Edit tour

Windows Analysis Report
https://blee58.com/bl/ax/l?user=kenrod@me.com

Overview

General Information

Sample URL:	https://blee58.com/bl/ax/l?user=kenrod@me.com
Analysis ID:	1417168
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish54

Phishing site detected (based on image similarity)

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Submit button contains javascript call

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,13815014591697100388,13355120804948401002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blee58.com/bl/ax/l?user=kenrod@me.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://blee58.com/bl/ax/l?user=kenrod@me.com

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://dacreativeagency.com	Matcher: Template: microsoft matched with high similarity
Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish54

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: Iframe src: https://bf2b00c1-12461a6c.dacreativeagency.com/Prefetch/Prefetch.aspx
Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: Iframe src: https://bf2b00c1-12461a6c.dacreativeagency.com/Prefetch/Prefetch.aspx
Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: Iframe src: https://bf2b00c1-12461a6c.dacreativeagency.com/Prefetch/Prefetch.aspx

Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: Number of links: 0

Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: Title: Create account does not match URL

Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();

Source: https://blee58.com/bl/ax/l?user=kenrod@me.com

Sample URL: PII: kenrod@me.com

Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: <input type="password" .../> found

Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com	HTTP Parser: No favicon
Source: https://bf2b00c1-12461a6c.dacreativeagency.com/Prefetch/Prefetch.aspx	HTTP Parser: No favicon

Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: No <meta name="author".. found
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: No <meta name="author".. found

Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /bl/ax/l?user=kenrod@me.com HTTP/1.1Host: blee58.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html%7D?i=kenrod@me.com HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.1b019d38.css HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/bundle.js HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.bdf2bc27.js HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /im/shar2.jpg HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /im/spina.gif HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/manifest.json HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/favicon.ico HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /im/shar2.jpg HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /im/spina.gif HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/favicon.ico HTTP/1.1Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/shhsdhgd/kenrod@me.com HTTP/1.1Host: reesecontractorservice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: reesecontractorservice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://reesecontractorservice.com/rec/shhsdhgd/kenrod@me.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?username=kenrod@me.com HTTP/1.1Host: onlines.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://reesecontractorservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?username=kenrod@me.com HTTP/1.1Host: onlines.dacreativeagency.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://onlines.dacreativeagency.com/?username=kenrod@me.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js HTTP/1.1Host: 25a87cd0-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onlines.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1Host: onlines.dacreativeagency.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://onlines.dacreativeagency.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="Sec-WebSocket-Key: oFQd6iEKsmCv+OW0Kf6w+g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /?username=kenrod@me.com&sso_reload=true HTTP/1.1Host: onlines.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://onlines.dacreativeagency.com/?username=kenrod@me.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: onlines.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/?username=kenrod@me.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onlines.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onlines.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onlines.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1Host: onlines.dacreativeagency.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://onlines.dacreativeagency.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1Sec-WebSocket-Key: jucC0t3NBHgD1G7Mx7/5IQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: bf2b00c1-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1Host: onlines.dacreativeagency.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://onlines.dacreativeagency.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: lzXkvYAsw8kmr4RJ+nGw+Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1Host: onlines.dacreativeagency.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://onlines.dacreativeagency.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: Jp6UZERReuM6vt4x2R0t1w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlines.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1Host: onlines.dacreativeagency.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://onlines.dacreativeagency.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: /yv16Z7HnI4Re91mffRSFA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fonlines.dacreativeagency.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATU5Bf37p0n77o7a8tBpqb6zlmMnPE5mWVglasYlQkbp3-BkfEFI-MkJt7s1Lyi_BSHXLDwLSZB_6J0z5TwYrfUlNSixJLM_LxHzKhqLrAIvGLhMWC24uDgEmCQYFBg-MHCuIgV6CpOxS2KLod6_Hde2crb8y6W4RSrvnaka3JohKmnV5B3al5wpFOkhUFVYGBRlV9IgFOYh2eYr4FZZJC7YY6xeaitmZXhBDahCWxMp9gYPrAxdrAzzGJnOMDJuIGH8QAvww--9eeWPfn-YvI7j1f8Oob-vm4GfsbFjqGhqVGp7gHe_pnmZvpJuebu5n7aQc6uOQWF3pVOBYEVzuW2GwQYAA2&login_hint=kenrod%40me.com&estsfed=1&uaid=8da31f269ebd451fbb6ab4c102827f89&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com HTTP/1.1Host: l1ve.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: 13d1c6b8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /signup?sru=https://l1ve.dacreativeagency.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod@me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https://a4d0aec3-12461a6c.dacreativeagency.com HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /login.srf?wa=wsignin1.0&rpsnv=22&checkda=1&ct=1711644793&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.dacreativeagency.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.dacreativeagency.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253d59AC3F6F7D3AAF66%2526opidt%253d1711644790%2526uaid%253d8da31f269ebd451fbb6ab4c102827f89%2526contextid%253dE4EA2673871E61DC%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26username%3Dkenrod%2540me.com%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D8da31f269ebd451fbb6ab4c102827f89%26suc%3Dhttps%253a%252f%252fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=8da31f269ebd451fbb6ab4c102827f89 HTTP/1.1Host: l1ve.dacreativeagency.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1Host: onlines.dacreativeagency.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://onlines.dacreativeagency.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: ExosO/J1zPmz09dDtFTk1A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /lightweightsignuppackage_I2u0h5_OVsvo48cPwiR07Q2.js?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watson_DOaS_v-h3FCKtNPQv8zSLw2.js?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1Host: onlines.dacreativeagency.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://onlines.dacreativeagency.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: EZ2yPZkLw913txCJeJ3EwQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.dacreativeagency.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.dacreativeagency.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Resources/images/favicon.ico HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /API/CheckAvailableSigninNames?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /error.aspx?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1&e=404 HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: adff02f8-12461a6c.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
Source: global traffic	HTTP traffic detected: GET /Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; MicrosoftApplicationsTelemetryDeviceId=7c3edf02-b074-4c59-802a-c98dde791472; clrc={%2219811%22%3a[%22d7PFy/1V%22%2c%22+VC+x0R6%22%2c%22FutSZdvn%22]}
Source: global traffic	HTTP traffic detected: GET /Resources/images/favicon.ico HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; MicrosoftApplicationsTelemetryDeviceId=7c3edf02-b074-4c59-802a-c98dde791472; clrc={%2219811%22%3a[%22d7PFy/1V%22%2c%22+VC+x0R6%22%2c%22FutSZdvn%22]}
Source: global traffic	HTTP traffic detected: GET /Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: signup.dacreativeagency.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; MicrosoftApplicationsTelemetryDeviceId=7c3edf02-b074-4c59-802a-c98dde791472; clrc={%2219811%22%3a[%22d7PFy/1V%22%2c%22+VC+x0R6%22%2c%22FutSZdvn%22]}

Source: unknown

DNS traffic detected: queries for: blee58.com

Source: unknown

HTTP traffic detected: POST /?username=kenrod@me.com HTTP/1.1Host: onlines.dacreativeagency.comConnection: keep-aliveContent-Length: 1139Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://onlines.dacreativeagency.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://onlines.dacreativeagency.com/?username=kenrod@me.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 28 Mar 2024 16:52:25 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Sat, 01 Oct 2022 13:16:40 GMTAccept-Ranges: bytesContent-Length: 11816Vary: Accept-EncodingContent-Type: text/html
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:52:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 1a5b22b1-bc2a-425b-aa56-65a2cd705303x-ms-ests-server: 2.1.17573.7 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:52:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: a193e572-b52f-4586-b0d0-b65f176f4700x-ms-ests-server: 2.1.17615.11 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:52:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 3b30e076-c3e2-449d-a819-128b7af66a02x-ms-ests-server: 2.1.17573.7 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:52:53 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 24E3C5259DE64B9E95B39AE1A30404BF Ref B: AMS231032604025 Ref C: 2024-03-28T16:52:52Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:52:56 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 4b9e7606-487e-467e-9c27-5cee33479102x-ms-ests-server: 2.1.17573.7 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:53:02 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 9fcb2498-a5c4-4d9a-af11-9e4e338d8502x-ms-ests-server: 2.1.17573.7 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:53:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: eead567f-2a36-4b75-a63a-d6d1df9d8602x-ms-ests-server: 2.1.17573.7 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:53:21 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: a06995b1-12bd-4910-bf66-e4eb27eb5e02x-ms-ests-server: 2.1.17573.7 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Mar 2024 16:53:34 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 3ce793bd-e9ea-458a-bf7f-8775bfd46402x-ms-ests-server: 2.1.17573.7 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_85.2.dr	String found in binary or memory: http://code.jquery.com/jquery-3.3.1.min.js
Source: chromecache_85.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_108.2.dr, chromecache_73.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@19/100@38/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,13815014591697100388,13355120804948401002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blee58.com/bl/ax/l?user=kenrod@me.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,13815014591697100388,13355120804948401002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://blee58.com/bl/ax/l?user=kenrod@me.com	0%	Avira URL Cloud	safe
https://blee58.com/bl/ax/l?user=kenrod@me.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://ns.attribution.com/ads/1.0/	0%	URL Reputation	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg	0%	Avira URL Cloud	safe
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/js/bundle.js	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	0%	Avira URL Cloud	safe
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/im/shar2.jpg	0%	Avira URL Cloud	safe
https://signup.dacreativeagency.com/API/CheckAvailableSigninNames?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/images/favicon.ico?v=2	0%	Avira URL Cloud	safe
https://signup.dacreativeagency.com/Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg	0%	Avira URL Cloud	safe
https://onlines.dacreativeagency.com/common/instrumentation/reportbssotelemetry?hpgid=6&hpgact=2101&client-request-id=d0fad997-81df-4c79-8676-b017388b3432&hpgrequestid=67f32b65-5314-454e-a809-711acbfa3e00	0%	Avira URL Cloud	safe
https://signup.dacreativeagency.com/Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1	0%	Avira URL Cloud	safe
https://onlines.dacreativeagency.com/websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y=	0%	Avira URL Cloud	safe
https://l1ve.dacreativeagency.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fonlines.dacreativeagency.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATU5Bf37p0n77o7a8tBpqb6zlmMnPE5mWVglasYlQkbp3-BkfEFI-MkJt7s1Lyi_BSHXLDwLSZB_6J0z5TwYrfUlNSixJLM_LxHzKhqLrAIvGLhMWC24uDgEmCQYFBg-MHCuIgV6CpOxS2KLod6_Hde2crb8y6W4RSrvnaka3JohKmnV5B3al5wpFOkhUFVYGBRlV9IgFOYh2eYr4FZZJC7YY6xeaitmZXhBDahCWxMp9gYPrAxdrAzzGJnOMDJuIGH8QAvww--9eeWPfn-YvI7j1f8Oob-vm4GfsbFjqGhqVGp7gHe_pnmZvpJuebu5n7aQc6uOQWF3pVOBYEVzuW2GwQYAA2&login_hint=kenrod%40me.com&estsfed=1&uaid=8da31f269ebd451fbb6ab4c102827f89&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/favicon.ico	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js	0%	Avira URL Cloud	safe
https://signup.dacreativeagency.com/handlers/Watson	0%	Avira URL Cloud	safe
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/css/main.1b019d38.css	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg	0%	Avira URL Cloud	safe
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/js/main.bdf2bc27.js	0%	Avira URL Cloud	safe
https://signup.dacreativeagency.com/error.aspx?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1&e=404	0%	Avira URL Cloud	safe
https://l1ve.dacreativeagency.com/Me.htm?v=3	0%	Avira URL Cloud	safe
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/manifest.json	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/watson_DOaS_v-h3FCKtNPQv8zSLw2.js?v=1	0%	Avira URL Cloud	safe
https://onlines.dacreativeagency.com/favicon.ico	0%	Avira URL Cloud	safe
https://signup.dacreativeagency.com/Resources/images/favicon.ico	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1	0%	Avira URL Cloud	safe
https://reesecontractorservice.com/favicon.ico	0%	Avira URL Cloud	safe
https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2	0%	Avira URL Cloud	safe
https://signup.dacreativeagency.com/signup?sru=https://l1ve.dacreativeagency.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod@me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https://a4d0aec3-12461a6c.dacreativeagency.com	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js?v=1	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/lightweightsignuppackage_I2u0h5_OVsvo48cPwiR07Q2.js?v=1	0%	Avira URL Cloud	safe
https://l1ve.dacreativeagency.com/login.srf?wa=wsignin1.0&rpsnv=22&checkda=1&ct=1711644793&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.dacreativeagency.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.dacreativeagency.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253d59AC3F6F7D3AAF66%2526opidt%253d1711644790%2526uaid%253d8da31f269ebd451fbb6ab4c102827f89%2526contextid%253dE4EA2673871E61DC%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26username%3Dkenrod%2540me.com%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D8da31f269ebd451fbb6ab4c102827f89%26suc%3Dhttps%253a%252f%252fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=8da31f269ebd451fbb6ab4c102827f89	0%	Avira URL Cloud	safe
https://adff02f8-12461a6c.dacreativeagency.com/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1	0%	Avira URL Cloud	safe
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/index.html%7D?i=kenrod@me.com	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js	0%	Avira URL Cloud	safe
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/im/spina.gif	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://25a87cd0-12461a6c.dacreativeagency.com/shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js	0%	Avira URL Cloud	safe
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bf2b00c1-12461a6c.dacreativeagency.com	209.38.240.137	true	false	unknown
reesecontractorservice.com	192.185.165.131	true	false	unknown
25a87cd0-12461a6c.dacreativeagency.com	209.38.240.137	true	false	unknown
onlines.dacreativeagency.com	209.38.240.137	true	false	unknown
blee58.com	192.185.165.120	true	false	unknown
adff02f8-12461a6c.dacreativeagency.com	209.38.240.137	true	false	unknown
l1ve.dacreativeagency.com	209.38.240.137	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
55bace4f-12461a6c.dacreativeagency.com	209.38.240.137	true	false	unknown
13d1c6b8-12461a6c.dacreativeagency.com	209.38.240.137	true	false	unknown
106bb4e9-12461a6c.dacreativeagency.com	209.38.240.137	true	false	unknown
c19d8ae0-12461a6c.dacreativeagency.com	209.38.240.137	true	false	unknown
www.google.com	142.250.31.147	true	false	high
66eaf32b-12461a6c.dacreativeagency.com	209.38.240.137	true	false	unknown
signup.dacreativeagency.com	209.38.240.137	true	false	unknown
mecom-netorgft0926682-sharepoint-com-f3.blee58.com	192.185.165.120	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/js/bundle.js	false	Avira URL Cloud: safe	unknown
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/im/shar2.jpg	false	Avira URL Cloud: safe	unknown
https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	false		unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg	false	Avira URL Cloud: safe	unknown
https://blee58.com/bl/ax/l?user=kenrod@me.com	true		unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	false	Avira URL Cloud: safe	unknown
https://onlines.dacreativeagency.com/?username=kenrod@me.com	false		unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	false	Avira URL Cloud: safe	unknown
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/	false		unknown
https://signup.dacreativeagency.com/API/CheckAvailableSigninNames?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/images/favicon.ico?v=2	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1	false	Avira URL Cloud: safe	unknown
https://signup.dacreativeagency.com/Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg	false	Avira URL Cloud: safe	unknown
https://onlines.dacreativeagency.com/common/instrumentation/reportbssotelemetry?hpgid=6&hpgact=2101&client-request-id=d0fad997-81df-4c79-8676-b017388b3432&hpgrequestid=67f32b65-5314-454e-a809-711acbfa3e00	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1	false	Avira URL Cloud: safe	unknown
https://l1ve.dacreativeagency.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fonlines.dacreativeagency.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATU5Bf37p0n77o7a8tBpqb6zlmMnPE5mWVglasYlQkbp3-BkfEFI-MkJt7s1Lyi_BSHXLDwLSZB_6J0z5TwYrfUlNSixJLM_LxHzKhqLrAIvGLhMWC24uDgEmCQYFBg-MHCuIgV6CpOxS2KLod6_Hde2crb8y6W4RSrvnaka3JohKmnV5B3al5wpFOkhUFVYGBRlV9IgFOYh2eYr4FZZJC7YY6xeaitmZXhBDahCWxMp9gYPrAxdrAzzGJnOMDJuIGH8QAvww--9eeWPfn-YvI7j1f8Oob-vm4GfsbFjqGhqVGp7gHe_pnmZvpJuebu5n7aQc6uOQWF3pVOBYEVzuW2GwQYAA2&login_hint=kenrod%40me.com&estsfed=1&uaid=8da31f269ebd451fbb6ab4c102827f89&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com	false	Avira URL Cloud: safe	unknown
https://signup.dacreativeagency.com/Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg	false	Avira URL Cloud: safe	unknown
https://reesecontractorservice.com/rec/shhsdhgd/kenrod@me.com	false		unknown
https://bf2b00c1-12461a6c.dacreativeagency.com/Prefetch/Prefetch.aspx	false		unknown
https://onlines.dacreativeagency.com/websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y=	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	Avira URL Cloud: safe	unknown
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/favicon.ico	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	Avira URL Cloud: safe	unknown
https://signup.dacreativeagency.com/handlers/Watson	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg	false	Avira URL Cloud: safe	unknown
https://onlines.dacreativeagency.com/?username=kenrod@me.com&sso_reload=true	true		unknown
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/css/main.1b019d38.css	false	Avira URL Cloud: safe	unknown
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/js/main.bdf2bc27.js	false	Avira URL Cloud: safe	unknown
https://signup.dacreativeagency.com/error.aspx?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1&e=404	false	Avira URL Cloud: safe	unknown
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/manifest.json	false	Avira URL Cloud: safe	unknown
https://l1ve.dacreativeagency.com/Me.htm?v=3	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/watson_DOaS_v-h3FCKtNPQv8zSLw2.js?v=1	false	Avira URL Cloud: safe	unknown
https://onlines.dacreativeagency.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1	false	Avira URL Cloud: safe	unknown
https://signup.dacreativeagency.com/Resources/images/favicon.ico	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1	false	Avira URL Cloud: safe	unknown
https://reesecontractorservice.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2	false	Avira URL Cloud: safe	unknown
https://signup.dacreativeagency.com/signup?sru=https://l1ve.dacreativeagency.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod@me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https://a4d0aec3-12461a6c.dacreativeagency.com	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	false	Avira URL Cloud: safe	unknown
https://l1ve.dacreativeagency.com/login.srf?wa=wsignin1.0&rpsnv=22&checkda=1&ct=1711644793&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.dacreativeagency.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.dacreativeagency.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253d59AC3F6F7D3AAF66%2526opidt%253d1711644790%2526uaid%253d8da31f269ebd451fbb6ab4c102827f89%2526contextid%253dE4EA2673871E61DC%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26username%3Dkenrod%2540me.com%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D8da31f269ebd451fbb6ab4c102827f89%26suc%3Dhttps%253a%252f%252fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=8da31f269ebd451fbb6ab4c102827f89	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/lightweightsignuppackage_I2u0h5_OVsvo48cPwiR07Q2.js?v=1	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js?v=1	false	Avira URL Cloud: safe	unknown
https://adff02f8-12461a6c.dacreativeagency.com/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1	false	Avira URL Cloud: safe	unknown
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/index.html%7D?i=kenrod@me.com	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	Avira URL Cloud: safe	unknown
https://25a87cd0-12461a6c.dacreativeagency.com/shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js	false	Avira URL Cloud: safe	unknown
https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/im/spina.gif	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	Avira URL Cloud: safe	unknown
https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://ns.attribution.com/ads/1.0/	chromecache_108.2.dr, chromecache_73.2.dr	false	URL Reputation: safe	unknown
http://code.jquery.com/jquery-3.3.1.min.js	chromecache_85.2.dr	false		high
http://gmpg.org/xfn/11	chromecache_85.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.31.147	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
209.38.240.137	bf2b00c1-12461a6c.dacreativeagency.com	United States	7018	ATT-INTERNET4US	false
192.185.165.120	blee58.com	United States	46606	UNIFIEDLAYER-AS-1US	false
192.185.165.131	reesecontractorservice.com	United States	46606	UNIFIEDLAYER-AS-1US	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417168
Start date and time:	2024-03-28 17:51:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://blee58.com/bl/ax/l?user=kenrod@me.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@19/100@38/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://l1ve.dacreativeagency.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fonlines.dacreativeagency.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATU5Bf37p0n77o7a8tBpqb6zlmMnPE5mWVglasYlQkbp3-BkfEFI-MkJt7s1Lyi_BSHXLDwLSZB_6J0z5TwYrfUlNSixJLM_LxHzKhqLrAIvGLhMWC24uDgEmCQYFBg-MHCuIgV6CpOxS2KLod6_Hde2crb8y6W4RSrvnaka3JohKmnV5B3al5wpFOkhUFVYGBRlV9IgFOYh2eYr4FZZJC7YY6xeaitmZXhBDahCWxMp9gYPrAxdrAzzGJnOMDJuIGH8QAvww--9eeWPfn-YvI7j1f8Oob-vm4GfsbFjqGhqVGp7gHe_pnmZvpJuebu5n7aQc6uOQWF3pVOBYEVzuW2GwQYAA2&login_hint=kenrod%40me.com&estsfed=1&uaid=8da31f269ebd451fbb6ab4c102827f89&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.16.94, 142.251.16.100, 142.251.16.139, 142.251.16.113, 142.251.16.138, 142.251.16.102, 142.251.16.101, 142.251.16.84, 34.104.35.123, 13.85.23.86, 72.21.81.240, 192.229.211.108, 20.166.126.56, 13.85.23.206, 142.251.167.95, 172.253.115.95, 172.253.122.95, 172.253.62.95, 142.250.31.95, 172.253.63.95, 142.251.16.95, 142.251.111.95, 142.251.163.95, 142.251.163.94, 142.251.167.101, 142.251.167.113, 142.251.167.100, 142.251.167.102, 142.251.167.139, 142.251.167.138
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://blee58.com/bl/ax/l?user=kenrod@me.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.621671884241178
Encrypted:	false
SSDEEP:	3:InAioSmhSqSLPpdioi1KY:jomoVvFi1KY
MD5:	A82B43EF73C5F7342B7FB2AF895F48BB
SHA1:	13B909ADAF0EDABB6A64BA3B61FA39AD27FDF7E9
SHA-256:	58D9B980FAA41D8C9025800E63D37043D085CA5F41429B6504C2F667E66C3CF8
SHA-512:	7FBF138FD6418B5790261EB1C727183D26F5B2055F55BD5EC0186574A3B800B5604012E806894689755A15A54088BDBC2F1A37FBEA8C880CB5B820CAB80A95C4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAkdXGTHe4kODxIFDXU0vqESBQ39KmurEgUNHuw8YxIFDfG91xoSBQ1GqIRz?alt=proto
Preview:	Ci0KBw11NL6hGgAKBw39KmurGgAKBw0e7DxjGgAKBw3xvdcaGgAKBw1GqIRzGgA=

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 208265
Category:	downloaded
Size (bytes):	53103
Entropy (8bit):	7.995096102044487
Encrypted:	true
SSDEEP:	1536:o3SCE2KqpmkKwua0QMPQj3Bb/VWQ8te/Z:3F2KYyBQj3Bb/0g/Z
MD5:	95CB8266B1E5208514553AFC270F690D
SHA1:	9BA11F2320008B5859FCB584963B67C4971392ED
SHA-256:	C421CEF985EC2D4DBE170722AB87B62712DE1E9DEFBEE65CEEC66E9DFA8ED4A7
SHA-512:	E6DD1793F98638BE46DB38881468B05C4F40F22CDC68C5D7FFC020B7ABDBBEE84D643F87D324F06FCA6F96F9CF3EA0617A857F150751BDC52127D7ABEBDAE71A
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/lightweightsignuppackage_I2u0h5_OVsvo48cPwiR07Q2.js?v=1
Preview:	...........}y.......2...H.D...%i.ln.4m]5..).5E.$..g.3...7..i...{='...X...0....(v........XwX.\|f.wWVX...a?.v..T.[q.:.v.#+rt....6.N.?#K.c._x.i:.%......._..U`.Z.Kk...[.............]V.UQ.[.....y....Y..ruUT._..[..~.........`.~].....`..'~L@..M..8.,p"+_.z...S.@.V.;.Y.dA......e....r.-\|....ck....kARM.e."...+.^..\...4..F....H}....8t....<S.7c..\..$..,d......bf.E/..X.u....0.Yf..[.....C.O+..f.....O.. .En....P&...A.a.....z..M..(....!+..v.O..\c.....S.K...V:..u'[.J.ca.)...c......>.p...<.7..............o..\|..oq.o..Z.n.oi'..>f...(K.....?K.s..i.#D....r2s....S..C..Q...N._..D....w..w.]....{.[.+.6T&.....5=....!8.z.......7..zwo..p.....<....6.....{..n............z}.....(..5z{].q.....G.F......i,....i..f.....>....7.8..sd.e...]w.....b..,.>.C.V..X".v2...FlZ.mh..m..0..s......>{.......cA...g;.'....m1,@..U6.F_.3.=.f8..........Z.....zY.'l..i......dU:-....;`.}....n....8.V....P....3.....M?....99..._..%..L+.1..)8..~."....?.Q,9\|...s...!xs..P..p........$..Q...G.-...t

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.659657630123852
Encrypted:	false
SSDEEP:	12:XZEjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X2P5e3dgYLMk69Ii1epryt/Md
MD5:	144602B9BCB69A170EE0F9E900C107F7
SHA1:	ABDAC4E49652003158DD7DC561C3EC7878CEBDAF
SHA-256:	B5099539DA34B1482C022BBC78270BF471CF9349EF84BB34CA7A02B63515FA9E
SHA-512:	BF80EB1F4E3AFC5568320FE865C4C1B9BE44C1363B36B82549D5344486F157905B4C6573D5CC8418BC311CCE5BBB7C93208FDD68E1A2F72CAA311D786235AA6F
Malicious:	false
Reputation:	low
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 379
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	7.073949007476455
Encrypted:	false
SSDEEP:	6:XtMG99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:Xx99kRX1YQBDFCnDXdWYtrE
MD5:	DE27409124B16BD9FD100A4541F14B54
SHA1:	071BBE8F6F76CFA82F1D565EB39899E56DC45313
SHA-256:	EFDBF66A9CC530152E00CEC6A67A9AD3BE5E392678CFD758671DFD72B0EDDD41
SHA-512:	E76D116B715763F5AE7528ADECB956CCE52D0EF920BBF05BC8E7BD04A559B08A9FE417AC05C5C3338571E25AFBE0C4C4D57A868A4E132E837179AAC5267FE824
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 55021
Category:	downloaded
Size (bytes):	15778
Entropy (8bit):	7.986952131056725
Encrypted:	false
SSDEEP:	384:TwXl87i4naaFtPESJ2DWOq1IcQSIHITlwd:TwXW7i4naTSOAkd
MD5:	1DEBA82567AC98A2F2AEC1FFFB505525
SHA1:	B180506C501A76746783335BABBE396DD202D155
SHA-256:	0F6966C7C8B82D763D5A3C8A6B0E552BB3793A1E68A291EE0F7CC093A3DD607E
SHA-512:	D919EC81083A1AB9705C1485DC8454BE09F73530CB72813D445415128F1D3280FD84CFD3B18D04ABFB8DEBE2B94C219B0055E407ABC2EC7FF313F40AA23C3765
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9...B.AwUeeeeeefee..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<..j..N.....0.......=..ox/+...9.sB..p.q.ai...?.....qw.D.X..b..?.bOD.x.B1..X..`.N..b..E...%JWg..x8.ys..:...I.....b1...q.......[..a..7q..N........._..4....&.. ........m&6.F.\.@.e.B..`.'.....0............]/.........`..iZ6......./f8..BCz_...i....MQ>..E,/x>v......{.........._.........Z.rP+......e..R.\.Z.u..3@./.oJ7.'.......%.;.WP.9.b..z._..b....0......X...Ro^k.lI..t..K7~.ep.`.)......'."".."....../..S....M..B5nEc2..g..m..\|f.{...pbi(.0.@[_Lc.Z.....U`./!..@.....p.-..kQ@T..8...-...0.....AX.D.?...".....5.NE..\...VQa.....,......?..M.0......_<......C..fOq..bz'..z/BF.;&.K......%.....g........f!..^.:Z...g...j...7.._........S.2/.2.n.....>.<P!!.Bv..J........e!d....B.Ra$.......N........> f.C.....^.D.-.e.c+...............!....$.9x...{.....p~._.0.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 29056
Category:	downloaded
Size (bytes):	7225
Entropy (8bit):	7.960823619261873
Encrypted:	false
SSDEEP:	192:joIPJdSdsxHFUuyTh8eVb629HUaZF698FCzYgAd:VPHSixCTBb62BvI8UYgAd
MD5:	2D567182E7044404C2A8949E55C98D6F
SHA1:	6206D6EEC686110B85AD2B2C58E73B7D48BF858F
SHA-256:	BE6745FA68858D05CFE49B63C20307A29F11780D3DA2BC05691C9AD75F301596
SHA-512:	3E809E4BAA0D45240BAF67A65FE7DA6134EE010B9B2955614A212798D2CBD01815AD785033A04525FD749EF80E0BE5CFA4EC473AFAF4E0B2E22E319ED6A7497B
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1
Preview:	...........\.r.Hr}.W`iG........Z.$.-.....1Q.J$F ...8...?..~p.....'..g.."......tS@VU......?.....}..WO.m?..D.....\|U...r..e...C.%<i...v.....<...._+..9..^.me..}.v..8...&..+.+r-l.&.?q.}....I.. .Y)WRqC_1.p..^VX..Vy.../fdm.Q8.u.k_heA.....`%.:..b.).Wk.:...E.7.<4..0.q...g..0..N...e$j.....uh\|R..EM...r...G....../\.u.%\..-......f......?..5....5.$..C?....>..j$......\|...o...Q...!.G.84....p......p.k.....<.Lb.H..k.W.]$.r$.o....!.^.F.yml.......ua...b)......(=.~...j....0?_...pq_.........Y..)_...0M....l...2..\|..k..}o<..O.O.k..p.a....\|t....TzY.vd....t..<8e.9u....7B..#...x.n..g.,.m...5.?.lR..}.e..;....,.....8.....uTq..G..{.%af0..q..W.A.woP........&....^W.4...r...I.....C.$p$q...O..,.q..L..8j.%.d.\.....sM.k....1V..@...;0.tR.$^...V...+A.\|......;.b.....\......z.._.......`I......D.@.A.G.F.....$'....n.d...^\/...v......S....+..j...<..}).H..B.R.Z...v..._)...6.Q.K.Y,...X..C....E`."G.SW..K.6.x.G.0Pw.YlS.3.;...{........ I>..8..1..1.i.Jr..<O....u..).H!O../..\o.' 0 ..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	32184
Entropy (8bit):	5.486342052722184
Encrypted:	false
SSDEEP:	384:TwYGjXMhyKvCAMuv8b8mIT+DZr4ZWPXXWDOwiAJYovuRhgUXNW:TIj/KvGudm++ZreMQBJz+hg2I
MD5:	0C0FD43502755B59E08CE4402273EF93
SHA1:	FB59064837CFD2EB2B2509C7CC43F6E23A6ECCEC
SHA-256:	F1D7A82BF3E34F900E8CEE2F6A62B133405BA6A782782EEFA8BB7EE99BC141D6
SHA-512:	4FDF32069FB70572459D0D148AD494480A84A17B8E9A893EAD0A22EAF7F99DA35235ED9F756FFD2C3B2BA8A912BD7BF5BB50A2773CBBEAE40681D2173CFC1171
Malicious:	false
Reputation:	low
URL:	https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/im/shar2.jpg
Preview:	......JFIF.....`.`....5shttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/">. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default">SharePoint - 1</rdf:li>. </rdf:Alt>. </dc:title>. <dc:creator>. <rdf:Seq>. <rdf:li>lexy mailer</rdf:li>. </rdf:Seq>. </dc:creator>. <dc:format>image/jpeg</dc:format>. </rdf:Description>. <rdf:Description rdf:about="". xmlns:Attrib="http://ns.attribution.com/ads/1.0/">. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType="Resource">. <Attrib:Created>2024-03-19</Attrib:Created>.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 95910
Category:	downloaded
Size (bytes):	17755
Entropy (8bit):	7.985790080488064
Encrypted:	false
SSDEEP:	384:0P/snh9IWQT5yz/+u+ZoU9a5pXAeTHNxDyG6d1zC9pvFe5:K/HWWyqu+ZoU9atAeTHzeGgv5
MD5:	20BB3E61CB480004C030941EDFF4AD81
SHA1:	BB0CDA7D4E63EA8345019A7F302AADAD3A026FD1
SHA-256:	02724FBDC57E4EB4A124B817251CECEE00969B202319C285B4D2A697317D272E
SHA-512:	4DB78FDEC6FBDB197AC383542D2EDB20B29AF0AD84FDD4E7B20BB4D85B7825D9CBF5FFA40297B0E5D14AC401352C0617D27DC982CF46B3C13850F3384A0A49A5
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1
Preview:	...........}is.F..w...\.XY..-J.....Y.K..V.."!.k.`..e.....s_=.(...D.D...\===3}\|......H..U...~.&..y._U.^.."..<..gi.P.2(.2.>..0......n....g./.w?...N..........N_....<zt.H..I...^Fe<..,. .f..q.,.w.DipU..Z........iRVP.2N..).+..YTT....~.\.l..M2(=...U2..(.Sl)\|..8Xg..n..l.._.....)(.nV...".....Z.v..9..XKZ.......O...^...%..h.j..&e.,...FHd..f...n.5o..O.].0n..C..:h.\|=.B......@!9...N..A.y..ez.\.QF.\T...].q..........A.\ACh.:A\V.j..dn)........Z.TusYv/.."Zu.,...p......G...^..9.=./...i.q...z.apq.T0...4.=zt...%...{...R.l..<....f....;d~..6X.EI..e.%...R.#...@f....7.v>K"2Q.\|.&.Cg..6..B.{...>.d.G.$.."..h."_S.d.f.Vg...6..4Y&..R.Q.#@.......`..+.7..Z./a..:.<!./..$.$..f...; .2N.G.!!...h].-.....$)7..dO.........0d.F.JH....SX.k.<.'.G.....2.....L.J..*.d1].\|...${D.Dw.R}Y........gw3.._....~........<8{.._./O^.{....^'....../..x..-pc`....'........g.O..w....9{}z.i.o_........P..w......^..H.....9A.....W.........<....-.....3................@./....?..ZN.....VH.N.._..W.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4747
Category:	downloaded
Size (bytes):	1674
Entropy (8bit):	7.8886522759897995
Encrypted:	false
SSDEEP:	48:XfdGOv6MFDb6W9y6UMzRT+KoATA3mz3r7gRvnY:vwOvfDb6WPhRKKxA3mTgRw
MD5:	AD9CF4AA49067DB18F760164F386ADDE
SHA1:	F91005380266D97A4C936DD85B932BB6D3E03D9A
SHA-256:	8EB9E0AC04D3BF5A9799FDCC749BD295939C8801E7757103311F4F2AF307F74C
SHA-512:	49A7B3C38C453AB9E5E394FC9F961C4771BD3AA23ECA0A3BD834AAD13727D54CFDC20DFEEFD56E0FF38B417C4F675986812D1C2ED2499B381BAA4F384ACD2A9B
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js
Preview:	...........Wmo.6..._.h.b....'.[.h.v.F.m......T"......;.c9....a.b..?.....'.)...G...C.......8%}..;y.~......X...8.Lx...c.!"R....L.Tj@..?..1.(..3..y..h.smPi..\...S..Se..m...}@k\|..j3......!.g@........$..(..q6#.)..............\|B....L.2.U.!.X..vnV......<B...(~b.\......:R..p#..1.o9.b$Y.,........h............5.!.1.(..+.....NQ@.K2UT....8:U....c......')..2..h#..b..3........R4.+M.z.0...z......n.6.f...2.hu.t..-C&.Z$.iL5..>a.Q....w..^Y.yU...gc....rQ8.o...G...=.Q...Y.a^.;.V.X..T.\D.^....}..K..v.}...c5L3=.\|..:.....w..L0.V......"z.......O.qP.%>.U?.M..'.>..B...?...HT1+K.....]..Sj....L..^`w.>.z..X.v....B)..n..W......P..v..".L4.uM.0.!."..zs..S0...ue.Q..qf..#)N.S>m....`.e..V/.t.s.!."..p.F..F..vx*..Kc.S;.T.%B.X. .k.h....`.!z..}....n..@Bb.]^9lw...`3%.f.........k,...F...RJf..?Y...... NA.\;....~p...ZD8........%.FU...&...U..[..j.k.;....<&q<.S....]K...F.1..3..X...x\|....:8.7....q.Q.....0.S..j}./.i...yx...:.-.hDt.:.G..n7C=.......]^......Y.....8;p...x..9.Qo..g

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (688), with no line terminators
Category:	downloaded
Size (bytes):	688
Entropy (8bit):	4.841691298678702
Encrypted:	false
SSDEEP:	12:qTE0sFjN26VyCaGuaXiMJMJivVWhVe1ITG7faKj2a:0E0sNNRACaGaMJMJivVWhVqIC75j2a
MD5:	EC6A14EF5DA32466A9AEC602E2A27A54
SHA1:	E0910D800516025A428A9FE0ACFAFA97BD44EDD9
SHA-256:	837FC091D645F7409C466909C68E2BC383DC52B7CE2B0F6B816B0ECA7E0AC434
SHA-512:	9B226459A35A261A75D99C894A72DDD52CA3896ED18BD0B92C2A2A9BE2C6803D917A2E8F458DFDBC1BEC286F30473ABCC833B673BB9125C65BE9767FBD219B84
Malicious:	false
Reputation:	low
URL:	https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/favicon.ico
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captcha"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="public/manifest.json"/><title>Redirecting....</title><script defer="defer" src="/static/js/bundle.js"></script><script defer="defer" src="/static/js/main.bdf2bc27.js"></script><link href="/static/css/main.1b019d38.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.659657630123852
Encrypted:	false
SSDEEP:	12:XZEjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X2P5e3dgYLMk69Ii1epryt/Md
MD5:	144602B9BCB69A170EE0F9E900C107F7
SHA1:	ABDAC4E49652003158DD7DC561C3EC7878CEBDAF
SHA-256:	B5099539DA34B1482C022BBC78270BF471CF9349EF84BB34CA7A02B63515FA9E
SHA-512:	BF80EB1F4E3AFC5568320FE865C4C1B9BE44C1363B36B82549D5344486F157905B4C6573D5CC8418BC311CCE5BBB7C93208FDD68E1A2F72CAA311D786235AA6F
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 8111
Category:	downloaded
Size (bytes):	3505
Entropy (8bit):	7.945008338787512
Encrypted:	false
SSDEEP:	96:siS8LmnrKD6nrzRydFgkoVfemimQY/W+X:siarzrzR04GmP7/fX
MD5:	90987734D7B52E97DB2CE6CC62343784
SHA1:	9E84FA0EC990B892B0F8413356AE087DE7E9EBBD
SHA-256:	D76ED433CD8BBB84C57F4BF6273956D762ED57E0A49ABFFF09BBA6025CF0AD7B
SHA-512:	591166764C037D61C3D478205BEC7A82A694801927C3A029881EB81A72530DD5FB0B03264618E19A82FDFBD009AC0507909BE3DB528C7C8CCB82678279A452D4
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js
Preview:	...........Y[s.6.~..Q.L.`FI...D..q..c+....$$1.I..-+...~..M....N......~..&e..(MlgY.Z....U.U.c..n.\|%..{=[.Y...7..JH.......!...O..1....7.......>..'e....!0...>1.M.......s+..^>...Z..q9...M ..[..(e.^o..[.z...`.Z.$L.n!.8..i..)/..=wG...D...w....C.,....m....I.....K........9. \|.a#;u...... ....5..+I..AeV&.0J..F..$.......V...!..RK...F.\..\.. .8.07...{$......h...O8..Jw[..Y6..Qh..`.(...K...8..09P..#.,`..f.qI..\|...{.h....pm.\.m.&.s...tI@....Y.m.sg.x.j.og]..+.AY6.&.8...7.5..Y.$...Z....6....w.f.d..Q.LV..3qTh....X5Ih.%....j..tb..kfB..o..;....3...8C...l.:.W..jF...1!..5..~/.j....t....3.......e..:".9........_.,.h..<.. .x..9.HD...1...w..Kq..Q^FW....VA'K.&..<.H.3l..>........M.....t.._....+B ..e6jK..A. ..+9...nRX.M.....\.....b...j55<..X...U...U0S...we..8.kY...@&._.......;h.e.=..&.H.e.d...;%.R.YH...tg~.a.\|....E..p..Q.Gj.T;.....'3.iQP....m..U.......KC..k.b0...w...z...9r[..R.h....K?.#.....e.!..5y.....s....G.oa.;..:............H......._Y&.W...X.u.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (688), with no line terminators
Category:	downloaded
Size (bytes):	688
Entropy (8bit):	4.841691298678702
Encrypted:	false
SSDEEP:	12:qTE0sFjN26VyCaGuaXiMJMJivVWhVe1ITG7faKj2a:0E0sNNRACaGaMJMJivVWhVqIC75j2a
MD5:	EC6A14EF5DA32466A9AEC602E2A27A54
SHA1:	E0910D800516025A428A9FE0ACFAFA97BD44EDD9
SHA-256:	837FC091D645F7409C466909C68E2BC383DC52B7CE2B0F6B816B0ECA7E0AC434
SHA-512:	9B226459A35A261A75D99C894A72DDD52CA3896ED18BD0B92C2A2A9BE2C6803D917A2E8F458DFDBC1BEC286F30473ABCC833B673BB9125C65BE9767FBD219B84
Malicious:	false
Reputation:	low
URL:	https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/manifest.json
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captcha"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="public/manifest.json"/><title>Redirecting....</title><script defer="defer" src="/static/js/bundle.js"></script><script defer="defer" src="/static/js/main.bdf2bc27.js"></script><link href="/static/css/main.1b019d38.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113705
Category:	downloaded
Size (bytes):	35854
Entropy (8bit):	7.993395048089482
Encrypted:	true
SSDEEP:	768:B9XArZdftGZWF8w37OwAn3EatxDjiVdyXmX0oj/lD2ql:DQr3MUh37OXnhxCmmEs/lDl
MD5:	0E475D2E4B715B78C78400221262C745
SHA1:	294A4038025F13B8B7B4462E0ACB6948D7B9B1E5
SHA-256:	340FA38CDC219C72C384BE11F84C3089530E9BC9CD5E149B32DFBD8DA8BF8CDB
SHA-512:	C573B5B681359F6D4C1B6AB8F292EA0B269664AD9F8CB9B3C1C0F460BEB85FEC0BCBA78B011A02349AC71573D793A7A4CEFFFB3091F313DC19A0DD524A999699
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
Preview:	...........{..8.(.........,.-.......gglu.. .m..I....~..oRv......i.(....P(......k............o.6>.\|..d..........O...V..}.G..4......9.l..F.mDI.f.4...o,..EA.1...F1g..,...E..Gy...,No6.@..l....n..;....P.fQ...ty...b#I.(d.A2!j1$..m....6n.Q8.x..Y...b#c!....\|.p..w#..F..i..s.Gc..b..9U.k......&@pJ..'40J......e.$.k.L(b...F.n.+..nO..6@n...A.&.,LVa......Y......V..o..% ....,......:..e.-XR. <FE.w..b..P......r.b.["~..!.....y.......V...4.;M..Y.X.{.......I.f..^.`......I...A.m./....~x....9...oo..j.,m... Jd....xeu.;..o.;$..L..0....w.....U.......6^..._AdK.....\|.4..\|^??o.G....7]%!6.......A...Y.....x?..9p._.."....8J......A...f.-.)..%t"$...gu(.k;.>RM..q...i....._a..5;N.I.%{..d..A.......:_......R.H.GK5.>..x....G.@......gW.(c..w.j.2V.....Q.....a.=Y....A.,..EZ..v.......)....K.A.......&......V0..BH.,..E..b.:.B...4.\.A...F...8.w..!......)..Y.<NQ......9O.........V...o ?A.CTR....?R..U........j.j%\%...R..E.G...W....N?-.;Y....(.....~.8h...$$."...M"0..P.!.6.Z.7.C...

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2501
Category:	downloaded
Size (bytes):	1170
Entropy (8bit):	7.795833377378215
Encrypted:	false
SSDEEP:	24:XBGLI7hS4Dx7OeJxm8I5gKe96eKMtHaZbCf1SqGGqWaiIB:X4IFSOxyh8wgf60aA1SylIB
MD5:	C3610C1138FC06E60DEC362C9903974C
SHA1:	B25A8B1433D61519AAC708CBFCA525A7EC2667DD
SHA-256:	4EA481D15126136458EE6748115268FF77F340522963BBDBA7632FF8F1280413
SHA-512:	1140256183A03EEE61C6035F396D9E64B996BFB07480C79B5F4857888A9DC9B4FA74E311328D2C4E7375FEBD853460CE316653743BF8B4AD299D6EF1405D75A5
Malicious:	false
Reputation:	low
URL:	https://l1ve.dacreativeagency.com/Me.htm?v=3
Preview:	...........Vmo.6..._a..!.b...a...P.k.4..A..Z:..dR i.......t.j...{y.<...nL.Ea{....X.f/..;.X..W.~....J..Z..vw\..'d...A.,^J....`.m.{..d/2."...v.e....[..5.......-.T.....).a./.m..R.....(...-./M........ .m.....x-..P.H.F.i.@-...e.(.)....z9.]..F.C (..cL.....\.r@..".........x..:..CR.l7 ..R...L...:s...(.A.@......PuU=.E..p/..j~r.>..~2....k.9...~5......#..P..)\|...HGSyf.4V..r;.<.p.h.R.uJ.I.Lv"B.aX.D.j.LtZ...j.FK.$LD.r_....\....,.u..Ef]Bh.t..V+Xr(V....o..v.M.Q\c...g...$JZ!.0....\.;..0..-Bgc.C.y@.....Ge..N.P.eB.[%..~Lh....q.#ML.6LV,.&1.U...u.k..YC.K....6.a.M.....4.~@..."[c.R...E}..~..xwOZ..B_6...O...h..>.>c.n...'V.a....)V.`-j,..ea....\|e...uU.P...Z.X.YUE...n......#.O'..'..U;hr0.)...+!.` ..[N.~.7.....W.s[_....\...H>...qy .../.9...G.2.6YW...p..Zi..v....[6~.B.R......J..../.WR.....u'~..<..p..tU.pL......0..y'........=...0.T.9....p"..Z+...Pbi.r.*.....[W.Y."{B=.....c. 8.N....wpV]R..C...i......>..6K...1)...v.}._.......f1u..N.9kk..^\\e..$........A.O>.O{.(A

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 80168
Category:	downloaded
Size (bytes):	28606
Entropy (8bit):	7.990022606743911
Encrypted:	true
SSDEEP:	768:nM6iYroD0Flw/TL+sRu0U6eKjqnSA649uEwU4FHQBe:nEYcD/PXA0voSAruygAe
MD5:	C762261B26427BEF8F739610E1A3B488
SHA1:	FA999F57573A54AB3CC867A716B9FE01F3548705
SHA-256:	0B08BF92710FD280B009EE9CDB1CFABEAE53384DBCB0606D37E82A33B757311C
SHA-512:	F53212A9623300E5FBD532C060FF0068C9EAF9A249D091F57D1891291591483CE37B88391E05CE53900F44CAF0528DF041C368D979E6B98CF379A5B94B098C13
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1
Preview:	............W.H.7.{... ..!RS...g...._.$..@.Hgz....K,/X6K.......J.H.<.{.L..J./..~..hm.........u..\|w\|~h}......#.O.....g..Anu.Yj.o..ibM..df...d6...y.[#.;....MF..Z...k..s+..s.....r..Yb}.g......Y..w2...c.O....[..\|..V8N...^.yj-.I:.....o...I>..Y...[j$_Pz..a........}...@NUk....s.N...$Ta..J.i....8].Qf2..<..Ee.o...\|b=L....x..E.6.....Q..E<.....-..e...,...}...)e...7..r..-\...(...M^.E..k0.RGxd.J..d:M3.-W~7.S....~.~.O..d1.~.o.x6.b..,.=X.?y?y;..].b..c."D.9m.-.?.O....o.K~.1.ik......%..0....4.....'.m..DN.o.?...U...7.R.d1.So2.m.i....[.....:..\...:~..xF.hG5..@.3.s..O.F.....).....Y/.X.p.`M.'.<....!.i..u.:.a.a.y>..!....,....[n9......M$).\|0../..`......g.X.&..l....s6.......9T."......M.A..).j........Pu..Sb.D.&.Ql...i.gw.c..N.#<..P.j.......H.i..15.r.dB..-.. .....0..O...#.}K...hr.>.H..i...S..y.R5g.4.ph.h...sZy@8.y.d}......8{s.i...:..>...v\|xth....n.........8.?%.L.z..w....Ca.......uvn...pr\|Di..'...O.Z...Ap..Uzyf.AU....*.}\|t~...._..._...7.....U..7.....s.....g.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 379
Category:	dropped
Size (bytes):	254
Entropy (8bit):	7.073949007476455
Encrypted:	false
SSDEEP:	6:XtMG99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:Xx99kRX1YQBDFCnDXdWYtrE
MD5:	DE27409124B16BD9FD100A4541F14B54
SHA1:	071BBE8F6F76CFA82F1D565EB39899E56DC45313
SHA-256:	EFDBF66A9CC530152E00CEC6A67A9AD3BE5E392678CFD758671DFD72B0EDDD41
SHA-512:	E76D116B715763F5AE7528ADECB956CCE52D0EF920BBF05BC8E7BD04A559B08A9FE417AC05C5C3338571E25AFBE0C4C4D57A868A4E132E837179AAC5267FE824
Malicious:	false
Reputation:	low
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	146763
Entropy (8bit):	5.268762948083593
Encrypted:	false
SSDEEP:	1536:7vJgLr1ejR4VThLQ0WO5ckY2u5Y66AP7FScW38s9cmjQG2mwn:7UcXj2EP7FScXvGCn
MD5:	7D60560A69215D657153A5B94166BC0D
SHA1:	D0DF5E0F0D6198A861D5F9E44B00A714FB1D0C0B
SHA-256:	11A6D081BFA9862ABE9597C6C68D9870E55A1B1893E8ECC0E94CA49323FFFF97
SHA-512:	E66E72B8DE57D5155025311DF0E3CA918F2156C086E0F891F8DEEFCFED6A90A82B3A12762AE3F4B373984AE85C9553B5EF3DE6B4EB23B845774ED3DA4CC3041B
Malicious:	false
Reputation:	low
URL:	https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/js/main.bdf2bc27.js
Preview:	/! For license information please see main.bdf2bc27.js.LICENSE.txt /.!function(){"use strict";var e={463:function(e,n,t){var r=t(791),l=t(296);function a(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]="+encodeURIComponent(arguments[t]);return"Minified React error #"+e+"; visit "+n+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var o=new Set,u={};function i(e,n){s(e,n),s(e+"Capture",n)}function s(e,n){for(u[e]=n,e=0;e<n.length;e++)o.add(n[e])}var c=!("undefined"===typeof window\|\|"undefined"===typeof window.document\|\|"undefined"===typeof window.document.createElement),f=Object.prototype.hasOwnProperty,d=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (688), with no line terminators
Category:	downloaded
Size (bytes):	688
Entropy (8bit):	4.841691298678702
Encrypted:	false
SSDEEP:	12:qTE0sFjN26VyCaGuaXiMJMJivVWhVe1ITG7faKj2a:0E0sNNRACaGaMJMJivVWhVqIC75j2a
MD5:	EC6A14EF5DA32466A9AEC602E2A27A54
SHA1:	E0910D800516025A428A9FE0ACFAFA97BD44EDD9
SHA-256:	837FC091D645F7409C466909C68E2BC383DC52B7CE2B0F6B816B0ECA7E0AC434
SHA-512:	9B226459A35A261A75D99C894A72DDD52CA3896ED18BD0B92C2A2A9BE2C6803D917A2E8F458DFDBC1BEC286F30473ABCC833B673BB9125C65BE9767FBD219B84
Malicious:	false
Reputation:	low
URL:	https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captcha"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="public/manifest.json"/><title>Redirecting....</title><script defer="defer" src="/static/js/bundle.js"></script><script defer="defer" src="/static/js/main.bdf2bc27.js"></script><link href="/static/css/main.1b019d38.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113084
Category:	downloaded
Size (bytes):	20314
Entropy (8bit):	7.979532931860973
Encrypted:	false
SSDEEP:	384:VkqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:gCGEiL/w7R8DW9Z5B6AasTv37T9Q
MD5:	7B082644CE5A069FB55F47B1A6B667F2
SHA1:	6A5FFA5369BF15FA42446C6EDE88E9E40A40E0E9
SHA-256:	8E34884C24973C66D83BAFDEC9445F746BEFEE773A384B340CA24C7B7703AF3A
SHA-512:	778CC9EA8646B747C02A1BFC68F7CB973A721328B180211657B2FEC2E5487500E8BD4D5A110C3C7C09C8BA66FE28BD47043C200227040B0B544941425473173A
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	32184
Entropy (8bit):	5.486342052722184
Encrypted:	false
SSDEEP:	384:TwYGjXMhyKvCAMuv8b8mIT+DZr4ZWPXXWDOwiAJYovuRhgUXNW:TIj/KvGudm++ZreMQBJz+hg2I
MD5:	0C0FD43502755B59E08CE4402273EF93
SHA1:	FB59064837CFD2EB2B2509C7CC43F6E23A6ECCEC
SHA-256:	F1D7A82BF3E34F900E8CEE2F6A62B133405BA6A782782EEFA8BB7EE99BC141D6
SHA-512:	4FDF32069FB70572459D0D148AD494480A84A17B8E9A893EAD0A22EAF7F99DA35235ED9F756FFD2C3B2BA8A912BD7BF5BB50A2773CBBEAE40681D2173CFC1171
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....5shttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/">. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default">SharePoint - 1</rdf:li>. </rdf:Alt>. </dc:title>. <dc:creator>. <rdf:Seq>. <rdf:li>lexy mailer</rdf:li>. </rdf:Seq>. </dc:creator>. <dc:format>image/jpeg</dc:format>. </rdf:Description>. <rdf:Description rdf:about="". xmlns:Attrib="http://ns.attribution.com/ads/1.0/">. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType="Resource">. <Attrib:Created>2024-03-19</Attrib:Created>.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 200 x 200
Category:	downloaded
Size (bytes):	81537
Entropy (8bit):	7.216865341795645
Encrypted:	false
SSDEEP:	1536:1WUNK+vRXEuDbHBXWNrWAXXeM8hSkYW/p:1WUNZ0yjNWxWpM8hSvWh
MD5:	2746720A36753363798163BD0A3C678A
SHA1:	147B24522C5CF383DEC9B1F7BB48455E60C53C27
SHA-256:	5D1CF7A38B838253D16D17B74AD87AA674F502C1DDA5CFCB06DD18DF222852C9
SHA-512:	EBB76112444346337112D37E31958A4C02885CCE14D04F292F43F420D0A7AA1D62E7BD3F41BE5DDF529D0E32B8FD7F6B8408D64153CCEF1C48FD5D751AA15405
Malicious:	false
Reputation:	low
URL:	https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/im/spina.gif
Preview:	GIF89a.........0..<..@..H..K..Q..U..W..[..a..b..e..j..m..o..q..s..x..y..\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+N{...%..TYLs....P.i..g%

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (688), with no line terminators
Category:	dropped
Size (bytes):	688
Entropy (8bit):	4.841691298678702
Encrypted:	false
SSDEEP:	12:qTE0sFjN26VyCaGuaXiMJMJivVWhVe1ITG7faKj2a:0E0sNNRACaGaMJMJivVWhVqIC75j2a
MD5:	EC6A14EF5DA32466A9AEC602E2A27A54
SHA1:	E0910D800516025A428A9FE0ACFAFA97BD44EDD9
SHA-256:	837FC091D645F7409C466909C68E2BC383DC52B7CE2B0F6B816B0ECA7E0AC434
SHA-512:	9B226459A35A261A75D99C894A72DDD52CA3896ED18BD0B92C2A2A9BE2C6803D917A2E8F458DFDBC1BEC286F30473ABCC833B673BB9125C65BE9767FBD219B84
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captcha"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="public/manifest.json"/><title>Redirecting....</title><script defer="defer" src="/static/js/bundle.js"></script><script defer="defer" src="/static/js/main.bdf2bc27.js"></script><link href="/static/css/main.1b019d38.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/images/favicon.ico?v=2
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 8111
Category:	downloaded
Size (bytes):	3505
Entropy (8bit):	7.945008338787512
Encrypted:	false
SSDEEP:	96:siS8LmnrKD6nrzRydFgkoVfemimQY/W+X:siarzrzR04GmP7/fX
MD5:	90987734D7B52E97DB2CE6CC62343784
SHA1:	9E84FA0EC990B892B0F8413356AE087DE7E9EBBD
SHA-256:	D76ED433CD8BBB84C57F4BF6273956D762ED57E0A49ABFFF09BBA6025CF0AD7B
SHA-512:	591166764C037D61C3D478205BEC7A82A694801927C3A029881EB81A72530DD5FB0B03264618E19A82FDFBD009AC0507909BE3DB528C7C8CCB82678279A452D4
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js?v=1
Preview:	...........Y[s.6.~..Q.L.`FI...D..q..c+....$$1.I..-+...~..M....N......~..&e..(MlgY.Z....U.U.c..n.\|%..{=[.Y...7..JH.......!...O..1....7.......>..'e....!0...>1.M.......s+..^>...Z..q9...M ..[..(e.^o..[.z...`.Z.$L.n!.8..i..)/..=wG...D...w....C.,....m....I.....K........9. \|.a#;u...... ....5..+I..AeV&.0J..F..$.......V...!..RK...F.\..\.. .8.07...{$......h...O8..Jw[..Y6..Qh..`.(...K...8..09P..#.,`..f.qI..\|...{.h....pm.\.m.&.s...tI@....Y.m.sg.x.j.og]..+.AY6.&.8...7.5..Y.$...Z....6....w.f.d..Q.LV..3qTh....X5Ih.%....j..tb..kfB..o..;....3...8C...l.:.W..jF...1!..5..~/.j....t....3.......e..:".9........_.,.h..<.. .x..9.HD...1...w..Kq..Q^FW....VA'K.&..<.H.3l..>........M.....t.._....+B ..e6jK..A. ..+9...nRX.M.....\.....b...j55<..X...U...U0S...we..8.kY...@&._.......;h.e.=..&.H.e.d...;%.R.YH...tg~.a.\|....E..p..Q.Gj.T;.....'3.iQP....m..U.......KC..k.b0...w...z...9r[..R.h....K?.#.....e.!..5y.....s....G.oa.;..:............H......._Y&.W...X.u.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 96785
Category:	downloaded
Size (bytes):	33956
Entropy (8bit):	7.991968771236643
Encrypted:	true
SSDEEP:	768:SsPGTRshoLr0xnCnIfd60E3VdbgsTzMI27KtFuA80BZ:SsPAKkrkDfk0Kj2utFt
MD5:	97FB396179E04C590E1E2BA3201C4477
SHA1:	0D9E12D85E8F9F93E0E8F38F69D0DD89056CB2C1
SHA-256:	3FC7FD7B2BA0E0B2377240037ACE806B784E9CB38226CA29652A0CE3E41D00D1
SHA-512:	F2AD2515D7DA38FEB1C8E2DF39E22D3B03B9C1BE33EC37C6110576EBD76D35E95AD692483986CBC84C4F75A081DCEDDDC278D817CE4AED686C6187DE0FB6CB79
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1
Preview:	............v.F.7...BD.S...D;.....s\|.$.'N.t..h/..%.....,Ed?...1k...+...]U(\(.....t[.P.]..}......?...M...~.]E..y....K...=...G'..(tQ.........._...`.../G..."..qT&Wqt....<.<./..7.\|.Y.....?W.......b.....ZUO..M.._...NN........l...,....0J..Yy...,-....rn..x.GE.8./.5.9\|....U2.."........GzW}.o.Fe.p..'.18y.z.0.....W....&...n...;.{......p......rX.cz7..r....$)~I.E...Nz.`...I.-..T...N.'....W.v..V......'.......].S)4.-.K.....F.Iz.{;.....r.....8._...2.w]z..t.[#M..r.............O..d.RE.\|..K.....3?...D\|......5\..n&.nN.....m<-f.....cT{t.....M.[\.....1..4....9M......v.......K.R..d.....F..y..n.2.....;..K.lMcv........S..pe<.2N.\7.a`:.x....G!.....?5..`x-7..c...)..e.zB..M.Y.{...._.7.#ZB?.Va..x.....z.g..]...`.0.w.....^.(..e..m<.``.T.X.h..q..R...<..G....y.M.....,.G%:t.....B.(..r9-g.[.........X...u..Z..j.-<^f.;N...w. .S....&..:.Nz..{A.;..r]...PB.5..v.A..>6#.....x.."......{'.....Y^...g2a.m.#8..Hdb....b.={.".<.y.`S.9..I.g.....x...............C...y.......

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 223866
Category:	downloaded
Size (bytes):	54381
Entropy (8bit):	7.996196374903149
Encrypted:	true
SSDEEP:	1536:EiO34dr00G6ppPeagUMO3/KoZSlOHRA8T3Mdm:EN34NGcRwO3SmrG8j
MD5:	EA00290B9AF67BBDECBCE413A0832BE5
SHA1:	31613D1E496C6B52A6D74B48BBCAFD7C2EDB93CB
SHA-256:	813B87968A14E151D38B13FCA8B0D8B4F22745C7A821312143CAF2D8BFD52F31
SHA-512:	E798E3A2FA5DC29DF14EB277F1B8239D947D448EE1473F26B07074677F2A2C9728B73566BB56AB849194F7BEC5285A657D0DBE9255141A5FD7D2BE42BEC68848
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
Preview:	...........k{.F.0.}...gV.B.")Y.IA..I..>I.c'.=27.D6%.)...m......4(..l...h4.R.]].:.v..:.vzw._../.^..y.C.....w.............wo.;..~.L..2Y...=....di'.;I:..u..%+:W.o...2.:.%....l^..UR...9[eo;>4./:...<}...}..%.I._..5..,;iV&s........`.*]....2._v~J.yVd...9K.@'E..v.a'.Y.`eg...%.G...k.V...XPu...d...i../L0.p...&..d..o.B5....)..uV....$.E..vUP?X...!,.y..Y....q..dP=.....{..[C.bu....A...../r.XZ..<F.._w..5..f.vXQf.5[..R.o....6.t.Qd..........^o0....\.........x.3h.../X:.....EV]....2...]....g?..Q..~...w.W.0..w.U......r<...\.g....{..:0.......</...M..l...\|.._...l.9.6..Y._W..v.`....=./.t...YX.yp.&.;i... ....M.. ...s/.c.s..A.V..0.?...:.GI.e...zR..^%.$X=..x...>..8.E...]...0.X..Y.]\......S.Ag...r..he........V...`.,.=..O.~..5..D...m..}.V....8.)......1.......z..I..~.#T..w...^g.....7V.er...............sX...05....2NVU..u...$..e7..8.......X.....]... ..P}.....-...K.0h(.Y.e........c....E?)~....\|....-.s..O.z.......(.g......7.z..'...V2...YS..x{S.7.&%.1.?Yd...oV.acC...fpv.f

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 10141
Category:	downloaded
Size (bytes):	4374
Entropy (8bit):	7.957505627255931
Encrypted:	false
SSDEEP:	96:6DTXgGV36e6zsgzjPPUCm5U3+UwFDvJOSpLYlR0SWn2d2P:6rV360lAOtvJOnrLWnU2P
MD5:	BF39C8BB7CB5792B87CE7234E57F3F58
SHA1:	1F1F4C9378B08AD6A5E906732DFB6B9BBFCA2855
SHA-256:	AFDC8CCFDB872D84CF0699DF85F681AFF90AD94AB7FFD17F9256E898FBF55200
SHA-512:	46B433BA2CF4E08688C211E125E0CD426EE58CE1801B99DFA847C5B0F7135A44EE249B38C99215BE7BEA07E3B9986CB5AF85AA604C93130B457BCB1810DB598C
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/watson_DOaS_v-h3FCKtNPQv8zSLw2.js?v=1
Preview:	...........Z.W.H....B....](fzz.=;.....fK I.c\|8.T.E..h1......m6.L.9. .r..].{..q.yi."..4wcK.. .....t^..Q6..=..h.LxJ....&Z{Y..V\.....n.].{...f...0...n?e2^0^;.x....b T.K..,V..T.\2.e...;..0o....-..$..;.\n.6W.).-.O..~.."?.u9m;O{\|.._...#.%6.yI.g^.b'U.i.D...,......e4I.o.z.`o.al...6.V+..c.9.-y.#.J..7. F[..:Q.2>t.IG.Ul...hw.7q~L7m........2.....j..d....s,j...f..%.n....(....1.m.!p..........q..0...nw..2>.1..<g.K..U...F..XI..n:..d0.7.......m#.o.m...:..sc..t.hs....r<...Tj.Vq.}.uF.I^M.5RY.[..57...R..L.s..V.\_...s..e9^.^<.D[#....I.3..F........`.(..<..>...Ve..iE..M:Z.0..N............c.<n..kE...eK..N...O,.&..G.:.37.$..sV..:..._&...S....$..b1..x...........5...Y.L...u.`.l...W.g...q.r....!$......7.g8m.9G.%F.l.R ..s..O..}/......+...]...7..W+.&..l..]..;.$.b.".V.5.C....I(.8.....a.......0....mw.!".f(.<..].{....}...j .q4w..?..T.v..C....7g....)!.zXA..\....^e.....x..3.v2....*l.I.l....VkU.Z.sk<...SBA...RH...v.e..(.?...%...g.ij...!.nU..+.B%~.......H.o..n.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 443031
Category:	downloaded
Size (bytes):	120850
Entropy (8bit):	7.997400999194437
Encrypted:	true
SSDEEP:	3072:XE4j13eQFlT2imoo/zC5D3yK/WYdrWZxt6PaeH8H2AHZWT:xj1eQFc/oCcD3yKfdrWG6BHkT
MD5:	582D71DABFE828DBFE9B1260EDF6B423
SHA1:	4D33CA1F3E250A3A1E383070393AADEB34B1BBE2
SHA-256:	72823FD72771A5A87047BC23F6222F6A6FACFB6F50ADCBB3C40B9014A067B930
SHA-512:	2B88A81594229ABD57D55D52DDA8DCA1B4180B267564C1299CFCD2E2F56764AF765B47AA01B2641373DA172F1455692C26896975F78BC0E8D74CB08BAA5E26FA
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js
Preview:	............{.8.......f.cw...Vg]yTe;.3q..wS.\|.D;..W..........e......X$..A..A..O;.G.....W....o.........\|.G.rxsvt...`...7.~R.......0....(......(vR.Tf.o.;Ae.G.J...8...iR..$.Bc.D.T.{.+'N_+gW.:..6..P....!..Q......G...".X\y~.....Q.M.J.\.?A#...M..'f....I........!E..5.[L..:..{P.........8_...L...u..Ye..b.iTy.....x.pZ....j.......M.a&,~...A%..B.J....2..$x.Lc'D...`.i......cTt.Z.gs...L..$..s...R..~....?.(l..L.av....a.x.C.......>,.u.qc..>1g.B...F..^...N.cq.a...../..Lx...yV.j1..U.....+u:...q%.c..!..`..9.<....\/.v&...UYm).W.j._Q\}r`6t_.....c.c..m.}{w......N..do....mr.....@.i...Y..I..!.d.....C.....s......"y....R..m.`.R..J\..c=...6..c..F5x.......=........Z......+....e..24D...R.o.Z..E.V.w...Vfr@.mL.....c.".Z.V....B..T..S=....#.w.<muz..z...[5..q....N}K.[.b..&.......-.Z......s..RO....m......I....+1...Te....T\.8`g.0.F...TL}<]..Nt........`?....`Zb.S.S..}=$.;.y.Z...n."..)}..+.{8...._..a-..L...I)U....+y..H.W5.\.G..9.].z{.>.,=...%._o..3cU.....7

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (358)
Category:	downloaded
Size (bytes):	11816
Entropy (8bit):	5.037139572888145
Encrypted:	false
SSDEEP:	192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s
MD5:	A8063BD37D3C8FB3176A6BF140558A4D
SHA1:	E32CF4B407DB3D3773DED13FF64B70FDBAD7735F
SHA-256:	BCCB23D41C2CC69CF0C7D22C4314CA8181A513C6999B73E45307792830F4E482
SHA-512:	82D749F6B17B21587FB345CA196A2AA83ECA80AD66ED9C1AB88B36709BED14175D53AFEFE9ACC0DAFC4FAD78FFB8DF155193A6829BC857AD6D68B1C84AF7B854
Malicious:	false
Reputation:	low
URL:	https://reesecontractorservice.com/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head profile="http://gmpg.org/xfn/11">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <title>404 - PAGE NOT FOUND</title>...... Add Slide Outs -->.....<script src="http://code.jquery.com/jquery-3.3.1.min.js"></script> .....<script src="/cgi-sys/js/simple-expand.min.js"></script>. . <style type="text/css">. body{padding:0;margin:0;font-family:helvetica;}. #container{margin:20px auto;width:868px;}. #container #top404{background-image:url('/cgi-sys/images/404top_w.jpg');background-repeat:no-repeat;width:868px;height:168px;}. #container #mid404{background-image:url('/cgi-sys/images/404mid.gif');background-repeat:repeat-y;width:868px;}. #container #mid404 #gatorbottom{position:relative;left:39px;float:left;}. #

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://signup.dacreativeagency.com/Resources/images/favicon.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141261
Category:	downloaded
Size (bytes):	49630
Entropy (8bit):	7.994316684400418
Encrypted:	true
SSDEEP:	768:iFWGAfwUSq/j0ZkTHDcCVqGnkYH9UHxIqA/fH9xDIRKbtVI9Z2c6MF7Jx6GXwnk:iXUJ/j0cjcC7kLxIlFk8or6Mf4Fk
MD5:	C41A167EB4D247EA985814BFBEDA8EF0
SHA1:	7DA32999299C5EDC9EDCD06FEF531D6E528F7F5B
SHA-256:	2F52D29E6E4DFC7CB0CCAF30CC4010B91AA960EAC8369F95ECDB4EE9962FD2BC
SHA-512:	E57D902EFF37962A2F431D8219B0999E8A1449353FDEE94B51CD1C0967C4FBD07CF58F9DD14437E7E15B294EACE07B3723B45917072794A3B48197E8C25069EF
Malicious:	false
Reputation:	low
URL:	https://25a87cd0-12461a6c.dacreativeagency.com/shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js
Preview:	............[.8.8...+.w..O...hpp.K.......\.X.'V......4.9....d.C..{....%.RI.JU..RIZ.q..j?......w~Q...]\|>:?................./.6.&....^".Z......(.F.......q.Mj.8z....6..?.(Mj. I..PL..Z.........3.......!..E.gx.Oka..#Q.B.j..K...,.E\{..F...`.GI4Nk.....>.. .........6.....a...)kM.3.............."l.t...2Q8y..Fd.a{.m..Q.9..........!..`z^.4...R...D......x\#d%....:..d.\....Q.>.....B<.0..y....k....B=.j"I..TLpl.. ..".Z..$....I..n....k..Y.i:M.... ...m....j}...G..(zX.....K././.[...A.t..k8f.9.....T;... T.?..0.gj8.0...o0.1......]._.W.p.....E=..z.oQ\..`4.....ycy.uc%n..W7.d7.'".K.I.a.np..X.!....F..T..^....%S..e.........U\|..:..../..........@.5...=+...*.q=.1...........3;...i..s.A.enE.K.i.....B0..W...t..5\|..n.1...v1.}...8+-Kf:/.yW..X.....Vj.../.w....?.Vh}.....ZO.^.{.ZF..i-)..#..1..."P4&~3....](.j..z..;cI..5.I/E....$.".S.a.......ao8..I...T.S\|7C.N..........@jY.M..O...TE....tlo:.<.C+...H&.Z..L=..u....:...l.0%/...U..3M....y...M.F...^x.[x{}.^.Dz8!..\|x...N..Q7..0...gD

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://signup.dacreativeagency.com/Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkhQFIc29FCqBIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 200 x 200
Category:	dropped
Size (bytes):	81537
Entropy (8bit):	7.216865341795645
Encrypted:	false
SSDEEP:	1536:1WUNK+vRXEuDbHBXWNrWAXXeM8hSkYW/p:1WUNZ0yjNWxWpM8hSvWh
MD5:	2746720A36753363798163BD0A3C678A
SHA1:	147B24522C5CF383DEC9B1F7BB48455E60C53C27
SHA-256:	5D1CF7A38B838253D16D17B74AD87AA674F502C1DDA5CFCB06DD18DF222852C9
SHA-512:	EBB76112444346337112D37E31958A4C02885CCE14D04F292F43F420D0A7AA1D62E7BD3F41BE5DDF529D0E32B8FD7F6B8408D64153CCEF1C48FD5D751AA15405
Malicious:	false
Reputation:	low
Preview:	GIF89a.........0..<..@..H..K..Q..U..W..[..a..b..e..j..m..o..q..s..x..y..\|.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+N{...%..TYLs....P.i..g%

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (688), with no line terminators
Category:	downloaded
Size (bytes):	688
Entropy (8bit):	4.841691298678702
Encrypted:	false
SSDEEP:	12:qTE0sFjN26VyCaGuaXiMJMJivVWhVe1ITG7faKj2a:0E0sNNRACaGaMJMJivVWhVqIC75j2a
MD5:	EC6A14EF5DA32466A9AEC602E2A27A54
SHA1:	E0910D800516025A428A9FE0ACFAFA97BD44EDD9
SHA-256:	837FC091D645F7409C466909C68E2BC383DC52B7CE2B0F6B816B0ECA7E0AC434
SHA-512:	9B226459A35A261A75D99C894A72DDD52CA3896ED18BD0B92C2A2A9BE2C6803D917A2E8F458DFDBC1BEC286F30473ABCC833B673BB9125C65BE9767FBD219B84
Malicious:	false
Reputation:	low
URL:	https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/js/bundle.js
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captcha"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="public/manifest.json"/><title>Redirecting....</title><script defer="defer" src="/static/js/bundle.js"></script><script defer="defer" src="/static/js/main.bdf2bc27.js"></script><link href="/static/css/main.1b019d38.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 22961
Category:	downloaded
Size (bytes):	5564
Entropy (8bit):	7.969084579738236
Encrypted:	false
SSDEEP:	96:z6I4XZXVk41B1hFdJqnP/x0rTuwfifl0h3yajulA2TxxBM0iUGR+MrBN6Fz+w:z6Zlpvv7J6P/TwfifK5yb9vM0iUGdrnY
MD5:	4501B830B91D1E2579FFA5E4AE7DBF8E
SHA1:	98DC93FD4202A891E8F3BBAF7C66A34C975F99FC
SHA-256:	6D4FCBE3D08C3A13F4BCBD056FE459C62FC6D67ADC206E15EE25C87F4EF6E91D
SHA-512:	7202A274B5C14411458F8553204B803C1782E6E0912935DCAF24A9A1FBE4D05DF27D98FC6AF9167F3AD23E71764F72409F49D9E269230577CBE267560A0F26FE
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1
Preview:	...........<k..8...+.....pg..`.bd3...f..6..;.F...&2...4...W.DR...d..[.EV...".{..9.g_....B.y).%<$..itOF#2._..M!..b..".K..g.>.../..BG9...r#........Q.k......;g...J.Z..\|..].I."HSq..)Et.e../0...;....6."...Y.N.<%c.C.Iy...B..&)_....K.y.H....bN.......UUQE.. .7,_.M.4.....V...s"...A.fF.......6O..yV..2....A./..57..)...j...EJ....= ..j........X..&+/o)..pq.d....;..Qv./..........1. j..)#f"%S.B.x...F.H.1$..WQ\|.l.x.T.......5.%}.......2%@D...D@..A&)...u.$et...M.........<U0O..8.Y.C2?_.x.?...t..U..;.YD.P...zN...X.,-...A..().2..Y.M..E....J..K....S...W.> (a.e.`.j..A.......m..%e..l.Al.O.....-..~..$.D.d.....}..^.s.J...V...Q,....&/V.%..!.?.bOj.3..-3d0...........;....5.=.T-.5LF.- j...-d\....."..hD.K...D...q... ....K$..'jU.....h2Lk..!.wk....$...,...;..p.G<j..U.mq..s..`........K..f......88o..kp.M7z@.kZ...W#a....Jn..7.7..WW.)..A.,q."..\|.@........=s..3..1.D.Z.-=U.l..Ll.r,6..6;..I... .".[..9...5.B#..V.....6.<..F=.A.x./7.P.6%....V.6.Ab.}4.O;.....e&........ACU.\

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://signup.dacreativeagency.com/Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (944)
Category:	downloaded
Size (bytes):	989
Entropy (8bit):	5.066804933490808
Encrypted:	false
SSDEEP:	12:hMAJzm2P9yt1UrFdtgoe9wVqZGedf8gFEWYgpZqcdjrokyG80VnAvi18RIG:iAJxytGrFdqoe9wVGfNnYgpNxrAn09An
MD5:	4913A57B21EB3DB84EA2B9881206271B
SHA1:	25188D4B00BCC213D2C2CD2DF710753A5E42B219
SHA-256:	7FF3EB702B5C66748EA47174E0EFE537AFFB21F87CA963CBC38AEE67CE7703AF
SHA-512:	78C75139263CACB2F2CC99051EAB816FDC151BD5909928B777953FD0B2E2226C2529BEF32C1F4BFB437FD44E47FBE9332E0ED983131E4C45CF8A287C404B81B9
Malicious:	false
Reputation:	low
URL:	https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/static/css/main.1b019d38.css
Preview:	body{height:100vh;margin:0;padding:0}.footer{bottom:0;left:0;padding:1px;position:fixed;text-align:center;width:100%}.fade-in-out{-webkit-animation:fadeInOut 4s infinite;animation:fadeInOut 4s infinite}@-webkit-keyframes fadeInOut{0%{opacity:0}50%{opacity:1}to{opacity:0}}@keyframes fadeInOut{0%{opacity:0}50%{opacity:1}to{opacity:0}}.containerbox{align-items:center;display:flex}.image2{height:auto;width:50px}.image{height:auto;width:300px}.container{align-items:center;display:flex;flex-direction:column;height:80vh;justify-content:center}.checkbox-input{background:#e6e9e9 repeat-y 0;padding-left:85px}.verifyCheckbox{height:30px;width:30px}.cap-table{align-items:center;background-color:#f4f6f6;background-position:right 10px center;background-repeat:no-repeat;border:1px solid #e0e0e0;border-radius:3px;display:flex;height:70px;padding:10px;width:310px}.cap-table label{font-family:Geneva,sans-serif,Tahoma;font-size:14px;margin-left:5px}./# sourceMappingURL=main.1b019d38.css.map/

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 273318
Category:	downloaded
Size (bytes):	105834
Entropy (8bit):	7.996410221043013
Encrypted:	true
SSDEEP:	3072:IOcG69oi9Oh3ckkL3ciHtEKjVd/DXNAwegl9ol:nd6IkLMiiatzNal
MD5:	D6FADA2315022CAF922609437AAA13BF
SHA1:	0FFC4C70FAD3ADD4FD4ECC0336C70BBA0258127C
SHA-256:	E62E1B29FAFA7EBB8E59A05B6DF304B7118139CFD28E32A6DD9F5B6C44713F79
SHA-512:	087C6B7F91E25184D4F2A8E41E7FD6D1694006FCF28BAF4299235DB29138FEA5077B30930177EFD82A2A8AD96F59A215D88557DDADD804EE64DFB93C5728D110
Malicious:	false
Reputation:	low
URL:	https://adff02f8-12461a6c.dacreativeagency.com/oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1
Preview:	............is.H...}".?.....U.Im..].....Zlwst..Y.`Q..E.-..~.......{...L[D.[VVfVf.....[.Fg....q...'J4.Z..MN.'OIx}.5..8..I....D.. ..$..8I[....9.F.R..a..p.R.Q..(.7.......}.4"...Pr.G.,.#7.~:y..)51..r.K.HwD....4...P..H...Jg..Y.=M.#v.s..G..q.OT.=9".G\P<..^.K...4..#.E..D.......,J.w.{!..(...EW....Dey.5..p.hK)..%7..'.,-E.............h.R...L.....S"U../..2.!.....9..,s..6..<......'.I.F...gT.n...EW.. ..Eu..z[..cnh...S.u.4.G.5./-).9^Z..:z...R5.FLp.R.^...;.....IF...j.3..9...].....k.>.].cQE...a.y+/..m...x...... ...T........n.:.f..^.1l.QCU.....h....U".....B.....M.{.....}O ......u......_L.(.h...J..ii.^Q.*.K5.....w.S.W7...I.....jR....$cs.h..f....e45.j....a.Vv{L....3....}0.U.YV.N#L.QL.a...P...{nZD...FR.....]........O3c.mZKe.P.2.YN...U...EB.....0..q..p.t...>......,.=.\'...2....Q.(xD('Oo..E...u.:R.E....y..#......E.iG:....U..'......B...(m.......q..:.qgj.M..SrJ..C.j8..>.)....(1Qw.Z.>..4.'..x.F....._...Sb.m.w...O#.q~..:N)8..$...?...=.....

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://13d1c6b8-12461a6c.dacreativeagency.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 17:51:55.982656956 CET	49675	443	192.168.2.4	173.222.162.32
Mar 28, 2024 17:51:56.404623985 CET	49678	443	192.168.2.4	104.46.162.224
Mar 28, 2024 17:52:04.578192949 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.578233004 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.578299999 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.578711987 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.578752041 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.578811884 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.578907967 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.578921080 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.579140902 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.579155922 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.830480099 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.830840111 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.830858946 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.832043886 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.832237005 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.832252026 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.832362890 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.832432985 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.833491087 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.833595037 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.833607912 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.833667994 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.833751917 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.833759069 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.834698915 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.834784031 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.874495983 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.890563965 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:04.890574932 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:04.937051058 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.069833994 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.069986105 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.070065975 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.070477962 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.070497990 CET	443	49735	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.070508003 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.070564032 CET	49735	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.280404091 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.280441999 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.280514956 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.280729055 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.280744076 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.511044979 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.511342049 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.511367083 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.512435913 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.512516022 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.513858080 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.513921976 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.514234066 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.514241934 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:05.561119080 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:05.590744019 CET	49675	443	192.168.2.4	173.222.162.32
Mar 28, 2024 17:52:06.258548021 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.258615017 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.258769035 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.258833885 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.258878946 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.259131908 CET	49739	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.259146929 CET	443	49739	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.265105963 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.265146017 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.265209913 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.265877962 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.265891075 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.497999907 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.521606922 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.521640062 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.522135973 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.522871971 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.522871971 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.522897959 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.522952080 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.577389956 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.747715950 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.747957945 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:06.748487949 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.748819113 CET	49740	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:06.748832941 CET	443	49740	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.262830973 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.262833118 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.262855053 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.262864113 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.263511896 CET	49743	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.263541937 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.263560057 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.263564110 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.263684034 CET	49743	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.264106035 CET	49743	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.264111042 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.264120102 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.264122009 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.264287949 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.264297962 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.350827932 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:07.350852966 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:07.351674080 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:07.354101896 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:07.354114056 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:07.511634111 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.514748096 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.516486883 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.519121885 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.519150972 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.519836903 CET	49743	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.519864082 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.520241976 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.520311117 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.520329952 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.520332098 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.520395994 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.520684004 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.521198034 CET	49743	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.521258116 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.521744013 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.521812916 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.522723913 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.522792101 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.524597883 CET	49743	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.524622917 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.525060892 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.525077105 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.525304079 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.525331020 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.567874908 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.584024906 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:07.629771948 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:07.629787922 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:07.630882978 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:07.630960941 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:07.634809017 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:07.634865999 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:07.687115908 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:07.687127113 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:07.731045961 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:07.741103888 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.741205931 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.741261005 CET	49743	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.745325089 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.745348930 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.745417118 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.745425940 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.747487068 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.747606993 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.747862101 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.761256933 CET	49743	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.761286020 CET	443	49743	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.773595095 CET	49741	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.773618937 CET	443	49741	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.795875072 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.855959892 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.855995893 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.856024981 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.856044054 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.856054068 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.856090069 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.856095076 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.856185913 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.856404066 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.856467962 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.894918919 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.895029068 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.924271107 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:07.924309015 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:07.924551964 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:07.927017927 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:07.927033901 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:07.966720104 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.966799974 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.967123985 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.967200994 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.967585087 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.967650890 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.967955112 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.968027115 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:07.968306065 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:07.968367100 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.005183935 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.005232096 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.005259037 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.005266905 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.005311012 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.076859951 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.076951981 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.076982975 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.077039003 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.077389002 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.077466011 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.077718973 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.077778101 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.077886105 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.077956915 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.078124046 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.078185081 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.078221083 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.078260899 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.078265905 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.078298092 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.078345060 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.095630884 CET	49742	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.095649004 CET	443	49742	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.275927067 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.276027918 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.276535034 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.276577950 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.276652098 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.277594090 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.277637959 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.277714968 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.278166056 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.278181076 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.278542042 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.278558016 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.317325115 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.317342997 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.317627907 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.369982958 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.416234970 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.519881010 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.520253897 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.520275116 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.523027897 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.523802996 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.523894072 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.524183035 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.524209023 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.525113106 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.525420904 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.525449038 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.540796041 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.541296005 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.541389942 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.541642904 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.541661978 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.611233950 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.611318111 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.611407995 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.611491919 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.611491919 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.611515045 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.611524105 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.648899078 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.648936987 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.649097919 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.649462938 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:08.649482012 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.750534058 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.750560999 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.750610113 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.750626087 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.751102924 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.751135111 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.751189947 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.751205921 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.799468994 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.799469948 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.860573053 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.860583067 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.860634089 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.860641003 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.860703945 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.860723972 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.860743999 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.860835075 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.860846996 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.860912085 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.860918045 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.860954046 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.861030102 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.861031055 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.861071110 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.861087084 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.861116886 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.861314058 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.861367941 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.861515045 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.861565113 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.880239964 CET	49746	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.880264044 CET	443	49746	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.901324987 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.901398897 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.971721888 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.971786976 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.971925974 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.971982002 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.972074032 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.972129107 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.972256899 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.972315073 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.972420931 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.972459078 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.972480059 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.972486973 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.972536087 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.972543955 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:08.972587109 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:08.993968010 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:08.994091034 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:09.027600050 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:09.027615070 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:09.027885914 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:09.034270048 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:09.038835049 CET	49747	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.038852930 CET	443	49747	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.053368092 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.053406000 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.053527117 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.054222107 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.054234982 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.055488110 CET	49750	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.055519104 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.055582047 CET	49750	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.056444883 CET	49750	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.056459904 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.080230951 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:09.202963114 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.202999115 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.203119040 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.203289032 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.203327894 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.203428984 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.203602076 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.203614950 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.203950882 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.203965902 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.284410000 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.284928083 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.284949064 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.286371946 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.286437988 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.287455082 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.287518978 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.287662983 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.287976027 CET	49750	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.287996054 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.288245916 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.288254023 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.288347960 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.289014101 CET	49750	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.289083958 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.289545059 CET	49750	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.289580107 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.331521034 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:09.331583023 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:09.331659079 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:09.333045959 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:09.333065033 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:09.333080053 CET	49748	443	192.168.2.4	23.221.242.90
Mar 28, 2024 17:52:09.333086014 CET	443	49748	23.221.242.90	192.168.2.4
Mar 28, 2024 17:52:09.341717005 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.459176064 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.459656000 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.459680080 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.459712029 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.459970951 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.459996939 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.460757017 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.460829973 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.461270094 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.461334944 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.461349010 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.461411953 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.462229013 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.462292910 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.462641954 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.462647915 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.462889910 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.462898016 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.514975071 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.514986038 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.523308992 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.523402929 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.523463011 CET	49750	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.524940014 CET	49750	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.524941921 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.524969101 CET	443	49750	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.525034904 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.525207043 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.529241085 CET	49749	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.529254913 CET	443	49749	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.541065931 CET	49753	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.541094065 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.541171074 CET	49753	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.541455984 CET	49753	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.541470051 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670166969 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670193911 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670202017 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670227051 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670277119 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.670309067 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670321941 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.670398951 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670424938 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670437098 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670455933 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670488119 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.670509100 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.670530081 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.724291086 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.724291086 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.771662951 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.772553921 CET	49753	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.772574902 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.772960901 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.775007010 CET	49753	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.775078058 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.778326988 CET	49753	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.780566931 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780576944 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780601978 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780669928 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780679941 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780704975 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.780709982 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780719042 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.780719995 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.780738115 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.780755997 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.780771971 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780780077 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780831099 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.780966043 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.780997038 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.781028032 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.781033993 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.781040907 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.781049013 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.781055927 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.781075954 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.781111002 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.781125069 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.781176090 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.781183004 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.781236887 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.784920931 CET	49752	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.784943104 CET	443	49752	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.820244074 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.872404099 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.872450113 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.872473001 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.872524023 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.892568111 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.892601967 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.892687082 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.892687082 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.892760992 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.892817020 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.893265963 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.893327951 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.893631935 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.893693924 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.893970013 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.894020081 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.894030094 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.894037008 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.894102097 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:09.894150019 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.914865971 CET	49751	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:09.914880991 CET	443	49751	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:10.019695997 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:10.020025969 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:10.020085096 CET	49753	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:10.020642996 CET	49753	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:10.020663023 CET	443	49753	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:14.943542957 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:14.943623066 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:14.943680048 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:16.323076963 CET	49736	443	192.168.2.4	192.185.165.120
Mar 28, 2024 17:52:16.323112011 CET	443	49736	192.185.165.120	192.168.2.4
Mar 28, 2024 17:52:17.625190973 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:17.625257015 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:17.625451088 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:19.153861046 CET	49744	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:52:19.153898001 CET	443	49744	142.250.31.147	192.168.2.4
Mar 28, 2024 17:52:24.119376898 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.119410992 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.119699001 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.119949102 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.119978905 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.120141029 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.120155096 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.120188951 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.120449066 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.120464087 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.397202015 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.397283077 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.397507906 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.397520065 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.397737026 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.397753000 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.398704052 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.398788929 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.399256945 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.399363041 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.404612064 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.404613018 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.404691935 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.404701948 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.405081034 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.405087948 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.450541019 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.450541019 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:24.450551033 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:24.496535063 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.115968943 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.116056919 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.116132975 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.116772890 CET	49762	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.116787910 CET	443	49762	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.197321892 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.244247913 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319080114 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319118977 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319128036 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319164991 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319192886 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.319236040 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319256067 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.319554090 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319612026 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.319622993 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319641113 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.319665909 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.319698095 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.321285009 CET	49763	443	192.168.2.4	192.185.165.131
Mar 28, 2024 17:52:25.321314096 CET	443	49763	192.185.165.131	192.168.2.4
Mar 28, 2024 17:52:25.476593971 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.476623058 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.476878881 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.477338076 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.477339029 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.477350950 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.477360010 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.477464914 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.477616072 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.477627039 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.885010004 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.885179996 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.885390997 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.885409117 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.885560989 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.885586023 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.886588097 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.886672974 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.886718988 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.886820078 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.889251947 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.889251947 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.889265060 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.889322042 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.889410019 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.889486074 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.934559107 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.934559107 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.934577942 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.934578896 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:25.981807947 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:25.981808901 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.242078066 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.242106915 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.242116928 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.242250919 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.242278099 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.242357969 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.425267935 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.425282955 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.425298929 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.425307035 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.425326109 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.425379992 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.425400019 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.425427914 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.425504923 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.607569933 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.607603073 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.607670069 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.607683897 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.607716084 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.607726097 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.607733965 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.607738972 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.607767105 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.608545065 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.608563900 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.608638048 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.608642101 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.653920889 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.684477091 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.684498072 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.684521914 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.684567928 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.684617043 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.793262959 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.793314934 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.793348074 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.793375969 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.793407917 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.793440104 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.796746969 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.796763897 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.796818018 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.796824932 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.796868086 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.796889067 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.796948910 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.796964884 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.797010899 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.797018051 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.797059059 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.836558104 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.836581945 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.836635113 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.836654902 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.836673975 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.836704969 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.871586084 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.871609926 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.871663094 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.871691942 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.871707916 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.871872902 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.872596025 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.872611046 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.872662067 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.872667074 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.872700930 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.872719049 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.974328995 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.974353075 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.974410057 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.974436045 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.974452019 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.974483013 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.977266073 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.977283001 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.977328062 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.977339029 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.977371931 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.977391005 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.979592085 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.979609013 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.979695082 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.979701996 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.979743958 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.980655909 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.980674982 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.980742931 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.980750084 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.980792046 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.981430054 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.981446028 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.981488943 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.981494904 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.981528997 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.981547117 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.982481956 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.982498884 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.982594013 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.982599974 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.982665062 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.983339071 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.983386040 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.983407974 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.983412981 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.983447075 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.983469009 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:29.983481884 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:29.983536959 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:30.058424950 CET	49764	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:30.058454990 CET	443	49764	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:31.057830095 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:31.057883978 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:31.057956934 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:31.058559895 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:31.058578014 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:31.060447931 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:31.060533047 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:31.060544968 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:31.425474882 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:31.456702948 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:31.456739902 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:31.457195997 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:31.458872080 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:31.458952904 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:31.502394915 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:32.618720055 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:32.618808031 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:32.619010925 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:32.647243977 CET	49765	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:32.647267103 CET	443	49765	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:32.651246071 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:32.696230888 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723035097 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723066092 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723073959 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723100901 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723119020 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723125935 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723144054 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.723155975 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723252058 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.723332882 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723341942 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723367929 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723409891 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.723413944 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.723439932 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.778811932 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.904016018 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904033899 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904057026 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904066086 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904143095 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.904143095 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.904167891 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904175043 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904206991 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904264927 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.904264927 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.904269934 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904602051 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904618025 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904706001 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.904824018 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.904824018 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.907138109 CET	49766	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.907149076 CET	443	49766	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.938632011 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.938678026 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:36.942564964 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.942713022 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:36.942725897 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:37.310539007 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:37.310794115 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:37.310820103 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:37.311885118 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:37.311980009 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:37.313138008 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:37.313210964 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:37.313344955 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:37.313352108 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:37.365138054 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:40.925718069 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.925739050 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.925746918 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.925761938 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.925765038 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.925771952 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.925873995 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:40.925874949 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:40.925946951 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.926038027 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.926054955 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.926095963 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.926101923 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:40.926120043 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:40.926137924 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:40.926158905 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:40.972467899 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.108069897 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.108104944 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.108148098 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.108165026 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.108251095 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.108283997 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.108407974 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.108779907 CET	49767	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.108798027 CET	443	49767	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.345622063 CET	49768	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.345665932 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.345746040 CET	49768	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.346307993 CET	49768	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.346322060 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.372997999 CET	49769	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.373039007 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.377260923 CET	49769	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.378832102 CET	49769	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.378832102 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.378849983 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.378860950 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.379157066 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.379491091 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.379507065 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.380389929 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.380414009 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.381325006 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.381385088 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.381441116 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.381450891 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.381846905 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.381870985 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.381872892 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.381885052 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.713923931 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.714545965 CET	49768	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.714575052 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.714956045 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.719151974 CET	49768	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.719222069 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.720500946 CET	49768	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.764245987 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.779073000 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.779393911 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.779411077 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.780839920 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.780910015 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.781991959 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.782186985 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.782315969 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.782321930 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.790410042 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.790703058 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.790824890 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.790838003 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.791134119 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.791280031 CET	49769	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.791294098 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.791409016 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.791434050 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.791650057 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.791948080 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.792056084 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.792463064 CET	49769	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.792543888 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.792622089 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.792678118 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.793920040 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.793993950 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.797352076 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.797496080 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.797960997 CET	49769	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.798315048 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.798322916 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.825232029 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.840226889 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.843264103 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.843286037 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:41.843297958 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:41.889511108 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.187338114 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.187489033 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.187616110 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.189069986 CET	49770	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.189091921 CET	443	49770	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.278095961 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.278219938 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.280613899 CET	49769	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.281933069 CET	49769	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.281955004 CET	443	49769	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.556926012 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.556978941 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.557073116 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.557564020 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.557604074 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.557698965 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.568051100 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.568065882 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.568346977 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.568360090 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.844376087 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.844460011 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.844558001 CET	49768	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.854705095 CET	49768	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.854721069 CET	443	49768	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.933845043 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.934189081 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.934211016 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.935260057 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.935331106 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.937608004 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.937670946 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.938047886 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.938055038 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.945440054 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.945998907 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.946021080 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.947055101 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.947122097 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.947426081 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.947484016 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:43.981462002 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.996926069 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:43.996948957 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:44.041976929 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.359004021 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.359035969 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.359044075 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.359088898 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.359107971 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.359117031 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.359138012 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.359153032 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.359153986 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.360131025 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.360145092 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.360202074 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.360220909 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.360244036 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.363946915 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.364087105 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.364141941 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.364901066 CET	49774	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.364917040 CET	443	49774	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.373435020 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.405251026 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.416237116 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.539832115 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.539901018 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.539937973 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.539961100 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.539988041 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.540662050 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.540677071 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.540699959 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.540709019 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.540735960 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.540762901 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.540764093 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.541588068 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.541604042 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.541764975 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.541774988 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.541841030 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.567945004 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.567991018 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.568087101 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.568310022 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.568321943 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.585869074 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.585911036 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.585937023 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.585951090 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.585963011 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.586185932 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.586417913 CET	49771	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.586432934 CET	443	49771	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.637155056 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.637181997 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.637300014 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.637383938 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.637409925 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.637490988 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.637793064 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.637815952 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.638185024 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.638199091 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.638230085 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.638499975 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.638515949 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.638515949 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.638529062 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.935173988 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.935607910 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.935633898 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.936701059 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.936803102 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.937977076 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.938076973 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.938177109 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.984239101 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:45.994894028 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:45.994905949 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.024605989 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.024912119 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.024934053 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.026024103 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.026114941 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.027343988 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.027343988 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.027355909 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.027404070 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.032890081 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.033145905 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.033163071 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.034166098 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.034293890 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.034693003 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.034771919 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.035079002 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.035088062 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.036740065 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.036916018 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.036928892 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.037964106 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.038105965 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.038499117 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.038499117 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.038511992 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.038558006 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.049572945 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.079370022 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.079375982 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.079384089 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.080682039 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.080688953 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:46.127047062 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:46.127072096 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:47.744941950 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.744963884 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.744973898 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.745033979 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:47.745049953 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.745095015 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:47.925352097 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.925364017 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.925386906 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.925395966 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.925432920 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.925451040 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:47.925466061 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:47.925518990 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:47.930232048 CET	49776	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:47.930239916 CET	443	49776	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055346966 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055380106 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055387974 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055413008 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055424929 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055433989 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055459023 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:48.055480957 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055504084 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:48.055505991 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:48.055546999 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:48.058521986 CET	49778	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:48.058541059 CET	443	49778	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.338536024 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.338613987 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.338682890 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:49.339705944 CET	49775	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:49.339720964 CET	443	49775	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.561873913 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.561898947 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.561929941 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.561989069 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:49.562002897 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.563549995 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:49.804182053 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.804199934 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.804245949 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.804285049 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:49.804299116 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.804330111 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:49.804387093 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:49.986417055 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.986438036 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.986483097 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.986527920 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:49.986538887 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:49.986579895 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.031814098 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.169073105 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.169106007 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.169213057 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.169213057 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.169226885 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.169490099 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.169764042 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.169784069 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.169980049 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.169987917 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.170090914 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.170651913 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.170675039 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.170763016 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.170769930 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.170834064 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.171700001 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.171720982 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.171792984 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.171792984 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.171798944 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.171888113 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.172214031 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.172270060 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.172354937 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.172595024 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.173012018 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.176306963 CET	49777	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.176325083 CET	443	49777	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.206979036 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.207026958 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.211221933 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.213159084 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.213188887 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.223764896 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.223793030 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.223973989 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.224294901 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.224307060 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.546263933 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.546294928 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.546390057 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.547033072 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.547044039 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.578871012 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.579233885 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.579265118 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.579597950 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.579926014 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.580001116 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.580193043 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.593359947 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.593684912 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.593708992 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.594774961 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.594839096 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.595226049 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.595293999 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.595434904 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.595443010 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.620244026 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.639970064 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.803503036 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.803617001 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.803678036 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.833398104 CET	49773	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.833416939 CET	443	49773	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.923285007 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.924474955 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.924489975 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.925529957 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.925615072 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.928534031 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.928601027 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.929332972 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:50.929342031 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:50.969880104 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:52.220594883 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:52.220683098 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:52.221029997 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:52.221051931 CET	443	49779	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:52.221091986 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:52.221210957 CET	49779	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.407056093 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407092094 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407099962 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407133102 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407167912 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407177925 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.407203913 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407216072 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.407237053 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.407516003 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407531023 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407567978 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.407574892 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.407601118 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.446927071 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.589026928 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.589044094 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.589106083 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.589117050 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.589142084 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.589159012 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.589175940 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.589190006 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.589195013 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.589236975 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.589327097 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.590235949 CET	49780	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.590250015 CET	443	49780	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.636580944 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.636632919 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.636742115 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.637208939 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.637223005 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.639156103 CET	49783	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.639194965 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.639287949 CET	49783	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.639441967 CET	49783	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.639456034 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.647228003 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.647264004 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.647336006 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.647689104 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.647703886 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.734468937 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.734498024 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.734678984 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.736273050 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.736293077 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.737642050 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.737756014 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:53.737802029 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.741055012 CET	49781	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:53.741066933 CET	443	49781	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.008445024 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.010050058 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.011492968 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.011512041 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.011687040 CET	49783	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.011712074 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.011856079 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.012062073 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.012429953 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.012491941 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.012825966 CET	49783	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.012892008 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.013035059 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.013149023 CET	49783	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.022650003 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.022902012 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.022928953 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.024000883 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.024035931 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.024064064 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.024065971 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.024135113 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.024595976 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.024661064 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.024843931 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.024853945 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.025142908 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.025156021 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.056231022 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.056236029 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.066518068 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.109659910 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.110064983 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.110080957 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.111201048 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.111278057 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.112000942 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.112065077 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.112296104 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.112307072 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.153923988 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.297698021 CET	49788	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.297739983 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.297808886 CET	49788	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.298470974 CET	49788	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.298484087 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.398372889 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.398646116 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.398672104 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.398984909 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.399456978 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.399528027 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.401849985 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.444231987 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.671283007 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.671881914 CET	49788	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.671916008 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.672265053 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.674559116 CET	49788	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.674621105 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:54.675152063 CET	49788	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:54.716233969 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.462562084 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.462986946 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.463011026 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.463062048 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.463078022 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.463123083 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.463176012 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.464009047 CET	49782	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.464029074 CET	443	49782	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.465607882 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.465745926 CET	49783	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.467010021 CET	49783	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.467029095 CET	443	49783	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.610105038 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.613553047 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.613635063 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.613650084 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.613723040 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.613960028 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.613974094 CET	443	49785	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.614042044 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.614042044 CET	49785	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.661820889 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.666522980 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.666826963 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.666970015 CET	49784	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.666985989 CET	443	49784	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.730855942 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.730904102 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.731065989 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.731131077 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.731159925 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.731261969 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.731292009 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.731319904 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.731398106 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.732198000 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.732206106 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.732441902 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.732858896 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.732861042 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.732873917 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.732880116 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.733011961 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.733019114 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:55.733175993 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:55.733187914 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.104150057 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.104475021 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.104504108 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.105532885 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.105667114 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.106055021 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.106115103 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.106266022 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.106275082 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.134152889 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.134398937 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.134426117 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.135549068 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.135737896 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.135988951 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.136077881 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.136085033 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.136095047 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.140182018 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.141164064 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.149054050 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.149063110 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.149074078 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.149091959 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.150197029 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.150207043 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.150279999 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.150362968 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.150917053 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.150964022 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.150984049 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.151026964 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.151043892 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.151129961 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.160782099 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.176284075 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.176296949 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.191076994 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.191085100 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.191149950 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.191171885 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.222987890 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.235622883 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.235969067 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.239082098 CET	49788	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.239178896 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.242450953 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.244565010 CET	49788	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.244586945 CET	443	49788	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.459695101 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.459717035 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.459745884 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.459781885 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.459805965 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.459829092 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.459908009 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.460937977 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.460974932 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.461054087 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.461054087 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.461076021 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.461249113 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.461319923 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:56.461344957 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.463129997 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.463367939 CET	49787	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:56.463386059 CET	443	49787	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.562990904 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.566881895 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.567087889 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.567157030 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.567816019 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.567833900 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.567909002 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.567914009 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.567922115 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.571312904 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.572388887 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.573890924 CET	49791	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.573921919 CET	443	49791	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.574919939 CET	49789	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.574947119 CET	443	49789	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.578964949 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.579051971 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.579294920 CET	49790	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.579308033 CET	443	49790	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.647953033 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.653321028 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:52:57.653464079 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.653814077 CET	49792	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:52:57.653825998 CET	443	49792	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:00.252499104 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:00.252538919 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:00.252736092 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:00.254981995 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:00.254996061 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:00.630686045 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:00.634701967 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:00.634722948 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:00.640821934 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:00.641269922 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:00.641391993 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:00.641676903 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:00.684242964 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:02.191082001 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:02.191164970 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:02.191610098 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:02.191637993 CET	443	49795	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:02.191677094 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:02.191713095 CET	49795	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.829255104 CET	49797	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.829298973 CET	443	49797	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:05.829463005 CET	49797	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.829766035 CET	49797	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.829781055 CET	443	49797	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:05.840725899 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.840770960 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:05.840893030 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.841320992 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.841353893 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:05.841592073 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.841958046 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.841959000 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.841974974 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:05.842008114 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:05.842834949 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.842850924 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:05.842878103 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.843223095 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:05.843240976 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.196271896 CET	443	49797	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.197051048 CET	49797	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.197066069 CET	443	49797	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.197395086 CET	443	49797	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.197855949 CET	49797	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.197915077 CET	443	49797	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.217597008 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.217974901 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.217999935 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.218323946 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.222012043 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.222095013 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.222336054 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.228287935 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.228612900 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.228636980 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.229598045 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.230020046 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.230093956 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.230191946 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.230370998 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.230756998 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.230792046 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.231709003 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.231935978 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.233920097 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.233920097 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.233933926 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.234002113 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.246781111 CET	49797	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.268240929 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.272238970 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.277415037 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:06.277426958 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:06.323476076 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.289269924 CET	49801	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:53:07.289319992 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:07.289391994 CET	49801	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:53:07.289675951 CET	49801	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:53:07.289690971 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:07.497486115 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:07.498153925 CET	49801	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:53:07.498182058 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:07.498473883 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:07.499145985 CET	49801	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:53:07.499206066 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:07.547355890 CET	49801	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:53:07.729341984 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.729784966 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.729991913 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.730025053 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.730106115 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.730222940 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.730487108 CET	49799	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.730504036 CET	443	49799	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.736104965 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.736138105 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.736442089 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.736442089 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.736469984 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.752891064 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.756474018 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.756632090 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.756654024 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.756668091 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.756728888 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.756728888 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.757462025 CET	49800	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.757473946 CET	443	49800	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.761220932 CET	49803	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.761256933 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.761425972 CET	49803	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.762974977 CET	49803	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.762993097 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.905965090 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.905988932 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.906056881 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:07.906076908 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.906188965 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.907565117 CET	49798	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:07.907594919 CET	443	49798	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.108963013 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.109462023 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.109487057 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.109770060 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.110395908 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.110395908 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.110409975 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.110462904 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.135232925 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.135551929 CET	49803	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.135576963 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.135901928 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.137368917 CET	49803	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.137434006 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.137579918 CET	49803	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.154973030 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.184242010 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.227997065 CET	49804	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.228043079 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.228144884 CET	49804	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.228478909 CET	49804	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.228492975 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.230775118 CET	49805	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.230812073 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.230958939 CET	49805	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.234977007 CET	49805	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.234988928 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.243535995 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.243567944 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.243669987 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.246985912 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.247000933 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.598392963 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.598720074 CET	49804	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.598747969 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.599071026 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.599512100 CET	49804	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.599580050 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.599862099 CET	49804	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.605185986 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.605412006 CET	49805	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.605422020 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.605690956 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.605974913 CET	49805	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.606035948 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.606137037 CET	49805	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.616487026 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.616693974 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.616708040 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.617033958 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.617453098 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.617523909 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.617753029 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:08.644241095 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.648231983 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:08.664235115 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.267585993 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.267633915 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.267704964 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.267761946 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.267803907 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.267857075 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.268009901 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.268023968 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.268357992 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.268373013 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.610173941 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.615612984 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.615763903 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.616399050 CET	49803	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.625021935 CET	49803	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.625046968 CET	443	49803	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.657603979 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.658468962 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.658688068 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.658713102 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.659092903 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.659127951 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.659143925 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.659630060 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.659697056 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.659935951 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.659960032 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.660070896 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.660973072 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.661051035 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.702088118 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.702088118 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.775194883 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.778958082 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.779067039 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:09.779067039 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.779248953 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.779704094 CET	49802	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:09.779715061 CET	443	49802	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.073960066 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.080355883 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.080499887 CET	49804	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.080959082 CET	49804	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.080979109 CET	443	49804	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.086430073 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.086472034 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.086607933 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.086931944 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.086944103 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.217902899 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.222548962 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.222608089 CET	49805	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.224962950 CET	49805	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.224975109 CET	443	49805	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.225930929 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.225956917 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.226125956 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.226367950 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.226378918 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.435065985 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.435142040 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.435338020 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.435357094 CET	443	49806	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.435369015 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.435369015 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.435517073 CET	49806	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.455152988 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.455445051 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.455460072 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.455801010 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.456301928 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.456301928 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.456357956 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.501339912 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.603445053 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.603681087 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.603693008 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.604013920 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.604362011 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.604418993 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.604548931 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:10.652244091 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:10.656229019 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:11.854655981 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:11.870332003 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:11.870939970 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:11.871505022 CET	49809	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:11.871522903 CET	443	49809	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:11.987924099 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:11.988006115 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:11.988153934 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:11.990346909 CET	49807	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:11.990365982 CET	443	49807	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.142988920 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.143027067 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.147093058 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.147651911 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.147664070 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.148344994 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.152358055 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.152484894 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.152694941 CET	49810	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.152708054 CET	443	49810	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.517330885 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.517615080 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.517632961 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.518491983 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.518552065 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.519897938 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.519897938 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.519908905 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.519949913 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.560434103 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:12.560441017 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:12.608823061 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:14.948008060 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:14.948077917 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:14.948096991 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:14.948139906 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:14.948190928 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:14.950244904 CET	49811	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:14.950261116 CET	443	49811	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:14.952178955 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:14.952238083 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:15.345989943 CET	49723	80	192.168.2.4	199.232.214.172
Mar 28, 2024 17:53:15.346373081 CET	49724	80	192.168.2.4	199.232.214.172
Mar 28, 2024 17:53:15.445449114 CET	80	49723	199.232.214.172	192.168.2.4
Mar 28, 2024 17:53:15.445493937 CET	80	49723	199.232.214.172	192.168.2.4
Mar 28, 2024 17:53:15.445664883 CET	49723	80	192.168.2.4	199.232.214.172
Mar 28, 2024 17:53:15.446290016 CET	80	49724	199.232.214.172	192.168.2.4
Mar 28, 2024 17:53:15.446307898 CET	80	49724	199.232.214.172	192.168.2.4
Mar 28, 2024 17:53:15.446396112 CET	49724	80	192.168.2.4	199.232.214.172
Mar 28, 2024 17:53:17.442002058 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.442075968 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.442224979 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:17.450197935 CET	49808	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:17.450216055 CET	443	49808	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.452192068 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:17.452241898 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.452315092 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:17.452841043 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:17.452857018 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.517034054 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:17.517090082 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:17.517260075 CET	49801	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:53:17.819050074 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.819441080 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:17.819468021 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.819765091 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.820103884 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:17.820183992 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:17.820281982 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:17.864233971 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:19.185759068 CET	49801	443	192.168.2.4	142.250.31.147
Mar 28, 2024 17:53:19.185797930 CET	443	49801	142.250.31.147	192.168.2.4
Mar 28, 2024 17:53:19.723488092 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:19.723537922 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:19.723746061 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:19.725147009 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:19.725153923 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:20.095035076 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:20.146745920 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:20.209961891 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:20.209985971 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:20.212624073 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:20.213191032 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:20.214015961 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:20.214030027 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:20.216269970 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:20.268465042 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.020663977 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.020759106 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.022001028 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.022026062 CET	443	49813	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.022053003 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.022109985 CET	49813	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.390115976 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.390147924 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.390223026 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.390250921 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.391279936 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.562994957 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.563038111 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.563608885 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.564004898 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.564023018 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.571206093 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.571214914 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.571258068 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.571294069 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.571309090 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.571340084 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.571403980 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.751629114 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.751660109 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.751707077 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.751727104 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.751744032 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.751766920 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.751952887 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.752007961 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.752012968 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.752034903 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.752052069 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.752084017 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.752969027 CET	49812	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.752985001 CET	443	49812	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.759387970 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.759419918 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.759624004 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.760871887 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.760888100 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.763827085 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.763859987 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.763916969 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.764297962 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.764311075 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.764868975 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.764898062 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.765002966 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.765197992 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.765218973 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.765351057 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.765644073 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.765669107 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.765845060 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.765856981 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.765856981 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.766084909 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.766098022 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.766225100 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.766242027 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.931370974 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.931653976 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.931668997 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.932574034 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.932631016 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.933741093 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.933794022 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.933919907 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:22.933928013 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:22.983819962 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.152960062 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.153510094 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.153529882 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.153634071 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.153958082 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.153981924 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.154455900 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.154511929 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.154910088 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.155061960 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.155123949 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.155132055 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.155162096 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.155217886 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.155457020 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.155544043 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.155549049 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.155565023 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.181396008 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.181670904 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.181684971 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.182883024 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.182940006 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.183275938 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.183397055 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.183402061 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.183471918 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.188702106 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.188965082 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.189006090 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.189026117 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.189244986 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.189271927 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.190242052 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.190295935 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.190407038 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.190460920 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.190634966 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.190686941 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.190956116 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.191020012 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.191116095 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.191121101 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.191184998 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.191194057 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.204047918 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.204049110 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.204057932 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.234903097 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.234910965 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:23.234945059 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.234951973 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.250262976 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:23.283005953 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.547352076 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.593008995 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.625993967 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.626058102 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.626113892 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.626183033 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.626234055 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.627844095 CET	49819	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.627862930 CET	443	49819	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.695764065 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.695785046 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.695847988 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.695853949 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.695903063 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.700109005 CET	49815	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.700130939 CET	443	49815	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.736793041 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.736814976 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.736820936 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.736866951 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.736879110 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.736891985 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.736936092 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.737653971 CET	49817	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.737668037 CET	443	49817	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.845568895 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.845585108 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.846190929 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.846235991 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.846308947 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.846637964 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.846654892 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947796106 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947819948 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947829008 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947849035 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947858095 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947880983 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947881937 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.947907925 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947918892 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947925091 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.947941065 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947951078 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.947983027 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.947987080 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.948007107 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:26.948019028 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.948061943 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.949502945 CET	49816	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:26.949513912 CET	443	49816	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027502060 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027520895 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027529001 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027542114 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027549982 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027556896 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027590036 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.027607918 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027622938 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.027646065 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.027662992 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027687073 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.027730942 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.028934002 CET	49814	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.028949022 CET	443	49814	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.216840982 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.217246056 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.217272997 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.218152046 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.218216896 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.220921993 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.220979929 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.221277952 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.221285105 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.263622046 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.301254034 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.301278114 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.301285982 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.301305056 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.301332951 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.301332951 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.301357031 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.301369905 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.301414013 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.302120924 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.302158117 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.302177906 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.302184105 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.302212954 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.302227974 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.482124090 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.482151031 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.482199907 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.482212067 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.482248068 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.482270956 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.482588053 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.482646942 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.482654095 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.482673883 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.482721090 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.739368916 CET	49818	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.739397049 CET	443	49818	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.942222118 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.942265034 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:27.942339897 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.943305016 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:27.943320990 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.336662054 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.337724924 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:28.337742090 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.338063002 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.339164019 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:28.339221954 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.376697063 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:28.424245119 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.607997894 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.657416105 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:28.680378914 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.680434942 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:28.680444002 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.680478096 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:28.680521011 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:28.680865049 CET	49820	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:28.680876017 CET	443	49820	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.396013975 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.396050930 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.396059990 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.396085024 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.396100998 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.396104097 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.396121025 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.396140099 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.397347927 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.397367954 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.397418022 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.397428036 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.397463083 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.397761106 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.397818089 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.397825956 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.397836924 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.397882938 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.398765087 CET	49821	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.398778915 CET	443	49821	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.411911964 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.411950111 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.412188053 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.412420034 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.412436008 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.778233051 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.780370951 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.780392885 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.780699015 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.781521082 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.781580925 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.781703949 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:30.824235916 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:30.825176001 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.303848982 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.303868055 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.304162979 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.304162025 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.304420948 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.306967974 CET	49823	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.306989908 CET	443	49823	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.310967922 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.311001062 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.311167955 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.311821938 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.311847925 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.312011957 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.312154055 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.312165976 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.312464952 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.312477112 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.354947090 CET	49827	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.354965925 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.355103016 CET	49827	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.355353117 CET	49827	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.355364084 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.709917068 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.710144997 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.710160017 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.710594893 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.710906029 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.710983038 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.711514950 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.711527109 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.711565018 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.712102890 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.712297916 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.712311983 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.712660074 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.713022947 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.713077068 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.713176966 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.727298021 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.727495909 CET	49827	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.727507114 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.727801085 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.728112936 CET	49827	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.728167057 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.728398085 CET	49827	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:32.760234118 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:32.772241116 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.269251108 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.269274950 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.269341946 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.269342899 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.269386053 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.270788908 CET	49825	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.270800114 CET	443	49825	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.348639965 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.348722935 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.348793983 CET	49827	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.348995924 CET	49827	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.349014044 CET	443	49827	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.677192926 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.677330971 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.677392006 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.677865982 CET	49826	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.677881002 CET	443	49826	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.701489925 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.701548100 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.701806068 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.708734035 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.708771944 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.730206013 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.730249882 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.730324984 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.731050968 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.731055975 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.733864069 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.733916998 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.734178066 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.734838963 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.734868050 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.734955072 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.735538006 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.735553026 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.736195087 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.736210108 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.737379074 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.737402916 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.737466097 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.738012075 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.738023996 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.738615990 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.738643885 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.738743067 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.738982916 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.738993883 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.739516020 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.739531994 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.739629030 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.739784002 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.739794970 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.740433931 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.740454912 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.740555048 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.742052078 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.742063999 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.937201977 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.937242031 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:34.937314034 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.937652111 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:34.937670946 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.080488920 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.081331015 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.081371069 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.081666946 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.082392931 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.082459927 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.082880974 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.082916021 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.082984924 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.083014965 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.097819090 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.098280907 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.098297119 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.098591089 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.099900007 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.099958897 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.100286007 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.113400936 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.113847971 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.113858938 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.114186049 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.115156889 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.115219116 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.115611076 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.148237944 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.159738064 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.160226107 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.160466909 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.160482883 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.161777973 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.161842108 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.163157940 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.163285971 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.163435936 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.163441896 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.168312073 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.168725967 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.168746948 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.169394970 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.169610977 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.169893026 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.169941902 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.170136929 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.196235895 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.196259975 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.196739912 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.197006941 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.197067022 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.197453022 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.197467089 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.197654963 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.197669983 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.197803974 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.198599100 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.198684931 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.198863029 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.198921919 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.199934959 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.200001001 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.200355053 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.200370073 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.200974941 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.201061964 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.201421022 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.201802015 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.201968908 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.201977015 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.215940952 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.244239092 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.244240999 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.246948957 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.246965885 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.304537058 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.311189890 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.311216116 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.312416077 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.312484026 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.313436985 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.313500881 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.313802004 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:35.313808918 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:35.355331898 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.496303082 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.496395111 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.496471882 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.512370110 CET	49828	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.512388945 CET	443	49828	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.656259060 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.660022020 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.660090923 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.660106897 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.660120010 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.660166979 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.660718918 CET	49833	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.660729885 CET	443	49833	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.678818941 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.678839922 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.678891897 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.678890944 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.678942919 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.679737091 CET	49831	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.679750919 CET	443	49831	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.686191082 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.686209917 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.691076040 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.691178083 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.691183090 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.691215992 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.691457987 CET	49834	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.691468000 CET	443	49834	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.731276989 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.759174109 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.759251118 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.759363890 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.759757996 CET	49829	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.759768009 CET	443	49829	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.785793066 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.785944939 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.786010027 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.805665970 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.805684090 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.805732965 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.805751085 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.805763006 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.805811882 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.806385994 CET	49832	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.806396008 CET	443	49832	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.842534065 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.842556000 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.842606068 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.842617035 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.842691898 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:36.842883110 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.843146086 CET	49830	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:36.843157053 CET	443	49830	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.115300894 CET	49836	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.115329027 CET	443	49836	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.117427111 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.117471933 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.117597103 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.118294954 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.118305922 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.166709900 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.166738987 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.166871071 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.167176962 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.167192936 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.169368982 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.169404984 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.169481039 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.169817924 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.169831991 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.488432884 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.489043951 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.489056110 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.489350080 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.490663052 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.490722895 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.491086006 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.532368898 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.532753944 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.532767057 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.533054113 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.534384012 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.534446955 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.535135031 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.536242008 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.538882971 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.539310932 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.539334059 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.539702892 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.540246010 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.540308952 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.540620089 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:37.580231905 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:37.584247112 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634645939 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634668112 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634675980 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634706974 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634718895 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634730101 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634733915 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.634754896 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634785891 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.634905100 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634918928 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634952068 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.634962082 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.634990931 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.685127974 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.817946911 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.817961931 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.817991018 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.818150997 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.818150997 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.818978071 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.818994045 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.819042921 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.819050074 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.819092035 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.820028067 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.820041895 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.820106983 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.820112944 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.820153952 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.986263990 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.986287117 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.986344099 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.986365080 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.986475945 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:38.986522913 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.988464117 CET	49839	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:38.988480091 CET	443	49839	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.001312971 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.001329899 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.001362085 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.001400948 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.001418114 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.001442909 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.001463890 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.001543045 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.001601934 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.001607895 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.001617908 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.001655102 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.002448082 CET	49835	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.002456903 CET	443	49835	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.373011112 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.420749903 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.453969002 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.454150915 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:39.454232931 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.540448904 CET	49838	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:39.540465117 CET	443	49838	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.754424095 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.754504919 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.754565954 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:41.823175907 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.823196888 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.823219061 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.823281050 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:41.823281050 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:41.823297024 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.823333979 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.823368073 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:41.823374033 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.823390961 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:41.823405027 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:41.823479891 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.006221056 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.006254911 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.006283045 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.006295919 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.006325960 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.006526947 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.007271051 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.007288933 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.007395029 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.007402897 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.007455111 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.008069992 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.008084059 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.008172989 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.008173943 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.008182049 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.008351088 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.008512020 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.008574009 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.008594990 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.009466887 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.009466887 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.211162090 CET	49772	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.211180925 CET	443	49772	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.211504936 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.211540937 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.211709976 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.212069988 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.212083101 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.213593960 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.213608980 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.213617086 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.213641882 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.213706970 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.213709116 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.213881016 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.213895082 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.214023113 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.214034081 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.310687065 CET	49837	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.310714960 CET	443	49837	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.576843023 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.578968048 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.578984976 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.579262018 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.579889059 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.579889059 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.579901934 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.579941034 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.597412109 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.597664118 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.597681046 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.598545074 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.598611116 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.603684902 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.607836962 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.607902050 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.608074903 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.608088017 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.608270884 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.608277082 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.608709097 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.609355927 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.609355927 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.609371901 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.609519958 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:42.622967005 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.653877974 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:42.653897047 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:44.021774054 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.024240971 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.024311066 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:44.024327993 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.024594069 CET	443	49841	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.024864912 CET	49841	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:44.044811964 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.048609972 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.048683882 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:44.048701048 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.048744917 CET	443	49840	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.048815966 CET	49840	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:44.450036049 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.450072050 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.450134039 CET	49842	443	192.168.2.4	209.38.240.137
Mar 28, 2024 17:53:44.450156927 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.450191021 CET	443	49842	209.38.240.137	192.168.2.4
Mar 28, 2024 17:53:44.450340986 CET	49842	443	192.168.2.4	209.38.240.137

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 17:52:03.067152023 CET	53	60370	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:03.097640038 CET	53	58650	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:03.670989990 CET	53	54336	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:04.445911884 CET	58857	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:04.446302891 CET	62836	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:04.563756943 CET	53	62836	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:04.577589035 CET	53	58857	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:05.072490931 CET	58506	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:05.072627068 CET	51744	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:05.249219894 CET	53	51744	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:05.279726028 CET	53	58506	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:07.250514030 CET	54440	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:07.250514030 CET	54516	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:07.346398115 CET	53	54516	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:07.346910000 CET	53	54440	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:09.066378117 CET	57330	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:09.067020893 CET	53915	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:09.197484016 CET	53	57330	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:09.202457905 CET	53	53915	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:22.456648111 CET	53	50207	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:23.955547094 CET	61135	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:23.955548048 CET	50767	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:24.087141037 CET	53	50767	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:24.118602991 CET	53	61135	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:25.194494009 CET	55162	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:25.194958925 CET	53657	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:25.455425978 CET	53	55162	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:25.475904942 CET	53	53657	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:26.926687956 CET	138	138	192.168.2.4	192.168.2.255
Mar 28, 2024 17:52:36.756915092 CET	51869	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:36.756915092 CET	62127	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:36.904544115 CET	53	62127	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:37.015969038 CET	53	51869	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:41.385159016 CET	53	64269	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:43.280538082 CET	63957	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:43.281114101 CET	59746	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:43.418555021 CET	53	63957	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:43.563705921 CET	53	59746	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:45.377208948 CET	63416	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:45.377356052 CET	54048	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:45.381510973 CET	55513	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:45.381766081 CET	51505	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:45.499502897 CET	53	51505	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:45.567379951 CET	53	55513	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:45.587897062 CET	53	54048	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:45.636313915 CET	53	63416	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:50.249932051 CET	59829	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:50.250190973 CET	62730	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:50.514585018 CET	53	62730	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:50.545484066 CET	53	59829	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:53.831768036 CET	53	52207	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:55.472649097 CET	63036	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:55.473129034 CET	56053	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:52:55.636837006 CET	53	56053	1.1.1.1	192.168.2.4
Mar 28, 2024 17:52:55.730083942 CET	53	63036	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:02.618452072 CET	53	60174	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:04.375778913 CET	53	65173	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:11.995691061 CET	61072	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:11.995851040 CET	52758	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:12.113995075 CET	53	61072	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:12.214112997 CET	53	52758	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:22.410475016 CET	55931	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:22.410729885 CET	60111	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:22.530313969 CET	53	55931	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:22.563430071 CET	50305	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:22.563776970 CET	58419	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:22.564609051 CET	53812	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:22.564609051 CET	57118	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:22.564898014 CET	51541	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:22.565061092 CET	60945	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:22.594002962 CET	53	60111	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:22.710259914 CET	53	60945	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:22.716761112 CET	53	58419	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:22.717685938 CET	53	51541	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:22.740998030 CET	53	57118	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:22.799715996 CET	53	50305	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:22.844439030 CET	53	53812	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:26.653364897 CET	56358	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:26.654226065 CET	55525	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:26.805444956 CET	53	56358	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:26.912992001 CET	53	55525	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:30.985492945 CET	53	60866	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:34.747369051 CET	56270	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:34.748148918 CET	50216	53	192.168.2.4	1.1.1.1
Mar 28, 2024 17:53:34.891488075 CET	53	50216	1.1.1.1	192.168.2.4
Mar 28, 2024 17:53:34.935934067 CET	53	56270	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 28, 2024 17:52:37.016206980 CET	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable
Mar 28, 2024 17:52:43.563788891 CET	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable
Mar 28, 2024 17:53:12.214190960 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Mar 28, 2024 17:53:22.594086885 CET	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable
Mar 28, 2024 17:53:26.913069010 CET	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 17:52:04.445911884 CET	192.168.2.4	1.1.1.1	0x49c0	Standard query (0)	blee58.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:04.446302891 CET	192.168.2.4	1.1.1.1	0xbc22	Standard query (0)	blee58.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:05.072490931 CET	192.168.2.4	1.1.1.1	0x311	Standard query (0)	mecom-netorgft0926682-sharepoint-com-f3.blee58.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:05.072627068 CET	192.168.2.4	1.1.1.1	0xa5ad	Standard query (0)	mecom-netorgft0926682-sharepoint-com-f3.blee58.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:07.250514030 CET	192.168.2.4	1.1.1.1	0x6b57	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:07.250514030 CET	192.168.2.4	1.1.1.1	0x4c13	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:09.066378117 CET	192.168.2.4	1.1.1.1	0x2f6d	Standard query (0)	mecom-netorgft0926682-sharepoint-com-f3.blee58.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:09.067020893 CET	192.168.2.4	1.1.1.1	0xc59a	Standard query (0)	mecom-netorgft0926682-sharepoint-com-f3.blee58.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:23.955547094 CET	192.168.2.4	1.1.1.1	0xdfae	Standard query (0)	reesecontractorservice.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:23.955548048 CET	192.168.2.4	1.1.1.1	0xc4fd	Standard query (0)	reesecontractorservice.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:25.194494009 CET	192.168.2.4	1.1.1.1	0x5a4b	Standard query (0)	onlines.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:25.194958925 CET	192.168.2.4	1.1.1.1	0xbf6e	Standard query (0)	onlines.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:36.756915092 CET	192.168.2.4	1.1.1.1	0xf31e	Standard query (0)	25a87cd0-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:36.756915092 CET	192.168.2.4	1.1.1.1	0xc367	Standard query (0)	25a87cd0-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:43.280538082 CET	192.168.2.4	1.1.1.1	0xf118	Standard query (0)	55bace4f-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:43.281114101 CET	192.168.2.4	1.1.1.1	0xc064	Standard query (0)	55bace4f-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:45.377208948 CET	192.168.2.4	1.1.1.1	0x29ff	Standard query (0)	13d1c6b8-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:45.377356052 CET	192.168.2.4	1.1.1.1	0xcf24	Standard query (0)	13d1c6b8-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:45.381510973 CET	192.168.2.4	1.1.1.1	0xac8c	Standard query (0)	l1ve.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:45.381766081 CET	192.168.2.4	1.1.1.1	0x7366	Standard query (0)	l1ve.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:50.249932051 CET	192.168.2.4	1.1.1.1	0xb39	Standard query (0)	bf2b00c1-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:50.250190973 CET	192.168.2.4	1.1.1.1	0xcd6b	Standard query (0)	bf2b00c1-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:52:55.472649097 CET	192.168.2.4	1.1.1.1	0x79ab	Standard query (0)	13d1c6b8-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:55.473129034 CET	192.168.2.4	1.1.1.1	0x4a58	Standard query (0)	13d1c6b8-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:53:11.995691061 CET	192.168.2.4	1.1.1.1	0xcd18	Standard query (0)	signup.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:11.995851040 CET	192.168.2.4	1.1.1.1	0xc639	Standard query (0)	signup.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:53:22.410475016 CET	192.168.2.4	1.1.1.1	0xf327	Standard query (0)	adff02f8-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:22.410729885 CET	192.168.2.4	1.1.1.1	0x91ae	Standard query (0)	adff02f8-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:53:22.563430071 CET	192.168.2.4	1.1.1.1	0x4c97	Standard query (0)	c19d8ae0-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:22.563776970 CET	192.168.2.4	1.1.1.1	0x191c	Standard query (0)	c19d8ae0-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:53:22.564609051 CET	192.168.2.4	1.1.1.1	0xf83b	Standard query (0)	66eaf32b-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:53:22.564609051 CET	192.168.2.4	1.1.1.1	0x2b42	Standard query (0)	66eaf32b-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:22.564898014 CET	192.168.2.4	1.1.1.1	0x67ef	Standard query (0)	106bb4e9-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:22.565061092 CET	192.168.2.4	1.1.1.1	0x25c3	Standard query (0)	106bb4e9-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:53:26.653364897 CET	192.168.2.4	1.1.1.1	0xdb2d	Standard query (0)	adff02f8-12461a6c.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:26.654226065 CET	192.168.2.4	1.1.1.1	0xf129	Standard query (0)	adff02f8-12461a6c.dacreativeagency.com	65	IN (0x0001)	false
Mar 28, 2024 17:53:34.747369051 CET	192.168.2.4	1.1.1.1	0xe43d	Standard query (0)	signup.dacreativeagency.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:34.748148918 CET	192.168.2.4	1.1.1.1	0x9db2	Standard query (0)	signup.dacreativeagency.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 17:52:04.577589035 CET	1.1.1.1	192.168.2.4	0x49c0	No error (0)	blee58.com		192.185.165.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:05.279726028 CET	1.1.1.1	192.168.2.4	0x311	No error (0)	mecom-netorgft0926682-sharepoint-com-f3.blee58.com		192.185.165.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:07.346398115 CET	1.1.1.1	192.168.2.4	0x4c13	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 17:52:07.346910000 CET	1.1.1.1	192.168.2.4	0x6b57	No error (0)	www.google.com		142.250.31.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:07.346910000 CET	1.1.1.1	192.168.2.4	0x6b57	No error (0)	www.google.com		142.250.31.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:07.346910000 CET	1.1.1.1	192.168.2.4	0x6b57	No error (0)	www.google.com		142.250.31.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:07.346910000 CET	1.1.1.1	192.168.2.4	0x6b57	No error (0)	www.google.com		142.250.31.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:07.346910000 CET	1.1.1.1	192.168.2.4	0x6b57	No error (0)	www.google.com		142.250.31.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:07.346910000 CET	1.1.1.1	192.168.2.4	0x6b57	No error (0)	www.google.com		142.250.31.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:09.197484016 CET	1.1.1.1	192.168.2.4	0x2f6d	No error (0)	mecom-netorgft0926682-sharepoint-com-f3.blee58.com		192.185.165.120	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:19.994806051 CET	1.1.1.1	192.168.2.4	0xce1d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 17:52:19.994806051 CET	1.1.1.1	192.168.2.4	0xce1d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:24.118602991 CET	1.1.1.1	192.168.2.4	0xdfae	No error (0)	reesecontractorservice.com		192.185.165.131	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:25.455425978 CET	1.1.1.1	192.168.2.4	0x5a4b	No error (0)	onlines.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:33.069267988 CET	1.1.1.1	192.168.2.4	0x68db	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 17:52:33.069267988 CET	1.1.1.1	192.168.2.4	0x68db	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:36.904544115 CET	1.1.1.1	192.168.2.4	0xc367	No error (0)	25a87cd0-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:43.418555021 CET	1.1.1.1	192.168.2.4	0xf118	No error (0)	55bace4f-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:45.567379951 CET	1.1.1.1	192.168.2.4	0xac8c	No error (0)	l1ve.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:45.636313915 CET	1.1.1.1	192.168.2.4	0x29ff	No error (0)	13d1c6b8-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:50.545484066 CET	1.1.1.1	192.168.2.4	0xb39	No error (0)	bf2b00c1-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:55.730083942 CET	1.1.1.1	192.168.2.4	0x79ab	No error (0)	13d1c6b8-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:52:56.522341013 CET	1.1.1.1	192.168.2.4	0xff57	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 17:52:56.522341013 CET	1.1.1.1	192.168.2.4	0xff57	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:12.113995075 CET	1.1.1.1	192.168.2.4	0xcd18	No error (0)	signup.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:15.642644882 CET	1.1.1.1	192.168.2.4	0x9591	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 17:53:15.642644882 CET	1.1.1.1	192.168.2.4	0x9591	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:22.530313969 CET	1.1.1.1	192.168.2.4	0xf327	No error (0)	adff02f8-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:22.717685938 CET	1.1.1.1	192.168.2.4	0x67ef	No error (0)	106bb4e9-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:22.740998030 CET	1.1.1.1	192.168.2.4	0x2b42	No error (0)	66eaf32b-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:22.799715996 CET	1.1.1.1	192.168.2.4	0x4c97	No error (0)	c19d8ae0-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:26.805444956 CET	1.1.1.1	192.168.2.4	0xdb2d	No error (0)	adff02f8-12461a6c.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false
Mar 28, 2024 17:53:34.935934067 CET	1.1.1.1	192.168.2.4	0xe43d	No error (0)	signup.dacreativeagency.com		209.38.240.137	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

blee58.com

mecom-netorgft0926682-sharepoint-com-f3.blee58.com

https:

reesecontractorservice.com

onlines.dacreativeagency.com

25a87cd0-12461a6c.dacreativeagency.com

l1ve.dacreativeagency.com

13d1c6b8-12461a6c.dacreativeagency.com

bf2b00c1-12461a6c.dacreativeagency.com

adff02f8-12461a6c.dacreativeagency.com

signup.dacreativeagency.com

fs.microsoft.com

55bace4f-12461a6c.dacreativeagency.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:04 UTC	679	OUT	GET /bl/ax/l?user=kenrod@me.com HTTP/1.1 Host: blee58.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:05 UTC	289	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 28 Mar 2024 16:52:04 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Location: https://mecom-netorgft0926682-sharepoint-com-F3.blee58.com/index.html}?i=kenrod@me.com Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:05 UTC	722	OUT	GET /index.html%7D?i=kenrod@me.com HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:06 UTC	1614	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 28 Mar 2024 16:52:05 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Location: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:06 UTC	2045	OUT	GET /_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:06 UTC	254	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:06 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 688 Vary: Accept-Encoding Content-Type: text/html
2024-03-28 16:52:06 UTC	688	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 70 75 62 6c 69 63 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 61 70 74 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:07 UTC	1979	OUT	GET /static/css/main.1b019d38.css HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:07 UTC	253	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 989 Vary: Accept-Encoding Content-Type: text/css
2024-03-28 16:52:07 UTC	989	IN	Data Raw: 62 6f 64 79 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 66 6f 6f 74 65 72 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 61 64 65 2d 69 6e 2d 6f 75 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 4f 75 74 20 34 73 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 49 6e 4f 75 74 20 34 73 20 69 6e 66 69 6e 69 74 65 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 4f 75 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 35 30 25 7b 6f 70 61 63 69 74 79 Data Ascii: body{height:100vh;margin:0;padding:0}.footer{bottom:0;left:0;padding:1px;position:fixed;text-align:center;width:100%}.fade-in-out{-webkit-animation:fadeInOut 4s infinite;animation:fadeInOut 4s infinite}@-webkit-keyframes fadeInOut{0%{opacity:0}50%{opacity

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:07 UTC	1956	OUT	GET /static/js/bundle.js HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:07 UTC	254	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 688 Vary: Accept-Encoding Content-Type: text/html
2024-03-28 16:52:07 UTC	688	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 70 75 62 6c 69 63 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 61 70 74 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:07 UTC	1963	OUT	GET /static/js/main.bdf2bc27.js HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:07 UTC	270	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 146763 Vary: Accept-Encoding Content-Type: application/javascript
2024-03-28 16:52:07 UTC	7922	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 62 64 66 32 62 63 32 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 34 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 37 39 31 29 2c 6c 3d 74 28 32 39 36 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 Data Ascii: /! For license information please see main.bdf2bc27.js.LICENSE.txt /!function(){"use strict";var e={463:function(e,n,t){var r=t(791),l=t(296);function a(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 29 2b 22 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 5f 3a 72 65 74 75 72 6e 28 65 2e 5f 63 6f 6e 74 65 78 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 50 3a 76 61 72 20 6e 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 28 65 3d 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 29 7c 7c 28 65 3d 22 22 21 3d 3d 28 65 3d 6e 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 6e 2e 6e 61 6d 65 7c 7c 22 22 29 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 65 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 2c 65 3b 63 61 73 65 20 4c 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 6e 75 6c 6c 29 3f 6e 3a 24 28 65 2e 74 79 70 65 29 7c 7c 22 Data Ascii: )+".Consumer";case _:return(e._context.displayName\|\|"Context")+".Provider";case P:var n=e.render;return(e=e.displayName)\|\|(e=""!==(e=n.displayName\|\|n.name\|\|"")?"ForwardRef("+e+")":"ForwardRef"),e;case L:return null!==(n=e.displayName\|\|null)?n:$(e.type)\|\|"
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 63 74 69 6f 6e 20 50 65 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 7d 76 61 72 20 54 65 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 4c 65 28 65 2c 6e 2c 74 29 7b 69 66 28 54 65 29 72 65 74 75 72 6e 20 65 28 6e 2c 74 29 3b 54 65 3d 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 50 65 28 65 2c 6e 2c 74 29 7d 66 69 6e 61 6c 6c 79 7b 54 65 3d 21 31 2c 28 6e 75 6c 6c 21 3d 3d 78 65 7c 7c 6e 75 6c 6c 21 3d 3d 45 65 29 26 26 28 7a 65 28 29 2c 4e 65 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 72 3d 77 6c 28 74 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 72 29 72 65 74 75 Data Ascii: ction Pe(e,n){return e(n)}function ze(){}var Te=!1;function Le(e,n,t){if(Te)return e(n,t);Te=!0;try{return Pe(e,n,t)}finally{Te=!1,(null!==xe\|\|null!==Ee)&&(ze(),Ne())}}function Re(e,n){var t=e.stateNode;if(null===t)return null;var r=wl(t);if(null===r)retu
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 74 29 7b 69 66 28 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 75 72 72 65 6e 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2e 69 73 44 65 68 79 64 72 61 74 65 64 29 72 65 74 75 72 6e 20 33 3d 3d 3d 6e 2e 74 61 67 3f 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 3a 6e 75 6c 6c 3b 65 3d 6e 75 6c 6c 7d 65 6c 73 65 20 6e 21 3d 3d 65 26 26 28 65 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 59 6e 3d 65 2c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 47 6e 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 63 61 6e 63 65 6c 22 3a 63 61 73 65 22 63 6c 69 63 6b 22 3a 63 61 73 65 22 63 6c 6f 73 65 22 3a 63 61 73 65 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 3a 63 61 73 65 22 63 6f 70 79 22 3a 63 61 73 65 22 63 75 74 22 3a 63 61 73 65 22 61 75 78 Data Ascii: t){if(n.stateNode.current.memoizedState.isDehydrated)return 3===n.tag?n.stateNode.containerInfo:null;e=null}else n!==e&&(e=null);return Yn=e,null}function Gn(e){switch(e){case"cancel":case"click":case"close":case"contextmenu":case"copy":case"cut":case"aux
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 21 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 21 21 28 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 6e 29 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 6e 3d 4b 28 29 3b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 29 7b 74 72 79 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 72 29 7b 74 3d 21 31 7d 69 66 28 21 74 29 62 72 65 61 6b 3b 6e 3d 4b 28 28 65 3d 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 Data Ascii: !e.compareDocumentPosition&&!!(16&e.compareDocumentPosition(n))))}function dr(){for(var e=window,n=K();n instanceof e.HTMLIFrameElement;){try{var t="string"===typeof n.contentWindow.location.href}catch(r){t=!1}if(!t)break;n=K((e=n.contentWindow).document)
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 68 2e 72 65 74 75 72 6e 7d 30 3c 63 2e 6c 65 6e 67 74 68 26 26 28 75 3d 6e 65 77 20 69 28 75 2c 73 2c 6e 75 6c 6c 2c 74 2c 6c 29 2c 6f 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 75 2c 6c 69 73 74 65 6e 65 72 73 3a 63 7d 29 29 7d 7d 69 66 28 30 3d 3d 3d 28 37 26 6e 29 29 7b 69 66 28 69 3d 22 6d 6f 75 73 65 6f 75 74 22 3d 3d 3d 65 7c 7c 22 70 6f 69 6e 74 65 72 6f 75 74 22 3d 3d 3d 65 2c 28 21 28 75 3d 22 6d 6f 75 73 65 6f 76 65 72 22 3d 3d 3d 65 7c 7c 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3d 3d 3d 65 29 7c 7c 74 3d 3d 3d 6b 65 7c 7c 21 28 73 3d 74 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 74 2e 66 72 6f 6d 45 6c 65 6d 65 6e 74 29 7c 7c 21 79 6c 28 73 29 26 26 21 73 5b 68 6c 5d 29 26 26 28 69 7c 7c 75 29 26 26 28 75 3d 6c 2e 77 69 6e 64 6f 77 3d 3d 3d 6c Data Ascii: h.return}0<c.length&&(u=new i(u,s,null,t,l),o.push({event:u,listeners:c}))}}if(0===(7&n)){if(i="mouseout"===e\|\|"pointerout"===e,(!(u="mouseover"===e\|\|"pointerover"===e)\|\|t===ke\|\|!(s=t.relatedTarget\|\|t.fromElement)\|\|!yl(s)&&!s[hl])&&(i\|\|u)&&(u=l.window===l
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 6e 75 6c 6c 3a 6e 29 26 26 28 65 2e 73 74 61 74 65 4e 6f 64 65 3d 6e 2c 74 61 3d 65 2c 72 61 3d 73 6c 28 6e 2e 66 69 72 73 74 43 68 69 6c 64 29 2c 21 30 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 6e 3d 22 22 3d 3d 3d 65 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 7c 7c 33 21 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 3f 6e 75 6c 6c 3a 6e 29 26 26 28 65 2e 73 74 61 74 65 4e 6f 64 65 3d 6e 2c 74 61 3d 65 2c 72 61 3d 6e 75 6c 6c 2c 21 30 29 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 6e 3d 38 21 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 3f 6e 75 6c 6c 3a 6e 29 26 26 28 74 3d 6e 75 6c 6c 21 3d 3d 59 6c 3f 7b 69 64 3a 58 6c 2c 6f 76 65 72 66 6c 6f 77 3a 47 6c 7d 3a 6e 75 6c 6c Data Ascii: .toLowerCase()?null:n)&&(e.stateNode=n,ta=e,ra=sl(n.firstChild),!0);case 6:return null!==(n=""===e.pendingProps\|\|3!==n.nodeType?null:n)&&(e.stateNode=n,ta=e,ra=null,!0);case 13:return null!==(n=8!==n.nodeType?null:n)&&(t=null!==Yl?{id:Xl,overflow:Gl}:null
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 61 74 65 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 26 26 28 65 2e 66 6c 61 67 73 7c 3d 34 31 39 34 33 30 38 29 7d 66 75 6e 63 74 69 6f 6e 20 51 61 28 65 2c 6e 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 74 2e 72 65 66 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 74 2e 5f 6f 77 6e 65 72 29 7b 69 66 28 74 3d 74 2e 5f 6f 77 6e 65 72 29 7b 69 66 28 31 21 3d 3d 74 2e 74 61 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 33 30 39 29 29 3b 76 61 72 20 72 3d 74 2e 73 74 61 74 65 4e 6f 64 65 7d 69 66 28 21 72 29 74 68 72 6f 77 Data Ascii: ate=e.memoizedState),"function"===typeof l.componentDidMount&&(e.flags\|=4194308)}function Qa(e,n,t){if(null!==(e=t.ref)&&"function"!==typeof e&&"object"!==typeof e){if(t._owner){if(t=t._owner){if(1!==t.tag)throw Error(a(309));var r=t.stateNode}if(!r)throw
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 2c 6e 75 6c 6c 3d 3d 3d 67 6f 3f 6d 6f 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 67 6f 3d 65 3a 67 6f 3d 67 6f 2e 6e 65 78 74 3d 65 7d 72 65 74 75 72 6e 20 67 6f 7d 66 75 6e 63 74 69 6f 6e 20 50 6f 28 65 2c 6e 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 3f 6e 28 65 29 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 7a 6f 28 65 29 7b 76 61 72 20 6e 3d 4e 6f 28 29 2c 74 3d 6e 2e 71 75 65 75 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 33 31 31 29 29 3b 74 2e 6c 61 73 74 52 65 6e 64 65 72 65 64 52 65 64 75 63 65 72 3d 65 3b 76 61 72 20 72 3d 76 6f 2c 6c 3d 72 2e 62 61 73 65 51 75 65 75 65 2c 6f 3d 74 2e 70 65 6e 64 69 6e 67 3b 69 66 28 6e 75 6c 6c 21 3d Data Ascii: ,next:null},null===go?mo.memoizedState=go=e:go=go.next=e}return go}function Po(e,n){return"function"===typeof n?n(e):n}function zo(e){var n=No(),t=n.queue;if(null===t)throw Error(a(311));t.lastRenderedReducer=e;var r=vo,l=r.baseQueue,o=t.pending;if(null!=
2024-03-28 16:52:07 UTC	8000	IN	Data Raw: 61 74 63 68 28 74 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 74 7d 29 29 7d 7d 76 61 72 20 70 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 3f 57 65 61 6b 4d 61 70 3a 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 68 75 28 65 2c 6e 2c 74 29 7b 28 74 3d 4f 61 28 2d 31 2c 74 29 29 2e 74 61 67 3d 33 2c 74 2e 70 61 79 6c 6f 61 64 3d 7b 65 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 7d 3b 76 61 72 20 72 3d 6e 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 69 7c 7c 28 57 69 3d 21 30 2c 51 69 3d 72 29 2c 64 75 28 30 2c 6e 29 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6d 75 28 65 2c 6e 2c 74 29 7b 28 74 3d 4f 61 28 2d 31 2c 74 29 29 Data Ascii: atch(t){setTimeout((function(){throw t}))}}var pu="function"===typeof WeakMap?WeakMap:Map;function hu(e,n,t){(t=Oa(-1,t)).tag=3,t.payload={element:null};var r=n.value;return t.callback=function(){Wi\|\|(Wi=!0,Qi=r),du(0,n)},t}function mu(e,n,t){(t=Oa(-1,t))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 16:52:08 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=223881 Date: Thu, 28 Mar 2024 16:52:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:08 UTC	2009	OUT	GET /im/shar2.jpg HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:08 UTC	234	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:08 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 32184 Content-Type: image/jpeg
2024-03-28 16:52:08 UTC	7958	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 35 73 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f Data Ascii: JFIF``5shttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.o
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 23 8f b7 86 b9 5f 1a 62 66 1d 75 dc 55 ba 27 4a a7 46 6d 15 ca df 5d 16 fa 8a a6 2a 98 fa e2 72 3d 3f 0c cf 15 51 34 f3 e0 c9 45 ca 6a e5 c5 95 9a 1e 59 02 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 17 b2 f5 46 51 de 29 9d fe 73 05 ce a1 27 4e fc d5 7f f8 37 f1 fc e9 9e ed b0 ae cb f9 55 1d fb a5 a5 a1 bf 5d 2d 18 97 16 cd 49 6a 7d c2 04 a9 6b ea 64 63 f4 6e d1 91 b9 79 69 72 b8 cf 5d aa 6b b7 46 b3 a4 e8 c1 45 ea a8 b9 73 4a 75 8d 5b cc 0b 4f 2d ce b2 af 17 cf 23 35 5d 18 d8 a0 a7 8f 8a 47 1c 6b 97 9c bd 5c 0d 7c 54 ed 88 b5 f9 5b 18 48 df 33 77 f3 29 56 bb ed ab 50 b6 1e d5 2d b6 47 55 2f f4 5e f5 46 b5 7e f5 cc 53 c3 0d 3f 1a 8a b8 e2 63 e1 4a 66 68 ac 00 00 00 01 9b 1f 61 be 08 61 97 b5 c4 0c 03 3b c0 00 06 68 Data Ascii: #_bfuU'JFm]*r=?Q4EjY@FQ)s'N7U]-Ij}kdcnyir]kFEsJu[O-#5]Gk\\|T[H3w)VP-GU/^F~S?cJfhaa;h
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 7b f2 ca 73 b3 8d 97 5f 29 af 94 d7 6b bb 12 96 1a 35 de c5 4e aa 8b 23 a4 fb 39 e5 9a 35 1b cc a5 cd 33 6a 2b a3 a3 a3 8e ab 8c b3 2c ae 9a f7 d7 c3 47 65 e4 87 34 e9 9c ff 00 6d 17 38 69 f0 8f 92 aa a6 f6 b2 68 db 1b 7b f2 62 eb 72 fd d9 21 6f 91 db 99 bf af e5 53 e7 77 62 2c e9 f9 9c 14 ed 9c 68 00 09 7e c9 bd 3a a0 f7 66 f9 4a 53 e7 9d 9e 7c e1 6b 93 76 88 7d 14 d3 89 87 6a b8 f4 90 0a 2a 10 86 05 ea c7 6d bc d0 be 86 e3 0a 4d 4f 27 d9 5e e5 ee 73 57 b9 53 d6 86 4b 57 6a b7 56 ea 78 4b 1d eb 34 dc a7 6d 4e 45 88 76 21 73 86 75 96 cb 52 ca 9a 75 e5 0c eb a2 46 fb 35 22 69 77 e0 74 b8 7c fe 3f fb 23 8f 8b 99 c4 64 55 44 fb 1c 9c d9 29 65 5a bf 25 66 4f 9f 79 ba 6b 58 ba 91 cf d5 a5 11 aa 9c f3 53 a1 e9 63 66 fe ed 14 7b 27 76 de f7 54 c3 1b 10 97 78 95 Data Ascii: {s_)k5N#953j+,Ge4m8ih{br!oSwb,h~:fJS\|kv}j*mMO'^sWSKWjVxK4mNEv!suRuF5"iwt\|?#dUD)eZ%fOykXScf{'vTx
2024-03-28 16:52:08 UTC	226	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ff d9 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:08 UTC	2009	OUT	GET /im/spina.gif HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:08 UTC	233	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:08 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 81537 Content-Type: image/gif
2024-03-28 16:52:08 UTC	7959	IN	Data Raw: 47 49 46 38 39 61 c8 00 c8 00 f7 00 00 b3 c4 30 b7 c7 3c b8 c8 40 bb ca 48 bc ca 4b bd cc 51 bf cd 55 bf cd 57 c1 ce 5b c3 cf 61 c3 d0 62 c4 d0 65 c5 d2 6a c6 d2 6d c7 d3 6f c8 d3 71 c8 d4 73 ca d5 78 ca d5 79 cb d6 7c cd d7 81 cd d8 83 ce d8 85 cf d9 88 cf d9 89 d1 da 8d d1 da 8e d1 db 90 d2 db 91 d4 dc 97 d4 dc 98 d5 dd 9a d6 de 9e d7 df a1 d7 df a2 d8 df a4 d8 e0 a5 d9 e0 a7 da e1 aa da e1 ac dc e2 b0 dc e2 b1 dc e3 b2 dd e3 b3 de e4 b6 df e5 ba df e5 bb e0 e5 bc e0 e6 be e1 e6 c0 e1 e6 c1 e1 e6 c2 e2 e7 c2 e2 e7 c5 e3 e7 c6 e3 e8 c8 e4 e8 ca e4 e9 cb e5 e9 ce e6 ea cf e6 ea d1 e7 ea d2 e7 ea d3 e7 eb d4 e7 eb d5 e8 eb d7 e8 ec d8 e9 ec d9 e9 ec da e9 ec db ea ed dd ea ed de eb ed df eb ee e1 ec ee e3 ec ee e4 ec ef e5 ed ef e5 ed ef e6 ed ef e7 ed ef Data Ascii: GIF89a0<@HKQUW[abejmoqsxy\|
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 10 f3 58 3b 80 82 34 bf f9 ce 78 ce b3 9e f7 cc e7 3e fb f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 46 4b 40 00 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b4 c5 33 b8 c8 3f b9 c9 44 bc ca 4b bd cb 4e be cc 54 bf cd 57 c0 ce 59 c2 cf 5e c3 d0 63 c4 d0 64 c5 d1 68 c6 d2 6d c7 d3 6f c8 d3 72 c9 d4 74 c9 d5 76 cb d6 7a cb d6 7b cb d6 7c cc d7 7f ce d8 84 ce d8 85 cf d9 87 cf d9 88 d0 da 8b d0 da 8c d1 db 8f d2 db 90 d2 db 91 d2 db 92 d3 db 93 d3 dc 94 d3 dc 95 d4 dd 99 d5 dd 99 d5 dd 9a d5 dd 9b d5 dd 9c d6 de 9f d7 de a0 d7 df a1 d7 df a3 d8 df a3 d8 df a4 d8 e0 a5 d9 e0 a6 d9 e0 a7 da e1 aa da e1 ab da e1 ac db e1 Data Ascii: X;4x>MBNF;'MJ[7N{GMRFK@!,3?DKNTWY^cdhmortvz{\|
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 6e 10 5c 1a c9 99 23 41 50 33 5d 51 f0 82 38 df f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 5e 4b 40 00 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b5 c6 36 b9 c8 42 ba c9 47 bd cb 4e be cc 52 bf cd 57 c0 ce 5a c1 ce 5c c3 cf 61 c4 d1 66 c5 d1 67 c6 d2 6b c7 d3 70 c8 d3 71 c8 d4 72 c9 d4 74 ca d5 78 ca d5 79 cb d6 7d cc d6 7d cc d6 7e cc d7 7f cd d7 81 cf d9 87 cf d9 88 cf d9 89 d0 d9 8a d1 da 8e d1 da 8f d2 db 91 d2 db 92 d2 db 93 d3 dc 95 d4 dc 96 d4 dd 98 d5 dd 9b d5 dd 9c d6 de 9d d6 de 9e d7 df a1 d7 df a3 d8 df a3 d8 df a4 d8 e0 a5 d8 e0 a6 d9 e0 a8 d9 e1 a9 da e1 a9 db e1 ac Data Ascii: n\#AP3]Q8MBNF;'MJ[7N{GMRNWV^K@!,6BGNRWZ\afgkpqrtxy}}~
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: e3 3c 6b 64 0b 71 9e ab 0f 8e 80 67 3f 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 8e b5 ac 67 4d eb 5a db fa d6 6a 09 08 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b6 c6 3a ba c9 45 bb ca 4a bd cc 51 bf cd 55 c0 ce 5a c1 ce 5c c2 cf 5f c3 d0 64 c5 d1 68 c5 d2 6a c6 d2 6b c7 d2 6d c8 d4 73 c9 d4 74 ca d5 77 cb d6 7b cb d6 7c cc d7 7f cd d7 80 cd d7 82 ce d8 84 cf d9 89 d0 d9 8a d0 d9 8b d0 da 8d d2 db 91 d2 db 92 d3 db 94 d3 dc 94 d3 dc 95 d4 dc 96 d4 dd 98 d4 dd 99 d5 dd 9b d6 de 9d d6 de 9e d6 de 9f d7 de a0 d7 df a1 d7 df a2 d8 e0 a5 d9 e0 a6 d9 e0 a7 d9 e0 a8 d9 e1 a9 da e1 ab da e1 ac db e2 ae db e2 af dc Data Ascii: <kdqg?NF;'MJ[7N{GMRNWVgMZj!,:EJQUZ\_dhjkmstw{\|
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 32 48 d8 39 70 28 c3 95 7f 9c 65 86 cc 81 0d 4d ad 62 6e 42 ea 1a dd e2 aa 99 23 51 e8 ee f4 de 9c 91 d1 46 57 b9 74 d6 88 15 86 bb d1 3c 73 e4 0b 71 b6 ab 12 a2 80 67 3f 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 8e b5 ac 67 4d eb 5a db fa d6 69 09 08 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b7 c7 3d bb ca 48 bc cb 4d be cc 54 c0 cd 58 c1 cf 5d c2 cf 5f c3 d0 62 c4 d1 67 c6 d2 6b c6 d2 6c c7 d3 6e c7 d3 70 c9 d4 76 c9 d5 76 c9 d5 77 ca d5 79 cc d6 7e cc d7 7e cd d7 81 cd d8 83 ce d8 85 cf d8 87 d0 da 8b d0 da 8c d0 da 8d d1 da 8e d1 da 8f d3 dc 94 d3 dc 96 d4 dc 97 d4 dd 98 d5 dd 9b d6 de 9f d7 de a0 d7 df Data Ascii: 2H9p(eMbnB#QFWt<sqg?NF;'MJ[7N{GMRNWVgMZi!,=HMTX]_bgklnpvvwy~~
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 0c 91 83 91 a7 88 10 b7 22 97 b7 5c e6 08 18 a8 fb 85 30 73 64 b3 c8 55 b0 5b 99 2f 42 06 dd 8e 61 cd 1d 51 c3 98 df ca 05 30 a8 19 ce 78 ce b3 9e f7 cc e7 3e fb f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 59 02 02 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b3 c4 30 b7 c7 3c b8 c8 40 bb ca 48 bc ca 4b bd cc 51 bf cd 55 bf cd 57 c1 ce 5b c3 cf 61 c3 d0 62 c4 d0 65 c5 d2 6a c6 d2 6d c7 d3 6f c8 d3 71 c8 d4 73 ca d5 78 ca d5 79 cb d6 7c cd d7 81 cd d8 83 ce d8 85 cf d9 88 cf d9 89 d1 da 8d d1 da 8e d1 db 90 d2 db 91 d4 dc 97 d4 dc 98 d5 dd 9a d6 de 9e d7 df a1 d7 df a2 d8 df a4 d8 e0 a5 d9 e0 a7 da e1 aa da e1 Data Ascii: "\0sdU[/BaQ0x>MBNF;'MJ[7N{GMRNY!,0<@HKQUW[abejmoqsxy\|
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 97 9a 00 fc 8a 66 0c 44 d6 c2 91 91 0c dc 86 20 01 ba 09 30 41 83 9d b3 06 33 4c 19 21 3c 66 48 17 7e d0 d4 2a 72 f8 c4 66 d6 88 60 6c 93 9c e6 8d 8c b6 b9 25 6e 33 46 d2 00 dc c9 ca 99 23 72 85 ec 5d ef cc e7 3e fb f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 b3 25 20 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b4 c5 33 b8 c8 3f b9 c9 44 bc ca 4b bd cb 4e be cc 54 bf cd 57 c0 ce 59 c2 cf 5e c3 d0 63 c4 d0 64 c5 d1 68 c6 d2 6d c7 d3 6f c8 d3 72 c9 d4 74 c9 d5 76 cb d6 7a cb d6 7b cb d6 7c cc d7 7f ce d8 84 ce d8 85 cf d9 87 cf d9 88 d0 da 8b d0 da 8c d1 db 8f d2 db 90 d2 db 91 d2 db 92 d3 db 93 Data Ascii: fD 0A3L!<fH~*rf`l%n3F#r]>MBNF;'MJ[7N{GMRNWV% !,3?DKNTWY^cdhmortvz{\|
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 0d 00 9a 5a 0c e1 85 60 95 a8 12 a8 af 68 52 00 e4 04 0c 99 c8 ca 6d 48 10 9a 2b 01 15 28 d8 39 50 e0 c1 93 15 82 e3 85 48 41 07 46 95 e2 41 dc aa 5c df 8a 99 23 0d a8 ae 63 02 ce cc 11 ce 2a 97 6a 6c de 08 07 78 6b 81 38 77 64 05 69 7e 2b 01 1a 00 67 3b fb f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 6a 09 08 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b5 c6 36 b9 c8 42 ba c9 47 bd cb 4e be cc 52 bf cd 57 c0 ce 5a c1 ce 5c c3 cf 61 c4 d1 66 c5 d1 67 c6 d2 6b c7 d3 70 c8 d3 71 c8 d4 72 c9 d4 74 ca d5 78 ca d5 79 cb d6 7d cc d6 7d cc d6 7e cc d7 7f cd d7 81 cf d9 87 cf d9 88 cf d9 89 d0 Data Ascii: Z`hRmH+(9PHAFA\#c*jlxk8wdi~+g;MBNF;'MJ[7N{GMRNWVj!,6BGNRWZ\afgkpqrtxy}}~
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: ae 22 35 03 fd dd cc 0d 8e dc 00 25 2f 39 c4 0c c1 02 75 33 90 03 09 bb 26 0d 53 b0 72 43 98 bc 90 35 40 41 a9 53 44 88 6d 5c a3 5b dc 34 73 64 02 dd 75 80 9b 39 32 da e8 d2 60 ce 1c 19 c1 70 37 80 e7 8e ec 00 ce 73 45 c0 04 ee dc e7 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 8e b5 ac 67 4d eb 5a db 7a 2d 01 01 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b6 c6 3a ba c9 45 bb ca 4a bd cc 51 bf cd 55 c0 ce 5a c1 ce 5c c2 cf 5f c3 d0 64 c5 d1 68 c5 d2 6a c6 d2 6b c7 d2 6d c8 d4 73 c9 d4 74 ca d5 77 cb d6 7b cb d6 7c cc d7 7f cd d7 80 cd d7 82 ce d8 84 cf d9 89 d0 d9 8a d0 d9 8b d0 da 8d d2 db 91 d2 db 92 d3 db Data Ascii: "5%/9u3&SrC5@ASDm\[4sdu92`p7sEBNF;'MJ[7N{GMRNWVgMZz-!,:EJQUZ\_dhjkmstw{\|
2024-03-28 16:52:08 UTC	8000	IN	Data Raw: 13 c2 01 ba 56 40 c5 8b e1 02 8b 4f 8a 00 29 29 64 c7 08 b9 ea 50 43 80 5f d7 e8 60 c8 14 30 f2 91 3b cc 90 2c 3c 37 04 3e 68 30 ef d0 30 05 29 eb 98 ca 0d 59 83 14 8a da c4 84 b4 95 b9 c0 2d 33 67 47 34 80 5d 0b a8 99 23 9e 65 ee bb de bc 11 15 f8 f6 a3 74 e6 c8 0f d8 ec 56 06 68 60 ce 79 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 8e b5 ac d5 12 10 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b7 c7 3d bb ca 48 bc cb 4d be cc 54 c0 cd 58 c1 cf 5d c2 cf 5f c3 d0 62 c4 d1 67 c6 d2 6b c6 d2 6c c7 d3 6e c7 d3 70 c9 d4 76 c9 d5 76 c9 d5 77 ca d5 79 cc d6 7e cc d7 7e cd d7 81 cd d8 83 ce d8 85 cf Data Ascii: V@O))dPC_`0;,<7>h00)Y-3gG4]#etVh`yMBNF;'MJ[7N{GMRNWV!,=HMTX]_bgklnpvvwy~~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 16:52:09 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=223860 Date: Thu, 28 Mar 2024 16:52:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 16:52:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:09 UTC	2607	OUT	GET /_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/manifest.json HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:09 UTC	254	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 688 Vary: Accept-Encoding Content-Type: text/html
2024-03-28 16:52:09 UTC	688	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 70 75 62 6c 69 63 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 61 70 74 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:09 UTC	2666	OUT	GET /_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/favicon.ico HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/?u=cmVlc2Vjb250cmFjdG9yc2VydmljZS5jb20vcmVjL3NoaHNkaGdkL2tlbnJvZEBtZS5jb20=&x=////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:09 UTC	254	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 688 Vary: Accept-Encoding Content-Type: text/html
2024-03-28 16:52:09 UTC	688	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 70 75 62 6c 69 63 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 61 70 74 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:09 UTC	386	OUT	GET /im/shar2.jpg HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:09 UTC	234	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 32184 Content-Type: image/jpeg
2024-03-28 16:52:09 UTC	7958	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 35 73 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f Data Ascii: JFIF``5shttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.o
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 23 8f b7 86 b9 5f 1a 62 66 1d 75 dc 55 ba 27 4a a7 46 6d 15 ca df 5d 16 fa 8a a6 2a 98 fa e2 72 3d 3f 0c cf 15 51 34 f3 e0 c9 45 ca 6a e5 c5 95 9a 1e 59 02 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 17 b2 f5 46 51 de 29 9d fe 73 05 ce a1 27 4e fc d5 7f f8 37 f1 fc e9 9e ed b0 ae cb f9 55 1d fb a5 a5 a1 bf 5d 2d 18 97 16 cd 49 6a 7d c2 04 a9 6b ea 64 63 f4 6e d1 91 b9 79 69 72 b8 cf 5d aa 6b b7 46 b3 a4 e8 c1 45 ea a8 b9 73 4a 75 8d 5b cc 0b 4f 2d ce b2 af 17 cf 23 35 5d 18 d8 a0 a7 8f 8a 47 1c 6b 97 9c bd 5c 0d 7c 54 ed 88 b5 f9 5b 18 48 df 33 77 f3 29 56 bb ed ab 50 b6 1e d5 2d b6 47 55 2f f4 5e f5 46 b5 7e f5 cc 53 c3 0d 3f 1a 8a b8 e2 63 e1 4a 66 68 ac 00 00 00 01 9b 1f 61 be 08 61 97 b5 c4 0c 03 3b c0 00 06 68 Data Ascii: #_bfuU'JFm]*r=?Q4EjY@FQ)s'N7U]-Ij}kdcnyir]kFEsJu[O-#5]Gk\\|T[H3w)VP-GU/^F~S?cJfhaa;h
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 7b f2 ca 73 b3 8d 97 5f 29 af 94 d7 6b bb 12 96 1a 35 de c5 4e aa 8b 23 a4 fb 39 e5 9a 35 1b cc a5 cd 33 6a 2b a3 a3 a3 8e ab 8c b3 2c ae 9a f7 d7 c3 47 65 e4 87 34 e9 9c ff 00 6d 17 38 69 f0 8f 92 aa a6 f6 b2 68 db 1b 7b f2 62 eb 72 fd d9 21 6f 91 db 99 bf af e5 53 e7 77 62 2c e9 f9 9c 14 ed 9c 68 00 09 7e c9 bd 3a a0 f7 66 f9 4a 53 e7 9d 9e 7c e1 6b 93 76 88 7d 14 d3 89 87 6a b8 f4 90 0a 2a 10 86 05 ea c7 6d bc d0 be 86 e3 0a 4d 4f 27 d9 5e e5 ee 73 57 b9 53 d6 86 4b 57 6a b7 56 ea 78 4b 1d eb 34 dc a7 6d 4e 45 88 76 21 73 86 75 96 cb 52 ca 9a 75 e5 0c eb a2 46 fb 35 22 69 77 e0 74 b8 7c fe 3f fb 23 8f 8b 99 c4 64 55 44 fb 1c 9c d9 29 65 5a bf 25 66 4f 9f 79 ba 6b 58 ba 91 cf d5 a5 11 aa 9c f3 53 a1 e9 63 66 fe ed 14 7b 27 76 de f7 54 c3 1b 10 97 78 95 Data Ascii: {s_)k5N#953j+,Ge4m8ih{br!oSwb,h~:fJS\|kv}j*mMO'^sWSKWjVxK4mNEv!suRuF5"iwt\|?#dUD)eZ%fOykXScf{'vTx
2024-03-28 16:52:09 UTC	226	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ff d9 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:09 UTC	386	OUT	GET /im/spina.gif HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:09 UTC	233	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 81537 Content-Type: image/gif
2024-03-28 16:52:09 UTC	7959	IN	Data Raw: 47 49 46 38 39 61 c8 00 c8 00 f7 00 00 b3 c4 30 b7 c7 3c b8 c8 40 bb ca 48 bc ca 4b bd cc 51 bf cd 55 bf cd 57 c1 ce 5b c3 cf 61 c3 d0 62 c4 d0 65 c5 d2 6a c6 d2 6d c7 d3 6f c8 d3 71 c8 d4 73 ca d5 78 ca d5 79 cb d6 7c cd d7 81 cd d8 83 ce d8 85 cf d9 88 cf d9 89 d1 da 8d d1 da 8e d1 db 90 d2 db 91 d4 dc 97 d4 dc 98 d5 dd 9a d6 de 9e d7 df a1 d7 df a2 d8 df a4 d8 e0 a5 d9 e0 a7 da e1 aa da e1 ac dc e2 b0 dc e2 b1 dc e3 b2 dd e3 b3 de e4 b6 df e5 ba df e5 bb e0 e5 bc e0 e6 be e1 e6 c0 e1 e6 c1 e1 e6 c2 e2 e7 c2 e2 e7 c5 e3 e7 c6 e3 e8 c8 e4 e8 ca e4 e9 cb e5 e9 ce e6 ea cf e6 ea d1 e7 ea d2 e7 ea d3 e7 eb d4 e7 eb d5 e8 eb d7 e8 ec d8 e9 ec d9 e9 ec da e9 ec db ea ed dd ea ed de eb ed df eb ee e1 ec ee e3 ec ee e4 ec ef e5 ed ef e5 ed ef e6 ed ef e7 ed ef Data Ascii: GIF89a0<@HKQUW[abejmoqsxy\|
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 10 f3 58 3b 80 82 34 bf f9 ce 78 ce b3 9e f7 cc e7 3e fb f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 46 4b 40 00 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b4 c5 33 b8 c8 3f b9 c9 44 bc ca 4b bd cb 4e be cc 54 bf cd 57 c0 ce 59 c2 cf 5e c3 d0 63 c4 d0 64 c5 d1 68 c6 d2 6d c7 d3 6f c8 d3 72 c9 d4 74 c9 d5 76 cb d6 7a cb d6 7b cb d6 7c cc d7 7f ce d8 84 ce d8 85 cf d9 87 cf d9 88 d0 da 8b d0 da 8c d1 db 8f d2 db 90 d2 db 91 d2 db 92 d3 db 93 d3 dc 94 d3 dc 95 d4 dd 99 d5 dd 99 d5 dd 9a d5 dd 9b d5 dd 9c d6 de 9f d7 de a0 d7 df a1 d7 df a3 d8 df a3 d8 df a4 d8 e0 a5 d9 e0 a6 d9 e0 a7 da e1 aa da e1 ab da e1 ac db e1 Data Ascii: X;4x>MBNF;'MJ[7N{GMRFK@!,3?DKNTWY^cdhmortvz{\|
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 6e 10 5c 1a c9 99 23 41 50 33 5d 51 f0 82 38 df f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 5e 4b 40 00 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b5 c6 36 b9 c8 42 ba c9 47 bd cb 4e be cc 52 bf cd 57 c0 ce 5a c1 ce 5c c3 cf 61 c4 d1 66 c5 d1 67 c6 d2 6b c7 d3 70 c8 d3 71 c8 d4 72 c9 d4 74 ca d5 78 ca d5 79 cb d6 7d cc d6 7d cc d6 7e cc d7 7f cd d7 81 cf d9 87 cf d9 88 cf d9 89 d0 d9 8a d1 da 8e d1 da 8f d2 db 91 d2 db 92 d2 db 93 d3 dc 95 d4 dc 96 d4 dd 98 d5 dd 9b d5 dd 9c d6 de 9d d6 de 9e d7 df a1 d7 df a3 d8 df a3 d8 df a4 d8 e0 a5 d8 e0 a6 d9 e0 a8 d9 e1 a9 da e1 a9 db e1 ac Data Ascii: n\#AP3]Q8MBNF;'MJ[7N{GMRNWV^K@!,6BGNRWZ\afgkpqrtxy}}~
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: e3 3c 6b 64 0b 71 9e ab 0f 8e 80 67 3f 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 8e b5 ac 67 4d eb 5a db fa d6 6a 09 08 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b6 c6 3a ba c9 45 bb ca 4a bd cc 51 bf cd 55 c0 ce 5a c1 ce 5c c2 cf 5f c3 d0 64 c5 d1 68 c5 d2 6a c6 d2 6b c7 d2 6d c8 d4 73 c9 d4 74 ca d5 77 cb d6 7b cb d6 7c cc d7 7f cd d7 80 cd d7 82 ce d8 84 cf d9 89 d0 d9 8a d0 d9 8b d0 da 8d d2 db 91 d2 db 92 d3 db 94 d3 dc 94 d3 dc 95 d4 dc 96 d4 dd 98 d4 dd 99 d5 dd 9b d6 de 9d d6 de 9e d6 de 9f d7 de a0 d7 df a1 d7 df a2 d8 e0 a5 d9 e0 a6 d9 e0 a7 d9 e0 a8 d9 e1 a9 da e1 ab da e1 ac db e2 ae db e2 af dc Data Ascii: <kdqg?NF;'MJ[7N{GMRNWVgMZj!,:EJQUZ\_dhjkmstw{\|
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 32 48 d8 39 70 28 c3 95 7f 9c 65 86 cc 81 0d 4d ad 62 6e 42 ea 1a dd e2 aa 99 23 51 e8 ee f4 de 9c 91 d1 46 57 b9 74 d6 88 15 86 bb d1 3c 73 e4 0b 71 b6 ab 12 a2 80 67 3f 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 8e b5 ac 67 4d eb 5a db fa d6 69 09 08 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b7 c7 3d bb ca 48 bc cb 4d be cc 54 c0 cd 58 c1 cf 5d c2 cf 5f c3 d0 62 c4 d1 67 c6 d2 6b c6 d2 6c c7 d3 6e c7 d3 70 c9 d4 76 c9 d5 76 c9 d5 77 ca d5 79 cc d6 7e cc d7 7e cd d7 81 cd d8 83 ce d8 85 cf d8 87 d0 da 8b d0 da 8c d0 da 8d d1 da 8e d1 da 8f d3 dc 94 d3 dc 96 d4 dc 97 d4 dd 98 d5 dd 9b d6 de 9f d7 de a0 d7 df Data Ascii: 2H9p(eMbnB#QFWt<sqg?NF;'MJ[7N{GMRNWVgMZi!,=HMTX]_bgklnpvvwy~~
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 0c 91 83 91 a7 88 10 b7 22 97 b7 5c e6 08 18 a8 fb 85 30 73 64 b3 c8 55 b0 5b 99 2f 42 06 dd 8e 61 cd 1d 51 c3 98 df ca 05 30 a8 19 ce 78 ce b3 9e f7 cc e7 3e fb f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 59 02 02 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b3 c4 30 b7 c7 3c b8 c8 40 bb ca 48 bc ca 4b bd cc 51 bf cd 55 bf cd 57 c1 ce 5b c3 cf 61 c3 d0 62 c4 d0 65 c5 d2 6a c6 d2 6d c7 d3 6f c8 d3 71 c8 d4 73 ca d5 78 ca d5 79 cb d6 7c cd d7 81 cd d8 83 ce d8 85 cf d9 88 cf d9 89 d1 da 8d d1 da 8e d1 db 90 d2 db 91 d4 dc 97 d4 dc 98 d5 dd 9a d6 de 9e d7 df a1 d7 df a2 d8 df a4 d8 e0 a5 d9 e0 a7 da e1 aa da e1 Data Ascii: "\0sdU[/BaQ0x>MBNF;'MJ[7N{GMRNY!,0<@HKQUW[abejmoqsxy\|
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 97 9a 00 fc 8a 66 0c 44 d6 c2 91 91 0c dc 86 20 01 ba 09 30 41 83 9d b3 06 33 4c 19 21 3c 66 48 17 7e d0 d4 2a 72 f8 c4 66 d6 88 60 6c 93 9c e6 8d 8c b6 b9 25 6e 33 46 d2 00 dc c9 ca 99 23 72 85 ec 5d ef cc e7 3e fb f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 b3 25 20 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b4 c5 33 b8 c8 3f b9 c9 44 bc ca 4b bd cb 4e be cc 54 bf cd 57 c0 ce 59 c2 cf 5e c3 d0 63 c4 d0 64 c5 d1 68 c6 d2 6d c7 d3 6f c8 d3 72 c9 d4 74 c9 d5 76 cb d6 7a cb d6 7b cb d6 7c cc d7 7f ce d8 84 ce d8 85 cf d9 87 cf d9 88 d0 da 8b d0 da 8c d1 db 8f d2 db 90 d2 db 91 d2 db 92 d3 db 93 Data Ascii: fD 0A3L!<fH~*rf`l%n3F#r]>MBNF;'MJ[7N{GMRNWV% !,3?DKNTWY^cdhmortvz{\|
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 0d 00 9a 5a 0c e1 85 60 95 a8 12 a8 af 68 52 00 e4 04 0c 99 c8 ca 6d 48 10 9a 2b 01 15 28 d8 39 50 e0 c1 93 15 82 e3 85 48 41 07 46 95 e2 41 dc aa 5c df 8a 99 23 0d a8 ae 63 02 ce cc 11 ce 2a 97 6a 6c de 08 07 78 6b 81 38 77 64 05 69 7e 2b 01 1a 00 67 3b fb f9 cf 80 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 6a 09 08 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b5 c6 36 b9 c8 42 ba c9 47 bd cb 4e be cc 52 bf cd 57 c0 ce 5a c1 ce 5c c3 cf 61 c4 d1 66 c5 d1 67 c6 d2 6b c7 d3 70 c8 d3 71 c8 d4 72 c9 d4 74 ca d5 78 ca d5 79 cb d6 7d cc d6 7d cc d6 7e cc d7 7f cd d7 81 cf d9 87 cf d9 88 cf d9 89 d0 Data Ascii: Z`hRmH+(9PHAFA\#c*jlxk8wdi~+g;MBNF;'MJ[7N{GMRNWVj!,6BGNRWZ\afgkpqrtxy}}~
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: ae 22 35 03 fd dd cc 0d 8e dc 00 25 2f 39 c4 0c c1 02 75 33 90 03 09 bb 26 0d 53 b0 72 43 98 bc 90 35 40 41 a9 53 44 88 6d 5c a3 5b dc 34 73 64 02 dd 75 80 9b 39 32 da e8 d2 60 ce 1c 19 c1 70 37 80 e7 8e ec 00 ce 73 45 c0 04 ee dc e7 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 8e b5 ac 67 4d eb 5a db 7a 2d 01 01 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b6 c6 3a ba c9 45 bb ca 4a bd cc 51 bf cd 55 c0 ce 5a c1 ce 5c c2 cf 5f c3 d0 64 c5 d1 68 c5 d2 6a c6 d2 6b c7 d2 6d c8 d4 73 c9 d4 74 ca d5 77 cb d6 7b cb d6 7c cc d7 7f cd d7 80 cd d7 82 ce d8 84 cf d9 89 d0 d9 8a d0 d9 8b d0 da 8d d2 db 91 d2 db 92 d3 db Data Ascii: "5%/9u3&SrC5@ASDm\[4sdu92`p7sEBNF;'MJ[7N{GMRNWVgMZz-!,:EJQUZ\_dhjkmstw{\|
2024-03-28 16:52:09 UTC	8000	IN	Data Raw: 13 c2 01 ba 56 40 c5 8b e1 02 8b 4f 8a 00 29 29 64 c7 08 b9 ea 50 43 80 5f d7 e8 60 c8 14 30 f2 91 3b cc 90 2c 3c 37 04 3e 68 30 ef d0 30 05 29 eb 98 ca 0d 59 83 14 8a da c4 84 b4 95 b9 c0 2d 33 67 47 34 80 5d 0b a8 99 23 9e 65 ee bb de bc 11 15 f8 f6 a3 74 e6 c8 0f d8 ec 56 06 68 60 ce 79 0e b4 a0 07 4d e8 42 1b fa d0 88 4e b4 a2 17 cd e8 46 3b fa d1 90 8e b4 a4 27 4d e9 4a 5b fa d2 98 ce b4 a6 37 cd e9 4e 7b fa d3 a0 0e b5 a8 47 4d ea 52 9b fa d4 a8 4e b5 aa 57 cd ea 56 bb fa d5 b0 8e b5 ac d5 12 10 00 21 f9 04 00 03 00 00 00 2c 00 00 00 00 c8 00 c8 00 87 b7 c7 3d bb ca 48 bc cb 4d be cc 54 c0 cd 58 c1 cf 5d c2 cf 5f c3 d0 62 c4 d1 67 c6 d2 6b c6 d2 6c c7 d3 6e c7 d3 70 c9 d4 76 c9 d5 76 c9 d5 77 ca d5 79 cc d6 7e cc d7 7e cd d7 81 cd d8 83 ce d8 85 cf Data Ascii: V@O))dPC_`0;,<7>h00)Y-3gG4]#etVh`yMBNF;'MJ[7N{GMRNWV!,=HMTX]_bgklnpvvwy~~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	192.185.165.120	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:09 UTC	1043	OUT	GET /_layouts/29/sharepoint-aspx/////////////e/r//r/e//d/d//w/s//fd//f/w///s/s/df//f//w/s//s/s/s/sfs/fd///s////////////sd/sw////////g/////////////vvs/////////////////////ss//////////////se///////////////////h////////////h/////////////h//////////////////vvvvd//bdds/hgffddds//////////////dss/ssssssssss/ssssssssssssssssssssss///////////////////////////////////////////////////////////////////////////////////////////////////////////w///////////////////w//////v//n/////////////////a//////////////////m///////////////////////k//////////////////r///////////////q///////////eyydsyywttwtwiww///w//w/w/d////a///q///c/v////f//g///j//j//k/k/y//n//////r///e//e//r/r/public/favicon.ico HTTP/1.1 Host: mecom-netorgft0926682-sharepoint-com-f3.blee58.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:10 UTC	254	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 20 Mar 2024 22:15:23 GMT Accept-Ranges: bytes Content-Length: 688 Vary: Accept-Encoding Content-Type: text/html
2024-03-28 16:52:10 UTC	688	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 70 75 62 6c 69 63 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 61 70 74 63 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="public/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Captc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49762	192.185.165.131	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:24 UTC	771	OUT	GET /rec/shhsdhgd/kenrod@me.com HTTP/1.1 Host: reesecontractorservice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://mecom-netorgft0926682-sharepoint-com-f3.blee58.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:25 UTC	253	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 16:52:24 GMT Server: Apache refresh: 0;url=https://onlines.dacreativeagency.com/?username=kenrod@me.com Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49763	192.185.165.131	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:25 UTC	634	OUT	GET /favicon.ico HTTP/1.1 Host: reesecontractorservice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://reesecontractorservice.com/rec/shhsdhgd/kenrod@me.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:25 UTC	263	IN	HTTP/1.1 404 Not Found Date: Thu, 28 Mar 2024 16:52:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 01 Oct 2022 13:16:40 GMT Accept-Ranges: bytes Content-Length: 11816 Vary: Accept-Encoding Content-Type: text/html
2024-03-28 16:52:25 UTC	7929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 20 70 72 6f 66 69 6c 65 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head profile="http://gmpg.org/xfn/11"> <meta http-equiv="Content-Typ
2024-03-28 16:52:25 UTC	3887	IN	Data Raw: 69 74 65 43 6f 6e 64 20 25 7b 52 45 51 55 45 53 54 5f 46 49 4c 45 4e 41 4d 45 7d 20 21 2d 64 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 52 65 77 72 69 74 65 52 75 6c 65 20 2e 20 2f 69 6e 64 65 78 2e 70 68 70 20 5b 4c 5d 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 26 6c 74 3b 2f 49 66 4d 6f 64 75 6c 65 26 67 74 3b 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 23 20 45 6e 64 20 57 6f 72 64 50 72 65 73 73 0a 09 09 09 09 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 70 3e 49 66 20 79 6f 75 72 20 62 6c 6f 67 20 69 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 77 72 6f 6e 67 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 6e 20 6c 69 6e 6b 73 2c 20 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 61 6e 6f 74 68 65 Data Ascii: iteCond %{REQUEST_FILENAME} !-d<br>RewriteRule . /index.php [L]<br></IfModule><br># End WordPress</p></div><p>If your blog is showing the wrong domain name in links, redirecting to anothe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49764	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:25 UTC	726	OUT	GET /?username=kenrod@me.com HTTP/1.1 Host: onlines.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://reesecontractorservice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:29 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-03-28 16:52:29 UTC	7100	IN	Data Raw: 31 62 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 2f 3e 0a 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 Data Ascii: 1bb4<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"/> <meta content="IE=Edge,chrome=1" http-equiv="X-UA-Compatible"> <meta content="noindex, nofollow" name="robots"/> <meta content="width=device-width, initial-scale=1, maximum-s
2024-03-28 16:52:29 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 72 69 70 74 69 6f 6e 27 2c 27 5c 78 32 30 72 65 71 75 69 72 65 64 27 2c 27 59 56 74 6f 63 6d 56 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 4e 68 62 47 6c 6b 65 6d 6c 75 61 53 35 73 64 69 38 69 58 56 74 7a 64 48 6c 73 5a 54 30 69 5a 47 6c 7a 63 47 78 68 65 54 6f 67 59 6d 78 76 59 32 73 37 49 48 64 70 5a 48 52 6f 4f 69 41 78 4d 6a 42 77 65 44 73 67 61 47 56 70 5a 32 68 30 4f 69 41 30 4d 48 42 34 4f 79 42 76 64 6d 56 79 5a 6d 78 76 64 7a 6f 67 61 47 6c 6b 5a 47 56 75 4f 79 42 77 62 33 4e 70 64 47 6c 76 62 6a 6f 67 63 6d 56 73 59 58 52 70 64 6d 55 37 49 6c 30 3d 27 2c 27 44 4f 4d 5c 78 32 30 62 6c 6f 63 6b 65 72 73 5c 78 32 30 64 65 62 75 67 3a 5c 78 30 61 60 60 60 27 2c 27 5c 78 32 30 69 73 5c 78 32 30 6e 6f 74 5c 78 32 30 61 Data Ascii: 3ffaription','\x20required','YVtocmVmPSJodHRwOi8vd3d3LnNhbGlkemluaS5sdi8iXVtzdHlsZT0iZGlzcGxheTogYmxvY2s7IHdpZHRoOiAxMjBweDsgaGVpZ2h0OiA0MHB4OyBvdmVyZmxvdzogaGlkZGVuOyBwb3NpdGlvbjogcmVsYXRpdmU7Il0=','DOM\x20blockers\x20debug:\x0a```','\x20is\x20not\x20a
2024-03-28 16:52:29 UTC	16384	IN	Data Raw: 0d 0a 34 30 30 30 0d 0a 61 65 64 29 7b 76 61 72 20 5f 30 78 31 32 66 61 62 34 3d 61 30 5f 30 78 33 66 33 64 2c 5f 30 78 33 62 39 33 62 37 3d 5f 30 78 32 35 35 61 65 64 28 30 78 31 37 30 61 29 2c 5f 30 78 35 37 65 31 61 39 3d 5f 30 78 32 35 35 61 65 64 28 30 78 31 39 30 36 29 2c 5f 30 78 31 38 64 33 36 63 3d 5f 30 78 32 35 35 61 65 64 28 30 78 31 34 66 36 29 2c 5f 30 78 34 38 63 35 30 61 3d 5f 30 78 32 35 35 61 65 64 28 30 78 31 36 65 38 29 2c 5f 30 78 34 61 35 63 37 38 3d 5f 30 78 32 35 35 61 65 64 28 30 78 32 36 66 31 29 2c 5f 30 78 32 38 35 30 62 65 3d 5f 30 78 32 35 35 61 65 64 28 30 78 31 33 39 30 29 2c 5f 30 78 33 62 39 30 35 35 3d 5f 30 78 35 37 65 31 61 39 28 5b 5d 5b 5f 30 78 31 32 66 61 62 34 28 30 78 33 63 33 29 5d 29 2c 5f 30 78 34 64 38 37 39 Data Ascii: 4000aed){var _0x12fab4=a0_0x3f3d,_0x3b93b7=_0x255aed(0x170a),_0x57e1a9=_0x255aed(0x1906),_0x18d36c=_0x255aed(0x14f6),_0x48c50a=_0x255aed(0x16e8),_0x4a5c78=_0x255aed(0x26f1),_0x2850be=_0x255aed(0x1390),_0x3b9055=_0x57e1a9([][_0x12fab4(0x3c3)]),_0x4d879
2024-03-28 16:52:29 UTC	10	IN	Data Raw: 42 75 66 66 65 72 4c 69 0d 0a Data Ascii: BufferLi
2024-03-28 16:52:29 UTC	3445	IN	Data Raw: 64 36 65 0d 0a 73 74 27 3a 30 78 30 2c 27 53 74 79 6c 65 53 68 65 65 74 4c 69 73 74 27 3a 30 78 30 2c 27 54 65 78 74 54 72 61 63 6b 43 75 65 4c 69 73 74 27 3a 30 78 30 2c 27 54 65 78 74 54 72 61 63 6b 4c 69 73 74 27 3a 30 78 30 2c 27 54 6f 75 63 68 4c 69 73 74 27 3a 30 78 30 7d 3b 7d 2c 30 78 62 30 37 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 37 38 33 36 36 30 2c 5f 30 78 35 36 34 37 37 37 2c 5f 30 78 35 65 63 62 39 39 29 7b 76 61 72 20 5f 30 78 32 34 62 64 38 62 3d 61 30 5f 30 78 33 66 33 64 3b 69 66 28 5f 30 78 32 34 62 64 38 62 28 30 78 34 39 35 29 21 3d 3d 5f 30 78 32 34 62 64 38 62 28 30 78 34 39 35 29 29 7b 76 61 72 20 5f 30 78 34 66 39 64 34 65 3d 5f 30 78 33 64 37 38 63 65 28 30 78 31 37 30 61 29 2c 5f 30 78 61 64 66 35 31 63 3d 5f 30 78 63 37 63 63 Data Ascii: d6est':0x0,'StyleSheetList':0x0,'TextTrackCueList':0x0,'TextTrackList':0x0,'TouchList':0x0};},0xb07:function(_0x783660,_0x564777,_0x5ecb99){var _0x24bd8b=a0_0x3f3d;if(_0x24bd8b(0x495)!==_0x24bd8b(0x495)){var _0x4f9d4e=_0x3d78ce(0x170a),_0xadf51c=_0xc7cc
2024-03-28 16:52:29 UTC	16384	IN	Data Raw: 35 36 65 34 0d 0a 72 65 74 75 72 6e 20 5f 30 78 33 30 37 37 33 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 30 78 35 65 31 39 36 64 3f 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 65 37 62 61 35 29 7b 76 61 72 20 5f 30 78 32 65 30 30 65 34 3d 5f 30 78 31 61 61 37 61 35 2c 5f 30 78 35 63 36 30 62 36 3b 72 65 74 75 72 6e 20 5f 30 78 31 33 31 63 61 38 28 7b 27 6e 61 6d 65 27 3a 5f 30 78 31 65 37 62 61 35 5b 5f 30 78 32 65 30 30 65 34 28 30 78 32 64 31 29 5d 2c 27 6d 65 73 73 61 67 65 27 3a 5f 30 78 31 65 37 62 61 35 5b 5f 30 78 32 65 30 30 65 34 28 30 78 32 37 62 29 5d 2c 27 73 74 61 63 6b 27 3a 6e 75 6c 6c 3d 3d 3d 28 5f 30 78 35 63 36 30 62 36 3d 5f 30 78 31 65 37 62 61 35 5b 5f 30 78 32 65 30 30 65 34 28 30 78 33 63 64 29 5d 29 7c 7c 76 6f 69 64 20 30 78 30 3d 3d Data Ascii: 56e4return _0x30773a instanceof _0x5e196d?function(_0x1e7ba5){var _0x2e00e4=_0x1aa7a5,_0x5c60b6;return _0x131ca8({'name':_0x1e7ba5[_0x2e00e4(0x2d1)],'message':_0x1e7ba5[_0x2e00e4(0x27b)],'stack':null===(_0x5c60b6=_0x1e7ba5[_0x2e00e4(0x3cd)])\|\|void 0x0==
2024-03-28 16:52:29 UTC	16384	IN	Data Raw: 32 36 63 61 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 30 66 35 64 33 2c 5f 30 78 34 39 62 65 62 36 2c 5f 30 78 66 31 33 63 65 66 29 7b 76 61 72 20 5f 30 78 34 63 34 38 39 64 3d 61 30 5f 30 78 33 66 33 64 2c 5f 30 78 35 62 34 34 38 30 2c 5f 30 78 35 63 37 34 32 64 2c 5f 30 78 34 61 36 38 38 31 2c 5f 30 78 32 31 36 37 33 66 3d 5f 30 78 66 31 33 63 65 66 28 30 78 31 35 64 31 29 2c 5f 30 78 35 34 31 63 37 63 3d 5f 30 78 66 31 33 63 65 66 28 30 78 31 65 37 61 29 2c 5f 30 78 34 62 38 34 39 63 3d 5f 30 78 66 31 33 63 65 66 28 30 78 31 34 61 37 29 2c 5f 30 78 32 61 33 64 66 64 3d 5f 30 78 66 31 33 63 65 66 28 30 78 32 34 32 33 29 2c 5f 30 78 35 62 62 63 64 62 3d 5f 30 78 66 31 33 63 65 66 28 30 78 31 30 32 32 29 2c 5f 30 78 62 39 64 64 38 3d 5f 30 78 66 31 33 63 Data Ascii: 26ca:function(_0x20f5d3,_0x49beb6,_0xf13cef){var _0x4c489d=a0_0x3f3d,_0x5b4480,_0x5c742d,_0x4a6881,_0x21673f=_0xf13cef(0x15d1),_0x541c7c=_0xf13cef(0x1e7a),_0x4b849c=_0xf13cef(0x14a7),_0x2a3dfd=_0xf13cef(0x2423),_0x5bbcdb=_0xf13cef(0x1022),_0xb9dd8=_0xf13c
2024-03-28 16:52:29 UTC	16384	IN	Data Raw: 30 78 33 66 33 64 2c 5f 30 78 32 30 63 66 32 37 3d 5f 30 78 35 36 31 33 38 31 28 30 78 32 33 38 62 29 3b 5f 30 78 31 66 61 66 36 63 5b 5f 30 78 32 66 64 34 66 32 28 30 78 32 34 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 32 65 30 38 32 29 7b 76 61 72 20 5f 30 78 32 33 33 36 63 31 3d 5f 30 78 32 66 64 34 66 32 3b 72 65 74 75 72 6e 20 5f 30 78 32 30 63 66 32 37 28 5f 30 78 32 32 65 30 38 32 5b 5f 30 78 32 33 33 36 63 31 28 30 78 34 31 65 29 5d 29 3b 7d 3b 7d 2c 30 78 66 34 37 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 38 34 33 61 65 2c 5f 30 78 31 38 65 34 38 64 2c 5f 30 78 37 38 62 65 64 37 29 7b 76 61 72 20 5f 30 78 62 61 30 64 33 33 3d 61 30 5f 30 78 33 66 33 64 2c 5f 30 78 35 66 34 33 65 64 3d 5f 30 78 37 38 62 65 64 37 28 30 78 31 39 30 36 29 2c Data Ascii: 0x3f3d,_0x20cf27=_0x561381(0x238b);_0x1faf6c[_0x2fd4f2(0x242)]=function(_0x22e082){var _0x2336c1=_0x2fd4f2;return _0x20cf27(_0x22e082[_0x2336c1(0x41e)]);};},0xf47:function(_0x4843ae,_0x18e48d,_0x78bed7){var _0xba0d33=a0_0x3f3d,_0x5f43ed=_0x78bed7(0x1906),
2024-03-28 16:52:29 UTC	16384	IN	Data Raw: 74 5b 5f 30 78 38 37 61 39 65 64 28 30 78 33 30 61 29 5d 7c 7c 28 5f 30 78 38 37 61 39 65 64 28 30 78 33 30 65 29 69 6e 7b 7d 3f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 63 37 38 35 65 3d 5f 30 78 38 37 61 39 65 64 2c 5f 30 78 33 66 30 64 63 62 2c 5f 30 78 63 37 37 31 63 64 3d 21 30 78 31 2c 5f 30 78 31 62 36 33 38 30 3d 7b 7d 3b 74 72 79 7b 28 5f 30 78 33 66 30 64 63 62 3d 5f 30 78 32 34 33 39 62 66 28 4f 62 6a 65 63 74 5b 5f 30 78 33 63 37 38 35 65 28 30 78 33 62 66 29 5d 2c 5f 30 78 33 63 37 38 35 65 28 30 78 33 30 65 29 2c 5f 30 78 33 63 37 38 35 65 28 30 78 32 32 32 29 29 29 28 5f 30 78 31 62 36 33 38 30 2c 5b 5d 29 2c 5f 30 78 63 37 37 31 63 64 3d 5f 30 78 31 62 36 33 38 30 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3b 7d Data Ascii: t[_0x87a9ed(0x30a)]\|\|(_0x87a9ed(0x30e)in{}?(function(){var _0x3c785e=_0x87a9ed,_0x3f0dcb,_0xc771cd=!0x1,_0x1b6380={};try{(_0x3f0dcb=_0x2439bf(Object[_0x3c785e(0x3bf)],_0x3c785e(0x30e),_0x3c785e(0x222)))(_0x1b6380,[]),_0xc771cd=_0x1b6380 instanceof Array;}
2024-03-28 16:52:29 UTC	16384	IN	Data Raw: 30 78 35 33 61 32 30 37 3e 30 78 64 66 66 66 3f 5f 30 78 31 31 64 31 62 62 3f 5f 30 78 34 61 62 38 30 61 28 5f 30 78 32 38 64 65 36 38 2c 5f 30 78 32 33 66 62 64 66 29 3a 5f 30 78 35 31 65 64 64 64 3a 5f 30 78 31 31 64 31 62 62 3f 5f 30 78 35 35 34 30 65 35 28 5f 30 78 32 38 64 65 36 38 2c 5f 30 78 32 33 66 62 64 66 2c 5f 30 78 32 33 66 62 64 66 2b 30 78 32 29 3a 5f 30 78 35 33 61 32 30 37 2d 30 78 64 63 30 30 2b 28 5f 30 78 35 31 65 64 64 64 2d 30 78 64 38 30 30 3c 3c 30 78 61 29 2b 30 78 31 30 30 30 30 3b 7d 3b 7d 3b 5f 30 78 32 38 33 62 34 31 5b 5f 30 78 35 62 61 33 33 36 28 30 78 32 34 32 29 5d 3d 7b 27 63 6f 64 65 41 74 27 3a 5f 30 78 66 34 62 66 36 38 28 21 30 78 31 29 2c 27 63 68 61 72 41 74 27 3a 5f 30 78 66 34 62 66 36 38 28 21 30 78 30 29 7d 3b Data Ascii: 0x53a207>0xdfff?_0x11d1bb?_0x4ab80a(_0x28de68,_0x23fbdf):_0x51eddd:_0x11d1bb?_0x5540e5(_0x28de68,_0x23fbdf,_0x23fbdf+0x2):_0x53a207-0xdc00+(_0x51eddd-0xd800<<0xa)+0x10000;};};_0x283b41[_0x5ba336(0x242)]={'codeAt':_0xf4bf68(!0x1),'charAt':_0xf4bf68(!0x0)};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49765	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:31 UTC	896	OUT	POST /?username=kenrod@me.com HTTP/1.1 Host: onlines.dacreativeagency.com Connection: keep-alive Content-Length: 1139 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://onlines.dacreativeagency.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://onlines.dacreativeagency.com/?username=kenrod@me.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:31 UTC	1139	OUT	Data Raw: 39 61 69 66 39 78 66 76 65 3d 68 34 75 78 35 39 32 6d 34 76 6c 64 73 32 73 69 35 6d 66 69 76 71 78 68 69 37 6f 7a 65 26 77 7a 6b 6f 6f 38 6e 3d 6c 37 74 77 38 6e 62 78 6c 38 37 67 6d 7a 6f 35 6e 79 35 61 32 78 6e 62 63 34 35 68 6d 37 62 79 68 66 78 64 34 75 74 26 6c 39 5a 7a 47 4f 3d 57 79 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 39 75 62 47 6c 75 5a 58 4d 75 5a 47 46 6a 63 6d 56 68 64 47 6c 32 5a 57 46 6e 5a 57 35 6a 65 53 35 6a 62 32 30 76 50 33 56 7a 5a 58 4a 75 59 57 31 6c 50 57 74 6c 62 6e 4a 76 5a 45 42 74 5a 53 35 6a 62 32 30 69 4c 43 4a 6d 4d 57 4d 30 4e 57 49 34 4d 6a 41 31 4d 7a 49 33 4d 54 49 33 5a 54 59 31 5a 54 59 33 5a 47 45 77 59 54 64 69 59 54 5a 6a 4e 53 49 73 49 6a 45 79 4e 44 59 78 59 54 5a 6a 4c 57 51 31 4e 32 51 74 4e 44 45 30 4d 53 31 69 Data Ascii: 9aif9xfve=h4ux592m4vlds2si5mfivqxhi7oze&wzkoo8n=l7tw8nbxl87gmzo5ny5a2xnbc45hm7byhfxd4ut&l9ZzGO=WyJodHRwczovL29ubGluZXMuZGFjcmVhdGl2ZWFnZW5jeS5jb20vP3VzZXJuYW1lPWtlbnJvZEBtZS5jb20iLCJmMWM0NWI4MjA1MzI3MTI3ZTY1ZTY3ZGEwYTdiYTZjNSIsIjEyNDYxYTZjLWQ1N2QtNDE0MS1i
2024-03-28 16:52:32 UTC	426	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 16:52:32 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://onlines.dacreativeagency.com/?username=kenrod@me.com set-cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; Domain=dacreativeagency.com; HttpOnly; Path=/; SameSite=None; Secure
2024-03-28 16:52:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49766	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:32 UTC	897	OUT	GET /?username=kenrod@me.com HTTP/1.1 Host: onlines.dacreativeagency.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://onlines.dacreativeagency.com/?username=kenrod@me.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:36 UTC	790	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 78931 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 67f32b65-5314-454e-a809-711acbfa3e00 x-ms-ests-server: 2.1.17615.12 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:36 UTC	13670	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bd 79 5f 1b 3b b2 30 fc ff f9 14 c4 cf 79 c1 be 31 a4 f7 05 e2 e1 12 96 84 84 00 61 c9 e6 e1 e1 51 77 ab a1 83 71 13 2f 10 92 f0 dd df 5a d4 6a b5 31 e7 cc 9d 7b ef 99 df 04 5b 4b a9 54 2a d5 a6 92 fc f2 d9 d6 c1 e6 c9 97 c3 ed 85 cb c9 f5 e0 1f 7f bc e4 3f 0b 2f 2f a5 c8 e0 ef c2 cb 49 31 19 48 fc b4 70 24 b3 62 24 d3 49 31 bc c0 8a 17 ba e6 e5 b5 9c 88 85 b4 1c 4e e4 70 d2 6b 4d e4 8f c9 0b 84 b3 b6 90 5e 8a d1 58 4e 7a d3 49 be 1c b5 60 8c c9 cd b2 fc 3e 2d 6e 7b ad 4d 6e be 7c 72 7f 23 5b 2f e6 80 d9 dd ee c9 ec 42 36 7b 7d 5e 3e dd 58 de 2c af 6f c4 a4 48 06 f3 3b de 15 d9 e4 b2 97 c9 db 22 95 cb f4 a5 bb 50 0c 8b 49 21 06 cb e3 54 0c 64 cf 5e b1 ba 0b d7 e2 47 71 3d bd 56 45 0e 16 4d c7 72 44 df 05 c0 ee dd cb 71 6b Data Ascii: y_;0y1aQwq/Zj1{[KT*?//I1Hp$b$I1NpkM^XNzI`>-n{Mn\|r#[/B6{}^>X,oH;"PI!Td^Gq=VEMrDqk
2024-03-28 16:52:36 UTC	16384	IN	Data Raw: 66 33 46 4d 76 79 9d 7c 58 52 c6 3e 35 a0 6d 6d 75 2a a7 80 71 34 c0 99 7a 85 4a 9a 64 62 34 db 7a 06 46 cf e7 8d 31 24 a9 11 d3 75 42 d2 0a 29 e3 94 af 0a c8 d4 b6 95 40 f4 73 92 4e 6e 96 b8 79 56 51 3c 89 93 06 c1 1d 11 f8 a9 c5 04 4f 33 9b b4 90 88 7c 70 52 0c 82 5b c2 9b e1 4a c7 ca b3 38 eb e9 c6 a4 5f 40 9c 10 a0 38 96 9e d5 ac 0b 24 1b 99 51 e8 83 4d 39 53 97 2b e5 9f bb 49 e8 35 16 03 56 d8 f1 dd c7 2f 58 60 95 8c 1c 9e a0 2d 22 30 98 08 42 9a d8 69 ad 34 fd 4c 78 be d7 44 dc b5 e2 2c 0e 7a 7a 0a 35 28 d6 6b 09 d8 a6 c4 5c 8c 69 5b 77 a1 e7 ad 6a 95 46 ed d4 aa 3e d3 98 2e 2e e2 b5 0f ed 09 81 32 57 41 29 0b 8c 75 32 17 99 38 6d 8d 6c 3d 68 47 6d b6 0a 92 9e d9 b3 9e fe 48 fc a5 32 a7 18 11 9e 23 29 5e b7 a3 1e ff d1 20 ff a1 87 5e eb 40 c7 b6 c6 Data Ascii: f3FMvy\|XR>5mmu*q4zJdb4zF1$uB)@sNnyVQ<O3\|pR[J8_@8$QM9S+I5V/X`-"0Bi4LxD,zz5(k\i[wjF>..2WA)u28ml=hGmH2#)^ ^@
2024-03-28 16:52:36 UTC	16384	IN	Data Raw: f3 d2 64 7e b0 b3 36 cb ce b1 1a 40 f6 ab 09 21 61 6e d4 11 43 0f db bd cf ff a6 34 26 50 d0 21 ce 74 ab f9 cd c6 26 45 94 b2 c2 91 bc 9d 0b c0 7e 80 92 1e 63 f5 5d 90 01 ac 00 e9 54 5e bc f9 4d b1 27 fa f5 96 b3 a9 60 18 96 b5 ef 6a f0 82 22 0f 86 1c 5e 59 a0 2a dd fa 66 b5 2b 13 bb fd 0a ab fd e5 47 5f be fa 88 56 3b 02 c0 d1 da e4 fb 36 7a f3 23 5e 13 80 af d0 0e 2d 8c eb 4c 02 15 97 95 43 5d e5 8b d6 74 65 7c 4f 28 17 94 ea eb f9 c5 63 fe 76 26 22 52 92 78 25 e6 10 7d 07 5c b4 fe 32 7b 89 93 69 7a a6 92 4c 69 19 07 a4 75 81 51 c6 f1 e9 1b b8 b6 37 0d c6 ca 19 25 7f a9 e7 26 08 9b 12 2b 86 e0 c5 da d8 07 41 6e 9c d2 18 89 f1 13 b0 cf 15 15 1e ba db 68 92 f0 cf 71 61 d7 9c 89 f4 f2 fc 81 bd a4 32 1e e2 22 11 d5 f1 19 8f ed c0 03 50 db 24 93 06 2e c7 4a Data Ascii: d~6@!anC4&P!t&E~c]T^M'`j"^Y*f+G_V;6z#^-LC]te\|O(cv&"Rx%}\2{izLiuQ7%&+Anhqa2"P$.J
2024-03-28 16:52:36 UTC	16384	IN	Data Raw: 1b 50 5c 18 a8 98 4a 0c c7 ee 9b c8 bc d4 d0 41 05 77 3c de ac d7 3d 4d a2 03 09 34 f2 77 61 cc 8a 75 ae 31 d4 1b 2b 09 04 a2 b8 41 8c 61 7e aa a7 46 8f 93 71 b5 a7 70 02 4a 6b a3 87 f7 5a 36 81 1d 47 b5 9d 7f da a9 4c 73 45 78 6c 09 c7 bb c3 b7 ef 7e d8 f4 62 f8 63 12 4c 70 cc b2 c9 63 6e 3b 7f 39 e6 ef e3 f1 70 97 04 e6 43 c9 51 91 9a 3a 73 13 43 17 52 78 1a 17 eb d1 5b 14 e1 be 4e cc c5 17 5f 33 9b ac bd 90 2b 86 2b 86 f2 4b 4b 97 f2 53 b1 74 b8 5d 96 b3 8f 23 37 ea 8d 58 ce 1d 80 ce f1 17 0e 5f bb d7 af 88 3f 2b 9d cd b1 33 e8 c9 a2 2b 50 82 e4 b0 da 84 de 7d 00 1d 74 cb 0b 7a 15 e6 a9 b0 79 f8 d7 87 4c cf 8e db 81 d2 cc de 71 e5 b8 a1 e7 30 ce ef 6e 11 f5 9d 29 cf c6 95 96 ad 04 50 80 ca a4 36 37 33 66 86 24 02 b8 59 64 55 6c da 9c 98 f9 13 46 fd c2 Data Ascii: P\JAw<=M4wau1+Aa~FqpJkZ6GLsExl~bcLpcn;9pCQ:sCRx[N_3++KKSt]#7X_?+3+P}tzyLq0n)P673f$YdUlF
2024-03-28 16:52:36 UTC	16109	IN	Data Raw: 41 57 4b e2 2b e2 c8 49 1b b6 70 55 40 a2 1e b0 05 1a 39 e6 16 4d 58 ce ab 66 7e aa 94 b0 9d 1f e9 e7 c8 8d 7e d4 fc 18 3d 69 d3 b0 e7 72 31 28 3e e5 f9 21 6c 29 b6 69 78 58 29 98 f9 28 16 5b 39 5d 3e 8f 46 b8 3e da 3c 76 70 a6 da 32 3f a8 17 de a9 ad f1 90 11 f9 e9 02 12 7c c4 3c ae 92 2e 68 c5 5d 63 1d 31 8e 23 5b c2 ae 26 1e ab e0 4e 98 21 83 cd fd ab e5 4f 6f 31 d3 b9 f1 ca 8c 57 87 df 1d 50 cd 69 64 e4 30 e9 96 78 d9 11 44 68 aa f1 36 92 70 9d cd 66 60 46 8b b0 75 55 4c c9 30 a1 70 f3 3d 1b 89 69 7b 76 8c 42 38 d3 d4 15 e6 8a 78 bd 9d 36 c1 64 77 cb 0f ae 01 a5 a7 99 35 7b 64 e2 23 f3 fd 79 a3 99 14 a8 68 15 6e d2 4c c1 d3 41 bb 77 f8 14 42 b6 42 29 51 b7 91 02 e4 22 74 3c 9b d0 20 05 00 cf d4 0d 7d 70 b4 a0 46 c0 be ba 44 db de 20 a1 40 dd 8d 8f ce Data Ascii: AWK+IpU@9MXf~~=ir1(>!l)ixX)([9]>F><vp2?\|<.h]c1#[&N!Oo1WPid0xDh6pf`FuUL0p=i{vB8x6dw5{d#yhnLAwBB)Q"t< }pFD @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49767	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:37 UTC	659	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js HTTP/1.1 Host: 25a87cd0-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onlines.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:40 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:40 GMT Content-Type: application/x-javascript Content-Length: 49630 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 309145 cache-control: public, max-age=31536000 etag: 0x8DC3A4D6356A623 last-modified: Sat, 02 Mar 2024 00:12:03 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 965c8e3f-e01e-0079-7f60-7edb35000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:52:40 UTC	13690	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 8c c9 05 68 70 70 f3 4b 03 dd cd 0c 10 86 c0 5c 16 58 1e 27 56 c0 d3 c1 ce da 0e 34 03 39 7f fb a9 8b 64 cb 8e 43 f7 ec 7b 9e f3 e5 cc 25 d8 52 49 96 4a 55 a5 aa 52 49 5a ff 71 e5 7f 6a 3f d6 d6 be ff 9f da e0 a2 77 7e 51 eb 7f ac 5d 7c 3e 3a 3f a8 9d c1 db 1f b5 d3 fe c5 d1 fe e1 f7 d7 83 1f c5 ff 2f ee 83 a4 36 0e 26 a2 06 7f 87 5e 22 fc 5a 14 d6 a2 b8 16 84 a3 28 9e 46 b1 97 8a a4 f6 00 bf 71 e0 4d 6a e3 38 7a a8 a5 f7 a2 36 8d a3 3f c5 28 4d 6a 93 20 49 a1 d0 50 4c a2 a7 5a 1d aa 8b fd da 99 17 a7 cf b5 a3 33 d3 86 fa 05 d4 16 dc 05 21 94 1e 45 d3 67 78 be 4f 6b 61 94 06 23 51 f3 42 9f 6a 9b c0 4b 98 88 da 2c f4 45 5c 7b ba 0f 46 f7 b5 93 60 14 47 49 34 4e 6b b1 18 89 e0 Data Ascii: [88+wOhppK\X'V49dC{%RIJURIZqj?w~Q]\|>:?/6&^"Z(FqMj8z6?(Mj IPLZ3!EgxOka#QBjK,E\{F`GI4Nk
2024-03-28 16:52:40 UTC	16384	IN	Data Raw: 98 23 8d 97 76 75 f4 7e 27 60 fe f5 8f b1 37 f3 79 75 5f ff 7c 21 19 d4 08 7c 2d a0 ac 9c c2 b8 3e 52 ea 1f e3 34 7b cd bf 87 fa 7f 34 7d d6 08 7f 59 8e 61 91 6c 03 7e 79 6b e8 be 0d 53 55 cf 5b 28 fc 3b d0 6f 28 be 17 63 cf 31 96 e6 56 a8 c3 54 60 21 b5 42 39 2e d5 2c 53 97 a8 ca 25 60 2d 07 0a 4c a7 68 8c e3 2c 86 35 00 57 03 3f b3 7e bd 34 8b e5 da c3 14 f4 36 98 af 00 2c d3 1c ab d3 17 ad 67 6a 51 39 91 1a 33 91 ea 20 7e e7 08 7d 25 bd 50 2d b8 c1 df ac 2d cf 15 26 d8 66 87 8d a0 0c cd 4b 60 3a 6f 81 64 3e 11 16 6e d8 46 59 0a 8b 51 b8 12 c9 97 54 46 30 49 9b b4 fd 6e 49 6e d5 8e 2a cd 96 6d a3 6f 41 a9 ee 50 ae 10 f5 a4 60 76 de 02 81 06 9f 78 0f 18 78 c1 b0 59 7d e4 ea 79 00 84 7a 18 5b 88 5d 68 56 65 c9 c3 e9 4b 5e 29 84 ae ac 89 53 b2 57 35 20 b2 Data Ascii: #vu~'`7yu_\|!\|->R4{4}Yal~ykSU[(;o(c1VT`!B9.,S%`-Lh,5W?~46,gjQ93 ~}%P--&fK`:od>nFYQTF0InIn*moAP`vxxY}yz[]hVeK^)SW5
2024-03-28 16:52:41 UTC	16384	IN	Data Raw: c6 99 20 0f 5b 61 2b 05 28 6d 9f 3e 8d 24 44 da af 89 08 c2 39 04 06 c8 8d 7a 0b d7 70 9c f4 fc 66 70 1e 5d 21 88 6e 76 83 2c be 35 bc d2 0d 4e fa 42 6b b9 07 00 25 ce dd 4c 26 c7 a8 cf 76 e1 9d 29 b0 da 30 56 a6 fe cb 59 c0 b1 39 18 07 ec 7f c1 ec 72 73 dd bd b4 eb 68 85 00 81 97 33 4e 4d cc 0e f7 f4 7b c5 91 4f ec f0 4a d5 8e 05 ea bb a1 e0 dc 11 a9 07 a3 dd 01 ef 50 fd 1c 3c 70 86 e9 d0 79 a0 e9 d8 34 19 ac 18 cb 03 b8 e6 4a 5e d1 24 ab 54 c0 e5 3d 87 64 85 35 d3 ce ab a2 3c 62 69 0d 5c 62 ea ce fd e5 88 19 3a 7f 29 ab fe 3e e7 ac cf aa 22 5f 94 35 e9 d6 24 9f e7 71 be d3 01 62 7f a9 49 ab 21 b6 ae 33 9c 0f 9d 01 2d 9e 01 77 c6 1b 44 05 4d 5b 71 c3 d9 b1 d9 db 0a df a0 59 d3 df a8 df 55 a1 7b 0d ca 3c b0 e8 ba 5a 00 16 f3 47 35 d2 8a 3d 67 38 d7 5e aa Data Ascii: [a+(m>$D9zpfp]!nv,5NBk%L&v)0VY9rsh3NM{OJP<py4J^$T=d5<bi\b:)>"_5$qbI!3-wDM[qYU{<ZG5=g8^
2024-03-28 16:52:41 UTC	3172	IN	Data Raw: 79 be b9 a1 04 b5 7d ac 0d 73 53 a1 9a f9 2e d6 17 bb b2 a1 21 b7 b7 67 d4 17 64 9f 07 e0 bc 32 0c d1 96 8c e4 b2 57 7f be c5 93 f6 c8 5d 0b 93 2a 1d ad fb d8 da 46 3b f5 e4 c3 57 c0 63 7f 5a 0e ab c4 76 04 2a b1 7d ea ab 6f 5e 4d 0e b9 e1 5e e0 7e d9 e7 79 17 fd e9 16 b0 09 f0 92 46 4d c0 c6 73 f9 85 1c ac 5e 36 fa 2b e3 04 c3 7a 65 e8 3b d3 b8 f6 61 4f 55 cc 11 bd 76 c5 a4 e8 c8 d5 a4 28 33 3a 75 e2 70 a9 3b c9 d7 3a 19 69 a3 88 d7 ac 4f fc 90 e6 f7 ef 1f b9 53 f6 31 41 09 21 a2 02 9d 88 95 76 10 de b8 39 96 04 58 bd fe 46 1e fc 9f 68 26 78 7b 69 54 33 05 80 02 84 d0 c1 7c 4c e3 89 4d 27 ee 7b 01 bf 04 20 d1 c2 61 8e 8f c6 43 77 06 c8 e9 d1 db fa 14 e5 1a 39 e1 c0 42 f4 5c 71 b8 96 50 60 6c 0e 1a 9c ba f3 b4 6f 58 26 2a 7c eb 14 0e 7a 6a 53 14 3b 20 6e Data Ascii: y}sS.!gd2W]F;WcZv}o^M^~yFMs^6+ze;aOUv(3:up;:iOS1A!v9XFh&x{iT3\|LM'{ aCw9B\qP`loX&*\|zjS; n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49768	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:41 UTC	706	OUT	GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1 Host: onlines.dacreativeagency.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://onlines.dacreativeagency.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw==" Sec-WebSocket-Key: oFQd6iEKsmCv+OW0Kf6w+g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-28 16:52:43 UTC	746	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:52:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: a193e572-b52f-4586-b0d0-b65f176f4700 x-ms-ests-server: 2.1.17615.11 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49771	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:41 UTC	929	OUT	GET /?username=kenrod@me.com&sso_reload=true HTTP/1.1 Host: onlines.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://onlines.dacreativeagency.com/?username=kenrod@me.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-03-28 16:52:45 UTC	790	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:45 GMT Content-Type: text/html; charset=utf-8 Content-Length: 85305 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 21b42109-c244-4f8c-b9d4-b50d8cee5d00 x-ms-ests-server: 2.1.17615.11 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:45 UTC	13670	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 76 e2 d8 96 28 f8 9e 5f 41 d0 59 11 70 8c 09 24 ee 76 b2 a3 b8 1b 1b 0c 06 7c 2f 1f 8f 25 69 09 64 0b 09 4b c2 18 47 98 b7 fe 92 7e e8 71 1e fa ad ff 60 ff 58 cf 39 97 24 84 2f 99 91 7b ef 3a 5d e7 8c cc aa 1d d6 ba cf 35 ef 73 ae 25 f1 db a7 46 bf 3e be 1c 34 63 53 6f 66 fe ed 97 df f0 4f 4c 35 99 eb 56 e2 f1 98 66 38 95 b8 e9 39 f1 98 c9 ac 49 25 ce ad f8 df 7e 89 fd 36 e5 4c 83 bf b1 df 3c c3 33 39 3e c5 46 c6 c4 8a 19 56 cc b3 63 2b 7b e1 c4 98 aa da 0b cb c3 4e 5f c3 5e bf cd b8 c7 62 aa 6d 79 dc f2 2a 71 8f 3f 79 5f 71 c1 fd 98 3a 65 8e cb bd ca c2 d3 77 4b 71 00 c6 9b ef f2 87 85 f1 58 89 d7 45 f7 dd f1 6a ce e3 5f df 99 a6 d3 ac 70 6d c2 b7 47 5d ec 9e 56 77 eb f6 6c ce 3c 43 31 df 1f b8 34 34 6f 5a d1 f8 a3 Data Ascii: v(_AYp$v\|/%idKG~q`X9$/{:]5s%F>4cSofOL5Vf89I%~6L<39>FVc+{N_^bmy*q?y_q:ewKqXEj_pmG]Vwl<C144oZ
2024-03-28 16:52:45 UTC	16384	IN	Data Raw: 05 cd a8 02 41 9d 25 16 00 ad a8 af 90 8e 0b 2f 86 78 df e2 e0 21 47 8d 66 24 42 0e b3 66 ef ac cd f0 d0 44 ac ed b3 46 3a 78 25 6f 03 01 74 c2 bb 47 80 e4 04 4b 79 db 87 ef 9b 5e 56 04 25 78 f3 d3 aa 80 7a d8 80 6b 45 c0 b5 10 5c eb 5d 70 ad 8d d3 b1 0d 30 27 34 88 bb 7c 30 37 90 88 f8 c6 4d c7 77 e8 7e 27 2c 44 8b 46 1b f8 bb b5 6a a4 96 9e 23 c7 67 f6 ef 62 8b ee ff 6e 63 8b de 09 dc 20 c1 dd a0 ca fd 4f 42 95 50 47 be 4c 33 91 22 72 c5 1f 71 7b 22 a5 56 e2 ed e6 71 73 d8 a9 df 36 87 c3 fe 30 be 6f a4 db dc 13 33 54 bc 14 95 48 34 fd 2a 4b 54 41 68 57 b1 5f c9 ca db 3b fa 91 bb f8 50 aa 81 c8 f8 af 15 d2 75 30 d0 ac ff f2 37 05 bc 14 88 fc eb 17 07 30 09 fc 07 97 4e d0 db b4 de dc b0 43 f2 bc 73 ed 4e bc 54 b5 a5 65 02 59 4f 8b fc 31 28 78 55 b3 fc 6b Data Ascii: A%/x!Gf$BfDF:x%otGKy^V%xzkE\]p0'4\|07Mw~',DFj#gbnc OBPGL3"rq{"Vqs60o3TH4*KTAhW_;Pu070NCsNTeYO1(xUk
2024-03-28 16:52:45 UTC	12576	IN	Data Raw: e3 c0 08 c2 4d fd da 96 65 95 58 7c 37 b3 87 b2 6c 41 a8 8d 73 08 8b c5 65 43 12 6a 85 df b4 d6 6d 35 e5 53 1c 0e 63 62 e4 c4 26 9c 46 1c d1 3e 59 88 9e c0 db f1 28 63 e5 35 25 bb cd 1f d4 94 e2 2e 88 5e d8 b0 63 5e fd fb ef de fc a0 7b bc 77 9f db 37 6f f8 dc 9d 7f b7 be c2 0b 88 dc c0 dc 62 8e 3a ae b8 d4 48 c9 69 3b 45 a3 1c d7 d0 c7 17 cf c0 71 70 34 1a 4a b2 a3 9d ed b0 1e ad af e6 18 85 37 9b 28 d2 34 57 05 75 4a aa 36 39 0c e6 a2 b4 70 b7 3c dd 95 7a 77 08 d0 c1 0f 41 52 eb 69 9d da 6c 55 34 a5 73 34 11 9b 9b 3e 45 22 a8 2b d2 37 6a ef 52 de bd 38 b8 87 ab be a6 0a 75 5f ab 24 96 b4 3b 6a 30 e4 b3 64 cc 74 8f b8 f3 fd d5 57 e1 d4 ad af 9b 3c d7 89 30 df b5 d3 82 55 f9 fe fb 94 0b 2d ae 69 59 c9 b2 ed ea fe d4 3e 31 81 51 8d e1 64 db 20 27 3c 4d 39 Data Ascii: MeX\|7lAseCjm5Scb&F>Y(c5%.^c^{w7ob:Hi;Eqp4J7(4WuJ69p<zwARilU4s4>E"+7jR8u_$;j0dtW<0U-iY>1Qd '<M9
2024-03-28 16:52:45 UTC	16384	IN	Data Raw: 75 4d ac 9b 4a 81 cc 01 95 da 65 1b 86 49 4d ae a4 d1 01 d2 2a 74 0f 55 0f 02 42 4e d9 27 a5 88 d6 5e 08 ea f2 c0 d4 ac 3d ca 49 c9 e8 70 fe ef f9 4c 77 71 e4 f1 92 0f c4 e1 aa a0 3f a7 ac 19 5b 4b 2e 95 17 06 07 dc 68 bd e3 06 37 6e d8 27 57 93 cb b8 2d 5b 72 69 f5 96 8c a3 08 b8 eb 4b ec 09 b3 8e 41 6e 6b cb b2 9a 4a aa 6d d6 73 5b 96 d5 54 68 87 30 c9 f4 a6 45 9d 6b ca 30 fa 17 2f aa 40 7e b9 88 e2 84 26 91 80 ba 70 4b 01 39 39 85 e7 30 54 8b 7d 8a 09 16 8d bf a4 ec e5 0c 44 3c 9b e7 68 88 2f b8 f7 1d d7 39 7f ff fd 8b ae 24 33 4a 1f 2b e7 77 e0 8c 60 f8 b5 d4 d8 95 f1 49 c5 88 d9 ac 7e 7e 18 6f f6 ac b7 0a c2 51 1b 70 d4 0c 66 86 58 ef c3 1d 3c e3 a6 de fc 34 56 02 be 0b 22 c2 81 3a ff f3 e7 7f f9 a7 d7 99 3a 13 00 cd e7 50 51 e7 6d 9e 15 de dc 9c d4 Data Ascii: uMJeIM*tUBN'^=IpLwq?[K.h7n'W-[riKAnkJms[Th0Ek0/@~&pK990T}D<h/9$3J+w`I~~oQpfX<4V"::PQm
2024-03-28 16:52:45 UTC	16384	IN	Data Raw: ed 0c 93 a0 a8 92 79 18 ca 8b 4d 0e 53 77 7e e8 f1 11 1a 40 13 77 e8 3a eb 06 4f 1c c9 20 e2 15 02 a2 48 a7 47 8c 5c 86 6d f8 6e 43 0a 3c 4d 7f 0c f3 bb 57 49 22 e5 1c 67 51 c6 35 e6 50 ce b3 d2 30 ad be 3d 7d 3a a9 c6 e4 79 9f 19 12 11 45 0a d5 8e 3d 5f a1 38 c3 03 e4 37 95 76 b2 b6 ab 03 18 41 65 b2 cd cd 0a fe bc 45 19 4f ee f5 93 b6 28 6c e8 ad 33 a5 1f c3 64 57 6b 84 fb 82 4a 5e b7 bb e9 f1 9b d7 29 8b 27 ca e9 cd c8 ce c5 f8 6a 58 78 2b a0 6e 83 72 64 69 21 05 47 95 6d b4 2b bc d0 8b be 25 bd 6a af f4 2d 6e 19 f0 b1 65 9a ad 5d 08 a7 4c 59 8d ea f4 d3 a9 97 3a 66 c6 19 74 b1 00 eb 7a 21 dd 96 8a a9 0b d3 2c 2e 31 7c 3a f8 1c b9 65 0a a6 ca 1e 65 07 39 d9 f3 38 2a 58 0c 7a 99 9c 88 ad 14 a5 e8 5c ef 73 34 f9 21 ca ab e5 20 5d 96 39 a0 d1 81 88 57 66 Data Ascii: yMSw~@w:O HG\mnC<MWI"gQ5P0=}:yE=_87vAeEO(l3dWkJ^)'jXx+nrdi!Gm+%j-ne]LY:ftz!,.1\|:ee98*Xz\s4! ]9Wf
2024-03-28 16:52:45 UTC	9907	IN	Data Raw: d4 87 ae 3a 22 4c 0b 10 e8 f5 b9 48 55 57 ba ec bc 44 c2 cd ba 97 88 6d 09 13 b7 9e 98 83 48 4a 14 83 db 71 5e 74 e2 64 56 ba 90 d6 5b eb e9 f9 ba 3d 33 40 d8 09 6c 99 42 5d 3b b5 4d 50 4f 1e c3 ec 2d 62 54 c2 16 26 4e 4e e4 59 61 bd 17 4b e1 04 e8 8a c9 79 c7 c9 38 fd 4e 07 4c b2 93 bc 07 57 20 0d d0 20 92 d0 34 4d ec d3 35 4c c2 9a d5 d3 dc 1a 15 81 3d 50 b0 5d 08 fa 7d 69 f4 2d 40 98 05 51 10 6a 0f 2c 32 57 37 bf d2 ed cd af 12 77 fd 90 67 44 82 2e ec 17 03 8d b8 00 da d8 54 ba e5 a5 1e 1f ed 74 cd 0e 33 10 4d 03 fe 1c 88 0d 24 64 1c 61 9e c1 f5 42 7f ae 74 97 ea 3e 63 e1 cd 00 82 47 30 75 af cd b0 65 fb 52 0d ab 40 4b 0e 94 24 b7 3c 77 37 36 f0 3a de d7 2c 6c 55 87 9a fb 56 f6 65 61 0f fc 20 b3 a3 7d db 05 2c d2 2b 74 51 be 59 c8 85 2a 08 b4 e1 28 5b Data Ascii: :"LHUWDmHJq^tdV[=3@lB];MPO-bT&NNYaKy8NLW 4M5L=P]}i-@Qj,2W7wgD.Tt3M$daBt>cG0ueR@K$<w76:,lUVea },+tQY*([

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49769	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:41 UTC	796	OUT	GET /favicon.ico HTTP/1.1 Host: onlines.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/?username=kenrod@me.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-03-28 16:52:43 UTC	745	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:52:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 1a5b22b1-bc2a-425b-aa56-65a2cd705303 x-ms-ests-server: 2.1.17573.7 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:41 UTC	999	OUT	POST /common/instrumentation/reportbssotelemetry?hpgid=6&hpgact=2101&client-request-id=d0fad997-81df-4c79-8676-b017388b3432&hpgrequestid=67f32b65-5314-454e-a809-711acbfa3e00 HTTP/1.1 Host: onlines.dacreativeagency.com Connection: keep-alive Content-Length: 325 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlines.dacreativeagency.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onlines.dacreativeagency.com/?username=kenrod@me.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-03-28 16:52:41 UTC	325	OUT	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 45 72 72 6f 72 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 22 74 79 70 65 22 3a 22 43 68 72 6f 6d 65 53 73 6f 54 65 6c 65 6d 65 74 72 79 22 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 74 72 61 63 65 73 22 3a 5b 22 42 72 6f 77 73 65 72 53 53 4f 20 49 6e 69 74 69 61 6c 69 7a 65 64 22 2c 22 43 72 65 61 74 69 6e 67 20 43 68 72 6f 6d 65 42 72 6f 77 73 65 72 43 6f 72 65 20 70 72 6f 76 69 64 65 72 22 2c 22 53 65 6e 64 69 6e 67 20 6d 65 73 73 61 67 65 20 66 6f 72 20 6d 65 74 68 6f 64 20 43 72 65 61 74 65 50 72 6f 76 69 64 65 72 41 73 79 6e 63 22 2c 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 20 66 6f 72 20 6d 65 74 68 6f 64 20 43 72 65 61 74 65 50 72 6f 76 69 64 65 72 41 73 79 6e 63 22 2c 22 45 72 72 6f Data Ascii: {"result":"Error","error":"NoExtension","type":"ChromeSsoTelemetry","data":{},"traces":["BrowserSSO Initialized","Creating ChromeBrowserCore provider","Sending message for method CreateProviderAsync","Received message for method CreateProviderAsync","Erro
2024-03-28 16:52:43 UTC	778	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:43 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 036b4747-33ee-4a85-bac7-ee021faa1c00 x-ms-ests-server: 2.1.17615.11 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:43 UTC	272	IN	Data Raw: 31 30 39 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 6e 66 6f 6c 68 4a 70 53 6e 52 59 42 31 53 56 6a 2d 48 67 64 38 67 36 74 64 54 31 61 2d 32 59 58 64 65 6a 52 71 5f 63 6c 62 41 51 6a 65 65 79 52 71 54 52 6e 57 38 45 52 49 61 5f 4d 55 61 49 2d 6b 51 39 63 53 34 5a 44 31 6d 4c 2d 62 4c 70 5f 70 33 75 30 35 37 66 45 41 6a 6e 6a 4d 53 74 4e 6b 4f 6d 66 6d 52 73 71 72 4f 36 4e 4e 77 63 6f 37 41 53 56 49 43 47 39 70 50 58 39 43 52 66 34 32 52 4c 66 73 78 6b 34 7a 39 6e 58 4f 77 4d 5f 65 47 58 50 48 4c 70 79 38 35 54 51 39 63 48 55 6e 4b 4e 63 77 56 37 62 4d 55 64 4a 55 6e 4a 78 62 63 50 57 63 6b 30 41 6d 5a 71 62 6b 43 5a 6c 49 7a 42 4e 77 4a 4d 41 2d 42 6a 53 62 48 4e 43 43 73 68 49 2d 68 6e 52 49 65 33 79 37 2d 6f 72 Data Ascii: 109{"apiCanary":"PAQABDgEAAADnfolhJpSnRYB1SVj-Hgd8g6tdT1a-2YXdejRq_clbAQjeeyRqTRnW8ERIa_MUaI-kQ9cS4ZD1mL-bLp_p3u057fEAjnjMStNkOmfmRsqrO6NNwco7ASVICG9pPX9CRf42RLfsxk4z9nXOwM_eGXPHLpy85TQ9cHUnKNcwV7bMUdJUnJxbcPWck0AmZqbkCZlIzBNwJMA-BjSbHNCCshI-hnRIe3y7-or
2024-03-28 16:52:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49774	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:43 UTC	446	OUT	OPTIONS /api/report?catId=GW+estsfd+dub2 HTTP/1.1 Host: 55bace4f-12461a6c.dacreativeagency.com Connection: keep-alive Origin: https://onlines.dacreativeagency.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:45 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-03-28 16:52:45 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS
2024-03-28 16:52:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:45 UTC	375	OUT	POST /api/report?catId=GW+estsfd+dub2 HTTP/1.1 Host: 55bace4f-12461a6c.dacreativeagency.com Connection: keep-alive Content-Length: 471 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:45 UTC	471	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 38 39 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6e 6c 69 6e 65 73 2e 64 61 63 72 65 61 74 69 76 65 61 67 65 6e 63 79 2e 63 6f 6d 2f 3f 75 73 65 72 6e 61 6d 65 3d 6b 65 6e 72 6f 64 40 6d 65 2e 63 6f 6d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 32 30 39 2e 33 38 2e 32 34 30 2e 31 33 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e Data Ascii: [{"age":1,"body":{"elapsed_time":1898,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://onlines.dacreativeagency.com/?username=kenrod@me.com","sampling_fraction":1.0,"server_ip":"209.38.240.137","status_code":404,"type":"http.
2024-03-28 16:52:50 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:50 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding request-context: appId=cid-v1:bdc28cee-e7d0-4fb8-ae30-555e54e91d16 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-03-28 16:52:50 UTC	59	IN	Data Raw: 33 35 0d 0a 4e 45 4c 20 41 67 67 72 65 67 61 74 6f 72 20 68 61 73 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 70 72 6f 63 65 73 73 65 64 20 74 68 65 20 72 65 71 75 65 73 74 0d 0a Data Ascii: 35NEL Aggregator has successfully processed the request
2024-03-28 16:52:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:45 UTC	815	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:49 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1170 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C528_BL2 x-ms-request-id: 2949caf3-ff98-43cb-acbc-6801b40b4f29 ppserver: PPV: 30 H: BL02EPF0001D873 V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:49 UTC	1170	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 6d 6f db 36 10 fe de 5f 61 0b 85 21 ce 9c 62 d9 8e 9c c8 61 8a a1 dd 50 17 6b 1a 34 1d f6 41 d5 00 5a 3a d9 dc 64 52 20 69 a7 81 a3 ff be d3 9b ed 74 03 6a 04 91 e5 7b 79 f8 3c a7 bb b3 6e 4c a2 45 61 7b f6 a9 00 e6 58 f8 66 2f fe e6 3b de 58 9d db 57 bd 7e b6 95 89 15 4a ba 92 5a b2 cf 94 76 77 5c f7 a0 27 64 cf 12 19 41 cc 2c 5e 4a d7 ae 85 a1 c7 60 0c 6d ef 7b d6 15 64 2f 32 17 22 11 13 0d 76 ab 65 af ba f7 e0 5b a1 b4 35 f3 0a d0 b0 ca c4 f6 ad 2d dc 97 54 a4 a1 a0 b9 e2 29 a4 61 df 2f e7 6d aa ac 52 13 9e e7 ae e9 10 28 fe 1d ee 2d c1 2f 4d 1a eb 8f 8e 8e b2 e6 cd f6 07 20 eb 6d 18 8a f2 12 06 78 2d 98 e3 50 eb 8e 48 e9 46 df 69 ee 84 40 2d ab ad 80 65 ab 28 89 29 b0 11 15 cc 7a 39 c8 95 5d cf e1 46 cc 87 43 20 28 Data Ascii: Vmo6_a!baPk4AZ:dR itj{y<nLEa{Xf/;XW~JZvw\'dA,^J`m{d/2"ve[5-T)a/mR(-/M mx-PHFi@-e()z9]FC (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49776	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:46 UTC	684	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onlines.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:47 UTC	796	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:47 GMT Content-Type: text/css Content-Length: 20314 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 27 Dec 2023 18:18:12 GMT etag: 0x8DC07082FBB8D2B x-ms-request-id: c35e9aa9-101e-006f-3bec-792ea3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165247Z-711q6gmnyh1tm0h655397vrsb80000000d40000000006u1z x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:47 UTC	6424	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-03-28 16:52:47 UTC	13890	IN	Data Raw: 88 c7 bb 51 70 8f 77 a3 e0 88 77 a3 60 1e ef 46 c1 3d de 8d 82 3b de 8d 82 78 bc 1b a5 18 1e ef 46 c1 11 ef 46 c1 3c de 8d 82 7b bc 1b 05 77 bd 1b 06 c2 bc 1b 09 40 bd 1b 09 44 bd 1b 09 74 bd 1b 09 c1 bd 1b 09 c5 bd 1b 09 b5 bd 1b 59 8e 7b 37 12 8a 7b 37 12 ea 7a 37 aa f7 b8 77 a3 c0 b8 77 a3 c0 b6 77 a3 00 b8 77 a3 c0 b8 77 a3 c0 ae 77 a3 40 b8 77 a3 c0 b8 77 a3 c0 b6 77 a3 00 b8 77 a3 d4 00 f7 6e 14 d8 f5 6e 14 08 f7 6e 14 18 f7 6e 14 d8 f1 6e 08 a4 c9 bb d1 e0 26 ef 46 63 35 79 37 1a cb eb dd 68 94 46 ef 46 a3 35 7a 37 1a cd e3 dd 68 84 46 ef 46 a3 35 7a 37 1a cd eb dd 00 76 36 7a 37 00 af d1 bb 01 78 1e ef 06 60 34 7a 37 00 af d1 bb 01 78 5e ef 06 e0 34 7a 37 00 af d1 bb 01 78 1e ef 06 60 34 7a 37 40 51 1b bd 1b 80 e7 f5 6e 00 4e a3 77 03 f0 1a bd 1b Data Ascii: Qpww`F=;xFF<{w@DtY{7{7z7wwwwww@wwwwnnnnn&Fc5y7hFF5z7hFF5z7v6z7x`4z7x^4z7x`4z7@QnNw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49777	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:46 UTC	661	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onlines.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:49 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:49 GMT Content-Type: application/x-javascript Content-Length: 120850 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 02 Mar 2024 00:12:09 GMT etag: 0x8DC3A4D6725B632 x-ms-request-id: 83f5d822-501e-003f-4ad9-7d4d90000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165247Z-bws5z55wyp61z0bsaccg9feb6000000006kg00000000sbfv x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:49 UTC	6407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd fb 7b e3 38 8e 00 f8 fb fd 15 8e 66 2e 63 77 14 97 e4 b7 95 56 67 5d 79 54 65 3b 89 33 71 aa bb 77 53 99 7c b2 44 3b ea c8 92 57 92 f3 18 c7 fb b7 1f 00 92 12 65 cb a9 aa d9 bd bb ef be eb 9d ad 58 24 f8 02 41 10 00 41 f0 c3 4f 3b ff 47 e5 a7 ca fe f7 ff 57 19 dd 0c ae 6f 2a c3 d3 ca cd e7 b3 eb e3 ca 15 7c fd 47 e5 72 78 73 76 74 f2 fd f5 60 a3 f8 ff 37 0f 7e 52 99 f8 01 ab c0 df b1 93 30 af 12 85 95 28 ae f8 a1 1b c5 f3 28 76 52 96 54 66 f0 6f ec 3b 41 65 12 47 b3 4a fa c0 2a f3 38 fa 93 b9 69 52 09 fc 24 85 42 63 16 44 cf 95 2a 54 17 7b 95 2b 27 4e 5f 2b 67 57 b5 3a d4 cf a0 36 7f ea 87 50 da 8d e6 af f0 fb 21 ad 84 51 ea bb ac e2 84 1e d5 16 c0 47 98 b0 ca 22 f4 58 5c 79 7e f0 dd 87 ca 85 ef c6 51 12 4d d2 4a cc 5c Data Ascii: {8f.cwVg]yTe;3qwS\|D;WeX$AAO;GWo\|Grxsvt`7~R0((vRTfo;AeGJ8iR$BcD*T{+'N_+gW:6P!QG"X\y~QMJ\
2024-03-28 16:52:49 UTC	16384	IN	Data Raw: c3 9e d2 e5 9e 14 84 20 25 0f f8 2c 17 23 71 1d 79 b8 31 40 22 ee 35 a1 77 19 09 5e 0b 2d 49 9d cb 68 1a 3a f7 00 bc 17 2b 1c 6f 07 81 f6 0a fa eb d5 d5 fd c9 fd f1 c7 fb 8b 93 8b 8f 27 d7 c7 c3 93 d1 e5 f0 e6 e4 8f b3 11 ac bf a3 53 f8 ef c8 6c 6b 1c ea e4 8f a3 f3 2f c7 27 b0 3a 7a 86 d1 c2 39 14 19 bc ec fd f9 f0 e8 57 25 d7 14 b9 1f 07 c7 f7 57 83 d1 e8 f7 e1 75 9e d9 90 45 cf 46 a3 b3 cb 4f a2 0a be 52 39 48 d3 5c 03 59 af a3 29 eb 38 3d 39 3e b9 1e dc d0 aa ba 3c 3f 83 55 3a fc 74 76 79 7f 7c 36 1a 9c 9f 0f 7f 97 5d ea f6 06 47 a2 c4 d5 c9 fd f5 97 73 58 9d e7 23 d1 5e ab 6f c8 cc 8b e1 47 e0 0f 47 b0 5c 47 f7 57 9f 87 97 27 97 5f 68 78 1f cf 07 97 bf 72 e8 76 cf 30 bf 01 7d 33 1c 8e 3e 0f 91 e5 89 02 9d 6f 17 38 1f 5e 7e ca e0 bb df 80 3f bb fc 6d Data Ascii: %,#qy1@"5w^-Ih:+o'Slk/':z9W%WuEFOR9H\Y)8=9><?U:tvy\|6]GsX#^oGG\GW'_hxrv0}3>o8^~?m
2024-03-28 16:52:49 UTC	16384	IN	Data Raw: c1 9b 06 dc 6b 34 b0 e7 74 cd 4e 5f d8 f4 28 24 bd 02 29 e6 10 3d ec 69 e2 22 da 8c 68 b6 a2 6c 5f 22 87 c7 48 dd 8b c8 d7 51 38 3e 73 1f 6d 74 6e 4c fc 14 84 76 72 68 e4 97 3a e1 e3 99 7c 33 e3 67 27 f6 98 b8 48 0e a9 2f 74 0d f6 ca f9 b8 18 c3 b6 fd 1b be ec 17 85 b9 fc fc 9a 2f 06 90 94 f1 55 91 29 c6 fc e4 77 91 f8 15 9d 83 a9 9d de 26 0a a1 f0 b5 02 49 24 cf dd 1d 56 03 3b ff 82 31 d3 c7 9a 44 c7 0b 4d 28 6f 5d 92 e3 79 a1 8d 86 e1 79 5d 6c 21 35 ab 8a 68 a4 1d 41 c1 63 c8 a3 43 1c e2 95 93 79 5d ec 2a 87 78 d3 cd ab 59 4f fc cf 18 35 df 6c 84 8f a0 21 10 f6 cb aa 7b aa 7a 0a e8 0d 80 22 94 d8 7c d6 a7 8f 80 09 41 c0 6d c5 16 b8 19 d4 c4 13 d1 ee 49 8b ab 1d 06 16 a7 05 90 ed b0 a4 c0 0b 60 e4 db 45 17 f4 a8 23 15 53 50 f6 ed 72 93 bc 5c 36 69 df 2e Data Ascii: k4tN_($)=i"hl_"HQ8>smtnLvrh:\|3g'H/t/U)w&I$V;1DM(o]yy]l!5hAcCy]*xYO5l!{z"\|AmI`E#SPr\6i.
2024-03-28 16:52:49 UTC	6328	IN	Data Raw: 98 45 34 99 e7 5d 38 84 cb 39 97 80 24 26 c2 f3 5a ee 33 7d 36 ab 8f 99 8c 01 64 bf ad 18 91 25 7f 9c ee af 0f ee ae b5 8a 03 da d3 cf 31 65 8f 6d ce 29 32 f4 31 5c b6 0d 1f 2e 30 99 2d 9d 80 de 94 01 ff 80 ae ee 7a 00 8e f0 61 26 ef d3 6b ac 16 d9 40 6f d3 bd ba bd 33 ec 8a a8 fa f9 be 0b f1 ef 32 ca eb fe 64 40 c2 d1 0b 01 09 e1 a9 5c 5d 2f 3c fe c3 6f 7e fc 93 17 1e ff 6f 6d f1 6f 8b bf 50 c4 2b c7 9a f4 c2 17 be 8d 38 23 bc 21 fa 3a 95 a0 8a 30 18 9e a7 d9 63 d1 7d 02 16 48 ef c2 e1 90 bc 9c 13 42 58 cc ce eb cf 2f 03 2f 11 65 7e 08 d3 db aa 31 40 fe 19 0c 31 1d 85 c8 cd a1 33 ff 26 f9 52 59 72 0e 78 20 a6 8b 35 57 17 d5 eb 4b dc dc 8a 19 13 8d 36 4c c6 a5 b9 a2 43 25 f3 bb 7a b6 6e 5c 91 58 9c 34 0d c6 4c 98 3f 6b 55 b4 22 6b 7e 64 88 7c 04 cb 64 a6 Data Ascii: E4]89$&Z3}6d%1em)21\.0-za&k@o32d@\]/<o~omoP+8#!:0c}HBX//e~1@13&RYrx 5WK6LC%zn\X4L?kU"k~d\|d
2024-03-28 16:52:50 UTC	16384	IN	Data Raw: 8e 1a 4b 1c 11 6f 9c dc d5 0c 19 2e 16 23 e9 ad 2a 9f 87 c1 32 a6 ea e6 f7 c9 47 82 e3 d8 d8 0f 4b 36 82 31 9c d0 9c c6 c3 e5 0e ef 52 72 d2 91 50 a8 a7 de 70 d2 17 6f 23 31 ec 23 02 8c 02 b6 1f 7b c8 5d 40 b4 a9 f4 5a a1 4c 11 d5 29 51 7c c8 58 54 ec c1 be 03 d6 c4 91 99 f5 65 c6 98 16 e6 79 4a db 29 9c 27 95 db a7 ca 87 28 ba 4b 2e d2 4b 54 cd eb 5b c5 87 ed 21 14 0f 2f fa 17 43 8e 6a 73 19 d0 cf fb 70 38 11 33 f5 c0 64 4a 4d af 04 47 69 8c 39 68 19 21 3f 6d 22 01 94 34 60 08 9c 38 89 e1 25 9b c8 a1 07 63 f8 79 47 5e 3d 02 07 3d 39 38 b0 a4 6e 85 0c 41 5f 61 56 75 bf 89 fa 7d 64 da c7 7c eb 46 f0 83 46 49 63 bc e9 c9 2d ca 2e 46 97 70 85 27 05 fd f3 b6 b0 03 b6 e5 4f e8 bc 6e db 59 a1 df 8c fb 15 f0 83 fb 8d 0b bd 50 14 69 bf 57 d6 94 98 60 b4 1d 36 36 Data Ascii: Ko.#*2GK61RrPpo#1#{]@ZL)Q\|XTeyJ)'(K.KT[!/Cjsp83dJMGi9h!?m"4`8%cyG^==98nA_aVu}d\|FFIc-.Fp'OnYPiW`66
2024-03-28 16:52:50 UTC	16384	IN	Data Raw: c4 7c f0 9e cb 71 0c a1 f0 7c d8 58 62 17 b4 c4 7c 35 fb 6a d9 5c 4b d6 6b b1 bb c6 bc 06 aa 15 62 eb a0 b2 85 a5 75 ad 36 85 62 32 70 23 91 5d 52 01 8d b5 f8 5c 46 75 b6 16 a5 06 ee b4 8d df 1d 87 aa 82 cc 76 f5 ce ef 5d 66 67 f2 c2 59 6f 6d 65 6d ad 61 3d cf c7 03 e3 a9 01 ef e1 85 d7 2a 10 48 ab a1 59 3e ff 92 99 71 50 f7 4e 80 a6 15 09 c3 59 9b 5a 56 da d7 b6 05 ab 53 0d cb c9 45 c2 2e f5 64 2a 72 d6 b7 aa d1 54 27 d4 3c c8 3c 76 4b 19 55 08 37 38 61 92 2e d4 06 a2 3d c9 8e 26 92 8c 52 f9 44 ac 2a 0f 08 5a c7 e2 12 a1 6f 68 e3 2b c9 b2 45 4d f7 22 59 d6 7b f0 02 58 45 ea 10 86 b0 2c 78 a8 5a b6 d8 62 78 52 9c b2 97 c9 4d e4 14 42 7a 0f 42 da f4 26 f1 a5 f0 6f a2 ee b6 4e 7b a9 96 3f 31 b0 05 25 2d 22 0c 6c d1 46 39 e1 90 40 33 58 55 67 1e 77 92 67 42 Data Ascii: \|q\|Xb\|5j\Kkbu6b2p#]R\Fuv]fgYomema=HY>qPNYZVSE.drT'<<vKU78a.=&RD*Zoh+EM"Y{XE,xZbxRMBzB&oN{?1%-"lF9@3XUgwgB
2024-03-28 16:52:50 UTC	16384	IN	Data Raw: 83 50 67 00 07 d4 fc 9a b9 de 53 78 95 3b a3 95 ef 66 44 75 c7 93 2d 61 9d 7d 65 af c6 13 9a d9 b5 ed 6a b4 ff d7 d9 87 fa 6a a7 43 79 55 47 82 0a 55 31 a9 65 db 6c 7b d3 da 36 bf 41 d4 5a 4d ee ab 2b ad 36 74 c2 c9 5f ef de fd eb ea b6 a9 ab fe 73 c6 da d5 d1 0d ff 33 a9 e7 ae c9 5b 37 9e a4 94 b3 e0 5f b3 93 ce 85 ba 69 01 1d 80 09 d1 1c 59 3e 46 c9 44 a7 ed ff 54 da 31 cc e8 d9 e8 ff f6 26 e6 fa f4 c9 fb 9b 1f c1 36 19 bd b4 21 b3 99 e9 4b 9d cd 26 e0 8d 8a b9 cd eb 72 74 7d a6 be e5 e4 ff 4e 5e 4c 1b d3 6f 7c 35 fa af d9 f7 14 6a f7 f6 f4 f8 fc b4 15 b9 3a f9 7f a5 ba 90 00 f3 20 c6 3a d4 49 df b6 08 66 f8 0f 35 3d 17 68 ee a7 69 7d 1a 66 75 ed 49 e7 ce 8f 8f 4d 01 ba 35 91 f6 e7 f0 e6 b8 7a ae 62 a0 94 f2 ad d5 4f 95 26 56 3e 4c 80 38 b4 5b 3d 1a 4e Data Ascii: PgSx;fDu-a}ejjCyUGU1el{6AZM+6t_s3[7_iY>FDT1&6!K&rt}N^Lo\|5j: :If5=hi}fuIM5zbO&V>L8[=N
2024-03-28 16:52:50 UTC	16384	IN	Data Raw: a6 bd 2b f0 a4 09 77 ad d3 fe b7 63 7c 47 d7 78 54 3a 8d cc d4 39 a2 f5 5d ca da c8 ed d9 9a bc 83 8f ec c7 cd 48 80 35 cb b8 2f 76 f4 47 65 21 eb aa da db db 58 c7 3a 1b c7 6c be e6 ea 5d ff 9e af bf b9 7a 8d c6 da ca 07 e5 d0 ee 9e 71 7b b8 3a 6b 54 92 1e a1 3c 0d 23 d6 73 28 7b b4 9c 95 e3 87 cb 3a 74 58 3b 56 28 7e bb 39 09 48 f3 bc 4a 0f 48 29 70 75 20 b2 16 fc 23 df 1f ab 1c f0 d7 24 3d 19 fe f2 ab cb ef 1c 1c 50 e6 f2 e5 c8 f5 02 2c d3 c8 f5 5d fa e3 ab 07 3f a4 ff da be fa 1d d1 7f 03 f5 de 0b 2d f5 27 b2 f5 1f 54 b9 37 38 38 40 7b f2 97 02 ff 57 b7 db 7a f5 8d c8 df 0e d4 d9 23 8a 24 99 0d f3 ec 70 00 9e 90 bf 95 4f 72 36 2f 4f 87 7f f9 a5 18 e0 df 7a 39 6e 52 01 1f 0e 3e 0c 54 4c e3 e0 97 7b 42 55 51 b9 a7 41 1a bf dc 9b e8 ba f4 ef 82 2d d8 79 Data Ascii: +wc\|GxT:9]H5/vGe!X:l]zq{:kT<#s({:tX;V(~9HJH)pu #$=P,]?-'T788@{Wz#$pOr6/Oz9nR>TL{BUQA-y
2024-03-28 16:52:50 UTC	9811	IN	Data Raw: 27 4f b0 ea ce 74 ca 7f 0b bf 7b fe f3 20 fe 2e 7c 1a 74 ba fb 73 0c bf 84 fd 75 22 8c eb 44 c3 2b 76 ba d4 47 3d 00 66 91 a4 64 2a 85 5e 72 9f 3c 41 03 37 c6 f5 a2 e7 c5 2f d1 b6 18 93 65 27 31 da 8b 64 41 9b 6e 1b 97 dd 3b 23 ea 2d 6e d2 2b da 9c e2 19 1f 7e fb ad b1 e8 61 66 67 9f 74 42 f8 3a 27 f1 65 76 b5 17 1a 4b 8c 0e 1e 13 28 04 18 7e f2 c4 2f 1a 80 72 ed 36 6d 73 49 80 7d f1 20 90 4a b3 8b 5f c2 f7 d3 a2 05 2c 7b 99 20 93 96 a1 0f bf 37 9f 3c e9 b8 4f 13 31 2f d4 33 18 90 70 d9 f9 c2 62 53 86 7b d6 5d 97 d5 e6 b8 98 6a 22 65 7d 2f a0 7e 1a 4e f3 01 58 fb e1 77 d8 3c cc 55 d7 40 dc 4f a7 53 84 ea 29 7e df 17 a0 e1 13 68 bf e3 02 71 44 e9 8f 0c 8c dc 1b 09 10 0f 2d f8 ca 30 d9 e0 8d b4 27 fc 0a ea 70 de dd 20 ea 95 33 34 57 d9 dc b9 81 eb 37 b2 4c Data Ascii: 'Ot{ .\|tsu"D+vG=fd*^r<A7/e'1dAn;#-n+~afgtB:'evK(~/r6msI} J_,{ 7<O1/3pbS{]j"e}/~NXw<U@OS)~hqD-0'p 34W7L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49778	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:46 UTC	680	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onlines.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:52:48 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:47 GMT Content-Type: application/x-javascript Content-Length: 15778 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 17 Feb 2024 05:09:10 GMT etag: 0x8DC2F7693532D17 x-ms-request-id: 5abdba2c-a01e-007c-4fc0-80e387000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165247Z-nn2av1w0z91r77gwwy7anb9zh000000000xg00000000sxvw x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:48 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 Data Ascii: }Ms#GuhO=>4pO$PIF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sB
2024-03-28 16:52:48 UTC	206	IN	Data Raw: 98 51 c1 48 22 c9 4d d6 13 fd aa 38 68 74 29 d9 41 9b 13 7e 29 ee 11 ca 71 0f c0 fb b3 b4 56 c9 bd 00 3b c7 14 68 d2 f9 40 a7 d2 30 ff f4 6b a2 84 23 5f 49 55 3c 81 72 6d 12 f8 e7 81 8b 57 88 40 87 cd ab ac 2c 28 bb 32 ba c0 48 07 04 71 e5 c7 4f e8 04 33 e0 b1 fa 00 86 8e d8 7f 56 5b 6d 3f 50 76 37 bc ed bc b3 f7 14 d6 d6 ed 52 04 80 97 d7 d5 6d a2 f7 20 3a 45 a6 fd 9c 7b ef 46 14 a6 a5 6d fd ca 3e ea fa 5b 5a 5a b8 27 f7 7b f7 77 76 69 35 e4 d9 94 d6 3e b6 ad ec 40 d7 18 6e 32 ce fd 72 75 e7 38 8d 86 a9 4e ab cf e9 f4 db 8b 51 97 1b 55 3f 7d fa 79 cf e1 4c a0 a5 c9 a4 f1 87 f2 eb ff 07 88 2a 7c 93 ed d6 00 00 Data Ascii: QH"M8ht)A~)qV;h@0k#_IU<rmW@,(2HqO3V[m?Pv7Rm :E{Fm>[ZZ'{wvi5>@n2ru8NQU?}yL*\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49779	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:50 UTC	748	OUT	GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1 Host: onlines.dacreativeagency.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://onlines.dacreativeagency.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: jucC0t3NBHgD1G7Mx7/5IQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-28 16:52:52 UTC	745	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:52:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 3b30e076-c3e2-449d-a819-128b7af66a02 x-ms-ests-server: 2.1.17573.7 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49780	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:50 UTC	760	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:53 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:53 GMT Content-Type: application/x-javascript Content-Length: 54381 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Feb 2024 19:13:15 GMT etag: 0x8DC2E5A2998EB1D x-ms-request-id: 841d170d-701e-002d-49c0-80abb6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165251Z-r94n2h0m2p55rf3syhqzkqtqr800000000sg00000000875c x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:53 UTC	13648	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 7b db 46 92 30 fa 7d 7f 05 85 67 56 01 42 90 22 29 59 b6 49 41 1c db 49 e6 f5 3e 49 ec 63 27 f3 9e 3d 32 37 0f 44 36 25 8c 29 80 8b 8b 6d 8d c8 fd ed a7 aa fa 0e 34 28 f9 9a 6c c6 b3 1b 8b 68 34 fa 52 dd 5d 5d f7 3a f8 76 ef df 3a df 76 7a 77 ff 5f e7 e5 2f 8f 5e fc d2 79 f6 43 e7 97 ff f3 f4 c5 77 9d e7 f0 f4 9f 9d 9f 9f fd f2 f4 c9 f7 77 6f 07 3b c5 ff 7e b9 4c 8a ce 32 59 b1 0e fc 3d 8f 0b b6 e8 64 69 27 cb 3b 49 3a cf f2 75 96 c7 25 2b 3a 57 f0 6f 9e c4 ab ce 32 cf ae 3a e5 25 eb ac f3 ec 1f 6c 5e 16 9d 55 52 94 f0 d1 39 5b 65 6f 3b 3e 34 97 2f 3a cf e3 bc bc ee 3c 7d 1e f4 a1 7d 06 ad 25 17 49 0a 5f cf b3 f5 35 fc be 2c 3b 69 56 26 73 d6 89 d3 05 b5 b6 82 87 b4 60 9d 2a 5d b0 bc f3 f6 32 99 5f 76 7e 4a e6 79 56 Data Ascii: k{F0}gVB")YIAI>Ic'=27D6%)m4(lh4R]]:v:vzw_/^yCwwo;~L2Y=di';I:u%+:Wo2:%l^UR9[eo;>4/:<}}%I_5,;iV&s`*]2_v~JyV
2024-03-28 16:52:53 UTC	16384	IN	Data Raw: d8 82 a0 55 7c a4 20 11 70 53 32 63 8f 10 75 7a 1b 76 50 6b 86 9e 16 76 09 1d 4d 4e e2 f2 33 8c af 1b d4 b6 1f 04 12 7d a8 2f 8d 41 f0 db ea 33 f0 51 57 24 f9 10 09 7c 65 9e 44 f9 cc 75 1f 25 c5 ef 12 70 e2 73 b0 40 88 c1 7f 51 31 af f9 aa b7 71 de 94 39 30 33 4a d7 0d 92 1d 63 6e b7 ad ac 3b f1 08 e5 1c 61 e5 86 dd 26 5c a8 31 5a 92 91 dc 5c 91 47 9c d3 d8 a1 a9 e6 fa e7 ca cc a8 8c 91 b9 12 2a 6b cf 45 5c ee d2 3f a3 cd 8a a1 79 be 08 2f 4c cd f3 05 6a 9e ef ef d6 3c 0b 59 3c 49 6c b5 a0 56 e8 46 71 a7 a0 9d 92 91 52 19 38 34 dd 5f 16 66 66 7f 19 f6 f7 e0 ee 9a ee 3f b1 5d 67 f6 7b 9a 1d 26 86 1a 22 f9 93 a9 21 ea 8a c1 cf a4 ae fb 93 59 6e 26 5f 46 5d 97 fc 11 d5 75 49 5d 5d 87 f3 99 93 26 6b 88 31 77 e7 fd 97 44 1f 00 15 f5 04 b6 27 2e 1d e6 e2 d1 a5 Data Ascii: U\| pS2cuzvPkvMN3}/A3QW$\|eDu%ps@Q1q903Jcn;a&\1Z\G*kE\?y/Lj<Y<IlVFqR84_ff?]g{&"!Yn&_F]uI]]&k1wD'.
2024-03-28 16:52:53 UTC	16384	IN	Data Raw: 05 f2 8d 0d 7b 21 e1 bf 88 07 79 dd 1c f8 b7 f6 bc 2e 2b 4e 90 77 86 bc dc c4 95 9e 7b 92 2d 20 a2 59 3a e7 e6 62 1d ea e9 dc d4 71 30 2b e1 2f cb 4a f8 cb b7 5e 16 be 77 39 ea a5 b7 36 ec 65 2a de a5 2a ec 65 6a 87 bd 4c ab 61 2f d3 d5 61 2f 8b f0 23 10 0b 2a d4 55 11 a6 95 58 97 a9 8e 75 59 84 a9 8a 75 59 a8 58 97 45 58 98 b1 2e b3 b0 60 02 95 19 f9 a8 31 14 1f a6 70 24 c6 68 99 6d 6d 6d 66 83 ab e1 d6 d6 35 b0 f3 64 3e ee 66 42 ba 4f 43 22 7c 43 8d f8 98 6f c9 28 4d 86 fb b8 88 a7 33 84 a0 9a ba 64 eb fa da f3 e1 ff 5b 71 94 05 af 85 6c 2d 30 2a 91 91 81 ec b0 d4 b5 d8 89 35 20 e4 15 67 5e bc 2d 8e c9 be 68 82 40 9c a1 34 f4 67 e4 f8 67 40 d5 2d 05 10 7f 8e b8 af fe c8 9f 28 a5 64 58 fa 6e a4 bc fb 51 11 5c 33 89 b7 25 89 1c 76 50 cb 41 88 1e d6 6f 84 Data Ascii: {!y.+Nw{- Y:bq0+/J^w96e*ejLa/a/#UXuYuYXEX.`1p$hmmmf5d>fBOC"\|Co(M3d[ql-0*5 g^-h@4gg@-(dXnQ\3%vPAo
2024-03-28 16:52:53 UTC	7965	IN	Data Raw: ad 9c 68 c6 e8 a1 b9 6c d8 81 f5 da e9 25 fa 23 09 ea 0e 91 64 72 05 5b 41 63 99 f0 46 41 89 09 ee 25 df f1 a4 dc 25 6b e3 ef 0e 6f 0d 21 8e 11 32 21 aa 46 72 6e 29 ef 01 e0 9c ce 13 91 00 2b 5d c2 3c 68 5b 6b 16 5f 64 f3 b3 29 e2 60 90 0d c6 52 1b 07 6d 76 b1 5b 15 c1 4a e5 ae 47 b3 31 7d 50 09 6d 86 f3 83 28 b3 71 c6 85 1c 83 b4 e5 3a 15 f7 78 cf fa 18 52 92 fa 57 93 87 70 8d d6 55 7a cf 5a 65 99 8d 65 bd 85 c6 bd ba 22 8e 6d 85 20 a0 d3 bc 77 f7 90 60 8d 0e 2e 1f 36 94 14 f8 c0 24 7c d1 33 71 af 0e 3c a7 fc 1b b4 f0 ea 1d 30 58 8d 46 38 d4 7a 7d 4f cb 36 e6 de c0 f8 cb 19 02 f9 10 e4 43 49 02 5c 59 ef 0a 36 da 1c 22 da 0c 6b f3 d8 70 29 8a 0f 57 81 9c 4d 4c 28 34 e4 c8 c2 12 38 f2 8c 7c 08 cc 93 07 f9 f0 8c 76 cb 62 b1 8b 57 4d 8a 1b c6 eb 65 c0 cc ae Data Ascii: hl%#dr[AcFA%%ko!2!Frn)+]<h[k_d)`Rmv[JG1}Pm(q:xRWpUzZee"m w`.6$\|3q<0XF8z}O6CI\Y6"kp)WML(48\|vbWMe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49781	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:50 UTC	853	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: bf2b00c1-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:53 UTC	430	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:52:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 24E3C5259DE64B9E95B39AE1A30404BF Ref B: AMS231032604025 Ref C: 2024-03-28T16:52:52Z access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:53 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2024-03-28 16:52:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49782	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:54 UTC	791	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:55 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:55 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 24ce3874-001e-0032-1d1f-7e928b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165255Z-2arfcxhbxt7v16s240q0gg5srw000000066000000000px20 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-03-28 16:52:55 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-03-28 16:52:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49783	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:54 UTC	804	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:55 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:55 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 24d19dff-601e-0024-5a86-80d8a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165255Z-f9mgh7fkud1vrfww1ddht5nfmc00000000sg00000000zb9n x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:55 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-03-28 16:52:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49784	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:54 UTC	805	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:55 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:55 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: d37f7da2-601e-0070-6cd9-7d179e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165255Z-dr0k5c4q511vt93u1q3g09cnk000000006pg00000000sr7d x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:55 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-03-28 16:52:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49785	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:54 UTC	805	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:55 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:55 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 1882cc07-e01e-0054-46ec-792aa5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165255Z-keep9afzad5w56k4vsxmrdcbg40000000drg00000000bvkd x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:55 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-03-28 16:52:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49787	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:54 UTC	766	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:56 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:56 GMT Content-Type: application/x-javascript Content-Length: 35854 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Feb 2024 19:13:16 GMT etag: 0x8DC2E5A29EDB0A1 x-ms-request-id: 75f15388-a01e-0038-6720-7a9c9e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165255Z-scr9zwadth53rdenpf43czc1ng0000000d0g000000014zp6 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:56 UTC	15567	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 7f db 38 92 28 fa ff f9 14 b6 a6 c7 11 db b4 2c ea 2d db 8c c7 f1 a3 93 99 a4 93 cd a3 67 67 6c 75 86 a2 20 89 6d 8a 94 49 ca 8f c4 de cf 7e ab 0a 6f 52 76 92 d9 b3 e7 dc df bd 99 69 9a 28 14 0a 85 02 50 28 14 0a d4 ee cf 9b ff 6b e3 e7 8d 9d ef ff b7 f1 e1 e3 d1 fb 8f 1b 6f cf 36 3e be 7c f5 fe 64 e3 1d a4 fe b1 f1 eb db 8f af 8e 4f bf 9f 0e 56 8a ff 7d 9c 47 f9 c6 34 8a d9 06 fc 1d 07 39 9b 6c a4 c9 46 9a 6d 44 49 98 66 cb 34 0b 0a 96 6f 2c e0 99 45 41 bc 31 cd d2 c5 46 31 67 1b cb 2c fd 83 85 45 be 11 47 79 01 85 c6 2c 4e 6f 36 ea 40 2e 9b 6c bc 0b b2 e2 6e e3 d5 3b a7 01 f4 19 50 8b 66 51 02 a5 c3 74 79 07 ef f3 62 23 49 8b 28 64 1b 41 32 21 6a 31 24 92 9c 6d ac 92 09 cb 36 6e e6 51 38 df 78 13 85 59 9a a7 d3 62 Data Ascii: {8(,-gglu mI~oRvi(P(ko6>\|dOV}G49lFmDIf4o,EA1F1g,EGy,No6@.ln;PfQtyb#I(dA2!j1$m6nQ8xYb
2024-03-28 16:52:56 UTC	12561	IN	Data Raw: 17 66 72 61 29 dd 52 d4 b7 f8 69 b6 7d 7a c5 4f 30 49 fa d4 4c 66 7d d9 de eb 09 58 62 03 6e e5 32 4b 16 f6 87 f2 8e 93 90 4a 40 72 ea e5 95 8f 28 e2 c5 0a d1 15 3d 32 aa 3e bc 34 7f fd 8a 78 9a 9b bf 7f 35 24 1c 8d 31 e0 18 2a 9f 06 25 1e 3a af fd 24 3b e5 ac bd ae 5d 3e bd 6e 4b d8 3a e7 29 91 59 6f f8 50 96 fd 6d 77 ba 89 98 cf c5 ef fc e0 00 fc 10 cd d4 17 1f c9 be c9 0d 40 a8 00 53 09 69 49 c8 b5 0d d1 a7 6f 3c 69 04 64 07 1c a2 8e d4 db 22 7d 55 02 a8 cf 50 33 91 96 13 81 76 84 e6 77 e6 26 22 ad 2e 58 4e 39 40 85 5a d3 f1 07 00 cc 25 a1 c3 41 e6 17 e1 88 f5 f2 e7 1f e8 bb ab fc e7 b8 e4 50 a3 9e 45 f0 da 41 b9 08 f2 b9 9c c3 b4 b9 cd 17 f6 97 94 a9 e6 72 87 2e 22 49 bf 2d 00 ea 23 0e 01 4f 2a 17 58 28 d2 2a 90 2b 54 37 77 3e bc 3d fb a8 47 20 21 a6 Data Ascii: fra)Ri}zO0ILf}Xbn2KJ@r(=2>4x5$1%:$;]>nK:)YoPmw@SiIo<id"}UP3vw&".XN9@Z%APEAr."I-#OX(*+T7w>=G !
2024-03-28 16:52:56 UTC	7726	IN	Data Raw: f6 6a a1 4b e3 7c 76 98 62 eb 3c 20 d2 2a ed 14 2c a6 59 38 94 30 e7 76 ba 31 ad 35 a6 5b b5 85 76 91 b7 ec af 06 5b 54 a8 c5 c8 b0 c2 bb 0e 92 96 40 5f d3 e3 d5 04 e8 eb ca e9 0c b6 45 91 8c 74 5c 44 25 c7 9e 99 80 44 17 8f 8e 3c 56 81 5f 3b ee 00 b1 ca b7 49 09 d3 47 67 b5 e7 4d 2b 72 74 4a 83 ea 8f 40 83 23 c3 86 25 68 6e 06 fa ca 40 85 60 2e fe 77 9c 3d d0 e0 7d 0c 5c b1 17 0d b3 91 1a 6b d4 cc a4 26 59 e3 a8 61 3b b2 43 c2 aa 62 67 f7 6a d2 04 f3 12 4b 37 f6 e6 ac 54 bd 49 a0 4d f7 f9 0b b5 fc 35 6f 12 e4 c2 0e 0d c4 99 f7 5b e8 b9 74 88 7b ce bc df b2 20 07 2c 85 39 4f 98 01 0e 6e a3 e0 86 79 bd 3d 7f c7 9c e1 42 1b 37 e1 76 95 a5 bb 25 b9 32 b8 3c 3f b7 a5 82 00 55 b4 de ac fc 3c ca d9 c7 0b f3 23 93 d7 60 75 ef 99 63 5e f2 b2 8c 09 17 6d 4a 40 17 Data Ascii: jK\|vb< *,Y80v15[v[T@_Et\D%D<V_;IGgM+rtJ@#%hn@`.w=}\k&Ya;CbgjK7TIM5o[t{ ,9Ony=B7v%2<?U<#`uc^mJ@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49788	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:54 UTC	757	OUT	GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1 Host: onlines.dacreativeagency.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://onlines.dacreativeagency.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: lzXkvYAsw8kmr4RJ+nGw+Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-28 16:52:56 UTC	745	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:52:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 4b9e7606-487e-467e-9c27-5cee33479102 x-ms-ests-server: 2.1.17573.7 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:52:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49789	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:56 UTC	544	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:57 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:57 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 3730ca5f-401e-0072-78d9-7d419a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165257Z-xk05b24d157q58149vupa6184n00000006k000000000uz59 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-03-28 16:52:57 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-03-28 16:52:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49792	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:56 UTC	557	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:57 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 2301b34c-601e-0008-0af8-7abd8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165257Z-r07b1hg60t2e37rxee7eppht100000000c4g00000000ahxy x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:57 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-03-28 16:52:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49791	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:56 UTC	558	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:57 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: d0dbfb36-301e-007d-42d9-7dc885000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165257Z-xk05b24d157q58149vupa6184n00000006rg00000000r94s x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:57 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-03-28 16:52:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49790	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:52:56 UTC	558	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:52:57 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:52:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: d37f7da2-601e-0070-6cd9-7d179e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165257Z-bws5z55wyp61z0bsaccg9feb6000000006ng00000000qnwt x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:52:57 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-03-28 16:52:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49795	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:00 UTC	757	OUT	GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1 Host: onlines.dacreativeagency.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://onlines.dacreativeagency.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: Jp6UZERReuM6vt4x2R0t1w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-28 16:53:02 UTC	745	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:53:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 9fcb2498-a5c4-4d9a-af11-9e4e338d8502 x-ms-ests-server: 2.1.17573.7 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49798	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:06 UTC	762	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:07 UTC	811	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:07 GMT Content-Type: application/x-javascript Content-Length: 1674 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Feb 2024 19:13:16 GMT etag: 0x8DC2E5A2A09A4B0 x-ms-request-id: 5ba98091-101e-006f-5ed9-7d2ea3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165307Z-w79mb4fn3d6w5497p19gyrdrtg00000006mg00000000rwnh x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:53:07 UTC	1674	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 57 6d 6f db 36 10 fe de 5f c1 68 1f 62 b7 92 fc 16 27 8e 5b 0f 68 93 76 e9 b6 b4 46 ec 6d 18 9a c2 a0 a9 b3 cd 54 22 05 92 b2 e3 a5 f9 ef 3b d2 92 63 39 ce 96 b6 18 b0 61 01 62 d9 e4 bd 3f f7 1c a9 da d3 bd 27 e4 29 09 1e ff 47 06 c3 97 17 43 f2 fe 0d 19 9e bd bd 38 25 7d fc f5 3b 79 f7 7e f8 f6 e4 f5 e3 ed 58 a7 f6 7f 38 e3 9a 4c 78 0c 04 9f 63 aa 21 22 52 10 a9 08 17 4c aa 54 2a 6a 40 93 04 3f 15 a7 31 99 28 99 10 33 03 92 2a 79 05 cc 68 12 73 6d 50 69 0c b1 5c 90 0a 9a 53 11 e9 53 65 96 e4 6d bf 1a a2 7d 40 6b 7c ca 05 6a 33 99 2e f1 fb cc 10 21 0d 67 40 a8 88 9c b5 18 7f 08 0d 24 13 11 28 b2 98 71 36 23 e7 9c 29 a9 e5 c4 10 05 0c f8 1c 9d e8 0c d7 cb 2e 7c 42 15 10 0d 86 4c a4 32 b3 55 1c 21 19 58 c9 dc aa 76 6e 56 1e Data Ascii: Wmo6_hb'[hvFmT";c9ab?')GC8%};y~X8Lxc!"RLTj@?1(3yhsmPi\SSem}@k\|j3.!g@$(q6#).\|BL2U!XvnV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49799	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:06 UTC	810	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:07 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:07 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: fff168a0-a01e-0028-7246-802cbc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165307Z-mgyprgas7t79zeqtmyhpunfvus00000001y000000000rmt0 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-03-28 16:53:07 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-03-28 16:53:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49800	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:06 UTC	804	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:07 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:07 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: a4fd03a9-801e-0006-0b7f-801f92000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165307Z-668svyva190hd8u0arg4d8fysc00000000wg00000001mcwe x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-03-28 16:53:07 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-03-28 16:53:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49802	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:08 UTC	563	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:09 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:09 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: f07fad6e-501e-002f-46c0-80fdb2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165309Z-0qc6vyfdxp6bta9qumfgxs3cun00000000ug00000000v6q8 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-03-28 16:53:09 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-03-28 16:53:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49803	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:08 UTC	557	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:09 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:09 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: feac3654-601e-0060-78d9-7da7bc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165309Z-yxdza7gafx005ftywcb5v4try800000006hg00000000qa5c x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-03-28 16:53:09 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-03-28 16:53:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49804	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:08 UTC	809	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:10 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4963155C x-ms-request-id: 155dfa0a-b01e-0065-4dc1-7b20b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165309Z-xkz0hzc2690pv1tu4ye217by0g0000000a1g00000001f5ms x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:53:10 UTC	635	IN	Data Raw: 32 37 34 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 Data Ascii: 274mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q
2024-03-28 16:53:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49805	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:08 UTC	809	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlines.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:10 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:10 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F496CFFA1 x-ms-request-id: 5872e4d1-201e-0058-5bd9-7ddebc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165309Z-w79mb4fn3d6w5497p19gyrdrtg00000006kg00000000tk2q x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:53:10 UTC	260	IN	Data Raw: 66 65 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b Data Ascii: femPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{
2024-03-28 16:53:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49806	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:08 UTC	757	OUT	GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1 Host: onlines.dacreativeagency.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://onlines.dacreativeagency.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: /yv16Z7HnI4Re91mffRSFA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-28 16:53:10 UTC	745	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:53:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: eead567f-2a36-4b75-a63a-d6d1df9d8602 x-ms-ests-server: 2.1.17573.7 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49807	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:09 UTC	1605	OUT	GET /oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fonlines.dacreativeagency.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuATU5Bf37p0n77o7a8tBpqb6zlmMnPE5mWVglasYlQkbp3-BkfEFI-MkJt7s1Lyi_BSHXLDwLSZB_6J0z5TwYrfUlNSixJLM_LxHzKhqLrAIvGLhMWC24uDgEmCQYFBg-MHCuIgV6CpOxS2KLod6_Hde2crb8y6W4RSrvnaka3JohKmnV5B3al5wpFOkhUFVYGBRlV9IgFOYh2eYr4FZZJC7YY6xeaitmZXhBDahCWxMp9gYPrAxdrAzzGJnOMDJuIGH8QAvww--9eeWPfn-YvI7j1f8Oob-vm4GfsbFjqGhqVGp7gHe_pnmZvpJuebu5n7aQc6uOQWF3pVOBYEVzuW2GwQYAA2&login_hint=kenrod%40me.com&estsfed=1&uaid=8da31f269ebd451fbb6ab4c102827f89&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com HTTP/1.1 Host: l1ve.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:11 UTC	1017	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 16:53:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-store, no-cache pragma: no-cache location: https://signup.dacreativeagency.com/signup?sru=https://l1ve.dacreativeagency.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod@me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https://a4d0aec3-12461a6c.dacreativeagency.com p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C533_BL2 x-ms-request-id: 6c43fcb5-8524-4970-b31a-278f10dd2b51 ppserver: PPV: 30 H: BL02EPF0001D8B5 V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49809	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:10 UTC	562	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:11 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:11 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4963155C x-ms-request-id: cc13309c-801e-0042-6bec-79608b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165311Z-scr9zwadth53rdenpf43czc1ng0000000cyg000000014r4d x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:53:11 UTC	635	IN	Data Raw: 32 37 34 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 Data Ascii: 274mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q
2024-03-28 16:53:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49810	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:10 UTC	562	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: 13d1c6b8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:12 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F496CFFA1 x-ms-request-id: ac206c1e-001e-001e-2cec-79f7a1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240328T165311Z-3xxdaqveyh1hv61fhypv7th3yn0000000d2g000000008cam x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-03-28 16:53:12 UTC	260	IN	Data Raw: 66 65 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b Data Ascii: femPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{
2024-03-28 16:53:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49811	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:12 UTC	1243	OUT	GET /signup?sru=https://l1ve.dacreativeagency.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod@me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https://a4d0aec3-12461a6c.dacreativeagency.com HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:14 UTC	1557	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 16:53:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-cache, no-store pragma: no-cache location: https://l1ve.dacreativeagency.com/login.srf?wa=wsignin1.0&rpsnv=22&checkda=1&ct=1711644793&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.dacreativeagency.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.dacreativeagency.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253d59AC3F6F7D3AAF66%2526opidt%253d1711644790%2526uaid%253d8da31f269ebd451fbb6ab4c102827f89%2526contextid%253dE4EA2673871E61DC%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26username%3Dkenrod%2540me.com%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D8da31f269ebd451fbb6ab4c102827f89%26suc%3Dhttps%253a%252f%252fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=8da31f269ebd451fbb6ab4c102827f89 p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: wusXXXX00SY (2.0.3277.0) x-ms-amserver-tm: 15ms x-ms-request-id: c3ce8280-4b5a-4d9e-909b-efb3e8299a66 referrer-policy: strict-origin-when-cross-origin amserver: wusXXXXig0000SY x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: C3CE82804B5A4D9E909BEFB3E8299A66 Ref B: FRAEDGE1207 Ref C: 2024-03-28T16:53:13Z access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:14 UTC	992	IN	Data Raw: 33 64 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 31 76 65 2e 64 61 63 72 65 61 74 69 76 65 61 67 65 6e 63 79 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 73 72 66 3f 77 61 3d 77 73 69 67 6e 69 6e 31 2e 30 26 61 6d 70 3b 72 70 73 6e 76 3d 32 32 26 61 6d 70 3b 63 68 65 63 6b 64 61 3d 31 26 61 6d 70 3b 63 74 3d 31 37 31 31 36 34 34 37 39 33 26 61 6d 70 3b 72 76 65 72 3d 37 2e 35 2e 32 31 35 36 2e 30 26 61 6d 70 3b 77 70 3d 4d 42 49 5f 53 53 4c 26 61 6d 70 3b 77 72 65 70 6c 79 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 69 67 6e Data Ascii: 3d9<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://l1ve.dacreativeagency.com/login.srf?wa=wsignin1.0&rpsnv=22&checkda=1&ct=1711644793&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsign
2024-03-28 16:53:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49808	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:14 UTC	1561	OUT	GET /login.srf?wa=wsignin1.0&rpsnv=22&checkda=1&ct=1711644793&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.dacreativeagency.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.dacreativeagency.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253d59AC3F6F7D3AAF66%2526opidt%253d1711644790%2526uaid%253d8da31f269ebd451fbb6ab4c102827f89%2526contextid%253dE4EA2673871E61DC%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26username%3Dkenrod%2540me.com%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D8da31f269ebd451fbb6ab4c102827f89%26suc%3Dhttps%253a%252f%252fbf2b00c1-12461a6c.dacreativeagency.com.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=8da31f269ebd451fbb6ab4c102827f89 HTTP/1.1 Host: l1ve.dacreativeagency.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:17 UTC	1039	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 16:53:17 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-store, no-cache pragma: no-cache location: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C533_BL2 x-ms-request-id: 1b7c241a-14f1-4389-ab99-d2332cbe7008 ppserver: PPV: 30 H: BL02EPF0001D8B8 V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49812	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:17 UTC	1265	OUT	GET /signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:22 UTC	793	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46318 Connection: close cache-control: no-cache, no-store pragma: no-cache vary: Accept-Encoding p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ua-compatible: IE=edge, chrome=1 x-ms-amserver: wusXXXX00TI (2.0.3277.0) x-ms-amserver-tm: 921ms x-ms-request-id: ec05120f-f831-47e1-ba52-754daf081826 referrer-policy: strict-origin-when-cross-origin amserver: wusXXXXig0000TI x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: EC05120FF83147E1BA52754DAF081826 Ref B: FRAEDGE2010 Ref C: 2024-03-28T16:53:18Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:22 UTC	6427	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc f9 e5 79 e6 3f 08 ed 0c 6d 0d b2 b1 b9 05 ec 08 6f c2 a5 43 37 b7 0e d0 49 9a 30 1c 59 2a db 0a b2 e4 e8 82 71 c0 ff fd ac b5 aa 4a 2a c9 22 a1 7b 66 ce 7e 3f ec cc 34 96 4a 75 bf ac fb 5a f5 b7 85 bf c1 ff de 2c ee 9f ed 5d 7e 3a 3f d0 86 c9 c8 df 81 04 fc d5 7c 3b 18 58 3a 0b 74 ed 61 e4 b7 f3 37 c7 b7 e3 d8 d2 47 b7 a9 af 6b ae 17 59 ba 9f 44 ba 16 27 53 9f 59 ba 0e e5 35 ed cd 90 d9 2e 3d c1 b3 ef 05 77 5a c4 7c 4b 1f 47 cc 09 83 80 39 89 ae 0d 23 d6 b7 f4 61 92 8c e3 f6 ca 8a ed f6 fb cd d5 fe 56 bd b5 ba be d9 b2 37 9d 86 6b 3b 11 b3 13 ef 9e d9 03 16 38 d3 86 13 8e a0 f1 28 8c e3 30 f2 06 5e 80 1d fd 0f 56 3d 62 89 ad 61 1d 75 f6 35 f5 ee 2d fd a1 ee 06 71 1d da e9 b3 c4 19 d6 a1 b5 24 0a 61 Data Ascii: k[H(y?moC7I0YqJ"{f~?4JuZ,]~:?\|;X:ta7GkYD'SY5.=wZ\|KG9#aV7k;8(0^V=bau5-q$a
2024-03-28 16:53:22 UTC	16384	IN	Data Raw: 9d 90 80 fe 0e c4 39 d9 8f c9 52 07 52 34 aa 8c 63 2e bb 61 f6 04 14 40 df 26 5d 78 85 02 7a 7c d3 6b 64 d6 97 01 39 87 2e 5b 90 74 1d dc 2c eb 1d 9d ce bd 6c 08 85 3e e1 35 c9 e9 6e 08 12 03 09 2c eb f8 3a 5f c7 57 a8 a3 e1 b9 54 8d 5a c5 d7 ac 0a c1 87 95 11 a7 b0 5d 94 70 bd 9c 0e bc 54 88 66 43 92 d7 22 65 7f 22 4f 5d 68 50 b5 97 39 0c a9 e2 4d 24 cf 61 73 ab 69 0f f5 df 19 ab e2 e5 7c 8a d8 31 cf 1f 87 b4 bc 85 3d a3 93 66 6b 93 1a b3 9c b2 15 69 63 78 46 c0 ad 5a 38 c9 2f 4e 25 52 bc 97 a8 68 44 3f 23 14 c1 4d 2d 46 6a a6 c5 e9 d3 d3 a2 22 ef 50 f9 56 a0 56 67 05 1e f1 d6 21 56 c5 9a 9a 3d 45 7a 37 27 4f 11 82 42 1c de 50 aa 4d 46 16 ac 54 a6 37 41 e1 d3 94 13 b9 3d 5a 9f 90 34 0f 45 69 00 96 27 ca f8 00 85 45 13 fc f3 ca 6a 35 cd 0b ab 48 2a b3 89 Data Ascii: 9RR4c.a@&]xz\|kd9.[t,l>5n,:_WTZ]pTfC"e"O]hP9M$asi\|1=fkicxFZ8/N%RhD?#M-Fj"PVVg!V=Ez7'OBPMFT7A=Z4Ei'Ej5H*
2024-03-28 16:53:22 UTC	16384	IN	Data Raw: 0d 59 b7 1b f6 de b3 af 72 68 e3 e4 0c 5d 48 51 b7 85 18 13 89 c0 40 50 c7 ad 22 95 77 ce d8 1d 4f 84 a9 bb 22 5a 05 5d 18 57 9b cd cd f5 4d 99 fa ce 1b 1f e4 ee 7b 79 9e 56 73 1d 9a e8 c7 31 b7 46 38 24 be 76 d7 15 3b 45 cc ae 62 6f e1 f6 c7 45 f4 da 6b 3a af 61 77 ff c8 3a a1 1b 73 8f c1 db 97 08 de b9 c9 3d 8b 8e 5c 6b 6d 8d 35 5b db ab ad fa ba bb b9 5e 5f ef 6f 39 75 bb b9 b1 51 df e8 b9 76 bf ef 6e b0 b5 35 77 89 0f c7 ba b8 2a 08 39 45 bc 77 fe 9b c1 fa 35 84 ba 78 58 f8 59 85 7c 64 b5 c7 07 45 8f 94 55 e7 71 55 a5 63 33 ea f6 88 ee cb 6c 55 72 93 91 bd c2 07 60 fa ec 20 60 ee f9 c4 2d 64 c2 45 3c ea bf e5 df 72 52 9c 16 77 f7 1e d6 15 15 a2 73 25 b2 2f 78 2c bc 00 37 26 12 f9 e8 d9 95 f3 71 99 6d 66 5e f8 e7 ca 0c 68 cc 19 b8 67 49 a1 fb e7 51 18 Data Ascii: Yrh]HQ@P"wO"Z]WM{yVs1F8$v;EboEk:aw:s=\km5[^_o9uQvn5w*9Ew5xXY\|dEUqUc3lUr` `-dE<rRws%/x,7&qmf^hgIQ
2024-03-28 16:53:22 UTC	7123	IN	Data Raw: f9 89 3c 93 78 fa d9 7f aa a7 71 2b c8 0c 88 0e e1 a3 5e 0e fb 6e c4 90 5e a8 f5 08 38 13 8a cb 37 44 25 a9 d3 11 1c 90 8f da 05 fe 82 d8 34 98 c6 6b 1b ef 69 06 8f c2 19 8b ed 1f 1b 7d 09 d8 ff 8a b3 b7 32 67 54 cf de d0 3e 20 d3 0a 90 02 95 e4 43 40 bf a8 f8 c8 68 51 a9 1b aa 44 12 15 35 8b 7a 86 14 68 d2 fc c1 9e 70 60 a1 1d 8a e0 67 c1 dc 87 c9 89 56 01 76 10 20 52 89 b8 67 0c dc d2 4b 24 ff a7 33 a0 94 cd 12 fd b9 62 49 51 4e cc 40 d8 3a ed e8 b0 53 c9 5a 19 d6 1a af 12 a0 98 fb 14 4d 13 63 31 af 40 02 78 8e 52 f9 79 35 bb f0 4c 9d e2 c9 4b e9 99 ca e8 1d e9 52 d4 9e a5 d7 f4 51 bc c4 d0 f5 93 dd 09 95 8d c0 0e d8 66 26 34 36 9d 67 b6 44 07 84 0a 6c 58 01 54 28 08 2c 18 4d 13 e0 fd 6f 5c 53 77 4e fa 1c b1 2b dc e4 68 30 7a 9e d5 ec c0 5e 0d 98 96 f5 Data Ascii: <xq+^n^87D%4ki}2gT> C@hQD5zhp`gVv RgK$3bIQN@:SZMc1@xRy5LKRQf&46gDlXT(,Mo\SwN+h0z^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49813	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:20 UTC	757	OUT	GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1 Host: onlines.dacreativeagency.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://onlines.dacreativeagency.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: ExosO/J1zPmz09dDtFTk1A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-28 16:53:22 UTC	745	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:53:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: a06995b1-12bd-4910-bf66-e4eb27eb5e02 x-ms-ests-server: 2.1.17573.7 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49814	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:22 UTC	651	OUT	GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:27 UTC	726	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:26 GMT Content-Type: text/css Content-Length: 17755 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 402370 cache-control: public, max-age=604800 etag: 0x8DC4AF4EB279FCD last-modified: Sat, 23 Mar 2024 04:51:35 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d937772c-c01e-007b-1487-7d8d31000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:27 UTC	15658	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 69 73 db 46 d2 f0 77 ff 0a ac 5c ae 58 59 12 e1 2d 4a aa a4 d6 87 12 eb 59 1f 2a 4b d9 ec 56 de 94 0b 22 21 11 6b 10 60 01 a0 65 85 0f ff fb db 73 5f 3d 00 28 c9 89 9f aa 44 b1 44 ce f4 f4 5c 3d 3d 3d 33 7d 7c f7 ed df 82 17 f9 ea b6 48 ae 17 55 f0 f4 c5 7e f0 26 99 15 79 99 5f 55 90 5e ac f2 22 aa 92 3c 0b 83 67 69 1a 50 a0 32 28 e2 32 2e 3e c5 f3 30 f8 f6 bb ef be fd db a3 6e fb ff 82 f3 8b 67 ef 2f 82 77 3f 06 17 af 4e df bf 0c ce e0 db 7f 82 b7 ef 2e 4e 5f 9c 04 ad b1 3c 7a 74 b1 48 ca e0 2a 49 e3 00 fe 5e 46 65 3c 0f f2 2c c8 8b 20 c9 66 bc d5 71 19 2c e1 77 91 44 69 70 55 e4 cb a0 5a c4 c1 aa c8 ff 1b cf a0 0f 69 52 56 50 e8 32 4e f3 9b e0 29 a0 2b e6 c1 59 54 54 b7 c1 e9 d9 7e 18 5c 00 6c 0e dd 4d 32 28 3d 93 e3 Data Ascii: }isFw\XY-JYKV"!k`es_=(DD\===3}\|HU~&y_U^"<giP2(2.>0ng/w?N.N_<ztHI^Fe<, fq,wDipUZiRVP2N)+YTT~\lM2(=
2024-03-28 16:53:27 UTC	2097	IN	Data Raw: 16 fc 94 57 8b 64 46 7a 55 92 a9 ba 8e d3 3c 38 81 cd a4 8c 8c b2 af 12 d2 d3 5b 33 f1 6d 7c 13 5c 44 49 f0 7a 6d d6 7e b6 88 ae cb 33 13 96 c2 59 8d 4c 82 e7 11 f0 26 92 98 67 d7 c0 58 a3 4c a5 fc 2b 78 0e 29 e4 d3 6d 94 c1 3c 06 24 26 22 7c 7d 11 2d 61 fc a3 e0 0d 8c c0 9e 4e 35 4c f0 fb 7d d1 9d 65 fb 1d 2c bd ba d9 df 7c 25 b3 ff d7 8c df 7d c6 c9 cb 22 dd 12 dd b3 b3 be fe f5 ef 62 fd 87 03 e7 71 93 27 69 0f a0 23 4c a9 45 67 39 43 60 39 86 fe 58 78 40 71 d8 86 d9 e1 70 32 d4 6f 6a 69 ab 44 e2 5f 2c ee 2f 82 6f 45 f0 75 77 3d 3d 8d 70 c2 c3 21 23 43 93 34 29 79 6f 95 3a 11 3b 5f 68 c5 a6 0c 20 82 b3 47 b5 b1 d1 eb 75 73 18 a6 81 c6 4c c4 d0 d7 34 0a 44 7f d7 2a 1b 31 68 a6 df 15 95 31 d2 a4 79 91 af e0 a8 47 aa 27 17 df e1 32 26 52 20 59 fa 67 45 4c Data Ascii: WdFzU<8[3m\|\DIzm~3YL&gXL+x)m<$&"\|}-aN5L}e,\|%}"bq'i#LEg9C`9Xx@qp2ojiD_,/oEuw==p!#C4)yo:;_h GusL4D*1h1yG'2&R YgEL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49815	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:23 UTC	631	OUT	GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:26 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:26 GMT Content-Type: application/javascript Content-Length: 5564 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393127 cache-control: public, max-age=604800 etag: 0x8DC4AF4FCCFF9D7 last-modified: Sat, 23 Mar 2024 04:52:05 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1208410a-301e-0050-399d-7d3915000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:26 UTC	5564	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 3c 6b 8f db 38 92 df fd 2b da c2 c2 90 10 c5 70 67 80 fb 60 b5 62 64 33 b3 97 e0 66 a6 f7 36 99 bd 3b 18 46 a0 b6 e9 b6 26 32 e9 a5 e8 ee 34 da fa ef 57 c5 87 44 52 92 fb e5 bb 64 06 88 5b 14 45 56 15 eb cd 22 d7 7b ba 14 39 a3 67 5f b2 d5 ea 97 1b 42 c5 af 79 29 08 25 3c 24 b1 88 69 74 4f 46 23 32 f6 5f ce da 4d 21 f6 9e 62 ef b3 9c 96 22 a3 4b c2 d6 67 1f 3e ff f6 eb 2f 05 d9 42 47 39 8e 10 d9 72 23 bf f3 1e c3 80 d1 e0 15 8e 51 ad 6b 98 ae 89 b8 e4 9f 88 f8 3b 67 bb f2 92 ea 81 4a 05 5a cc a3 fb 7c 0d df 5d fd 49 96 22 48 53 71 b7 c3 29 45 74 ff 65 cd f8 2f 30 f2 7f 90 3b 00 cb 8c 17 02 36 f0 22 bc c9 f8 59 99 4e e2 3c 25 63 02 43 96 49 79 91 8f 0b 42 af c5 26 29 5f bd 8a ee b1 07 4b f3 79 b9 48 f8 8c cd f9 62 4e 17 a9 Data Ascii: <k8+pg`bd3f6;F&24WDRd[EV"{9g_By)%<$itOF#2_M!b"Kg>/BG9r#Qk;gJZ\|]I"HSq)Ete/0;6"YN<%cCIyB&)_KyHbN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49816	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:23 UTC	635	OUT	GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:26 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:26 GMT Content-Type: application/javascript Content-Length: 28606 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393335 cache-control: public, max-age=604800 etag: 0x8DC4AF4FCEB5242 last-modified: Sat, 23 Mar 2024 04:52:05 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4b7915af-601e-0061-7f9c-7d3306000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:26 UTC	13694	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd f9 57 db 48 d6 37 fe 7b ce c9 ff 20 eb cd 21 52 53 08 e8 ee 67 9e 19 19 c5 5f 02 24 a1 9b 40 06 48 67 7a 08 93 a3 cd 4b 2c 2f 58 36 4b b0 ff f7 ef fd dc aa 92 4a b2 48 f7 3c cb 7b de 4c 0f 96 4a b5 2f b7 ee 7e b7 7f 68 6d fd f9 7f d6 c5 e5 fe f9 a5 75 f6 c6 ba 7c 77 7c 7e 68 7d a0 b7 df ad d3 b3 cb e3 83 23 eb 4f d7 f2 fc d9 f3 67 97 fd 41 6e 75 07 59 6a d1 6f 14 e6 69 62 4d c6 d6 64 66 0d c6 f1 64 36 9d cc c2 79 9a 5b 23 fa 3b 1b 84 99 d5 9d 4d 46 d6 bc 9f 5a d3 d9 e4 6b 1a cf 73 2b 1b e4 73 2a 14 a5 d9 e4 ce 72 a8 ba 59 62 7d 08 67 f3 07 eb f8 83 eb 59 97 94 77 32 1b f4 06 63 2a 1d 4f a6 0f f4 dc 9f 5b e3 c9 7c 10 a7 56 38 4e b8 b6 8c 5e c6 79 6a 2d c6 49 3a b3 ee fa 83 b8 6f bd 1f c4 b3 49 3e e9 ce ad 59 1a a7 83 5b Data Ascii: WH7{ !RSg_$@HgzK,/X6KJH<{LJ/~hmu\|w\|~h}#OgAnuYjoibMdfd6y[#;MFZks+srYb}gYw2cO[\|V8N^yj-I:oI>Y[
2024-03-28 16:53:26 UTC	14912	IN	Data Raw: ef 42 26 0b 22 c9 1b ad 08 5a 3a 00 5a fe 30 8e 69 77 8e 27 8b dc 6d 0f 51 c3 23 2b 8c 70 c8 3d 9f 20 55 ec c3 6b 88 d4 60 43 0b ed d1 72 19 77 1a 0d 68 5c bf d9 2a ad 39 f3 4a ec c0 38 60 14 54 6c d3 54 ac ee d4 b1 99 1f 39 ee 0e 7a 60 f7 c0 e8 c1 c4 87 e3 0e e5 40 28 95 82 65 69 8b ab 50 c4 d7 15 05 81 48 79 af f3 23 c9 92 90 44 43 85 ad c1 98 03 1b b2 4a 87 55 1e 51 7a 54 2d ec 95 f4 cd 20 49 a4 21 2d 84 8a f2 8b cd 3e d4 b1 ea 87 ca e5 fc 8d 4c 18 2b 6b 90 1b 65 9f 35 14 89 b6 47 36 7b 36 ee f4 b8 4b 92 69 08 02 97 12 42 44 c2 d2 1d 22 9a 12 40 84 c0 cd 18 9c 82 d6 d0 43 58 1a 48 a5 4f b8 7f 47 f7 71 2a b5 e9 ea 04 b1 9e 11 4b 0d 44 5a 54 72 34 b5 07 c9 d4 e2 98 35 83 f1 ed 64 c8 e8 71 5f 1a 5a c2 d5 b2 90 96 97 0f 0a b8 e3 b3 2a 61 6c 94 ec 01 38 ae Data Ascii: B&"Z:Z0iw'mQ#+p= Uk`Crwh\9J8`TlT9z`@(eiPHy#DCJUQzT- I!->L+ke5G6{6KiBD"@CXHOGqKDZTr45dq_Z*al8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49817	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:23 UTC	658	OUT	GET /lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:26 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:26 GMT Content-Type: application/javascript Content-Length: 7225 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 306822 cache-control: public, max-age=604800 etag: 0x8DC4BBD8832A176 last-modified: Sun, 24 Mar 2024 04:47:38 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b8225326-101e-00be-0e66-7e8e7f000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:26 UTC	7225	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 5c db 72 e3 48 72 7d f7 57 60 69 47 a8 c7 d1 a3 e6 fd d2 db d2 5a a2 24 8a 2d 92 e2 88 94 fa b2 bb 31 51 04 4a 24 46 20 8a 83 8b 38 ec 8e 89 f0 8b 3f c2 cf 7e 70 ec 83 df fc 07 fd 27 fe 12 67 16 00 22 13 12 a0 c1 c4 c6 be 74 53 40 56 55 d6 c9 db c9 02 c8 3f dc 87 ae 19 d8 ca 7d f5 dd 57 4f 2e 6d 3f 90 de 44 ac a5 bf 11 a6 7c 55 f9 97 be 72 ef ed 65 e5 bb d7 f1 a7 43 7f 25 3c 69 cd 02 cf 76 97 fe d1 d7 8a f4 3c e5 f9 95 b7 5f 2b 9e fc 39 b4 e1 5e e5 6d 65 be b2 7d c3 76 ef 95 b7 16 38 b9 01 7f 26 b7 0f 2b af 2b 72 2d 6c e7 26 95 3f 71 0d 7d c9 10 96 e5 49 df a7 f2 20 be 59 29 57 52 71 43 5f 31 dc 70 bd 90 5e 56 58 f8 fe 56 79 16 97 8f 2f 66 64 6d f7 51 38 b6 75 8e 6b 5f 68 65 41 fa dc 05 0c 8c 60 25 b3 3a b9 fa 62 b4 29 c3 Data Ascii: \rHr}W`iGZ$-1QJ$F 8?~p'g"tS@VU?}WO.m?D\|UreC%<iv<_+9^me}v8&++r-l&?q}I Y)WRqC_1p^VXVy/fdmQ8uk_heA`%:b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49819	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:23 UTC	776	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:26 UTC	736	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:26 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393343 cache-control: public, max-age=604800 etag: 0x8DC4AF4F67146D8 last-modified: Sat, 23 Mar 2024 04:51:54 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0a91c357-801e-00c7-619c-7d0f6c000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:26 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-03-28 16:53:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49818	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:23 UTC	645	OUT	GET /lightweightsignuppackage_I2u0h5_OVsvo48cPwiR07Q2.js?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:27 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:27 GMT Content-Type: application/javascript Content-Length: 53103 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 314930 cache-control: public, max-age=604800 etag: 0x8DC4BBD8348BDB8 last-modified: Sun, 24 Mar 2024 04:47:30 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bcd58611-401e-0063-5a53-7e6502000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:27 UTC	15639	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d 79 7f db b6 b2 e8 ff fe 14 32 eb a3 92 15 a4 48 f2 92 44 0a ad eb 25 69 dc 6c 6e 9c 34 6d 5d 35 8f 16 29 89 35 45 aa 24 e5 a5 96 ee 67 7f 33 03 80 04 37 d9 c9 69 ef b9 ef f7 7b 3d 27 16 09 80 58 06 83 d9 30 18 8c 17 fe 28 76 03 bf f6 dc 1f 85 b7 f3 58 77 58 cc 7c 66 19 77 57 56 58 0b cc f3 61 3f ba 76 e3 d1 54 f7 5b 71 f0 3a b8 76 c2 23 2b 72 74 c3 b8 1b c1 af 36 9a 4e a2 3f 23 4b eb b9 63 dd 5f 78 9e 69 3a cb 25 7f 88 8d bb d0 89 17 a1 5f c3 f7 55 60 9e 5a a3 4b 6b e2 9c 1d 1c 5b b1 85 0d 19 fd 8b d0 b1 2e fb b2 a6 f9 b5 5d 56 91 55 51 d1 5b e7 fa c0 b7 df 79 f6 e9 b5 0d d5 59 99 ea 72 75 55 54 01 5f be f3 bd 5b dd c9 7e eb fa 0f f9 d6 f5 cb be 0d 83 60 ac 7e 5d af af 07 c7 eb 60 e2 fa 27 7e 4c 40 c1 ac 4d d3 19 38 bd Data Ascii: }y2HD%iln4m]5)5E$g37i{='X0(vXwX\|fwWVXa?vT[q:v#+rt6N?#Kc_xi:%_U`ZKk[.]VUQ[yYruUT_[~`~]`'~L@M8
2024-03-28 16:53:27 UTC	12535	IN	Data Raw: de cd 14 7b 8e 96 ea 28 cd ef 3e 79 ac ad d6 6a 43 11 e9 c1 29 4c 51 e7 9d cb 67 50 9f e7 02 9e a8 41 0b 4a 46 9e 70 96 84 25 ea cd 36 87 24 29 d5 0a 1c c9 cb 25 81 22 ee 4e d9 09 0c 7b 57 7f af 1a 96 95 b2 72 2a 98 74 78 eb 6f 7e 79 52 36 58 6e 12 1a 58 eb bb fc d8 cd 6c be 88 d1 b1 16 04 ba 34 90 1c ca 44 06 ee 0f dc 53 a4 95 de c4 78 84 17 31 d2 d1 a2 2f fe 2a 17 49 57 9e ec 54 23 d1 d6 00 4d 26 e8 7f 0d 72 1c 17 7b 41 fc 0b 27 17 7a 9b c1 ff 0c 8c b4 80 56 f0 6f da f4 9f fa 4a cf b0 8a a9 74 77 77 97 89 7f e9 37 63 fa 4f 7d e5 df 84 fc 9b ed 2e a3 ff a7 1f 74 db f8 3f 5e 28 e2 85 76 76 d9 6e 9b ed ee 28 85 ec ed ee f6 1e 2f e4 a9 ad b7 59 77 fb 69 a6 75 cb e1 2d 26 9a 2e 32 83 43 0f 03 cc 24 80 42 49 66 b9 0c 97 cb c8 18 94 e5 f7 28 f1 13 5e f1 9a f9 Data Ascii: {(>yjC)LQgPAJFp%6$)%"N{Wrtxo~yR6XnXl4DSx1/IWT#M&r{A'zVoJtww7cO}.t?^(vvn(/Ywiu-&.2C$BIf(^
2024-03-28 16:53:27 UTC	16384	IN	Data Raw: be f8 d1 67 48 5a ff 9d 4f 3e 93 c5 63 9b 37 7e 4a f2 88 b5 39 89 9b 38 ce f3 22 ce ea 5a bc c6 df 6a 18 ef 6b 92 9c d6 65 bc cd 43 b8 9e b7 7e 5e ee f8 4f e3 63 1b a2 34 08 c3 1a 69 6c 8e e0 1c 9d 6d a8 fc cc bb 98 6d 3e 65 6f 98 87 b5 b6 1e cf 88 f8 8d 19 e6 3f 71 8e ff b0 29 5e 9b a3 ae e6 91 9b 9c 29 4d f9 c8 ca a9 5f c1 55 72 40 ec cc 63 43 2e a5 6e 56 bf 0c 97 b9 ce a1 fc b9 3c 63 43 ce ca 9c ff 3f 68 76 57 33 62 36 95 c3 73 ce f0 ea 73 4c a9 9c c4 55 f4 ea 93 0c 8f 88 8a 13 21 34 af b5 f5 e9 c4 f5 cd cd 74 90 24 94 ef c1 35 5e 62 55 d5 da 83 e7 6b b1 b0 95 bb 92 f7 51 e4 ba 35 1c b7 e1 01 66 45 96 35 7e e4 85 f9 e2 ff eb 6f 7e 12 fa af 26 fe 55 30 e1 8c 73 71 e3 20 f7 bb 72 df af 5a f8 af c3 e9 58 e0 32 aa 5e 61 46 f8 ad a2 8d 85 4b 93 61 77 d3 4f Data Ascii: gHZO>c7~J98"ZjkeC~^Oc4ilmm>eo?q)^)M_Ur@cC.nV<cC?hvW3b6ssLU!4t$5^bUkQ5fE5~o~&U0sq rZX2^aFKawO
2024-03-28 16:53:27 UTC	8545	IN	Data Raw: b5 0e de ff ec d9 e8 92 77 11 3f 5f dd 44 cb 44 88 80 10 e3 9f 70 84 f2 76 30 ee a4 3a 07 99 fd ac d3 d2 bf 70 81 4d 56 2f 76 ad 0b ab 0c b1 95 b4 09 83 53 0c c1 f8 b4 f9 93 13 38 02 42 f1 78 8c 2e 16 83 83 f4 1d 3a 55 ac 83 db 57 7c 33 d8 11 7b ea 3f 84 d3 f9 14 16 fb 00 07 11 59 6e 6c d1 9d cd 0c 92 2b ab 50 54 af 55 95 2e c6 1a 8b 47 09 3e 2f f3 38 60 32 5d 96 2e b7 9d df 24 70 cc 4f 82 51 63 bc 7c 5b c4 49 42 bd f2 52 c7 11 a9 5f 1f 91 28 a3 19 76 f9 fc 5d d5 06 0e 63 20 e0 9c d5 d7 09 af 49 df 81 7f 55 c1 2b 9e e9 b0 66 18 42 ad e7 93 89 3d 30 61 b9 13 0b ec e2 b3 37 67 70 d2 7c dc 3d 1d a0 2e 69 34 e7 d6 60 de 1b 3f bb e9 90 ea c0 8d 5e fd c4 3d ea fd fc 0c f1 32 72 bf 42 bf 15 62 20 f7 81 da 22 b9 30 b4 cf fc 64 73 fd f6 72 48 77 70 71 fb 13 f9 5f Data Ascii: w?_DDpv0:pMV/vS8Bx.:UW\|3{?Ynl+PTU.G>/8`2].$pOQc\|[IBR_(v]c IU+fB=0a7gp\|=.i4`?^=2rBb "0dsrHwpq_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49820	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:27 UTC	530	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:28 UTC	736	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:28 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393345 cache-control: public, max-age=604800 etag: 0x8DC4AF4F67146D8 last-modified: Sat, 23 Mar 2024 04:51:54 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0a91c357-801e-00c7-619c-7d0f6c000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:28 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-03-28 16:53:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49821	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:28 UTC	639	OUT	GET /jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:30 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:30 GMT Content-Type: application/javascript Content-Length: 33956 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 314840 cache-control: public, max-age=604800 etag: 0x8DC4BBD83328F94 last-modified: Sun, 24 Mar 2024 04:47:30 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a0cce56b-b01e-0064-1153-7eb40c000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:30 UTC	13694	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd fb 76 db 46 b6 37 f8 bf 9e 42 44 fb 53 00 13 a4 44 3b c9 e9 06 0d f1 73 7c e9 24 1d 27 4e ec 74 92 a6 68 2f 98 04 25 c4 14 c0 00 a0 2c 45 64 3f cb bc c7 fc 31 6b cd 0b cd 2b cc fe ed 5d 55 28 5c 28 fb 9c f3 cd 9a 99 74 5b c4 a5 50 d7 5d bb f6 7d 1f df ef 1d 1c de 3f fc fd c7 4d 9c df 1c 7e 1b 5d 45 af e6 79 b2 2e 0f bf 4b de e5 11 3d ba 1a 0d 47 27 c3 07 28 74 51 96 eb e0 f8 f8 e1 e7 d1 c3 d1 5f ff e3 c1 60 f4 e0 f3 2f 47 d1 97 f3 e1 22 9a e7 71 54 26 57 71 74 1e a7 f3 9b e1 3c bb 3c a6 2f f0 d1 37 e9 7c b5 59 c4 c5 e1 ab e4 cf 3f 57 f1 f0 f7 c2 ae ea e1 c9 62 f1 f9 97 9f 7f 5a 55 4f b2 f5 4d 9e 9c 5f 94 87 0f 4e 4e be f0 e9 ef e8 a1 ee f9 f3 6c 93 2e e8 bb 2c f5 d1 e4 f0 30 4a 17 87 59 79 11 e7 87 f3 2c 2d f3 e4 dd a6 Data Ascii: vF7BDSD;s\|$'Nth/%,Ed?1k+]U(\(t[P]}?M~]Ey.K=G'(tQ_`/G"qT&Wqt<</7\|Y?WbZUOM_NNl.,0JYy,-
2024-03-28 16:53:30 UTC	16384	IN	Data Raw: 29 0a b6 be 55 5f 65 43 74 32 2e 39 26 14 12 2e c7 c6 e1 c1 78 4e 23 e0 2d 31 fa 77 54 30 fa 68 05 ab d6 80 6a c4 44 68 3a 3c 1e 0c 40 3f 8d 4d 45 79 bd a2 f3 4f ae a8 df cf 1f 95 76 3d 56 12 6c 8f cd 29 34 dc 13 b3 13 5a bb e0 0f 8e 20 f3 fa 30 49 6f 9d 3c 5a 24 19 e4 49 0a 1b 21 41 32 df 11 d3 1f cb d5 9a b8 d1 0f 59 be 90 bb e4 32 3a e7 17 3b f8 64 6b 0a ef f5 2c dc b8 af 45 22 29 15 17 9b 77 97 49 29 df e4 71 11 97 5d df ac f8 1b 2b 2c b2 b6 c5 28 aa fe d6 c8 39 e6 dc 97 fe ef 4a 7f 45 7d 0c db c4 a7 31 55 e0 c0 58 bf 5a 9e bd 3d c5 fe 88 14 60 2d 06 e5 95 7b 42 ca 24 50 16 5e b9 25 e7 88 62 5a 33 d7 9e 79 41 a2 af 76 54 2b 35 f7 8e 58 ec bc f2 d1 cb 76 be 2d de 0d 5f 6a 7f 76 e2 6b 95 70 57 a9 42 d9 1a e5 a5 df 16 11 87 3f fa df b9 9e 5f 57 9d 75 9b Data Ascii: )U_eCt2.9&.xN#-1wT0hjDh:<@?MEyOv=Vl)4Z 0Io<Z$I!A2Y2:;dk,E")wI)q]+,(9JE}1UXZ=`-{B$P^%bZ3yAvT+5Xv-_jvkpWB?_Wu
2024-03-28 16:53:30 UTC	3878	IN	Data Raw: bc 1e 9c 6c ab 70 74 18 9f 98 20 26 be 0a 5e 96 03 a7 6f 58 af c7 53 91 0d 58 09 bb 03 b0 4b dc 7d 60 e9 13 f5 2d 92 c7 de 88 16 79 ab 57 a7 f7 98 09 93 b8 b7 6d 39 3a e0 e8 52 e0 e0 db 66 02 f6 54 86 dc e0 95 29 28 b0 6b de 33 e2 54 11 bb 95 95 b4 53 c4 06 89 37 be cd 3c 53 f8 e6 99 d2 58 66 18 ae 5e 67 49 6e 9d 1f 3d 81 d4 d7 d8 f5 73 54 31 77 1a 75 3c 68 29 dd b7 94 03 5c a7 af fc 66 e4 ee 74 75 73 f3 c6 5e 84 9e 1d fd 99 f5 e0 7a 67 78 5a 83 e3 a2 47 91 87 6b eb 7d b0 55 57 43 1b c1 e0 b7 91 59 16 2f 19 77 e4 0a 20 eb 59 67 a7 d7 bc 0b 62 73 c9 f4 95 a8 79 cf bd cc ce ca fe 97 41 8a f3 5b 75 59 25 7e 64 fe c1 7e e5 01 83 f7 44 8c 5d b0 e3 a6 74 6c 8e a3 ea 36 ce 09 12 ec 7c ed b1 82 da 88 9e 42 56 71 b2 37 41 92 46 2e 3d 11 23 0e 3b 39 18 83 4e e7 1e Data Ascii: lpt &^oXSXK}`-yWm9:RfT)(k3TS7<SXf^gIn=sT1wu<h)\ftus^zgxZGk}UWCY/w YgbsyA[uY%~d~D]tl6\|BVq7AF.=#;9N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49823	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:30 UTC	639	OUT	GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:32 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:32 GMT Content-Type: application/javascript Content-Length: 3505 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393057 cache-control: public, max-age=604800 etag: 0x8DC4AF4EB299963 last-modified: Sat, 23 Mar 2024 04:51:35 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f15b0b44-901e-00ce-599d-7d7c7f000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:32 UTC	3505	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 5b 73 db 36 16 7e cf af a0 51 8f 4c 8e 60 46 49 db dd ae 18 44 e3 da 71 e2 dc 63 2b cd 83 e3 e9 d0 24 24 31 a6 49 96 04 2d 2b 92 fe fb 7e 07 e0 4d 96 d2 d9 9d dd 4e 1d 13 07 07 07 e7 7e 81 f7 26 65 12 a8 28 4d 6c 67 59 7f 5a d2 96 9d 95 a2 55 2e 55 99 63 a7 d7 93 6e a1 7c 25 85 88 7b 3d 5b ba 59 2e ef 9a 0f 37 91 f7 4a 48 fd cb e1 e6 b7 de a4 0f 8d 21 0c a2 c3 4f 84 00 31 fb a4 c1 de 37 80 fd 06 a3 be a8 e4 b2 3e aa c9 27 65 1c f3 c5 e1 21 30 d6 0d 93 3e 31 19 4d ec 2e 83 a5 b3 bc f3 73 2b 17 fb 5e 3e b2 f3 8a b9 9a 5a ee 0c 71 39 ae 95 cd 4d 20 db ef af 5b a2 13 28 65 ef af 5e 6f ef ba d7 5b f4 7a f7 cf e7 60 f0 5a cc a3 24 4c e7 6e 21 d5 38 ba 95 69 a9 ec 29 2f 1c a7 3d 77 47 cc 98 ab ed 44 ce ad 13 10 77 dc a9 c1 b7 Data Ascii: Y[s6~QL`FIDqc+$$1I-+~MN~&e(MlgYZU.Ucn\|%{=[Y.7JH!O17>'e!0>1M.s+^>Zq9M [(e^o[z`Z$Ln!8i)/=wGDw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49826	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:32 UTC	2831	OUT	POST /API/CheckAvailableSigninNames?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive Content-Length: 141 x-ms-apiVersion: 2 uaid: 8da31f269ebd451fbb6ab4c102827f89 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 canary: NAktgRC23/sf8WRvqvIDjvJoTsT4ckPP8In+W//IRHLMyszIhiuyBaRX3YsCuO81LRjDwhFk4b05JvBMCLcK6h2O/cH8j5n0BJMK+EC4jSWNEzHtUbqT9dtQw6jUkop6Zvbh11tNITCYoKtzK5/ABBr6WXf13yRUB654+AFMc+LcyYAh/TAfe8/n2tVkOmv/f361Qp0y4ge/luaHXU3VAbuAouzV2P9lJaqR4wem27Vf5DupX8yOPwoBrG1C+Vn3:2:3c Content-Type: application/json hpgid: 200225 Accept: application/json tcxt: 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:2:3 uiflvr: 1001 scid: 100118 x-ms-apiTransport: xhr sec-ch-ua-platform: "Windows" Origin: https://signup.dacreativeagency.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:32 UTC	141	OUT	Data Raw: 7b 22 73 69 67 6e 49 6e 4e 61 6d 65 22 3a 22 6b 65 6e 72 6f 64 40 6d 65 2e 63 6f 6d 22 2c 22 75 61 69 64 22 3a 22 38 64 61 33 31 66 32 36 39 65 62 64 34 35 31 66 62 62 36 61 62 34 63 31 30 32 38 32 37 66 38 39 22 2c 22 69 6e 63 6c 75 64 65 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 75 69 66 6c 76 72 22 3a 31 30 30 31 2c 22 73 63 69 64 22 3a 31 30 30 31 31 38 2c 22 68 70 67 69 64 22 3a 32 30 30 32 32 35 7d Data Ascii: {"signInName":"kenrod@me.com","uaid":"8da31f269ebd451fbb6ab4c102827f89","includeSuggestions":true,"uiflvr":1001,"scid":100118,"hpgid":200225}
2024-03-28 16:53:34 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:34 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-cache, no-store pragma: no-cache p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: eusXXXX00JI (2.0.3277.0) x-ms-amserver-tm: 390ms x-ms-request-id: 47784080-b256-40aa-acd6-1090ecbf4856 referrer-policy: strict-origin-when-cross-origin amserver: eusXXXXgn0000JI x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 47784080B25640AAACD61090ECBF4856 Ref B: FRAEDGE1107 Ref C: 2024-03-28T16:53:34Z access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:34 UTC	1079	IN	Data Raw: 34 33 30 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 4e 69 52 35 73 6e 7a 30 6d 69 47 72 54 30 37 78 6a 6e 79 66 46 5a 45 4c 4d 5a 6f 5a 79 65 76 62 42 42 38 69 55 63 6a 2b 44 64 5a 4e 44 37 62 65 56 58 36 63 37 4d 54 4b 6f 6d 36 4f 5c 2f 35 31 31 4b 49 48 66 6a 54 32 64 6a 78 72 34 6c 62 67 67 34 49 34 33 55 2b 49 61 47 35 48 4d 38 30 4a 31 69 61 77 75 51 7a 70 35 50 65 4e 38 4c 6f 41 78 54 50 70 6c 50 56 67 39 35 36 65 6a 34 41 33 38 54 74 78 48 2b 73 67 63 58 73 67 4d 69 66 76 56 75 5a 61 42 68 43 47 36 78 57 6c 6c 78 73 43 2b 6d 52 35 78 57 77 65 36 73 4c 45 35 74 65 46 43 54 44 68 57 4a 6b 2b 75 63 79 72 78 33 52 5a 42 6d 53 61 56 72 42 4a 59 64 55 2b 5c 2f 42 72 65 73 77 49 38 6e 51 39 39 72 4b 6b 37 64 68 66 4d 58 6b 6f 47 6e 37 5c 2f 2b 4e 30 Data Ascii: 430{"apiCanary":"NiR5snz0miGrT07xjnyfFZELMZoZyevbBB8iUcj+DdZND7beVX6c7MTKom6O\/511KIHfjT2djxr4lbgg4I43U+IaG5HM80J1iawuQzp5PeN8LoAxTPplPVg956ej4A38TtxH+sgcXsgMifvVuZaBhCG6xWllxsC+mR5xWwe6sLE5teFCTDhWJk+ucyrx3RZBmSaVrBJYdU+\/BreswI8nQ99rKk7dhfMXkoGn7\/+N0
2024-03-28 16:53:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49825	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:32 UTC	627	OUT	GET /watson_DOaS_v-h3FCKtNPQv8zSLw2.js?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:34 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:34 GMT Content-Type: application/javascript Content-Length: 4374 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 314844 cache-control: public, max-age=604800 etag: 0x8DC4BBD8EF1A571 last-modified: Sun, 24 Mar 2024 04:47:49 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5ff9059c-101e-0052-3a53-7e6f11000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:34 UTC	4374	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 5a f9 57 db 48 b6 fe 9d bf 42 d4 e4 18 b9 5d 28 66 7a 7a e6 3d 3b 15 0f 8b 93 90 66 4b 20 49 bf 63 7c 38 b2 54 b6 45 84 ca 68 31 b8 b1 ff f7 f7 dd 2a 6d 36 e4 4c a6 39 dd 20 d5 72 eb d6 5d bf 7b 95 ed 71 16 79 69 a0 22 bb f9 34 77 63 4b 8a 87 20 f2 d5 03 8f 85 74 5e 1d c9 51 36 e1 11 3d 1e aa 68 1c 4c 78 4a cf df e4 e8 9b 9b 26 2a 5a 7b 59 2e 9f 56 5c d1 d0 01 0f f4 6e c5 5d fa 7b 1e c9 a3 84 66 bb 81 f3 30 95 91 cd 6e 3f 65 32 5e 30 5e 3b bc 78 b4 92 9c 13 62 20 54 9e 4b 83 ce 2c 56 a9 f2 54 b8 5c 32 d6 8d 65 9a c5 91 15 3b 9e 8a 30 6f b3 d7 af 19 af 2d 9e aa 24 8d dc 3b b9 5c 6e 0c 36 57 e5 29 9e 2d 9b 4f c1 98 7e a7 f1 22 3f f0 75 39 6d 3b 4f 7b 7c d5 bc b6 5f e3 f6 b1 23 1f 25 36 d0 79 49 1a 67 5e aa 62 27 55 97 69 1c Data Ascii: ZWHB](fzz=;fK Ic\|8TEh1m6L9 r]{qyi"4wcK t^Q6=hLxJ&Z{Y.V\n]{f0n?e2^0^;xb TK,VT\2e;0o-$;\n6W)-O~"?u9m;O{\|_#%6yIg^b'Ui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49827	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:32 UTC	757	OUT	GET /websocket/hook/?l9ZzGO=MTI0NjFhNmNkNTdkNDE0MWJjMmI0NmE0ODJjNzUyY2Y= HTTP/1.1 Host: onlines.dacreativeagency.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://onlines.dacreativeagency.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: EZ2yPZkLw913txCJeJ3EwQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-03-28 16:53:34 UTC	745	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Mar 2024 16:53:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 3ce793bd-e9ea-458a-bf7f-8775bfd46402 x-ms-ests-server: 2.1.17573.7 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://55bace4f-12461a6c.dacreativeagency.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49828	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	2343	OUT	POST /handlers/Watson HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive Content-Length: 9128 Cache-Control: max-age=0 uaid: 8da31f269ebd451fbb6ab4c102827f89 x-ms-apiVersion: 3 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 canary: NAktgRC23/sf8WRvqvIDjvJoTsT4ckPP8In+W//IRHLMyszIhiuyBaRX3YsCuO81LRjDwhFk4b05JvBMCLcK6h2O/cH8j5n0BJMK+EC4jSWNEzHtUbqT9dtQw6jUkop6Zvbh11tNITCYoKtzK5/ABBr6WXf13yRUB654+AFMc+LcyYAh/TAfe8/n2tVkOmv/f361Qp0y4ge/luaHXU3VAbuAouzV2P9lJaqR4wem27Vf5DupX8yOPwoBrG1C+Vn3:2:3c Content-Type: application/json; charset=utf-8 hpgid: 200225 Accept: application/json tcxt: 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:2:3 x-ms-apiTransport: fetch sec-ch-ua-platform: "Windows" Origin: https://signup.dacreativeagency.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:35 UTC	9128	OUT	Data Raw: 7b 22 62 69 63 69 4e 6f 4c 44 50 61 72 73 65 22 3a 31 2c 22 65 63 22 3a 22 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 3a 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 3a 20 55 6e 61 62 6c 65 20 74 6f 20 70 72 6f 63 65 73 73 20 62 69 6e 64 69 6e 67 20 5c 22 74 65 78 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 27 5c 5c 75 32 30 30 45 2b 27 2b 20 6d 65 6d 62 65 72 4e 61 6d 65 50 68 6f 6e 65 43 6f 75 6e 74 72 79 4f 62 6a 28 29 2e 63 6f 64 65 20 7d 5c 22 5c 6e 4d 65 73 73 61 67 65 3a 20 6d 65 6d 62 65 72 4e 61 6d 65 50 68 6f 6e 65 43 6f 75 6e 74 72 79 4f 62 6a 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 2c 22 77 65 63 22 3a 22 33 34 22 2c 22 69 64 78 22 3a 31 2c 22 73 63 69 64 22 3a 31 30 30 31 31 38 2c 22 68 70 67 69 64 22 3a 32 30 30 32 32 Data Ascii: {"biciNoLDParse":1,"ec":"ReferenceError:ReferenceError: Unable to process binding \"text: function(){return '\\u200E+'+ memberNamePhoneCountryObj().code }\"\nMessage: memberNamePhoneCountryObj is not defined","wec":"34","idx":1,"scid":100118,"hpgid":20022
2024-03-28 16:53:36 UTC	694	IN	HTTP/1.1 204 No Content Server: nginx Date: Thu, 28 Mar 2024 16:53:36 GMT Content-Type: text/html; charset=utf-8 Connection: close cache-control: no-cache, no-store pragma: no-cache p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: wusXXXX000K (2.0.3277.0) x-ms-amserver-tm: 15ms x-ms-request-id: db239ae1-4dff-468b-a710-ac620778fa02 referrer-policy: strict-origin-when-cross-origin amserver: wusXXXXig00000K x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: DB239AE14DFF468BA710AC620778FA02 Ref B: FRAEDGE1218 Ref C: 2024-03-28T16:53:36Z access-control-allow-origin: * access-control-allow-headers: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49829	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	763	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:36 UTC	736	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 314930 cache-control: public, max-age=604800 etag: 0x8DC4BBD690FE50F last-modified: Sun, 24 Mar 2024 04:46:46 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 335e5777-301e-00ac-5453-7e6859000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:36 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-03-28 16:53:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49830	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	749	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:36 UTC	671	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:36 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393137 cache-control: public, max-age=604800 etag: 0x8DC4AF4F529488F last-modified: Sat, 23 Mar 2024 04:51:52 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cfd7dfd7-a01e-0005-319d-7ddd2c000000 x-ms-version: 2009-09-19
2024-03-28 16:53:36 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-03-28 16:53:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49835	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	703	OUT	GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:38 UTC	741	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:38 GMT Content-Type: application/javascript Content-Length: 105834 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393393 cache-control: public, max-age=604800 etag: 0x8DC4AF50248D253 last-modified: Sat, 23 Mar 2024 04:52:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 67b8ccd5-401e-00a3-5a9c-7de146000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:38 UTC	13693	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 69 73 db 48 b2 2e fc 7d 22 e6 3f 90 b8 0e 1d a0 55 a2 49 6d dd 06 5d c3 90 b5 d8 b2 ad c5 5a 6c 77 73 74 14 10 59 94 60 51 00 8d 45 8b 2d 9e df 7e f3 c9 2a 00 05 92 9e 99 7b ef 1b ef 4c 5b 44 ed 5b 56 56 66 56 66 d6 cb df 9a 7f ff 5b e3 b7 46 67 e7 b4 f1 fe b4 71 ba f3 a1 b1 1d 27 4a 34 d6 5a ab ad 4d 4e da 8e 27 4f 49 78 7d 93 35 dc 81 d7 38 08 07 49 9c c6 a3 ac 11 44 c3 c6 20 8e b2 24 bc ca b3 38 49 5b 8d ad f1 b8 c1 39 d3 46 a2 52 95 dc ab 61 8b ab 70 ab 52 fb 51 a6 92 28 18 37 8e a2 f1 93 87 d4 97 7f ff db 7d 90 34 22 99 dd 84 a9 50 72 94 47 83 2c 8c 23 37 f2 7e 3a 79 aa 1a 29 35 31 c8 9c 2e 72 1d 4b a7 48 77 44 2e 9d f8 ea 9b a2 34 2a e6 e4 d1 50 8d c2 48 0d 1d 91 4a 67 92 c4 59 9c 3d 4d 94 23 76 a5 73 13 a4 47 0f Data Ascii: isH.}"?UIm]ZlwstY`QE-~{L[D[VVfVf[Fgq'J4ZMN'OIx}58ID $8I[9FRapRQ(7}4"PrG,#7~:y)51.rKHwD.4PHJgY=M#vsG
2024-03-28 16:53:38 UTC	16384	IN	Data Raw: a6 e8 8c b1 36 fa d0 62 7b af ed 68 91 a7 33 28 c6 4f 67 e0 78 be bf f7 85 0e 3d 63 87 4c 64 8b 2e 08 4a c8 c1 fd 1b 55 39 21 3e d6 7e 53 b7 d6 b3 5d 26 5a 40 c6 95 e8 d1 f2 f8 c7 c5 ee 83 9a 8a 19 71 14 ac ac d7 51 eb 9e 38 24 d2 06 34 7c 91 d1 3d a4 38 59 78 15 43 84 4d 09 63 63 ea e5 1f d4 8f 93 c3 82 17 a8 d7 d3 16 78 03 8e ca 64 34 e3 f3 73 76 3c 15 7d e7 17 52 62 e7 02 b4 ae 16 1d ce b9 50 ba 67 7c 62 84 8c da bf 7e f5 72 b2 27 ca b3 cb 4d 4a 6a 6f a3 fd 0b 72 2f 69 31 43 54 e8 ac 41 96 68 84 41 74 f4 c4 20 a8 34 e5 5d f3 7c 48 f0 3e 53 2c 82 50 ae 2d 1e f9 02 28 c6 b3 4d 3c 49 ec 37 4c df c3 c7 b3 b4 58 e0 1a c2 07 97 f4 44 ae a5 ac 03 ba c9 66 27 39 53 3f 54 c7 88 ba 3c a6 99 a0 69 d2 92 8c 05 67 75 71 61 99 d7 f9 b5 53 8d 77 44 8c c2 44 4b c3 23 Data Ascii: 6b{h3(Ogx=cLd.JU9!>~S]&Z@qQ8$4\|=8YxCMccxd4sv<}RbPg\|b~r'MJjor/i1CTAhAt 4]\|H>S,P-(M<I7LXDf'9S?T<iguqaSwDDK#
2024-03-28 16:53:38 UTC	16384	IN	Data Raw: 0a 5e b3 d4 99 3a f1 7e 61 52 ac f5 2d 57 37 d5 ab 9b fe ab d5 0d ff d5 ea da 2b 1b d7 56 b6 5a 99 b8 a9 29 be 9a 79 38 b0 bf f7 42 f3 f0 3d 17 eb 50 87 f1 af 97 38 fc 9f 2c 71 6c 2f 71 ac 97 38 5d b2 c4 74 7d 0c d3 63 be 53 cd 4a 56 29 e8 16 8d ba 5c 7c 22 37 64 6d 27 f5 b5 e5 70 71 66 55 07 a2 2f 4f a4 3b 7b c9 95 1b 5e 49 87 64 c5 9a 27 74 2d bc 4a d3 7a 40 50 00 2b 46 a9 bb c3 60 68 d8 be 89 e7 0f e5 be 40 dc 98 c0 41 4d f1 39 b5 7d ea a8 65 f1 55 ce 38 aa 6c ee 09 50 63 8f 02 b0 38 17 50 b3 0d 28 07 f2 bf f0 69 21 17 50 98 8a a4 e4 d0 05 d0 63 a3 59 8a ab d0 05 f4 75 6d ce 1a b3 21 37 5b 5d e3 32 5a a6 6a 82 8b 40 2e 2a 00 f6 ab a5 4a 5d 29 65 35 59 29 a9 b4 55 ad 35 95 82 65 10 02 5b ad 25 8f 24 f9 74 7e ab 80 8d 74 8a d9 f2 47 c0 9f 47 9a c2 18 69 Data Ascii: ^:~aR-W7+VZ)y8B=P8,ql/q8]t}cSJV)\\|"7dm'pqfU/O;{^Id't-Jz@P+F`h@AM9}eU8lPc8P(i!PcYum!7[]2Zj@.*J])e5Y)U5e[%$t~tGGi
2024-03-28 16:53:38 UTC	16384	IN	Data Raw: 51 09 42 61 44 c3 2a 97 c4 5f 40 4e e9 70 5e 65 2e 07 28 91 89 b2 ec 67 68 21 86 00 25 dd 31 16 00 4e 3a bd de e5 1c 42 a5 3f c7 ea f1 b9 ed 79 63 5e 73 51 94 03 40 67 e8 0f 50 a3 43 46 4a b1 ab d8 86 c2 1d 04 84 1a 7d 70 0b c0 1f 8f 0d 2a 9c 8e a3 95 c5 28 b9 f7 8e 52 5a 1c 4b 32 0c 2e 32 9d 30 68 c0 47 35 56 22 ac 16 8b ae ca 33 f5 b5 50 df 78 f2 31 9f 83 00 d7 28 cd 30 51 b2 bc 14 ad 2d 57 68 9d 46 9b ee 30 86 01 9a ef 02 75 4e cf f8 b2 03 d7 86 db 4e 32 75 97 b9 84 ec 74 bf c6 7e 04 09 df dc eb 98 3e 08 71 f5 74 2a 7d b9 0a 6f d7 f9 90 8d 1b da 8d ee 37 44 2b 29 82 34 e6 b8 a4 0e 3c b0 e5 3e 33 b0 ad c8 2c ae d4 ce a3 c1 04 a6 83 12 1d 46 6a 2b 57 9f 4d e8 0d 67 dd d5 ed 8c 00 6b ac 4d ba 99 ed ee 4f 80 e8 4b 0b 87 e1 55 74 18 c3 6e d1 d9 4f 13 d3 d4 Data Ascii: QBaD_@Np^e.(gh!%1N:B?yc^sQ@gPCFJ}p(RZK2.20hG5V"3Px1(0Q-WhF0uNN2ut~>qt*}o7D+)4<>3,Fj+WMgkMOKUtnO
2024-03-28 16:53:38 UTC	16384	IN	Data Raw: ce bf c2 eb 13 93 31 5f 17 13 df 33 16 3b cb 64 44 bc 20 ac 9f ee 7d 77 cb 4f 3a 1c 66 e2 6d 2a 71 9e 59 48 3b d1 3e e0 99 b6 fa 37 26 43 e2 7d 9b e3 d9 2f 6e 36 5d 69 87 83 51 cc cf cf ca 52 87 54 d3 f7 6b 13 5f 4e 7d a7 db e6 36 00 9b 03 b8 a6 c3 bc 20 ba 9f cb 42 9a 59 18 3f a0 5c 4b 43 82 f1 7d f0 23 7f 9f e3 09 e3 63 38 88 c5 50 34 fa 7d 3e 47 f6 7e 8e 6d 86 be 5a 1a b3 68 1b c0 22 a9 48 c3 94 56 8d 73 49 b3 c5 73 10 01 d8 24 36 cf af 68 ee 8b 4e 25 10 0b 4b b4 74 30 5c 56 fd 33 6f d8 57 cb 6a e5 0c 27 73 8c 63 2d db 68 8e 47 de 23 22 c4 20 40 b0 32 a3 6b 0b 3a de 67 37 93 f0 25 59 9d c8 3a 72 a2 fd 6c 51 52 c8 15 c3 c3 3c 08 67 71 90 d6 81 76 e6 aa 97 54 aa 78 61 df b0 2c f9 7c 90 31 97 68 e2 c1 d0 a8 c0 e6 62 da 88 3a 33 20 31 f1 96 33 5c 51 cb 9c Data Ascii: 1_3;dD }wO:fm*qYH;>7&C}/n6]iQRTk_N}6 BY?\KC}#c8P4}>G~mZh"HVsIs$6hN%Kt0\V3oWj'sc-hG#" @2k:g7%Y:rlQR<gqvTxa,\|1hb:3 13\Q
2024-03-28 16:53:38 UTC	16384	IN	Data Raw: 07 ff bb a0 1f 6a 4c 6d 63 f2 c5 c0 fc d6 69 ea 4f 43 e5 d3 d4 dd ee 0e c3 23 a2 93 b6 7f 64 f1 70 7b 86 65 ba 6d b6 18 7d ce c7 fb 4e 0c c7 cf 37 5f b2 ee e1 f0 08 3f ef e9 47 cf 09 10 1f 7f bf fb 8a a2 b1 85 da fa ee 92 7a fc 87 66 8d b0 11 b0 02 99 b1 8d ea bb 71 d9 5d a6 16 d4 b6 be ed cc ea b0 74 77 57 4a b8 b6 c8 6e df 6d a9 a5 3f 34 72 28 eb 16 bd 31 b8 e0 ce de e4 b5 de e4 65 6f 92 d1 cc ce 68 49 67 dd a1 64 04 59 8a 42 a6 ca 32 95 11 49 ef 1e 2f 0a 66 f8 27 9d bb 73 aa ca 79 bf 7f 59 57 87 bc ac f4 f3 ff df b2 72 63 22 fd 76 7f 67 2f a5 b3 97 3f dd 59 9a dc 67 ba b3 d2 fe 4f 53 54 77 77 b7 ca 3d af 75 53 9c c1 ac a1 8c 1b 6b 41 79 91 95 8f 2d 6d 1c 58 b2 b1 9f 83 31 06 1c 76 71 2f 0e 9c 34 3f ff 0d 44 27 11 94 b1 10 93 60 a4 d7 46 f6 fb 6c d6 ab Data Ascii: jLmciOC#dp{em}N7_?Gzfq]twWJnm?4r(1eohIgdYB2I/f'syYWrc"vg/?YgOSTww=uSkAy-mX1vq/4?D'`Fl
2024-03-28 16:53:38 UTC	2691	IN	Data Raw: 8f 7c 92 bf e8 84 a5 38 7a 8f 4e 7c 44 47 76 c8 ef 43 71 73 10 a5 21 de 0e 4d 53 63 9a 39 22 cb 79 f6 2e 73 ff c9 d2 1f 4f fe 78 f6 fb d2 1f cf d4 85 15 7b aa ce 58 3f e3 9a 20 ee d2 e3 27 4f 9f fd fe fc 0f f5 2d f7 ff 78 fe fb b3 a7 4f 1e 2f 59 b7 bf 8d 92 f2 26 c2 00 3a 83 e7 ee 07 d0 e9 e7 ee d7 90 37 0c e3 65 c2 b4 90 9e a6 5b fd 5e 40 37 b5 0b 16 2b cc 3a 53 29 7c fd 3f 8c e2 fc f1 12 33 1f dd 96 e7 41 de fc 82 70 38 d4 38 61 fa 9c 1f e4 cf 72 8b c9 b1 d4 7a f2 fb 93 e7 8f 9f 3d f9 7d 1e 5b 6c 19 8c 5b 36 54 9e 72 d3 ae f7 db 65 fe ef c4 5b 48 bc 17 8b d0 6e f9 f3 cf 3f 7d 42 c8 f6 f0 16 42 fa 46 65 8c 0f 39 05 13 51 e1 7b d0 15 85 4a 3d 7e f6 c7 b3 3f 7e 73 9f 3d 7d fa f8 e9 fc b7 9c c8 cf 6f f9 9f 7f b6 9e 79 54 c7 7b f1 82 02 0b 3a d3 c5 57 9e 87 Data Ascii: \|8zN\|DGvCqs!MSc9"y.sOx{X? 'O-xO/Y&:7e[^@7+:S)\|?3Ap88arz=}[l[6Tre[Hn?}BBFe9Q{J=~?~s=}oyT{:W
2024-03-28 16:53:38 UTC	7530	IN	Data Raw: 1f 2e 3c 3e 13 a1 1f 48 d8 d5 2f 15 13 90 d7 91 d7 c6 f4 a5 85 39 a4 12 7d a7 29 03 b9 d4 80 d9 c4 cf cb 14 38 80 c0 46 2a 6c 74 77 af 8f 66 5c 88 92 62 ff db 12 4a 6f f8 09 37 f2 d4 5c 88 57 90 dd b8 fe fa 62 0e 5d 0a 62 fb 98 fe 95 8c d4 0e 13 b0 44 63 27 65 67 da d0 36 8c 04 be ea 24 6a d7 12 db 48 6b b8 9e 7a cf 60 38 f0 e7 0a 18 7d cc 16 38 0a 70 ac 5d 9e 4e 41 65 5a 79 bc 8f a4 22 43 0d 65 a3 18 af 25 31 06 c5 9a b1 7e 64 34 a8 e0 16 14 72 a2 ec f0 f9 58 83 0f c8 c4 50 db 90 59 c6 a6 99 8b 30 10 88 a2 a3 46 db ea 34 35 d3 2b b9 4a da 2a 7c e4 1f b8 3d fe 14 f5 1d c1 6d 04 87 7e af d3 eb 5e 43 14 86 c8 d6 5e f7 81 0e 85 04 1d da 84 13 58 33 f6 e1 a2 4e a1 4d 7b 53 e8 5e cc 00 75 bd fb e0 60 36 51 75 15 80 b2 54 61 26 3b 5c 1e 08 93 51 84 b9 7b 98 a1 Data Ascii: .<>H/9})8Fltwf\bJo7\Wb]bDc'eg6$jHkz`8}8p]NAeZy"Ce%1~d4rXPY0F45+J\|=m~^C^X3NM{S^u`6QuTa&;\Q{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49833	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	1363	OUT	GET /Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:36 UTC	661	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public,max-age=31536000 last-modified: Fri, 22 Mar 2024 11:18:06 GMT accept-ranges: bytes etag: "06bbe9c4a7cda1:0" vary: Accept-Encoding p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR amserver: eusXXXXgn000001 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 27242469CF4E486F96B08A9D5121CCD9 Ref B: FRAEDGE1809 Ref C: 2024-03-28T16:53:36Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:36 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-03-28 16:53:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49831	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	635	OUT	GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.dacreativeagency.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.dacreativeagency.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 16:53:36 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:36 GMT Content-Type: application/javascript Content-Length: 3505 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393251 cache-control: public, max-age=604800 etag: 0x8DC4AF4EB299963 last-modified: Sat, 23 Mar 2024 04:51:35 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 159be759-101e-0092-499c-7deb55000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:36 UTC	3505	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 5b 73 db 36 16 7e cf af a0 51 8f 4c 8e 60 46 49 db dd ae 18 44 e3 da 71 e2 dc 63 2b cd 83 e3 e9 d0 24 24 31 a6 49 96 04 2d 2b 92 fe fb 7e 07 e0 4d 96 d2 d9 9d dd 4e 1d 13 07 07 07 e7 7e 81 f7 26 65 12 a8 28 4d 6c 67 59 7f 5a d2 96 9d 95 a2 55 2e 55 99 63 a7 d7 93 6e a1 7c 25 85 88 7b 3d 5b ba 59 2e ef 9a 0f 37 91 f7 4a 48 fd cb e1 e6 b7 de a4 0f 8d 21 0c a2 c3 4f 84 00 31 fb a4 c1 de 37 80 fd 06 a3 be a8 e4 b2 3e aa c9 27 65 1c f3 c5 e1 21 30 d6 0d 93 3e 31 19 4d ec 2e 83 a5 b3 bc f3 73 2b 17 fb 5e 3e b2 f3 8a b9 9a 5a ee 0c 71 39 ae 95 cd 4d 20 db ef af 5b a2 13 28 65 ef af 5e 6f ef ba d7 5b f4 7a f7 cf e7 60 f0 5a cc a3 24 4c e7 6e 21 d5 38 ba 95 69 a9 ec 29 2f 1c a7 3d 77 47 cc 98 ab ed 44 ce ad 13 10 77 dc a9 c1 b7 Data Ascii: Y[s6~QL`FIDqc+$$1I-+~MN~&e(MlgYZU.Ucn\|%{=[Y.7JH!O17>'e!0>1M.s+^>Zq9M [(e^o[z`Z$Ln!8i)/=wGDw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49832	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	1332	OUT	GET /Resources/images/favicon.ico HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:36 UTC	613	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:36 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public,max-age=31536000 last-modified: Fri, 22 Mar 2024 11:18:06 GMT accept-ranges: bytes etag: "06bbe9c4a7cda1:0" p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR amserver: EUSXXXXGN00000N x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: EB37468AE7EB48429A24E077A664D8EA Ref B: FRAEDGE1820 Ref C: 2024-03-28T16:53:36Z access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:36 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-03-28 16:53:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49834	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	1350	OUT	GET /Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://signup.dacreativeagency.com/signup?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:36 UTC	637	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public,max-age=31536000 last-modified: Fri, 22 Mar 2024 11:18:06 GMT accept-ranges: bytes etag: "06bbe9c4a7cda1:0" p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR amserver: WCUXXXXIG000000 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 543F07A7B684485698A5AB4218070566 Ref B: FRAEDGE1321 Ref C: 2024-03-28T16:53:36Z access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:36 UTC	1871	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-03-28 16:53:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49836	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:35 UTC	989	OUT	GET /API/CheckAvailableSigninNames?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1 HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:36 UTC	1270	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Mar 2024 16:53:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-cache, no-store pragma: no-cache location: https://signup.dacreativeagency.com/error.aspx?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1&e=404 p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: SCUXXXX0005 (2.0.3277.0) x-ms-amserver-tm: 0ms x-ms-request-id: b56a0db5-4c2c-4851-8fa4-8c1c912e1e24 referrer-policy: strict-origin-when-cross-origin amserver: SCUXXXXIG000005 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 6E3115387B43451C86C92C97EB98C3D5 Ref B: FRAEDGE1215 Ref C: 2024-03-28T16:53:36Z access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:36 UTC	706	IN	Data Raw: 32 62 62 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 75 70 2e 64 61 63 72 65 61 74 69 76 65 61 67 65 6e 63 79 2e 63 6f 6d 2f 65 72 72 6f 72 2e 61 73 70 78 3f 73 72 75 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6c 31 76 65 2e 64 61 63 72 65 61 74 69 76 65 61 67 65 6e 63 79 2e 63 6f 6d 25 32 66 6f 61 75 74 68 32 30 5f 61 75 74 68 6f 72 69 7a 65 2e 73 72 66 25 33 66 6c 63 25 33 64 31 30 33 33 25 32 36 63 6c 69 65 6e 74 5f 69 64 25 33 64 35 31 34 38 33 33 34 32 2d 30 38 35 63 2d 34 64 38 36 2d 62 66 38 38 2d 63 66 Data Ascii: 2bb<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://signup.dacreativeagency.com/error.aspx?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf
2024-03-28 16:53:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49837	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:37 UTC	976	OUT	GET /error.aspx?sru=https%3a%2f%2fl1ve.dacreativeagency.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d59AC3F6F7D3AAF66%26opidt%3d1711644790%26uaid%3d8da31f269ebd451fbb6ab4c102827f89%26contextid%3dE4EA2673871E61DC%26opignore%3d1&mkt=EN-US&uiflavor=web&username=kenrod%40me.com&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=8da31f269ebd451fbb6ab4c102827f89&suc=https%3a%2f%2fa4d0aec3-12461a6c.dacreativeagency.com&lic=1&e=404 HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:41 UTC	792	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 83647 Connection: close cache-control: no-cache, no-store pragma: no-cache vary: Accept-Encoding p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ua-compatible: IE=edge, chrome=1 x-ms-amserver: eusXXXX0001 (2.0.3277.0) x-ms-amserver-tm: 15ms x-ms-request-id: 179c802f-0a41-4bed-adbb-31eb543c9cc9 referrer-policy: strict-origin-when-cross-origin amserver: eusXXXXgn000001 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 179C802F0A414BEDADBB31EB543C9CC9 Ref B: FRAEDGE1318 Ref C: 2024-03-28T16:53:38Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:41 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd f9 57 db 48 d6 30 fc f3 cb 39 f3 3f 08 4d 1e da 1a 64 63 b3 05 ec 08 1e 42 c8 84 9e 2c 74 20 9d ee 21 34 9f 2c 97 b1 12 59 72 6b 61 69 f0 ff fe dd a5 4a 2a 2d 4e 48 4f cf 7b de 9c 13 2c 95 6a af 5b 77 ab 7b 6f fd 6d e9 d9 f2 8b 77 87 67 bf 9e 1c 19 93 74 1a ec fd 6d e9 19 fe 1a 81 1b 5e 39 a6 08 4d e3 76 1a f4 8b 37 2f 70 93 c4 31 a7 97 59 60 8c 27 a6 31 f2 63 c7 0c d2 d8 34 92 f4 2e 10 8e 69 42 15 86 f1 6c 22 dc 11 3d c1 73 e0 87 5f 8c 58 04 8e 39 8b 85 17 85 a1 f0 52 d3 98 c4 62 ec 98 93 34 9d 25 fd b5 35 77 34 1e 77 d7 c7 3b ed de fa e6 76 cf dd f6 3a 23 d7 8b 85 9b fa d7 c2 bd 12 a1 77 d7 f1 a2 29 b4 1f 47 49 12 c5 fe 95 1f 62 5f ff 8b 55 4f 45 ea 1a 58 47 5b fc 9e f9 d7 8e 79 db 1e 85 49 1b da 19 8b d4 9b b4 a1 b5 Data Ascii: WH09?MdcB,t !4,YrkaiJ*-NHO{,j[w{omwgtm^9Mv7/p1Y`'1c4.iBl"=s_X9Rb4%5w4w;v:#w)GIb_UOEXG[yI
2024-03-28 16:53:41 UTC	14460	IN	Data Raw: 60 72 83 71 dc 9b 1c be 0f 60 05 df 1c 8c 22 88 01 48 a0 86 f5 e6 1a c8 75 23 81 ae 20 bc a3 a7 a7 f5 5d 0e d8 25 41 f8 5b 2e d8 35 67 0e 9a ff 9a 07 76 c3 45 b9 a9 7d 65 f5 39 b7 ee 81 5d bb fb 16 38 7d c8 59 bd 4a 84 6e 0c 01 f2 3c e9 cc 44 4c d1 ca 42 8f 9d 96 87 4c 29 01 b4 e8 f5 8c 79 cb 23 fe b9 71 ba 78 83 88 7d 8a d3 79 4b 73 8a e7 38 2f b0 3e 7d dc d5 77 46 97 ad 49 b3 45 46 f1 a1 21 49 b3 af 28 12 af fd c4 1f fa 81 9f de c9 1b 73 e9 63 53 c5 e5 3a ab d5 35 d6 f4 02 70 df 11 53 d3 06 1e f7 06 38 ee a5 39 65 02 b4 f3 b3 9f ba 41 42 2a 1f 40 0d 8b 4b 3d 81 52 58 a8 a4 a2 70 52 48 81 85 75 22 9b 2d a0 9c 0c 1e 26 8a 5d 76 f9 6b 69 d9 9d 19 27 9e c4 e2 14 0a a8 1b 59 46 9c ca 18 47 25 8e ed 29 0a 33 f5 d8 03 92 56 82 54 f3 b5 0b 51 be ce 74 3c 71 44 Data Ascii: `rq`"Hu# ]%A[.5gvE}e9]8}YJn<DLBL)y#qx}yKs8/>}wFIEF!I(scS:5pS89eAB*@K=RXpRHu"-&]vki'YFG%)3VTQt<qD
2024-03-28 16:53:42 UTC	12576	IN	Data Raw: a0 a3 ff 01 d8 a7 40 93 c7 01 32 60 10 47 df 03 74 48 a1 2e 0e 07 e8 88 41 4d 9a 87 2c dd d1 eb 00 3d a2 50 17 7b 03 f4 98 41 0f ad 9a 76 59 bf b8 98 1b c1 bc 77 1c fd 8d 60 d6 3f 43 b3 b7 bb ac 6f 5c 9c 8d 60 d6 41 2e c6 46 30 eb 21 93 af 11 c4 ba c7 c5 d6 08 66 bd e4 e2 6a 04 b3 6e 3a b4 c8 b2 1e 72 f1 34 b2 01 eb 25 17 4b 23 98 f5 92 c9 d1 08 62 3d e4 62 68 04 b3 7e 72 f1 33 82 39 23 a9 ec 4c ef 14 00 43 ab 16 5d c7 04 77 35 b0 35 0c 0c ab a7 61 59 a3 c1 b0 fa 1a 96 ce ef 0c 65 a0 a3 58 a3 c3 d0 86 1a 9a 3d 03 18 da 48 47 b3 8b 3b d4 11 ac 51 63 68 47 1a 9a 3d 39 18 da b1 8e 76 e8 68 5f 57 ef 6e 7b ba 70 3c a3 df ad 71 e5 78 7a cf 0f ed f1 ed ea bd 6e cf 24 8e a7 77 bd 3d a5 38 9e de f7 23 d7 28 76 f5 8e b7 27 19 c7 d3 fb df 9e 6d 1c 4f 1f 80 43 47 89 Data Ascii: @2`GtH.AM,=P{AvYw`?Co\`A.F0!fjn:r4%K#b=bh~r39#LC]w55aYeX=HG;QchG=9vh_Wn{p<qxzn$w=8#(v'mOCG
2024-03-28 16:53:42 UTC	16384	IN	Data Raw: dc d0 21 9f 9d 87 cc a2 5f 9c f1 d6 6b aa c9 73 c2 7f 1f 16 20 c5 3e 9e 62 d5 6c 87 4f 07 ca ce 93 a2 67 6f 9e 6b 49 42 75 dd 5e d0 5d cd 19 a3 08 72 da 4a fa de e8 bb 56 55 e3 17 f1 ea 43 b4 5c e1 d3 f3 52 4f c6 a5 51 37 7a 54 6e 32 48 b8 e2 9c 6f c7 64 01 cb 77 43 64 81 8d 77 47 16 61 c2 b7 67 e1 d1 be b7 63 f2 a0 dd db 31 45 e4 ed ed a8 4a e8 ec ed c8 22 fe f5 76 54 1a ca 7a 17 3c 12 93 7a 07 c4 5d c7 80 c6 89 de 8e c7 02 3e bb 11 e9 3e 44 05 d0 f1 54 4d 05 62 c5 fb 0a 3c dc a1 e2 1c 39 d1 5d 2a 27 dc dd b3 a3 6f 07 74 4d e7 0e b6 75 40 34 e1 bd 27 a5 d8 a7 18 55 ce ae 8a b3 25 dc 59 52 8c 83 de 70 e8 f3 ff d1 44 a8 20 96 d1 67 69 14 45 fd bb e5 c7 cf 97 c6 26 74 a5 2f 39 47 36 5c c5 bf 5b 7f 59 7d 84 35 e1 e3 ac cc 2b 36 d5 70 ab 45 e8 59 02 1f 15 98 Data Ascii: !_ks >blOgokIBu^]rJVUC\ROQ7zTn2HodwCdwGagc1EJ"vTz<z]>>DTMb<9]*'otMu@4'U%YRpD giE&t/9G6\[Y}5+6pEY
2024-03-28 16:53:42 UTC	16384	IN	Data Raw: 5f 56 42 04 be 17 4a e6 8b 4b ee b7 24 96 a2 98 37 17 98 6c d7 60 61 02 c4 00 7c 8e 69 71 33 4c 8b b2 35 ca 87 fd 4c c3 16 e6 e7 31 7b b8 40 93 c9 c7 0b 42 ea 4b f2 5b 77 8e d0 b7 be f1 23 c0 c1 a6 be 6c bf f6 a7 59 eb 5a 7b f0 cd f9 0c 44 d4 1d 2b 1c bb 5e 90 4c 2d 1b f6 56 6d 71 a2 8b ec 0e fa f3 67 ee 78 ce b7 57 7f 88 df d5 18 73 f2 cd be 45 a2 6f 7d 04 c8 24 ba 59 6d d6 1b 1b 35 11 18 5d ae 66 f1 6c f5 dc 85 59 ee 45 a9 8d 92 7c 49 81 c2 56 ee be 5a 6b c9 5f 33 65 7f f6 67 01 e4 4f c1 c7 0f ce 63 19 7c fc a0 f0 f8 a7 00 a4 31 07 40 3e 8f 92 b9 20 d2 fc 9f 07 11 76 c5 fc 3f 01 1b c2 1c 51 c5 9b 81 25 4c 3c 46 34 38 eb 25 31 ed 08 d9 bf 5f df 0d dc 41 98 cf 48 a1 b5 1b a9 59 11 1b 0a 77 95 b1 61 57 58 c8 20 2c 9c 38 ad fd c9 c1 af df b6 7a d2 08 0e 89 Data Ascii: _VBJK$7l`a\|iq3L5L1{@BK[w#lYZ{D+^L-VmqgxWsEo}$Ym5]flYE\|IVZk_3egOc\|1@> v?Q%L<F48%1_AHYwaWX ,8z
2024-03-28 16:53:42 UTC	8251	IN	Data Raw: 39 3e 3b 2b e9 10 d5 5d 9d db a1 53 9f 44 8f 0e f1 9a d2 f5 87 ab af 15 46 7c d2 67 67 6d 14 16 a7 63 6f fb 74 5f 94 6d 14 ca 10 05 47 94 bd 4e cb 88 50 12 bf f4 9e 00 d5 8f 88 1b 80 d4 d7 bb dc ef 22 78 e1 25 e0 5c bc f0 93 6d 9d b2 5e f2 72 8f 64 f2 81 e8 c3 e5 e9 8d 58 16 aa f0 46 57 38 9d 5c 0d 83 44 3c fd 59 3c a5 6f ef f4 83 91 7b b2 7f 72 b0 43 d3 0c 35 18 02 20 19 e3 44 0c 47 d5 a5 ed e8 86 d0 45 a1 13 cd e6 73 55 2e df 0f dc 5b 39 c7 cd d5 79 35 4f 91 b5 4a 36 b7 f6 7c a5 4c 83 eb 33 3b 75 b4 4f 6c bf f6 a8 50 7c 9a b8 ea 1e ae 44 f1 e2 62 a1 84 e8 fc 64 e0 6f 89 4b 5d d6 73 90 69 aa 24 ff 95 f0 aa 5c 5c 14 d7 ba 3b ec 6c 89 9f d5 f3 0b fa 6e 6b de 77 b7 e4 d5 d8 7a 9c cb 2a a9 6b 76 d0 31 7e f3 5e 34 ee eb fb ac 6c 4f a6 4e d9 c3 b9 b5 eb 9f ff Data Ascii: 9>;+]SDF\|ggmcot_mGNP"x%\m^rdXFW8\D<Y<o{rC5 DGEsU.[9y5OJ6\|L3;uOlP\|DbdoK]si$\\;lnkwz*kv1~^4lON

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49838	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:37 UTC	517	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:39 UTC	736	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:39 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393191 cache-control: public, max-age=604800 etag: 0x8DC4AF4EBBC0C94 last-modified: Sat, 23 Mar 2024 04:51:36 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 67943616-101e-0082-309d-7d5b77000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-03-28 16:53:39 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-03-28 16:53:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49839	209.38.240.137	443	4076	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:37 UTC	503	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: adff02f8-12461a6c.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="
2024-03-28 16:53:38 UTC	671	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:38 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 393139 cache-control: public, max-age=604800 etag: 0x8DC4AF4F529488F last-modified: Sat, 23 Mar 2024 04:51:52 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cfd7dfd7-a01e-0005-319d-7ddd2c000000 x-ms-version: 2009-09-19
2024-03-28 16:53:38 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-03-28 16:53:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49840	209.38.240.137	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:42 UTC	679	OUT	GET /Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; MicrosoftApplicationsTelemetryDeviceId=7c3edf02-b074-4c59-802a-c98dde791472; clrc={%2219811%22%3a[%22d7PFy/1V%22%2c%22+VC+x0R6%22%2c%22FutSZdvn%22]}
2024-03-28 16:53:44 UTC	661	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:43 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public,max-age=31536000 last-modified: Fri, 22 Mar 2024 11:18:06 GMT accept-ranges: bytes etag: "06bbe9c4a7cda1:0" vary: Accept-Encoding p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR amserver: WCUXXXXIG000000 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: AE7DB76F04AD42C9AAF465776C9A2EE2 Ref B: FRAEDGE1719 Ref C: 2024-03-28T16:53:43Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:44 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-03-28 16:53:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49842	209.38.240.137	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:42 UTC	648	OUT	GET /Resources/images/favicon.ico HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; MicrosoftApplicationsTelemetryDeviceId=7c3edf02-b074-4c59-802a-c98dde791472; clrc={%2219811%22%3a[%22d7PFy/1V%22%2c%22+VC+x0R6%22%2c%22FutSZdvn%22]}
2024-03-28 16:53:44 UTC	613	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:44 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public,max-age=31536000 last-modified: Fri, 22 Mar 2024 11:18:06 GMT accept-ranges: bytes etag: "06bbe9c4a7cda1:0" p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR amserver: scuXXXXig0000E6 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: C9C649AFA64B44888905A79AF5C127AE Ref B: FRAEDGE1519 Ref C: 2024-03-28T16:53:43Z access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:44 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-03-28 16:53:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49841	209.38.240.137	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 16:53:42 UTC	666	OUT	GET /Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: signup.dacreativeagency.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l9ZzGO="MTI0NjFhNmMtZDU3ZC00MTQxLWJjMmItNDZhNDgyYzc1MmNmOmY3NmFmYjA0LTUzYWMtNDI2Ny1iMzIyLTA1OGY4NWJkMDVhNw=="; MicrosoftApplicationsTelemetryDeviceId=7c3edf02-b074-4c59-802a-c98dde791472; clrc={%2219811%22%3a[%22d7PFy/1V%22%2c%22+VC+x0R6%22%2c%22FutSZdvn%22]}
2024-03-28 16:53:44 UTC	637	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Mar 2024 16:53:43 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public,max-age=31536000 last-modified: Fri, 22 Mar 2024 11:18:06 GMT accept-ranges: bytes etag: "06bbe9c4a7cda1:0" p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR amserver: wusXXXXig0000LG x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 61DDBA68CB73452C9AA042EC19D894AC Ref B: FRAEDGE1711 Ref C: 2024-03-28T16:53:43Z access-control-allow-origin: * access-control-allow-headers: *
2024-03-28 16:53:44 UTC	1871	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-03-28 16:53:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	17:51:58
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:52:01
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,13815014591697100388,13355120804948401002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:52:03
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blee58.com/bl/ax/l?user=kenrod@me.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://blee58.com/bl/ax/l?user=kenrod@me.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Windows Analysis Report
https://blee58.com/bl/ax/l?user=kenrod@me.com