954 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.389647961 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.390242100 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.390276909 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.390302896 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.390328884 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.390352964 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.390352964 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.390362024 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.390433073 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.391074896 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.391124010 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.391151905 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.391176939 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.391230106 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.391230106 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.391236067 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392088890 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392121077 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392151117 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392152071 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.392162085 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392210960 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392211914 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.392226934 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392340899 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.392834902 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392926931 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392950058 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.392954111 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.392987967 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.393013000 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.393049955 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.393049955 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.393069029 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.393821001 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.393857956 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.393884897 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.393889904 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.393912077 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.393942118 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.393946886 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.394038916 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.394686937 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.394743919 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.394773006 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.394793987 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.394799948 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.394840002 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.395884037 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.395942926 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.487755060 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.487847090 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.487869024 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.487973928 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.488307953 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.488405943 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.488822937 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.488908052 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.489387035 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.489443064 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.490073919 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.490134954 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.490571976 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.490622997 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.491415977 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.491483927 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.491494894 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.491530895 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.491609097 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.491686106 CET	49743	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.491700888 CET	443	49743	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544279099 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544337988 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544368029 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544397116 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544426918 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544439077 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.544457912 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544470072 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.544492006 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544502020 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.544507980 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.544544935 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.544550896 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545067072 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545104980 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545105934 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.545116901 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545152903 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.545169115 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545258045 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545311928 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.545317888 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545885086 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545917988 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545928955 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.545937061 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545969009 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.545969963 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.545980930 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.546019077 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.546025038 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.546830893 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.546865940 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.546873093 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.546886921 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.546919107 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.546925068 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.546931028 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.546972990 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.546977997 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.547804117 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.547851086 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.547858953 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.547900915 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.547931910 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.547960997 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.547971964 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.547980070 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.547995090 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.548861027 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.548907042 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.548914909 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.548954964 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.548986912 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.549015999 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.549024105 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.549031019 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.549046040 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.549695015 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.549736977 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.549736977 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.549748898 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.549789906 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.549794912 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.549804926 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.549846888 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.639378071 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.639456034 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.639471054 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.639530897 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.639650106 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.639698029 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.644453049 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.644517899 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.644783974 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.644836903 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.645003080 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.645052910 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.645203114 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.645252943 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.645343065 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.645385981 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.647967100 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.648072958 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.648125887 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.649647951 CET	49745	443	192.168.2.6	104.18.5.175
Mar 28, 2024 14:33:36.649663925 CET	443	49745	104.18.5.175	192.168.2.6
Mar 28, 2024 14:33:36.656443119 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.656785011 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.656799078 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.657869101 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.657926083 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.663868904 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.663957119 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.664408922 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.664419889 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.711380959 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.712985039 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.713459015 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.713469982 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.715497017 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.715568066 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.720530033 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.720633984 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.720969915 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.720979929 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.721147060 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.721182108 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.721322060 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.721342087 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.721400023 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:36.768229961 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:36.952847958 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.952874899 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.952887058 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.952919006 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.952944994 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.952948093 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.952963114 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.952991009 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.953011036 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.954380035 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.954396009 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.954449892 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:36.954458952 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:36.954488993 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.052139044 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.052169085 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.052210093 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.052237034 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.052252054 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.052278996 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.052303076 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.052365065 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.057476997 CET	49750	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.057493925 CET	443	49750	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.257875919 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:37.258214951 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:37.258274078 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:37.269711971 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.269720078 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.269834995 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.271373034 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.271384954 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.272310019 CET	49749	443	192.168.2.6	35.199.162.154
Mar 28, 2024 14:33:37.272322893 CET	443	49749	35.199.162.154	192.168.2.6
Mar 28, 2024 14:33:37.586863995 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.587208033 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.587233067 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.588351965 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.588423014 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.592926025 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.593003035 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.635631084 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.635647058 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.682450056 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.867841005 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.867885113 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.867949009 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.868251085 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.868272066 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.974981070 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.975006104 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.975191116 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.975389004 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.975402117 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.976317883 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.976366997 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:37.976422071 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.976660013 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:37.976675987 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.243979931 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.244421959 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.244446039 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.244776964 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.245914936 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.245975018 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.246495008 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.292001963 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.292243958 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.292244911 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.292270899 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.293632984 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.293699980 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.294400930 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.294461012 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.295434952 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.295443058 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.300554037 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.300723076 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.300745010 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.301433086 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.301729918 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.301788092 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.301830053 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.340817928 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.344240904 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.590007067 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.590030909 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.590039015 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.590092897 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.590121031 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.590137959 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.590176105 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.590207100 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.590303898 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.592715025 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.592734098 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.593055010 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.593070984 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.593333960 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.600534916 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.600563049 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.600579977 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.600661039 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.600688934 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.600707054 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.600737095 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.600770950 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.602149963 CET	49756	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.602170944 CET	443	49756	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.665271044 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.665297985 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.665313959 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.665458918 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.665483952 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.665502071 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.665673971 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.668917894 CET	49754	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.668932915 CET	443	49754	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.689739943 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.689769983 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.689882994 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.689882994 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.689924002 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.690061092 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.692224979 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.692245007 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.692313910 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.692348957 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.692368984 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.692481041 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.693156958 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.693175077 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.693480968 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.693502903 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.693531036 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.696085930 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.791100025 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.791121006 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.791241884 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.791280031 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.791286945 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.791316032 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.791330099 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.791341066 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.791341066 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.791388035 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.791402102 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.791415930 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.791558027 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.796560049 CET	49757	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.796586037 CET	443	49757	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.826347113 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.848309994 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.848361015 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.848623991 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.850419044 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:38.850430965 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:38.868240118 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.029930115 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.029953957 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.029961109 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.029993057 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.030009985 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.030030966 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.030031919 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.030056000 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.030073881 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.030092955 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.030775070 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.030795097 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.030803919 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.030824900 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.030833960 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.030855894 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.030855894 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.031285048 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.131923914 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.131952047 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.131994009 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.132047892 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.132147074 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.132190943 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.132191896 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.132201910 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.132230043 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.135914087 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.141093016 CET	49753	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.141112089 CET	443	49753	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.221502066 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.221502066 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.221545935 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.221546888 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.221632004 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.221635103 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.221926928 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.221939087 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.222495079 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.222496986 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.222508907 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.222521067 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.223548889 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.224301100 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.224322081 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.547321081 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.590126991 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.712544918 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.712559938 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.713953972 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.714023113 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.714664936 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.714734077 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.714996099 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.715003967 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.751884937 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.752485991 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.752497911 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.752844095 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.754252911 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.754323959 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.754513025 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.761359930 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.800232887 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922027111 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922065973 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922072887 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922100067 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922111034 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922117949 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922122955 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.922142982 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922174931 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.922187090 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922198057 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.922249079 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.922616005 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.922993898 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.923019886 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.923388958 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.925057888 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.925127029 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.925546885 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.926120043 CET	49763	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.926135063 CET	443	49763	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.968240023 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.977217913 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.977241039 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.977312088 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:39.977317095 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.977397919 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.981750965 CET	49760	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:39.981769085 CET	443	49760	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:40.147891045 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:40.147918940 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:40.148015022 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:40.148044109 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:40.148057938 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:40.148102999 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:40.312638044 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:40.365253925 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.474503994 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.474539995 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.474606991 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.474997044 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.475027084 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.475552082 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.475564003 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.476186991 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.476201057 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.476264954 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.476871014 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.476932049 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.477104902 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.477111101 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.528368950 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.535116911 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.535161018 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.535227060 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.535783052 CET	49766	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.535824060 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.535871983 CET	49766	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.536237955 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.536248922 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.536395073 CET	49766	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.536411047 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.537663937 CET	49762	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.537695885 CET	443	49762	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.569077969 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.569108009 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.569161892 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.569350004 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.569365978 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.627408028 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.627428055 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.627511978 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.627532005 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.627576113 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.627580881 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.627593994 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.627635002 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.628978968 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.628993034 CET	443	49761	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.629003048 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.629036903 CET	49761	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.634064913 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.634088993 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.634154081 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.636563063 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.636580944 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.799129009 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:41.799163103 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:41.799226046 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:41.799444914 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:41.799449921 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:41.842032909 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.860296011 CET	49766	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.860311985 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.861496925 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.862036943 CET	49766	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.862119913 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.862222910 CET	49766	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.863194942 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.863773108 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.863789082 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.864140034 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.865351915 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.865416050 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.865624905 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:41.873128891 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.875268936 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.875283957 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.876410007 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.876466036 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.877477884 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.877552986 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.878000975 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.878010035 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.908230066 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.908242941 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:41.917617083 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.947657108 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.948753119 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.954111099 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.954122066 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.954288006 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.954299927 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.955147028 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.955207109 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.955367088 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.955427885 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.961664915 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.961755037 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.969120026 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.969233990 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.969538927 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.969551086 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:41.969630003 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:41.969636917 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.011578083 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.043090105 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:42.043670893 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:42.043736935 CET	49766	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:42.062585115 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:42.062794924 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:42.062843084 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:42.062859058 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:42.062870979 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:42.062920094 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:42.070508957 CET	49766	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:42.070532084 CET	443	49766	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:42.095266104 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.148622036 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.148648024 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.148708105 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.148736954 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.148751974 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.148787975 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.148819923 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.173821926 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.173865080 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.173871994 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.173896074 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.173921108 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.173922062 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.173938990 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.173964977 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.173985004 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.174040079 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.174068928 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.174093008 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.179835081 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.179858923 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.179908991 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.179918051 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.181560993 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.181615114 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.282239914 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:42.290637016 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:42.290667057 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:42.291877985 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:42.291939974 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:42.476180077 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:42.476334095 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:42.476943016 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:42.476959944 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:42.520574093 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:42.603365898 CET	49765	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:42.603414059 CET	443	49765	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:42.619452953 CET	49764	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.619483948 CET	443	49764	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.626111984 CET	49768	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.626149893 CET	443	49768	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.626645088 CET	49767	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.626676083 CET	443	49767	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.678221941 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.678263903 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.678427935 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.678793907 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.678801060 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.681827068 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.681859970 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.682147980 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.684128046 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:42.684164047 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:42.684180975 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:42.684231997 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:42.684326887 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:43.019587994 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:43.021568060 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:43.087687016 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:43.161551952 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:43.647685051 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:43.647784948 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:43.647831917 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:44.080791950 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.080831051 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.081296921 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.082840919 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.082879066 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.083483934 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.084405899 CET	49717	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:33:44.084429026 CET	443	49717	172.253.62.104	192.168.2.6
Mar 28, 2024 14:33:44.087234020 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.087320089 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.092509031 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.092601061 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.143205881 CET	49769	443	192.168.2.6	40.126.62.129
Mar 28, 2024 14:33:44.143244028 CET	443	49769	40.126.62.129	192.168.2.6
Mar 28, 2024 14:33:44.148964882 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.149516106 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.196233034 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.196243048 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.249883890 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.250025988 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.250071049 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.251951933 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.252074003 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.252120018 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.252137899 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.252155066 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.252198935 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.678692102 CET	49770	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.678728104 CET	443	49770	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.679299116 CET	49771	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:44.679331064 CET	443	49771	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:44.690696001 CET	49773	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:44.690733910 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:44.691087961 CET	49773	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:44.691561937 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:44.691591024 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:44.691732883 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:44.691771984 CET	49773	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:44.691788912 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:44.691915989 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:44.691930056 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.019001007 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.019224882 CET	49773	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.019242048 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.019597054 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.019912004 CET	49773	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.019974947 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.020051003 CET	49773	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.064230919 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.081070900 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.081338882 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.081357956 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.081717014 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.082058907 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.082123041 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.082333088 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.124231100 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.218604088 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.222091913 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.222230911 CET	49773	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.377568007 CET	49773	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.377592087 CET	443	49773	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.383699894 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.383723021 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.383775949 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.383800030 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.383816957 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.383837938 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.383877993 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.384154081 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.384171963 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.384224892 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.384232044 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.384264946 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.425759077 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.425822020 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.425837040 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.425849915 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:45.425889015 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.497308016 CET	49774	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:33:45.497322083 CET	443	49774	13.107.246.40	192.168.2.6
Mar 28, 2024 14:33:47.105855942 CET	49782	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:47.105894089 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.105977058 CET	49782	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:47.106471062 CET	49782	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:47.106484890 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.426414967 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.426664114 CET	49782	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:47.426681042 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.427040100 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.427972078 CET	49782	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:47.428040981 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.428594112 CET	49782	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:47.472239017 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.566915035 CET	49698	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.567322969 CET	49698	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.567625999 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.567652941 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:47.567783117 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.568295002 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.568310976 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:47.636693954 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.636893034 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.636944056 CET	49782	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:47.638156891 CET	49782	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:33:47.638174057 CET	443	49782	13.107.213.40	192.168.2.6
Mar 28, 2024 14:33:47.726907969 CET	443	49698	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:47.728029966 CET	443	49698	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:47.899503946 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:47.899574995 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.932506084 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.932523966 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:47.932847977 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:47.932910919 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.933585882 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.933612108 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:47.933897018 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:47.976239920 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:48.285898924 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:48.285965919 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:48.286176920 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:48.286231995 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:33:48.286242962 CET	443	49785	173.222.162.64	192.168.2.6
Mar 28, 2024 14:33:48.286313057 CET	49785	443	192.168.2.6	173.222.162.64
Mar 28, 2024 14:34:11.542537928 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:11.542561054 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:11.542871952 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:11.543272018 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:11.543284893 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:11.854995012 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:11.855405092 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:11.855417013 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:11.855745077 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:11.856086016 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:11.856199026 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:11.856332064 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:11.901746035 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:11.901753902 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.062321901 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.062340975 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.062483072 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.062494993 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.063165903 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.063175917 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.063186884 CET	443	49787	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.063241959 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.063241959 CET	49787	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.348519087 CET	49788	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.348576069 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.348980904 CET	49789	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.349019051 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.349046946 CET	49788	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.349364996 CET	49789	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.349769115 CET	49788	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.349786043 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.350016117 CET	49789	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.350025892 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.667905092 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.680459023 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.681890011 CET	49788	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.681916952 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.682214975 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.682329893 CET	49789	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.682358027 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.682796001 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.683023930 CET	49788	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.683085918 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.683588028 CET	49789	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.683655024 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.683969021 CET	49788	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.684067011 CET	49789	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.728230000 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.728244066 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.910043955 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.910192966 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.910249949 CET	49788	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.911207914 CET	49788	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.911221981 CET	443	49788	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.919761896 CET	49790	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:12.919794083 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:12.919857979 CET	49790	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:12.920140982 CET	49790	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:12.920154095 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:12.924762011 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.928791046 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.928870916 CET	49789	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.929107904 CET	49789	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:12.929124117 CET	443	49789	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:12.935761929 CET	49791	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:12.935782909 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:12.935941935 CET	49791	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:12.936296940 CET	49791	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:12.936316013 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.227790117 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.228121996 CET	49790	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.228142977 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.228456020 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.243025064 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.243334055 CET	49790	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.243419886 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.243668079 CET	49791	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.243679047 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.243859053 CET	49790	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.244117022 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.244844913 CET	49791	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.244900942 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.245116949 CET	49791	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.288228989 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.288239956 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.440198898 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.440644979 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.440712929 CET	49790	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.441203117 CET	49790	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.441216946 CET	443	49790	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.451296091 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.451370001 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:13.451469898 CET	49791	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.453021049 CET	49791	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:13.453035116 CET	443	49791	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:16.192472935 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:16.192504883 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:16.192569971 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:16.193068981 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:16.193082094 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:16.248322010 CET	49795	443	192.168.2.6	192.229.211.199
Mar 28, 2024 14:34:16.248375893 CET	443	49795	192.229.211.199	192.168.2.6
Mar 28, 2024 14:34:16.248447895 CET	49795	443	192.168.2.6	192.229.211.199
Mar 28, 2024 14:34:16.248768091 CET	49795	443	192.168.2.6	192.229.211.199
Mar 28, 2024 14:34:16.248795986 CET	443	49795	192.229.211.199	192.168.2.6
Mar 28, 2024 14:34:16.545331955 CET	443	49795	192.229.211.199	192.168.2.6
Mar 28, 2024 14:34:16.545649052 CET	49795	443	192.168.2.6	192.229.211.199
Mar 28, 2024 14:34:16.545666933 CET	443	49795	192.229.211.199	192.168.2.6
Mar 28, 2024 14:34:16.547266006 CET	443	49795	192.229.211.199	192.168.2.6
Mar 28, 2024 14:34:16.547352076 CET	49795	443	192.168.2.6	192.229.211.199
Mar 28, 2024 14:34:16.548806906 CET	49795	443	192.168.2.6	192.229.211.199
Mar 28, 2024 14:34:16.548952103 CET	443	49795	192.229.211.199	192.168.2.6
Mar 28, 2024 14:34:16.580569983 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:16.580838919 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:16.580857038 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:16.581908941 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:16.581969976 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:16.582973957 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:16.583038092 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:16.583178997 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:16.583187103 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:16.600133896 CET	49795	443	192.168.2.6	192.229.211.199
Mar 28, 2024 14:34:16.600147009 CET	443	49795	192.229.211.199	192.168.2.6
Mar 28, 2024 14:34:16.631541967 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:16.651731014 CET	49795	443	192.168.2.6	192.229.211.199
Mar 28, 2024 14:34:17.589405060 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589430094 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589438915 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589473963 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589508057 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589512110 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.589539051 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589571953 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.589571953 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.589590073 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.589709044 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589725018 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589874029 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.589881897 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.589957952 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.689374924 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.689399958 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.689702034 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.689723015 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.689975977 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.691787958 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.691806078 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.691957951 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.691992998 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.691998959 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.692008972 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.692051888 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.692197084 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.788671017 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.788695097 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.788841009 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.788870096 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.789212942 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.789721012 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.789737940 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.789823055 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.789823055 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.789830923 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.789982080 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.791975021 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.791996002 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.792115927 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.792124033 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.792308092 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.792381048 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.792399883 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.792457104 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.792464018 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.792495966 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.792596102 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.888526917 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.888571024 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.888622999 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.888654947 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.888725042 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.891175985 CET	49794	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.891196966 CET	443	49794	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.935792923 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.935821056 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.940304995 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.940447092 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.940462112 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.967504978 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.967536926 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.967638969 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.967964888 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.967981100 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.971992016 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.972011089 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:17.976386070 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.976640940 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:17.976660967 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.283622980 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.284109116 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.284130096 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.284638882 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.285204887 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.285204887 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.285221100 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.285312891 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.286076069 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.286282063 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.286305904 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.287415028 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.287827969 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.287828922 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.287905931 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.288022995 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.288029909 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.338608980 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.338855982 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.526128054 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.526209116 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.526278973 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.526467085 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.533788919 CET	49798	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.533803940 CET	443	49798	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.616375923 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.616755009 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.616775990 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.617705107 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.617768049 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.618122101 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.618185997 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.618254900 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.632879019 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.632911921 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:18.632982969 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.633270979 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.633284092 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:18.664237976 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.666147947 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.666155100 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.714256048 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.825359106 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.827349901 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.827400923 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.827864885 CET	49797	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:18.827881098 CET	443	49797	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:18.833456993 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.833486080 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:18.833560944 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.833969116 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.833981037 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:18.943603992 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:18.943943977 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.943969011 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:18.945106983 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:18.945158958 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.945619106 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.945683002 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:18.945782900 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.987617016 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:18.987632990 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.004883051 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.004921913 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.004929066 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.004966974 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.004973888 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.004991055 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.004998922 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.005017042 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.005037069 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.005060911 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.005645037 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.005666971 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.005697012 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.005711079 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.005717039 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.005728960 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.005753994 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.005768061 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.005808115 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.006726980 CET	49796	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.006742001 CET	443	49796	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.029048920 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.139678955 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.139717102 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.139772892 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.139981985 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.139992952 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.148673058 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.148793936 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.148844957 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.148859978 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.148873091 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.148926020 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.149460077 CET	49800	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.149471998 CET	443	49800	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.149611950 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.149893045 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.149915934 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.150795937 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.150852919 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.151580095 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.151633978 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.151740074 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.151746035 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.198041916 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.476030111 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.476300001 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.476325035 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.477684021 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.477751017 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.478949070 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.479005098 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.479182005 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.479190111 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.515314102 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.516340017 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.516422987 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.525558949 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.533560038 CET	49801	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.533585072 CET	443	49801	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.798966885 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.798986912 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.798994064 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.799019098 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.799046040 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.799052954 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.799082041 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.799094915 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:19.799108028 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.800015926 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.800015926 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:19.910861969 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.910897970 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:19.911119938 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.911243916 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:19.911257982 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.103135109 CET	49802	443	192.168.2.6	13.107.246.40
Mar 28, 2024 14:34:20.103169918 CET	443	49802	13.107.246.40	192.168.2.6
Mar 28, 2024 14:34:20.258269072 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.258606911 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.258624077 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.259666920 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.259804964 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.260447979 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.260518074 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.260721922 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.308237076 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.308304071 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.308315039 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.353394985 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.636213064 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636322975 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636333942 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636353970 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636369944 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636384010 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.636395931 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636408091 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636430979 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.636455059 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.636471033 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636516094 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.636521101 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636564016 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:20.636605978 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.638166904 CET	49803	443	192.168.2.6	13.107.213.40
Mar 28, 2024 14:34:20.638181925 CET	443	49803	13.107.213.40	192.168.2.6
Mar 28, 2024 14:34:32.917779922 CET	49809	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:34:32.917824984 CET	443	49809	172.253.62.104	192.168.2.6
Mar 28, 2024 14:34:32.918152094 CET	49809	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:34:32.918596029 CET	49809	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:34:32.918606043 CET	443	49809	172.253.62.104	192.168.2.6
Mar 28, 2024 14:34:33.140546083 CET	443	49809	172.253.62.104	192.168.2.6
Mar 28, 2024 14:34:33.140860081 CET	49809	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:34:33.140892982 CET	443	49809	172.253.62.104	192.168.2.6
Mar 28, 2024 14:34:33.141182899 CET	443	49809	172.253.62.104	192.168.2.6
Mar 28, 2024 14:34:33.141515017 CET	49809	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:34:33.141582012 CET	443	49809	172.253.62.104	192.168.2.6
Mar 28, 2024 14:34:33.181925058 CET	49809	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:34:43.139389038 CET	443	49809	172.253.62.104	192.168.2.6
Mar 28, 2024 14:34:43.139456034 CET	443	49809	172.253.62.104	192.168.2.6
Mar 28, 2024 14:34:43.139767885 CET	49809	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:34:45.121490002 CET	49809	443	192.168.2.6	172.253.62.104
Mar 28, 2024 14:34:45.121527910 CET	443	49809	172.253.62.104	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 14:33:28.926326036 CET	53	56178	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:28.981496096 CET	53	53087	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:29.593786955 CET	53	62989	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:30.534199953 CET	51178	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:30.534430981 CET	51464	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:30.642607927 CET	53	51464	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:30.643855095 CET	53	51178	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:32.824795008 CET	59030	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:32.828650951 CET	62951	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:32.923094988 CET	53	59030	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:32.927160978 CET	53	62951	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:34.457622051 CET	60780	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:34.458287954 CET	55654	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:34.492125034 CET	51282	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:34.492356062 CET	52130	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:34.552939892 CET	53	60780	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:34.559360981 CET	53	55654	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:34.601973057 CET	53	51282	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:34.602720022 CET	53	52130	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:35.433159113 CET	57380	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:35.433511019 CET	64643	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:35.677102089 CET	54835	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:35.677639008 CET	62829	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:35.776278019 CET	53	54835	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:35.776561022 CET	53	62829	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:36.219485044 CET	49284	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:36.219932079 CET	53491	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:36.320099115 CET	53	49284	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:36.347332954 CET	53	53491	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:37.797743082 CET	64476	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:37.797981977 CET	65150	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:37.866671085 CET	55265	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:37.867103100 CET	62264	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:37.962331057 CET	53	55265	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:37.962836027 CET	53	62264	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:41.626858950 CET	59983	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:41.627032995 CET	60148	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:41.722146034 CET	53	59983	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:41.722491026 CET	53	60148	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:44.787811041 CET	53	60435	1.1.1.1	192.168.2.6
Mar 28, 2024 14:33:45.201987028 CET	54911	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:45.202415943 CET	64291	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:33:47.611403942 CET	53	54747	1.1.1.1	192.168.2.6
Mar 28, 2024 14:34:08.379190922 CET	53	62010	1.1.1.1	192.168.2.6
Mar 28, 2024 14:34:15.285424948 CET	65477	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:34:15.288985968 CET	57907	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:34:16.149933100 CET	64722	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:34:16.150069952 CET	63304	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:34:16.246682882 CET	53	63304	1.1.1.1	192.168.2.6
Mar 28, 2024 14:34:16.247451067 CET	53	64722	1.1.1.1	192.168.2.6
Mar 28, 2024 14:34:18.424105883 CET	53	52233	1.1.1.1	192.168.2.6
Mar 28, 2024 14:34:28.628186941 CET	53	60926	1.1.1.1	192.168.2.6
Mar 28, 2024 14:34:32.794749975 CET	53	55292	1.1.1.1	192.168.2.6
Mar 28, 2024 14:34:38.227205992 CET	50808	53	192.168.2.6	1.1.1.1
Mar 28, 2024 14:34:38.227407932 CET	62072	53	192.168.2.6	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 28, 2024 14:33:36.347407103 CET	192.168.2.6	1.1.1.1	c256	(Port unreachable)	Destination Unreachable
Mar 28, 2024 14:33:41.568358898 CET	192.168.2.6	1.1.1.1	c2ce	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 14:33:30.534199953 CET	192.168.2.6	1.1.1.1	0xdf73	Standard query (0)	hillsclerk.securityeducation.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:30.534430981 CET	192.168.2.6	1.1.1.1	0x2ee6	Standard query (0)	hillsclerk.securityeducation.com	65	IN (0x0001)	false
Mar 28, 2024 14:33:32.824795008 CET	192.168.2.6	1.1.1.1	0x1b7b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:32.828650951 CET	192.168.2.6	1.1.1.1	0x3e0b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 14:33:34.457622051 CET	192.168.2.6	1.1.1.1	0xce0b	Standard query (0)	global.localizecdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:34.458287954 CET	192.168.2.6	1.1.1.1	0x93e8	Standard query (0)	global.localizecdn.com	65	IN (0x0001)	false
Mar 28, 2024 14:33:34.492125034 CET	192.168.2.6	1.1.1.1	0xbc1c	Standard query (0)	hillsclerk.securityeducation.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:34.492356062 CET	192.168.2.6	1.1.1.1	0x464a	Standard query (0)	hillsclerk.securityeducation.com	65	IN (0x0001)	false
Mar 28, 2024 14:33:35.433159113 CET	192.168.2.6	1.1.1.1	0x9484	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:35.433511019 CET	192.168.2.6	1.1.1.1	0x402e	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Mar 28, 2024 14:33:35.677102089 CET	192.168.2.6	1.1.1.1	0x86a5	Standard query (0)	global.localizecdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:35.677639008 CET	192.168.2.6	1.1.1.1	0x9361	Standard query (0)	global.localizecdn.com	65	IN (0x0001)	false
Mar 28, 2024 14:33:36.219485044 CET	192.168.2.6	1.1.1.1	0x188d	Standard query (0)	rum-ingest.us2.signalfx.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:36.219932079 CET	192.168.2.6	1.1.1.1	0x4963	Standard query (0)	rum-ingest.us2.signalfx.com	65	IN (0x0001)	false
Mar 28, 2024 14:33:37.797743082 CET	192.168.2.6	1.1.1.1	0x323c	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:37.797981977 CET	192.168.2.6	1.1.1.1	0xddd	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Mar 28, 2024 14:33:37.866671085 CET	192.168.2.6	1.1.1.1	0x1ed7	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:37.867103100 CET	192.168.2.6	1.1.1.1	0xfa2b	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Mar 28, 2024 14:33:41.626858950 CET	192.168.2.6	1.1.1.1	0x2e37	Standard query (0)	autologon.microsoftazuread-sso.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.627032995 CET	192.168.2.6	1.1.1.1	0xc03e	Standard query (0)	autologon.microsoftazuread-sso.com	65	IN (0x0001)	false
Mar 28, 2024 14:33:45.201987028 CET	192.168.2.6	1.1.1.1	0x529b	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:45.202415943 CET	192.168.2.6	1.1.1.1	0xd716	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Mar 28, 2024 14:34:15.285424948 CET	192.168.2.6	1.1.1.1	0xec8f	Standard query (0)	account.live.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:15.288985968 CET	192.168.2.6	1.1.1.1	0x7dc9	Standard query (0)	account.live.com	65	IN (0x0001)	false
Mar 28, 2024 14:34:16.149933100 CET	192.168.2.6	1.1.1.1	0xc3a9	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:16.150069952 CET	192.168.2.6	1.1.1.1	0x6c20	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Mar 28, 2024 14:34:38.227205992 CET	192.168.2.6	1.1.1.1	0xbfa3	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:38.227407932 CET	192.168.2.6	1.1.1.1	0xf734	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 14:33:30.643855095 CET	1.1.1.1	192.168.2.6	0xdf73	No error (0)	hillsclerk.securityeducation.com		18.211.106.230	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:30.643855095 CET	1.1.1.1	192.168.2.6	0xdf73	No error (0)	hillsclerk.securityeducation.com		52.207.202.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:32.923094988 CET	1.1.1.1	192.168.2.6	0x1b7b	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:32.923094988 CET	1.1.1.1	192.168.2.6	0x1b7b	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:32.923094988 CET	1.1.1.1	192.168.2.6	0x1b7b	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:32.923094988 CET	1.1.1.1	192.168.2.6	0x1b7b	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:32.923094988 CET	1.1.1.1	192.168.2.6	0x1b7b	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:32.923094988 CET	1.1.1.1	192.168.2.6	0x1b7b	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:32.927160978 CET	1.1.1.1	192.168.2.6	0x3e0b	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 14:33:34.552939892 CET	1.1.1.1	192.168.2.6	0xce0b	No error (0)	global.localizecdn.com		104.18.4.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:34.552939892 CET	1.1.1.1	192.168.2.6	0xce0b	No error (0)	global.localizecdn.com		104.18.5.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:34.559360981 CET	1.1.1.1	192.168.2.6	0x93e8	No error (0)	global.localizecdn.com			65	IN (0x0001)	false
Mar 28, 2024 14:33:34.601973057 CET	1.1.1.1	192.168.2.6	0xbc1c	No error (0)	hillsclerk.securityeducation.com		18.211.106.230	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:34.601973057 CET	1.1.1.1	192.168.2.6	0xbc1c	No error (0)	hillsclerk.securityeducation.com		52.207.202.127	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:35.528424978 CET	1.1.1.1	192.168.2.6	0x9484	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:35.528805017 CET	1.1.1.1	192.168.2.6	0x402e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:35.776278019 CET	1.1.1.1	192.168.2.6	0x86a5	No error (0)	global.localizecdn.com		104.18.5.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:35.776278019 CET	1.1.1.1	192.168.2.6	0x86a5	No error (0)	global.localizecdn.com		104.18.4.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:35.776561022 CET	1.1.1.1	192.168.2.6	0x9361	No error (0)	global.localizecdn.com			65	IN (0x0001)	false
Mar 28, 2024 14:33:36.320099115 CET	1.1.1.1	192.168.2.6	0x188d	No error (0)	rum-ingest.us2.signalfx.com	ingest.us2.signalfx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:36.320099115 CET	1.1.1.1	192.168.2.6	0x188d	No error (0)	ingest.us2.signalfx.com		35.199.162.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:36.344636917 CET	1.1.1.1	192.168.2.6	0x8584	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:36.344636917 CET	1.1.1.1	192.168.2.6	0x8584	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:36.344636917 CET	1.1.1.1	192.168.2.6	0x8584	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:36.347332954 CET	1.1.1.1	192.168.2.6	0x4963	No error (0)	rum-ingest.us2.signalfx.com	ingest.us2.signalfx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:37.893750906 CET	1.1.1.1	192.168.2.6	0xddd	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:37.893773079 CET	1.1.1.1	192.168.2.6	0x323c	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:37.962331057 CET	1.1.1.1	192.168.2.6	0x1ed7	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:37.962331057 CET	1.1.1.1	192.168.2.6	0x1ed7	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:37.962836027 CET	1.1.1.1	192.168.2.6	0xfa2b	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:40.060187101 CET	1.1.1.1	192.168.2.6	0xca41	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:40.060187101 CET	1.1.1.1	192.168.2.6	0xca41	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:40.060187101 CET	1.1.1.1	192.168.2.6	0xca41	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.568286896 CET	1.1.1.1	192.168.2.6	0x9405	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:41.568286896 CET	1.1.1.1	192.168.2.6	0x9405	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.568286896 CET	1.1.1.1	192.168.2.6	0x9405	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.722146034 CET	1.1.1.1	192.168.2.6	0x2e37	No error (0)	autologon.microsoftazuread-sso.com		40.126.62.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.722146034 CET	1.1.1.1	192.168.2.6	0x2e37	No error (0)	autologon.microsoftazuread-sso.com		20.190.190.129	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.722146034 CET	1.1.1.1	192.168.2.6	0x2e37	No error (0)	autologon.microsoftazuread-sso.com		20.190.190.194	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.722146034 CET	1.1.1.1	192.168.2.6	0x2e37	No error (0)	autologon.microsoftazuread-sso.com		40.126.62.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.722146034 CET	1.1.1.1	192.168.2.6	0x2e37	No error (0)	autologon.microsoftazuread-sso.com		40.126.62.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.722146034 CET	1.1.1.1	192.168.2.6	0x2e37	No error (0)	autologon.microsoftazuread-sso.com		20.190.190.193	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.722146034 CET	1.1.1.1	192.168.2.6	0x2e37	No error (0)	autologon.microsoftazuread-sso.com		20.190.190.131	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:41.722146034 CET	1.1.1.1	192.168.2.6	0x2e37	No error (0)	autologon.microsoftazuread-sso.com		20.190.190.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:45.297627926 CET	1.1.1.1	192.168.2.6	0x529b	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:45.298824072 CET	1.1.1.1	192.168.2.6	0xd716	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:46.372726917 CET	1.1.1.1	192.168.2.6	0xf3a4	No error (0)	windowsupdatebg.s.llnwi.net		69.164.0.0	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:46.372726917 CET	1.1.1.1	192.168.2.6	0xf3a4	No error (0)	windowsupdatebg.s.llnwi.net		69.164.0.128	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:46.712604046 CET	1.1.1.1	192.168.2.6	0x3334	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:46.712604046 CET	1.1.1.1	192.168.2.6	0x3334	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:33:59.575248957 CET	1.1.1.1	192.168.2.6	0x8730	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:33:59.575248957 CET	1.1.1.1	192.168.2.6	0x8730	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:15.381571054 CET	1.1.1.1	192.168.2.6	0xec8f	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:15.389595032 CET	1.1.1.1	192.168.2.6	0x7dc9	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:16.190725088 CET	1.1.1.1	192.168.2.6	0xcfc	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:16.190725088 CET	1.1.1.1	192.168.2.6	0xcfc	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:16.190725088 CET	1.1.1.1	192.168.2.6	0xcfc	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:16.246682882 CET	1.1.1.1	192.168.2.6	0x6c20	No error (0)	logincdn.msftauth.net	cs1227.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:16.247451067 CET	1.1.1.1	192.168.2.6	0xc3a9	No error (0)	logincdn.msftauth.net	cs1227.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:16.247451067 CET	1.1.1.1	192.168.2.6	0xc3a9	No error (0)	cs1227.wpc.alphacdn.net		192.229.211.199	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:16.289747000 CET	1.1.1.1	192.168.2.6	0xbd58	No error (0)	cs1227.wpc.alphacdn.net		192.229.211.199	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:16.307940960 CET	1.1.1.1	192.168.2.6	0x80a	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:16.307940960 CET	1.1.1.1	192.168.2.6	0x80a	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:16.307940960 CET	1.1.1.1	192.168.2.6	0x80a	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:18.632210970 CET	1.1.1.1	192.168.2.6	0x62f6	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:18.632210970 CET	1.1.1.1	192.168.2.6	0x62f6	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:18.632210970 CET	1.1.1.1	192.168.2.6	0x62f6	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:19.139122009 CET	1.1.1.1	192.168.2.6	0x992a	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:19.139122009 CET	1.1.1.1	192.168.2.6	0x992a	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:19.139122009 CET	1.1.1.1	192.168.2.6	0x992a	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:19.901583910 CET	1.1.1.1	192.168.2.6	0x5b4e	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:19.901583910 CET	1.1.1.1	192.168.2.6	0x5b4e	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:19.901583910 CET	1.1.1.1	192.168.2.6	0x5b4e	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:25.013552904 CET	1.1.1.1	192.168.2.6	0x5be7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:25.013552904 CET	1.1.1.1	192.168.2.6	0x5be7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:34:38.325443029 CET	1.1.1.1	192.168.2.6	0xf734	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:38.325932026 CET	1.1.1.1	192.168.2.6	0xbfa3	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:41.418981075 CET	1.1.1.1	192.168.2.6	0x906c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:34:41.418981075 CET	1.1.1.1	192.168.2.6	0x906c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

hillsclerk.securityeducation.com

https:

global.localizecdn.com

aadcdn.msauth.net

rum-ingest.us2.signalfx.com

autologon.microsoftazuread-sso.com

www.bing.com

logincdn.msauth.net

acctcdn.msauth.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49705	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:30 UTC	675	OUT	GET / HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:31 UTC	876	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12393 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "6b9e2a5ae6ec6fb2100430da2c329e4c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 263d97c176fc51d1d08116820c013de4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: tk1c2sT1DuAlk9sFZDuCLxLsNmwSuPus0PDjFLTzlkT5Ajo6oqd3qQ== Age: 81755 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:31 UTC	7732	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 6e 6f 74 72 61 6e 73 6c 61 74 65 3e 53 65 63 75 72 69 74 79 20 45 64 75 63 61 74 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 69 72 64 20 70 61 72 74 79 20 6c 69 63 65 6e 73 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 61 70 70 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 62 79 20 76 69 73 69 74 69 6e 67 20 2f 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title notranslate>Security Education Platform</title> ... Third party licenses used in this app can be viewed by visiting /l
2024-03-28 13:33:31 UTC	4661	IN	Data Raw: 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 66 66 66 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 6d 65 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 50 72 6f 6f 66 70 6f 69 6e 74 20 53 65 63 75 72 69 74 79 20 41 77 61 72 65 6e 65 Data Ascii: icon-32x32.png" /> <link rel="manifest" href="/manifest.json" /> <meta name="mobile-web-app-capable" content="yes" /> <meta name="theme-color" content="#fff" /> <meta name="application-name" content="Proofpoint Security Awarene

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49704	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:31 UTC	592	OUT	GET /js/ie10-4d8fefae653b9ade02759391caba3c56.js HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:31 UTC	864	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 112 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "6df5dde38ec3c12329a97c5cdef18d26" X-Cache: Hit from cloudfront Via: 1.1 417c242b19212928b079740e6dd8f54c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: _Ng9uBtDl-ud3_9vnrgmRIa9muW6DQd4dm17wu-xZ8EnjalHlmFYDQ== Age: 81719 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:31 UTC	112	IN	Data Raw: 76 61 72 20 75 61 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 69 73 49 45 3d 2f 4d 53 49 45 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 75 61 29 0a 69 73 49 45 26 26 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 2f 75 6e 73 75 70 70 6f 72 74 65 64 2e 68 74 6d 6c 22 29 0a Data Ascii: var ua=window.navigator.userAgent,isIE=/MSIE\|Trident/.test(ua)isIE&&(window.location.href="/unsupported.html")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49706	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:31 UTC	621	OUT	GET /platform-ember/vendor-a951d76bce4e0eb0f86ae64748ba6fda.css HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:31 UTC	860	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: text/css Content-Length: 12877 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "a951d76bce4e0eb0f86ae64748ba6fda" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b5e757a7da6f6fe6261f56a8a9646880.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: hTDZ2TZ8AFI4X8jDbanOuFg3UmoTUXEKjN24QdO00RcuyB5xwb4jwg== Age: 81719 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:31 UTC	7733	IN	Data Raw: 2e 76 65 72 74 69 63 61 6c 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 76 69 73 75 61 6c 2d 64 65 62 75 67 67 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 6c 65 66 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 6c 65 66 74 3b 6a 75 73 74 69 Data Ascii: .vertical-collection-visual-debugger{height:100%;position:fixed;z-index:1000;top:0;left:0;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:left;-ms-flex-pack:left;justi
2024-03-28 13:33:31 UTC	5144	IN	Data Raw: 3a 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 38 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 38 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 68 69 64 65 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 66 6f 72 Data Ascii: :scale(.8);transform:scale(.8)}100%{opacity:0;max-height:0;-webkit-transform:scale(.8);transform:scale(.8)}}@-webkit-keyframes notification-hide{0%{opacity:1;-webkit-transform:scale(1);transform:scale(1)}100%{opacity:0;-webkit-transform:scale(.8);transfor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49707	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:31 UTC	629	OUT	GET /platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:31 UTC	861	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: text/css Content-Length: 351291 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "cc9f435ba7b105175f5d2dfbfb14d579" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f9efe5e72b7e5cc47bf34a0b0debcbe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: AvOKxdfEMDe2Ay15FoFwvUHBUxjyZZetSptPcLbJmfWcqx-f98hXVA== Age: 81719 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:31 UTC	15523	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 73 68 61 64 6f 77 2d 31 2c 2e 73 68 61 64 6f 77 2d 31 2d 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 31 29 2c 30 20 33 70 78 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 39 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 31 29 2c 30 20 33 70 78 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 39 29 7d 62 2c 6b 62 64 20 6b 62 64 2c 6f 70 74 67 72 6f 75 70 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 77 6f 6d 62 61 74 2d 73 65 6c 65 63 74 20 64 69 76 2e 65 6d 62 65 72 2d 70 6f 77 65 72 2d 73 65 6c Data Ascii: @charset "UTF-8";.shadow-1,.shadow-1-hover{-webkit-box-shadow:0 2px 5px rgba(0,0,0,.11),0 3px 10px rgba(0,0,0,.09);box-shadow:0 2px 5px rgba(0,0,0,.11),0 3px 10px rgba(0,0,0,.09)}b,kbd kbd,optgroup,strong{font-weight:700}.wombat-select div.ember-power-sel
2024-03-28 13:33:31 UTC	401	IN	Data Raw: 72 2d 6d 61 69 6e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 3a 6e 6f 74 28 2e 69 73 2d 6f 70 65 6e 29 20 2e 72 6f 77 3e 64 69 76 2e 6d 64 33 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 3a 6e 6f 74 28 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 29 20 2e 72 6f 77 3e 2e 63 6f 6c 2e 6d 64 33 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 3a 6e 6f 74 28 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 29 20 2e 72 6f 77 3e 64 69 76 2e 6d 64 33 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 3a 6e Data Ascii: r-main.container-sidebar:not(.is-open) .row>div.md3,.container-main:not(.container-sidebar) .row>.col.md3,.container-main:not(.container-sidebar) .row>div.md3{-webkit-box-flex:0;-ms-flex-positive:0;flex-grow:0;width:25%}.container-main.container-sidebar:n
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 2d 6d 61 69 6e 3a 6e 6f 74 28 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 29 20 2e 72 6f 77 3e 64 69 76 2e 6d 64 34 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 3a 6e 6f 74 28 2e 69 73 2d 6f 70 65 6e 29 20 2e 72 6f 77 3e 2e 63 6f 6c 2e 6d 64 35 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 3a 6e 6f 74 28 2e 69 73 2d 6f 70 65 6e 29 20 2e 72 6f 77 3e 64 69 76 2e 6d 64 35 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d Data Ascii: tainer-main:not(.container-sidebar) .row>div.md4{-webkit-box-flex:0;-ms-flex-positive:0;flex-grow:0;width:33.3333333333%}.container-main.container-sidebar:not(.is-open) .row>.col.md5,.container-main.container-sidebar:not(.is-open) .row>div.md5,.container-
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 65 74 2d 6c 67 34 3a 62 65 66 6f 72 65 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 3a 6e 6f 74 28 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 29 20 2e 72 6f 77 2e 72 6f 77 2d 6f 66 66 73 65 74 2d 6c 67 34 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 3a 6e 6f 74 28 2e 69 73 2d 6f 70 65 6e 29 20 2e 72 6f 77 2e 72 6f 77 2d 6f 66 66 73 65 74 2d 6c 67 35 3a 62 65 66 6f 72 65 2c 2e 63 Data Ascii: et-lg4:before,.container-main:not(.container-sidebar) .row.row-offset-lg4:before{display:block;-webkit-box-flex:0;-ms-flex-positive:0;flex-grow:0;width:33.3333333333%;content:""}.container-main.container-sidebar:not(.is-open) .row.row-offset-lg5:before,.c
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 61 72 2e 69 73 2d 6f 70 65 6e 20 2e 72 6f 77 3e 2e 63 6f 6c 2e 78 6c 67 37 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 2e 69 73 2d 6f 70 65 6e 20 2e 72 6f 77 3e 64 69 76 2e 78 6c 67 37 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 2e 69 73 2d 6f 70 65 6e 20 2e 72 6f 77 3e 2e 63 6f 6c 2e 78 6c 67 38 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 69 6e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 69 64 65 62 61 72 2e 69 73 2d 6f 70 65 6e 20 2e 72 Data Ascii: ar.is-open .row>.col.xlg7,.container-main.container-sidebar.is-open .row>div.xlg7{-webkit-box-flex:0;-ms-flex-positive:0;flex-grow:0;width:58.3333333333%}.container-main.container-sidebar.is-open .row>.col.xlg8,.container-main.container-sidebar.is-open .r
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 2d 34 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6c 2d 35 2c 2e 70 78 2d 35 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 72 2d 35 2c 2e 70 78 2d 35 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 74 2d 35 2c 2e 70 79 2d 35 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 62 2d 35 2c 2e 70 79 2d 35 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 61 70 2d 35 7b 67 61 70 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 67 61 70 2d 78 2d 35 7b 2d 77 65 62 6b 69 Data Ascii: n-bottom:25px!important}.p-4{padding:20px!important}.pl-5,.px-5{padding-left:25px!important}.pr-5,.px-5{padding-right:25px!important}.pt-5,.py-5{padding-top:25px!important}.pb-5,.py-5{padding-bottom:25px!important}.gap-5{gap:25px!important}.gap-x-5{-webki
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 61 73 73 69 67 6e 6d 65 6e 74 2d 6d 6f 64 75 6c 65 20 2e 6e 61 76 62 61 72 2e 69 73 2d 63 6f 6d 70 6c 65 74 65 64 2e 69 73 2d 6f 72 64 65 72 65 64 2e 61 73 73 69 67 6e 6d 65 6e 74 2d 6d 6f 64 75 6c 65 2d 69 6d 61 67 65 3a 61 66 74 65 72 2c 2e 6e 61 76 62 61 72 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 61 73 73 69 67 6e 6d 65 6e 74 2d 6d 6f 64 75 6c 65 20 2e 6e 61 76 62 61 72 2d 68 65 61 64 65 72 2e 69 73 2d 63 6f 6d 70 6c 65 74 65 64 2e 69 73 2d 6f 72 64 65 72 65 64 2e 61 73 73 69 67 6e 6d 65 6e 74 2d 6d 6f 64 75 6c 65 2d 69 6d 61 67 65 3a 61 66 74 65 72 2c 2e 6e 61 76 62 61 72 2d 68 65 61 64 65 72 3a 61 66 74 65 72 7b 63 6c 65 61 72 Data Ascii: {position:relative;min-height:50px}.assignment-module .navbar.is-completed.is-ordered.assignment-module-image:after,.navbar:after{clear:both}.assignment-module .navbar-header.is-completed.is-ordered.assignment-module-image:after,.navbar-header:after{clear
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 64 62 64 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 67 72 61 79 2d 34 30 30 29 7d 2e 74 65 78 74 2d 67 72 61 79 2d 33 30 30 7b 63 6f 6c 6f 72 3a 23 65 30 65 30 65 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 67 72 61 79 2d 33 30 30 29 7d 2e 74 65 78 74 2d 67 72 61 79 2d 32 30 30 7b 63 6f 6c 6f 72 3a 23 65 65 65 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 67 72 61 79 2d 32 30 30 29 7d 2e 74 65 78 74 2d 67 72 61 79 2d 31 30 30 7b 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 67 72 61 79 2d 31 30 30 29 7d 2e 74 65 78 74 2d 67 72 61 79 2d 30 30 30 7b 63 6f 6c 6f 72 3a 23 66 61 66 61 66 61 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 67 72 61 79 2d 30 30 30 Data Ascii: dbd;color:var(--theme-gray-400)}.text-gray-300{color:#e0e0e0;color:var(--theme-gray-300)}.text-gray-200{color:#eee;color:var(--theme-gray-200)}.text-gray-100{color:#f5f5f5;color:var(--theme-gray-100)}.text-gray-000{color:#fafafa;color:var(--theme-gray-000
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: form:rotate(359deg)}}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0);transform:rotate(0)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0);transform:rotate(0)}100%{-webkit-transform
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 65 72 2d 70 6f 77 65 72 2d 73 65 6c 65 63 74 2d 74 72 69 67 67 65 72 5b 64 69 72 3d 72 74 6c 5d 20 2e 65 6d 62 65 72 2d 70 6f 77 65 72 2d 73 65 6c 65 63 74 2d 74 72 69 67 67 65 72 2d 6d 75 6c 74 69 70 6c 65 2d 69 6e 70 75 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 65 6d 62 65 72 2d 70 6f 77 65 72 2d 73 65 6c 65 63 74 2d 74 72 69 67 67 65 72 5b 64 69 72 3d 72 74 6c 5d 20 2e 65 6d 62 65 72 2d 70 6f 77 65 72 2d 73 65 6c 65 63 74 2d 73 74 61 74 75 73 2d 69 63 6f 6e 7b 6c 65 66 74 3a 35 70 78 3b 72 69 67 68 74 3a 69 6e 69 74 69 61 6c 7d 2e 65 6d 62 65 72 2d 70 6f 77 65 72 2d 73 65 6c 65 63 74 2d 74 72 69 67 67 65 72 5b 64 69 72 3d 72 74 6c 5d 20 2e 65 6d 62 65 72 2d 70 6f 77 65 72 2d 73 65 6c 65 63 74 2d 63 6c 65 61 72 2d 62 74 6e 7b 6c 65 66 74 3a 32 35 70 Data Ascii: er-power-select-trigger[dir=rtl] .ember-power-select-trigger-multiple-input{float:right}.ember-power-select-trigger[dir=rtl] .ember-power-select-status-icon{left:5px;right:initial}.ember-power-select-trigger[dir=rtl] .ember-power-select-clear-btn{left:25p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49709	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:31 UTC	606	OUT	GET /platform-ember/vendor-02d26fd8e43c2236915f27156ef6f4a3.js HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:31 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2862450 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "76686b36170e28ba5519c5c93422c756" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 041a4887d523cabe8177e269cc358162.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: fiTZeGhG7QEM1MN7jXxPKzOfEHQbCZ7lpyTWiMQdAzZxmGHWvCqFiA== Age: 81719 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:31 UTC	15493	IN	Data Raw: 77 69 6e 64 6f 77 2e 45 6d 62 65 72 45 4e 56 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 65 5b 72 5d 3d 74 5b 72 5d 0a 72 65 74 75 72 6e 20 65 7d 28 77 69 6e 64 6f 77 2e 45 6d 62 65 72 45 4e 56 7c 7c 7b 7d 2c 7b 45 58 54 45 4e 44 5f 50 52 4f 54 4f 54 59 50 45 53 3a 21 31 2c 5f 41 50 50 4c 49 43 41 54 49 4f 4e 5f 54 45 4d 50 4c 41 54 45 5f 57 52 41 50 50 45 52 3a 21 31 2c 5f 44 45 46 41 55 4c 54 5f 41 53 59 4e 43 5f 4f 42 53 45 52 56 45 52 53 3a 21 30 2c 5f 4a 51 55 45 52 59 5f 49 4e 54 45 47 52 41 54 49 4f 4e 3a 21 30 2c 5f 54 45 4d 50 4c 41 54 45 5f 4f 4e 4c 59 5f 47 4c 49 4d 4d 45 52 5f 43 4f 4d 50 4f 4e 45 4e 54 53 3a 21 30 7d 29 0a 76 61 72 20 72 75 6e 6e 69 6e 67 54 65 73 74 73 3d 21 31 2c 6c 6f 61 64 65 Data Ascii: window.EmberENV=function(e,t){for(var r in t)e[r]=t[r]return e}(window.EmberENV\|\|{},{EXTEND_PROTOTYPES:!1,_APPLICATION_TEMPLATE_WRAPPER:!1,_DEFAULT_ASYNC_OBSERVERS:!0,_JQUERY_INTEGRATION:!0,_TEMPLATE_ONLY_GLIMMER_COMPONENTS:!0})var runningTests=!1,loade
2024-03-28 13:33:31 UTC	416	IN	Data Raw: 3d 71 28 65 2e 73 75 62 73 74 72 28 30 2c 6e 29 29 2c 74 5b 34 5d 3d 71 28 65 2e 73 75 62 73 74 72 28 6e 2c 32 29 29 2c 74 5b 35 5d 3d 71 28 65 2e 73 75 62 73 74 72 28 69 29 29 7d 29 29 0a 76 61 72 20 5a 65 3d 24 28 22 48 6f 75 72 73 22 2c 21 30 29 0a 76 61 72 20 4a 65 2c 51 65 3d 7b 63 61 6c 65 6e 64 61 72 3a 7b 73 61 6d 65 44 61 79 3a 22 5b 54 6f 64 61 79 20 61 74 5d 20 4c 54 22 2c 6e 65 78 74 44 61 79 3a 22 5b 54 6f 6d 6f 72 72 6f 77 20 61 74 5d 20 4c 54 22 2c 6e 65 78 74 57 65 65 6b 3a 22 64 64 64 64 20 5b 61 74 5d 20 4c 54 22 2c 6c 61 73 74 44 61 79 3a 22 5b 59 65 73 74 65 72 64 61 79 20 61 74 5d 20 4c 54 22 2c 6c 61 73 74 57 65 65 6b 3a 22 5b 4c 61 73 74 5d 20 64 64 64 64 20 5b 61 74 5d 20 4c 54 22 2c 73 61 6d 65 45 6c 73 65 3a 22 4c 22 7d 2c 6c 6f Data Ascii: =q(e.substr(0,n)),t[4]=q(e.substr(n,2)),t[5]=q(e.substr(i))}))var Ze=$("Hours",!0)var Je,Qe={calendar:{sameDay:"[Today at] LT",nextDay:"[Tomorrow at] LT",nextWeek:"dddd [at] LT",lastDay:"[Yesterday at] LT",lastWeek:"[Last] dddd [at] LT",sameElse:"L"},lo
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 2c 6f 72 64 69 6e 61 6c 3a 22 25 64 22 2c 64 61 79 4f 66 4d 6f 6e 74 68 4f 72 64 69 6e 61 6c 50 61 72 73 65 3a 2f 5c 64 7b 31 2c 32 7d 2f 2c 72 65 6c 61 74 69 76 65 54 69 6d 65 3a 7b 66 75 74 75 72 65 3a 22 69 6e 20 25 73 22 2c 70 61 73 74 3a 22 25 73 20 61 67 6f 22 2c 73 3a 22 61 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 73 73 3a 22 25 64 20 73 65 63 6f 6e 64 73 22 2c 6d 3a 22 61 20 6d 69 6e 75 74 65 22 2c 6d 6d 3a 22 25 64 20 6d 69 6e 75 74 65 73 22 2c 68 3a 22 61 6e 20 68 6f 75 72 22 2c 68 68 3a 22 25 64 20 68 6f 75 72 73 22 2c 64 3a 22 61 20 64 61 79 22 2c 64 64 3a 22 25 64 20 64 61 79 73 22 2c 77 3a 22 61 20 77 65 65 6b 22 2c 77 77 3a 22 25 64 20 77 65 65 6b 73 22 2c 4d 3a 22 61 20 6d 6f 6e 74 68 22 2c 4d 4d 3a 22 25 64 20 6d 6f 6e 74 68 73 22 2c 79 Data Ascii: ,ordinal:"%d",dayOfMonthOrdinalParse:/\d{1,2}/,relativeTime:{future:"in %s",past:"%s ago",s:"a few seconds",ss:"%d seconds",m:"a minute",mm:"%d minutes",h:"an hour",hh:"%d hours",d:"a day",dd:"%d days",w:"a week",ww:"%d weeks",M:"a month",MM:"%d months",y
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 22 47 47 47 47 22 2c 22 69 73 6f 57 65 65 6b 59 65 61 72 22 29 2c 75 72 28 22 47 47 47 47 47 22 2c 22 69 73 6f 57 65 65 6b 59 65 61 72 22 29 2c 46 28 22 77 65 65 6b 59 65 61 72 22 2c 22 67 67 22 29 2c 46 28 22 69 73 6f 57 65 65 6b 59 65 61 72 22 2c 22 47 47 22 29 0a 48 28 22 77 65 65 6b 59 65 61 72 22 2c 31 29 2c 48 28 22 69 73 6f 57 65 65 6b 59 65 61 72 22 2c 31 29 2c 70 65 28 22 47 22 2c 6c 65 29 2c 70 65 28 22 67 22 2c 6c 65 29 2c 70 65 28 22 47 47 22 2c 74 65 2c 4a 29 2c 70 65 28 22 67 67 22 2c 74 65 2c 4a 29 2c 70 65 28 22 47 47 47 47 22 2c 61 65 2c 58 29 2c 70 65 28 22 67 67 67 67 22 2c 61 65 2c 58 29 2c 70 65 28 22 47 47 47 47 47 22 2c 6f 65 2c 65 65 29 2c 70 65 28 22 67 67 67 67 67 22 2c 6f 65 2c 65 65 29 2c 62 65 28 5b 22 67 67 67 67 22 2c 22 67 Data Ascii: "GGGG","isoWeekYear"),ur("GGGGG","isoWeekYear"),F("weekYear","gg"),F("isoWeekYear","GG")H("weekYear",1),H("isoWeekYear",1),pe("G",le),pe("g",le),pe("GG",te,J),pe("gg",te,J),pe("GGGG",ae,X),pe("gggg",ae,X),pe("GGGGG",oe,ee),pe("ggggg",oe,ee),be(["gggg","g
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 20 65 3f 6e 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 29 3f 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 5b 65 2e 6d 6f 6e 74 68 28 29 5d 3a 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 5b 45 65 2e 74 65 73 74 28 74 29 3f 22 66 6f 72 6d 61 74 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 5d 5b 65 2e 6d 6f 6e 74 68 28 29 5d 3a 6e 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 29 3f 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 2e 73 74 61 6e 64 61 6c 6f 6e 65 7d 2c 77 72 2e 6d 6f 6e 74 68 73 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 69 2c 61 0a 69 66 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 50 61 72 73 65 45 78 61 63 74 29 72 65 74 Data Ascii: e?n(this._monthsShort)?this._monthsShort[e.month()]:this._monthsShort[Ee.test(t)?"format":"standalone"][e.month()]:n(this._monthsShort)?this._monthsShort:this._monthsShort.standalone},wr.monthsParse=function(e,t,r){var n,i,aif(this._monthsParseExact)ret
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 32 33 37 29 2c 65 28 32 33 39 29 2c 65 28 32 34 30 29 2c 65 28 32 34 31 29 2c 65 28 32 34 32 29 2c 65 28 32 34 34 29 2c 65 28 32 34 33 29 2c 74 2e 65 78 70 6f 72 74 73 3d 65 28 35 30 29 7d 2c 7b 31 35 32 3a 31 35 32 2c 31 35 33 3a 31 35 33 2c 31 35 34 3a 31 35 34 2c 31 35 35 3a 31 35 35 2c 31 35 36 3a 31 35 36 2c 31 35 37 3a 31 35 37 2c 31 35 38 3a 31 35 38 2c 31 35 39 3a 31 35 39 2c 31 36 30 3a 31 36 30 2c 31 36 31 3a 31 36 31 2c 31 36 32 3a 31 36 32 2c 31 36 33 3a 31 36 33 2c 31 36 34 3a 31 36 34 2c 31 36 35 3a 31 36 35 2c 31 36 36 3a 31 36 36 2c 31 36 37 3a 31 36 37 2c 31 36 38 3a 31 36 38 2c 31 36 39 3a 31 36 39 2c 31 37 30 3a 31 37 30 2c 31 37 31 3a 31 37 31 2c 31 37 32 3a 31 37 32 2c 31 37 33 3a 31 37 33 2c 31 37 34 3a 31 37 34 2c 31 37 35 3a 31 37 Data Ascii: 237),e(239),e(240),e(241),e(242),e(244),e(243),t.exports=e(50)},{152:152,153:153,154:154,155:155,156:156,157:157,158:158,159:159,160:160,161:161,162:162,163:163,164:164,165:165,166:166,167:167,168:168,169:169,170:170,171:171,172:172,173:173,174:174,175:17
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 37 30 3a 37 30 7d 5d 2c 36 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 0a 76 61 72 20 6e 3d 65 28 33 36 29 0a 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 28 74 68 69 73 29 2c 74 3d 22 22 0a 72 65 74 75 72 6e 20 65 2e 67 6c 6f 62 61 6c 26 26 28 74 2b 3d 22 67 22 29 2c 65 2e 69 67 6e 6f 72 65 43 61 73 65 26 26 28 74 2b 3d 22 69 22 29 2c 65 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 28 74 2b 3d 22 6d 22 29 2c 65 2e 75 6e 69 63 6f 64 65 26 26 28 74 2b 3d 22 75 22 29 2c 65 2e 73 74 69 63 6b 79 26 26 28 74 2b 3d 22 79 22 29 2c 74 7d 7d 2c 7b 33 36 3a 33 36 7d 5d 2c 36 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 0a 76 61 72 20 6e 3d Data Ascii: 70:70}],64:[function(e,t,r){"use strict"var n=e(36)t.exports=function(){var e=n(this),t=""return e.global&&(t+="g"),e.ignoreCase&&(t+="i"),e.multiline&&(t+="m"),e.unicode&&(t+="u"),e.sticky&&(t+="y"),t}},{36:36}],65:[function(e,t,r){"use strict"var n=
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 74 63 68 2c 67 3d 30 2c 62 3d 7b 7d 2c 76 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2b 74 68 69 73 0a 69 66 28 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 7b 76 61 72 20 74 3d 62 5b 65 5d 0a 64 65 6c 65 74 65 20 62 5b 65 5d 2c 74 28 29 7d 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 2e 63 61 6c 6c 28 65 2e 64 61 74 61 29 7d 0a 70 26 26 68 7c 7c 28 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 31 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 72 3b 29 74 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 72 2b 2b 5d 29 0a 72 65 74 75 72 6e 20 62 5b 2b 2b 67 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 22 66 75 Data Ascii: tch,g=0,b={},v="onreadystatechange",y=function(){var e=+thisif(b.hasOwnProperty(e)){var t=b[e]delete b[e],t()}},w=function(e){y.call(e.data)}p&&h\|\|(p=function(e){for(var t=[],r=1;arguments.length>r;)t.push(arguments[r++])return b[++g]=function(){s("fu
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 73 5b 31 5d 29 29 29 2c 6e 3c 30 26 26 28 6e 3d 72 2b 6e 29 3b 6e 3e 3d 30 3b 6e 2d 2d 29 69 66 28 6e 20 69 6e 20 74 26 26 74 5b 6e 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 7c 7c 30 0a 72 65 74 75 72 6e 2d 31 7d 7d 29 7d 2c 7b 31 32 36 3a 31 32 36 2c 31 33 37 3a 31 33 37 2c 31 33 38 3a 31 33 38 2c 31 33 39 3a 31 33 39 2c 36 30 3a 36 30 7d 5d 2c 31 36 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 0a 76 61 72 20 6e 3d 65 28 36 30 29 2c 69 3d 65 28 34 30 29 28 31 29 0a 6e 28 6e 2e 50 2b 6e 2e 46 2a 21 65 28 31 32 36 29 28 5b 5d 2e 6d 61 70 2c 21 30 29 2c 22 41 72 72 61 79 22 2c 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 65 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d Data Ascii: s[1]))),n<0&&(n=r+n);n>=0;n--)if(n in t&&t[n]===e)return n\|\|0return-1}})},{126:126,137:137,138:138,139:139,60:60}],165:[function(e,t,r){"use strict"var n=e(60),i=e(40)(1)n(n.P+n.F*!e(126)([].map,!0),"Array",{map:function(e){return i(this,e,arguments[1]
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 74 2c 72 29 0a 69 66 28 65 3d 3d 72 29 7b 73 77 69 74 63 68 28 74 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 65 77 20 65 0a 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 65 77 20 65 28 74 5b 30 5d 29 0a 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 65 77 20 65 28 74 5b 30 5d 2c 74 5b 31 5d 29 0a 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6e 65 77 20 65 28 74 5b 30 5d 2c 74 5b 31 5d 2c 74 5b 32 5d 29 0a 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6e 65 77 20 65 28 74 5b 30 5d 2c 74 5b 31 5d 2c 74 5b 32 5d 2c 74 5b 33 5d 29 7d 76 61 72 20 6e 3d 5b 6e 75 6c 6c 5d 0a 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 74 29 2c 6e 65 77 28 75 2e 61 70 70 6c 79 28 65 2c 6e 29 29 7d 76 61 72 20 6c 3d 72 2e 70 72 6f 74 6f 74 Data Ascii: t,r)if(e==r){switch(t.length){case 0:return new ecase 1:return new e(t[0])case 2:return new e(t[0],t[1])case 3:return new e(t[0],t[1],t[2])case 4:return new e(t[0],t[1],t[2],t[3])}var n=[null]return n.push.apply(n,t),new(u.apply(e,n))}var l=r.protot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49708	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:31 UTC	597	OUT	GET /platform-ember/chunk.131.abd4932d5d56930bc068.js HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:31 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2434026 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "a1a803531fd35a357b75a720640a33e1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 88b63cb2f8aab28c7291262ffc15282e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: uQRtpbpyVzdLD4Mq9uz82kx-fBVhwosB4D6KN7FlOITv63g_743wCw== Age: 81719 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:31 UTC	15493	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 68 75 6e 6b 2e 31 33 31 2e 61 62 64 34 39 33 32 64 35 64 35 36 39 33 30 62 63 30 36 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 65 6d 62 65 72 5f 61 75 74 6f 5f 69 6d 70 6f 72 74 5f 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 65 6d 62 65 72 5f 61 75 74 6f 5f 69 6d 70 6f 72 74 5f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 31 5d 2c 7b 31 33 34 32 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 0a 6e 2e 64 28 74 2c 7b 52 3a 28 29 3d 3e 69 7d 29 0a 76 61 72 20 72 3d 6e 28 36 30 31 34 32 29 2c 6f Data Ascii: /! For license information please see chunk.131.abd4932d5d56930bc068.js.LICENSE.txt /(globalThis.webpackChunk_ember_auto_import_=globalThis.webpackChunk_ember_auto_import_\|\|[]).push([[131],{13429:(e,t,n)=>{"use strict"n.d(t,{R:()=>i})var r=n(60142),o
2024-03-28 13:33:31 UTC	416	IN	Data Raw: 6c 6c 28 6e 2c 65 2c 21 21 74 29 7d 29 2c 7b 6d 61 6b 65 43 61 63 68 65 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 70 74 69 6d 69 73 74 69 63 3f 6e 2e 6f 70 74 69 6d 69 73 74 69 63 44 61 74 61 3a 6e 2e 64 61 74 61 0a 69 66 28 53 28 74 29 29 7b 76 61 72 20 72 3d 65 2e 6f 70 74 69 6d 69 73 74 69 63 2c 6f 3d 65 2e 72 6f 6f 74 49 64 2c 69 3d 65 2e 76 61 72 69 61 62 6c 65 73 0a 72 65 74 75 72 6e 20 74 2e 6d 61 6b 65 43 61 63 68 65 4b 65 79 28 65 2e 71 75 65 72 79 2c 65 2e 63 61 6c 6c 62 61 63 6b 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 6f 70 74 69 6d 69 73 74 69 63 3a 72 2c 72 6f 6f 74 49 64 3a 6f 2c 76 61 72 69 61 62 6c 65 73 3a 69 7d 29 29 7d 7d 7d 29 2c 6e 2e 77 61 74 63 68 44 65 70 3d 28 30 2c 6f 2e 64 50 29 28 29 Data Ascii: ll(n,e,!!t)}),{makeCacheKey:function(e){var t=e.optimistic?n.optimisticData:n.dataif(S(t)){var r=e.optimistic,o=e.rootId,i=e.variablesreturn t.makeCacheKey(e.query,e.callback,JSON.stringify({optimistic:r,rootId:o,variables:i}))}}}),n.watchDep=(0,o.dP)()
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 70 6f 73 73 69 62 6c 65 54 79 70 65 73 2c 74 79 70 65 50 6f 6c 69 63 69 65 73 3a 6e 2e 63 6f 6e 66 69 67 2e 74 79 70 65 50 6f 6c 69 63 69 65 73 7d 29 2c 6e 2e 64 61 74 61 3d 6e 65 77 20 62 2e 52 6f 6f 74 28 7b 70 6f 6c 69 63 69 65 73 3a 6e 2e 70 6f 6c 69 63 69 65 73 2c 72 65 73 75 6c 74 43 61 63 68 69 6e 67 3a 6e 2e 63 6f 6e 66 69 67 2e 72 65 73 75 6c 74 43 61 63 68 69 6e 67 7d 29 2c 6e 2e 6f 70 74 69 6d 69 73 74 69 63 44 61 74 61 3d 6e 2e 64 61 74 61 2c 6e 2e 73 74 6f 72 65 57 72 69 74 65 72 3d 6e 65 77 20 78 28 6e 2c 6e 2e 73 74 6f 72 65 52 65 61 64 65 72 3d 6e 65 77 20 4f 28 7b 63 61 63 68 65 3a 6e 2c 61 64 64 54 79 70 65 6e 61 6d 65 3a 6e 2e 61 64 64 54 79 70 65 6e 61 6d 65 7d 29 29 2c 6e 7d 72 65 74 75 72 6e 28 30 2c 72 2e 5a 54 Data Ascii: config.possibleTypes,typePolicies:n.config.typePolicies}),n.data=new b.Root({policies:n.policies,resultCaching:n.config.resultCaching}),n.optimisticData=n.data,n.storeWriter=new x(n,n.storeReader=new O({cache:n,addTypename:n.addTypename})),n}return(0,r.ZT
2024-03-28 13:33:31 UTC	8192	IN	Data Raw: 72 67 75 6d 65 6e 74 73 26 26 28 74 3d 65 2e 61 72 67 75 6d 65 6e 74 73 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 61 6c 77 61 79 73 22 3d 3d 3d 65 2e 6e 61 6d 65 2e 76 61 6c 75 65 26 26 22 42 6f 6f 6c 65 61 6e 56 61 6c 75 65 22 3d 3d 3d 65 2e 76 61 6c 75 65 2e 6b 69 6e 64 26 26 21 30 3d 3d 3d 65 2e 76 61 6c 75 65 2e 76 61 6c 75 65 7d 29 29 29 29 72 65 74 75 72 6e 20 45 2e 24 5f 7d 7d 7d 29 2c 74 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 52 6f 6f 74 56 61 6c 75 65 46 72 6f 6d 43 61 63 68 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 63 68 65 2e 64 69 66 66 28 7b 71 75 65 72 79 3a 28 30 2c 66 2e 61 4c 29 28 65 29 2c 76 61 72 69 61 62 6c 65 73 3a 74 2c 72 65 74 75 Data Ascii: rguments&&(t=e.arguments.some((function(e){return"always"===e.name.value&&"BooleanValue"===e.value.kind&&!0===e.value.value}))))return E.$_}}}),t},e.prototype.buildRootValueFromCache=function(e,t){return this.cache.diff({query:(0,f.aL)(e),variables:t,retu
2024-03-28 13:33:31 UTC	8192	IN	Data Raw: 3d 65 2e 65 72 72 6f 72 50 6f 6c 69 63 79 2c 6d 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 22 6e 6f 6e 65 22 3a 66 2c 67 3d 65 2e 66 65 74 63 68 50 6f 6c 69 63 79 2c 5f 3d 65 2e 63 6f 6e 74 65 78 74 2c 4d 3d 76 6f 69 64 20 30 3d 3d 3d 5f 3f 7b 7d 3a 5f 0a 72 65 74 75 72 6e 28 30 2c 72 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 73 2c 75 0a 72 65 74 75 72 6e 28 30 2c 72 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 73 77 69 74 63 68 28 66 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 28 30 2c 6f 2e 6b 47 29 28 74 2c 31 33 29 2c 28 30 2c 6f 2e 6b 47 29 28 21 67 7c 7c 22 6e 6f 2d 63 61 63 68 65 22 3d 3d 3d 67 2c 31 34 29 2c 65 3d 74 68 69 73 2e Data Ascii: =e.errorPolicy,m=void 0===f?"none":f,g=e.fetchPolicy,_=e.context,M=void 0===_?{}:_return(0,r.mG)(this,void 0,void 0,(function(){var e,s,ureturn(0,r.Jh)(this,(function(f){switch(f.label){case 0:return(0,o.kG)(t,13),(0,o.kG)(!g\|\|"no-cache"===g,14),e=this.
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 63 79 26 26 28 61 2e 65 72 72 6f 72 73 3d 6f 2e 65 72 72 6f 72 73 29 2c 61 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 28 30 2c 54 2e 4d 29 28 74 29 3f 74 3a 6e 65 77 20 54 2e 63 28 7b 6e 65 74 77 6f 72 6b 45 72 72 6f 72 3a 74 7d 29 0a 74 68 72 6f 77 20 72 3e 3d 65 2e 6c 61 73 74 52 65 71 75 65 73 74 49 64 26 26 65 2e 6d 61 72 6b 45 72 72 6f 72 28 6e 29 2c 6e 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 51 75 65 72 79 4f 62 73 65 72 76 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 0a 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 53 2e 49 2e 6c 6f 61 64 69 6e 67 29 0a 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 28 74 2e 71 75 65 72 79 29 2e 64 6f 63 75 Data Ascii: cy&&(a.errors=o.errors),a}),(function(t){var n=(0,T.M)(t)?t:new T.c({networkError:t})throw r>=e.lastRequestId&&e.markError(n),n}))},e.prototype.fetchQueryObservable=function(e,t,n){var r=thisvoid 0===n&&(n=S.I.loading)var o=this.transform(t.query).docu
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 65 6e 74 56 61 72 69 61 62 6c 65 73 3a 28 29 3d 3e 45 2e 64 69 73 61 62 6c 65 45 78 70 65 72 69 6d 65 6e 74 61 6c 46 72 61 67 6d 65 6e 74 56 61 72 69 61 62 6c 65 73 7d 29 0a 76 61 72 20 72 3d 6e 28 37 32 33 35 33 29 2c 6f 3d 6e 28 31 32 33 39 38 29 2c 69 3d 6e 28 35 31 34 30 36 29 2c 61 3d 6e 28 34 33 38 30 36 29 2c 73 3d 7b 7d 0a 66 6f 72 28 63 6f 6e 73 74 20 4f 20 69 6e 20 61 29 5b 22 64 65 66 61 75 6c 74 22 2c 22 41 70 6f 6c 6c 6f 43 6c 69 65 6e 74 22 2c 22 6d 65 72 67 65 4f 70 74 69 6f 6e 73 22 2c 22 4f 62 73 65 72 76 61 62 6c 65 51 75 65 72 79 22 2c 22 4e 65 74 77 6f 72 6b 53 74 61 74 75 73 22 2c 22 69 73 41 70 6f 6c 6c 6f 45 72 72 6f 72 22 2c 22 41 70 6f 6c 6c 6f 45 72 72 6f 72 22 2c 22 43 61 63 68 65 22 2c 22 41 70 6f 6c 6c 6f 43 61 63 68 65 22 2c Data Ascii: entVariables:()=>E.disableExperimentalFragmentVariables})var r=n(72353),o=n(12398),i=n(51406),a=n(43806),s={}for(const O in a)["default","ApolloClient","mergeOptions","ObservableQuery","NetworkStatus","isApolloError","ApolloError","Cache","ApolloCache",
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6f 28 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 6e 65 78 74 28 65 29 2c 74 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 29 29 2e 63 61 74 63 68 28 74 2e 65 72 72 6f 72 2e 62 69 6e 64 28 74 29 29 7d 29 29 7d 7d 2c 34 35 35 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 0a 6e 2e 64 28 74 2c 7b 50 3a 28 29 3d 3e 72 7d 29 0a 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 45 72 72 6f 72 28 6e 29 0a 74 68 72 6f 77 20 72 2e 6e 61 6d 65 3d 22 53 65 72 76 65 72 45 72 72 6f 72 22 2c 72 2e 72 65 73 70 6f 6e 73 65 3d 65 2c 72 2e 73 74 61 74 75 73 43 6f Data Ascii: function i(e){return new(o())((function(t){e.then((function(e){t.next(e),t.complete()})).catch(t.error.bind(t))}))}},45590:(e,t,n)=>{"use strict"n.d(t,{P:()=>r})var r=function(e,t,n){var r=new Error(n)throw r.name="ServerError",r.response=e,r.statusCo
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 0a 72 65 74 75 72 6e 20 69 28 22 65 72 72 6f 72 22 2c 74 68 69 73 2e 5f 6e 61 6d 65 73 70 61 63 65 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 0a 72 65 74 75 72 6e 20 69 28 22 69 6e 66 6f 22 2c 74 68 69 73 2e 5f 6e 61 6d 65 73 70 61 63 65 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f Data Ascii: or=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t]return i("error",this._namespace,e)},e.prototype.info=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t]return i("info",this._namespace,e)},e.prototype.warn=functio
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 67 61 74 65 29 3a 72 7d 2c 65 7d 28 29 7d 2c 37 33 30 30 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 0a 6e 2e 64 28 74 2c 7b 4b 3a 28 29 3d 3e 61 7d 29 0a 76 61 72 20 72 3d 6e 28 34 31 33 33 32 29 2c 6f 3d 6e 28 34 35 31 30 36 29 2c 69 3d 6e 65 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 72 61 63 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6f 2e 45 7d 2c 65 7d 28 29 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 72 61 63 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e Data Ascii: gate):r},e}()},73001:(e,t,n)=>{"use strict"n.d(t,{K:()=>a})var r=n(41332),o=n(45106),i=new(function(){function e(){}return e.prototype.getTracer=function(e,t,n){return new o.E},e}()),a=function(){function e(){}return e.prototype.getTracer=function(e,t,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49710	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:31 UTC	597	OUT	GET /platform-ember/chunk.143.6d853b71ed5687725e31.js HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:31 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 18153 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "713d6715a1f01d70776f9fe10ca8e9e9" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 55b6418a8a2f714a67d8e4d292154ef2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: VryPm4YxgfKv2P3yltpQvBVNJjL3fuHztl8PzgeHDVQBqu1MJkweuw== Age: 81719 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:31 UTC	15495	IN	Data Raw: 76 61 72 20 5f 5f 65 6d 62 65 72 5f 61 75 74 6f 5f 69 6d 70 6f 72 74 5f 5f 3b 28 28 29 3d 3e 7b 76 61 72 20 65 2c 73 2c 74 2c 6e 2c 6f 2c 72 3d 7b 31 30 37 36 39 3a 28 65 2c 73 2c 74 29 3d 3e 7b 76 61 72 20 6e 3d 7b 22 2e 2f 61 66 22 3a 32 37 33 35 39 2c 22 2e 2f 61 66 2e 6a 73 22 3a 32 37 33 35 39 2c 22 2e 2f 61 72 22 3a 34 35 31 37 2c 22 2e 2f 61 72 2d 64 7a 22 3a 32 34 38 32 32 2c 22 2e 2f 61 72 2d 64 7a 2e 6a 73 22 3a 32 34 38 32 32 2c 22 2e 2f 61 72 2d 6b 77 22 3a 36 31 30 31 34 2c 22 2e 2f 61 72 2d 6b 77 2e 6a 73 22 3a 36 31 30 31 34 2c 22 2e 2f 61 72 2d 6c 79 22 3a 36 36 36 32 30 2c 22 2e 2f 61 72 2d 6c 79 2e 6a 73 22 3a 36 36 36 32 30 2c 22 2e 2f 61 72 2d 6d 61 22 3a 32 39 32 31 36 2c 22 2e 2f 61 72 2d 6d 61 2e 6a 73 22 3a 32 39 32 31 36 2c 22 2e Data Ascii: var __ember_auto_import__;(()=>{var e,s,t,n,o,r={10769:(e,s,t)=>{var n={"./af":27359,"./af.js":27359,"./ar":4517,"./ar-dz":24822,"./ar-dz.js":24822,"./ar-kw":61014,"./ar-kw.js":61014,"./ar-ly":66620,"./ar-ly.js":66620,"./ar-ma":29216,"./ar-ma.js":29216,".
2024-03-28 13:33:31 UTC	416	IN	Data Raw: 64 65 66 61 75 6c 74 3d 28 29 3d 3e 65 2c 5f 2e 64 28 6f 2c 72 29 2c 6f 7d 2c 5f 2e 64 3d 28 65 2c 73 29 3d 3e 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 73 29 5f 2e 6f 28 73 2c 74 29 26 26 21 5f 2e 6f 28 65 2c 74 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 73 5b 74 5d 7d 29 7d 2c 5f 2e 66 3d 7b 7d 2c 5f 2e 65 3d 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 5f 2e 66 29 2e 72 65 64 75 63 65 28 28 28 73 2c 74 29 3d 3e 28 5f 2e 66 5b 74 5d 28 65 2c 73 29 2c 73 29 29 2c 5b 5d 29 29 2c 5f 2e 75 3d 65 3d 3e 22 63 68 75 6e 6b 2e 22 2b 65 2b 22 2e 22 2b 7b 32 37 3a 22 66 31 63 64 63 31 38 66 33 35 61 39 38 63 63 61 65 31 64 61 22 Data Ascii: default=()=>e,_.d(o,r),o},_.d=(e,s)=>{for(var t in s)_.o(s,t)&&!_.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:s[t]})},_.f={},_.e=e=>Promise.all(Object.keys(_.f).reduce(((s,t)=>(_.f[t](e,s),s)),[])),_.u=e=>"chunk."+e+"."+{27:"f1cdc18f35a98ccae1da"
2024-03-28 13:33:31 UTC	2242	IN	Data Raw: 2c 37 36 35 3a 22 30 35 34 66 35 37 38 32 38 34 64 61 37 31 62 32 63 62 36 30 22 7d 5b 65 5d 2b 22 2e 6a 73 22 2c 5f 2e 6d 69 6e 69 43 73 73 46 3d 65 3d 3e 7b 7d 2c 5f 2e 68 6d 64 3d 65 3d 3e 28 28 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 29 2e 63 68 69 6c 64 72 65 6e 7c 7c 28 65 2e 63 68 69 6c 64 72 65 6e 3d 5b 5d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 65 78 70 6f 72 74 73 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 73 65 74 3a 28 29 3d 3e 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 45 53 20 4d 6f 64 75 6c 65 73 20 6d 61 79 20 6e 6f 74 20 61 73 73 69 67 6e 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 6f 72 20 65 78 70 6f 72 74 73 2e 2a 2c 20 55 73 65 20 45 53 4d 20 65 78 70 6f 72 Data Ascii: ,765:"054f578284da71b2cb60"}[e]+".js",_.miniCssF=e=>{},_.hmd=e=>((e=Object.create(e)).children\|\|(e.children=[]),Object.defineProperty(e,"exports",{enumerable:!0,set:()=>{throw new Error("ES Modules may not assign module.exports or exports.*, Use ESM expor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49712	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:31 UTC	614	OUT	GET /platform-ember/platform-ember-a841ee5014fc18a82dc1fc9e41b64f7c.js HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:31 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3069431 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "24a6cd95a8b04abea1c913748f9bbf57" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 841dfa6074cf4b3b0718988f088a4ac2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: DKEwSusNHWTMUSOVNBe_6iygr7Wnc6SQX07oWSNMzsa5e2ecr6xdKQ== Age: 81719 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:31 UTC	15493	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 0a 64 65 66 69 6e 65 28 22 70 6c 61 74 66 6f 72 6d 2d 65 6d 62 65 72 2f 61 63 63 65 70 74 61 6e 63 65 2d 74 65 73 74 73 2f 67 65 6e 65 72 61 74 65 64 2d 72 6f 75 74 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 65 6d 62 65 72 2d 72 65 64 69 72 65 63 74 2f 61 63 63 65 70 74 61 6e 63 65 2d 74 65 73 74 73 2f 67 65 6e 65 72 61 74 65 64 2d 72 6f 75 74 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 Data Ascii: "use strict"define("platform-ember/acceptance-tests/generated-route",["exports","ember-redirect/acceptance-tests/generated-route"],(function(e,i){Object.defineProperty(e,"__esModule",{value:!0}),Object.defineProperty(e,"default",{enumerable:!0,get:functi
2024-03-28 13:33:31 UTC	416	IN	Data Raw: 65 72 61 62 6c 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 61 2e 77 72 69 74 61 62 6c 65 2c 76 61 6c 75 65 3a 61 2e 69 6e 69 74 69 61 6c 69 7a 65 72 3f 61 2e 69 6e 69 74 69 61 6c 69 7a 65 72 2e 63 61 6c 6c 28 74 29 3a 76 6f 69 64 20 30 7d 29 2c 6e 3d 74 68 69 73 2c 6f 3d 22 6e 61 6d 65 73 70 61 63 65 22 2c 73 3d 74 68 69 73 2e 77 6f 6d 62 61 74 4e 61 6d 65 73 70 61 63 65 73 2e 44 57 5f 4e 41 4d 45 53 50 41 43 45 2c 6f 20 69 6e 20 6e 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 6f 2c 7b 76 61 6c 75 65 3a 73 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 6e 5b 6f 5d 3d Data Ascii: erable,configurable:a.configurable,writable:a.writable,value:a.initializer?a.initializer.call(t):void 0}),n=this,o="namespace",s=this.wombatNamespaces.DW_NAMESPACE,o in n?Object.defineProperty(n,o,{value:s,enumerable:!0,configurable:!0,writable:!0}):n[o]=
2024-03-28 13:33:31 UTC	12288	IN	Data Raw: 22 71 75 65 72 79 22 2c 7b 7d 29 2c 22 47 45 54 22 2c 7b 7d 29 0a 63 6f 6e 73 74 20 74 3d 60 24 7b 22 64 65 73 63 22 3d 3d 3d 61 2e 6f 72 64 65 72 3f 22 2d 22 3a 22 22 7d 24 7b 61 2e 73 6f 72 74 7d 60 2c 6e 3d 7b 70 61 67 65 3a 7b 6f 66 66 73 65 74 3a 61 2e 70 61 67 65 2a 61 2e 73 69 7a 65 2c 6c 69 6d 69 74 3a 61 2e 73 69 7a 65 7d 2c 2e 2e 2e 61 2e 73 6f 72 74 3f 7b 73 6f 72 74 3a 74 7d 3a 7b 7d 7d 2c 72 3d 7b 64 61 74 61 3a 74 68 69 73 2e 73 6f 72 74 51 75 65 72 79 50 61 72 61 6d 73 28 6e 29 7d 2c 6f 3d 74 68 69 73 2e 62 75 69 6c 64 55 52 4c 28 69 2e 6d 6f 64 65 6c 4e 61 6d 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 71 75 65 72 79 22 2c 72 29 0a 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6a 61 78 28 6f 2c 22 47 45 54 22 2c 72 29 7d 7d 2c 73 3d 6e 2e 70 72 6f 74 Data Ascii: "query",{}),"GET",{})const t=`${"desc"===a.order?"-":""}${a.sort}`,n={page:{offset:a.page*a.size,limit:a.size},...a.sort?{sort:t}:{}},r={data:this.sortQueryParams(n)},o=this.buildURL(i.modelName,null,null,"query",r)return this.ajax(o,"GET",r)}},s=n.prot
2024-03-28 13:33:31 UTC	12288	IN	Data Raw: 72 3a 6e 75 6c 6c 7d 2c 6d 3d 7b 7d 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6d 5b 65 5d 3d 64 5b 65 5d 7d 29 29 2c 6d 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 21 6d 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 6d 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 21 6d 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 28 22 76 61 6c 75 65 22 69 6e 20 6d 7c 7c 6d 2e 69 6e 69 74 69 61 6c 69 7a 65 72 29 26 26 28 6d 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 6d 3d 6c 2e 73 6c 69 63 65 28 29 2e 72 65 76 65 72 73 65 28 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 69 28 6f 2c 73 2c 65 29 7c 7c 65 7d 29 2c 6d 29 2c 75 26 26 76 6f 69 64 20 30 21 3d 3d 6d 2e 69 6e 69 74 69 Data Ascii: r:null},m={},Object.keys(d).forEach((function(e){m[e]=d[e]})),m.enumerable=!!m.enumerable,m.configurable=!!m.configurable,("value"in m\|\|m.initializer)&&(m.writable=!0),m=l.slice().reverse().reduce((function(e,i){return i(o,s,e)\|\|e}),m),u&&void 0!==m.initi
2024-03-28 13:33:31 UTC	8192	IN	Data Raw: 2c 64 2c 75 2c 6d 2c 63 2c 70 2c 67 2c 66 2c 62 2c 76 2c 79 2c 68 2c 6b 2c 5f 2c 77 2c 4e 0a 66 75 6e 63 74 69 6f 6e 20 7a 28 65 2c 69 2c 61 2c 74 29 7b 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 61 2e 77 72 69 74 61 62 6c 65 2c 76 61 6c 75 65 3a 61 2e 69 6e 69 74 69 61 6c 69 7a 65 72 3f 61 2e 69 6e 69 74 69 61 6c 69 7a 65 72 2e 63 61 6c 6c 28 74 29 3a 76 6f 69 64 20 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 2c 69 2c 61 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 0a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 Data Ascii: ,d,u,m,c,p,g,f,b,v,y,h,k,_,w,Nfunction z(e,i,a,t){a&&Object.defineProperty(e,i,{enumerable:a.enumerable,configurable:a.configurable,writable:a.writable,value:a.initializer?a.initializer.call(t):void 0})}function j(e,i,a,t,n){var r={}return Object.keys(t
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 22 5d 2c 5b 31 34 2c 30 2c 22 61 73 73 69 67 6e 6d 65 6e 74 2d 6d 6f 64 75 6c 65 2d 73 75 62 74 69 74 6c 65 20 68 65 61 64 69 6e 67 2d 33 20 6d 62 2d 32 22 5d 2c 5b 31 32 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 22 5d 2c 5b 31 2c 5b 33 30 2c 30 2c 5b 22 64 65 63 6f 64 65 64 54 69 74 6c 65 22 5d 5d 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 22 5d 2c 5b 31 33 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 22 5d 5d 2c 5b 5d 5d 5d 5d 5d 2c 5b 31 2c 22 5c 5c 6e 5c 5c 6e 22 5d 2c 5b 34 31 2c 5b 33 30 2c 30 2c 5b 22 72 75 6e 74 69 6d 65 22 5d 5d 2c 5b 5b 5b 31 2c 22 20 20 20 20 20 20 22 5d 2c 5b 31 30 2c 32 5d 2c 5b 31 34 2c 22 64 61 74 61 2d 74 65 73 74 2d 61 73 73 69 67 6e 6d 65 6e 74 2d 6d 6f 64 75 6c 65 2d 69 6e 66 6f 22 2c 22 72 75 6e 74 69 6d 65 22 5d 2c 5b 31 32 Data Ascii: "],[14,0,"assignment-module-subtitle heading-3 mb-2"],[12],[1,"\\n "],[1,[30,0,["decodedTitle"]]],[1,"\\n "],[13],[1,"\\n "]],[]]]]],[1,"\\n\\n"],[41,[30,0,["runtime"]],[[[1," "],[10,2],[14,"data-test-assignment-module-info","runtime"],[12
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 5d 2c 5b 5b 22 73 75 66 66 69 78 22 5d 2c 5b 5b 5b 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 22 5d 2c 5b 38 2c 5b 33 39 2c 31 32 5d 2c 5b 5b 32 34 2c 30 2c 22 62 74 6e 2d 70 72 69 6d 61 72 79 22 5d 2c 5b 32 34 2c 34 2c 22 73 75 62 6d 69 74 22 5d 5d 2c 5b 5b 22 40 73 69 7a 65 22 5d 2c 5b 22 73 6d 61 6c 6c 22 5d 5d 2c 5b 5b 22 64 65 66 61 75 6c 74 22 5d 2c 5b 5b 5b 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 53 65 61 72 63 68 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 22 5d 5d 2c 5b 5d 5d 5d 5d 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 20 20 22 5d 5d 2c 5b 5d 5d 5d 5d 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 22 5d 2c 5b 31 33 5d 2c 5b 31 2c 22 5c 5c 6e 5c 5c 6e 20 20 20 20 22 5d 2c 5b 38 2c 5b 33 39 2c 31 33 5d 2c 6e 75 6c 6c 2c 5b 5b 22 Data Ascii: ],[["suffix"],[[[[1,"\\n "],[8,[39,12],[[24,0,"btn-primary"],[24,4,"submit"]],[["@size"],["small"]],[["default"],[[[[1,"\\n Search\\n "]],[]]]]],[1,"\\n "]],[]]]]],[1,"\\n "],[13],[1,"\\n\\n "],[8,[39,13],null,[["
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 76 69 63 65 22 2c 5b 6f 5d 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 69 6e 69 74 69 61 6c 69 7a 65 72 3a 6e 75 6c 6c 7d 29 2c 64 28 73 2e 70 72 6f 74 6f 74 79 70 65 2c 22 67 65 74 51 75 65 72 79 46 6f 72 53 65 72 69 65 73 22 2c 5b 6e 2e 61 63 74 69 6f 6e 5d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 73 2e 70 72 6f 74 6f 74 79 70 65 2c 22 67 65 74 51 75 65 72 79 46 6f 72 53 65 72 69 65 73 22 29 2c 73 2e 70 72 6f 74 6f 74 79 70 65 29 2c 64 28 73 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 61 6e 64 6c 65 43 61 72 64 43 6c 69 63 6b 65 64 22 2c 5b 6e 2e 61 63 74 69 6f 6e 5d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 Data Ascii: vice",[o],{configurable:!0,enumerable:!0,writable:!0,initializer:null}),d(s.prototype,"getQueryForSeries",[n.action],Object.getOwnPropertyDescriptor(s.prototype,"getQueryForSeries"),s.prototype),d(s.prototype,"handleCardClicked",[n.action],Object.getOwnPr
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 5d 2c 5b 31 30 2c 30 5d 2c 5b 31 34 2c 30 2c 22 6c 2d 72 69 67 68 74 20 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 73 22 5d 2c 5b 31 32 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 22 5d 2c 5b 38 2c 5b 33 39 2c 37 5d 2c 5b 5b 32 34 2c 30 2c 22 62 74 6e 2d 70 72 69 6d 61 72 79 20 62 74 6e 2d 62 6c 6f 63 6b 22 5d 5d 2c 5b 5b 22 40 6c 61 62 65 6c 22 2c 22 40 73 69 7a 65 22 2c 22 40 74 79 70 65 22 2c 22 40 74 65 73 74 53 65 6c 65 63 74 6f 72 4e 61 6d 65 22 5d 2c 5b 5b 32 38 2c 5b 33 37 2c 35 5d 2c 5b 22 62 75 74 74 6f 6e 2e 73 75 62 6d 69 74 22 5d 2c 6e 75 6c 6c 5d 2c 22 6c 22 2c 22 73 75 62 6d 69 74 22 2c 22 70 61 73 73 77 6f 72 64 2d 73 75 62 6d 69 74 22 5d 5d 2c 6e 75 6c 6c 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 20 20 22 5d 2c 5b 31 33 5d 2c 5b Data Ascii: ],[10,0],[14,0,"l-right login-actions"],[12],[1,"\\n "],[8,[39,7],[[24,0,"btn-primary btn-block"]],[["@label","@size","@type","@testSelectorName"],[[28,[37,5],["button.submit"],null],"l","submit","password-submit"]],null],[1,"\\n "],[13],[
2024-03-28 13:33:31 UTC	16384	IN	Data Raw: 2d 63 65 6e 74 65 72 22 5d 2c 5b 31 32 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 22 5d 2c 5b 31 30 2c 31 5d 2c 5b 31 34 2c 22 64 61 74 61 2d 74 65 73 74 2d 74 79 70 65 22 2c 22 22 5d 2c 5b 31 32 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 20 20 22 5d 2c 5b 31 2c 5b 33 30 2c 30 2c 5b 22 64 61 74 61 22 2c 22 74 79 70 65 22 5d 5d 5d 2c 5b 31 2c 22 3a 5c 5c 6e 20 20 20 20 20 20 22 5d 2c 5b 31 33 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 22 5d 2c 5b 31 30 2c 31 5d 2c 5b 31 34 2c 22 64 61 74 61 2d 74 65 73 74 2d 73 75 62 74 79 70 65 22 2c 22 22 5d 2c 5b 31 34 2c 30 2c 22 6d 6c 2d 31 22 5d 2c 5b 31 32 5d 2c 5b 31 2c 22 5c 5c 6e 20 20 20 20 20 20 20 20 22 5d 2c 5b 31 2c 5b 33 30 2c 30 2c 5b 22 64 61 74 61 22 2c 22 73 75 62 74 79 70 65 22 5d 5d 5d 2c 5b 31 Data Ascii: -center"],[12],[1,"\\n "],[10,1],[14,"data-test-type",""],[12],[1,"\\n "],[1,[30,0,["data","type"]]],[1,":\\n "],[13],[1,"\\n "],[10,1],[14,"data-test-subtype",""],[14,0,"ml-1"],[12],[1,"\\n "],[1,[30,0,["data","subtype"]]],[1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49714	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:31 UTC	571	OUT	GET /localizejs/localize.js HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:32 UTC	867	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:31 GMT Content-Type: text/javascript Content-Length: 61657 Connection: close Server: nginx Last-Modified: Wed, 14 Jun 2023 16:12:51 GMT ETag: "b334e888ce2e9c455ec9b381fa5d067d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7f7e359e1c06a914d3d305785359b84c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: AUWVyjVDERTy_yrZxaUsV_uMbI1jgpUj8GPIpnshK4MmqKjO9nAwxg== Age: 19998 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:32 UTC	15517	IN	Data Raw: 2f 2f 4c 6f 63 61 6c 69 7a 65 2d 76 34 37 34 0a 21 66 75 6e 63 74 69 6f 6e 28 61 65 2c 69 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 61 3b 69 65 2e 4c 6f 63 61 6c 69 7a 65 26 26 69 65 2e 4c 6f 63 61 6c 69 7a 65 2e 6c 6f 61 64 65 64 7c 7c 28 61 3d 7b 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 5b 65 5d 28 29 7d 2c 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 6c 3d 7b 7d 3b 61 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 74 28 72 2c 6e 3d 7b 7d 2c 6c 29 2c 6e 3d 6c 2e 65 78 70 6f 72 74 73 7c 7c 6e 29 2c 6e 7d 7d 29 28 30 2c 66 75 6e 63 74 69 6f 6e 28 6f 2c 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 63 3d 69 65 2e 4c 6f 63 61 6c 69 7a 65 3d 69 65 2e Data Ascii: //Localize-v474!function(ae,ie){"use strict";var e,r,a;ie.Localize&&ie.Localize.loaded\|\|(a={},r=function(e){return a[e]()},(e=function(e,t){var n,l={};a[e]=function(){return n\|\|(t(r,n={},l),n=l.exports\|\|n),n}})(0,function(o,e,t){for(var c=ie.Localize=ie.
2024-03-28 13:33:32 UTC	401	IN	Data Raw: 72 61 6e 73 6c 61 74 65 22 2c 75 28 22 76 61 72 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 3b 7d 2a 5b 6c 7a 2d 65 64 69 74 61 62 6c 65 5d 7b 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2a 5b 6c 7a 2d 65 64 69 74 61 62 6c 65 5d 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 29 7d 61 75 64 69 6f 5b 6c 7a 2d 65 64 69 74 61 62 6c 65 5d 20 7b 70 61 64 64 69 6e 67 3a 35 70 78 3b 7d 22 29 2c 22 66 61 6c 73 65 22 21 3d 3d 61 2e 67 65 74 28 22 6c 6a 73 2d 68 69 64 65 22 29 26 26 28 6c 3d 75 28 22 2a 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 Data Ascii: ranslate",u("var{font-style:inherit;}[lz-editable]{border: 1px solid rgba(0,0,0,0.5);cursor:pointer;}[lz-editable]:hover {background-color:rgba(255,255,255,0.1)}audio[lz-editable] {padding:5px;}"),"false"!==a.get("ljs-hide")&&(l=u("*{color:transparent!i
2024-03-28 13:33:32 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 21 30 29 7d 2c 33 65 33 29 7d 29 29 2c 61 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6d 65 74 61 22 29 29 3b 65 2e 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 2c 65 2e 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 2c 63 28 65 29 7d 2c 74 2e 6c 31 30 38 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 26 26 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 21 65 26 26 67 2e 6c 31 31 37 7c 7c 61 2e 73 65 74 28 22 6c 6a 73 2d 68 69 64 65 22 2c 21 31 29 2c 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6c 29 2c 6c 3d 21 31 29 7d 29 3b 74 2e 6c 30 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 67 2e 6c 31 37 2c Data Ascii: (function(){setTimeout(function(){s(!0)},3e3)})),ae.createElement("meta"));e.name="google",e.content="notranslate",c(e)},t.l108=function(e){l&&l.parentNode&&(!e&&g.l117\|\|a.set("ljs-hide",!1),l.parentNode.removeChild(l),l=!1)});t.l0=function(){var e=g.l17,
2024-03-28 13:33:32 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 6c 29 7b 76 61 72 20 72 3d 70 61 72 73 65 49 6e 74 28 74 2e 6d 61 74 63 68 28 4c 29 5b 30 5d 2c 31 30 29 3b 69 66 28 21 69 73 4e 61 4e 28 72 29 29 7b 72 2b 3d 32 2a 6c 3b 6c 3d 74 2e 72 65 70 6c 61 63 65 28 4c 2c 22 22 29 2c 74 3d 6e 5b 6c 2b 72 5d 2c 6c 3d 6e 5b 6c 2b 28 72 2b 32 29 5d 3b 69 66 28 74 26 26 6c 29 72 65 74 75 72 6e 5b 74 2c 6c 5d 7d 7d 2c 78 3d 74 2e 6c 31 36 39 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 56 61 6c 75 65 7c 7c 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 22 22 7d 2c 41 3d 74 2e 6c 35 36 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 22 22 7d 2c 59 Data Ascii: =function(e,t,n,l){var r=parseInt(t.match(L)[0],10);if(!isNaN(r)){r+=2*l;l=t.replace(L,""),t=n[l+r],l=n[l+(r+2)];if(t&&l)return[t,l]}},x=t.l169=function(e){return e.nodeValue\|\|e.textContent\|\|""},A=t.l56=function(e){return e.innerHTML\|\|e.textContent\|\|""},Y
2024-03-28 13:33:32 UTC	12971	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 2e 65 71 75 61 6c 73 3d 3d 70 3f 6c 3a 69 7d 2c 6c 37 38 3a 63 28 31 29 2c 6c 38 35 3a 63 28 32 29 2c 6c 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 74 68 69 73 2e 6c 38 35 28 65 29 3b 72 65 74 75 72 6e 20 65 3f 28 74 68 69 73 2e 6c 37 35 2e 73 70 6c 69 63 65 28 65 5b 30 5d 2c 31 29 2c 65 5b 31 5d 29 3a 6e 75 6c 6c 7d 2c 6c 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6c 37 35 2e 70 75 73 68 28 5b 65 2c 74 5d 29 7d 2c 6b 65 79 73 3a 75 28 30 29 2c 76 61 6c 75 65 73 3a 75 28 31 29 2c 6c 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 30 2c 6c 3d 74 68 69 73 2e 6c 37 35 2c 72 3d 6c 2e 6c 65 6e 67 74 68 3b 6e 3c Data Ascii: n(e){return typeof e.equals==p?l:i},l78:c(1),l85:c(2),l83:function(e){e=this.l85(e);return e?(this.l75.splice(e[0],1),e[1]):null},l74:function(e,t){this.l75.push([e,t])},keys:u(0),values:u(1),l84:function(e){for(var t=e.length,n=0,l=this.l75,r=l.length;n<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49715	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:33 UTC	735	OUT	GET /wombat-style-guide/fonts/wombaticons.woff2?00965ec43b6dcef594e13da207312244 HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hillsclerk.securityeducation.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:33 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:33 GMT Content-Type: binary/octet-stream Content-Length: 9852 Connection: close Server: nginx Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 20 Mar 2024 14:50:49 GMT ETag: "89fe561b03a7e0ca54755ce4e3965636" X-Cache: Hit from cloudfront Via: 1.1 baddfcb4f2a6876b4fcc03bcd62427ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 0-I3LwHMXhAtUO6ICzKvxMDa0ne0U1txWHEQsogbqzRelJpofLD35Q== Age: 81721 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:33 UTC	9852	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 26 7c 00 0b 00 00 00 00 63 70 00 00 26 2b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 9d 26 06 56 00 96 00 0a f3 58 dc 2b 01 36 02 24 03 85 38 0b 82 5e 00 04 20 05 84 3a 07 90 0c 1b 9e 55 07 54 af 99 e3 6e 07 3d 46 ea ff ca 91 08 61 e3 00 41 b3 3d 4d 14 b5 6a 92 4a 92 fd ff 7f 4e 7a c4 08 d8 c8 a9 fa b7 21 30 28 a4 55 64 50 5f 53 c6 94 9a d2 47 a0 5a b7 86 46 be 81 2c f5 56 18 e3 47 53 4f 1c fc b7 bf d7 04 e2 2a fc 51 0f c2 80 1c 94 d7 0b 81 05 41 96 75 f4 f7 ae f1 f3 77 86 53 d6 f9 5b 97 d0 66 92 43 92 a4 f9 ff d3 74 fd 7d 32 33 6f 2c 79 33 49 93 4e 69 4a 32 f5 20 9b 4e 84 12 b4 49 5a a7 5b 4a a6 d4 a0 45 36 6b 5e ba 66 a5 ac e0 45 57 81 b5 b2 e6 fc f3 0f eb fe 8d bf e6 c0 3a fb 95 87 7f d6 be Data Ascii: wOF2&\|cp&+&VX+6$8^ :UTn=FaA=MjJNz!0(UdP_SGZF,VGSO*QAuwS[fCt}23o,y3INiJ2 NIZ[JE6k^fEW:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49716	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:33 UTC	713	OUT	GET /wombat-style-guide/fonts/roboto-latin-400italic.woff2 HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hillsclerk.securityeducation.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:33 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:33 GMT Content-Type: binary/octet-stream Content-Length: 16944 Connection: close Server: nginx Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 06 Mar 2024 14:38:43 GMT ETag: "d8bcbe724fd6f4ba44d0ee6a2675890f" X-Cache: Hit from cloudfront Via: 1.1 55b6418a8a2f714a67d8e4d292154ef2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: iDZ743Mm6Q3VBLRyWqKsNwrISKVdTLbQNzgfT7PmUQJlHugK0cjlHA== Age: 81721 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:33 UTC	15439	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 42 30 00 12 00 00 00 00 90 74 00 00 41 cb 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 99 40 1c 83 4a 06 60 00 86 4c 08 52 09 83 3c 11 0c 0a 81 e1 14 81 c9 16 0b 83 5e 00 12 81 78 01 36 02 24 03 87 36 04 20 05 83 0a 07 20 0c 82 44 1b 5f 81 25 ec d8 8b 02 ce 03 48 f0 51 39 e6 64 ba b9 78 6e 27 b7 7c 0f 36 17 45 b0 71 00 a0 e8 07 ca fe ff 63 72 32 44 21 75 10 a2 b5 3f 54 09 2a 05 b3 4d a2 36 77 3b 10 3b 18 34 7a a4 a4 ad 22 2a e5 c1 66 9f 08 67 23 48 e8 45 93 49 11 c6 85 2f fc 0a 0d 55 af 13 dc e1 34 b9 50 11 a8 1e 35 44 0d ad df bf 9c 22 a2 d6 92 4f cb dd 85 a0 65 d6 f3 a3 07 83 6f 53 68 7b ba 90 3d f8 a3 44 17 ff c1 1e 7c 70 4e 75 f7 dd 2f 1f f7 d3 23 34 f6 49 2e 0f d2 1a 9f 2f 99 cc 6e 81 Data Ascii: wOF2B0tAd@J`LR<^x6$6 D_%HQ9dxn'\|6Eqcr2D!u?TM6w;;4z"fg#HEI/U4P5D"OeoSh{=D\|pNu/#4I./n
2024-03-28 13:33:33 UTC	401	IN	Data Raw: 00 80 0d fc 90 a8 6a 40 72 c9 a5 44 cc 0d b3 cf fd 05 27 78 fe 8b 3d fe 83 53 9c 41 f3 ac 82 ff 3d f4 a8 b0 66 e6 11 4e db 79 5d e6 a1 30 1a 18 4f 6a c0 23 3d bb 66 f8 67 54 2c 97 45 e1 6c 9f bb da ed a1 5c 9d 54 c6 74 67 ae 6e f3 e4 9a 84 d6 f3 4f cf 88 96 53 f1 c0 00 09 74 12 15 25 9e 2a 20 fe 1e 4b d9 32 a1 d6 b9 cd 6c 0a 31 1e 21 77 0d cc 44 91 90 0a 8a ec eb 7b 7a 68 1e ba bf a3 fb 67 c7 73 8a cd fa 39 f7 d3 fb 59 ed 0d 8f 5f f7 93 bb f3 f3 74 b9 6d 67 3d f5 2e 43 58 47 77 d6 75 22 d7 4e ab ca 42 75 c9 8c 12 0b bc 6e 15 fa 31 da 74 44 67 b7 16 15 0c a2 5a c5 e2 b5 a9 78 2d f8 b3 47 a6 fd 82 72 93 54 03 66 f5 cc ca 74 be 6f 3b d2 0e 8f 72 95 dd 4e 1b ff 93 0c 8b 02 8a 2d 67 42 49 25 eb 9d f5 4c 5b e9 ef 2a 09 d4 c6 74 4e 4f d5 a2 b4 9f 63 d7 34 37 cf Data Ascii: j@rD'x=SA=fNy]0Oj#=fgT,El\TtgnOSt%* K2l1!wD{zhgs9Y_tmg=.CXGwu"NBun1tDgZx-GrTfto;rN-gBI%L[*tNOc47
2024-03-28 13:33:33 UTC	1104	IN	Data Raw: c0 03 0e 73 e7 da 7a 22 a2 2b de 4b 2c 6b 59 78 1a c9 c0 77 7a ba 2d 2b 2d 49 92 b2 12 c5 53 fa e6 03 06 e0 7b 50 02 48 7a 44 06 dd 15 0e 52 ff 8c 43 5e 3d 23 7b aa 10 65 10 4e d6 a6 b1 f2 a0 28 b9 1d 78 df 65 3f 52 e3 a9 29 9e a5 27 0b e6 49 2f 9a c8 74 b3 2a e9 52 36 32 3b dc 68 25 a5 7b 97 87 8c 0a 9d f2 1c a4 3b ea 5d 7b 77 e8 25 53 60 7d 16 06 d6 c7 9e 14 f0 af e7 53 36 f7 67 1f fe ec 69 fe 17 fb 30 2d 08 00 5e fd bd 94 05 c0 67 61 f3 c3 df ef ff 5b 1f cc 56 89 82 21 c1 00 04 30 df bc 80 00 ac ba d1 3f aa ff 87 66 ee 01 70 39 35 e3 97 56 cb d7 7e fc d1 ff a5 b9 2a d0 cb 1c cb b5 c6 a6 fc 99 f6 29 33 b5 45 3d 7c 0d e4 79 67 72 6e 94 35 6f 21 15 ce 2c ca 47 59 ca 12 4a 3e ca 4d 6b 94 9d 4d 81 f0 17 01 4a f0 22 85 6b a1 5b ab 3a 3e 90 8e 91 d1 d4 fe f5 Data Ascii: sz"+K,kYxwz-+-IS{PHzDRC^=#{eN(xe?R)'I/tR62;h%{;]{w%S`}S6gi0-^ga[V!0?fp95V~)3E=\|ygrn5o!,GYJ>MkMJ"k[:>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49718	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	899	OUT	GET /api/companymanagement/api/companyLoginProfile/hillsclerk HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/vnd.api+json X-Requested-With: XMLHttpRequest traceparent: 00-9df5594fc660ffa3c976f45e637aa009-73888404e5b568c7-01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:34 UTC	422	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 13:33:34 GMT Content-Type: application/vnd.api+json;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-cache, no-store Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:34 UTC	588	IN	Data Raw: 32 34 35 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 4c 6f 67 69 6e 50 72 6f 66 69 6c 65 22 2c 22 69 64 22 3a 22 68 69 6c 6c 73 63 6c 65 72 6b 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 65 67 61 6c 4e 61 6d 65 22 3a 22 48 69 6c 6c 73 62 6f 72 6f 75 67 68 20 43 6f 75 6e 74 79 20 43 6c 65 72 6b 20 6f 66 20 54 68 65 20 43 6f 75 72 74 73 22 2c 22 70 72 6f 76 69 73 69 6f 6e 69 6e 67 54 79 70 65 22 3a 22 43 54 53 22 2c 22 6e 61 6d 65 22 3a 22 48 69 6c 6c 73 62 6f 72 6f 75 67 68 20 43 6f 75 6e 74 79 20 43 6c 65 72 6b 20 6f 66 20 54 68 65 20 43 6f 75 72 74 73 22 2c 22 65 6e 64 55 73 65 72 4c 6f 67 6f 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 77 65 62 2e 73 65 63 75 72 69 74 79 65 64 75 63 61 Data Ascii: 245{"data":{"type":"companyLoginProfile","id":"hillsclerk","attributes":{"legalName":"Hillsborough County Clerk of The Courts","provisioningType":"CTS","name":"Hillsborough County Clerk of The Courts","endUserLogoUrl":"https://platform-web.securityeduca
2024-03-28 13:33:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49720	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	793	OUT	GET /favicon.ico HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:34 UTC	866	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12393 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "6b9e2a5ae6ec6fb2100430da2c329e4c" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 5c91d033409cd7607633594f94b09064.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: KReEnWUo6aRJUFW5nxZV5dfDWMAWMLKtFunQNP7X9X59nARTDEE4ig== Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:34 UTC	7742	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 6e 6f 74 72 61 6e 73 6c 61 74 65 3e 53 65 63 75 72 69 74 79 20 45 64 75 63 61 74 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 69 72 64 20 70 61 72 74 79 20 6c 69 63 65 6e 73 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 61 70 70 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 62 79 20 76 69 73 69 74 69 6e 67 20 2f 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title notranslate>Security Education Platform</title> ... Third party licenses used in this app can be viewed by visiting /l
2024-03-28 13:33:34 UTC	4651	IN	Data Raw: 2e 70 6e 67 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 66 66 66 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 6d 65 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 50 72 6f 6f 66 70 6f 69 6e 74 20 53 65 63 75 72 69 74 79 20 41 77 61 72 65 6e 65 73 73 20 54 72 61 69 6e 69 6e Data Ascii: .png" /> <link rel="manifest" href="/manifest.json" /> <meta name="mobile-web-app-capable" content="yes" /> <meta name="theme-color" content="#fff" /> <meta name="application-name" content="Proofpoint Security Awareness Trainin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49719	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	561	OUT	GET /manifest.json HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:34 UTC	867	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:34 GMT Content-Type: application/json Content-Length: 1390 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "10a089b88dc82ae5bfd300d96e73d0ce" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6b7e1e42d74fd61097787cc6c1a37c34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: TSv3lBsKqJI4SnHuhOmfrJhA2sudXUy2oXsCcxPvZJpDXTZ4G46XeQ== Age: 81751 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:34 UTC	1390	IN	Data Raw: 7b 0a 20 20 22 6e 61 6d 65 22 3a 20 22 50 72 6f 6f 66 70 6f 69 6e 74 20 53 65 63 75 72 69 74 79 20 41 77 61 72 65 6e 65 73 73 20 54 72 61 69 6e 69 6e 67 22 2c 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 53 65 63 75 72 69 74 79 20 45 64 75 63 61 74 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 22 2c 0a 20 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 50 72 6f 6f 66 70 6f 69 6e 74 20 53 65 63 75 72 69 74 79 20 41 77 61 72 65 6e 65 73 73 20 54 72 61 69 6e 69 6e 67 20 50 6c 61 74 66 6f 72 6d 22 2c 0a 20 20 22 64 69 72 22 3a 20 22 61 75 74 6f 22 2c 0a 20 20 22 6c 61 6e 67 22 3a 20 22 65 6e 2d 55 53 22 2c 0a 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 22 6f 72 69 65 6e 74 61 74 69 6f 6e 22 3a 20 22 61 6e 79 22 2c Data Ascii: { "name": "Proofpoint Security Awareness Training", "short_name": "Security Education Platform", "description": "Proofpoint Security Awareness Training Platform", "dir": "auto", "lang": "en-US", "display": "standalone", "orientation": "any",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49721	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 13:33:34 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=235795 Date: Thu, 28 Mar 2024 13:33:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49722	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	882	OUT	GET /api/auth/jsonapi/authDetails/hillsclerk HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/vnd.api+json X-Requested-With: XMLHttpRequest traceparent: 00-fca9b9409dd6638ac28d6fcaf7c06c4b-bb42b33b47890f9a-01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:34 UTC	564	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 13:33:34 GMT Content-Type: application/vnd.api+json;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache Expires: -1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-XSS-Protection: 0 Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:34 UTC	183	IN	Data Raw: 62 31 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 61 75 74 68 44 65 74 61 69 6c 73 22 2c 22 69 64 22 3a 22 68 69 6c 6c 73 63 6c 65 72 6b 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 73 73 6f 56 65 72 73 69 6f 6e 22 3a 22 76 32 22 2c 22 6d 75 6c 74 69 49 64 70 22 3a 66 61 6c 73 65 2c 22 61 75 74 68 54 79 70 65 22 3a 36 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 22 2f 6a 73 6f 6e 61 70 69 2f 61 75 74 68 44 65 74 61 69 6c 73 2f 68 69 6c 6c 73 63 6c 65 72 6b 22 7d 7d 2c 22 69 6e 63 6c 75 64 65 64 22 3a 5b 5d 7d 0d 0a Data Ascii: b1{"data":{"type":"authDetails","id":"hillsclerk","attributes":{"ssoVersion":"v2","multiIdp":false,"authType":6},"links":{"self":"/jsonapi/authDetails/hillsclerk"}},"included":[]}
2024-03-28 13:33:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49724	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	815	OUT	GET /images/android-chrome-144x144.png HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:34 UTC	866	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12393 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "6b9e2a5ae6ec6fb2100430da2c329e4c" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 b4346add631a498bf6cdbf88cbc5ff12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: IcBPBk5mwXHowC7uobuMTZmBcA47RQfq11EBy4pnFwIfNmEvQ9Z1KQ== Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:34 UTC	12393	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 6e 6f 74 72 61 6e 73 6c 61 74 65 3e 53 65 63 75 72 69 74 79 20 45 64 75 63 61 74 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 69 72 64 20 70 61 72 74 79 20 6c 69 63 65 6e 73 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 61 70 70 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 62 79 20 76 69 73 69 74 69 6e 67 20 2f 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title notranslate>Security Education Platform</title> ... Third party licenses used in this app can be viewed by visiting /l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49723	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	799	OUT	GET /favicon-32x32.png HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:34 UTC	866	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12393 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "6b9e2a5ae6ec6fb2100430da2c329e4c" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 7c4bbd97f5be908e33f403c3794f629a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: VEP-6TgqK0SOZqREkwBLv005ElR8k-Myn5pm3jD8rCpsXL3Lb4U-SQ== Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:34 UTC	12393	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 6e 6f 74 72 61 6e 73 6c 61 74 65 3e 53 65 63 75 72 69 74 79 20 45 64 75 63 61 74 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 69 72 64 20 70 61 72 74 79 20 6c 69 63 65 6e 73 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 61 70 70 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 62 79 20 76 69 73 69 74 69 6e 67 20 2f 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title notranslate>Security Education Platform</title> ... Third party licenses used in this app can be viewed by visiting /l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49728	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	585	OUT	GET /api/companymanagement/api/companyLoginProfile/hillsclerk HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:34 UTC	422	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 13:33:34 GMT Content-Type: application/vnd.api+json;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-cache, no-store Pragma: no-cache Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:34 UTC	588	IN	Data Raw: 32 34 35 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 4c 6f 67 69 6e 50 72 6f 66 69 6c 65 22 2c 22 69 64 22 3a 22 68 69 6c 6c 73 63 6c 65 72 6b 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 65 67 61 6c 4e 61 6d 65 22 3a 22 48 69 6c 6c 73 62 6f 72 6f 75 67 68 20 43 6f 75 6e 74 79 20 43 6c 65 72 6b 20 6f 66 20 54 68 65 20 43 6f 75 72 74 73 22 2c 22 70 72 6f 76 69 73 69 6f 6e 69 6e 67 54 79 70 65 22 3a 22 43 54 53 22 2c 22 6e 61 6d 65 22 3a 22 48 69 6c 6c 73 62 6f 72 6f 75 67 68 20 43 6f 75 6e 74 79 20 43 6c 65 72 6b 20 6f 66 20 54 68 65 20 43 6f 75 72 74 73 22 2c 22 65 6e 64 55 73 65 72 4c 6f 67 6f 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 77 65 62 2e 73 65 63 75 72 69 74 79 65 64 75 63 61 Data Ascii: 245{"data":{"type":"companyLoginProfile","id":"hillsclerk","attributes":{"legalName":"Hillsborough County Clerk of The Courts","provisioningType":"CTS","name":"Hillsborough County Clerk of The Courts","endUserLogoUrl":"https://platform-web.securityeduca
2024-03-28 13:33:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49727	104.18.4.175	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	614	OUT	GET /api/lib/xG6eDWKawYmvs/tu?v=474 HTTP/1.1 Host: global.localizecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hillsclerk.securityeducation.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:35 UTC	709	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 496 Connection: close access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains; preload Cache-Control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache etag: W/"1f0-F/twQPFPPi8JzHJ/2v3zb8QRsbc" x-cache: Miss from cloudfront via: 1.1 6f35734da951dcb591462352ba037614.cloudfront.net (CloudFront) x-amz-cf-pop: IAD66-C1 x-amz-cf-id: _inxcvmTKCI58787vms1YKy495hoiBTcgJWDS4cWHnIyrfglQE5tCg== CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b7fe25af6105f5-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:33:35 UTC	496	IN	Data Raw: 7b 22 6c 22 3a 7b 22 6a 61 22 3a 22 e6 97 a5 e6 9c ac e8 aa 9e 22 2c 22 66 72 22 3a 22 46 72 61 6e c3 a7 61 69 73 22 2c 22 65 73 22 3a 22 45 73 70 61 c3 b1 6f 6c 22 2c 22 64 65 22 3a 22 44 65 75 74 73 63 68 22 2c 22 65 6e 22 3a 22 45 6e 67 6c 69 73 68 22 7d 2c 22 65 6c 22 3a 5b 22 64 65 22 2c 22 65 6e 22 2c 22 65 73 22 2c 22 66 72 22 2c 22 6a 61 22 5d 2c 22 77 6c 22 3a 5b 5d 2c 22 77 22 3a 74 72 75 65 2c 22 73 22 3a 7b 22 74 68 65 6d 65 22 3a 22 64 61 72 6b 22 2c 22 66 6f 6e 74 22 3a 22 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 22 2c 22 68 65 61 64 65 72 22 3a 22 72 67 62 28 30 2c 30 2c 30 29 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 69 67 68 74 22 2c 22 Data Ascii: {"l":{"ja":"","fr":"Franais","es":"Espaol","de":"Deutsch","en":"English"},"el":["de","en","es","fr","ja"],"wl":[],"w":true,"s":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","position":"right","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49725	104.18.4.175	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	641	OUT	GET /api/lib/xG6eDWKawYmvs/tl.gif?l=en&c=6828485 HTTP/1.1 Host: global.localizecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:35 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Length: 43 Connection: close access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains; preload Cache-Control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache x-cache: Miss from cloudfront via: 1.1 b940a336a13496ed7f3754168211e15a.cloudfront.net (CloudFront) x-amz-cf-pop: IAD66-C1 x-amz-cf-id: Am-PEjo7vUogeclgihsFTx5ISB-9Kn6lgZYo6JahJqKsRpDsiBqGxA== CF-Cache-Status: MISS Last-Modified: Thu, 28 Mar 2024 13:33:35 GMT Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b7fe25ad6b8017-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:33:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49726	104.18.4.175	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:34 UTC	616	OUT	GET /api/lib/xG6eDWKawYmvs/g?v=0&l=en HTTP/1.1 Host: global.localizecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hillsclerk.securityeducation.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:35 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains; preload Cache-Control: public, max-age=172800 vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 cde8060bf7a12c2736a86c5f19473b60.cloudfront.net (CloudFront) x-amz-cf-pop: IAD66-C1 x-amz-cf-id: AYMQD7TIX-nY3GRH8ZkP5FcEwNtCZDaspZpgKxzoh2-c37sZ-vAMwg== CF-Cache-Status: MISS Last-Modified: Thu, 28 Mar 2024 13:33:35 GMT Expires: Sat, 30 Mar 2024 13:33:35 GMT X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b7fe25af4913bc-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:33:35 UTC	655	IN	Data Raw: 37 63 65 38 0d 0a 5b 7b 22 5f 69 64 22 3a 22 70 72 6f 6a 65 63 74 2d 73 65 74 74 69 6e 67 73 22 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 74 72 61 6e 73 6c 61 74 65 4d 65 74 61 54 61 67 73 22 3a 74 72 75 65 2c 22 74 72 61 6e 73 6c 61 74 65 41 72 69 61 4c 61 62 65 6c 73 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 65 54 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 57 69 64 67 65 74 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 57 69 64 67 65 74 22 3a 7b 22 74 68 65 6d 65 22 3a 22 64 61 72 6b 22 2c 22 66 6f 6e 74 22 3a 22 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 22 2c 22 68 65 61 64 65 72 22 3a 22 72 67 62 28 30 2c 30 2c 30 29 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 22 2c 22 70 6f 73 69 74 Data Ascii: 7ce8[{"_id":"project-settings","settings":{"translateMetaTags":true,"translateAriaLabels":false,"translateTitle":false,"showWidget":true,"customWidget":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","posit
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 6c 6f 63 61 6c 69 7a 65 41 75 64 69 6f 4c 69 6d 69 74 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 50 61 67 65 73 22 3a 5b 5d 2c 22 72 65 67 65 78 50 68 72 61 73 65 73 22 3a 5b 7b 22 70 68 72 61 73 65 22 3a 22 23 54 65 6e 61 6e 74 73 3a 20 3c 76 61 72 20 63 6f 75 6e 74 2d 6f 66 2d 74 65 6e 61 6e 74 73 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 54 65 6e 61 6e 74 73 3a 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 2d 6f 66 2d 74 65 6e 61 6e 74 73 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 54 65 6e 61 6e 74 73 3a 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 70 65 72 63 65 Data Ascii: :false,"localizeAudioLimit":false,"disabledPages":[],"regexPhrases":[{"phrase":"#Tenants: <var count-of-tenants=\"\"></var>","candidate":"#Tenants: ","variables":["<var count-of-tenants=\"\"></var>"],"regex":"^#Tenants: ([\\d ]+)$"},{"phrase":"#<var perce
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 55 73 65 72 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 66 6e 61 6d 65 2d 6c 6e 61 6d 65 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 55 73 65 72 20 28 2e 2b 3f 29 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 64 65 73 74 72 6f 79 65 64 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 67 72 6f 75 70 2d 64 65 6c 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 75 73 65 72 73 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 67 72 6f 75 70 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 67 72 6f 75 70 2d 64 65 6c 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 Data Ascii: ","candidate":"#User ","variables":["<var fname-lname=\"\"></var>"],"regex":"^#User (.+?) successfully destroyed$"},{"phrase":"#<var group-del=\"\"></var> users will be removed from the group","candidate":"#","variables":["<var group-del=\"\"></var>"],"re
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 77 69 6c 6c 20 73 65 65 20 63 68 61 6e 67 65 73 20 74 6f 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 6f 72 20 61 75 74 6f 5c 5c 2d 65 6e 72 6f 6c 6c 6d 65 6e 74 20 74 68 72 65 73 68 6f 6c 64 73 5c 5c 2e 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 43 6c 69 63 6b 73 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 28 5b 5c 5c 64 20 5d 2b 29 20 43 6c 69 63 6b 73 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 20 50 68 69 73 68 41 6c 61 72 6d 20 41 64 64 2d 69 6e 20 56 65 Data Ascii: will see changes to notifications or auto\\-enrollment thresholds\\.$"},{"phrase":"#<var count=\"\"></var> Clicks","candidate":"#","variables":["<var count=\"\"></var>"],"regex":"^#([\\d ]+) Clicks$"},{"phrase":"#<strong ljsid-0=\"\"> PhishAlarm Add-in Ve
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 33 20 43 6c 69 63 6b 73 20 5c 5c 2d 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 32 20 43 6c 69 63 6b 73 20 2d 20 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 32 20 43 6c 69 63 6b 73 20 2d 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 32 20 43 6c 69 63 6b 73 20 5c 5c 2d 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 52 65 70 65 61 74 20 43 6c 69 63 6b 65 72 73 2d 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e Data Ascii: \"></var>"],"regex":"^#3 Clicks \\- ([\\d ]+)$"},{"phrase":"#2 Clicks - <var count=\"\"></var>","candidate":"#2 Clicks - ","variables":["<var count=\"\"></var>"],"regex":"^#2 Clicks \\- ([\\d ]+)$"},{"phrase":"#Repeat Clickers-<var count=\"\"></var>","can
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 70 61 6e 20 6c 6a 73 69 64 2d 31 3d 5c 22 5c 22 3e 3c 2f 73 70 61 6e 3e 20 4d 79 20 46 61 76 6f 72 69 74 65 73 20 28 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 29 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 70 61 6e 20 6c 6a 73 69 64 5c 5c 2d 31 3d 5c 22 5c 22 3e 3c 2f 73 70 61 6e 3e 20 4d 79 20 46 61 76 6f 72 69 74 65 73 20 5c 5c 28 28 5b 5c 5c 64 20 5d 2b 29 5c 5c 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 75 73 65 72 2d 67 72 6f 75 70 2d 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 47 72 6f Data Ascii: ,{"phrase":"#<span ljsid-1=\"\"></span> My Favorites (<var count=\"\"></var>)","candidate":"#","variables":["<var count=\"\"></var>"],"regex":"^#<span ljsid\\-1=\"\"></span> My Favorites \$([\\d ]+)\$$"},{"phrase":"#<var user-group-count=\"\"></var> Gro
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 41 75 74 68 6f 72 3a 20 28 2e 2b 3f 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 54 68 69 73 20 61 73 73 65 73 73 6d 65 6e 74 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 3c 76 61 72 20 63 79 62 65 72 73 74 72 65 6e 67 74 68 2d 6e 75 6d 2d 61 73 73 69 67 6e 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 75 73 65 72 28 73 29 20 68 61 76 65 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 6e 64 20 6d 61 79 20 68 61 76 65 20 73 74 61 72 74 65 64 2e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 54 68 69 73 20 61 73 73 65 73 73 6d 65 6e 74 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 79 62 65 72 73 74 72 65 6e 67 74 68 Data Ascii: "></var>"],"regex":"^#Author: (.+?)$"},{"phrase":"#This assessment is in progress. <var cyberstrength-num-assign=\"\"></var> user(s) have been assigned and may have started.","candidate":"#This assessment is in progress. ","variables":["<var cyberstrength
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 42 75 6c 6b 2c 20 4d 61 6c 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 42 75 6c 6b 2c 20 53 69 6d 75 6c 61 74 65 64 20 54 68 72 65 61 74 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 Data Ascii: r>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Bulk, Malicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Bulk, Simulated Threat... +<var emailtype-num=\"\"></var> more","candidate":"#","variables":["<va
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 53 70 61 6d 2c 20 53 75 73 70 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 53 70 61 6d 2c 20 4d 61 6c 69 63 69 6f 75 73 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 Data Ascii: ],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Spam, Suspicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Spam, Malicious... +<var emailtype-num=\"\"></var>more","candidate":"#","variables":["<var emailtyp
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 55 6e 6c 69 6b 65 6c 79 2c 20 4d 61 6c 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 55 6e 6c 69 6b 65 6c 79 2c 20 53 69 6d 75 6c 61 74 65 64 20 54 68 72 65 61 74 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 Data Ascii: type-num=\"\"></var>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Unlikely, Malicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Unlikely, Simulated Threat... +<var emailtype-num=\"\"></var> more","candid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49730	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	540	OUT	GET /favicon.ico HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:35 UTC	874	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12393 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "6b9e2a5ae6ec6fb2100430da2c329e4c" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 f2c051917a765f1d1a1cd2ce1622adb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 7bGRhXvCkqqWdHrLXoMV192iDniHTodvQ9hBoI7ugujma7P40OlJGw== Age: 1 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:35 UTC	12393	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 6e 6f 74 72 61 6e 73 6c 61 74 65 3e 53 65 63 75 72 69 74 79 20 45 64 75 63 61 74 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 69 72 64 20 70 61 72 74 79 20 6c 69 63 65 6e 73 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 61 70 70 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 62 79 20 76 69 73 69 74 69 6e 67 20 2f 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title notranslate>Security Education Platform</title> ... Third party licenses used in this app can be viewed by visiting /l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49731	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	958	OUT	GET /api/auth/saml/login?targetUrl=https://hillsclerk.securityeducation.com/ HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:35 UTC	1647	IN	HTTP/1.1 302 Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Length: 0 Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache Expires: -1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-XSS-Protection: 0 Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Location: https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJiojOd1jfUeDajdlFccNyxPqlGeSLC6li7jqTz%2BinU7RxxOFvpTbkCvzMOrzjGjcFhNw1qPKDeN4sepxXNEcsLE57vs5KOnicL%2FQfUg%3D%3D Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49729	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 13:33:35 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=235774 Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 13:33:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49732	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	824	OUT	GET /wombat-style-guide/images/logo.png HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hillsclerk.securityeducation.com/sso-auth Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:35 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: image/png Content-Length: 5850 Connection: close Server: nginx Last-Modified: Wed, 06 Mar 2024 14:38:43 GMT ETag: "f667124959df088360a541a25ae7dda8" X-Cache: Miss from cloudfront Via: 1.1 7c4bbd97f5be908e33f403c3794f629a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: C9YPfpRfBgut77ieA5xXwvC0WHBVkGT7Xg7E1nLrv_JbQ64DToTylg== Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:35 UTC	5850	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 47 08 06 00 00 00 42 be 08 93 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 05 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRGBpHYsgR iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49733	104.18.4.175	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	619	OUT	GET /api/lib/xG6eDWKawYmvs/g?v=8209&l=en HTTP/1.1 Host: global.localizecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hillsclerk.securityeducation.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:35 UTC	715	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains; preload Cache-Control: public, max-age=5184000 vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 0c9c133650294ca2485db2f5e74b2d10.cloudfront.net (CloudFront) x-amz-cf-pop: IAD66-C1 x-amz-cf-id: wqxYYZozIo_ecVw6405hpfQIjahXZ1gHsq8z777_5hPBTvwvp65LIw== CF-Cache-Status: MISS Last-Modified: Thu, 28 Mar 2024 13:33:35 GMT Expires: Mon, 27 May 2024 13:33:35 GMT X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b7fe2abd8257b5-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:33:35 UTC	654	IN	Data Raw: 37 63 65 37 0d 0a 5b 7b 22 5f 69 64 22 3a 22 70 72 6f 6a 65 63 74 2d 73 65 74 74 69 6e 67 73 22 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 74 72 61 6e 73 6c 61 74 65 4d 65 74 61 54 61 67 73 22 3a 74 72 75 65 2c 22 74 72 61 6e 73 6c 61 74 65 41 72 69 61 4c 61 62 65 6c 73 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 65 54 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 57 69 64 67 65 74 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 57 69 64 67 65 74 22 3a 7b 22 74 68 65 6d 65 22 3a 22 64 61 72 6b 22 2c 22 66 6f 6e 74 22 3a 22 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 22 2c 22 68 65 61 64 65 72 22 3a 22 72 67 62 28 30 2c 30 2c 30 29 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 22 2c 22 70 6f 73 69 74 Data Ascii: 7ce7[{"_id":"project-settings","settings":{"translateMetaTags":true,"translateAriaLabels":false,"translateTitle":false,"showWidget":true,"customWidget":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","posit
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 6c 6f 63 61 6c 69 7a 65 41 75 64 69 6f 4c 69 6d 69 74 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 50 61 67 65 73 22 3a 5b 5d 2c 22 72 65 67 65 78 50 68 72 61 73 65 73 22 3a 5b 7b 22 70 68 72 61 73 65 22 3a 22 23 54 65 6e 61 6e 74 73 3a 20 3c 76 61 72 20 63 6f 75 6e 74 2d 6f 66 2d 74 65 6e 61 6e 74 73 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 54 65 6e 61 6e 74 73 3a 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 2d 6f 66 2d 74 65 6e 61 6e 74 73 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 54 65 6e 61 6e 74 73 3a 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 70 65 72 63 Data Ascii: ":false,"localizeAudioLimit":false,"disabledPages":[],"regexPhrases":[{"phrase":"#Tenants: <var count-of-tenants=\"\"></var>","candidate":"#Tenants: ","variables":["<var count-of-tenants=\"\"></var>"],"regex":"^#Tenants: ([\\d ]+)$"},{"phrase":"#<var perc
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 64 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 55 73 65 72 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 66 6e 61 6d 65 2d 6c 6e 61 6d 65 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 55 73 65 72 20 28 2e 2b 3f 29 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 64 65 73 74 72 6f 79 65 64 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 67 72 6f 75 70 2d 64 65 6c 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 75 73 65 72 73 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 67 72 6f 75 70 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 67 72 6f 75 70 2d 64 65 6c 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 Data Ascii: d","candidate":"#User ","variables":["<var fname-lname=\"\"></var>"],"regex":"^#User (.+?) successfully destroyed$"},{"phrase":"#<var group-del=\"\"></var> users will be removed from the group","candidate":"#","variables":["<var group-del=\"\"></var>"],"r
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 20 77 69 6c 6c 20 73 65 65 20 63 68 61 6e 67 65 73 20 74 6f 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 6f 72 20 61 75 74 6f 5c 5c 2d 65 6e 72 6f 6c 6c 6d 65 6e 74 20 74 68 72 65 73 68 6f 6c 64 73 5c 5c 2e 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 43 6c 69 63 6b 73 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 28 5b 5c 5c 64 20 5d 2b 29 20 43 6c 69 63 6b 73 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 20 50 68 69 73 68 41 6c 61 72 6d 20 41 64 64 2d 69 6e 20 56 Data Ascii: will see changes to notifications or auto\\-enrollment thresholds\\.$"},{"phrase":"#<var count=\"\"></var> Clicks","candidate":"#","variables":["<var count=\"\"></var>"],"regex":"^#([\\d ]+) Clicks$"},{"phrase":"#<strong ljsid-0=\"\"> PhishAlarm Add-in V
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 33 20 43 6c 69 63 6b 73 20 5c 5c 2d 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 32 20 43 6c 69 63 6b 73 20 2d 20 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 32 20 43 6c 69 63 6b 73 20 2d 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 32 20 43 6c 69 63 6b 73 20 5c 5c 2d 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 52 65 70 65 61 74 20 43 6c 69 63 6b 65 72 73 2d 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 Data Ascii: "\"></var>"],"regex":"^#3 Clicks \\- ([\\d ]+)$"},{"phrase":"#2 Clicks - <var count=\"\"></var>","candidate":"#2 Clicks - ","variables":["<var count=\"\"></var>"],"regex":"^#2 Clicks \\- ([\\d ]+)$"},{"phrase":"#Repeat Clickers-<var count=\"\"></var>","ca
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 70 61 6e 20 6c 6a 73 69 64 2d 31 3d 5c 22 5c 22 3e 3c 2f 73 70 61 6e 3e 20 4d 79 20 46 61 76 6f 72 69 74 65 73 20 28 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 29 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 70 61 6e 20 6c 6a 73 69 64 5c 5c 2d 31 3d 5c 22 5c 22 3e 3c 2f 73 70 61 6e 3e 20 4d 79 20 46 61 76 6f 72 69 74 65 73 20 5c 5c 28 28 5b 5c 5c 64 20 5d 2b 29 5c 5c 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 75 73 65 72 2d 67 72 6f 75 70 2d 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 47 72 Data Ascii: },{"phrase":"#<span ljsid-1=\"\"></span> My Favorites (<var count=\"\"></var>)","candidate":"#","variables":["<var count=\"\"></var>"],"regex":"^#<span ljsid\\-1=\"\"></span> My Favorites \$([\\d ]+)\$$"},{"phrase":"#<var user-group-count=\"\"></var> Gr
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 41 75 74 68 6f 72 3a 20 28 2e 2b 3f 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 54 68 69 73 20 61 73 73 65 73 73 6d 65 6e 74 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 3c 76 61 72 20 63 79 62 65 72 73 74 72 65 6e 67 74 68 2d 6e 75 6d 2d 61 73 73 69 67 6e 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 75 73 65 72 28 73 29 20 68 61 76 65 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 6e 64 20 6d 61 79 20 68 61 76 65 20 73 74 61 72 74 65 64 2e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 54 68 69 73 20 61 73 73 65 73 73 6d 65 6e 74 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 79 62 65 72 73 74 72 65 6e 67 74 Data Ascii: \"></var>"],"regex":"^#Author: (.+?)$"},{"phrase":"#This assessment is in progress. <var cyberstrength-num-assign=\"\"></var> user(s) have been assigned and may have started.","candidate":"#This assessment is in progress. ","variables":["<var cyberstrengt
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 42 75 6c 6b 2c 20 4d 61 6c 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 42 75 6c 6b 2c 20 53 69 6d 75 6c 61 74 65 64 20 54 68 72 65 61 74 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 Data Ascii: ar>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Bulk, Malicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Bulk, Simulated Threat... +<var emailtype-num=\"\"></var> more","candidate":"#","variables":["<v
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 53 70 61 6d 2c 20 53 75 73 70 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 53 70 61 6d 2c 20 4d 61 6c 69 63 69 6f 75 73 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 65 6d 61 69 6c 74 79 Data Ascii: "],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Spam, Suspicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Spam, Malicious... +<var emailtype-num=\"\"></var>more","candidate":"#","variables":["<var emailty
2024-03-28 13:33:35 UTC	1369	IN	Data Raw: 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 55 6e 6c 69 6b 65 6c 79 2c 20 4d 61 6c 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 55 6e 6c 69 6b 65 6c 79 2c 20 53 69 6d 75 6c 61 74 65 64 20 54 68 72 65 61 74 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 6d 6f 72 65 22 2c 22 63 61 6e 64 69 Data Ascii: ltype-num=\"\"></var>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Unlikely, Malicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Unlikely, Simulated Threat... +<var emailtype-num=\"\"></var> more","candi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49734	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	880	OUT	GET /wombat-style-guide/fonts/roboto-latin-400.woff2 HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hillsclerk.securityeducation.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:35 UTC	934	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: binary/octet-stream Content-Length: 15344 Connection: close Server: nginx Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 06 Mar 2024 14:38:43 GMT ETag: "5d4aeb4e5f5ef754e307d7ffaef688bd" X-Cache: Miss from cloudfront Via: 1.1 8fc9659fc06389e49927f68638e9bc94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: W83zlC2oosVgxJWKoLu6dxNC8lyZNyFDiPK55FkQF-HyWDrj66tFWg== Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:35 UTC	15344	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3b f0 00 12 00 00 00 00 8b 48 00 00 3b 8d 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 99 40 1c 83 4a 06 60 00 86 4c 08 54 09 83 3c 11 0c 0a 81 d6 78 81 bf 2e 0b 83 5e 00 12 81 78 01 36 02 24 03 87 36 04 20 05 82 74 07 20 0c 82 49 1b 68 7c 15 6c 9b 86 b3 db 41 00 a9 bf ec 62 36 a2 82 8d 03 12 0c fb d2 a2 28 db a4 a7 c9 fe ff 96 40 65 c8 ba 5d d3 0e e0 2a 3a 0a 8d 2d 97 30 91 cb 72 a8 29 cb c5 68 53 ac 93 68 ef d5 84 e6 4e 86 29 ab 44 d6 8d d2 bd a2 b8 b0 90 d7 a6 84 fa 62 d1 5d fb f2 f0 f0 f9 97 ee 5e 17 ce b3 74 3f f1 6d 7b ea f0 10 1e 22 38 34 86 0f cd 39 cb 9d bd 0b af e2 09 63 dd 08 ed 3f dd 0c 72 33 6f 9f ee 08 8d 7d 92 cb c3 53 5d 8f 7f 2e aa 7a 62 4f 00 ae e2 2f 7a 05 d0 7b e3 f5 10 Data Ascii: wOF2;H;d@J`LT<x.^x6$6 t Ih\|lAb6(@e]*:-0r)hShN)Db]^t?m{"849c?r3o}S].zbO/z{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49735	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	880	OUT	GET /wombat-style-guide/fonts/roboto-latin-500.woff2 HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hillsclerk.securityeducation.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:35 UTC	934	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: binary/octet-stream Content-Length: 15552 Connection: close Server: nginx Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 06 Mar 2024 14:38:43 GMT ETag: "285467176f7fe6bb6a9c6873b3dad2cc" X-Cache: Miss from cloudfront Via: 1.1 ed8e6c4476f2632eef2c7ce856161af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: KC_Egw-Y4G7IWL7fITfERH2LEswGzkVbZBEKpMXNrbQGDzkqTPLCog== Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:35 UTC	7659	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3c c0 00 12 00 00 00 00 8b e4 00 00 3c 5a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 99 7a 1c 83 4a 06 60 00 86 4c 08 5c 09 83 3c 11 0c 0a 81 d7 3c 81 c0 06 0b 83 5e 00 12 81 78 01 36 02 24 03 87 36 04 20 05 83 00 07 20 0c 82 53 1b 18 7d 25 d3 cd 11 cf ed 00 a6 7c ea 0d 1c 85 78 1c 80 5b 6a 18 45 cd a2 9c 92 64 ff ff 2d 41 b3 01 83 5d 3d 73 6a 66 24 58 7f 6f ca 35 b1 8d d2 da 0d ad 56 ec e4 a2 9f de dd a3 69 3f 7d d6 5c ed 16 de b6 3b e5 ef fb 56 9d b2 85 a0 1a 8c 35 ed af d5 6d 4f 3d 2c 5b c5 a1 42 ab ca 64 27 da eb af 3d 9a 8b 4d c7 2e ea 8e 71 8f e2 ed 38 ea f2 55 27 9f d9 4e fd f7 47 01 f9 d0 5b a0 88 38 06 14 88 12 4a 70 0c 04 78 50 c6 8e d0 d8 27 b9 3f cf cf ed cf 7d ef 2d 92 31 46 Data Ascii: wOF2<<ZdzJ`L\<<^x6$6 S}%\|x[jEd-A]=sjf$Xo5Vi?}\;V5mO=,[Bd'=M.q8U'NG[8JpxP'?}-1F
2024-03-28 13:33:35 UTC	7893	IN	Data Raw: a0 50 a2 47 85 6d b3 c3 57 44 17 e7 ea 9b 8d 58 bb 44 f2 0d e2 0f ad 7d 36 52 bf 8c 69 d0 a5 c3 15 d0 df 1e 48 8d 6b f5 6f b7 85 34 e8 c4 ab 81 de 81 7b 42 0e 74 bb e9 c5 e3 9e 7a 32 b0 f2 38 65 1f ee 80 ad ea de ff 42 57 43 f7 d9 aa 62 0f ec b5 f9 ea fc f0 31 3e b6 ef 49 32 78 5b fb d3 e5 fb 24 12 42 c9 f2 14 e9 f0 88 b6 14 2c 66 10 36 14 54 a6 ba aa 3c 72 ad 10 45 f6 21 bb 4b b9 ae 3c bf 5e 37 f8 e2 05 76 ae ed f1 1d 0d b5 e4 06 5d c9 1f 6f ba 4f 3a 35 38 bf 5c a1 fd 7b 52 57 97 28 5b 0d d0 af 56 2b 28 ad dd d1 13 ff db 38 f8 97 6d bb ed db 79 7c f4 8c 9e 5a 72 bb 66 f3 7a d7 c4 f3 1b 75 43 cf 6f 5f 6a 59 6f d3 d4 b5 18 96 17 f6 3e 49 c3 45 e9 16 24 20 4e 9c 45 9a fb 10 07 eb db d7 72 70 1c 68 46 3c e2 e4 39 a4 4d 30 11 5e 2b 58 04 2d 17 03 81 cb 74 f5 Data Ascii: PGmWDXD}6RiHko4{Btz28eBWCb1>I2x[$B,f6T<rE!K<^7v]oO:58\{RW([V+(8my\|ZrfzuCo_jYo>IE$ NErphF<9M0^+X-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49740	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	568	OUT	GET /api/auth/jsonapi/authDetails/hillsclerk HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:36 UTC	564	IN	HTTP/1.1 200 Date: Thu, 28 Mar 2024 13:33:36 GMT Content-Type: application/vnd.api+json;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache Expires: -1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers X-Content-Type-Options: nosniff X-XSS-Protection: 0 Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:36 UTC	183	IN	Data Raw: 62 31 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 61 75 74 68 44 65 74 61 69 6c 73 22 2c 22 69 64 22 3a 22 68 69 6c 6c 73 63 6c 65 72 6b 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 73 73 6f 56 65 72 73 69 6f 6e 22 3a 22 76 32 22 2c 22 6d 75 6c 74 69 49 64 70 22 3a 66 61 6c 73 65 2c 22 61 75 74 68 54 79 70 65 22 3a 36 7d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 22 2f 6a 73 6f 6e 61 70 69 2f 61 75 74 68 44 65 74 61 69 6c 73 2f 68 69 6c 6c 73 63 6c 65 72 6b 22 7d 7d 2c 22 69 6e 63 6c 75 64 65 64 22 3a 5b 5d 7d 0d 0a Data Ascii: b1{"data":{"type":"authDetails","id":"hillsclerk","attributes":{"ssoVersion":"v2","multiIdp":false,"authType":6},"links":{"self":"/jsonapi/authDetails/hillsclerk"}},"included":[]}
2024-03-28 13:33:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49737	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	546	OUT	GET /favicon-32x32.png HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:36 UTC	874	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12393 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "6b9e2a5ae6ec6fb2100430da2c329e4c" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 f9efe5e72b7e5cc47bf34a0b0debcbe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 0HX_ntKAwStjbWzeERm-XBQUCLWflcfuQjttrATLxyMyltKULlh26w== Age: 1 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:36 UTC	12393	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 6e 6f 74 72 61 6e 73 6c 61 74 65 3e 53 65 63 75 72 69 74 79 20 45 64 75 63 61 74 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 69 72 64 20 70 61 72 74 79 20 6c 69 63 65 6e 73 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 61 70 70 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 62 79 20 76 69 73 69 74 69 6e 67 20 2f 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title notranslate>Security Education Platform</title> ... Third party licenses used in this app can be viewed by visiting /l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49739	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	562	OUT	GET /images/android-chrome-144x144.png HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:36 UTC	874	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12393 Connection: close Server: nginx Last-Modified: Wed, 20 Mar 2024 14:50:48 GMT ETag: "6b9e2a5ae6ec6fb2100430da2c329e4c" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 041a4887d523cabe8177e269cc358162.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: w9fI2LSPdd9c4iE17pH80_kDSJutVLIRMG6KB5Fx4ItnJyaiMCsk4w== Age: 2 Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:36 UTC	7734	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 6e 6f 74 72 61 6e 73 6c 61 74 65 3e 53 65 63 75 72 69 74 79 20 45 64 75 63 61 74 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 69 72 64 20 70 61 72 74 79 20 6c 69 63 65 6e 73 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 61 70 70 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 62 79 20 76 69 73 69 74 69 6e 67 20 2f 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <title notranslate>Security Education Platform</title> ... Third party licenses used in this app can be viewed by visiting /l
2024-03-28 13:33:36 UTC	4659	IN	Data Raw: 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 66 66 66 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2d 6e 61 6d 65 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 50 72 6f 6f 66 70 6f 69 6e 74 20 53 65 63 75 72 69 74 79 20 41 77 61 72 65 6e 65 73 73 Data Ascii: on-32x32.png" /> <link rel="manifest" href="/manifest.json" /> <meta name="mobile-web-app-capable" content="yes" /> <meta name="theme-color" content="#fff" /> <meta name="application-name" content="Proofpoint Security Awareness

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49738	18.211.106.230	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:35 UTC	563	OUT	GET /wombat-style-guide/images/logo.png HTTP/1.1 Host: hillsclerk.securityeducation.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _splunk_rum_sid=%7B%22id%22%3A%2246314e6b64621c2916795bf573ac0095%22%2C%22startTime%22%3A1711632812383%7D; platform-auth-session=%7B%22authenticated%22%3A%7B%7D%7D
2024-03-28 13:33:36 UTC	825	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:35 GMT Content-Type: image/png Content-Length: 5850 Connection: close Server: nginx Last-Modified: Wed, 06 Mar 2024 14:38:43 GMT ETag: "f667124959df088360a541a25ae7dda8" X-Cache: Hit from cloudfront Via: 1.1 417c242b19212928b079740e6dd8f54c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 4X74f6as614fW7Hq5XcNSQqTFZSPIMHEMOL0KKkrpK-Xqkv8FyqJow== Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; font-src * data: 'unsafe-inline'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report; Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 13:33:36 UTC	3672	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 47 08 06 00 00 00 42 be 08 93 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 05 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRGBpHYsgR iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2024-03-28 13:33:36 UTC	2178	IN	Data Raw: d4 f7 ba e1 0a d7 3f f1 ba 15 0e a7 b3 c7 41 fd 54 ca 24 a8 9f 80 09 57 b8 fe 89 d7 1c 14 a0 eb b6 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 a2 8b 4a 00 7a 01 18 03 e5 28 65 10 d4 cf e4 17 16 34 65 fe 8e d8 43 f2 6b 41 b9 19 e8 84 dd 5d a8 05 b8 71 28 94 b7 e3 76 00 2e 31 ae 76 50 fe 48 aa a5 21 77 3f ca b8 1c c0 01 31 d3 1c 0b f5 0b ee 27 65 bb 90 0d a0 7c fc d9 7e 1c ae 5d 21 69 88 99 c8 ef 63 bd 2d 94 0b ae 9b b2 24 5f fa 03 e9 1b fa 7d 6c b8 fc 7f c8 eb b2 34 e4 56 10 e9 e3 0e 8a 77 33 fe cb d9 2c e0 21 48 3a 53 99 04 e5 9b a1 1a 92 4e 4c 76 40 b9 da fa bb a1 fd 7f 1c cb b0 f6 fd 3d 31 4b b3 e7 af a2 41 3e 09 fd 3e 36 4e 00 f0 12 94 ef c6 97 45 1d be 00 e5 38 74 32 94 87 a7 54 b1 3f 94 ef 92 be 48 3a 0d Data Ascii: ?AT$WJz(e4eCkA]q(v.1vPH!w?1'e\|~]!ic-$_}l4Vw3,!H:SNLv@=1KA>>6NE8t2T?H:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49744	104.18.5.175	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:36 UTC	376	OUT	GET /api/lib/xG6eDWKawYmvs/tu?v=474 HTTP/1.1 Host: global.localizecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:36 UTC	709	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 496 Connection: close access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains; preload Cache-Control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache etag: W/"1f0-F/twQPFPPi8JzHJ/2v3zb8QRsbc" x-cache: Miss from cloudfront via: 1.1 6ff4697c5089876d94430beacc9a4d5e.cloudfront.net (CloudFront) x-amz-cf-pop: IAD66-C1 x-amz-cf-id: GuC7iV-_pDDyHQRM-u1TQj8XS4WwXu_y88Nxd7guw3sv4GbXV38kOQ== CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b7fe2ddafb593e-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:33:36 UTC	496	IN	Data Raw: 7b 22 6c 22 3a 7b 22 6a 61 22 3a 22 e6 97 a5 e6 9c ac e8 aa 9e 22 2c 22 66 72 22 3a 22 46 72 61 6e c3 a7 61 69 73 22 2c 22 65 73 22 3a 22 45 73 70 61 c3 b1 6f 6c 22 2c 22 64 65 22 3a 22 44 65 75 74 73 63 68 22 2c 22 65 6e 22 3a 22 45 6e 67 6c 69 73 68 22 7d 2c 22 65 6c 22 3a 5b 22 64 65 22 2c 22 65 6e 22 2c 22 65 73 22 2c 22 66 72 22 2c 22 6a 61 22 5d 2c 22 77 6c 22 3a 5b 5d 2c 22 77 22 3a 74 72 75 65 2c 22 73 22 3a 7b 22 74 68 65 6d 65 22 3a 22 64 61 72 6b 22 2c 22 66 6f 6e 74 22 3a 22 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 22 2c 22 68 65 61 64 65 72 22 3a 22 72 67 62 28 30 2c 30 2c 30 29 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 69 67 68 74 22 2c 22 Data Ascii: {"l":{"ja":"","fr":"Franais","es":"Espaol","de":"Deutsch","en":"English"},"el":["de","en","es","fr","ja"],"wl":[],"w":true,"s":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","position":"right","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49742	104.18.5.175	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:36 UTC	389	OUT	GET /api/lib/xG6eDWKawYmvs/tl.gif?l=en&c=6828485 HTTP/1.1 Host: global.localizecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:36 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:36 GMT Content-Length: 43 Connection: close access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains; preload Cache-Control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache x-cache: Miss from cloudfront via: 1.1 b940a336a13496ed7f3754168211e15a.cloudfront.net (CloudFront) x-amz-cf-pop: IAD66-C1 x-amz-cf-id: n4XmqSDqMVvhYTRKP_eLggEwymrZnB06wT0LVDpE67ckgFK9kN-PvA== CF-Cache-Status: MISS Last-Modified: Thu, 28 Mar 2024 13:33:36 GMT Accept-Ranges: bytes X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b7fe2dfc7905c4-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:33:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49743	104.18.5.175	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:36 UTC	378	OUT	GET /api/lib/xG6eDWKawYmvs/g?v=0&l=en HTTP/1.1 Host: global.localizecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:36 UTC	725	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:36 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains; preload Cache-Control: public, max-age=172800 vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 d19e64e406af1f88f7f96d9dcb2393ca.cloudfront.net (CloudFront) x-amz-cf-pop: IAD89-C2 x-amz-cf-id: IVL_oxDhmEy1H-sHn8iGglv0olaiwcJNUr28gt-DTzSBeG-6epvAhg== Age: 37259 CF-Cache-Status: HIT Last-Modified: Thu, 28 Mar 2024 03:12:37 GMT Expires: Sat, 30 Mar 2024 13:33:36 GMT X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b7fe2e0d2d0648-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:33:36 UTC	644	IN	Data Raw: 37 63 64 64 0d 0a 5b 7b 22 5f 69 64 22 3a 22 70 72 6f 6a 65 63 74 2d 73 65 74 74 69 6e 67 73 22 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 74 72 61 6e 73 6c 61 74 65 4d 65 74 61 54 61 67 73 22 3a 74 72 75 65 2c 22 74 72 61 6e 73 6c 61 74 65 41 72 69 61 4c 61 62 65 6c 73 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 65 54 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 57 69 64 67 65 74 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 57 69 64 67 65 74 22 3a 7b 22 74 68 65 6d 65 22 3a 22 64 61 72 6b 22 2c 22 66 6f 6e 74 22 3a 22 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 22 2c 22 68 65 61 64 65 72 22 3a 22 72 67 62 28 30 2c 30 2c 30 29 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 22 2c 22 70 6f 73 69 74 Data Ascii: 7cdd[{"_id":"project-settings","settings":{"translateMetaTags":true,"translateAriaLabels":false,"translateTitle":false,"showWidget":true,"customWidget":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","posit
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 61 6c 69 7a 65 41 75 64 69 6f 22 3a 66 61 6c 73 65 2c 22 6c 6f 63 61 6c 69 7a 65 41 75 64 69 6f 4c 69 6d 69 74 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 50 61 67 65 73 22 3a 5b 5d 2c 22 72 65 67 65 78 50 68 72 61 73 65 73 22 3a 5b 7b 22 70 68 72 61 73 65 22 3a 22 23 54 65 6e 61 6e 74 73 3a 20 3c 76 61 72 20 63 6f 75 6e 74 2d 6f 66 2d 74 65 6e 61 6e 74 73 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 54 65 6e 61 6e 74 73 3a 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 2d 6f 66 2d 74 65 6e 61 6e 74 73 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 54 65 6e 61 6e 74 73 3a 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 Data Ascii: alizeAudio":false,"localizeAudioLimit":false,"disabledPages":[],"regexPhrases":[{"phrase":"#Tenants: <var count-of-tenants=\"\"></var>","candidate":"#Tenants: ","variables":["<var count-of-tenants=\"\"></var>"],"regex":"^#Tenants: ([\\d ]+)$"},{"phrase":"
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 79 20 64 65 73 74 72 6f 79 65 64 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 55 73 65 72 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 66 6e 61 6d 65 2d 6c 6e 61 6d 65 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 55 73 65 72 20 28 2e 2b 3f 29 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 64 65 73 74 72 6f 79 65 64 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 67 72 6f 75 70 2d 64 65 6c 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 75 73 65 72 73 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 67 72 6f 75 70 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 67 72 6f 75 70 2d 64 65 6c 3d 5c 22 5c 22 3e 3c Data Ascii: y destroyed","candidate":"#User ","variables":["<var fname-lname=\"\"></var>"],"regex":"^#User (.+?) successfully destroyed$"},{"phrase":"#<var group-del=\"\"></var> users will be removed from the group","candidate":"#","variables":["<var group-del=\"\"><
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 61 73 73 69 67 6e 6d 65 6e 74 20 77 69 6c 6c 20 73 65 65 20 63 68 61 6e 67 65 73 20 74 6f 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 6f 72 20 61 75 74 6f 5c 5c 2d 65 6e 72 6f 6c 6c 6d 65 6e 74 20 74 68 72 65 73 68 6f 6c 64 73 5c 5c 2e 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 43 6c 69 63 6b 73 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 28 5b 5c 5c 64 20 5d 2b 29 20 43 6c 69 63 6b 73 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 20 50 68 69 73 68 41 6c 61 72 Data Ascii: assignment will see changes to notifications or auto\\-enrollment thresholds\\.$"},{"phrase":"#<var count=\"\"></var> Clicks","candidate":"#","variables":["<var count=\"\"></var>"],"regex":"^#([\\d ]+) Clicks$"},{"phrase":"#<strong ljsid-0=\"\"> PhishAlar
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 33 20 43 6c 69 63 6b 73 20 5c 5c 2d 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 32 20 43 6c 69 63 6b 73 20 2d 20 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 32 20 43 6c 69 63 6b 73 20 2d 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 32 20 43 6c 69 63 6b 73 20 5c 5c 2d 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 52 65 70 65 61 74 20 43 6c 69 63 6b 65 72 73 2d 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c Data Ascii: ar count=\"\"></var>"],"regex":"^#3 Clicks \\- ([\\d ]+)$"},{"phrase":"#2 Clicks - <var count=\"\"></var>","candidate":"#2 Clicks - ","variables":["<var count=\"\"></var>"],"regex":"^#2 Clicks \\- ([\\d ]+)$"},{"phrase":"#Repeat Clickers-<var count=\"\"><
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 65 64 20 55 73 65 72 73 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 70 61 6e 20 6c 6a 73 69 64 2d 31 3d 5c 22 5c 22 3e 3c 2f 73 70 61 6e 3e 20 4d 79 20 46 61 76 6f 72 69 74 65 73 20 28 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 29 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 70 61 6e 20 6c 6a 73 69 64 5c 5c 2d 31 3d 5c 22 5c 22 3e 3c 2f 73 70 61 6e 3e 20 4d 79 20 46 61 76 6f 72 69 74 65 73 20 5c 5c 28 28 5b 5c 5c 64 20 5d 2b 29 5c 5c 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 75 73 65 72 2d 67 72 6f 75 70 2d 63 6f 75 6e 74 3d 5c 22 5c 22 Data Ascii: ed Users$"},{"phrase":"#<span ljsid-1=\"\"></span> My Favorites (<var count=\"\"></var>)","candidate":"#","variables":["<var count=\"\"></var>"],"regex":"^#<span ljsid\\-1=\"\"></span> My Favorites \$([\\d ]+)\$$"},{"phrase":"#<var user-group-count=\"\"
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 6f 72 2d 6e 61 6d 65 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 41 75 74 68 6f 72 3a 20 28 2e 2b 3f 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 54 68 69 73 20 61 73 73 65 73 73 6d 65 6e 74 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 3c 76 61 72 20 63 79 62 65 72 73 74 72 65 6e 67 74 68 2d 6e 75 6d 2d 61 73 73 69 67 6e 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 75 73 65 72 28 73 29 20 68 61 76 65 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 6e 64 20 6d 61 79 20 68 61 76 65 20 73 74 61 72 74 65 64 2e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 54 68 69 73 20 61 73 73 65 73 73 6d 65 6e 74 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 79 Data Ascii: or-name=\"\"></var>"],"regex":"^#Author: (.+?)$"},{"phrase":"#This assessment is in progress. <var cyberstrength-num-assign=\"\"></var> user(s) have been assigned and may have started.","candidate":"#This assessment is in progress. ","variables":["<var cy
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 42 75 6c 6b 2c 20 4d 61 6c 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 42 75 6c 6b 2c 20 53 69 6d 75 6c 61 74 65 64 20 54 68 72 65 61 74 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 Data Ascii: m=\"\"></var>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Bulk, Malicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Bulk, Simulated Threat... +<var emailtype-num=\"\"></var> more","candidate":"#","varia
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 53 70 61 6d 2c 20 53 75 73 70 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 53 70 61 6d 2c 20 4d 61 6c 69 63 69 6f 75 73 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 Data Ascii: "\"></var>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Spam, Suspicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Spam, Malicious... +<var emailtype-num=\"\"></var>more","candidate":"#","variables":["<v
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 22 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 55 6e 6c 69 6b 65 6c 79 2c 20 4d 61 6c 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 55 6e 6c 69 6b 65 6c 79 2c 20 53 69 6d 75 6c 61 74 65 64 20 54 68 72 65 61 74 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 6d 6f Data Ascii: "<var emailtype-num=\"\"></var>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Unlikely, Malicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Unlikely, Simulated Threat... +<var emailtype-num=\"\"></var> mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49745	104.18.5.175	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:36 UTC	381	OUT	GET /api/lib/xG6eDWKawYmvs/g?v=8209&l=en HTTP/1.1 Host: global.localizecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:36 UTC	726	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:36 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close access-control-allow-origin: * strict-transport-security: max-age=15552000; includeSubDomains; preload Cache-Control: public, max-age=5184000 vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 12f59ea0cc8b3c4c54373b702216110a.cloudfront.net (CloudFront) x-amz-cf-pop: IAD66-C1 x-amz-cf-id: LqdAFy_QdjjYOIAp5jJa97T_5xTXwll2VkIyft1GtgYiQG0KuCzcxg== Age: 16807 CF-Cache-Status: HIT Last-Modified: Thu, 28 Mar 2024 08:53:29 GMT Expires: Mon, 27 May 2024 13:33:36 GMT X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b7fe2ee98a587e-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 13:33:36 UTC	643	IN	Data Raw: 37 63 64 63 0d 0a 5b 7b 22 5f 69 64 22 3a 22 70 72 6f 6a 65 63 74 2d 73 65 74 74 69 6e 67 73 22 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 74 72 61 6e 73 6c 61 74 65 4d 65 74 61 54 61 67 73 22 3a 74 72 75 65 2c 22 74 72 61 6e 73 6c 61 74 65 41 72 69 61 4c 61 62 65 6c 73 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 65 54 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 57 69 64 67 65 74 22 3a 74 72 75 65 2c 22 63 75 73 74 6f 6d 57 69 64 67 65 74 22 3a 7b 22 74 68 65 6d 65 22 3a 22 64 61 72 6b 22 2c 22 66 6f 6e 74 22 3a 22 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 22 2c 22 68 65 61 64 65 72 22 3a 22 72 67 62 28 30 2c 30 2c 30 29 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 22 2c 22 70 6f 73 69 74 Data Ascii: 7cdc[{"_id":"project-settings","settings":{"translateMetaTags":true,"translateAriaLabels":false,"translateTitle":false,"showWidget":true,"customWidget":{"theme":"dark","font":"rgb(255,255,255)","header":"rgb(0,0,0)","background":"rgba(0,0,0,0.8)","posit
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 63 61 6c 69 7a 65 41 75 64 69 6f 22 3a 66 61 6c 73 65 2c 22 6c 6f 63 61 6c 69 7a 65 41 75 64 69 6f 4c 69 6d 69 74 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 64 50 61 67 65 73 22 3a 5b 5d 2c 22 72 65 67 65 78 50 68 72 61 73 65 73 22 3a 5b 7b 22 70 68 72 61 73 65 22 3a 22 23 54 65 6e 61 6e 74 73 3a 20 3c 76 61 72 20 63 6f 75 6e 74 2d 6f 66 2d 74 65 6e 61 6e 74 73 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 54 65 6e 61 6e 74 73 3a 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 2d 6f 66 2d 74 65 6e 61 6e 74 73 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 54 65 6e 61 6e 74 73 3a 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a Data Ascii: calizeAudio":false,"localizeAudioLimit":false,"disabledPages":[],"regexPhrases":[{"phrase":"#Tenants: <var count-of-tenants=\"\"></var>","candidate":"#Tenants: ","variables":["<var count-of-tenants=\"\"></var>"],"regex":"^#Tenants: ([\\d ]+)$"},{"phrase":
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 6c 79 20 64 65 73 74 72 6f 79 65 64 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 55 73 65 72 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 66 6e 61 6d 65 2d 6c 6e 61 6d 65 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 55 73 65 72 20 28 2e 2b 3f 29 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 64 65 73 74 72 6f 79 65 64 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 67 72 6f 75 70 2d 64 65 6c 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 75 73 65 72 73 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 67 72 6f 75 70 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 67 72 6f 75 70 2d 64 65 6c 3d 5c 22 5c 22 3e Data Ascii: ly destroyed","candidate":"#User ","variables":["<var fname-lname=\"\"></var>"],"regex":"^#User (.+?) successfully destroyed$"},{"phrase":"#<var group-del=\"\"></var> users will be removed from the group","candidate":"#","variables":["<var group-del=\"\">
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 20 61 73 73 69 67 6e 6d 65 6e 74 20 77 69 6c 6c 20 73 65 65 20 63 68 61 6e 67 65 73 20 74 6f 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 6f 72 20 61 75 74 6f 5c 5c 2d 65 6e 72 6f 6c 6c 6d 65 6e 74 20 74 68 72 65 73 68 6f 6c 64 73 5c 5c 2e 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 43 6c 69 63 6b 73 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 28 5b 5c 5c 64 20 5d 2b 29 20 43 6c 69 63 6b 73 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 20 50 68 69 73 68 41 6c 61 Data Ascii: assignment will see changes to notifications or auto\\-enrollment thresholds\\.$"},{"phrase":"#<var count=\"\"></var> Clicks","candidate":"#","variables":["<var count=\"\"></var>"],"regex":"^#([\\d ]+) Clicks$"},{"phrase":"#<strong ljsid-0=\"\"> PhishAla
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 33 20 43 6c 69 63 6b 73 20 5c 5c 2d 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 32 20 43 6c 69 63 6b 73 20 2d 20 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 32 20 43 6c 69 63 6b 73 20 2d 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 32 20 43 6c 69 63 6b 73 20 5c 5c 2d 20 28 5b 5c 5c 64 20 5d 2b 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 52 65 70 65 61 74 20 43 6c 69 63 6b 65 72 73 2d 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e Data Ascii: var count=\"\"></var>"],"regex":"^#3 Clicks \\- ([\\d ]+)$"},{"phrase":"#2 Clicks - <var count=\"\"></var>","candidate":"#2 Clicks - ","variables":["<var count=\"\"></var>"],"regex":"^#2 Clicks \\- ([\\d ]+)$"},{"phrase":"#Repeat Clickers-<var count=\"\">
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 64 65 64 20 55 73 65 72 73 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 70 61 6e 20 6c 6a 73 69 64 2d 31 3d 5c 22 5c 22 3e 3c 2f 73 70 61 6e 3e 20 4d 79 20 46 61 76 6f 72 69 74 65 73 20 28 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 29 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 6f 75 6e 74 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 70 61 6e 20 6c 6a 73 69 64 5c 5c 2d 31 3d 5c 22 5c 22 3e 3c 2f 73 70 61 6e 3e 20 4d 79 20 46 61 76 6f 72 69 74 65 73 20 5c 5c 28 28 5b 5c 5c 64 20 5d 2b 29 5c 5c 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 76 61 72 20 75 73 65 72 2d 67 72 6f 75 70 2d 63 6f 75 6e 74 3d 5c 22 5c Data Ascii: ded Users$"},{"phrase":"#<span ljsid-1=\"\"></span> My Favorites (<var count=\"\"></var>)","candidate":"#","variables":["<var count=\"\"></var>"],"regex":"^#<span ljsid\\-1=\"\"></span> My Favorites \$([\\d ]+)\$$"},{"phrase":"#<var user-group-count=\"\
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 68 6f 72 2d 6e 61 6d 65 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 41 75 74 68 6f 72 3a 20 28 2e 2b 3f 29 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 54 68 69 73 20 61 73 73 65 73 73 6d 65 6e 74 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 3c 76 61 72 20 63 79 62 65 72 73 74 72 65 6e 67 74 68 2d 6e 75 6d 2d 61 73 73 69 67 6e 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 75 73 65 72 28 73 29 20 68 61 76 65 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 6e 64 20 6d 61 79 20 68 61 76 65 20 73 74 61 72 74 65 64 2e 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 54 68 69 73 20 61 73 73 65 73 73 6d 65 6e 74 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c 76 61 72 20 63 Data Ascii: hor-name=\"\"></var>"],"regex":"^#Author: (.+?)$"},{"phrase":"#This assessment is in progress. <var cyberstrength-num-assign=\"\"></var> user(s) have been assigned and may have started.","candidate":"#This assessment is in progress. ","variables":["<var c
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 42 75 6c 6b 2c 20 4d 61 6c 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 42 75 6c 6b 2c 20 53 69 6d 75 6c 61 74 65 64 20 54 68 72 65 61 74 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 Data Ascii: um=\"\"></var>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Bulk, Malicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Bulk, Simulated Threat... +<var emailtype-num=\"\"></var> more","candidate":"#","vari
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 53 70 61 6d 2c 20 53 75 73 70 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 53 70 61 6d 2c 20 4d 61 6c 69 63 69 6f 75 73 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 6d 6f 72 65 22 2c 22 63 61 6e 64 69 64 61 74 65 22 3a 22 23 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 5b 22 3c Data Ascii: \"\"></var>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Spam, Suspicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Spam, Malicious... +<var emailtype-num=\"\"></var>more","candidate":"#","variables":["<
2024-03-28 13:33:36 UTC	1369	IN	Data Raw: 5b 22 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 22 5d 2c 22 72 65 67 65 78 22 3a 22 5e 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 5c 5c 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 55 6e 6c 69 6b 65 6c 79 2c 20 4d 61 6c 69 63 69 6f 75 73 5c 5c 2e 5c 5c 2e 5c 5c 2e 20 5c 5c 2b 28 2e 2b 3f 29 20 6d 6f 72 65 24 22 7d 2c 7b 22 70 68 72 61 73 65 22 3a 22 23 3c 73 74 72 6f 6e 67 20 6c 6a 73 69 64 2d 30 3d 5c 22 5c 22 3e 45 6d 61 69 6c 20 54 79 70 65 3a 20 3c 2f 73 74 72 6f 6e 67 3e 20 55 6e 6c 69 6b 65 6c 79 2c 20 53 69 6d 75 6c 61 74 65 64 20 54 68 72 65 61 74 2e 2e 2e 20 2b 3c 76 61 72 20 65 6d 61 69 6c 74 79 70 65 2d 6e 75 6d 3d 5c 22 5c 22 3e 3c 2f 76 61 72 3e 20 6d Data Ascii: ["<var emailtype-num=\"\"></var>"],"regex":"^#<strong ljsid\\-0=\"\">Email Type: </strong> Unlikely, Malicious\\.\\.\\. \\+(.+?) more$"},{"phrase":"#<strong ljsid-0=\"\">Email Type: </strong> Unlikely, Simulated Threat... +<var emailtype-num=\"\"></var> m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49750	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:36 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:36 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:36 GMT Content-Type: application/x-javascript Content-Length: 49611 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 02 Mar 2024 00:12:08 GMT ETag: 0x8DC3A4D6646D827 x-ms-request-id: 3a1e2937-501e-006b-2fb9-8082ab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133336Z-up4a1kuqyp0xt20g7wmkubycb8000000016000000001bfnc x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:36 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 87 89 27 26 e4 05 68 70 da 9d 27 0d 74 37 33 40 18 12 a6 67 16 58 2e 27 56 c0 dd c1 ce da 0e 34 03 39 bf fd d4 8b 64 cb 8e 43 f7 ec 7d ae f3 e5 cc 4b b0 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 f3 da ff 54 7e ae 6c fc f8 3f 95 c1 b0 77 3e ac f4 3f 54 86 9f 8e ce 0f 2a 67 f0 f6 67 e5 b4 3f 3c da 3f fc f1 7a f0 a3 f8 ff f0 ce 8f 2b 13 7f 2a 2a f0 77 e4 c6 c2 ab 84 41 25 8c 2a 7e 30 0e a3 59 18 b9 89 88 2b f7 f0 1b f9 ee b4 32 89 c2 fb 4a 72 27 2a b3 28 fc 22 c6 49 5c 99 fa 71 02 85 46 62 1a 3e 56 aa 50 5d e4 55 ce dc 28 79 aa 1c 9d 99 75 a8 5f 40 6d fe ad 1f 40 e9 71 38 7b 82 e7 bb a4 12 84 89 3f 16 15 37 f0 a8 b6 29 bc 04 b1 a8 cc 03 4f 44 95 c7 3b 7f 7c 57 39 f1 c7 51 18 87 93 a4 12 89 b1 f0 Data Ascii: m[80'&hp't73@gX.'V49dC}K,JUT~l?w>?Tgg?<?z+wA%~0Y+2Jr'*("I\qFb>VP]U(yu_@m@q8{?7)OD;\|W9Q
2024-03-28 13:33:36 UTC	16384	IN	Data Raw: 87 df f0 74 0a 80 ed 83 29 fa 85 69 39 77 40 a6 b8 34 e8 78 1e e3 ba 5a 72 c0 a2 e8 e0 05 88 80 2a b0 3a c2 09 9f 3d 46 27 d3 6b 27 91 a5 df aa c8 03 59 2b 91 fa 92 5d 31 6a 78 8a 61 2c 94 86 a2 7d c4 7c 96 e7 3e 2d 4c ab 41 57 0d 00 e2 4a ef 8f 5b 3a cc 4d bb 1e 2c d2 6a 0c 2d 1f 6f 3a 48 6f 85 ab 9a 66 1d 45 27 65 ac 6a 44 88 a7 f1 9b 78 39 8f 69 be 82 db 6d d3 a2 93 4c 1a 78 48 38 9e ed 65 b9 8c f1 ec 64 c8 14 6d 78 4e 38 1e 73 32 77 7c 3c 75 85 34 7c 3a ce 98 8f cf e7 23 de ad 31 5d 2b 5f 9f 30 73 b0 51 8e 0a ca 3d ba 2d 31 c7 e7 34 90 27 74 64 8c c5 27 3e 65 1f f4 b4 c3 35 f3 77 d5 4d d5 d9 5c d3 4b 71 2d 0f 4d 9c 5a 6e 74 4b a7 5d c5 d0 4f 75 6b e1 71 e8 ca a5 63 10 f5 63 bc 47 90 b1 ef 2c 1f 03 85 d8 76 ab b9 83 5e c6 eb eb 6b d3 6e 52 17 74 d6 19 Data Ascii: t)i9w@4xZr*:=F'k'Y+]1jxa,}\|>-LAWJ[:M,j-o:HofE'ejDx9imLxH8edmxN8s2w\|<u4\|:#1]+_0sQ=-14'td'>e5wM\Kq-MZntK]OukqccG,v^knRt
2024-03-28 13:33:37 UTC	16384	IN	Data Raw: 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 96 19 47 27 7e eb 20 aa 1f f4 a5 0a ad cb 58 cf 7a cd 82 e5 48 67 da d4 b9 32 27 0d dd 52 fb 69 c0 49 68 1b ac 62 c3 ac 28 0b a4 e3 37 0d f4 ad 7f ad d2 22 99 70 a4 83 fe e1 da bf 3c f7 d8 14 6b 4d 4b d2 a3 17 e0 9c cf bf c7 70 2a 76 94 c9 dd 39 91 18 1b eb 06 c9 c2 42 fe 83 c4 75 de 97 44 57 d4 17 fc c1 74 05 3e 7f f0 e4 e5 33 45 b8 90 27 0a 04 0f 14 1e a4 b1 6a 5a 36 bb 66 92 4c eb 10 3b 94 50 bb a0 23 93 25 b1 eb 7a 5b 80 30 19 58 fa 6e be d5 9d ac 1f f0 7b c6 47 d3 aa 88 c4 16 48 d2 08 55 cf e7 02 3b 3c 4c 3b 49 0d ea 86 70 3b d0 31 9d 3e 53 7f 9d 51 d5 22 4e c0 26 44 a6 9a f6 e9 e3 be 88 58 46 be b0 80 1f 47 ab ac a7 77 86 ae e1 73 8a cc b8 fa 8d e7 33 a6 d4 72 fa b6 c4 c6 ac ee 9f c4 08 a8 Data Ascii: -bvj[H\|u)mG'~ XzHg2'RiIhb(7"p<kMKpv9BuDWt>3E'jZ6fL;P#%z[0Xn{GHU;<L;Ip;1>SQ"N&DXFGws3r
2024-03-28 13:33:37 UTC	1256	IN	Data Raw: 24 56 0e 21 e2 92 4b dc 98 a0 69 b1 4d c6 67 27 5e af e9 76 fb ae a6 2b 07 b7 b7 6e d4 73 94 77 ef 01 78 8f fb e2 e0 00 6d 0e 0e 2f 22 8c 8e f2 5a 17 03 fa 01 12 96 aa 1c 75 70 1e 3d 08 df b8 6b 19 a2 a0 77 dd 99 09 0b 4c 4a 24 3d 28 9b 8d 1a b9 27 74 ee 1c d4 5d 79 e2 4a 86 09 e5 e4 ce 89 49 c3 9b d1 3c 2d ca 8a 63 bb c6 d9 d8 03 ef 19 8b 3a 1e 44 e5 fe 7d 67 b9 cc a6 d9 32 c9 17 67 17 e9 ec 2c 39 bb 98 5e 4c 3f 5e 9e 2f a8 2d f9 32 fd 98 3a ec 6c 8f 97 e0 06 44 17 c8 6f 23 8e 6b 12 b1 97 79 ed ef b0 ef 8e 02 df b7 67 c5 79 95 1b c7 9c 86 93 8e 72 77 64 cf 6d b8 1a 8e 1c a5 d9 35 ce 2c b6 af 91 eb 98 05 3b 82 33 5d d2 9e 83 f7 65 3d 01 03 53 96 f3 aa 0d 52 2c d2 a4 11 45 7c 6a ad bc 7f d3 51 9c 8a 2f 26 6e b3 15 7f 35 5e 4e 7a 77 a0 8f 73 80 85 f9 83 b9 Data Ascii: $V!KiMg'^v+nswxm/"Zup=kwLJ$=('t]yJI<-c:D}g2g,9^L?^/-2:lDo#kygyrwdm5,;3]e=SR,E\|jQ/&n5^Nzws

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49749	35.199.162.154	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:36 UTC	690	OUT	POST /v1/rum?auth=WNIydzf5FMPgsMK0kZosBA HTTP/1.1 Host: rum-ingest.us2.signalfx.com Connection: keep-alive Content-Length: 33394 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://hillsclerk.securityeducation.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://hillsclerk.securityeducation.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:36 UTC	16384	OUT	Data Raw: 5b 7b 22 74 72 61 63 65 49 64 22 3a 22 39 31 31 64 31 31 36 64 31 66 63 65 65 34 61 33 39 66 65 35 66 61 35 31 32 31 65 61 63 66 61 63 22 2c 22 6e 61 6d 65 22 3a 22 6c 6f 6e 67 74 61 73 6b 22 2c 22 69 64 22 3a 22 65 33 63 30 32 38 37 34 31 34 34 32 35 36 63 36 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 36 33 32 38 31 31 38 31 38 39 30 30 2c 22 64 75 72 61 74 69 6f 6e 22 3a 37 31 30 30 30 2c 22 74 61 67 73 22 3a 7b 22 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 68 69 6c 6c 73 63 6c 65 72 6b 2e 73 65 63 75 72 69 74 79 65 64 75 63 61 74 69 6f 6e 2e 63 6f 6d 2f 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 64 65 70 6c 6f 79 6d 65 6e 74 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a Data Ascii: [{"traceId":"911d116d1fcee4a39fe5fa5121eacfac","name":"longtask","id":"e3c02874144256c6","timestamp":1711632811818900,"duration":71000,"tags":{"location.href":"https://hillsclerk.securityeducation.com/","environment":"production","deployment.environment":
2024-03-28 13:33:36 UTC	16384	OUT	Data Raw: 61 6c 75 65 22 3a 22 66 65 74 63 68 53 74 61 72 74 22 7d 2c 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 36 33 32 38 31 31 35 36 35 31 30 30 2c 22 76 61 6c 75 65 22 3a 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 22 7d 2c 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 36 33 32 38 31 31 35 36 35 31 30 30 2c 22 76 61 6c 75 65 22 3a 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 22 7d 2c 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 36 33 32 38 31 31 35 36 35 31 30 30 2c 22 76 61 6c 75 65 22 3a 22 63 6f 6e 6e 65 63 74 53 74 61 72 74 22 7d 2c 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 36 33 32 38 31 31 37 31 38 31 30 30 2c 22 76 61 6c 75 65 22 3a 22 73 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 22 7d 2c 7b 22 Data Ascii: alue":"fetchStart"},{"timestamp":1711632811565100,"value":"domainLookupStart"},{"timestamp":1711632811565100,"value":"domainLookupEnd"},{"timestamp":1711632811565100,"value":"connectStart"},{"timestamp":1711632811718100,"value":"secureConnectionStart"},{"
2024-03-28 13:33:36 UTC	626	OUT	Data Raw: 35 34 32 39 36 35 37 63 38 32 36 66 65 34 38 36 64 35 61 39 33 34 62 64 36 30 36 22 2c 22 6e 61 6d 65 22 3a 22 77 65 62 76 69 74 61 6c 73 22 2c 22 69 64 22 3a 22 36 65 61 36 32 39 65 30 63 62 37 38 64 65 38 34 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 36 33 32 38 31 35 30 34 31 30 30 30 2c 22 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 74 61 67 73 22 3a 7b 22 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 68 69 6c 6c 73 63 6c 65 72 6b 2e 73 65 63 75 72 69 74 79 65 64 75 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 73 6f 2d 61 75 74 68 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 64 65 70 6c 6f 79 6d 65 6e 74 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c Data Ascii: 5429657c826fe486d5a934bd606","name":"webvitals","id":"6ea629e0cb78de84","timestamp":1711632815041000,"duration":0,"tags":{"location.href":"https://hillsclerk.securityeducation.com/sso-auth","environment":"production","deployment.environment":"production",
2024-03-28 13:33:37 UTC	348	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:37 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 4 Connection: close Access-Control-Allow-Origin: https://hillsclerk.securityeducation.com X-Debug-Id: 8121442512885318429 X-Id: gdi-rum-canary-558cd4596d-7phh8 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-03-28 13:33:37 UTC	4	IN	Data Raw: 22 4f 4b 22 Data Ascii: "OK"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49754	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:38 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:38 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:38 GMT Content-Type: text/css Content-Length: 20314 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 27 Dec 2023 18:18:12 GMT ETag: 0x8DC07082FBB8D2B x-ms-request-id: 7ff17d63-c01e-0002-0db5-80b39a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133338Z-t9vsm9ye0p0m52wptt8ghcwsb4000000015g000000017fe6 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:38 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-03-28 13:33:38 UTC	4711	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49757	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:38 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:38 UTC	792	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:38 GMT Content-Type: application/x-javascript Content-Length: 120844 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 02 Mar 2024 00:12:09 GMT ETag: 0x8DC3A4D6725B632 x-ms-request-id: 55eb21a5-201e-0074-1ab1-80bb96000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133338Z-tcc8y7qpy14k9bdzbq55q49f18000000013000000000p575 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:38 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 7b e3 38 8e 00 f8 fd 7e 85 a3 99 cb d8 1d c5 25 f9 dd 4a ab b3 2e 27 a9 ca 76 de 26 4e 75 f7 6e 2a 93 47 96 68 47 1d 59 f2 4a 72 5e c6 f1 fe f6 03 40 52 a2 6c 39 55 35 bb 77 f7 dc 73 bd b3 15 8b 04 49 10 04 41 10 04 c1 0f 3f ed fc 1f 95 9f 2a fb df ff 5f 65 74 33 b8 be a9 5c 9e 54 6e 3e 9f 5e 1f 55 ae e0 eb 3f 2a 17 97 37 a7 c3 e3 ef af 07 1b c5 ff bf 79 f0 93 ca c4 0f 58 05 fe 8e 9d 84 79 95 28 ac 44 71 c5 0f dd 28 9e 47 b1 93 b2 a4 32 83 7f 63 df 09 2a 93 38 9a 55 d2 07 56 99 c7 d1 9f cc 4d 93 4a e0 27 29 14 1a b3 20 7a ae 54 a1 ba d8 ab 5c 39 71 fa 5a 39 bd aa d5 a1 7e 06 b5 f9 53 3f 84 d2 6e 34 7f 85 df 0f 69 25 8c 52 df 65 15 27 f4 a8 b6 00 3e c2 84 55 16 a1 c7 e2 ca f3 83 ef 3e 54 ce 7d 37 8e 92 68 92 56 62 e6 Data Ascii: m{8~%J.'v&NunGhGYJr^@Rl9U5wsIA?_et3\Tn>^U?7yXy(Dq(G2c8UVMJ') zT\9qZ9~S?n4i%Re'>U>T}7hVb
2024-03-28 13:33:38 UTC	16384	IN	Data Raw: ec f6 37 65 26 ee f3 44 58 07 24 4c 52 7a f9 80 6f 4d 42 c8 47 a7 e3 55 7e c7 00 05 0d 8e 74 4a 8e 9a 68 39 04 5e 93 f5 59 69 b5 d9 42 03 db 6b 88 77 c3 42 7c 01 77 27 52 37 1f fe b9 f3 42 f7 5a 60 61 f8 35 e4 8f cd 93 23 7b c6 f1 c9 db 9b e4 ad 7a f9 bd 99 ea 8f d6 08 f3 4e b1 01 26 45 4e 87 b9 59 a7 f8 1e 09 7f 1a 83 74 33 ed 2f ff fd 97 73 86 3a 13 ea 52 f7 67 23 f8 e6 f1 c4 98 67 2f 45 20 2b fe 26 30 e4 cc f9 b3 a3 fc 20 03 21 31 c6 94 d8 3f 60 7e 16 a0 20 7f f8 40 54 29 5f 2c 2d 82 89 c4 b5 a6 29 e4 05 17 46 88 c2 45 94 62 18 3d da 6b 51 90 29 fa 79 f5 fb 91 65 e2 5d f6 07 8c c5 81 8f e8 f2 88 65 d2 a6 20 03 8b 60 54 8e 3c b4 08 69 8d e7 b0 e6 0e 02 df 49 28 28 d7 6c 8c 7e f5 fc b9 05 f9 5c 6e 69 b2 a8 e5 c6 4f 83 fc fd e2 ec 09 52 7a 42 b6 b4 dc 6f Data Ascii: 7e&DX$LRzoMBGU~tJh9^YiBkwB\|w'R7BZ`a5#{zN&ENYt3/s:Rg#g/E +&0 !1?`~ @T)_,-)FEb=kQ)ye]e `T<iI((l~\niORzBo
2024-03-28 13:33:38 UTC	16384	IN	Data Raw: e6 ca 91 eb 4e 8e 51 0d 8f 0f c0 b5 87 91 40 c1 ae e2 31 b4 9c 97 4a 38 cf 10 ef 2b 65 a1 10 a1 36 a9 f4 37 8e ee c7 d7 d6 c8 01 b9 44 72 50 75 03 d9 7e 38 51 40 3f ca f1 a2 47 25 64 86 d8 dc 61 11 35 49 6c 24 a7 17 b0 d7 4e 28 21 c9 2e e5 6a b5 cf 88 c9 17 14 9c c1 3f d9 35 a0 39 14 29 48 ba 66 d5 a1 c1 3f b2 e0 0e 90 9e 84 dc 01 cb 7b 42 b1 1f 10 0f 4f 51 76 a5 dd e3 00 c2 03 49 a8 f0 10 b1 f7 d5 2e b7 0a 08 0e fc d5 ae cf f3 89 5d d3 25 41 6e 1b 0a 44 51 d0 19 57 8f d8 5d 98 97 a1 40 80 1c 99 cc 35 d9 d6 97 15 9d f4 d5 2c 68 50 6e b7 9e db 03 cb c5 bc a4 e6 2e b1 cc a5 34 a9 66 54 82 58 f7 ac c6 07 f8 a7 8d 27 d8 83 b0 b3 ed 2e 6d 44 60 ee bc ed 62 3d 82 6b 3c 91 12 26 21 41 9e 1c 99 9d db a8 02 88 3b c9 e8 51 ee 6f 55 63 51 fa 0e 81 17 ba 7f bf 43 04 Data Ascii: NQ@1J8+e67DrPu~8Q@?G%da5Il$N(!.j?59)Hf?{BOQvI.]%AnDQW]@5,hPn.4fTX'.mD`b=k<&!A;QoUcQC
2024-03-28 13:33:38 UTC	16384	IN	Data Raw: d8 6a 92 5d 23 05 98 a7 85 a7 9b 75 4a 37 2b ea 95 cc 11 49 fe db 0f 03 69 88 39 ec 29 77 38 b7 bd 20 e3 5f fb 74 c4 e8 e7 a0 cb 36 9e 3f 76 19 68 9d d4 0f 58 a1 d4 91 de 71 1d 2e 97 7a e5 2c 3c 83 f8 f2 ee a7 2c cb e8 cb b2 43 22 06 a2 9e c9 fb 37 41 ab 1c 83 32 24 1d 74 19 11 42 de 86 2b 07 a3 06 e7 e5 03 6e a8 59 28 ef 3d 30 47 35 43 3d 3f 39 15 35 35 09 da 0a 83 19 5a 6c 6e 55 47 98 0a 96 d6 da a4 6c bd 8e bf 3d 6a ed d4 9c 0d f1 24 79 e0 fe bd e7 df d7 7f e7 0f 29 07 b9 0f 9e 7e b7 81 b8 a8 9f 05 4f d2 fe ed fc 02 c3 8b a7 bd a0 39 f3 53 75 f8 e6 28 c3 92 84 26 0b 50 af 55 3e 86 52 9b 94 dc 48 c1 14 dd c8 8f 3b 42 9a da 7b 2d 5b 4d 54 72 1a a3 fa 19 22 ae 21 ca 8d af bb c8 96 b8 ee b2 78 39 17 b2 fc 1c 62 fa cf 21 de 17 2e 0f 5b c5 3f 28 d0 39 ff 64 Data Ascii: j]#uJ7+Ii9)w8 _t6?vhXq.z,<,C"7A2$tB+nY(=0G5C=?955ZlnUGl=j$y)~O9Su(&PU>RH;B{-[MTr"!x9b!.[?(9d
2024-03-28 13:33:38 UTC	16384	IN	Data Raw: 67 0a dd a8 8d f7 ae 61 8d 32 48 0a a0 66 15 99 37 52 2a 44 e0 24 08 83 f5 01 23 4e 27 cf 4b 49 c3 1b 9f 84 a7 ee 60 6d 2d 94 44 7e 30 0d 14 24 c4 66 a7 74 2f 03 cc 62 ae 8c ae 01 89 34 a2 b7 bf cb fb 38 94 20 e3 f0 e1 4a 1c b6 5c e7 ea 3a 55 80 15 b4 50 36 b0 68 50 29 f3 f2 8b 64 0d 49 8b c4 55 63 f4 b0 0d c3 ec 58 11 7f 18 08 8a 3d ea af 88 50 ce d5 cf f0 33 f1 12 b4 27 26 26 da 87 ce 63 dd 67 ef 2a 38 7f 3a b9 bf df f0 e8 53 6b e7 6b 1b 03 dd c3 ec 79 30 61 b3 07 6e 44 41 e1 cd 44 a8 05 90 30 c0 39 a6 0e 89 d4 6b 57 e0 03 e7 ce ba 97 3d dd a0 33 e8 79 30 1e e4 f4 4e 81 e4 9e f9 30 23 89 91 1e 9c 42 c7 79 92 d3 8f 61 c4 7f fc a9 43 3f 48 aa 1e 79 05 df a0 5f ee da 86 9f d3 7f 99 6a c3 14 6d 9e e3 9f 2b fc 93 05 13 fa d2 f9 20 bb bf cf 07 ee 79 30 a3 e1 Data Ascii: ga2Hf7RD$#N'KI`m-D~0$ft/b48 J\:UP6hP)dIUcX=P3'&&cg8:Skky0anDAD09kW=3y0N0#ByaC?Hy_jm+ y0
2024-03-28 13:33:38 UTC	16384	IN	Data Raw: c1 62 85 65 39 7b e1 e4 8e 9f 38 8e 80 cc cb c8 2c b4 ad 18 92 dc 61 c2 f6 ec 08 f2 3d f2 c2 38 dc 4b 37 46 33 8a 85 1f 46 b6 15 b8 4e e4 59 16 0d cc 4a 2d 1f 8a 0b 31 f5 e0 86 7b 6f 1b 9d c1 22 b4 99 15 45 9e 88 b9 07 fd 5c 82 f3 09 9e a6 0c f6 00 f3 b8 b8 d9 be e8 7a 37 46 33 e2 d2 97 a9 c5 a0 18 31 16 7a 2e 70 90 5b 4e 0c 55 22 74 52 11 c5 7b d1 8c 9c 30 f1 02 18 16 01 cb 62 11 01 c9 a5 10 76 04 9b 29 48 31 91 dc 4f a3 fd 8c c9 68 46 22 f0 9d 90 a5 91 ef 64 81 13 31 0e 91 61 bb 12 4c 3c cd 1c 19 d8 7b 31 01 9c 28 09 c0 7d 3c 5f da 41 96 32 08 f7 0c 36 86 da 9d 65 d0 93 ac c8 df 8f c8 30 9a 51 ec 5a a4 fc fb d0 62 65 00 a3 13 3c 82 b6 ce c1 90 02 db 12 7b 62 b2 71 62 41 05 17 a9 2d 24 87 3d ed fb 59 4a 44 14 bb b6 84 1d e5 c6 fb 99 3a c3 ca 7d 27 8e 5c Data Ascii: be9{8,a=8K7F3FNYJ-1{o"E\z7F31z.p[NU"tR{0bv)H1OhF"d1aL<{1(}<_A26e0QZbe<{bqbA-$=YJD:}'\
2024-03-28 13:33:38 UTC	16384	IN	Data Raw: eb 52 9b f3 72 3d 5d 81 c6 75 d0 e4 02 d9 4e 86 f4 ef 13 a4 a8 17 e4 73 c8 91 fe 35 7d 52 06 82 2e 9e b6 bf 7c 01 3f 8a 64 8b e2 87 72 21 9f 66 d9 3c 2f cc 49 b8 3f de aa cd 69 20 07 67 18 c9 41 a9 87 42 87 50 68 2c fb 5e c6 fd 2f c2 cf 32 d5 3b ef df 2e 72 71 b2 8a eb fc aa e6 fa ad 4c 0f 0a 05 e5 41 aa c0 fc 0d c9 63 61 f8 59 67 fb f3 aa 2c 49 f4 ef 66 32 48 f7 77 be 28 e9 04 d3 5f 89 11 6f 8d 82 a0 7f 57 73 73 55 42 9b fb 68 ea b9 ac e8 46 8a ce c1 5a b9 e4 a7 c7 b5 2c 05 7b 7e bc 56 f8 4a 20 7f 0f 9b ed 58 ca bf 95 6f 69 26 9f d4 97 69 8b 0e be 7e 19 e4 ab a4 3c 80 8e 7c a0 ca e7 d5 c1 99 ee f9 eb 27 ed 3a 58 87 6e 73 fb 4d 0f e0 d5 27 35 0e 2a 74 fc 15 7a 40 7f db 28 8a ff c6 58 6f fe db 25 1e fa 0b 18 04 bf e7 f9 c1 3f fe 06 ae de f9 d7 d7 17 94 73 Data Ascii: Rr=]uNs5}R.\|?dr!f</I?i gABPh,^/2;.rqLAcaYg,If2Hw(_oWssUBhFZ,{~VJ Xoi&i~<\|':XnsM'5*tz@(Xo%?s
2024-03-28 13:33:38 UTC	6948	IN	Data Raw: 55 4c 40 66 2c 94 05 ba a2 f9 be b8 ff 45 ac 6f 98 57 f6 8d a6 5e 13 e5 cf 12 00 81 9e 61 1b 54 75 29 d4 0e a9 db a5 20 9c b8 87 e6 5a 60 b0 08 ee 6b ae 1a 65 d3 4b a8 8a 27 5f a7 61 e7 b6 27 e4 c8 ee f7 53 13 94 52 e5 1d 93 be e8 9b a4 f4 86 ca 95 f4 cd 52 7d 23 e4 4b 7c 77 10 17 5a 10 d5 7f 50 4a 03 fe 23 36 f9 ce 2f ef 81 6e 63 10 30 3a 3b ff 7e f2 04 4a e3 9e f8 a6 90 a7 9f 7e f1 f9 a6 b7 7f db 93 9e df ed c3 96 46 94 b7 38 4c fa f8 f4 c9 93 1b f5 15 15 6f 5f 45 fe 32 49 93 10 30 ba e0 db 23 4a 3d d2 44 ec 9f d2 fa 3b 29 2c cc 1b f8 3f 7b fa cb fb 7d b9 1d 81 2a a5 52 0a cc 76 c7 e7 55 dc 72 15 86 41 a5 82 0f cc 0c 24 83 98 09 b5 4c 40 d8 bf 86 56 02 58 dc 3b 89 02 39 43 b3 52 1d 98 3b 42 39 c7 c2 4b 15 03 1c f3 4a f1 39 2b 7e 5c c2 88 22 c1 61 09 e0 Data Ascii: UL@f,EoW^aTu) Z`keK'_a'SRR}#K\|wZPJ#6/nc0:;~J~F8Lo_E2I0#J=D;),?{}*RvUrA$L@VX;9CR;B9KJ9+~\"a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49756	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:38 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:38 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:38 GMT Content-Type: application/x-javascript Content-Length: 15778 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 17 Feb 2024 05:09:10 GMT ETag: 0x8DC2F7693532D17 x-ms-request-id: 780a908d-901e-004b-1f02-801398000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133338Z-y5z1gcnft53zh20xbemxunzpts000000011000000001a60p x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:38 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 Data Ascii: }Ms#GuhO=>4pO$PIF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sB
2024-03-28 13:33:38 UTC	191	IN	Data Raw: d9 41 9b 13 7e 29 ee 11 ca 71 0f c0 fb b3 b4 56 c9 bd 00 3b c7 14 68 d2 f9 40 a7 d2 30 ff f4 6b a2 84 23 5f 49 55 3c 81 72 6d 12 f8 e7 81 8b 57 88 40 87 cd ab ac 2c 28 bb 32 ba c0 48 07 04 71 e5 c7 4f e8 04 33 e0 b1 fa 00 86 8e d8 7f 56 5b 6d 3f 50 76 37 bc ed bc b3 f7 14 d6 d6 ed 52 04 80 97 d7 d5 6d a2 f7 20 3a 45 a6 fd 9c 7b ef 46 14 a6 a5 6d fd ca 3e ea fa 5b 5a 5a b8 27 f7 7b f7 77 76 69 35 e4 d9 94 d6 3e b6 ad ec 40 d7 18 6e 32 ce fd 72 75 e7 38 8d 86 a9 4e ab cf e9 f4 db 8b 51 97 1b 55 3f 7d fa 79 cf e1 4c a0 a5 c9 a4 f1 87 f2 eb ff 07 88 2a 7c 93 ed d6 00 00 Data Ascii: A~)qV;h@0k#_IU<rmW@,(2HqO3V[m?Pv7Rm :E{Fm>[ZZ'{wvi5>@n2ru8NQU?}yL*\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49753	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:38 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:39 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:38 GMT Content-Type: application/x-javascript Content-Length: 54325 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:15 GMT ETag: 0x8DC2E5A2998EB1D x-ms-request-id: d347b467-901e-000f-36b5-806c81000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133338Z-gdskurbeup1rzd4qywphk5kzbw0000000100000000010uau x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:39 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 7b db 46 92 30 fa 7d 7f 05 85 67 46 06 4c 90 22 a9 8b 65 52 10 c7 76 92 79 bd 4f 12 fb d8 ce bc 67 8f cc c9 03 81 a0 84 98 02 b8 b8 d8 d6 88 dc df 7e aa aa ef 40 83 92 af c9 66 3c bb b1 88 46 a3 2f d5 dd d5 75 af bd fb 3b ff d1 b9 df e9 dd fd 7f 9d 97 af 1e bd 78 d5 79 f6 43 e7 d5 ff 79 fa e2 bb ce 73 78 fa af ce cf cf 5e 3d 7d f2 fd dd db c1 4e f1 bf 57 97 49 d1 59 24 cb b8 03 7f cf c3 22 9e 77 b2 b4 93 e5 9d 24 8d b2 7c 95 e5 61 19 17 9d 2b f8 37 4f c2 65 67 91 67 57 9d f2 32 ee ac f2 ec b7 38 2a 8b ce 32 29 4a f8 e8 3c 5e 66 ef 3a 2e 34 97 cf 3b cf c3 bc bc ee 3c 7d ee f5 a1 fd 18 5a 4b 2e 92 14 be 8e b2 d5 35 fc be 2c 3b 69 56 26 51 dc 09 d3 39 b5 b6 84 87 b4 88 3b 55 3a 8f f3 ce bb cb 24 ba ec fc 94 44 79 56 64 Data Ascii: k{F0}gFL"eRvyOg~@f<F/u;xyCysx^=}NWIY$"w$\|a+7OeggW28*2)J<^f:.4;<}ZK.5,;iV&Q9;U:$DyVd
2024-03-28 13:33:39 UTC	16384	IN	Data Raw: af 2c 68 22 6c ec af 0f f1 58 23 9c 57 4f 85 29 04 a2 a6 af 99 30 b3 14 9a 61 1d 83 94 a6 41 a5 e1 ba 40 8e 69 4d 84 c0 0c 7a ee 60 3d 99 b6 58 4f 32 bb c9 b1 51 33 f7 d0 cc 59 d4 64 3d a8 ea f4 ac 64 83 78 6e c2 77 d6 2c 2b 64 ba 9c e8 88 be 66 c5 8c df 66 99 b1 37 5b 0c 65 ed c6 b0 84 1d b8 27 9d b1 78 9f d1 85 0e f7 b3 61 34 de 22 6c a6 2f 35 ab 02 8b c7 89 b8 f8 6d be 19 44 1a 30 db e7 98 94 60 dc 01 03 75 61 53 a0 c6 87 a8 0e 1b 7a e3 5c 73 c0 60 ee 51 be 50 27 6e f4 b1 3e be 6e 52 fc db 7d 60 b6 9b e9 5b 3d 60 f2 fa ac ed ce 08 79 ab 13 40 ae a4 cc 80 81 49 2c 6b 50 9f d5 16 d2 7d b4 9d 74 bf 2b 55 8b fe 30 c4 64 10 31 bb 9d c9 e0 96 d3 e6 5e 6f 10 6f 75 1b 48 73 4a c9 96 29 ed 37 a6 64 1c 6a 49 ac e4 0d 41 ab af c5 fa 1e 4e 52 0c de 9d f6 7a ba 5f Data Ascii: ,h"lX#WO)0aA@iMz`=XO2Q3Yd=dxnw,+dff7[e'xa4"l/5mD0`uaSz\s`QP'n>nR}`[=`y@I,kP}t+U0d1^oouHsJ)7djIANRz_
2024-03-28 13:33:39 UTC	16384	IN	Data Raw: 0e 6a ee 80 44 c4 66 f1 6a 1b d6 a5 51 f4 e0 d1 11 ad 3c 3a ae a2 1c fd f7 9b 24 c3 f6 61 2e 2f 03 95 db 1a db 11 47 1c 6c 89 73 db 4d aa 52 da b0 57 db 32 bf 29 5f 14 77 2f 6b 5d 29 40 84 dd b9 1c e4 35 e5 58 be 7e cb 47 b9 bb 2a af 2e 8c 24 e3 da 82 16 69 69 c9 e0 a5 e4 f7 2e 25 75 e6 0a b6 d4 ed 8d c5 7c aa 50 dc 9c bf f5 32 fa f9 9a a1 fb 5b 8c 97 74 e1 59 21 ca 81 0c 11 73 4a 13 f3 55 f6 45 f9 3a bc a4 72 e9 69 3b 21 8d ae e3 f7 5e 42 e7 ce 71 21 e7 6f 59 7c ee e8 9b 5f a1 85 a7 01 59 7a 29 5e da 20 4b 2f c5 13 5d da b4 de 7b e9 8b e3 e6 74 04 65 da 5b 0f ca e4 1a c9 19 bf b1 7f 1f 64 ff df c5 f6 ba 6e 26 a0 b8 dd de 5a 6b db e4 cb ad 6d bf c0 ce 96 da d2 60 6a ab 5a e3 58 dc 52 e6 5f 6e 74 eb f6 74 f9 a7 8d fa af 6c a3 8e ae 2b bf a6 8d 7a b4 de 46 Data Ascii: jDfjQ<:$a./GlsMRW2)_w/k])@5X~G*.$ii.%u\|P2[tY!sJUE:ri;!^Bq!oY\|_Yz)^ K/]{te[dn&Zkm`jZXR_nttl+zF
2024-03-28 13:33:39 UTC	5970	IN	Data Raw: de 98 b0 b0 3e 49 0e 7e 63 40 3c 29 b8 d4 80 14 aa 30 32 c0 a4 8e 42 d4 35 3d 5f 18 b8 a3 11 36 4f 9a 57 c3 d9 74 ef a4 b8 f7 97 0d 0d bb 85 3e 8b 58 ca db be e7 c3 1b 78 bd b3 c3 96 68 64 69 85 5f 70 17 50 83 d8 fd 33 ab 3f bf a4 b3 1d 87 c9 32 e6 91 0b 6c 50 5a 4a f6 5c 2d 1d b3 22 79 95 55 3b 8d 66 e7 4b 13 fe f9 05 af ed 06 6b ab 90 17 34 34 0c 28 2d 2a bd f3 be c0 75 de d3 f6 02 7a 2f e0 69 a9 24 cb 5c ef 0f ef 5e 3c cd 2e 67 59 4a b6 fe 6a 52 34 68 93 b4 86 af 7e e1 84 3e d1 43 fe ac 88 cb 70 5e 4e 3a fd c3 de 59 54 c4 07 f7 85 be 29 16 8b 95 25 ab 59 35 e6 6f a8 db f0 2e 3e 7f fe 69 46 a2 81 57 38 17 aa 49 22 ed a7 b4 13 d1 92 8d eb 69 f9 16 09 1b 5c 25 e9 38 bb da 86 23 f6 4c d9 de 66 66 42 57 34 c8 1b fc 24 86 6d 5f d0 4a a9 01 18 3a 11 3d 65 48 Data Ascii: >I~c@<)02B5=_6OWt>Xxhdi_pP3?2lPZJ\-"yU;fKk44(-*uz/i$\^<.gYJjR4h~>Cp^N:YT)%Y5o.>iFW8I"i\%8#LffBW4$m_J:=eH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49763	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:39 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:39 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:39 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: bd3fbc7e-201e-0074-0f31-80bb96000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133339Z-y5z1gcnft53zh20xbemxunzpts0000000170000000019zqx x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:39 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-28 13:33:39 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49760	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:39 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:39 UTC	790	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:39 GMT Content-Type: application/x-javascript Content-Length: 5512 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:16 GMT ETag: 0x8DC2E5A29A25668 x-ms-request-id: 90258d25-b01e-0065-66b9-8020b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133339Z-x67sv75c354b335e6u6f3msdew000000014000000000an7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:39 UTC	5512	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 5b 7d 77 da 46 d6 ff bf 9f 42 68 f7 10 69 33 96 4d 9a b6 cf e2 aa 3e 0e 2f 09 ad 1d bb 06 b7 9b 26 39 1c 81 06 50 2c 24 55 23 8c a9 e1 bb ef ef ce 48 48 80 c0 4e 9f ed 49 0d 9a b9 73 e7 ce 9d fb 7e c5 f1 bf 2a df 68 ff d2 8e 9e ff 9f d6 ed 9d df f4 b4 ab b6 d6 7b d7 b9 69 6a d7 78 fa a0 bd bf ea 75 1a ad e7 e3 a1 4d e9 ff de c4 13 da c8 f3 b9 86 cf 81 23 b8 ab 85 81 16 c6 9a 17 0c c3 38 0a 63 27 e1 42 9b e2 6f ec 39 be 36 8a c3 a9 96 4c b8 16 c5 e1 17 3e 4c 84 e6 7b 22 c1 a2 01 f7 c3 b9 66 00 5d ec 6a d7 4e 9c 2c b4 ce b5 69 01 3f 07 36 6f ec 05 58 3d 0c a3 05 be 4f 12 2d 08 13 6f c8 35 27 70 25 36 1f 0f 81 e0 da 2c 70 79 ac cd 27 de 70 a2 5d 7a c3 38 14 e1 28 d1 62 3e e4 de 3d 36 11 33 8c 6f 6e c1 34 27 e6 9a e0 89 36 0a Data Ascii: [}wFBhi3M>/&9P,$U#HHNIs~*h{ijxuM#8c'Bo96L>L{"f]jN,i?6oX=O-o5'p%6,py'p]z8(b>=63on4'6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49762	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:39 UTC	668	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:40 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:40 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: be3b89a7-201e-0030-7ebd-80c48f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133340Z-62hr1k39790r5dpwdwk9ammhds000000017000000000yzbn x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:40 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49761	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:41 UTC	662	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:41 UTC	734	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:41 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: f27900b3-601e-0060-21b8-80a7bc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133341Z-0f5z7wuvy52ur5ga9ctcv4kcmn000000018g00000000827b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:41 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49766	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:41 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:42 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:41 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 501343a9-001e-005a-09b6-8088b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133341Z-d4c8811u8p7uzfu5depuz1fmbw000000016g000000000tvc x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:42 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49765	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:41 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:42 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:42 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 45a53120-f01e-0071-24b5-803c9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133342Z-pqtck5q2et6kvek514ag73krts000000017000000000xxhk x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:42 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49767	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:41 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:42 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:42 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: bd3fbc7e-201e-0074-0f31-80bb96000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133342Z-8yngfh7h3506x6uds3pm58hn4s000000017000000000xxpv x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:42 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-28 13:33:42 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49764	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:41 UTC	423	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:42 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:42 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: be3b89a7-201e-0030-7ebd-80c48f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133342Z-sap8a812vt6y5d3uwq40zsg7ec000000013g0000000119yz x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:42 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49768	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:41 UTC	417	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:42 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:42 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: f27900b3-601e-0060-21b8-80a7bc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133342Z-z8725mcsw17gx5ec1d1bdrgca0000000011g000000002ckr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:42 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49769	40.126.62.129	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:42 UTC	727	OUT	GET /f8c5973a-b6e5-4635-99d8-335ed112cd2f/winauth/ssoprobe?client-request-id=cc54fe41-ad30-4fb9-98bf-40b0918028c3&_=1711632820509 HTTP/1.1 Host: autologon.microsoftazuread-sso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:42 UTC	1181	IN	HTTP/1.1 401 Unauthorized Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: image/png; charset=utf-8 Expires: -1 Vary: Origin X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://login.microsoftonline.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, OPTIONS P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 14ebf2f5-1a38-43f7-8019-a711dbe35b00 x-ms-ests-server: 2.1.17615.11 - EUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin X-XSS-Protection: 0 WWW-Authenticate: Negotiate Set-Cookie: fpc=AtfPd970HplFm2XMbMC3kik; expires=Sat, 27-Apr-2024 13:33:42 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Thu, 28 Mar 2024 13:33:42 GMT Connection: close Content-Length: 12
2024-03-28 13:33:42 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49770	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:44 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:44 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:44 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 501343a9-001e-005a-09b6-8088b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133344Z-gdskurbeup1rzd4qywphk5kzbw000000014g00000000y9za x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:44 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49771	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:44 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:44 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:44 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 45a53120-f01e-0071-24b5-803c9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133344Z-gdskurbeup1rzd4qywphk5kzbw0000000150000000010vt9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:44 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49773	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:45 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:45 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:45 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 0f56b547-f01e-005d-4db5-8059b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133345Z-0hz3egkyq90gf5g0ffgz6m7tpg000000018g000000010tuy x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:45 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49774	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:45 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:45 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:45 GMT Content-Type: application/x-javascript Content-Length: 35813 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:16 GMT ETag: 0x8DC2E5A29EDB0A1 x-ms-request-id: 97fb4385-601e-0008-1fa7-80bd8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133345Z-fbsuskukgd7u74wr9uws7q3kxc000000018g00000000g1sc x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:45 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 7f db 38 92 28 fa ff f9 14 b6 a6 c7 11 db b4 2c ea 2d db 8c c7 f1 a3 93 99 a4 93 cd a3 67 67 6c 75 86 a2 20 89 6d 8a 94 49 ca 8f c4 de cf 7e ab 0a 6f 52 76 92 d9 b3 e7 dc df bd 99 69 9a 28 14 0a 85 02 50 28 14 0a d4 ee cf 9b ff 6b e3 e7 8d 9d ef ff b7 f1 e1 e3 d1 fb 8f 1b 6f cf 36 3e be 7c f5 fe 64 e3 1d a4 fe b1 f1 eb db 8f af 8e 4f bf 9f 0e 56 8a ff 7d 9c 47 f9 c6 34 8a d9 06 fc 1d 07 39 9b 6c a4 c9 46 9a 6d 44 49 98 66 cb 34 0b 0a 96 6f 2c e0 99 45 41 bc 31 cd d2 c5 46 31 67 1b cb 2c fd 83 85 45 be 11 47 79 01 85 c6 2c 4e 6f 36 ea 40 2e 9b 6c bc 0b b2 e2 6e e3 d5 3b a7 01 f4 19 50 8b 66 51 02 a5 c3 74 79 07 ef f3 62 23 49 8b 28 64 1b 41 32 21 6a 31 24 92 9c 6d ac 92 09 cb 36 6e e6 51 38 df 78 13 85 59 9a a7 d3 62 Data Ascii: {8(,-gglu mI~oRvi(P(ko6>\|dOV}G49lFmDIf4o,EA1F1g,EGy,No6@.ln;PfQtyb#I(dA2!j1$m6nQ8xYb
2024-03-28 13:33:45 UTC	16384	IN	Data Raw: 96 2c ec 0f e5 1d 27 21 95 80 e4 d4 cb 2b 1f 51 c4 8b 15 a2 2b 7a 64 54 7d 78 69 fe fa 15 f1 34 37 7f ff 6a 48 38 1a 63 c0 31 54 3e 0d 4a 3c 74 5e fb 49 76 ca 59 7b 5d bb 7c 7a dd 96 b0 75 ce 53 22 b3 de f0 a1 2c fb db ee 74 13 31 9f 8b df f9 c1 01 f8 21 9a a9 2f 3e 92 7d 93 1b 80 50 01 a6 12 d2 92 90 6b 1b a2 4f df 78 d2 08 c8 0e 38 44 1d a9 b7 45 fa aa 04 50 9f a1 66 22 2d 27 02 ed 08 cd ef cc 4d 44 5a 5d b0 9c 72 80 0a b5 a6 e3 0f 00 98 4b 42 87 83 cc 2f c2 11 eb e5 cf 3f d0 77 57 f9 cf 71 c9 a1 46 3d 8b e0 b5 83 72 11 e4 73 39 87 69 73 9b 2f ec 2f 29 53 cd e5 0e 5d 44 92 7e 5b 00 d4 47 1c 02 9e 54 2e b0 50 a4 55 20 57 a8 6e ee 7c 78 7b f6 51 8f 40 42 4c a7 85 1e 83 1c 12 1b de fe a9 80 48 bd dd e1 69 48 ee 22 bd ca 41 12 31 53 59 81 a9 d4 32 50 7e c5 Data Ascii: ,'!+Q+zdT}xi47jH8c1T>J<t^IvY{]\|zuS",t1!/>}PkOx8DEPf"-'MDZ]rKB/?wWqF=rs9is//)S]D~[GT.PU Wn\|x{Q@BLHiH"A1SY2P~
2024-03-28 13:33:45 UTC	3842	IN	Data Raw: 91 90 19 d3 45 f3 72 8f 21 d5 e4 0c 79 9a 4f 10 48 66 a8 4e a4 db e3 4b c1 87 72 bb 6d 34 d5 3e d9 cc 55 c8 ee 9c a4 a6 95 b9 d5 17 33 33 2c e8 70 fb 44 11 ed bb 2c 48 eb 8c 92 a6 b8 a8 8a e5 0a 9f 59 31 be e5 8c 34 65 74 1e 1c 19 75 de 81 31 86 b5 fe 29 4d 81 0b 7b 6d e1 fe 15 2e 1f 3e ef ec 93 cf 31 d1 93 93 0c 4e 1f 1b ff a4 f6 da 09 9c d7 b5 ee c9 6b 67 87 b8 3c 9d ce 19 2e 03 e2 e2 f1 42 df df f1 2b 2b 86 2b a8 9a 25 10 da a6 5a 4e ee 79 00 b9 f3 53 d2 6d 63 74 4b d1 35 fc e2 22 6c e8 e9 c0 6c bf f5 8e a0 23 c0 d8 95 3b 3d eb 13 df e7 53 29 ef 2b 5b 5d c9 12 0c 9e 8a 33 00 52 25 5a b7 87 89 f1 16 cb 67 4f 25 77 f7 16 52 dc ae f6 b1 c2 c6 4b c1 41 51 e7 9d 50 3f d3 0e 55 45 ba 19 14 a8 a5 de 1f f7 36 09 17 16 76 51 ca f7 b1 a0 7c f1 b4 0f 5d ed 79 28 Data Ascii: Er!yOHfNKrm4>U33,pD,HY14etu1)M{m.>1Nkg<.B+++%ZNySmctK5"ll#;=S)+[]3R%ZgO%wRKAQP?UE6vQ\|]y(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49782	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:47 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:33:47 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:33:47 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 0f56b547-f01e-005d-4db5-8059b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133347Z-8dg9tgt0957m345b12n5h83h1n0000000190000000016ye7 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:33:47 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49785	173.222.162.64	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:33:47 UTC	2256	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900C4F3 X-BM-CBT: 1696488253 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581D X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900C4F3 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; CortanaAppUID=2020E25DAB158E420BA06F1C8DEF7959; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1
2024-03-28 13:33:47 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-03-28 13:33:47 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 38 31 43 36 31 45 30 39 34 39 38 44 34 31 43 43 39 37 43 44 42 42 41 33 35 34 38 32 34 45 44 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 33 35 31 41 41 38 32 41 45 39 30 43 34 36 36 39 39 46 35 42 31 46 45 33 34 32 42 45 37 45 31 30 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>81C61E09498D41CC97CDBBA354824ED1</CID><Events><E><T>Event.ClientInst</T><IG>351AA82AE90C46699F5B1FE342BE7E10</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-03-28 13:33:48 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 928DA0499646498EBA80A69EBFE1F9C0 Ref B: LAX311000108035 Ref C: 2024-03-28T13:33:48Z Date: Thu, 28 Mar 2024 13:33:48 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.40a6dc17.1711632828.6301e21d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49787	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:11 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:12 UTC	811	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:12 GMT Content-Type: application/x-javascript Content-Length: 1664 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:16 GMT ETag: 0x8DC2E5A2A09A4B0 x-ms-request-id: 1f91eb77-e01e-003c-03c8-803096000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133412Z-0f5z7wuvy52ur5ga9ctcv4kcmn0000000130000000009z3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-03-28 13:34:12 UTC	1664	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e5 57 ed 73 da 36 18 ff de bf 42 f1 3e 00 8d 6d de 42 02 b4 ec ae 4d d2 25 5d d3 70 81 75 b7 0b 39 4e d8 02 2b b1 25 9f 24 43 58 c2 ff be 47 c2 06 4c 48 97 b6 b7 bb ed 96 bb 60 90 9e 97 df f3 f2 7b 24 97 5f ef bd 42 af 91 f3 f2 3f d4 eb bf bb ea a3 cb 0f a8 7f 76 7e 75 82 ba f0 eb 0f f4 f9 b2 7f 7e 7c fa 72 3b da a9 fe ef 07 54 a2 31 0d 09 82 e7 08 4b e2 23 ce 10 17 88 32 8f 8b 98 0b ac 88 44 11 7c 0a 8a 43 34 16 3c 42 2a 20 28 16 fc 96 78 4a a2 90 4a 05 4a 23 12 f2 19 2a 82 39 e1 a3 2e 16 6a 8e ce bb 25 17 ec 13 b0 46 27 94 81 b6 c7 e3 39 7c 0f 14 62 5c 51 8f 20 cc 7c 63 2d 84 1f 4c 12 94 30 9f 08 34 0b a8 17 a0 0b ea 09 2e f9 58 21 41 3c 42 a7 e0 44 26 b0 9e 77 61 23 2c 08 92 44 a1 31 17 2a 58 e2 70 51 4f 4b a6 56 a5 71 b3 Data Ascii: Ws6B>mBM%]pu9N+%$CXGLH`{$_B?v~u~\|r;T1K#2D\|C4<B* (xJJJ#9.j%F'9\|b\Q \|c-L04.X!A<BD&wa#,D1XpQOKVq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49788	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:12 UTC	667	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:12 UTC	805	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:12 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4963155C x-ms-request-id: 78755b06-901e-0023-3fb9-8009ab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133412Z-t9vsm9ye0p0m52wptt8ghcwsb40000000170000000018h6f x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:34:12 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49789	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:12 UTC	667	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:12 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:12 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F496CFFA1 x-ms-request-id: ed99a4ef-e01e-0000-41c8-80e59e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133412Z-7p9ynpkcph6n76wrt0636hgym8000000018g000000006gda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-03-28 13:34:12 UTC	254	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49790	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:13 UTC	422	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:13 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:13 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4963155C x-ms-request-id: 78755b06-901e-0023-3fb9-8009ab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133413Z-d0fkp5dyad1fx3g6v1mv45h328000000018g000000007y0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:34:13 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49791	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:13 UTC	422	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:13 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:13 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F496CFFA1 x-ms-request-id: ed99a4ef-e01e-0000-41c8-80e59e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133413Z-1fd1t3etsd23b761kk3dh8dm38000000011g00000000prae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-03-28 13:34:13 UTC	254	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49794	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:16 UTC	617	OUT	GET /shared/5/js/reset-password-signinname_en_8qvvLKBP0Aes1nPeyZ0lbw2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:17 UTC	800	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:17 GMT Content-Type: application/x-javascript Content-Length: 161862 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 21 Mar 2024 14:24:57 GMT ETag: 0x8DC49B2AF695BD1 x-ms-request-id: 98fdf983-c01e-003e-0814-816692000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133416Z-x67sv75c354b335e6u6f3msdew0000000170000000008u5w x-fd-int-roxy-purgeid: 67501246 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-03-28 13:34:17 UTC	15584	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 6d 77 d3 48 b3 28 fa fd fe 8a c4 97 95 25 ed 74 8c 9d f0 2a a3 f1 01 92 0c cc 00 61 08 cc 0c 93 27 27 4b b1 db 89 c0 96 8c 24 27 84 c4 ff fd d6 4b bf 4a 72 80 67 9f 7d ce be 87 b5 88 5b ad 56 77 75 75 75 77 55 75 55 f5 dd ff 58 5f db cf 8b b5 69 3a 92 59 29 d7 d2 6c 92 17 b3 a4 4a f3 6c 6d 3e 95 09 64 95 52 ae 15 b2 94 d5 d6 3c 29 cb cb bc 18 6f 95 e9 59 96 66 59 32 93 27 32 eb 7e 2a bb af 5e 3e df 7b 73 b8 d7 ad be 56 6b ff 71 f7 ff 59 9f 2c b2 11 d6 11 84 d7 17 49 b1 26 45 25 32 51 88 3c be 7e fc 70 bb f7 20 32 ef e9 4d 78 dd 59 60 43 55 91 8e aa ce 00 bf 28 e2 2c 78 bc f3 e8 5e 88 df 8c ce d3 e9 f8 79 9e 55 f2 6b f5 fe 6a 2e cb 68 bd 27 46 f6 b9 f6 48 af c7 72 92 2c a6 d5 db 22 9f f3 73 5a ce a7 c9 d5 1b 80 19 1f cf Data Ascii: mwH(%ta''K$'KJrg}[VwuuuwUuUX_i:Y)lJlm>dR<)oYfY2'2~^>{sVkqY,I&E%2Q<~p 2MxY`CU(,x^yUkj.h'FHr,"sZ
2024-03-28 13:34:17 UTC	16384	IN	Data Raw: a7 98 0b df bf c5 68 4f 1d b1 dd 8b 30 08 57 c9 90 6c 3f b4 48 db d9 26 74 ed ec 60 d9 33 b4 bd 17 3b f7 38 cd 68 d8 b9 8f 2d 02 33 b6 03 ed bd c8 67 f8 cd 43 0f b3 3b 8f 1c cc ee 3c f6 d1 7a af e7 21 f5 1e d4 f6 32 2b 25 da 5a dc 7b 60 f1 db c7 3e ee f7 31 01 90 ec 6f 63 02 c0 d8 df c1 04 7c b3 7f 0f 13 f0 c1 fe 7d 4c 00 00 fb 0f 30 01 4d ef 3f c4 04 34 bb ff 08 51 05 ed ed 3f c6 44 1f 2b ec 61 8a aa c6 ba b7 b1 ee 3e 56 7e 0f 2a 7f b3 98 31 3e fa 08 95 3b 54 db db f0 1a 55 84 30 2c 89 37 13 80 ba eb 5a 1c 22 79 4d ff 79 7e 44 cf e8 c9 82 bf c4 f1 79 03 ed dd f5 a2 96 09 7b 48 69 95 38 1c 61 55 c6 34 bb c2 a1 1a f5 a8 ed 38 51 d6 8e d4 b5 3e d7 ea f6 b9 ca 54 01 87 1f 1d d3 1d f2 0e 5c 51 07 3a ab 5d 28 ff 7d 7d 60 01 4c 57 a2 34 3e 7c 50 b9 5a 4f a8 17 Data Ascii: hO0Wl?H&t`3;8h-3gC;<z!2+%Z{`>1oc\|}L0M?4Q?D+a>V~*1>;TU0,7Z"yMy~Dy{Hi8aU48Q>T\Q:](}}`LW4>\|PZO
2024-03-28 13:34:17 UTC	16384	IN	Data Raw: 8f ac f2 9e 30 b8 28 62 e3 4d ae ea b5 c5 64 19 ac bc 9d e3 48 39 7a 58 77 cd 9f 66 de 95 6a a7 56 94 83 d5 35 6c c6 73 73 bb 9a 3f 35 5a fd 21 bf 3a 9d ea c7 3c 6f 59 a9 18 01 d0 90 27 08 e0 da 50 61 e5 5d ea 6d 3d 63 e6 fa 56 56 ac 29 64 a3 c2 b9 9a 35 7e 5c 9a b1 74 a5 d1 fb 87 70 6d 63 a4 d7 fa 20 59 d9 c3 b6 45 0a 1b 75 30 6e 2d 4d 40 25 a1 be fc c0 0b 77 45 42 25 6f 54 9a 28 e9 d8 e8 8c 6c 91 a2 03 0c 4e da 63 67 55 bf 92 ea 58 ce 04 46 83 13 8a 8a 04 7b 46 7f 25 52 d7 bd 4e 07 21 25 4f 53 5c a5 48 d7 66 59 d5 8c 63 a8 66 24 fb 7b 32 2f 29 28 95 10 57 75 bc 7b 46 45 eb ff 0d 36 1b b6 4a d3 d9 13 b9 d1 61 3f 53 4f 0e df b6 a5 05 19 cb 9f 37 69 50 47 a2 ad 75 b3 a9 e1 2a d3 5a d0 f3 a9 e7 7a 2f 1a e2 ed 8e f2 27 7d 4f 8f 46 eb 48 15 22 30 d4 a6 3d a3 Data Ascii: 0(bMdH9zXwfjV5lss?5Z!:<oY'Pa]m=cVV)d5~\tpmc YEu0n-M@%wEB%oT(lNcgUXF{F%RN!%OS\HfYcf${2/)(Wu{FE6Ja?SO7iPGu*Zz/'}OFH"0=
2024-03-28 13:34:17 UTC	16384	IN	Data Raw: 3b 7b 9c 0b 23 7b cf a8 49 a9 16 5b 71 0a 88 ab 50 60 d6 ab 88 85 29 71 2b 33 ee f7 8c 71 83 7c 55 89 0f e6 7c 04 57 3e 06 19 71 12 30 27 5d 09 63 ad 0f 9e c1 47 d6 4d 7a 28 21 fc 6b 1c 62 cd 5d 44 82 0e 50 02 79 79 20 4b c0 d4 bb 49 dd 67 03 8a 33 e9 89 18 94 1e ff 23 7e f1 67 fd cd 55 21 27 bc ba 38 0f 3c 19 0b eb 38 61 9b 4d 8e 6d 36 39 b2 79 86 f8 25 a7 00 8d 09 fe dc 42 6d 01 fc dd 41 6d 01 fc 7d 86 da 47 72 5a 61 e7 42 b9 7a 27 9c 09 af f1 f9 2e ca f8 f0 77 0f 05 fc dc dd dd f2 50 c4 67 c7 70 8d 05 72 ce f0 2f 7c ea 08 ff 42 df 1f f0 2f 7c eb 9b 50 ba be c2 df f0 ad 03 fc 0b df fa 84 7d f7 e0 c5 af 40 07 78 74 ba c3 f6 83 03 54 dd 1e 7f fa f8 f9 d5 a7 0f 1f d9 21 fc fe 78 f0 f3 c1 ab 4f 87 1f de 9f 1d fc 76 f0 fe 13 7b 0b f7 8e 3f bf 7c f5 76 ff f8 Data Ascii: ;{#{I[qP`)q+3q\|U\|W>q0']cGMz(!kb]DPyy KIg3#~gU!'8<8aMm69y%BmAm}GrZaBz'.wPgpr/\|B/\|P}@xtT!xOv{?\|v
2024-03-28 13:34:17 UTC	16384	IN	Data Raw: 6d 11 e8 8a ba 3b ac ee ee ba 88 68 f3 c6 78 25 6d 5e b6 23 3a db 14 19 5b fc 59 b1 c9 13 da 22 a1 29 76 43 23 1b ff 33 15 e3 c0 62 17 4b fd 0c 61 e5 02 ca a0 15 df 57 d4 e7 1e a8 25 68 17 a8 e8 e7 67 35 15 f0 3a 4c c1 7e 5a 6b da bf a6 e6 06 39 e5 ec f9 d5 96 d3 69 f0 60 d3 f1 2d 55 46 e9 53 2a 9e df 37 4d 58 31 38 ef d6 f2 f2 4e fa a8 dd de b4 5e 66 86 99 d8 bc 3d 6e dd de 42 60 27 b5 1e b7 51 21 04 25 8e 32 69 1f 05 11 6e d6 6a b0 ba b0 fc f2 f2 12 e4 7f d4 59 bf bd dd 49 1f 37 1b 2d fa ed ae 51 23 ab 5d fa 5a 6b d0 d7 c6 9a b5 29 db a3 a5 84 eb ac 6a 42 be e5 e5 76 cb a5 de b1 10 d6 ac 0e e3 d7 6c 18 d4 69 8b 2f b0 9d 94 af 30 df 91 cb b5 30 ad ed 0e b3 27 df de 60 bf bf d2 08 37 8f 63 df 3b db 14 73 de 69 ba 22 d1 d7 d2 36 5a 0e 36 39 2f d9 0e 1f 54 Data Ascii: m;hx%m^#:[Y")vC#3bKaW%hg5:L~Zk9i`-UFS*7MX18N^f=nB`'Q!%2injYI7-Q#]Zk)jBvli/00'`7c;si"6Z69/T
2024-03-28 13:34:17 UTC	16384	IN	Data Raw: 6c 52 2a f8 a1 58 6a 36 53 fb 90 06 d2 30 d7 bf 30 34 d7 6f d4 f5 c5 44 b3 46 fc ea 81 0c 0f 6c 59 d6 b8 8d 6b 54 32 b7 38 a4 04 67 e5 e4 bb 8a 69 c2 5e 4b c4 8c e8 4d ac 09 35 44 93 35 2e 39 56 2b 78 a4 83 74 1a 5d aa 5e 78 ab 5e c7 19 f5 13 aa d9 20 26 a2 31 5b 67 5c ea 49 df 36 55 eb d2 91 32 89 a1 37 01 51 83 54 ad 69 67 a9 45 78 ce 20 42 b2 52 d8 0a a8 f9 b3 13 65 1e 75 d1 84 b5 c0 55 c1 e4 12 4e 93 9d c0 45 ee 71 7e 53 30 5d 90 66 e7 15 79 46 21 5b ec 95 7e 8b d1 da b6 06 dd dc d5 0d 3f 04 9b f2 a5 0a 3d af 0b b6 78 d1 65 8f 7c 12 86 bf f6 49 e8 dc cf 49 18 4e 74 12 f6 1f f8 24 0c 1f e9 24 ec 3f c2 49 d8 66 27 61 18 a2 06 07 96 d9 29 38 90 98 85 9f b0 6b 56 2f e0 95 43 86 d8 ef f4 3d 76 ce c0 a8 b8 96 83 df bb c8 16 03 3a 2b 37 e5 7a a2 e8 a0 e1 b6 Data Ascii: lR*Xj6S004oDFlYkT28gi^KM5D5.9V+xt]^x^ &1[g\I6U27QTigEx BReuUNEq~S0]fyF![~?=xe\|IINt$$?If'a)8kV/C=v:+7z
2024-03-28 13:34:17 UTC	16384	IN	Data Raw: ee be 9d 5f 67 f7 6d ea 16 6d f3 6f b0 68 9b 13 2e 1a 71 5c d1 b3 de f7 ac 77 bd a2 f5 dc e8 49 7e f8 36 7a b6 86 93 e4 f7 8a 46 4c 7e 64 13 c4 15 cd a2 3c 53 5c d3 c3 ae d7 c6 2d 4d a2 9e 71 15 d7 98 ca ae b5 6d 01 7f c2 7f a7 53 b8 c8 fb d6 12 0d 5a 64 64 a9 12 ea a9 3c 50 8f 58 c7 41 a5 ef 7b b5 3e e9 bf 14 d3 fe 4d 51 4e 3e d3 69 d6 4f 45 59 69 38 db 34 e3 db a2 8c f8 c8 22 cd f6 b5 28 1b 2a 8c d3 6c 1f 8a b2 c5 1e 3e 2d 48 33 7e 2c ca 38 ec 8f 94 31 bf 2e cc 88 02 79 9a cf 1b 14 75 d0 e9 4a 56 e3 52 ae 27 d5 27 18 03 99 de f1 c1 29 60 93 75 21 9e 9f a0 30 7c bf e3 b3 25 2d 56 70 c7 0a 70 16 51 89 6e e6 6d 9b d7 3e ec af ad 1c 7d 5e 3a d8 38 de 59 db 3d fa bc b2 bd 77 b8 b5 bb f1 79 f9 60 69 65 8d 18 32 97 e6 a0 76 bb 6b 3b fb 47 1f 45 0e 62 dc ac 82 Data Ascii: _gmmoh.q\wI~6zFL~d<S\-MqmSZdd<PXA{>MQN>iOEYi84"(*l>-H3~,81.yuJVR'')`u!0\|%-VppQnm>}^:8Y=wy`ie2vk;GEb
2024-03-28 13:34:17 UTC	16384	IN	Data Raw: 23 84 c1 ac 5d 0c 9c fb 04 6d 99 e9 19 86 b6 4d 23 4d 26 a8 1d 0c 2b cb ae e7 75 2a 67 ba 27 00 e1 7b 68 f0 60 90 06 b4 d7 18 e4 39 06 e5 52 76 1a 75 11 a4 a3 ec b4 0f d3 ee c2 3d 33 c1 25 38 03 be df eb cd 5d b8 72 e8 83 bc 41 8d 60 b3 67 d9 64 e4 5a a1 fc c4 f4 83 56 6b 8e 9c 3b da 2d bb 96 67 fc c2 dc 6f 81 02 f6 20 21 c3 53 0c 04 e4 21 ac 60 d0 e3 4b 7a 83 79 48 55 f6 54 62 5d 15 62 bf b3 62 8d b1 4c c3 0a c0 85 c5 de 59 38 8e 5e 01 1a 8e 5f 43 19 d7 ea 61 da 18 d2 22 4c c3 37 26 5d 52 0e 8e 97 11 23 5c d8 b7 b8 95 6e e7 da 07 d5 59 0d d3 81 4c 6e 76 14 74 27 83 13 18 e4 f9 30 99 c5 cc c0 47 18 03 88 ee d7 24 e6 85 f2 60 c4 2f 5d 6e 40 d3 9b 64 a7 f1 71 14 85 e3 8c 1c 57 69 44 b6 be 8e ca d7 25 86 06 ef ae 7e 92 00 cf a1 66 1f 19 97 89 4a 36 27 1f 73 Data Ascii: #]mM#M&+u*g'{h`9Rvu=3%8]rA`gdZVk;-go !S!`KzyHUTb]bbLY8^_Ca"L7&]R#\nYLnvt'0G$`/]n@dqWiD%~fJ6's
2024-03-28 13:34:17 UTC	16384	IN	Data Raw: df e1 23 ae d2 b3 ac 11 a7 53 ae e5 dc 3b 0b 97 7f 9f 56 f3 b3 83 10 cd 2c ec 7b cb 99 87 b2 8c 21 75 13 ba 19 12 1c f9 ff 11 62 23 ef 68 79 83 d1 28 e3 6d 18 6f 11 74 00 99 a3 e3 f6 c7 71 19 4e bc 2e 8c da a0 a4 a0 c9 da a9 e6 a8 ca 88 67 d1 78 3e b3 8d a0 f4 f0 12 34 5c 37 e6 3f 54 d8 ab bd ef aa e5 0d 18 57 58 40 1b 6c fd 04 c0 08 55 74 40 ea ce 43 09 58 c9 ee 70 37 9b bb 96 15 26 5f 3f cd 41 b5 2b 6f b8 df 85 cb d9 0d d7 a9 0d eb d4 a5 75 fa 26 bd 74 6c 58 6e 31 68 9a 2a 30 62 0f 15 a4 f1 f9 d8 75 d1 9a 7c 08 12 1d a8 a1 b4 34 f1 ba 12 c9 c6 81 30 20 da 9f 4d 12 92 81 7c a6 a0 89 99 7b 8e 01 52 32 e4 07 6d 4e 47 82 44 cf 8e 05 56 1e 59 d1 a0 16 65 56 dc f0 ff 51 5e 5b d3 f1 9f 37 de 47 ed 1a 95 8a b7 aa ae 38 6f 55 5f 41 00 2a b5 e1 0a 76 10 2f 80 b5 Data Ascii: #S;V,{!ub#hy(motqN.gx>4\7?TWX@lUt@CXp7&_?A+ou&tlXn1h0bu\|40 M\|{R2mNGDVYeVQ^[7G8oU_Av/
2024-03-28 13:34:17 UTC	15206	IN	Data Raw: 3e 15 3b c1 03 df 9b 49 3b 53 19 28 8e b3 df 0f a7 38 a6 2d a9 61 5a a2 cc b8 4a cd ca 8f c3 d4 34 5a 5c 78 a0 b4 4d 3f e5 ad 48 15 69 dd 74 8d c9 8a 44 06 3f 63 f1 f1 eb 1f 91 68 21 5f 0a c9 e2 7f 91 00 2c f1 bd 08 a8 66 20 c6 8b a1 bb 2a 97 b2 c0 4f 05 65 a9 00 ec 02 56 3a 43 b2 07 97 57 bc 08 ae 0c a8 1c 9a c4 8b 45 b2 63 bb 51 42 fe 55 d3 78 69 be 09 d3 11 e9 99 82 65 86 6e 76 0b c5 d8 94 30 2c 46 95 72 26 9e 90 6c 22 33 09 89 19 64 46 16 55 4a 89 53 18 a8 79 fd 07 36 7e a1 a2 af 86 f0 64 d9 a7 91 ea c8 f7 3a 59 95 54 93 38 a9 51 4e 5c 1a f3 4b 49 f5 4c 4d e3 a5 f6 38 d2 56 18 e9 c8 8a 8b 2a a5 ae b8 47 e6 4b 4e 65 65 fe 2a dd 25 4b e7 8e 94 28 a9 84 50 86 4e 21 25 f7 55 d9 42 70 f5 20 64 68 09 98 21 bc f4 24 75 52 d6 13 84 7e a9 a6 b0 12 cd 4e a8 a8 Data Ascii: >;I;S(8-aZJ4Z\xM?HitD?ch!_,f OeV:CWEcQBUxienv0,Fr&l"3dFUJSy6~d:YT8QN\KILM8VGKNee*%K(PN!%UBp dh!$uR~N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49796	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:18 UTC	611	OUT	GET /shared/5/chunks/oneds-analytics-js_c53074e74ebeb8e140d6_en.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:19 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:18 GMT Content-Type: application/x-javascript Content-Length: 32748 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 06 Feb 2024 16:58:54 GMT ETag: 0x8DC2734E6AF6F81 x-ms-request-id: 24b1f59f-e01e-0054-1f14-812aa5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133418Z-up4a1kuqyp0xt20g7wmkubycb80000000120000000019a0w x-fd-int-roxy-purgeid: 67501246 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-03-28 13:34:19 UTC	15585	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 69 77 db 38 b3 3f f8 7e 3e 85 c4 e9 f1 25 db b0 22 39 4b 77 a4 30 3a 89 e3 74 9c cd ee d8 59 ba dd be 3e b4 04 d9 6c cb a4 42 52 5e 62 e9 bb 4f fd 0a 0b 41 8a 4e f2 9c ff 9d 79 71 fb 74 2c 62 21 08 14 0a 85 aa 42 55 e1 de af ed d6 cb 34 6b 4d e3 91 4c 72 d9 8a 93 49 9a 5d 44 45 9c 26 ad d9 54 46 94 95 4b d9 4a 13 39 ce 37 a2 24 9a de 14 f1 28 df f8 37 3f 1e 3d bc df fd ed 81 a4 ff 4f e4 c9 ef b2 f7 a0 3b 7e 74 2c 93 ce bf 79 e7 ed ce d6 f6 fb fd ed 4e 71 5d b4 7e bd f7 7f 79 73 b4 52 64 f1 a8 f0 06 7e 2e a7 93 ce 95 3c 99 45 a3 f3 ad b3 79 72 7e 7c 91 c7 63 99 14 71 71 73 9c c7 f9 9c d2 51 f8 53 b5 16 8b c3 a3 a0 33 9b e7 67 fe e1 e1 e6 c3 de 91 b8 7d d0 7b f4 f8 51 7f 32 4f 46 18 82 9f 08 29 8a e0 b6 e8 64 be 0c 44 d1 Data Ascii: iw8?~>%"9Kw0:tY>lBR^bOANyqt,b!BU4kMLrI]DE&TFKJ97$(7?=O;~t,yNq]~ysRd~.<Eyr~\|cqqsQS3g}{Q2OF)dD
2024-03-28 13:34:19 UTC	16384	IN	Data Raw: 06 af 71 1f 5f ed 9d 5c f7 74 ef 4c df cc 9e 34 fc 3b 3e c4 89 e7 91 7d e8 e3 6f a5 79 ea 98 eb ae 62 e3 88 d0 00 9e 6e f4 86 f4 db 77 72 8f 75 ee b1 a7 4e 0a 98 cd 48 c3 1a 17 45 db 40 3a 9b 4f 89 80 ef ce 60 76 4b 44 73 ff 26 27 f9 61 27 99 a4 06 ce bc e1 15 a1 09 a7 cf 1c a8 8d 8a 02 53 37 27 e1 79 30 3f 2d 73 10 b0 b4 52 45 65 a8 eb 33 32 c3 fd b8 bd aa 5e aa 26 53 f7 52 35 33 8b 70 46 e5 49 eb 30 03 ab 00 4d 09 1b 6a a3 e8 a4 ea ee e6 4e 5e 5e 4d a2 41 43 79 95 7a ee 8c 66 55 5e 8b c4 48 e5 6a 9c 92 9c 77 89 58 7b 29 6d ba 29 84 e3 84 b7 7a f5 8b e6 53 15 a3 24 ee 10 6e 15 b8 43 93 e3 c6 aa b7 9d 4c 92 18 23 22 8c f6 6a 3a e7 3e ba f2 ec 5e 9d 56 13 3f a4 2c 6b d3 1f 73 27 dd 3b 38 13 6d 43 d7 31 d7 d3 eb 53 9c 5d 1a 0b 2e de 1d 80 53 f9 1a 66 b8 02 Data Ascii: q_\tL4;>}oybnwruNHE@:O`vKDs&'a'S7'y0?-sREe32^&SR53pFI0MjN^^MACyzfU^HjwX{)m)zS$nCL#"j:>^V?,ks';8mC1S].Sf
2024-03-28 13:34:19 UTC	779	IN	Data Raw: 8d 4e d2 74 37 4d ae 65 87 6f 0a 9d d0 23 68 73 00 44 ec d5 51 98 20 bc e7 9b 12 e5 15 1f b0 36 af 6a e3 92 d8 56 9a f4 aa ba 33 28 50 a3 5d d3 2f 5d f5 cd 65 82 83 49 20 2e 8b 4e 00 65 1f c0 12 ca d5 a6 be 53 5c f9 2d ce 87 40 5b 73 52 a1 d5 96 b3 ef 56 0e 61 35 b5 d5 e2 0e 6d 68 8d 09 5e 3b 86 37 d8 80 96 e6 34 1b 99 d9 d8 b0 c4 39 bf 68 24 24 57 ad 03 03 5f 07 cd 14 12 5a a5 f5 d9 19 98 71 d6 ac d3 ca 39 49 5e 5b 37 c8 01 f1 6e 70 24 f9 da d7 f0 4a e1 d7 9d e4 2a 3d 48 4e e9 57 0c e3 d0 92 70 82 5d 73 6c e4 6b 5a 0b db 47 c3 aa a3 65 38 4e e2 f1 18 ee ed 65 16 8f 81 10 09 07 38 95 69 06 08 d4 9e eb ac 88 08 dd 4a 8b af 46 24 1c 6d c4 e8 75 cd 97 cf 6f f8 56 f7 2d f6 59 a6 40 ca 7e a3 59 c0 1e 58 c7 0d a2 be 6c 18 e7 37 ac 6b cf 98 78 0b c8 f9 f4 76 9b Data Ascii: Nt7Meo#hsDQ 6jV3(P]/]eI .NeS\-@[sRVa5mh^;749h$$W_Zq9I^[7np$J*=HNWp]slkZGe8Ne8iJF$muoV-Y@~YXl7kxv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49798	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:18 UTC	634	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:18 UTC	807	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:18 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: dcd7b3f2-301e-0039-10a3-80b79c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133418Z-d0fkp5dyad1fx3g6v1mv45h328000000015g000000008zxm x-fd-int-roxy-purgeid: 67501246 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:34:18 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49797	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:18 UTC	621	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:18 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:18 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 2315258d-101e-006f-30f4-802ea3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133418Z-uay40fh5wt1nhf3c3qzdbxvzps000000012000000001c224 x-fd-int-roxy-purgeid: 67501246 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:34:18 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49800	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:18 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:19 UTC	807	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:19 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: dcd7b3f2-301e-0039-10a3-80b79c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133419Z-pqtck5q2et6kvek514ag73krts000000010g000000011t8v x-fd-int-roxy-purgeid: 67501246 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:34:19 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49801	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:19 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:19 UTC	806	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:19 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 2315258d-101e-006f-30f4-802ea3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133419Z-8dg9tgt0957m345b12n5h83h1n000000014g00000001835e x-fd-int-roxy-purgeid: 67501246 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:34:19 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49802	13.107.246.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:19 UTC	600	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:19 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:19 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Wed, 27 Mar 2024 20:42:45 GMT ETag: 0x8DC4E9E75179885 x-ms-request-id: b999ebdf-e01e-0089-04a3-8052fd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133419Z-bx3x7fsbw56ut00yp1tg6gurus000000018g0000000192xt x-fd-int-roxy-purgeid: 67501246 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:34:19 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-28 13:34:19 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49803	13.107.213.40	443	5836	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:34:20 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:34:20 UTC	764	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:34:20 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Wed, 27 Mar 2024 20:42:45 GMT ETag: 0x8DC4E9E75179885 x-ms-request-id: b999ebdf-e01e-0089-04a3-8052fd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240328T133420Z-8dg9tgt0957m345b12n5h83h1n000000010g000000019f09 x-fd-int-roxy-purgeid: 67501246 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-28 13:34:20 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-28 13:34:20 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Target ID:	0
Start time:	14:33:23
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:33:26
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,694522603986261116,3156022079628551790,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:33:29
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hillsclerk.securityeducation.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hillsclerk.securityeducation.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://hillsclerk.securityeducation.com/