Edit tour

Windows Analysis Report
https://people.planningcenteronline.com

Overview

General Information

Sample URL:	https://people.planningcenteronline.com
Analysis ID:	1431783
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2200,i,5783934558795399267,4721298403190009966,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://people.planningcenteronline.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ab5ddfb19446/33b184b1a0f1/verify HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveContent-Length: 8699sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://login.planningcenteronline.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://ab5ddfb19446.edge.sdk.awswaf.com/ab5ddfb19446/33b184b1a0f1/challenge.js
Source: chromecache_89.2.dr	String found in binary or memory: https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-128-862107eee4ccdf92e70a3410da4b3c48b82a256f89
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-144-f16df30018752c62b40bd115dfe8243b39d03354c0
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-180-7cb6934e4aeb93b235f7ad24a74a5954391191914a
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-196-01f5c09b64cd6c1b3ce814135f810e5e16466c6707
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-228-607737e94a057cef8ee8eb1843e70fc4b6c2bc32b5
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-57-9126e33705cd9c9a32ff5800bead92dbbb182871fd7
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-76-898249b7983141caf8c7e8ec324fbdaca4da0c13990
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/favicon-96-21a56ea72172d8aefb55e0b38fef153fa6b38cfb356
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/pco/page_expired/manifest-c88201c22050a32daa4c0109df08
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/planning_center_1200px-2117eac95c17636782f0621c47c2621
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56
Source: chromecache_86.2.dr, chromecache_95.2.dr	String found in binary or memory: https://login.planningcenteronline.com/login
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/packs/js/882-821b6997692328fd5b75.js
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/packs/js/login-a860e00a8fd55872cfa8.js
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.planningcenteronline.com/packs/js/runtime-461b1b74cc572f890c8f.js
Source: chromecache_99.2.dr	String found in binary or memory: https://pco-cross-storage-dev.s3.amazonaws.com/hub.html
Source: chromecache_99.2.dr	String found in binary or memory: https://pco-cross-storage-staging.s3.amazonaws.com/hub.html
Source: chromecache_99.2.dr	String found in binary or memory: https://pco-cross-storage.s3.amazonaws.com/hub.html
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://planning.center/privacy/
Source: chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	String found in binary or memory: https://planning.center/terms/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@24/38@22/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2200,i,5783934558795399267,4721298403190009966,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://people.planningcenteronline.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2200,i,5783934558795399267,4721298403190009966,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://people.planningcenteronline.com	0%	Avira URL Cloud	safe
https://people.planningcenteronline.com	0%	Virustotal		Browse

Source	Detection	Scanner	Label
https://ab5ddfb19446.87d96309.us-east-2.token.awswaf.com/ab5ddfb19446/33b184b1a0f1/challenge.js	0%	Avira URL Cloud	safe
https://ab5ddfb19446.edge.sdk.awswaf.com/ab5ddfb19446/33b184b1a0f1/challenge.js	0%	Avira URL Cloud	safe
https://ab5ddfb19446.87d96309.us-east-2.token.awswaf.com/ab5ddfb19446/33b184b1a0f1/telemetry	0%	Avira URL Cloud	safe
https://ab5ddfb19446.87d96309.us-east-2.token.awswaf.com/ab5ddfb19446/33b184b1a0f1/verify	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-w.us-east-1.amazonaws.com	16.182.40.97	true	false	high
ab5ddfb19446.edge.sdk.awswaf.com	18.155.1.14	true	false	unknown
ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	13.249.39.45	true	false	unknown
login.planningcenteronline.com	18.155.1.25	true	false	high
www.google.com	108.177.122.147	true	false	high
people.planningcenteronline.com	108.139.15.59	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
pco-cross-storage.s3.amazonaws.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://login.planningcenteronline.com/packs/js/882-821b6997692328fd5b75.js	false		high
https://login.planningcenteronline.com/packs/js/login-a860e00a8fd55872cfa8.js	false		high
https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css	false		high
https://pco-cross-storage.s3.amazonaws.com/hub.html	false		high
https://login.planningcenteronline.com/assets/@planningcenter/icons/sprites/general-45fb8eeff447e73ce56b2ccf04643bb3bf4672a4ed64f409e42f456a38874f8a.svg	false		high
https://login.planningcenteronline.com/packs/js/runtime-461b1b74cc572f890c8f.js	false		high
https://login.planningcenteronline.com/?return=People%2F	false		high
https://ab5ddfb19446.edge.sdk.awswaf.com/ab5ddfb19446/33b184b1a0f1/challenge.js	false	Avira URL Cloud: safe	unknown
https://login.planningcenteronline.com/login/new?return=People%2F	false		high
https://login.planningcenteronline.com/login/new	false		high
https://ab5ddfb19446.87d96309.us-east-2.token.awswaf.com/ab5ddfb19446/33b184b1a0f1/challenge.js	false	Avira URL Cloud: safe	unknown
https://people.planningcenteronline.com/	false		high
https://ab5ddfb19446.87d96309.us-east-2.token.awswaf.com/ab5ddfb19446/33b184b1a0f1/verify	false	Avira URL Cloud: safe	unknown
https://login.planningcenteronline.com/assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png	false		high
https://login.planningcenteronline.com/password_reset/new	false		high
https://ab5ddfb19446.87d96309.us-east-2.token.awswaf.com/ab5ddfb19446/33b184b1a0f1/telemetry	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://login.planningcenteronline.com/assets/planning_center_1200px-2117eac95c17636782f0621c47c2621	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://planning.center/terms/	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://login.planningcenteronline.com/login	chromecache_86.2.dr, chromecache_95.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-57-9126e33705cd9c9a32ff5800bead92dbbb182871fd7	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-228-607737e94a057cef8ee8eb1843e70fc4b6c2bc32b5	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-96-21a56ea72172d8aefb55e0b38fef153fa6b38cfb356	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-76-898249b7983141caf8c7e8ec324fbdaca4da0c13990	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-144-f16df30018752c62b40bd115dfe8243b39d03354c0	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://planning.center/privacy/	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://pco-cross-storage-dev.s3.amazonaws.com/hub.html	chromecache_99.2.dr	false	high
https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html	chromecache_89.2.dr	false	high
https://pco-cross-storage-staging.s3.amazonaws.com/hub.html	chromecache_99.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-196-01f5c09b64cd6c1b3ce814135f810e5e16466c6707	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-180-7cb6934e4aeb93b235f7ad24a74a5954391191914a	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high
https://login.planningcenteronline.com/assets/favicon-128-862107eee4ccdf92e70a3410da4b3c48b82a256f89	chromecache_86.2.dr, chromecache_95.2.dr, chromecache_91.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.249.39.45	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	United States	16509	AMAZON-02US	false
13.249.39.67	unknown	United States	16509	AMAZON-02US	false
16.182.40.97	s3-w.us-east-1.amazonaws.com	United States	unknown	unknown	false
18.155.1.25	login.planningcenteronline.com	United States	16509	AMAZON-02US	false
18.155.1.14	ab5ddfb19446.edge.sdk.awswaf.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.155.1.13	unknown	United States	16509	AMAZON-02US	false
108.139.15.59	people.planningcenteronline.com	United States	16509	AMAZON-02US	false
108.177.122.147	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431783
Start date and time:	2024-04-25 19:20:02 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://people.planningcenteronline.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@24/38@22/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://login.planningcenteronline.com/login/new Browse: https://login.planningcenteronline.com/password_reset/new Browse: https://login.planningcenteronline.com/password_reset/new Browse: https://login.planningcenteronline.com/login/new Browse: https://login.planningcenteronline.com/password_reset/new Browse: https://login.planningcenteronline.com/login/new Browse: https://login.planningcenteronline.com/password_reset/new

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.124.101, 172.253.124.100, 172.253.124.113, 172.253.124.139, 172.253.124.138, 172.253.124.102, 64.233.177.84, 74.125.138.94, 34.104.35.123, 64.233.176.95, 142.250.9.95, 64.233.177.95, 172.217.215.95, 74.125.138.95, 108.177.122.95, 142.251.15.95, 173.194.219.95, 142.250.105.95, 172.253.124.95, 64.233.185.95, 74.125.136.95, 52.165.165.26, 23.40.205.66, 23.40.205.75, 23.40.205.83, 23.40.205.81, 199.232.210.172, 192.229.211.108, 13.95.31.18, 20.3.187.198, 64.233.176.94, 23.40.205.73, 23.40.205.26
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 16:20:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9825994697112503
Encrypted:	false
SSDEEP:	48:8kdWTSiCHxidAKZdA19ehwiZUklqehRy+3:8Rjs+y
MD5:	649080359424C92E82A0DB8D7F20C1E5
SHA1:	41593C28BF038EC67818C18018C67DE01A604745
SHA-256:	658CF3B9364772B579F519C39E08964F28E123B1B5AF63417DEF18223289A30F
SHA-512:	2926E6EFD3576C788C48D3E680F08134A9352A4202051E6BBD92A2D2388BE57FACBABAB3F3D4AE16FDA57615CF3CF6A71A8D1625DBC70E6868BA499E1DC7129B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......[.4...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............t.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 16:20:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999147281028835
Encrypted:	false
SSDEEP:	48:8XKdWTSiCHxidAKZdA1weh/iZUkAQkqehuy+2:8zje9Qzy
MD5:	96A498D38A7D305473E101ADC0E7EF58
SHA1:	8C259F609A3F73C92734AD6D202A782F52F2BCFA
SHA-256:	4BB144098F2207FC49787DF4E9D5030D721F0943F164CBF64F31CF29EA0C5766
SHA-512:	170D2A3E4634D856D46F48130C61D8C4FDDC8441D57F0779EC4A62018415ED51B71211F6DE5DBD3D7B1B3BC4D2FDF59C9E1B6FD3E487E047AC40A18CCD7870C8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......K.4...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............t.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0081000933029935
Encrypted:	false
SSDEEP:	48:8xrdWTSisHxidAKZdA14tseh7sFiZUkmgqeh7sYy+BX:8xQjEnqy
MD5:	078C23110618D018F8B41FA01D0FC31E
SHA1:	62E946F07CF8508138D1A677E11BCC7DE0768108
SHA-256:	3FEB7C210227C9FDCA703F10779EC5E6D659BF581B1070FC1E66292DD5C77F1D
SHA-512:	DEEAD8F569251D70D89B7DE54F32E4D0A35B8F9F0361652C61BE61EFA79CB8077ADA0517BD4C0E003C43287F780CB0DD0790F79231CA39B8B26E32889D3F36C8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............t.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 16:20:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9950711611749723
Encrypted:	false
SSDEEP:	48:8SrdWTSiCHxidAKZdA1vehDiZUkwqehCy+R:8SQjFQy
MD5:	C82E881153431D941C0CB3515A859DA8
SHA1:	CDDC28305F1CB6A7F27B23A6AA0AB798696053F2
SHA-256:	19F4D22AB8E2E0C3507982A903D395D62FC1181C8C4B374545575654F453BB8B
SHA-512:	482C81085E4B9799A68E91F760A053B839C32F67B576E7371CCD21DB6A098DE12BC3B648067682181C7D3DA88392EF490428672279B86C5E5D2D6157C76ED0B3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......D.4...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............t.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 16:20:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9854117432743914
Encrypted:	false
SSDEEP:	48:8XrdWTSiCHxidAKZdA1hehBiZUk1W1qehEy+C:8gjV9ky
MD5:	DF56C0BE995600A82338311709D861EC
SHA1:	E4661C34F8639B2F646D2E936E7981293452FC64
SHA-256:	EBAA7C84A03AF585D394D74145BD4A32263863C5B6419F4FF07988B5DF33ECB7
SHA-512:	85EF8963EBF15A264B3A5CF46EBE719D9312D08FDDF96DC8DC335A17634C332B71F7397C93A7AC672C4F74E479A02FE78FD394F1100A67A8D2FD59A6A2E7F1B0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?.S.4...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............t.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 16:20:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9974919830834557
Encrypted:	false
SSDEEP:	48:82dWTSiCHxidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbqy+yT+:8vjpT/TbxWOvTbqy7T
MD5:	B32C5FA6587B4AF0BFA9368995E6866E
SHA1:	65D0CD8C1681B736698285EE5DC30AD4A716E5C1
SHA-256:	3C4D4C7668EB1AAF908E7A6AFF175ED4D5C3C6FBCB6B0C9F446EF80EE4C20B85
SHA-512:	94B27B71E6BB4998CA3E3164B80EFDFACAD2F6230EF87B30F0DE8248E7F0BDEE681E597AA9031A0F8DE0D38419415B2187998B063165F4E3E42F9FA39B2FD96E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......;.4...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............t.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	138534
Entropy (8bit):	5.39085267384273
Encrypted:	false
SSDEEP:	1536:4I8SWinO2F/pZZ1G0xDoq4q/DYVs8jWKxFD3twz2bdfsaWEhNJEqEMObq:POq/pPoq6LJlNNJEm
MD5:	228455AD42E32C0B8D887CE86197A2D5
SHA1:	8311269F2B3C3159ACD2B67B201DEFC15DB2684A
SHA-256:	0744CD6ADEE61C435F9DC1FECE03C8D160DCADD1A8C69B113A6645D30229F94B
SHA-512:	2D48633EF553F2C8D5B9CB554668E3821425DC12D5D09C585B15D9ABABFCB2485B0D0C7504F219192E46FF6D08C734299F6408B8A3A13196D78DC0845B5057E9
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/packs/js/882-821b6997692328fd5b75.js
Preview:	(self.webpackChunklogin=self.webpackChunklogin\|\|[]).push([[882],{9054:function(){!function(){var t=!1,e=[16,17,18,27,91,93];function n(){var t=!0,e=function(){var t=!1;try{var e=Object.defineProperty({},"passive",{get:function(){t=!0}});window.addEventListener("test",null,e)}catch(n){}return t}()?{passive:!0,capture:t}:t;window.addEventListener("mousedown",r,e),"ontouchstart"in window&&window.addEventListener("touchstart",r,e),window.addEventListener("keydown",o,t),window.addEventListener("focusin",i,t)}function r(){t=!1}function o(n){e.indexOf(n.which)>-1\|\|(t=!0)}function i(){var e=document.body;t?e.dataset.focusVisible="":delete e.dataset.focusVisible;for(var n=document.querySelectorAll("[data-require-focus-visible-class]"),r=0;r<n.length;r++){var o=n[r];t?o.classList.add("focus-visible"):o.classList.remove("focus-visible")}}"interactive"===document.readyState?n():document.addEventListener("DOMContentLoaded",n)}()},8535:function(t,e,n){var r,o;(function(){(function(){(function(){this

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	134419
Entropy (8bit):	4.135083554296978
Encrypted:	false
SSDEEP:	1536:6TQd2th09xjz1suA9nVbskvh7I5eUlRUs4Is4Is4na0mr2H6Jg6fKlNZeH6Fn7e8:Z/I9eUJD4y
MD5:	6BE2C793DBF420E876D30957119DC47B
SHA1:	6E40B24D80F3F113E7BAA4B0980C9178DF8141FD
SHA-256:	DD391937B5B62C0A9444F516305E27B214B71B8FB529AF5E9C6354627750C34E
SHA-512:	98C9766D7C360F17FB964B99448F2705DF066C5B0F2CF6A6208A0B5A9DD7DB67ADDB8AF8756214A7B3DE84D760AD616359A1EF8C8721F4F1E7FBCB65FA40F3C3
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. .<symbol id="bell" viewBox="0 0 16 16">. <path d="M15.2327 11.506L13.3279 9.23401V5.817C13.3366 4.39379 12.7806 3.0252 11.7816 2.01153C10.7827 0.997861 9.42244 0.421894 7.99938 0.410004C6.5765 0.422158 5.21654 0.99824 4.2178 2.01188C3.21907 3.02553 2.66312 4.39396 2.67191 5.817V9.23401L0.767103 11.505C0.578314 11.728 0.457357 12.0004 0.418549 12.29C0.379741 12.5795 0.424707 12.8742 0.548124 13.139C0.664092 13.4035 0.854941 13.6282 1.09713 13.7855C1.33931 13.9428 1.62223 14.0257 1.91099 14.024H5.69061C5.87469 14.4861 6.19316 14.8824 6.60484 15.1616C7.01652 15.4408 7.50248 15.59 7.99988 15.59C8.49728 15.59 8.98324 15.4408 9.39493 15.1616C9.80661 14.8824 10.1251 14.4861 10.3092 14.024H14.0908C14.3791 14.0248 14.6614 13.9415 14.903 13.7843C15.1447 13.6271 15.3354 13.4029 15.4516 13.139C15.5752 12.8744 15.6203 12.5799 15.5815 12.2904C15.5426 12.0009 15.4216 11.7287 15.2327 11.506Z"/>.</symbol>..<symbol

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48352)
Category:	downloaded
Size (bytes):	48353
Entropy (8bit):	5.141600541658883
Encrypted:	false
SSDEEP:	384:XIayQOILDoVrA1Bmj7YL4VkblqBvrXjndwpu/plDnZUJgHZwE9qV:XXhDyrA1UXVrTndxhnZUJgHZwE2
MD5:	5B6F75F1CE991095201BD303C7D8CA45
SHA1:	C05A514BEA5C020C33C7A89DF410FCC45A3BE1E8
SHA-256:	DB75F22C48388263F9FAB545DCC6ED3B0CF5956E99986C33C3189AD5AA402CA8
SHA-512:	0281855EBB3D7C4B6D1A8D6724A4072D126769A109628ABA62877C52E2C153E797E2D7D7F3B3A37059CC34D951FB1E3FAC12977252F17018DAA6A475B35CA6A2
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css
Preview:	.fs-0{font-size:24px}.fs-1{font-size:20px}.fs-2{font-size:18px}.fs-3{font-size:16px}.fs-4{font-size:14px}.fs-5{font-size:12px}.fs-6{font-size:10px}.sans-serif{font-family:system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"}:root{--color-light-neutral-12: hsl(0, 0%, 12%);--color-light-neutral-24: hsl(0, 0%, 24%);--color-light-neutral-45: hsl(0, 0%, 45%);--color-light-neutral-62: hsl(0, 0%, 62%);--color-light-neutral-81: hsl(0, 0%, 81%);--color-light-neutral-88: hsl(0, 0%, 88%);--color-light-neutral-93: hsl(0, 0%, 93%);--color-light-neutral-95: hsl(0, 0%, 95%);--color-light-neutral-97: hsl(0, 0%, 97%);--color-light-neutral-98: hsl(0, 0%, 98%);--color-light-neutral-100: hsl(0, 0%, 100%);--color-dark-neutral-98: hsl(0, 0%, 98%);--color-dark-neutral-88: hsl(0, 0%, 88%);--color-dark-neutral-68: hsl(0, 0%, 68%);--color-dark-neutral-50: hsl(0, 0%, 50%);--color-dark-neutral-32: hsl(0, 0%, 32%);-

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.305747569779013
Encrypted:	false
SSDEEP:	12:6v/781PenzlHAOn95TDNUwhk28IzBXi5IRyQEcvHjMCIpnJzhAQtq/aIWI2Gh6Dn:FsC0JNphH8WAIUQp6hTqancMn
MD5:	BD6631693305788629846DDE0C3FEFF2
SHA1:	3FD1201E65DC497506E30C578E2C91C7C8999697
SHA-256:	AB3413CF5ACD9241C2A1AACA978203802050FFA65DFA651F22B058718009490C
SHA-512:	1BF2082909F98A92FBF83B1302FE06C2114397C60552CB9C5ABD173BC352EEEC560A26741EE2D2BD6B0898D4244C59CE6327BF36F8C771C29C3BB7972550C23C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....gAMA......a....8eXIfMM........i..............................................S.....IDAT8.}S=kTA.=g.&.... ".&1....Y..."..?.H...lbc-..ULaaec#n.."ZDB.(.1".A0h.._..}s...o.{d..{.9g....U.j..\..8.A...\|-.9f..O3........S..$(.....$.\!..apwu6.....J.....QW..g...\...^..r..\5.....N.....Y`.h0..v...L+....3..0..`...p.A.#...N_.G)l...7k...!.8@T...g........(.M`[...%.......xm9.D:.W...H...9'....61...;...`.\|.....<.R..q.^..y..&...bv... F.9hll....(/[..s...\|...:......q]02].!...P.)..1..x.V.*.........7....(@8AZ.L,.....5%>.b9....J.88%..A...ApT...W..wuw>]..6...;..&.......IEND.B`.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1099)
Category:	downloaded
Size (bytes):	20220
Entropy (8bit):	4.989580449727035
Encrypted:	false
SSDEEP:	384:DSSrLeP3CROu3SDbdD1DD+WaWAylJ+v3R9jnfsQDy0rhzbWExE2+o8j/vdXOKcbd:DSSrLePyROeSDbdD1DjaWAc+voX0rhzJ
MD5:	D094D621701575EB753D836D55D93A75
SHA1:	E0BE1CD4BD54BEECD627C129866619DBCBC463A2
SHA-256:	1B6B895277D856D40E8288BF77D5DC771C8E2358B785CDE2C3B641638C11C63C
SHA-512:	73A02927AA0514EF29B7E4E46132F7CBE0E787A57BC3FB6DBDD3D101C4E3686487C2C9B1E092BCB592B2EBEECFF7404C22C5537B906CA4E70A377BD75C18A20C
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/login/new?return=People%2F
Preview:	<!DOCTYPE html>.<html class="">. <head>. <title>Planning Center - Login</title>. <meta content="Login" name="apple-mobile-web-app-title"/>. <meta content="Log in to your church's Planning Center account." name="description"/>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <meta property="og:logo" content="https://login.planningcenteronline.com/assets/planning_center_1200px-2117eac95c17636782f0621c47c26215c24ca14c98c68f5df697be175b625429.png" size="1200x1200">. generics -->.<link rel="icon" href="https://login.planningcenteronline.com/assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png" sizes="16x16">.<link rel="icon" href="https://login.planningcenteronline.com/assets/favicon-57-9126e33705cd9c9a32ff5800bead92dbbb182871fd7712b1b8ff34fbdf91f820.png" sizes="57x57">.<link rel="icon" href="https://login.planningcenteronline

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.321854365656768
Encrypted:	false
SSDEEP:	3:YGKSHvANxm0KBRqSABHY:YGKgOxm0HxY
MD5:	06FCFF9AD2CFBF648406A13875BD7E38
SHA1:	1C3620D1038C1578A3B5E21E80C0523123E1E304
SHA-256:	9A970E1A236FE3E8F4A13AC7FF4E00C30809380E97B856FF6575BC2A38BBBDD6
SHA-512:	DC781A227E30ED8C62D42029B2E81100CFF50D1991FF577A2F17C1039533E7A84596121A43E627D821D9F4804A6E88A9EBE8635C558E01F72595BB4A59DA75C1
Malicious:	false
Reputation:	low
Preview:	{"code":400,"message":"HTTP method not allowed"}

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	831350
Entropy (8bit):	4.620203417666525
Encrypted:	false
SSDEEP:	12288:oimqQPgH8T4J2+pTuyfPEWEmUVlHybZeb391Kl4Af7eS:WqQPlT4JVREDSbs9a3
MD5:	AFF43D100A7B0BFE519484F35DF3813D
SHA1:	EFF898B0AF489D3D2B195F640513B3CD20A15065
SHA-256:	1C768E4913EEACCC4857E9BBAFAA354AED1B0379B4C8462CE158484BDAFA8AFF
SHA-512:	7B675A5F7333842E2303A76BE0EF734116E66539536059B148DD2756390A1C361D25451C6D3C8DAB696E3A362644AA8427808BD4DA09E59084AB9C8141596ABE
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/packs/js/login-a860e00a8fd55872cfa8.js
Preview:	(self.webpackChunklogin=self.webpackChunklogin\|\|[]).push([[535],{9746:function(e,a,i){var r={"./copy_input_to_clipboard_component.js":1390,"./mfa/backup_code_entry_component.js":1644,"./mfa/verification_form_component.js":6111,"copy_input_to_clipboard_component.js":1390,"mfa/backup_code_entry_component.js":1644,"mfa/verification_form_component.js":6111};function n(e){var a=s(e);return i(a)}function s(e){if(!i.o(r,e)){var a=new Error("Cannot find module '"+e+"'");throw a.code="MODULE_NOT_FOUND",a}return r[e]}n.keys=function(){return Object.keys(r)},n.resolve=s,e.exports=n,n.id=9746},1390:function(e,a,i){"use strict";i.r(a);var r=i(9932);function n(e){var a=e.currentTarget,i=a.dataset.clipboardText,r=a.ariaLabel,n=a.querySelector("[data-target=default-icon]"),s=a.querySelector("[data-target=success-icon]"),o=a.querySelector("[data-target=failure-icon]");function t(e,i){var s=i.label;a.ariaLabel=s,n.style.display="none",e.style.display="block",setTimeout((function(){a.ariaLabel=r,n.style.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65397)
Category:	downloaded
Size (bytes):	1093044
Entropy (8bit):	5.1388981435891985
Encrypted:	false
SSDEEP:	12288:cuBaK8qSBktHL7cbs9E8mWKttJx/PfXRTAMw60FJIW9hDrk5Xf:cI2bx8mWKtt//xTAx60UYDI
MD5:	28BED5795DD5B1C777AF204BE30F8A13
SHA1:	4D0617306AD497FC3243E738862214AC6BDCCCE7
SHA-256:	28B4B803A0CFE7298D69FC122E25F07C5795EA266A88DA6934FF7AB1847C16F7
SHA-512:	1348BCB5C19A47464DA2B62935C35D4B0608A179981149ADAA4F9102E1459E0976AA2D540C9331DC021525D837C604CEFFF4A81E041DEA8D13740C34208E9DB8
Malicious:	false
Reputation:	low
URL:	https://ab5ddfb19446.87d96309.us-east-2.token.awswaf.com/ab5ddfb19446/33b184b1a0f1/challenge.js
Preview:	/! <!-@preserve AWS WAF Integration Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html>--> /.var a2_0x2a53=['2.5.29.35','__values','sent','node','tag','RSAES-PKCS1-V1_5','signum','__generator','toByteArray','copies','__spreadArray','ArrowRight','signatureOid','issued','Invalid\x20Certificate\x20message.\x20Message\x20too\x20short.','Cannot\x20read\x20notBefore/notAfter\x20validity\x20times;\x20they\x20were\x20not\x20provided\x20as\x20either\x20UTCTime\x20or\x20GeneralizedTime.','Kozuka\x20Gothic\x20Pr6N\x20M','Message\x20is\x20too\x20long\x20to\x20encrypt.','componentBits','utf8','BulkCipherAlgorithm','No\x20server\x20certificate\x20provided.\x20Not\x20enough\x20security.','fp2','Arno\x20Pro\x20Light\x20Display','bytesToIPv6','Unexpected\x20message.','timeout','fillWithByte','getElementsByTagName','1.2.840.113549.1.7.5','{44BBA855-CC51-11CF-AAFA-00AA00B6015F}','certIssuerUniqueId','heartbeat','forge','blobExecute','setPrototypeOf','00000000

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	4.084962500721157
Encrypted:	false
SSDEEP:	3:PPs+Y:Xsn
MD5:	1D35695326801C38EA1B1541056007A3
SHA1:	BADABD98CD36206CB998E3A47816C6F3C617A93D
SHA-256:	A65FE687E726A567EB006E34F3880F6FD45345D29B4C7FF8A39D469AC9D5A3AB
SHA-512:	ED260F032B2F7B3B68D078726FA0D13F207C900DAF726F0A52163DB7F682BB075D64E03AA1D814C294BF69EB83A560D7A124790E740F740F987D5A0B9603DDC2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlXFPzOAbHQ1RIFDShLLYk=?alt=proto
Preview:	Cg4KDA0oSy2JGgUImgEYAg==

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1099)
Category:	downloaded
Size (bytes):	18851
Entropy (8bit):	4.912535418493624
Encrypted:	false
SSDEEP:	384:DSSrLeP3CROu3SgzbdD1DD+WaWAylJ+v3R9jnfsQDy0rhzbWExEpOKcbsLKgUC8:DSSrLePyROeS+bdD1DjaWAc+voX0rhzz
MD5:	E5A30356D334AAD14C66DF3FB400A407
SHA1:	09E2D232B4DE2253342C9AE6F3599D10894D60A5
SHA-256:	C60F4649CE4F564DDF7F73FE5C8B033C0354C6E9D995EF17B0F10130D5A5CC86
SHA-512:	F7F2526FEAB18AEE6974BF063085B8350295C0F6FE7E35D24352AA98E16B675B4CB3740D910FF228410ECE9395C3DF0D5F13ADB85EC8ED233788C8B2617D3B4A
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/password_reset/new
Preview:	<!DOCTYPE html>.<html class="">. <head>. <title>Planning Center - Login</title>. <meta content="Login" name="apple-mobile-web-app-title"/>. <meta content="Log in to your church's Planning Center account." name="description"/>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <meta property="og:logo" content="https://login.planningcenteronline.com/assets/planning_center_1200px-2117eac95c17636782f0621c47c26215c24ca14c98c68f5df697be175b625429.png" size="1200x1200">. generics -->.<link rel="icon" href="https://login.planningcenteronline.com/assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png" sizes="16x16">.<link rel="icon" href="https://login.planningcenteronline.com/assets/favicon-57-9126e33705cd9c9a32ff5800bead92dbbb182871fd7712b1b8ff34fbdf91f820.png" sizes="57x57">.<link rel="icon" href="https://login.planningcenteronline

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.305747569779013
Encrypted:	false
SSDEEP:	12:6v/781PenzlHAOn95TDNUwhk28IzBXi5IRyQEcvHjMCIpnJzhAQtq/aIWI2Gh6Dn:FsC0JNphH8WAIUQp6hTqancMn
MD5:	BD6631693305788629846DDE0C3FEFF2
SHA1:	3FD1201E65DC497506E30C578E2C91C7C8999697
SHA-256:	AB3413CF5ACD9241C2A1AACA978203802050FFA65DFA651F22B058718009490C
SHA-512:	1BF2082909F98A92FBF83B1302FE06C2114397C60552CB9C5ABD173BC352EEEC560A26741EE2D2BD6B0898D4244C59CE6327BF36F8C771C29C3BB7972550C23C
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png
Preview:	.PNG........IHDR................a....gAMA......a....8eXIfMM........i..............................................S.....IDAT8.}S=kTA.=g.&.... ".&1....Y..."..?.H...lbc-..ULaaec#n.."ZDB.(.1".A0h.._..}s...o.{d..{.9g....U.j..\..8.A...\|-.9f..O3........S..$(.....$.\!..apwu6.....J.....QW..g...\...^..r..\5.....N.....Y`.h0..v...L+....3..0..`...p.A.#...N_.G)l...7k...!.8@T...g........(.M`[...%.......xm9.D:.W...H...9'....61...;...`.\|.....<.R..q.^..y..&...bv... F.9hll....(/[..s...\|...:......q]02].!...P.)..1..x.V.*.........7....(@8AZ.L,.....5%>.b9....J.88%..A...ApT...W..wuw>]..6...;..&.......IEND.B`.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1586)
Category:	downloaded
Size (bytes):	1643
Entropy (8bit):	5.254175489746957
Encrypted:	false
SSDEEP:	48:fhTBJwM4qfrI1olTxJHJk0iQTmSZa/AIBjp:zZBfrx1WdKEp
MD5:	727B7ADC717C26801750893612C3CFB6
SHA1:	6C20CCDEC25D3BF71CF31259AF83F88B0C1DBA4E
SHA-256:	0018A15A5EF2D03B1F295770A87818BAE2D6315B29D21814674AF70C12DEC37D
SHA-512:	7E1A233BBC5B0CCDE24D3E0483C19EA71F2748DD471014D15C6EDA0C62061DFC2D88B832EDA928D2C1DE6CCDA36E65ECD4A6E61FECE860D78392DB6F7BC64451
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/packs/js/runtime-461b1b74cc572f890c8f.js
Preview:	!function(){"use strict";var n,e={},r={};function t(n){var o=r[n];if(void 0!==o)return o.exports;var i=r[n]={exports:{}};return e[n].call(i.exports,i,i.exports,t),i.exports}t.m=e,n=[],t.O=function(e,r,o,i){if(!r){var u=1/0;for(a=0;a<n.length;a++){r=n[a][0],o=n[a][1],i=n[a][2];for(var f=!0,c=0;c<r.length;c++)(!1&i\|\|u>=i)&&Object.keys(t.O).every((function(n){return t.O[n](r[c])}))?r.splice(c--,1):(f=!1,i<u&&(u=i));if(f){n.splice(a--,1);var l=o();void 0!==l&&(e=l)}}return e}i=i\|\|0;for(var a=n.length;a>0&&n[a-1][2]>i;a--)n[a]=n[a-1];n[a]=[r,o,i]},t.n=function(n){var e=n&&n.__esModule?function(){return n.default}:function(){return n};return t.d(e,{a:e}),e},t.d=function(n,e){for(var r in e)t.o(e,r)&&!t.o(n,r)&&Object.defineProperty(n,r,{enumerable:!0,get:e[r]})},t.g=function(){if("object"===typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(n){if("object"===typeof window)return window}}(),t.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.321854365656768
Encrypted:	false
SSDEEP:	3:YGKSHvANxm0KBRqSABHY:YGKgOxm0HxY
MD5:	06FCFF9AD2CFBF648406A13875BD7E38
SHA1:	1C3620D1038C1578A3B5E21E80C0523123E1E304
SHA-256:	9A970E1A236FE3E8F4A13AC7FF4E00C30809380E97B856FF6575BC2A38BBBDD6
SHA-512:	DC781A227E30ED8C62D42029B2E81100CFF50D1991FF577A2F17C1039533E7A84596121A43E627D821D9F4804A6E88A9EBE8635C558E01F72595BB4A59DA75C1
Malicious:	false
Reputation:	low
Preview:	{"code":400,"message":"HTTP method not allowed"}

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1099)
Category:	downloaded
Size (bytes):	20220
Entropy (8bit):	4.992493410183509
Encrypted:	false
SSDEEP:	384:DSSrLeP3CROu3SqbdD1DD+WaWAylJ+v3R9jnfsQDy0rhzbWExE2vo8j/vdXOKcbd:DSSrLePyROeSqbdD1DjaWAc+voX0rhzA
MD5:	F561D387E46CDF10A9F98F0DB94127C9
SHA1:	E5217FB04329F689FD8B975AD4921CDE3624784C
SHA-256:	912FC7FD962CC5AB875548290FC74BC421610DF49A6765FA188B03552E73338D
SHA-512:	BD6D0520D318B71970F4285D529477A5B1E662622982459A165873551B8ED8890115F9DF85AC81D91B2B7483AA45B1D2B58B2D7AEB40159DED1380B2E7C6F301
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/login/new
Preview:	<!DOCTYPE html>.<html class="">. <head>. <title>Planning Center - Login</title>. <meta content="Login" name="apple-mobile-web-app-title"/>. <meta content="Log in to your church's Planning Center account." name="description"/>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <meta property="og:logo" content="https://login.planningcenteronline.com/assets/planning_center_1200px-2117eac95c17636782f0621c47c26215c24ca14c98c68f5df697be175b625429.png" size="1200x1200">. generics -->.<link rel="icon" href="https://login.planningcenteronline.com/assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png" sizes="16x16">.<link rel="icon" href="https://login.planningcenteronline.com/assets/favicon-57-9126e33705cd9c9a32ff5800bead92dbbb182871fd7712b1b8ff34fbdf91f820.png" sizes="57x57">.<link rel="icon" href="https://login.planningcenteronline

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.3040470120677385
Encrypted:	false
SSDEEP:	3:ZuqshZNDrMPobI:Zuqs17bI
MD5:	D30DA8F9B670D9FFDB88C607E50E175C
SHA1:	9867DDE68BED3C41AA2BFA5769BB9B196F03406E
SHA-256:	26954C11BDFACE7C95522DF4041B2FCE1CAF962798A1748931F07063648DBD7A
SHA-512:	CBAF0D76961255E2EBB7D8424BB8250BDE5F85C2165D6C2ADD75AE681A413458E61B484CD664E8E67424AAC9892C2140CA300DAEB117E670A4734A572771B63E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmgRhb9gZgwuxIFDShLLYkSBQ3OQUx6?alt=proto
Preview:	CiIKEw0oSy2JGgQICRgBGgQIVhgCIAEKCw3OQUx6GgQISxgC

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	134419
Entropy (8bit):	4.135083554296978
Encrypted:	false
SSDEEP:	1536:6TQd2th09xjz1suA9nVbskvh7I5eUlRUs4Is4Is4na0mr2H6Jg6fKlNZeH6Fn7e8:Z/I9eUJD4y
MD5:	6BE2C793DBF420E876D30957119DC47B
SHA1:	6E40B24D80F3F113E7BAA4B0980C9178DF8141FD
SHA-256:	DD391937B5B62C0A9444F516305E27B214B71B8FB529AF5E9C6354627750C34E
SHA-512:	98C9766D7C360F17FB964B99448F2705DF066C5B0F2CF6A6208A0B5A9DD7DB67ADDB8AF8756214A7B3DE84D760AD616359A1EF8C8721F4F1E7FBCB65FA40F3C3
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/assets/@planningcenter/icons/sprites/general-45fb8eeff447e73ce56b2ccf04643bb3bf4672a4ed64f409e42f456a38874f8a.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. .<symbol id="bell" viewBox="0 0 16 16">. <path d="M15.2327 11.506L13.3279 9.23401V5.817C13.3366 4.39379 12.7806 3.0252 11.7816 2.01153C10.7827 0.997861 9.42244 0.421894 7.99938 0.410004C6.5765 0.422158 5.21654 0.99824 4.2178 2.01188C3.21907 3.02553 2.66312 4.39396 2.67191 5.817V9.23401L0.767103 11.505C0.578314 11.728 0.457357 12.0004 0.418549 12.29C0.379741 12.5795 0.424707 12.8742 0.548124 13.139C0.664092 13.4035 0.854941 13.6282 1.09713 13.7855C1.33931 13.9428 1.62223 14.0257 1.91099 14.024H5.69061C5.87469 14.4861 6.19316 14.8824 6.60484 15.1616C7.01652 15.4408 7.50248 15.59 7.99988 15.59C8.49728 15.59 8.98324 15.4408 9.39493 15.1616C9.80661 14.8824 10.1251 14.4861 10.3092 14.024H14.0908C14.3791 14.0248 14.6614 13.9415 14.903 13.7843C15.1447 13.6271 15.3354 13.4029 15.4516 13.139C15.5752 12.8744 15.6203 12.5799 15.5815 12.2904C15.5426 12.0009 15.4216 11.7287 15.2327 11.506Z"/>.</symbol>..<symbol

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	4.558225956474029
Encrypted:	false
SSDEEP:	24:hYermamca1yanyzHscfYyaFHpwERTNadNEkj:HOXmdyHGMNanzj
MD5:	5CA1A1BB3FD2BA98021FF72CA34022B5
SHA1:	F09F709AD6A7AEEA976CE42078C1110186E2BDD0
SHA-256:	CFA51E2EC318389C00CED335B278B9B8876618CF5845C109FD2F00155BDE0C50
SHA-512:	48E72CD50203D918F180B707066F43E3A162E36B32FC523F7DE5748F56AEDD6827226765841E202EAF754B8183302CBA6AD06D0957793C2419F151AFC8AB1FE2
Malicious:	false
Reputation:	low
URL:	https://pco-cross-storage.s3.amazonaws.com/hub.html
Preview:	<!DOCTYPE html>.<html>. <head>. <script>. var source;. var origin;.. window.addEventListener('message', receiveMessageFromParent, false);. window.addEventListener('storage', receiveMessageFromAnotherWindow, false);.. function receiveMessageFromParent(event) {. source = event.source;. origin = event.origin;. . Object.keys(event.data).forEach(function(key) {. window.localStorage.setItem(key, event.data[key]);. });. }.. function receiveMessageFromAnotherWindow(event) {. dispatchMessageToParent(event.key, event.newValue);. }.. function dispatchMessageToParent(key, newValue) { . if (source && origin) {. var message = {}. message[key] = newValue. source.postMessage(message, origin);. }. }. </script>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (534)
Category:	downloaded
Size (bytes):	7587
Entropy (8bit):	4.859029394447213
Encrypted:	false
SSDEEP:	192:LnCr6cKC5W3yRP8k8sexTsDMNDMlh5guRXCxA3/q7tbfzL:LCrDWCRP8rogNglh5fRXrqfv
MD5:	A9AECE3CF02E139409E53A5BF97EF8A0
SHA1:	B86D9E697C6A8113C14B5DD7B9A40E0B6F310B7C
SHA-256:	56C2FE9673D68B5FCEECB335BB0FC320D8C35AEA17D47D0980CBBB296DCB4570
SHA-512:	3707EF50F07C144FF587E0E070149D1C4F9C3B406FDC2FBC8756CD36B760637DB82154200A62272709D29B7D1714605D71FAEAD8EE581A886BD19CFA25A07F3D
Malicious:	false
Reputation:	low
URL:	https://login.planningcenteronline.com/assets/pco/page_expired/manifest-c88201c22050a32daa4c0109df080c4d1076a43dad55e1d46fc8b5539095ef00.js
Preview:	"use strict";..function _typeof(obj) { "@babel/helpers - typeof"; if (typeof Symbol === "function" && typeof Symbol.iterator === "symbol") { _typeof = function _typeof(obj) { return typeof obj; }; } else { _typeof = function _typeof(obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; }; } return _typeof(obj); }..function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); keys.push.apply(keys, symbols); } return keys; }..function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(Object(source), true).forEach(function (key) { _defineProperty(target, key, source[key]); }); } else if (Obj

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 19:20:45.999439955 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:20:45.999448061 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:20:46.077570915 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:20:52.243258953 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.243290901 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.243397951 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.243750095 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.243782043 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.243869066 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.243982077 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.243997097 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.244142056 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.244153976 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.481111050 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.481285095 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.483300924 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.483316898 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.483788013 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.483798981 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.484797955 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.484868050 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.485373020 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.485446930 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.486774921 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.487001896 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.498497963 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.498667002 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.498672962 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.498687983 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.549371958 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.549379110 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.549388885 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.592381954 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.779858112 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.780239105 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.780313015 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.780416965 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.780428886 CEST	443	49710	108.139.15.59	192.168.2.5
Apr 25, 2024 19:20:52.780440092 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.780484915 CEST	49710	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:20:52.899583101 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:52.899631977 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:52.899724007 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:52.899976969 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:52.899996042 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.125121117 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.131903887 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.131943941 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.133397102 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.133491993 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.134673119 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.134753942 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.134933949 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.134943008 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.186980963 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.416277885 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.416572094 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.416640997 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.417278051 CEST	49713	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.417295933 CEST	443	49713	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.425740004 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.425767899 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.425846100 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.426104069 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.426117897 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.650890112 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.651803017 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.651839018 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.652328014 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.653893948 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.653979063 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.686723948 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.728116989 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.949978113 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.950007915 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.950026989 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.950057030 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.950074911 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.950099945 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.950114012 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.950144053 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.954582930 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.954638004 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:53.957444906 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.957499981 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:53.957550049 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.071064949 CEST	49714	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.071089029 CEST	443	49714	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.141246080 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.141264915 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.141366005 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.142668009 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.142703056 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.142770052 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.143949986 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.143968105 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.145418882 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.145446062 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.158926010 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.158936977 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.159020901 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.160355091 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.160394907 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.160468102 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.163985968 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.164000034 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.164226055 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.165904999 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.165920019 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.166568041 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.166593075 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.167519093 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.167547941 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.167685986 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.168673992 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.168688059 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.169519901 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.169538975 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.276721954 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:20:54.276753902 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:20:54.277013063 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:20:54.277677059 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:20:54.277694941 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:20:54.295449018 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.295527935 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.296452999 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.301805973 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.301851988 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.377372980 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.378268957 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.384311914 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.384321928 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.384902954 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.387025118 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.387036085 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.387528896 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.387862921 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.387948990 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.388993025 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.389086008 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.389096022 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.389157057 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.389919043 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.390198946 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.390204906 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.391058922 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.391124010 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.391580105 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.391628981 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.391746044 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.400029898 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.400543928 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.402745008 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.402757883 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.402966976 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.402978897 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.403387070 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.403716087 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.403728962 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.404423952 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.404433012 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.404506922 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.404546022 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.405169964 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.405175924 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.405230045 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.405282974 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.405646086 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.405790091 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.406018019 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.406024933 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.406260014 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.406267881 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.406845093 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.406919956 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.407099009 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.407104969 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.432116985 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.432127953 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.432151079 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.436444998 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.436451912 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.451829910 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.451869011 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.451874018 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.484766006 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.517483950 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:20:54.517951012 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:20:54.517973900 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:20:54.519589901 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:20:54.519699097 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:20:54.521202087 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:20:54.521296024 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:20:54.537957907 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.538285017 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.538319111 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.539338112 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.539428949 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.541121960 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.541205883 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.541557074 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.541583061 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.575974941 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:20:54.575984001 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:20:54.590823889 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.599260092 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.599374056 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.599440098 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.599468946 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.599592924 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.599687099 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.602036953 CEST	49715	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.602062941 CEST	443	49715	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.610605001 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.620251894 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.623815060 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:20:54.623838902 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.623959064 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.624455929 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.626503944 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.626574039 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.626580000 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.626606941 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.626629114 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.626652956 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.627362013 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.627408028 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.627443075 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.627454042 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.627490044 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.629015923 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.629199982 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.629602909 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.632569075 CEST	49719	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.632575035 CEST	443	49719	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.635166883 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.635174990 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.635204077 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.635221958 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.635231018 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.635232925 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.635251045 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.635281086 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.635294914 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.635319948 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.642466068 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.642476082 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.642493963 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.642510891 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.642534971 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.642569065 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.642575979 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.642581940 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.642635107 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.642671108 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.642694950 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.642702103 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.642716885 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.642759085 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.645658970 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.645705938 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.645767927 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.645796061 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.645826101 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.655395985 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.655405045 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.655438900 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.655518055 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.655529976 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.655544996 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.660073996 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.660105944 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.660161018 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.660178900 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.660204887 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.660937071 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.660959005 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.661031961 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.661041975 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.686676025 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.701724052 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.701725006 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.701816082 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.729113102 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.729167938 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.729212999 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.729229927 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.729259968 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.729283094 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.729295969 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.729396105 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.729969978 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.732270002 CEST	49716	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.732292891 CEST	443	49716	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.739752054 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.739759922 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.739789009 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.739801884 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.739835024 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.739844084 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.739887953 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.742468119 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742489100 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742530107 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742548943 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742552996 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.742578983 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742595911 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.742624998 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.742644072 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742656946 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742703915 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742702961 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.742718935 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742733002 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.742750883 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.742779970 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.755649090 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.755724907 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.755832911 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.756576061 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.756614923 CEST	443	49722	18.155.1.14	192.168.2.5
Apr 25, 2024 19:20:54.756639957 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.756717920 CEST	49722	443	192.168.2.5	18.155.1.14
Apr 25, 2024 19:20:54.758255959 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.758263111 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.758287907 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.758327007 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.758333921 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.758363962 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.761030912 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.761092901 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.761146069 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.761158943 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.761225939 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.761255980 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.761320114 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.761321068 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.761324883 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.761347055 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.778067112 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.778079987 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.778182030 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.778189898 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.780987978 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.781008959 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.781048059 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.781070948 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.781085014 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.781454086 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.781476021 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.781512022 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.781522989 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.781539917 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.831741095 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.831746101 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.832124949 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.841219902 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.841226101 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.841253996 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.841279030 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.841279030 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.841342926 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.841351032 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.841396093 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.842792034 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.842803001 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.842820883 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.842828989 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.842865944 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.842875957 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.842916012 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.844136953 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.844146967 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.844199896 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.844207048 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.844224930 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.844259977 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.844274998 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.844294071 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.856969118 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.856990099 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.857007980 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.857022047 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.857065916 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.857074022 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.857140064 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.857141018 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.857147932 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.857183933 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.859149933 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.859170914 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.859226942 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.859240055 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.859262943 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.859283924 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.871067047 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.871081114 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.871170998 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.871176958 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.871215105 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.873197079 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.873218060 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.873219967 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.873239040 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.873248100 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.873287916 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.873295069 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.873358011 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.873368979 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.873398066 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.873415947 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.877942085 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.878000975 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.878010988 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.878024101 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.878082037 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.878237009 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.878294945 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.878300905 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.878334999 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.880821943 CEST	49717	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.880832911 CEST	443	49717	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.882134914 CEST	49718	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.882155895 CEST	443	49718	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.888381004 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.888411045 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.888463020 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.888472080 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.888498068 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.902308941 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.902334929 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.902385950 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.902393103 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.902435064 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.915894985 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.915914059 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.915957928 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.915966034 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.915991068 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.931134939 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.931159973 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.931222916 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.931231976 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.955094099 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.955112934 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.955157042 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.955168009 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.955194950 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.964816093 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.964838028 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.964874983 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.964883089 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.964917898 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.975256920 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.975275040 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.975322962 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.975331068 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.975370884 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.982836008 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.982867956 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.982897997 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.982903004 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.982933998 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.992538929 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.992557049 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.992599964 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:54.992609978 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:54.992639065 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.002574921 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.002594948 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.002656937 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.002667904 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.010226965 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.010255098 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.010292053 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.010301113 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.010350943 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.019546032 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.019583941 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.019618034 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.019629002 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.019658089 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.024501085 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.024533033 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.024604082 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.026923895 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.026942968 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.027923107 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.027931929 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.027991056 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.027998924 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.035478115 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.035511017 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.035545111 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.035553932 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.035587072 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.043025970 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.043051004 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.043083906 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.043093920 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.043127060 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.050890923 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.050916910 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.050960064 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.050967932 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.051001072 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.052020073 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.052078962 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.052084923 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.052141905 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.059379101 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.059402943 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.059465885 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.059474945 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.059539080 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.065795898 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.065815926 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.065864086 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.065881968 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.065910101 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.065927982 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.071299076 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.071319103 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.071357012 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.071366072 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.071393013 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.071410894 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.076344013 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.076364040 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.076419115 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.076426029 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.076776028 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.081723928 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.081743956 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.081783056 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.081789017 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.081821918 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.081837893 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.087306023 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.087327957 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.087369919 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.087376118 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.087402105 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.087418079 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.092437983 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.092457056 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.092490911 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.092497110 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.092539072 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.096323013 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.096352100 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.096379995 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.096384048 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.096424103 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.096441031 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.097387075 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.097439051 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.101999044 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.102020979 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.102077007 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.102085114 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.106713057 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.106740952 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.106770992 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.106781960 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.106822968 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.111090899 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.111112118 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.111155033 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.111164093 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.111206055 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.115694046 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.115719080 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.115751982 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.115760088 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.115803003 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.120358944 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.120379925 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.120433092 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.120448112 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.124759912 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.124784946 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.124816895 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.124823093 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.124867916 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.128649950 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.128680944 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.128711939 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.128716946 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.128762007 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.132329941 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.132356882 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.132389069 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.132394075 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.132436037 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.133141994 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.133198977 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.137171030 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.137197971 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.137258053 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.137264967 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.137281895 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.137300968 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.141052961 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.141103983 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.141124010 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.141129971 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.141161919 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.141179085 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.144706964 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.144726038 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.144761086 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.144768000 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.144798040 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.144814014 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.148674965 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.148694038 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.152209997 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.152236938 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.156027079 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.160132885 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.162610054 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.162622929 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.162703991 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.162985086 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.163024902 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.163058996 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.163064957 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.163093090 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.163110018 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.163263083 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.166953087 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.166974068 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.167059898 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.167068005 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.167216063 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.170464039 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.170483112 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.170517921 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.170523882 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.170564890 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.172889948 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.172924995 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.172947884 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.172954082 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.172982931 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.172996998 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.173036098 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.173082113 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.173294067 CEST	49720	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:55.173305035 CEST	443	49720	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:55.261472940 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.261569977 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.301850080 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.301878929 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.302263975 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.342854977 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.396445990 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.396487951 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.396558046 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.396894932 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.396914005 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.607131958 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:20:55.607218027 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:20:55.669606924 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.684365988 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:20:55.716379881 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.779872894 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.779895067 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.786245108 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.786360979 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.792900085 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.793222904 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.793647051 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.793663979 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.842447042 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.862987995 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.904130936 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.948991060 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.949019909 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.949028969 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.949057102 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.949067116 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.949070930 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.949085951 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.949110031 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.949125051 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.949136972 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.949156046 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.970360994 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.970415115 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.970469952 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.970485926 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:55.970514059 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.970535040 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:55.973416090 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.973589897 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.973655939 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.973916054 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.973949909 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:55.973979950 CEST	49723	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:55.973998070 CEST	443	49723	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.009768963 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.009788990 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.009944916 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.010576963 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.010584116 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.058330059 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.058378935 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.058424950 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.058449030 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.058664083 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.079521894 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.079582930 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.079627037 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.079658031 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.079688072 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.079709053 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.102452993 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.102510929 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.102552891 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.102596998 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.102627039 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.102957964 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.127276897 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.127324104 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.127401114 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.127453089 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.127487898 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.127511024 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.134238958 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.134327888 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.194272041 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.194331884 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.194391012 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.194438934 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.194468975 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.194489956 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.198951960 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.198980093 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.199064970 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.206104994 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.206120968 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.212460041 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.212506056 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.212542057 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.212565899 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.212593079 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.212616920 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.227216005 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.227262974 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.227303028 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.227317095 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.227366924 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.235272884 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.235723019 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.235737085 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.237205029 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.237272024 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.238136053 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.238209009 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.238794088 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.238799095 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.245906115 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.245959044 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.245999098 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.246010065 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.246042967 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.246078968 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.261961937 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.261981964 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.262054920 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.262068033 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.262093067 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.262115955 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.275719881 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.275751114 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.275784969 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.275796890 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.275823116 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.275857925 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.278769016 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.290344000 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.290373087 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.290425062 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.290433884 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.290473938 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.306085110 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.306140900 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.306166887 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.306176901 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.306222916 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.306237936 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.318797112 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.318860054 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.318873882 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.318893909 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.318912983 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.318942070 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.329241991 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.329288006 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.329340935 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.329349995 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.329384089 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.329395056 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.339850903 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.339899063 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.339926958 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.339941978 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.339970112 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.340003967 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.350172997 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.350218058 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.350255966 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.350270987 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.350301981 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.350322962 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.359482050 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.359524965 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.359586000 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.359601974 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.359627008 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.359648943 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.369216919 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.369260073 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.369309902 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.369332075 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.369364977 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.372139931 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.376686096 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.376729965 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.376766920 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.376782894 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.376810074 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.385307074 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.385356903 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.385399103 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.385420084 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.385447025 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.394156933 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.394206047 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.394259930 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.394284964 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.394335032 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.403460026 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.403526068 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.403561115 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.403584003 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.403614044 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.411730051 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.411775112 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.411828041 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.411849022 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.411876917 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.418427944 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.418473959 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.418520927 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.418540955 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.418581009 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.425513983 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.425559044 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.425589085 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.425606012 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.425635099 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.428188086 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.428256989 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.429671049 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.429678917 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.429879904 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.431057930 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.432547092 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.432596922 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.432621002 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.432632923 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.432662010 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.439198971 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.439243078 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.439280987 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.439291954 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.439333916 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.444530010 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.444581985 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.444612026 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.444622040 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.444699049 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.450473070 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.450520992 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.450546026 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.450556040 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.450586081 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.455189943 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.455229998 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.455255985 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.455265045 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.455293894 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.460081100 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.460138083 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.460150003 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.460169077 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.460181952 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.460201979 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.460227013 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.465229988 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.465272903 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.465306997 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.465316057 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.465348959 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.465377092 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.470493078 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.470539093 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.470566034 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.470573902 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.470614910 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.470634937 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.475440025 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.475483894 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.475522041 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.475529909 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.475580931 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.475580931 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.475636959 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.475647926 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.475671053 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.475692987 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.475707054 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.475724936 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.475758076 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.476118088 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.479944944 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.480005980 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.480021954 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.480031967 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.480062962 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.480076075 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.484649897 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.484693050 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.484728098 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.484735966 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.484776974 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.484795094 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.488929987 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.488971949 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.489013910 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.489027023 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.489051104 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.489068985 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.493804932 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.493855000 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.493881941 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.493891001 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.493921995 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.493951082 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.494242907 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.494266987 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.494318008 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.494326115 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.494348049 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.498416901 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.498469114 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.498495102 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.498503923 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.498536110 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.498553991 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.502661943 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.502684116 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.502727032 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.502734900 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.502764940 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.502775908 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.506594896 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.506617069 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.506659031 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.506666899 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.506697893 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.506715059 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.510565042 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.510591984 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.510634899 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.510643959 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.510674000 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.510684967 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.514420033 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.514476061 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.514491081 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.514501095 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.514544964 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.518541098 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.518584013 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.518615961 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.518623114 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.518654108 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.518672943 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.521473885 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.521516085 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.521552086 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.521559000 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.521591902 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.525201082 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.525249004 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.525274038 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.525281906 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.525311947 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.529709101 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.529753923 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.529778004 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.529787064 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.529827118 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.533596992 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.533641100 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.533668995 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.533677101 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.533703089 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.534445047 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.534534931 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.534544945 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.534630060 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.534642935 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.538713932 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.538757086 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.538789034 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.538796902 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.538830042 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.538839102 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.541615009 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.541659117 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.541682005 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.541690111 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.541719913 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.541743040 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.545764923 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.545805931 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.545830965 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.545839071 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.545875072 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.545891047 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.549273968 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.549323082 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.549345016 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.549351931 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.549382925 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.549392939 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.552462101 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.552505970 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.552537918 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.552546024 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.552572966 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.552588940 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.555967093 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.556010008 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.556039095 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.556046963 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.556075096 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.556092024 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.559330940 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.559375048 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.559401035 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.559407949 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.559437990 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.559448004 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.562355995 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.562397957 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.562422037 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.562428951 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.562455893 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.562473059 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.565212011 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.565254927 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.565282106 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.565289021 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.565315962 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.565452099 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.568244934 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.568290949 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.568321943 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.568329096 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.568353891 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.568377018 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.572001934 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.572043896 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.572073936 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.572082043 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.572109938 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.572128057 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.574934006 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.574978113 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.574999094 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.575006962 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.575043917 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.575062037 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.577253103 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.577300072 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.577327967 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.577334881 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.577374935 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.577388048 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.578694105 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.578704119 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.578737020 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.578752995 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.578762054 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.578782082 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.578807116 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.579600096 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.579643011 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.579670906 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.579680920 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.579727888 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.582992077 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.583038092 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.583065033 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.583072901 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.583098888 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.583117962 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.585537910 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.585583925 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.585613012 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.585621119 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.585648060 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.585664988 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.588161945 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.588205099 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.588236094 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.588243008 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.588270903 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.588288069 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.588874102 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.588943958 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.588952065 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.588992119 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.589024067 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.589071035 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.589114904 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.589133024 CEST	443	49724	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:56.589143038 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.589232922 CEST	49724	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:56.597301006 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.597346067 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.597369909 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.597378969 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.597409964 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.617043972 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.617063046 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.617166996 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.617187977 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.646667957 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.646730900 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.646864891 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.647707939 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.647707939 CEST	49726	443	192.168.2.5	23.63.206.91
Apr 25, 2024 19:20:56.647727013 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.647737980 CEST	443	49726	23.63.206.91	192.168.2.5
Apr 25, 2024 19:20:56.663172007 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.678868055 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.678886890 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.678946972 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.678952932 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.679013014 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.693165064 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.693186045 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.693255901 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.693263054 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.693540096 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.707283974 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.707319021 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.707341909 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.707345009 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.707390070 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.714358091 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.714421988 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.714425087 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.714436054 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.714489937 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.714601994 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.714608908 CEST	443	49725	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:56.714617014 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:56.714653015 CEST	49725	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.084243059 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 19:20:57.084343910 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:20:57.250943899 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.250968933 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.251097918 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.251651049 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.251662970 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.270544052 CEST	49728	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.270580053 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.270641088 CEST	49728	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.271224022 CEST	49728	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.271239996 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.502484083 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.502870083 CEST	49728	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.502934933 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.503438950 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.504364014 CEST	49728	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.504455090 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.504650116 CEST	49728	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.516344070 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.519131899 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.519149065 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.522753000 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.522819996 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.537256956 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.537431955 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.537437916 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.537503958 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.537630081 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.548160076 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.591233969 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.591243982 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.638108015 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.722146988 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.722466946 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:57.722553968 CEST	49728	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.800684929 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.800896883 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.800955057 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.930219889 CEST	49727	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.930241108 CEST	443	49727	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.962450027 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.962482929 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.962637901 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.962878942 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:57.962892056 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:57.973074913 CEST	49728	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:57.973099947 CEST	443	49728	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:58.221936941 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:58.222381115 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:58.222398996 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:58.223027945 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:58.223700047 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:58.223804951 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:58.224095106 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:58.224142075 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:58.224190950 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:58.474061012 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:58.474298954 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:58.474366903 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:58.695014000 CEST	49730	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:58.695045948 CEST	443	49730	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:59.581233978 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:59.581267118 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:59.581403971 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:59.582845926 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:59.582865953 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:59.615446091 CEST	49732	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:59.615497112 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:59.615570068 CEST	49732	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:59.615858078 CEST	49732	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:59.615879059 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:59.726442099 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.726483107 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.726537943 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.726703882 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.726746082 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.726802111 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.727042913 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.727058887 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.727196932 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.727216005 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.851517916 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:59.852097034 CEST	49732	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:59.852117062 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:59.852854967 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:59.853323936 CEST	49732	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:59.853406906 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:59.853548050 CEST	49732	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:20:59.858221054 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:59.858484983 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:59.858505011 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:59.859694004 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:59.860028982 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:59.860193968 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:59.860199928 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:59.860227108 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:59.860249996 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:20:59.896121025 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:20:59.903296947 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:20:59.976296902 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.977353096 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.977384090 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.978806973 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.978873968 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.979443073 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.979521036 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.979738951 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.979748964 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.985126972 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.985316992 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.985346079 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.986191988 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.986262083 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.986839056 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:20:59.986893892 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:20:59.986972094 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.028299093 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.028310061 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.028320074 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.072634935 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:00.072798014 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:00.072855949 CEST	49732	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:00.073591948 CEST	49732	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:00.073611021 CEST	443	49732	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:00.075176954 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.115502119 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.115674973 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.115725994 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.116251945 CEST	49731	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.116274118 CEST	443	49731	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.230465889 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.230791092 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.230844975 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.231559038 CEST	49734	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.231583118 CEST	443	49734	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.249094009 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.249356985 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.249407053 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.249984980 CEST	49733	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.250008106 CEST	443	49733	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.250879049 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.250967979 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.251055956 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.252388954 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.252425909 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.346133947 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.346177101 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.346254110 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.346733093 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.346748114 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.514014006 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.514405012 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.514448881 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.515563965 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.516207933 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.516391993 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.516392946 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.560121059 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.562992096 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.603473902 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.603883982 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.603909016 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.604218006 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.604671955 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.604732990 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.604955912 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.605000019 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.605019093 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.773329973 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.773597002 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:00.773669958 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:00.860219002 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.860404968 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:00.860467911 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.994507074 CEST	49736	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:00.994530916 CEST	443	49736	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:01.000459909 CEST	49735	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:01.000529051 CEST	443	49735	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.005517006 CEST	49737	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:01.005589008 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.005675077 CEST	49737	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:01.005923033 CEST	49737	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:01.005955935 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.267328978 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.267694950 CEST	49737	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:01.267728090 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.268030882 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.268544912 CEST	49737	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:01.268610001 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.269025087 CEST	49737	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:01.312129974 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.544313908 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.544533968 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:01.544651031 CEST	49737	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:02.896219015 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:02.896321058 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:02.896392107 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:02.896958113 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:02.896995068 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:02.935833931 CEST	49737	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:02.935872078 CEST	443	49737	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.158154964 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:03.166064024 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:03.166142941 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:03.167327881 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:03.172657967 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:03.172874928 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:03.172892094 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:03.172928095 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:03.172983885 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:03.232131004 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:03.418076992 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:03.418762922 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:03.418839931 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:03.439229965 CEST	49738	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:03.439296961 CEST	443	49738	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:03.448257923 CEST	49739	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:03.448306084 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.448376894 CEST	49739	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:03.448704958 CEST	49739	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:03.448726892 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.711129904 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.711935997 CEST	49739	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:03.711994886 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.712946892 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.714236021 CEST	49739	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:03.714344025 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.714473963 CEST	49739	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:03.760119915 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.973656893 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.973861933 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:03.973927021 CEST	49739	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:03.978756905 CEST	49739	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:03.978801966 CEST	443	49739	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:04.516201973 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:04.516334057 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:04.516410112 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:21:04.597441912 CEST	49721	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:21:04.597464085 CEST	443	49721	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:04.597903013 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:04.597953081 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:04.598027945 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:04.598409891 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:04.598423958 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:04.644077063 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.644131899 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.644206047 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.644916058 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.644961119 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.645124912 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.645988941 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.646008015 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.646389961 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.646408081 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.861798048 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:04.862720013 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:04.862751961 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:04.863214016 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:04.863804102 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:04.863887072 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:04.864067078 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:04.864124060 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:04.864162922 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:04.870012045 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.870486975 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.870516062 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.870839119 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.871293068 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.871350050 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.871674061 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.871881962 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.872148037 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.872175932 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.872626066 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.872988939 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:04.873068094 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.912148952 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:04.984154940 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:05.122363091 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.122554064 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.122632980 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.123892069 CEST	49740	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.123949051 CEST	443	49740	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.134370089 CEST	49743	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:05.134401083 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.134479046 CEST	49743	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:05.135212898 CEST	49743	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:05.135229111 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.198247910 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:05.198272943 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:05.198293924 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:05.198367119 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:05.198381901 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:05.198424101 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:05.204251051 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:05.204313040 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:05.204319954 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:05.204364061 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:05.237379074 CEST	49742	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:05.237399101 CEST	443	49742	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:05.317228079 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.317257881 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.317368031 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.318201065 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.318216085 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.401326895 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.482438087 CEST	49743	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:05.482464075 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.483809948 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.487692118 CEST	49743	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:05.487879038 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.503747940 CEST	49743	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:05.548116922 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.571957111 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.668945074 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.669114113 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.669171095 CEST	49743	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:05.693943024 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.876254082 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.876275063 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.876697063 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.878371000 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.878426075 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:05.878940105 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:05.907974005 CEST	49743	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:05.908005953 CEST	443	49743	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:05.920119047 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:06.018282890 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:06.018665075 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:06.018754959 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:06.025134087 CEST	49744	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:06.025149107 CEST	443	49744	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:06.710629940 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:06.710670948 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:06.710887909 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:06.711636066 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:06.711651087 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:06.964253902 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:06.974421024 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:06.974474907 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:06.975404024 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:06.975485086 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:06.978319883 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:06.978389978 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:06.978602886 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:06.978620052 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:07.069858074 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.069905996 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.069987059 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.086488962 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.086515903 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.186928988 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:07.230072975 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:07.230142117 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:07.230197906 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:07.231275082 CEST	49746	443	192.168.2.5	16.182.40.97
Apr 25, 2024 19:21:07.231297016 CEST	443	49746	16.182.40.97	192.168.2.5
Apr 25, 2024 19:21:07.342202902 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.394315958 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.394382000 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.395749092 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.396749020 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.396955013 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.397274017 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.397360086 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.397459984 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.600837946 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.600908041 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:07.600971937 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.601608038 CEST	49747	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:07.601649046 CEST	443	49747	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.092581034 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.092673063 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.092755079 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.094180107 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.094212055 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.162141085 CEST	49754	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:08.162174940 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.162230015 CEST	49754	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:08.162517071 CEST	49754	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:08.162533045 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.359111071 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.361675978 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.361763000 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.363176107 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.363709927 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.364054918 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.364137888 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.364180088 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.364237070 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.410547972 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.491456985 CEST	49754	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:08.491472006 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.491871119 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.493649960 CEST	49754	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:08.493710041 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.494491100 CEST	49754	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:08.515839100 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:08.517378092 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:08.536123991 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.585899115 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.585932970 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.586005926 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.597624063 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.597635031 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.612435102 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.612529993 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.612591982 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.613390923 CEST	49753	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:08.613424063 CEST	443	49753	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:08.669003963 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.669275045 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.669337988 CEST	49754	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:08.674866915 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:08.676517963 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:08.695432901 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.696198940 CEST	49754	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:08.696237087 CEST	443	49754	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:08.740122080 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.827367067 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.831100941 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.831125021 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.832278967 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.851273060 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.851500034 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.895050049 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.913480997 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.913492918 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.913551092 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.913558960 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.913626909 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.913651943 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.913685083 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.913698912 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.913698912 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.913708925 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.913718939 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.913728952 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.916286945 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.916337967 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.916346073 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.916363955 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:08.916421890 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:08.985866070 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:09.198029041 CEST	49741	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:09.198100090 CEST	443	49741	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:09.314555883 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.314600945 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.314757109 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.314996004 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.315012932 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.358922005 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.359030962 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:09.359107971 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.359333992 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.359359980 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:09.463814020 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:09.463865042 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:09.464186907 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:09.468395948 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:09.468425035 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:09.570833921 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.571181059 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.571198940 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.571501017 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.572046041 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.572128057 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.572221041 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.616127014 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.619489908 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:09.619741917 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.619772911 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:09.620263100 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:09.621279001 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.621336937 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.621376038 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:09.686852932 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.687052011 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.800235987 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:09.800328970 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:09.819605112 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:09.819685936 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:09.820127010 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:09.820235014 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:09.820696115 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:09.820743084 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:09.820878029 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:09.820893049 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:09.833796024 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.833843946 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.833952904 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.834214926 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.834229946 CEST	443	49757	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:09.834239960 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.834270000 CEST	49757	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:09.883879900 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:09.883986950 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:09.884052992 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.885133982 CEST	49758	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:09.885174990 CEST	443	49758	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:10.186918974 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:10.186986923 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:10.189541101 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:10.189589024 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:10.189593077 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 25, 2024 19:21:10.189639091 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 25, 2024 19:21:10.424601078 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.424721956 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.424801111 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.425522089 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.425564051 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.686017036 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.686306000 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.686327934 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.686829090 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.687165976 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.687268019 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.687330008 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.687372923 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.687417030 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.947532892 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.947602034 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.947777987 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.948765039 CEST	49761	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:10.948807001 CEST	443	49761	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:10.954899073 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:10.954941034 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:10.955014944 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:10.955378056 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:10.955394030 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.019033909 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.019068003 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.019157887 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.019789934 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.019814014 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.021481991 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.064147949 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.204545975 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.204843998 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:11.204863071 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.205403090 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.205817938 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:11.205897093 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.206001997 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:11.230146885 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.230199099 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.230232000 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.230269909 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.230272055 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.230305910 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.230309010 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.230324030 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.230329037 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.230348110 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.230353117 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.230365992 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.230396032 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.230463982 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.236064911 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.236166000 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.236179113 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.236222029 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.236282110 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.237538099 CEST	49756	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.237554073 CEST	443	49756	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.243768930 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.248122931 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.252585888 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.252603054 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.252960920 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.253519058 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.253580093 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:11.278026104 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:11.299977064 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.300071001 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.300194025 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.300410032 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.300442934 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.443031073 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:11.462126970 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.462245941 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.464175940 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:11.473011971 CEST	49763	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:11.473037004 CEST	443	49763	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:11.553800106 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.554088116 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.554104090 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.554579020 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.554984093 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.555059910 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.555164099 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.596127033 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.715651035 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.810535908 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.810610056 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:11.810715914 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.811506033 CEST	49765	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:11.811523914 CEST	443	49765	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.366359949 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.366447926 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.366786957 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.367007017 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.367036104 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.625570059 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.625840902 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.625881910 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.626251936 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.626593113 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.626662970 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.626753092 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.626791954 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.626827002 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.888959885 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.889163971 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.889225960 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.890048027 CEST	49766	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:12.890064955 CEST	443	49766	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:12.895658016 CEST	49767	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:12.895739079 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:12.895886898 CEST	49767	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:12.896126986 CEST	49767	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:12.896162987 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.007265091 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.007292986 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.007424116 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.007740021 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.007766008 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.157744884 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.172036886 CEST	49767	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.172112942 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.172720909 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.173146963 CEST	49767	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.173250914 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.173448086 CEST	49767	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.220112085 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.265357018 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.265733957 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.265747070 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.266222954 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.266604900 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.266685009 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.266760111 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.266814947 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.266854048 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.423304081 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.423691034 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.423758984 CEST	49767	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.424988031 CEST	49767	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.425021887 CEST	443	49767	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.523941040 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.524190903 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.528229952 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.534373999 CEST	49768	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.534390926 CEST	443	49768	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.546205997 CEST	49769	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.546248913 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.546403885 CEST	49769	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.546710014 CEST	49769	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.546725035 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.753752947 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.753820896 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.753890991 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.754189014 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:13.754209995 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:13.804420948 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.804728985 CEST	49769	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.804744005 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.805210114 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.805810928 CEST	49769	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.805890083 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:13.806185961 CEST	49769	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:13.848118067 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.005450964 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.005810976 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.005839109 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.006350994 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.006756067 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.006850004 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.006942034 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.006998062 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.007152081 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.064551115 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.064894915 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.064963102 CEST	49769	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.065541983 CEST	49769	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.065552950 CEST	443	49769	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.259043932 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.259812117 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.259893894 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.260330915 CEST	49770	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.260360956 CEST	443	49770	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.269598961 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.269659996 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.269745111 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.270004034 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.270031929 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.479175091 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.479202032 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.479346991 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.479933023 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.479943991 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.527789116 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.528059006 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.528145075 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.528630972 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.529124022 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.529212952 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.529427052 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.576121092 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.580687046 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.728971958 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.729293108 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.729307890 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.729852915 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.730324984 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.730395079 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.730503082 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.730531931 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.730551004 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.778781891 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.788496017 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.788786888 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.788849115 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.789460897 CEST	49771	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.789474010 CEST	443	49771	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.983177900 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.983505011 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.983643055 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.983957052 CEST	49772	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:14.983968973 CEST	443	49772	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:14.989015102 CEST	49773	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.989059925 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:14.989160061 CEST	49773	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.989398003 CEST	49773	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:14.989417076 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.206085920 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.206118107 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.206269979 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.206751108 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.206762075 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.251688004 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.253285885 CEST	49773	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.253320932 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.253844976 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.254362106 CEST	49773	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.254446983 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.254738092 CEST	49773	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.296137094 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.465413094 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.465780020 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.465807915 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.466288090 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.466995001 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.467078924 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.467463970 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.467614889 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.467643976 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.510996103 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.511200905 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.511296988 CEST	49773	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.513797045 CEST	49773	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.513827085 CEST	443	49773	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.722434044 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.722615004 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.722706079 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.723494053 CEST	49774	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:15.723512888 CEST	443	49774	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:15.728116035 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.728146076 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.728262901 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.728509903 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.728528023 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.985857964 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.986195087 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.986212969 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.986741066 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.987315893 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:15.987416983 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:15.987488031 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.028119087 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.037722111 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.146852016 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.146898985 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.147172928 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.147607088 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.147619009 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.245527983 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.245677948 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.245762110 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.247121096 CEST	49775	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.247137070 CEST	443	49775	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.402714968 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.403088093 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.403117895 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.403415918 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.403717995 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.403769970 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.403872967 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.403903961 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.403934956 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.654196024 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.654383898 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.654455900 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.655117035 CEST	49776	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:16.655137062 CEST	443	49776	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:16.660424948 CEST	49777	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.660469055 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.660556078 CEST	49777	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.660819054 CEST	49777	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.660834074 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.924423933 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.925241947 CEST	49777	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.925262928 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.925769091 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.927051067 CEST	49777	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.927130938 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:16.927541971 CEST	49777	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:16.972115993 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:17.190494061 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:17.190650940 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:17.190726042 CEST	49777	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:17.193272114 CEST	49777	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:17.193294048 CEST	443	49777	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:17.472748995 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.472834110 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.472944021 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.474139929 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.474174976 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.729700089 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.730395079 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.730417013 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.730724096 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.731353998 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.731414080 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.731734991 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.731897116 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.731945038 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.986548901 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.986661911 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:17.986864090 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.987519979 CEST	49778	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:17.987559080 CEST	443	49778	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.357199907 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.357229948 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.357302904 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.357770920 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.357783079 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.609023094 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.609699011 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.609726906 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.610133886 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.610450983 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.610512018 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.610915899 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.610963106 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.610977888 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.619142056 CEST	49780	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:19.619168043 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:19.619226933 CEST	49780	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:19.619904995 CEST	49780	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:19.619914055 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:19.656949997 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.656970978 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.657043934 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.657831907 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.657845974 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.701441050 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.748133898 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.865812063 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.865843058 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.865901947 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.865937948 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.865953922 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.865999937 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.866619110 CEST	49779	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:19.866642952 CEST	443	49779	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:19.874722958 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:19.875063896 CEST	49780	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:19.875077963 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:19.875530005 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:19.880729914 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.880760908 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.880770922 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.880805969 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.880816936 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.880839109 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.880861044 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.880887032 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.880922079 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.880934000 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.883754969 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.883764982 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.883832932 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.883841991 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.883886099 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.885938883 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.915633917 CEST	49780	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:19.915798903 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:19.916187048 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.916202068 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.916635036 CEST	49780	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:19.916861057 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.917581081 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.917663097 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.923523903 CEST	49764	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:19.923556089 CEST	443	49764	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:19.960148096 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:19.965204000 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:20.135536909 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:20.135656118 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:20.135730028 CEST	49780	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:20.214438915 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.214474916 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.214675903 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.216327906 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.216341972 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.272886038 CEST	49780	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:20.272917986 CEST	443	49780	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:20.469712973 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.470005035 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.470026970 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.470732927 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.471106052 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.471189976 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.471317053 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.512121916 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.525970936 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.726615906 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.726814985 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.726974010 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.728424072 CEST	49782	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:20.728444099 CEST	443	49782	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:20.964277983 CEST	49783	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:20.964313030 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:20.964467049 CEST	49783	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:20.964867115 CEST	49783	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:20.964881897 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.224823952 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.237482071 CEST	49783	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:21.237518072 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.238164902 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.245764971 CEST	49783	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:21.245862961 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.246633053 CEST	49783	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:21.288120031 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.368818045 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.368915081 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.369050980 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.370646000 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.370682001 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.487901926 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.488183975 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.488259077 CEST	49783	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:21.498049021 CEST	49783	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:21.498080969 CEST	443	49783	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:21.629470110 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.629712105 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.629735947 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.630203962 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.630867004 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.630949974 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.631074905 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.631153107 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.631179094 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.893971920 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.894088984 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:21.894155979 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.895183086 CEST	49784	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:21.895203114 CEST	443	49784	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.258141041 CEST	49785	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.258230925 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.258338928 CEST	49785	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.259102106 CEST	49785	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.259140015 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.459114075 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.459197044 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.459279060 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.465380907 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:21:22.465461969 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:21:22.465528965 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:21:22.466464996 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.466496944 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.519510031 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.519787073 CEST	49785	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.519813061 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.520217896 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.523735046 CEST	49785	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.523802042 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.524125099 CEST	49785	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.525644064 CEST	49709	443	192.168.2.5	108.139.15.59
Apr 25, 2024 19:21:22.525669098 CEST	443	49709	108.139.15.59	192.168.2.5
Apr 25, 2024 19:21:22.568145037 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.725166082 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.725929976 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.725955963 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.726464987 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.726972103 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.727060080 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.727369070 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.727413893 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.727463007 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.784451962 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.784631968 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.784704924 CEST	49785	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.827581882 CEST	49785	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.827610016 CEST	443	49785	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.987123013 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.987236023 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.987302065 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.989126921 CEST	49786	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:22.989150047 CEST	443	49786	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:22.996393919 CEST	49787	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.996442080 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:22.996526003 CEST	49787	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.996805906 CEST	49787	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:22.996824980 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:23.247843027 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:23.248368979 CEST	49787	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:23.248397112 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:23.248868942 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:23.249484062 CEST	49787	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:23.249567032 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:23.249654055 CEST	49787	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:23.296116114 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:23.502474070 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:23.503057957 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:23.503115892 CEST	49787	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:23.504786015 CEST	49787	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:23.504807949 CEST	443	49787	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:30.564145088 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.564218044 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.564316034 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.567439079 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.567471981 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.608625889 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.652115107 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.799588919 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.800025940 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.800065994 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.801273108 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.802284002 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.802459002 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.826026917 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.826056004 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.826066017 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.826097012 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.826108932 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.826147079 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.826158047 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.826222897 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.826260090 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.826260090 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.826288939 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.831948996 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.832026958 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.832032919 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.832089901 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.845375061 CEST	49781	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.845422029 CEST	443	49781	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:30.852566004 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:30.959817886 CEST	49789	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:30.959861994 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:30.959983110 CEST	49789	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:30.960314989 CEST	49789	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:30.960333109 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:31.217560053 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:31.224775076 CEST	49789	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:31.224790096 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:31.225127935 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:31.227395058 CEST	49789	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:31.227463007 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:31.227986097 CEST	49789	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:31.272118092 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:31.485460043 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:31.485552073 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:31.485599041 CEST	49789	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:31.486376047 CEST	49789	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:31.486398935 CEST	443	49789	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.119081020 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.119133949 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.119456053 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.143579960 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.143610001 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.398444891 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.399312973 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.399374008 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.399743080 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.400414944 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.400489092 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.400634050 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.400708914 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.400747061 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.656852007 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.656932116 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.657026052 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.666413069 CEST	49790	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.666456938 CEST	443	49790	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.674169064 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.674225092 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.674573898 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.674907923 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.674926996 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.677491903 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:32.677510023 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:32.677570105 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:32.677817106 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:32.677830935 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:32.784986019 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.785079956 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.785176039 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.785492897 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.785522938 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.925115108 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:32.943286896 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:32.976551056 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:32.990550995 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.035099030 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.035114050 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.035237074 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.035243034 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.035692930 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.036163092 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.036237001 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.036334991 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.036375046 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.036406994 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.036581993 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.036972046 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.037074089 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.037166119 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.045325994 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.046005964 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.046022892 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.046489954 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.046969891 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.047039032 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.047182083 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.047213078 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.047269106 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.086569071 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.180912018 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.181009054 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.181072950 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.206675053 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.206908941 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.206959963 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.222109079 CEST	49791	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.222131014 CEST	443	49791	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.224061966 CEST	49792	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.224067926 CEST	443	49792	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.228765965 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.228835106 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.228918076 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.229315996 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.229347944 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.231144905 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.231177092 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.231241941 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.231453896 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.231470108 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.304528952 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.304719925 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.304789066 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.365952015 CEST	49793	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.365963936 CEST	443	49793	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.483905077 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.485804081 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.529952049 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.529970884 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.530145884 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.530184031 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.530745029 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.531254053 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.531320095 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.531358957 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.531692028 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.531729937 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.531780005 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.532061100 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.532159090 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.532310963 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.584569931 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.587945938 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.587985039 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.588047028 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.588885069 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.588901997 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.739728928 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.740427971 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.740554094 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.741625071 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.741784096 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.741842985 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.742810965 CEST	49794	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.742857933 CEST	443	49794	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.744961977 CEST	49795	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.744981050 CEST	443	49795	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.746104956 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.746125937 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.746186972 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.789886951 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:33.789923906 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:33.847143888 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.847445011 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.847465038 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.848639965 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.848942995 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.849112034 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:33.849159002 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.849247932 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:33.849343061 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.047287941 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.047597885 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.047646046 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.048017979 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.048485041 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.048691988 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.048974991 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.093558073 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.103665113 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.103776932 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.103894949 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.104373932 CEST	49796	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.104398012 CEST	443	49796	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.311357021 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.311532974 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.311587095 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.313307047 CEST	49797	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.313344955 CEST	443	49797	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.314423084 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.314454079 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.314580917 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.315242052 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.315253019 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.529875994 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.529912949 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.529979944 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.530497074 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.530512094 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.575246096 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.575790882 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.575855017 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.577136993 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.577579975 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.577768087 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.577783108 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.620141983 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.620652914 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.785366058 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.785665989 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.785686970 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.786847115 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.787332058 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.787508965 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.787719011 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.787807941 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:34.787889957 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:34.832156897 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.832524061 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.832704067 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.834290028 CEST	49798	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.834327936 CEST	443	49798	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.835405111 CEST	49800	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.835436106 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:34.835731030 CEST	49800	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.836464882 CEST	49800	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:34.836477041 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.038332939 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:35.038439035 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:35.038521051 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:35.093074083 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.113435030 CEST	49800	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.113446951 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.113868952 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.116739988 CEST	49800	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.116807938 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.116832018 CEST	49799	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:35.116853952 CEST	443	49799	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:35.117983103 CEST	49800	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.164115906 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.348033905 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.348274946 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.348332882 CEST	49800	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.349152088 CEST	49800	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.349165916 CEST	443	49800	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.349901915 CEST	49801	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.349941969 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.350029945 CEST	49801	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.350398064 CEST	49801	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.350415945 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.612806082 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.613153934 CEST	49801	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.613178968 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.613559961 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.613923073 CEST	49801	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.613985062 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.614097118 CEST	49801	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.660149097 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.875556946 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.875663042 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.875731945 CEST	49801	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.876471996 CEST	49801	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:35.876491070 CEST	443	49801	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:35.935178041 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:35.935259104 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:35.935338020 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:35.935647964 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:35.935683012 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.190987110 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.191730976 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:36.191807032 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.192306995 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.192842007 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:36.192842960 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:36.192878962 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.192944050 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:36.192945004 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.192996025 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.247625113 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:36.451944113 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.452049017 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.452581882 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:36.453433037 CEST	49802	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:36.453469992 CEST	443	49802	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:36.457633018 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.457675934 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.457896948 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.458014011 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.458034992 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.710732937 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.711268902 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.711307049 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.711813927 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.712188005 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.712299109 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.712372065 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.756128073 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.759771109 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.967278957 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.967369080 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:36.969157934 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.969512939 CEST	49803	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:36.969535112 CEST	443	49803	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:38.072115898 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.072159052 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.072380066 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.073235035 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.073254108 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.327960014 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.328260899 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.328291893 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.328762054 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.329090118 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.329168081 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.329248905 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.329296112 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.329328060 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.587069035 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.587188005 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.587240934 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.588109016 CEST	49804	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:38.588128090 CEST	443	49804	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:38.653371096 CEST	49805	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:38.653470039 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:38.653645039 CEST	49805	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:38.654251099 CEST	49805	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:38.654288054 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:38.912391901 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:38.914268970 CEST	49805	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:38.914330006 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:38.914824009 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:38.918220997 CEST	49805	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:38.918329000 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:38.919281006 CEST	49805	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:38.960122108 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:39.172487974 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:39.172604084 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:39.172672987 CEST	49805	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:39.174804926 CEST	49805	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:39.174844027 CEST	443	49805	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:40.247454882 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.247495890 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.247596979 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.248306990 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.248322010 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.502674103 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.502962112 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.502983093 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.503453970 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.504414082 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.504492044 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.504900932 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.504934072 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.504985094 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.560801029 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.560868025 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.560935020 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.561393976 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.561414957 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.761599064 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.761707067 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.761770010 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.789417982 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.806678057 CEST	49806	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:40.806709051 CEST	443	49806	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:40.807297945 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.807341099 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.808007956 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.808650970 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.808741093 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.811045885 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.852132082 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.861558914 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.993531942 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.993590117 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.993611097 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.993649006 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.993662119 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.993668079 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.993685007 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.993688107 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.993716002 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.993717909 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.993747950 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.993765116 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.996481895 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.996545076 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.996556044 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.996592999 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.996627092 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.996671915 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.996718884 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.996735096 CEST	443	49788	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:40.996745110 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:40.996782064 CEST	49788	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:41.268119097 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.268160105 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.268229008 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.269236088 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.269254923 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.350446939 CEST	49809	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:41.350476027 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.350596905 CEST	49809	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:41.351115942 CEST	49809	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:41.351129055 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.533308983 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.578552008 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.607939959 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.655560970 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.655597925 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.656126022 CEST	49809	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:41.656146049 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.656166077 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.656614065 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.658252001 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.658423901 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.659785986 CEST	49809	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:41.659861088 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.660340071 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.660573006 CEST	49809	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:41.708122015 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.708126068 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.809309959 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.809534073 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.809614897 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.810275078 CEST	49808	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:41.810312986 CEST	443	49808	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:41.890114069 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.890192032 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:41.890238047 CEST	49809	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:41.890806913 CEST	49809	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:41.890825033 CEST	443	49809	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:42.847111940 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:42.847145081 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:42.847199917 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:42.847578049 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:42.847587109 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.108717918 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.159555912 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.163587093 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.163598061 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.164294004 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.181888103 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.182111025 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.182116032 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.182194948 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.182249069 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.182346106 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.223542929 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.363082886 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.363192081 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.363248110 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.365784883 CEST	49810	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.365804911 CEST	443	49810	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.374545097 CEST	49811	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:43.374593973 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.374661922 CEST	49811	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:43.374922037 CEST	49811	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:43.374938965 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.627130985 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.632544041 CEST	49811	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:43.632627010 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.632987022 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.633593082 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.633652925 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.633745909 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.634577036 CEST	49811	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:43.634663105 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.635037899 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.635066032 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.635533094 CEST	49811	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:43.676120043 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.885950089 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.886260033 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.886300087 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.886627913 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.887006044 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.887089014 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.887171030 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.887216091 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:43.887250900 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:43.887382030 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.887480974 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:43.887548923 CEST	49811	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:43.888398886 CEST	49811	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:43.888416052 CEST	443	49811	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.142488003 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:44.142596006 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:44.142668009 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:44.143984079 CEST	49812	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:44.144005060 CEST	443	49812	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:44.154238939 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.154277086 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.154337883 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.154936075 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.154951096 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.413351059 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.413882017 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.413897038 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.414349079 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.415366888 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.415433884 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.415541887 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.456114054 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.465533018 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.676173925 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.676306963 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:44.676435947 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.677072048 CEST	49813	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:44.677092075 CEST	443	49813	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:52.583182096 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:52.583228111 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:52.583350897 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:52.586863041 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:52.586880922 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:52.591582060 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.591669083 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.591746092 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.593831062 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.593866110 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.616800070 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.664134026 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.799469948 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.799550056 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.799571037 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.799602985 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.799628973 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.799648046 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.799674034 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.818861961 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.818883896 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.818921089 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.818933964 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.818943977 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.818973064 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.818993092 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.818996906 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.819075108 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.819169044 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.822529078 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.828110933 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.828135967 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.828702927 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.846556902 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:52.878448009 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.884824991 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:52.884839058 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:52.885298014 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.885488033 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.888752937 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:52.914139032 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:52.916019917 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:52.916032076 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:52.916044950 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:52.916156054 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:52.916280985 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:52.939663887 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.940926075 CEST	49807	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:21:52.940937996 CEST	443	49807	18.155.1.25	192.168.2.5
Apr 25, 2024 19:21:52.971537113 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.108851910 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.108972073 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.109318018 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.177558899 CEST	49816	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.177584887 CEST	443	49816	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.253668070 CEST	49818	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.253710985 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.253868103 CEST	49818	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.254616976 CEST	49818	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.254626989 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.513000965 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.519792080 CEST	49818	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.519808054 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.520347118 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.521429062 CEST	49818	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.521509886 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.521711111 CEST	49818	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.568128109 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.589119911 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.589164972 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.589240074 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.590568066 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.590584993 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.640681028 CEST	49820	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:53.640698910 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:53.640814066 CEST	49820	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:53.641215086 CEST	49820	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:53.641228914 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:53.773168087 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.773269892 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.773370028 CEST	49818	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.809472084 CEST	49818	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.809497118 CEST	443	49818	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.851015091 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.851661921 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.851689100 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.852822065 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.854891062 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.854974985 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.889312029 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.889492035 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:53.889538050 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:53.903064966 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:53.903896093 CEST	49820	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:53.903917074 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:53.904429913 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:53.904902935 CEST	49820	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:53.904983044 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:53.905349970 CEST	49820	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:53.948117971 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.107666016 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.107882023 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.107970953 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.128046989 CEST	49819	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.128066063 CEST	443	49819	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.186130047 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.186331987 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.186393976 CEST	49820	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.187995911 CEST	49821	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:21:54.188023090 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:54.188116074 CEST	49821	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:21:54.188673019 CEST	49821	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:21:54.188685894 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:54.189748049 CEST	49820	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.189757109 CEST	443	49820	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.190959930 CEST	49822	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.191054106 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.191150904 CEST	49822	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.191572905 CEST	49822	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.191610098 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.418288946 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:54.418740988 CEST	49821	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:21:54.418760061 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:54.419514894 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:54.419976950 CEST	49821	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:21:54.420211077 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:21:54.452084064 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.452387094 CEST	49822	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.452445030 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.452944040 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.453561068 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.453605890 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.453707933 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.454473972 CEST	49822	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.454566002 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.455028057 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.455044985 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.455609083 CEST	49822	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.463543892 CEST	49821	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:21:54.496134043 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.704669952 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.705002069 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.705084085 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.705996037 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.706568956 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.706729889 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.706878901 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.706923008 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.707031965 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.709146976 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.709374905 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.709444046 CEST	49822	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.710400105 CEST	49822	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.710433960 CEST	443	49822	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.956374884 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.956633091 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.956736088 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.957317114 CEST	49823	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:54.957361937 CEST	443	49823	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:54.963378906 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.963485956 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:54.963581085 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.963951111 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:54.963992119 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.217607975 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.218301058 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.218360901 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.219506979 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.220029116 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.220030069 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.220237017 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.271672010 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.383375883 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.383476019 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.383647919 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.383927107 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.383964062 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.471301079 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.471509933 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.471626043 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.473721027 CEST	49824	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.473763943 CEST	443	49824	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.648590088 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.649255037 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.649317980 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.650492907 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.652667999 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.652767897 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.652884960 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.652884960 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.652930975 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.910140038 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.910341978 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.913887024 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.918715000 CEST	49825	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:55.918776035 CEST	443	49825	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:55.922840118 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.922885895 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:55.923141956 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.923360109 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:55.923377037 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:56.186568022 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:56.186990976 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:56.187016010 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:56.188143969 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:56.188566923 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:56.188716888 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:56.188741922 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:56.230540037 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:56.451170921 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:56.451395988 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:56.451469898 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:56.452114105 CEST	49826	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:56.452131987 CEST	443	49826	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:56.849419117 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:56.849455118 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:56.849678040 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:56.849920034 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:56.849944115 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.113070011 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.113413095 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:57.113455057 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.113936901 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.114449978 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:57.114535093 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.114607096 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:57.114645004 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:57.114698887 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.370959044 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.371176958 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.372363091 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:57.376466036 CEST	49827	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:57.376466036 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.376519918 CEST	443	49827	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:57.376564026 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:57.376692057 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.376905918 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.376935959 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:57.630537987 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:57.631007910 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.631067991 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:57.632205009 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:57.632786989 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.632787943 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.632878065 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:57.685549021 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.884140968 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:57.884552002 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:57.890312910 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.890825033 CEST	49828	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:21:57.890866041 CEST	443	49828	13.249.39.67	192.168.2.5
Apr 25, 2024 19:21:59.244539022 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.244581938 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.244725943 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.244966984 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.244982958 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.505691051 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.532535076 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.532557011 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.533946991 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.557971954 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.558177948 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.568144083 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.568223953 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.568258047 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.763581991 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.763793945 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:21:59.763873100 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.766905069 CEST	49829	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:21:59.766927004 CEST	443	49829	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:00.045844078 CEST	49830	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:00.045890093 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.045973063 CEST	49830	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:00.046638012 CEST	49830	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:00.046658993 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.303673983 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.304380894 CEST	49830	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:00.304406881 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.304883003 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.305378914 CEST	49830	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:00.305470943 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.305741072 CEST	49830	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:00.348155975 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.564934015 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.565155029 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:00.565289021 CEST	49830	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:00.565798044 CEST	49830	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:00.565838099 CEST	443	49830	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:01.395612955 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.395704985 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.395850897 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.398510933 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.398564100 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.659817934 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.660547972 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.660612106 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.661851883 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.663089991 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.663197994 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.663386106 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.663428068 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.663481951 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.920779943 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.920823097 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.920914888 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.920953035 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.920981884 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:01.921044111 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.926323891 CEST	49831	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:01.926361084 CEST	443	49831	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:02.445344925 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.445384979 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.445473909 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.446372986 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.446388960 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.703135967 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.753726006 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.772789001 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.772797108 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.773978949 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.774648905 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.774818897 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.774899006 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.791023016 CEST	49833	443	192.168.2.5	18.155.1.13
Apr 25, 2024 19:22:02.791121960 CEST	443	49833	18.155.1.13	192.168.2.5
Apr 25, 2024 19:22:02.791259050 CEST	49833	443	192.168.2.5	18.155.1.13
Apr 25, 2024 19:22:02.791687012 CEST	49833	443	192.168.2.5	18.155.1.13
Apr 25, 2024 19:22:02.791714907 CEST	443	49833	18.155.1.13	192.168.2.5
Apr 25, 2024 19:22:02.816487074 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:02.820151091 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.864118099 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.959244013 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.959681034 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.959777117 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.975909948 CEST	49832	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:02.975925922 CEST	443	49832	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:02.984455109 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.984478951 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.984486103 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.984524012 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.984532118 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.984572887 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:02.984582901 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.984652042 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.984688997 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:02.984688997 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:02.984723091 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:02.989115953 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.989216089 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:02.990453005 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.990533113 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:02.990555048 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:02.990588903 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:03.021522999 CEST	443	49833	18.155.1.13	192.168.2.5
Apr 25, 2024 19:22:03.027867079 CEST	49833	443	192.168.2.5	18.155.1.13
Apr 25, 2024 19:22:03.027884007 CEST	443	49833	18.155.1.13	192.168.2.5
Apr 25, 2024 19:22:03.028409004 CEST	443	49833	18.155.1.13	192.168.2.5
Apr 25, 2024 19:22:03.029447079 CEST	49833	443	192.168.2.5	18.155.1.13
Apr 25, 2024 19:22:03.029524088 CEST	443	49833	18.155.1.13	192.168.2.5
Apr 25, 2024 19:22:03.042393923 CEST	49817	443	192.168.2.5	18.155.1.25
Apr 25, 2024 19:22:03.042442083 CEST	443	49817	18.155.1.25	192.168.2.5
Apr 25, 2024 19:22:03.071584940 CEST	49833	443	192.168.2.5	18.155.1.13
Apr 25, 2024 19:22:03.179179907 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.179236889 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.179338932 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.179814100 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.179845095 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.432437897 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.474562883 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.483143091 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.483155012 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.483596087 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.484951019 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.485030890 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.485132933 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.528156996 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.708347082 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.708529949 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.708601952 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.708856106 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.708890915 CEST	443	49834	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:03.708920002 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:03.708965063 CEST	49834	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.311005116 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.311072111 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.311153889 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.311527014 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.311558962 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.445195913 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:22:04.445362091 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:22:04.445410013 CEST	49821	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:22:04.555886984 CEST	49821	443	192.168.2.5	108.177.122.147
Apr 25, 2024 19:22:04.555912018 CEST	443	49821	108.177.122.147	192.168.2.5
Apr 25, 2024 19:22:04.576576948 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.576860905 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.576883078 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.577984095 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.578344107 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.578474045 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.578479052 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.578507900 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.578522921 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.578605890 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.618535995 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.839624882 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.839855909 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.839911938 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.840322971 CEST	49835	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:04.840343952 CEST	443	49835	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:04.847369909 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:04.847395897 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:04.847471952 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:04.847769022 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:04.847781897 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.111413002 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.111721992 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.111751080 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.112912893 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.113320112 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.113487959 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.113496065 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.156146049 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.161550045 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.315320015 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.315408945 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.315660000 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.315810919 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.315834999 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.371690989 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.371925116 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.374300957 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.376833916 CEST	49836	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.376853943 CEST	443	49836	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.580162048 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.580529928 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.580569983 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.581682920 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.582206964 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.582206964 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.582243919 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.582317114 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.582343102 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.625607014 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.839437962 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.839690924 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.840769053 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.840919018 CEST	49837	443	192.168.2.5	13.249.39.45
Apr 25, 2024 19:22:05.840955019 CEST	443	49837	13.249.39.45	192.168.2.5
Apr 25, 2024 19:22:05.845053911 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.845089912 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:05.845402956 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.845402956 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:05.845442057 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:06.109778881 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:06.110130072 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:06.110162020 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:06.110651016 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:06.110996008 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:06.111088991 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:06.111237049 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:06.152132988 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:06.166548014 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:06.371608973 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:06.371870041 CEST	443	49838	13.249.39.67	192.168.2.5
Apr 25, 2024 19:22:06.371952057 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:06.384143114 CEST	49838	443	192.168.2.5	13.249.39.67
Apr 25, 2024 19:22:06.384166956 CEST	443	49838	13.249.39.67	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 19:20:50.413912058 CEST	53	54412	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:50.462259054 CEST	53	60129	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:51.032809973 CEST	53	63112	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:52.130556107 CEST	54381	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:52.130695105 CEST	64201	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:52.241952896 CEST	53	54381	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:52.242585897 CEST	53	64201	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:52.786355972 CEST	50912	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:52.786493063 CEST	61357	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:52.897032022 CEST	53	61357	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:52.898850918 CEST	53	50912	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:54.162353992 CEST	57137	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:54.162610054 CEST	61715	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:54.164527893 CEST	58299	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:54.165013075 CEST	60230	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:54.273210049 CEST	53	61715	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:54.274868011 CEST	53	60230	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:54.275470018 CEST	53	58299	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:54.294258118 CEST	53	57137	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:55.274132013 CEST	60932	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:55.274293900 CEST	62773	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:55.385766029 CEST	53	62773	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:55.386544943 CEST	53	60932	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:55.892472982 CEST	51445	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:55.893179893 CEST	62880	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:56.008519888 CEST	53	62880	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:56.008546114 CEST	53	51445	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:57.347955942 CEST	53	59262	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:59.613317966 CEST	60582	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:59.613459110 CEST	50925	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:20:59.725621939 CEST	53	50925	1.1.1.1	192.168.2.5
Apr 25, 2024 19:20:59.725905895 CEST	53	60582	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:06.594630957 CEST	50057	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:21:06.595746994 CEST	59176	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:21:06.705641985 CEST	53	50057	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:06.706898928 CEST	53	59176	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:09.072495937 CEST	53	58038	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:27.986299992 CEST	53	53139	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:49.643990993 CEST	53	62921	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:51.057384014 CEST	53	50016	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:56.737438917 CEST	51410	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:21:56.737617970 CEST	53723	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:21:56.848614931 CEST	53	51410	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:56.848771095 CEST	53	53723	1.1.1.1	192.168.2.5
Apr 25, 2024 19:21:59.928992033 CEST	59211	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:21:59.929243088 CEST	55534	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:22:00.043550968 CEST	53	55534	1.1.1.1	192.168.2.5
Apr 25, 2024 19:22:00.044749022 CEST	53	59211	1.1.1.1	192.168.2.5
Apr 25, 2024 19:22:02.550209999 CEST	55126	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:22:02.550792933 CEST	59113	53	192.168.2.5	1.1.1.1
Apr 25, 2024 19:22:02.663213968 CEST	53	59113	1.1.1.1	192.168.2.5
Apr 25, 2024 19:22:02.671394110 CEST	53	55126	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 19:20:52.130556107 CEST	192.168.2.5	1.1.1.1	0xa6c3	Standard query (0)	people.planningcenteronline.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.130695105 CEST	192.168.2.5	1.1.1.1	0x2b15	Standard query (0)	people.planningcenteronline.com	65	IN (0x0001)	false
Apr 25, 2024 19:20:52.786355972 CEST	192.168.2.5	1.1.1.1	0x4106	Standard query (0)	login.planningcenteronline.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.786493063 CEST	192.168.2.5	1.1.1.1	0x6809	Standard query (0)	login.planningcenteronline.com	65	IN (0x0001)	false
Apr 25, 2024 19:20:54.162353992 CEST	192.168.2.5	1.1.1.1	0xaac7	Standard query (0)	ab5ddfb19446.edge.sdk.awswaf.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.162610054 CEST	192.168.2.5	1.1.1.1	0xe850	Standard query (0)	ab5ddfb19446.edge.sdk.awswaf.com	65	IN (0x0001)	false
Apr 25, 2024 19:20:54.164527893 CEST	192.168.2.5	1.1.1.1	0x6f7f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.165013075 CEST	192.168.2.5	1.1.1.1	0x258c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 19:20:55.274132013 CEST	192.168.2.5	1.1.1.1	0x2ce1	Standard query (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:55.274293900 CEST	192.168.2.5	1.1.1.1	0x2a41	Standard query (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	65	IN (0x0001)	false
Apr 25, 2024 19:20:55.892472982 CEST	192.168.2.5	1.1.1.1	0x9427	Standard query (0)	login.planningcenteronline.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:55.893179893 CEST	192.168.2.5	1.1.1.1	0xc680	Standard query (0)	login.planningcenteronline.com	65	IN (0x0001)	false
Apr 25, 2024 19:20:59.613317966 CEST	192.168.2.5	1.1.1.1	0x4c7d	Standard query (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:59.613459110 CEST	192.168.2.5	1.1.1.1	0x3382	Standard query (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	65	IN (0x0001)	false
Apr 25, 2024 19:21:06.594630957 CEST	192.168.2.5	1.1.1.1	0xe4d9	Standard query (0)	pco-cross-storage.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.595746994 CEST	192.168.2.5	1.1.1.1	0x1c96	Standard query (0)	pco-cross-storage.s3.amazonaws.com	65	IN (0x0001)	false
Apr 25, 2024 19:21:56.737438917 CEST	192.168.2.5	1.1.1.1	0x399	Standard query (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:56.737617970 CEST	192.168.2.5	1.1.1.1	0xdb85	Standard query (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	65	IN (0x0001)	false
Apr 25, 2024 19:21:59.928992033 CEST	192.168.2.5	1.1.1.1	0x95eb	Standard query (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:59.929243088 CEST	192.168.2.5	1.1.1.1	0x99ac	Standard query (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com	65	IN (0x0001)	false
Apr 25, 2024 19:22:02.550209999 CEST	192.168.2.5	1.1.1.1	0x996f	Standard query (0)	login.planningcenteronline.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:02.550792933 CEST	192.168.2.5	1.1.1.1	0x227	Standard query (0)	login.planningcenteronline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 19:20:52.241952896 CEST	1.1.1.1	192.168.2.5	0xa6c3	No error (0)	people.planningcenteronline.com		108.139.15.59	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.241952896 CEST	1.1.1.1	192.168.2.5	0xa6c3	No error (0)	people.planningcenteronline.com		108.139.15.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.241952896 CEST	1.1.1.1	192.168.2.5	0xa6c3	No error (0)	people.planningcenteronline.com		108.139.15.10	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.241952896 CEST	1.1.1.1	192.168.2.5	0xa6c3	No error (0)	people.planningcenteronline.com		108.139.15.45	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.898850918 CEST	1.1.1.1	192.168.2.5	0x4106	No error (0)	login.planningcenteronline.com		18.155.1.25	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.898850918 CEST	1.1.1.1	192.168.2.5	0x4106	No error (0)	login.planningcenteronline.com		18.155.1.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.898850918 CEST	1.1.1.1	192.168.2.5	0x4106	No error (0)	login.planningcenteronline.com		18.155.1.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:52.898850918 CEST	1.1.1.1	192.168.2.5	0x4106	No error (0)	login.planningcenteronline.com		18.155.1.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.274868011 CEST	1.1.1.1	192.168.2.5	0x258c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 19:20:54.275470018 CEST	1.1.1.1	192.168.2.5	0x6f7f	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.275470018 CEST	1.1.1.1	192.168.2.5	0x6f7f	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.275470018 CEST	1.1.1.1	192.168.2.5	0x6f7f	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.275470018 CEST	1.1.1.1	192.168.2.5	0x6f7f	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.275470018 CEST	1.1.1.1	192.168.2.5	0x6f7f	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.275470018 CEST	1.1.1.1	192.168.2.5	0x6f7f	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.294258118 CEST	1.1.1.1	192.168.2.5	0xaac7	No error (0)	ab5ddfb19446.edge.sdk.awswaf.com		18.155.1.14	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.294258118 CEST	1.1.1.1	192.168.2.5	0xaac7	No error (0)	ab5ddfb19446.edge.sdk.awswaf.com		18.155.1.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.294258118 CEST	1.1.1.1	192.168.2.5	0xaac7	No error (0)	ab5ddfb19446.edge.sdk.awswaf.com		18.155.1.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:54.294258118 CEST	1.1.1.1	192.168.2.5	0xaac7	No error (0)	ab5ddfb19446.edge.sdk.awswaf.com		18.155.1.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:55.386544943 CEST	1.1.1.1	192.168.2.5	0x2ce1	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.45	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:55.386544943 CEST	1.1.1.1	192.168.2.5	0x2ce1	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:55.386544943 CEST	1.1.1.1	192.168.2.5	0x2ce1	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:55.386544943 CEST	1.1.1.1	192.168.2.5	0x2ce1	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.67	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:56.008546114 CEST	1.1.1.1	192.168.2.5	0x9427	No error (0)	login.planningcenteronline.com		18.155.1.25	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:56.008546114 CEST	1.1.1.1	192.168.2.5	0x9427	No error (0)	login.planningcenteronline.com		18.155.1.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:56.008546114 CEST	1.1.1.1	192.168.2.5	0x9427	No error (0)	login.planningcenteronline.com		18.155.1.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:56.008546114 CEST	1.1.1.1	192.168.2.5	0x9427	No error (0)	login.planningcenteronline.com		18.155.1.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:59.725905895 CEST	1.1.1.1	192.168.2.5	0x4c7d	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.67	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:59.725905895 CEST	1.1.1.1	192.168.2.5	0x4c7d	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:59.725905895 CEST	1.1.1.1	192.168.2.5	0x4c7d	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:20:59.725905895 CEST	1.1.1.1	192.168.2.5	0x4c7d	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.45	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	pco-cross-storage.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.40.97	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.168.25	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.24.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.33.161	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.81.28	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.228.121	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.196.97	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.705641985 CEST	1.1.1.1	192.168.2.5	0xe4d9	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.0.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:06.706898928 CEST	1.1.1.1	192.168.2.5	0x1c96	No error (0)	pco-cross-storage.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 19:21:06.706898928 CEST	1.1.1.1	192.168.2.5	0x1c96	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 19:21:07.714212894 CEST	1.1.1.1	192.168.2.5	0x7535	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 19:21:07.714212894 CEST	1.1.1.1	192.168.2.5	0x7535	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:21.697607040 CEST	1.1.1.1	192.168.2.5	0xa7a9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 19:21:21.697607040 CEST	1.1.1.1	192.168.2.5	0xa7a9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:43.291425943 CEST	1.1.1.1	192.168.2.5	0xfc0e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 19:21:43.291425943 CEST	1.1.1.1	192.168.2.5	0xfc0e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:56.848614931 CEST	1.1.1.1	192.168.2.5	0x399	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.45	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:56.848614931 CEST	1.1.1.1	192.168.2.5	0x399	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:56.848614931 CEST	1.1.1.1	192.168.2.5	0x399	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:21:56.848614931 CEST	1.1.1.1	192.168.2.5	0x399	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.67	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:00.044749022 CEST	1.1.1.1	192.168.2.5	0x95eb	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.67	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:00.044749022 CEST	1.1.1.1	192.168.2.5	0x95eb	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:00.044749022 CEST	1.1.1.1	192.168.2.5	0x95eb	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.45	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:00.044749022 CEST	1.1.1.1	192.168.2.5	0x95eb	No error (0)	ab5ddfb19446.87d96309.us-east-2.token.awswaf.com		13.249.39.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:02.671394110 CEST	1.1.1.1	192.168.2.5	0x996f	No error (0)	login.planningcenteronline.com		18.155.1.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:02.671394110 CEST	1.1.1.1	192.168.2.5	0x996f	No error (0)	login.planningcenteronline.com		18.155.1.25	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:02.671394110 CEST	1.1.1.1	192.168.2.5	0x996f	No error (0)	login.planningcenteronline.com		18.155.1.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:02.671394110 CEST	1.1.1.1	192.168.2.5	0x996f	No error (0)	login.planningcenteronline.com		18.155.1.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 19:22:04.391206980 CEST	1.1.1.1	192.168.2.5	0x6307	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 19:22:04.391206980 CEST	1.1.1.1	192.168.2.5	0x6307	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

people.planningcenteronline.com

https:

ab5ddfb19446.edge.sdk.awswaf.com

ab5ddfb19446.87d96309.us-east-2.token.awswaf.com

pco-cross-storage.s3.amazonaws.com

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	108.139.15.59	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:52 UTC	674	OUT	GET / HTTP/1.1 Host: people.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:20:52 UTC	818	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Thu, 25 Apr 2024 17:20:52 GMT Server: openresty X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Location: https://login.planningcenteronline.com?return=People%2F Cache-Control: no-cache X-Request-Id: 10aaa073-2922-4850-a370-54c8ff0c981e X-Runtime: 0.006754 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 1c154fd264f63b7337d5237240584530.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EO8Gep1GRu6p5n870SpP-1AT4RPKCs-xn56Ygke--3qqJzACsYehNg==
2024-04-25 17:20:52 UTC	127	IN	Data Raw: 37 39 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 70 6c 61 6e 6e 69 6e 67 63 65 6e 74 65 72 6f 6e 6c 69 6e 65 2e 63 6f 6d 3f 72 65 74 75 72 6e 3d 50 65 6f 70 6c 65 25 32 46 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 79<html><body>You are being <a href="https://login.planningcenteronline.com?return=People%2F">redirected</a>.</body></html>
2024-04-25 17:20:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:53 UTC	690	OUT	GET /?return=People%2F HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:20:53 UTC	1185	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Thu, 25 Apr 2024 17:20:53 GMT Server: openresty X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Location: https://login.planningcenteronline.com/login/new?return=People%2F Cache-Control: no-cache Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.OH6WsFiQIzChLGDyMPTLeiKYyehbX2JS8mCvl81MdMLKfba57ZLfRr5WSlVuqy69CwRl7Tal6O1K9GCGPfmLqA; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:20:53 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: 9afc3cc5-d6a8-45e9-842e-10657cb7b8ed X-Runtime: 0.015814 X-Cache: Miss from cloudfront Via: 1.1 bf3a9f862750f6da9d9a728ea7e7bf08.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: czgJXW29PeCduR4FCPKzrlw5tcoQKBnWjrVti_BwZgKzR5uLTzG_kw==
2024-04-25 17:20:53 UTC	137	IN	Data Raw: 38 33 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 70 6c 61 6e 6e 69 6e 67 63 65 6e 74 65 72 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 2f 6e 65 77 3f 72 65 74 75 72 6e 3d 50 65 6f 70 6c 65 25 32 46 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 83<html><body>You are being <a href="https://login.planningcenteronline.com/login/new?return=People%2F">redirected</a>.</body></html>
2024-04-25 17:20:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:53 UTC	971	OUT	GET /login/new?return=People%2F HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.OH6WsFiQIzChLGDyMPTLeiKYyehbX2JS8mCvl81MdMLKfba57ZLfRr5WSlVuqy69CwRl7Tal6O1K9GCGPfmLqA
2024-04-25 17:20:53 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20220 Connection: close Date: Thu, 25 Apr 2024 17:20:53 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"1b6b895277d856d40e8288bf77d5dc77" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:20:53 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: 30e486ce-e8f0-4ab9-ad25-fa08a564eab3 X-Runtime: 0.025691 X-Cache: Miss from cloudfront Via: 1.1 f852f3884979ab869a773a73f8b98d0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 89ICTzoLVzXJ4NsrCP5vv1HQ2bHdXtRl5LSGSQY0G40BKDLNBPYKqw==
2024-04-25 17:20:53 UTC	15019	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:20:53 UTC	222	IN	Data Raw: 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 0a 3c 68 31 3e 4c 6f 67 69 6e 3c 2f 68 31 3e 0a 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 69 6f 73 5f 73 61 66 61 72 69 5f 6b 65 79 63 68 61 69 6e 5f 61 75 74 6f 5f 73 75 62 6d 69 74 5f 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 70 6c 61 6e 6e 69 6e 67 63 65 6e 74 65 72 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 22 20 61 63 63 65 70 74 2d 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 75 74 Data Ascii: ="content"> <h1>Login</h1><form class="ios_safari_keychain_auto_submit_form" action="https://login.planningcenteronline.com/login" accept-charset="UTF-8" method="post"><input type="hidden" name="aut
2024-04-25 17:20:53 UTC	4979	IN	Data Raw: 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 67 37 34 77 42 50 69 2d 2d 6f 35 5a 70 5a 50 7a 61 62 63 76 37 67 71 48 61 78 6a 38 42 72 51 76 75 66 77 49 7a 6c 6a 42 74 7a 6b 2d 6b 4d 43 53 33 79 55 59 30 33 75 4d 6c 46 68 57 39 65 6a 42 45 62 39 41 61 35 44 47 66 64 71 53 35 4e 6e 46 56 39 4c 45 55 77 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 0a 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 6d 62 2d 34 70 22 3e 59 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 70 68 6f 6e 65 3c 2f 6c 61 62 65 6c 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2d 77 72 61 70 70 65 72 2d 2d 69 63 6f 6e 2d 6c 65 66 74 20 6d 62 2d 32 22 3e 0a 20 20 20 20 3c 73 76 67 20 63 Data Ascii: henticity_token" value="g74wBPi--o5ZpZPzabcv7gqHaxj8BrQvufwIzljBtzk-kMCS3yUY03uMlFhW9ejBEb9Aa5DGfdqS5NnFV9LEUw" autocomplete="off" /> <label class="mb-4p">Your email or phone</label> <div class="input-wrapper input-wrapper--icon-left mb-2"> <svg c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:54 UTC	948	OUT	GET /assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login.planningcenteronline.com/login/new?return=People%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
2024-04-25 17:20:54 UTC	794	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 48353 Connection: close Date: Wed, 24 Apr 2024 23:15:36 GMT Last-Modified: Wed, 24 Apr 2024 21:37:20 GMT ETag: "5b6f75f1ce991095201bd303c7d8ca45" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f210213143456f4ea9e4b8dcdc5ede54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: SuX0nXOx0T4_yblLop1-GIy6TrtarQDgAHZlirtEgGVhfgl1EOx8HQ== Age: 65119 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 2e 66 73 2d 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 2e 66 73 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 2e 66 73 2d 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 66 73 2d 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 66 73 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 66 73 2d 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 66 73 2d 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 7d 2e 73 61 6e 73 2d 73 65 72 69 66 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 79 73 74 65 6d 2d 75 69 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 Data Ascii: .fs-0{font-size:24px}.fs-1{font-size:20px}.fs-2{font-size:18px}.fs-3{font-size:16px}.fs-4{font-size:14px}.fs-5{font-size:12px}.fs-6{font-size:10px}.sans-serif{font-family:system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial,
2024-04-25 17:20:54 UTC	15596	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 74 69 6e 74 2d 34 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 33 32 70 78 20 30 20 31 32 70 78 7d 2e 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 74 69 6e 74 2d 39 29 7d 2e 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a Data Ascii: ine-height:inherit;position:relative;border:1px solid var(--color-gray-tint-4);border-radius:4px;padding:0 32px 0 12px}.select-wrapper select:hover{background-color:var(--color-gray-tint-9)}.select-wrapper:after{content:'';position:absolute;top:50%;right:
2024-04-25 17:20:54 UTC	16373	IN	Data Raw: 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 61 69 2d 63 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 61 69 2d 62 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 62 61 73 65 6c 69 6e 65 7d 2e 61 69 2d 66 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 Data Ascii: x-direction:normal;-ms-flex-direction:row;flex-direction:row}.ai-c{-webkit-box-align:center;-ms-flex-align:center;align-items:center}.ai-b{-webkit-box-align:baseline;-ms-flex-align:baseline;align-items:baseline}.ai-fs{-webkit-box-align:start;-ms-flex-alig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49715	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:54 UTC	883	OUT	GET /packs/js/runtime-461b1b74cc572f890c8f.js HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/login/new?return=People%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
2024-04-25 17:20:54 UTC	809	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1643 Connection: close Date: Wed, 17 Jan 2024 19:20:21 GMT Last-Modified: Mon, 08 Jan 2024 16:40:20 GMT ETag: "727b7adc717c26801750893612c3cfb6" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1148ba400afef59fe8b086c32a9a15c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: po_KFLFeUGVM0WwKFRnaTNbOHxhNUoAc7aMJssUVS2y44NQgQocRHg== Age: 8546434 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:20:54 UTC	1643	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 65 3d 7b 7d 2c 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 76 61 72 20 6f 3d 72 5b 6e 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 72 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 2c 69 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 65 2c 6e 3d 5b 5d 2c 74 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6f 2c 69 29 7b 69 66 28 21 72 29 7b 76 61 72 20 75 3d 31 2f 30 3b 66 6f 72 28 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 72 3d 6e 5b 61 5d 5b 30 Data Ascii: !function(){"use strict";var n,e={},r={};function t(n){var o=r[n];if(void 0!==o)return o.exports;var i=r[n]={exports:{}};return e[n].call(i.exports,i,i.exports,t),i.exports}t.m=e,n=[],t.O=function(e,r,o,i){if(!r){var u=1/0;for(a=0;a<n.length;a++){r=n[a][0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:54 UTC	879	OUT	GET /packs/js/882-821b6997692328fd5b75.js HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/login/new?return=People%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
2024-04-25 17:20:54 UTC	811	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 138534 Connection: close Date: Wed, 17 Jan 2024 19:20:21 GMT Last-Modified: Mon, 08 Jan 2024 16:40:20 GMT ETag: "228455ad42e32c0b8d887ce86197a2d5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9001087a3a66e5ac2fb50791d94765b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: kjGPcBqN-zmnSApwLPUbNOq_h2qLWJX8GYg3yEjk8wN_NAMEmcR7uQ== Age: 8546434 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6c 6f 67 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6c 6f 67 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 32 5d 2c 7b 39 30 35 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 2c 65 3d 5b 31 36 2c 31 37 2c 31 38 2c 32 37 2c 39 31 2c 39 33 5d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 3d 21 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 3b 74 72 79 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 22 70 61 73 73 69 76 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 7d 7d 29 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 Data Ascii: (self.webpackChunklogin=self.webpackChunklogin\|\|[]).push([[882],{9054:function(){!function(){var t=!1,e=[16,17,18,27,91,93];function n(){var t=!0,e=function(){var t=!1;try{var e=Object.defineProperty({},"passive",{get:function(){t=!0}});window.addEventLis
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 3b 76 61 72 20 72 3d 6e 28 38 35 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 33 30 39 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 53 74 72 69 6e 67 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 36 30 37 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 31 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 72 28 74 29 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 73 65 74 20 22 2b 53 74 Data Ascii: ;var r=n(857);t.exports=r},3099:function(t){t.exports=function(t){if("function"!=typeof t)throw TypeError(String(t)+" is not a function");return t}},6077:function(t,e,n){var r=n(111);t.exports=function(t){if(!r(t)&&null!==t)throw TypeError("Can't set "+St
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 74 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 65 7d 7d 7d 2c 36 31 33 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 35 39 33 29 2c 6f 3d 6e 28 33 30 37 30 29 2c 69 3d 6e 28 39 31 31 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 72 28 65 29 3b 61 20 69 6e 20 74 3f 6f 2e 66 28 74 2c 61 2c 69 28 30 2c 6e 29 29 3a 74 5b 61 5d 3d 6e 7d 7d 2c 35 35 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 2c 6f 3d 6e 28 36 36 35 30 29 2e 73 74 61 72 74 2c 69 3d 4d 61 Data Ascii: t),configurable:!(2&t),writable:!(4&t),value:e}}},6135:function(t,e,n){"use strict";var r=n(7593),o=n(3070),i=n(9114);t.exports=function(t,e,n){var a=r(e);a in t?o.f(t,a,i(0,n)):t[a]=n}},5573:function(t,e,n){"use strict";var r=n(7293),o=n(6650).start,i=Ma
2024-04-25 17:20:54 UTC	15372	IN	Data Raw: 3d 74 3f 28 64 5b 6c 5d 3d 6f 28 74 29 2c 6e 3d 6e 65 77 20 64 2c 64 5b 6c 5d 3d 6e 75 6c 6c 2c 6e 5b 70 5d 3d 74 29 3a 6e 3d 67 28 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 6e 3a 69 28 6e 2c 65 29 7d 7d 2c 36 30 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 37 38 31 29 2c 6f 3d 6e 28 33 30 37 30 29 2c 69 3d 6e 28 39 36 37 30 29 2c 61 3d 6e 28 31 39 35 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 28 74 29 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 61 28 65 29 2c 75 3d 72 2e 6c 65 6e 67 74 68 2c 63 3d 30 3b 75 3e 63 3b 29 6f 2e 66 28 74 2c 6e 3d 72 5b 63 2b 2b 5d 2c 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d Data Ascii: =t?(d[l]=o(t),n=new d,d[l]=null,n[p]=t):n=g(),void 0===e?n:i(n,e)}},6048:function(t,e,n){var r=n(9781),o=n(3070),i=n(9670),a=n(1956);t.exports=r?Object.defineProperties:function(t,e){i(t);for(var n,r=a(e),u=r.length,c=0;u>c;)o.f(t,n=r[c++],e[n]);return t}
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 79 2e 63 61 6c 6c 28 70 29 29 2e 6e 65 78 74 2c 70 3d 5b 5d 3b 21 28 73 3d 68 2e 63 61 6c 6c 28 6c 29 29 2e 64 6f 6e 65 3b 29 70 2e 70 75 73 68 28 73 2e 76 61 6c 75 65 29 3b 66 6f 72 28 67 26 26 64 3e 32 26 26 28 76 3d 75 28 76 2c 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 32 29 29 2c 6e 3d 6f 28 70 2e 6c 65 6e 67 74 68 29 2c 66 3d 6e 65 77 28 63 28 74 68 69 73 29 29 28 6e 29 2c 65 3d 30 3b 6e 3e 65 3b 65 2b 2b 29 66 5b 65 5d 3d 67 3f 76 28 70 5b 65 5d 2c 65 29 3a 70 5b 65 5d 3b 72 65 74 75 72 6e 20 66 7d 7d 2c 39 37 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 30 2c 6e 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 79 6d 62 6f 6c 28 22 2b 53 74 72 69 6e Data Ascii: y.call(p)).next,p=[];!(s=h.call(l)).done;)p.push(s.value);for(g&&d>2&&(v=u(v,arguments[2],2)),n=o(p.length),f=new(c(this))(n),e=0;n>e;e++)f[e]=g?v(p[e],e):p[e];return f}},9711:function(t){var e=0,n=Math.random();t.exports=function(t){return"Symbol("+Strin
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 3d 6e 28 38 36 33 29 2c 61 3d 6e 28 38 34 31 35 29 2c 75 3d 6e 28 37 32 39 33 29 2c 63 3d 31 2e 2e 74 6f 46 69 78 65 64 2c 66 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 3f 6e 3a 65 25 32 3d 3d 3d 31 3f 73 28 74 2c 65 2d 31 2c 6e 2a 74 29 3a 73 28 74 2a 74 2c 65 2f 32 2c 6e 29 7d 3b 72 28 7b 74 61 72 67 65 74 3a 22 4e 75 6d 62 65 72 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 63 26 26 28 22 30 2e 30 30 30 22 21 3d 3d 38 65 2d 35 2e 74 6f 46 69 78 65 64 28 33 29 7c 7c 22 31 22 21 3d 3d 2e 39 2e 74 6f 46 69 78 65 64 28 30 29 7c 7c 22 31 2e 32 35 22 21 3d 3d 31 2e 32 35 35 2e 74 6f 46 69 78 65 64 28 32 29 7c 7c 22 31 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 32 Data Ascii: =n(863),a=n(8415),u=n(7293),c=1..toFixed,f=Math.floor,s=function(t,e,n){return 0===e?n:e%2===1?s(t,e-1,nt):s(tt,e/2,n)};r({target:"Number",proto:!0,forced:c&&("0.000"!==8e-5.toFixed(3)\|\|"1"!==.9.toFixed(0)\|\|"1.25"!==1.255.toFixed(2)\|\|"100000000000000012
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 6f 53 74 72 69 6e 67 22 2c 63 3d 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 2c 66 3d 63 5b 75 5d 2c 73 3d 69 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 2f 61 2f 62 22 21 3d 66 2e 63 61 6c 6c 28 7b 73 6f 75 72 63 65 3a 22 61 22 2c 66 6c 61 67 73 3a 22 62 22 7d 29 7d 29 29 2c 6c 3d 66 2e 6e 61 6d 65 21 3d 75 3b 28 73 7c 7c 6c 29 26 26 72 28 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 2c 75 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6f 28 74 68 69 73 29 2c 65 3d 53 74 72 69 6e 67 28 74 2e 73 6f 75 72 63 65 29 2c 6e 3d 74 2e 66 6c 61 67 73 3b 72 65 74 75 72 6e 22 2f 22 2b 65 2b 22 2f 22 2b 53 74 72 69 6e 67 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 26 26 21 28 22 66 Data Ascii: oString",c=RegExp.prototype,f=c[u],s=i((function(){return"/a/b"!=f.call({source:"a",flags:"b"})})),l=f.name!=u;(s\|\|l)&&r(RegExp.prototype,u,(function(){var t=o(this),e=String(t.source),n=t.flags;return"/"+e+"/"+String(void 0===n&&t instanceof RegExp&&!("f
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 29 7d 2c 31 38 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 37 32 33 35 29 28 22 73 65 61 72 63 68 22 29 7d 2c 36 39 38 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 37 32 33 35 29 28 22 73 70 65 63 69 65 73 22 29 7d 2c 32 31 35 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 37 32 33 35 29 28 22 73 70 6c 69 74 22 29 7d 2c 36 36 34 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 37 32 33 35 29 28 22 74 6f 50 72 69 6d 69 74 69 76 65 22 29 7d 2c 39 33 34 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 37 32 33 35 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 7d 2c 35 34 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 37 32 33 35 29 28 22 75 6e 73 63 6f 70 61 62 6c 65 73 22 29 Data Ascii: )},1840:function(t,e,n){n(7235)("search")},6982:function(t,e,n){n(7235)("species")},2159:function(t,e,n){n(7235)("split")},6649:function(t,e,n){n(7235)("toPrimitive")},9341:function(t,e,n){n(7235)("toStringTag")},543:function(t,e,n){n(7235)("unscopables")
2024-04-25 17:20:54 UTC	8474	IN	Data Raw: 5c 22 3d 3d 3d 65 7c 7c 22 3f 22 3d 3d 3d 65 7c 7c 22 23 22 3d 3d 3d 65 29 7d 2c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 70 61 74 68 2c 6e 3d 65 2e 6c 65 6e 67 74 68 3b 21 6e 7c 7c 22 66 69 6c 65 22 3d 3d 74 2e 73 63 68 65 6d 65 26 26 31 3d 3d 6e 26 26 5a 28 65 5b 30 5d 2c 21 30 29 7c 7c 65 2e 70 6f 70 28 29 7d 2c 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 2e 22 3d 3d 3d 74 7c 7c 22 25 32 65 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 72 74 3d 7b 7d 2c 6f 74 3d 7b 7d 2c 69 74 3d 7b 7d 2c 61 74 3d 7b 7d 2c 75 74 3d 7b 7d 2c 63 74 3d 7b 7d 2c 66 74 3d 7b 7d 2c 73 74 3d 7b 7d 2c 6c 74 3d 7b 7d 2c 68 74 3d 7b 7d 2c 70 74 3d 7b 7d 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 2c 67 74 3d 7b 7d 2c 79 Data Ascii: \"===e\|\|"?"===e\|\|"#"===e)},et=function(t){var e=t.path,n=e.length;!n\|\|"file"==t.scheme&&1==n&&Z(e[0],!0)\|\|e.pop()},nt=function(t){return"."===t\|\|"%2e"===t.toLowerCase()},rt={},ot={},it={},at={},ut={},ct={},ft={},st={},lt={},ht={},pt={},dt={},vt={},gt={},y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:54 UTC	881	OUT	GET /packs/js/login-a860e00a8fd55872cfa8.js HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/login/new?return=People%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
2024-04-25 17:20:54 UTC	811	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 831350 Connection: close Date: Thu, 21 Mar 2024 19:09:59 GMT Last-Modified: Thu, 21 Mar 2024 16:17:06 GMT ETag: "aff43d100a7b0bfe519484f35df3813d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 26b12020e819f8ec63c8747ee42971f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: fc9jPBDmNzCeD6hRu12ZIrz0DxW0r7v-Tj0BxqHcSZdsPDsQ2xbOOA== Age: 3017456 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6c 6f 67 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6c 6f 67 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 35 5d 2c 7b 39 37 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 69 29 7b 76 61 72 20 72 3d 7b 22 2e 2f 63 6f 70 79 5f 69 6e 70 75 74 5f 74 6f 5f 63 6c 69 70 62 6f 61 72 64 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 6a 73 22 3a 31 33 39 30 2c 22 2e 2f 6d 66 61 2f 62 61 63 6b 75 70 5f 63 6f 64 65 5f 65 6e 74 72 79 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 6a 73 22 3a 31 36 34 34 2c 22 2e 2f 6d 66 61 2f 76 65 72 69 66 69 63 61 74 69 6f 6e 5f 66 6f 72 6d 5f 63 6f 6d 70 6f 6e 65 6e 74 2e 6a 73 22 3a 36 31 31 31 2c 22 63 6f 70 79 5f 69 6e 70 75 74 5f 74 6f 5f 63 6c 69 70 62 6f 61 72 64 5f 63 6f 6d Data Ascii: (self.webpackChunklogin=self.webpackChunklogin\|\|[]).push([[535],{9746:function(e,a,i){var r={"./copy_input_to_clipboard_component.js":1390,"./mfa/backup_code_entry_component.js":1644,"./mfa/verification_form_component.js":6111,"copy_input_to_clipboard_com
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 22 5d 2c 37 3a 5b 22 36 5e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 38 2a 22 2c 22 67 47 22 2c 22 66 46 22 5d 2c 38 3a 5b 22 37 26 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 39 28 22 2c 22 63 43 22 2c 22 67 47 22 5d 2c 39 3a 5b 22 38 2a 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 30 29 22 2c 22 72 52 22 2c 22 63 43 22 5d 2c 22 3a 22 3a 5b 6e 75 6c 6c 2c 22 61 41 22 2c 22 6f 4f 22 2c 22 71 51 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 5d 2c 22 3b 22 3a 5b 6e 75 6c 6c 2c 22 61 41 22 2c 22 6f 4f 22 2c 22 71 51 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 5d 2c 22 3c 22 3a 5b 22 27 5c 22 22 2c 22 32 40 22 2c 22 33 23 22 2c 22 2e 3e 22 2c 22 6f 4f 22 2c 22 61 41 22 5d 2c 22 3d 22 3a 5b 22 2f 3f 22 2c 22 5d 7d 22 2c 6e 75 6c 6c 2c 22 5c 5c 7c 22 2c 6e 75 6c 6c 2c 22 2d 5f 22 5d 2c 22 3e 22 3a Data Ascii: "],7:["6^",null,null,"8","gG","fF"],8:["7&",null,null,"9(","cC","gG"],9:["8",null,null,"0)","rR","cC"],":":[null,"aA","oO","qQ",null,null],";":[null,"aA","oO","qQ",null,null],"<":["'\"","2@","3#",".>","oO","aA"],"=":["/?","]}",null,"\\\|",null,"-_"],">":
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 2c 76 61 6e 68 61 6c 65 6e 2c 70 69 6b 61 63 68 75 2c 70 65 61 6e 75 74 73 2c 6c 69 63 6b 65 72 2c 68 65 72 73 68 65 79 2c 6a 65 72 69 63 68 6f 2c 69 6e 74 72 65 70 69 64 2c 6e 69 6e 6a 61 2c 31 32 33 34 35 36 37 61 2c 7a 61 71 31 32 33 2c 6c 6f 62 73 74 65 72 2c 67 6f 62 6c 69 6e 2c 70 75 6e 69 73 68 65 72 2c 73 74 72 69 64 65 72 2c 73 68 6f 67 75 6e 2c 6b 61 6e 73 61 73 2c 61 6d 61 64 65 75 73 2c 73 65 76 65 6e 37 2c 6a 61 73 6f 6e 31 2c 6e 65 70 74 75 6e 65 2c 73 68 6f 77 74 69 6d 65 2c 6d 75 73 63 6c 65 2c 6f 6c 64 6d 61 6e 2c 65 6b 61 74 65 72 69 6e 61 2c 72 66 72 66 69 72 66 2c 67 65 74 73 6f 6d 65 2c 73 68 6f 77 6d 65 2c 31 31 31 32 32 32 33 33 33 2c 6f 62 69 77 61 6e 2c 73 6b 69 74 74 6c 65 73 2c 64 61 6e 6e 69 2c 74 61 6e 6b 65 72 2c 6d 61 65 73 Data Ascii: ,vanhalen,pikachu,peanuts,licker,hershey,jericho,intrepid,ninja,1234567a,zaq123,lobster,goblin,punisher,strider,shogun,kansas,amadeus,seven7,jason1,neptune,showtime,muscle,oldman,ekaterina,rfrfirf,getsome,showme,111222333,obiwan,skittles,danni,tanker,maes
2024-04-25 17:20:54 UTC	14808	IN	Data Raw: 61 6e 6b 73 2c 73 65 78 79 62 6f 79 2c 64 6f 67 73 68 69 74 2c 30 32 30 32 31 39 38 33 2c 73 68 75 6f 2c 6b 61 6b 61 73 68 6b 61 2c 73 79 7a 79 67 79 2c 31 31 31 31 31 31 61 2c 79 65 61 68 62 61 62 79 2c 71 69 61 6e 67 2c 6e 65 74 73 63 61 70 65 2c 66 75 6c 68 61 6d 2c 31 32 30 36 37 36 2c 67 6f 6f 6e 65 72 2c 7a 68 75 69 2c 72 61 69 6e 62 6f 77 36 2c 6c 61 75 72 65 6e 74 2c 64 6f 67 31 32 33 2c 68 61 6c 69 66 61 78 2c 66 72 65 65 77 61 79 2c 63 61 72 6c 69 74 6f 73 2c 31 34 37 39 36 33 2c 65 61 73 74 77 6f 6f 64 2c 6d 69 63 72 6f 70 68 6f 6e 65 2c 6d 6f 6e 6b 65 79 31 32 2c 31 31 32 33 2c 70 65 72 73 69 6b 2c 63 6f 6c 64 62 65 65 72 2c 67 65 6e 67 2c 6e 75 61 6e 2c 64 61 6e 6e 79 31 2c 66 67 74 6b 6d 63 62 79 2c 65 6e 74 72 6f 70 79 2c 67 61 64 67 65 74 Data Ascii: anks,sexyboy,dogshit,02021983,shuo,kakashka,syzygy,111111a,yeahbaby,qiang,netscape,fulham,120676,gooner,zhui,rainbow6,laurent,dog123,halifax,freeway,carlitos,147963,eastwood,microphone,monkey12,1123,persik,coldbeer,geng,nuan,danny1,fgtkmcby,entropy,gadget
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 61 72 66 6c 79 2c 62 65 68 61 70 70 79 2c 30 31 30 31 31 39 37 31 2c 63 61 72 65 62 65 61 72 2c 66 69 72 65 62 6c 61 64 2c 30 32 30 35 31 39 37 35 2c 62 6f 78 63 61 72 2c 63 68 65 65 6b 79 2c 6b 69 74 65 62 6f 79 2c 68 65 6c 6c 6f 31 32 2c 70 61 6e 64 61 31 2c 65 6c 76 69 73 70 2c 6f 70 65 6e 6e 6f 77 2c 64 6f 6b 74 6f 72 2c 61 6c 65 78 31 32 2c 30 32 31 30 31 39 37 37 2c 70 6f 72 6e 6b 69 6e 67 2c 66 6c 61 6d 65 6e 67 6f 2c 30 32 30 39 31 39 37 35 2c 73 6e 6f 77 62 69 72 64 2c 6c 6f 6e 65 73 6f 6d 65 2c 72 6f 62 69 6e 31 2c 31 31 31 31 31 61 2c 77 65 65 64 34 32 30 2c 62 61 72 61 63 75 64 61 2c 62 6c 65 61 63 68 2c 31 32 33 34 35 61 62 63 2c 6e 6f 6b 69 61 31 2c 6d 65 74 61 6c 6c 2c 73 69 6e 67 61 70 6f 72 2c 6d 61 72 69 6e 65 72 2c 68 65 72 65 77 65 67 Data Ascii: arfly,behappy,01011971,carebear,fireblad,02051975,boxcar,cheeky,kiteboy,hello12,panda1,elvisp,opennow,doktor,alex12,02101977,pornking,flamengo,02091975,snowbird,lonesome,robin1,11111a,weed420,baracuda,bleach,12345abc,nokia1,metall,singapor,mariner,hereweg
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 75 72 2c 61 6c 66 61 72 6f 6d 65 2c 6a 75 6d 61 6e 6a 69 2c 6d 69 6b 65 36 39 2c 66 61 6e 74 61 73 74 69 2c 31 6d 6f 6e 6b 65 79 2c 77 30 30 74 38 38 2c 73 68 61 77 6e 31 2c 6c 6f 72 69 65 6e 2c 31 61 32 73 33 64 34 66 35 67 2c 6b 6f 6c 65 73 6f 2c 6d 75 72 70 68 2c 6e 61 74 61 73 63 68 61 2c 73 75 6e 6b 69 73 74 2c 6b 65 6e 6e 77 6f 72 74 2c 65 6d 69 6e 65 2c 67 72 69 6e 64 65 72 2c 6d 31 32 33 34 35 2c 71 31 71 32 71 33 71 34 2c 63 68 65 65 62 61 2c 6d 6f 6e 65 79 32 2c 71 61 7a 77 73 78 65 64 63 31 2c 64 69 61 6d 61 6e 74 65 2c 70 72 6f 73 74 6f 2c 70 64 69 64 64 79 2c 73 74 69 6e 6b 79 31 2c 67 61 62 62 79 31 2c 6c 75 63 6b 79 73 2c 66 72 61 6e 63 69 2c 70 6f 72 6e 6f 67 72 61 70 68 69 63 2c 6d 6f 6f 63 68 69 65 2c 67 66 68 6a 64 6a 70 2c 73 61 6d 64 Data Ascii: ur,alfarome,jumanji,mike69,fantasti,1monkey,w00t88,shawn1,lorien,1a2s3d4f5g,koleso,murph,natascha,sunkist,kennwort,emine,grinder,m12345,q1q2q3q4,cheeba,money2,qazwsxedc1,diamante,prosto,pdiddy,stinky1,gabby1,luckys,franci,pornographic,moochie,gfhjdjp,samd
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 61 32 61 33 61 2c 62 6f 6e 65 73 31 2c 64 65 6e 6e 69 73 31 2c 67 61 6c 61 78 69 65 2c 70 6c 65 61 73 65 6d 65 2c 77 68 61 74 65 76 65 72 31 2c 6a 75 6e 6b 79 61 72 64 2c 67 61 6c 61 64 72 69 65 6c 2c 63 68 61 72 6c 69 65 73 2c 32 77 73 78 7a 61 71 31 2c 63 72 69 6d 73 6f 6e 31 2c 62 65 68 65 6d 6f 74 68 2c 74 65 72 65 73 2c 6d 61 73 74 65 72 31 31 2c 66 61 69 72 77 61 79 2c 73 68 61 64 79 31 2c 70 61 73 73 39 39 2c 31 62 61 74 6d 61 6e 2c 6a 6f 73 68 75 61 31 32 2c 62 61 72 61 62 61 6e 2c 61 70 65 6c 73 69 6e 2c 6d 6f 75 73 65 70 61 64 2c 6d 65 6c 6f 6e 2c 74 77 6f 64 6f 67 73 2c 31 32 33 33 32 31 71 77 65 2c 6d 65 74 61 6c 69 63 61 2c 72 79 6a 67 72 66 2c 70 69 70 69 73 6b 61 2c 72 65 72 66 68 66 78 66 2c 6c 75 67 6e 75 74 2c 63 72 65 74 69 6e 2c 69 6c Data Ascii: a2a3a,bones1,dennis1,galaxie,pleaseme,whatever1,junkyard,galadriel,charlies,2wsxzaq1,crimson1,behemoth,teres,master11,fairway,shady1,pass99,1batman,joshua12,baraban,apelsin,mousepad,melon,twodogs,123321qwe,metalica,ryjgrf,pipiska,rerfhfxf,lugnut,cretin,il
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 74 6f 6f 6c 73 68 65 64 2c 67 61 6d 65 72 73 2c 63 6f 66 66 65 2c 69 62 69 6c 6c 31 32 33 2c 66 72 65 65 6c 6f 76 65 2c 61 6e 61 73 61 7a 69 2c 73 69 73 74 65 72 31 2c 6a 69 67 67 65 72 2c 6e 61 74 61 73 68 2c 73 74 61 63 79 31 2c 77 65 72 6f 6e 69 6b 61 2c 6c 75 7a 65 72 6e 2c 73 6f 63 63 65 72 37 2c 68 6f 6f 70 6c 61 2c 64 6d 6f 6e 65 79 2c 76 61 6c 65 72 69 65 31 2c 63 61 6e 65 73 2c 72 61 7a 64 76 61 74 72 69 2c 77 61 73 68 65 72 65 2c 67 72 65 65 6e 77 6f 6f 2c 72 66 68 6a 6b 62 79 66 2c 61 6e 73 65 6c 6d 2c 70 6b 78 65 36 32 2c 6d 61 72 69 62 65 2c 64 61 6e 69 65 6c 32 2c 6d 61 78 69 6d 31 2c 66 61 63 65 6f 66 66 2c 63 61 72 62 69 6e 65 2c 78 74 6b 6a 64 74 72 2c 62 75 64 64 79 31 32 2c 73 74 72 61 74 6f 73 2c 6a 75 6d 70 6d 61 6e 2c 62 75 74 74 6f Data Ascii: toolshed,gamers,coffe,ibill123,freelove,anasazi,sister1,jigger,natash,stacy1,weronika,luzern,soccer7,hoopla,dmoney,valerie1,canes,razdvatri,washere,greenwoo,rfhjkbyf,anselm,pkxe62,maribe,daniel2,maxim1,faceoff,carbine,xtkjdtr,buddy12,stratos,jumpman,butto
2024-04-25 17:20:54 UTC	562	IN	Data Raw: 63 6b 31 31 2c 6d 61 6e 69 73 68 61 2c 67 72 6f 6d 6d 69 74 2c 67 31 32 33 34 35 2c 6d 61 76 65 72 69 6b 2c 63 68 65 73 73 6d 61 6e 2c 68 65 79 74 68 65 72 65 2c 6d 69 78 61 69 6c 2c 6a 6a 6a 6a 6a 6a 6a 31 2c 73 79 6c 76 69 61 31 2c 66 61 69 72 6d 6f 6e 74 2c 68 61 72 76 65 2c 73 6b 75 6c 6c 79 2c 67 6c 6f 62 61 6c 31 2c 79 6f 75 77 69 73 68 2c 70 69 6b 61 63 68 75 31 2c 62 61 64 63 61 74 2c 7a 6f 6d 62 69 65 31 2c 34 39 35 32 37 38 34 33 2c 75 6c 74 72 61 31 2c 72 65 64 72 69 64 65 72 2c 6f 66 66 73 70 72 69 6e 2c 6c 6f 76 65 62 69 72 64 2c 31 35 33 34 32 36 2c 73 74 79 6d 69 65 2c 61 71 31 73 77 32 2c 73 6f 72 72 65 6e 74 6f 2c 30 30 30 30 30 30 31 2c 72 33 61 64 79 34 31 74 2c 77 65 62 73 74 65 72 31 2c 39 35 31 37 35 2c 61 64 61 6d 31 32 33 2c 63 6f Data Ascii: ck11,manisha,grommit,g12345,maverik,chessman,heythere,mixail,jjjjjjj1,sylvia1,fairmont,harve,skully,global1,youwish,pikachu1,badcat,zombie1,49527843,ultra1,redrider,offsprin,lovebird,153426,stymie,aq1sw2,sorrento,0000001,r3ady41t,webster1,95175,adam123,co
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 79 6e 6d 61 6e 2c 73 75 65 72 74 65 2c 62 61 62 61 6c 6f 6f 2c 61 6c 73 6b 64 6a 66 68 67 2c 6f 6c 64 73 6d 6f 62 69 2c 62 6f 6d 62 65 72 31 2c 72 65 64 72 6f 76 65 72 2c 70 75 70 75 63 65 2c 6d 65 74 68 6f 64 6d 61 6e 2c 70 68 65 6e 6f 6d 2c 63 75 74 65 67 69 72 6c 2c 63 6f 75 6e 74 79 6c 69 2c 67 72 65 74 73 63 68 2c 67 6f 64 69 73 67 6f 6f 64 2c 62 79 73 75 6e 73 75 2c 68 61 72 64 68 61 74 2c 6d 69 72 6f 6e 6f 76 61 2c 31 32 33 71 77 65 34 35 36 72 74 79 2c 72 75 73 74 79 31 32 33 2c 73 61 6c 75 74 2c 31 38 37 32 31 31 2c 35 35 35 36 36 36 37 37 37 2c 31 31 31 31 31 7a 2c 6d 61 68 65 73 68 2c 72 6a 6e 74 79 6a 78 74 72 2c 62 72 30 30 6b 6c 79 6e 2c 64 75 6e 63 65 31 2c 74 69 6d 65 62 6f 6d 62 2c 62 6f 76 69 6e 65 2c 6d 61 6b 65 6c 6f 76 65 2c 6c 69 74 Data Ascii: ynman,suerte,babaloo,alskdjfhg,oldsmobi,bomber1,redrover,pupuce,methodman,phenom,cutegirl,countyli,gretsch,godisgood,bysunsu,hardhat,mironova,123qwe456rty,rusty123,salut,187211,555666777,11111z,mahesh,rjntyjxtr,br00klyn,dunce1,timebomb,bovine,makelove,lit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49718	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:54 UTC	1020	OUT	GET /assets/@planningcenter/icons/sprites/general-45fb8eeff447e73ce56b2ccf04643bb3bf4672a4ed64f409e42f456a38874f8a.svg HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: image Referer: https://login.planningcenteronline.com/login/new?return=People%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
2024-04-25 17:20:54 UTC	802	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 134419 Connection: close Date: Wed, 17 Jan 2024 19:20:22 GMT Last-Modified: Thu, 11 Jan 2024 17:45:08 GMT ETag: "6be2c793dbf420e876d30957119dc47b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4cb778a8b1bf8a0ab7cb3b8ba3e52cc6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _iN1ryW7TAMOTg06mLqCyT708cjAuo7HaoaTNsw5r18YG_5EeDsaIw== Age: 8546433 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 0a 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 62 65 6c 6c 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 32 33 32 37 20 31 31 2e 35 30 36 4c 31 33 2e 33 32 37 39 20 39 2e 32 33 34 30 31 56 35 2e 38 31 37 43 31 33 2e 33 33 36 36 20 34 2e 33 39 33 37 39 20 31 32 2e 37 38 30 36 20 33 2e 30 32 35 32 20 31 31 2e 37 38 31 36 20 32 2e 30 31 31 35 33 43 31 30 2e 37 38 32 37 20 30 2e 39 39 37 38 36 31 20 39 2e 34 32 32 34 34 20 30 2e 34 32 31 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <symbol id="bell" viewBox="0 0 16 16"> <path d="M15.2327 11.506L13.3279 9.23401V5.817C13.3366 4.39379 12.7806 3.0252 11.7816 2.01153C10.7827 0.997861 9.42244 0.4218
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 31 31 31 37 43 32 2e 32 31 38 37 33 20 37 2e 30 37 31 30 38 20 32 2e 31 30 39 34 31 20 37 2e 32 37 34 38 35 20 32 2e 30 36 35 31 36 20 37 2e 34 39 36 36 37 43 32 2e 30 32 30 39 31 20 37 2e 37 31 38 34 39 20 32 2e 30 34 33 37 32 20 37 2e 39 34 38 34 31 20 32 2e 31 33 30 37 31 20 38 2e 31 35 37 33 31 43 32 2e 32 31 37 36 39 20 38 2e 33 36 36 32 32 20 32 2e 33 36 34 39 33 20 38 2e 35 34 34 37 33 20 32 2e 35 35 33 38 20 38 2e 36 37 30 32 36 43 32 2e 37 34 32 36 37 20 38 2e 37 39 35 37 38 20 32 2e 39 36 34 36 38 20 38 2e 38 36 32 36 38 20 33 2e 31 39 31 37 34 20 38 2e 38 36 32 34 38 43 33 2e 34 39 35 36 37 20 38 2e 38 36 31 39 36 20 33 2e 37 38 37 30 31 20 38 2e 37 34 31 34 37 20 34 2e 30 30 31 39 33 20 38 2e 35 32 37 34 43 34 2e 32 31 36 38 34 20 38 2e 33 31 Data Ascii: 1117C2.21873 7.07108 2.10941 7.27485 2.06516 7.49667C2.02091 7.71849 2.04372 7.94841 2.13071 8.15731C2.21769 8.36622 2.36493 8.54473 2.5538 8.67026C2.74267 8.79578 2.96468 8.86268 3.19174 8.86248C3.49567 8.86196 3.78701 8.74147 4.00193 8.5274C4.21684 8.31
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 38 20 2d 30 2e 30 31 39 33 32 32 34 20 38 2e 35 33 33 34 31 20 30 2e 30 33 35 38 38 39 32 20 39 2e 35 35 30 30 34 43 30 2e 30 39 31 31 30 30 37 20 31 30 2e 35 36 36 37 20 30 2e 35 33 31 39 30 34 20 31 31 2e 35 32 34 20 31 2e 32 36 38 34 36 20 31 32 2e 32 32 36 39 43 32 2e 30 30 35 30 32 20 31 32 2e 39 32 39 38 20 32 2e 39 38 31 38 39 20 31 33 2e 33 32 35 34 20 34 20 31 33 2e 33 33 33 48 31 32 2e 36 36 37 43 31 33 2e 35 32 38 38 20 31 33 2e 33 33 33 37 20 31 34 2e 33 35 37 32 20 31 32 2e 39 39 39 36 20 31 34 2e 39 37 37 35 20 31 32 2e 34 30 31 32 43 31 35 2e 35 39 37 37 20 31 31 2e 38 30 32 38 20 31 35 2e 39 36 31 33 20 31 30 2e 39 38 36 39 20 31 35 2e 39 39 31 35 20 31 30 2e 31 32 35 36 43 31 36 2e 30 32 31 37 20 39 2e 32 36 34 32 38 20 31 35 2e 37 31 36 Data Ascii: 8 -0.0193224 8.53341 0.0358892 9.55004C0.0911007 10.5667 0.531904 11.524 1.26846 12.2269C2.00502 12.9298 2.98189 13.3254 4 13.333H12.667C13.5288 13.3337 14.3572 12.9996 14.9775 12.4012C15.5977 11.8028 15.9613 10.9869 15.9915 10.1256C16.0217 9.26428 15.716
2024-04-25 17:20:54 UTC	15304	IN	Data Raw: 34 2e 37 35 30 34 33 20 36 2e 33 35 34 31 35 20 34 2e 38 30 37 35 20 36 2e 34 30 36 37 33 20 34 2e 38 34 38 32 35 43 36 2e 34 35 39 33 32 20 34 2e 38 38 39 20 36 2e 35 32 33 39 36 20 34 2e 39 31 31 31 31 20 36 2e 35 39 30 34 39 20 34 2e 39 31 31 31 31 43 36 2e 36 35 37 30 31 20 34 2e 39 31 31 31 31 20 36 2e 37 32 31 36 35 20 34 2e 38 38 39 20 36 2e 37 37 34 32 34 20 34 2e 38 34 38 32 35 43 36 2e 38 32 36 38 33 20 34 2e 38 30 37 35 20 36 2e 38 36 34 33 38 20 34 2e 37 35 30 34 33 20 36 2e 38 38 30 39 39 20 34 2e 36 38 36 30 31 43 36 2e 39 32 38 38 36 20 34 2e 32 34 31 39 35 20 37 2e 31 32 32 30 35 20 33 2e 38 32 36 31 34 20 37 2e 34 33 30 35 35 20 33 2e 35 30 33 31 37 43 37 2e 37 33 39 30 35 20 33 2e 31 38 30 32 20 38 2e 31 34 35 35 38 20 32 2e 39 36 38 31 Data Ascii: 4.75043 6.35415 4.8075 6.40673 4.84825C6.45932 4.889 6.52396 4.91111 6.59049 4.91111C6.65701 4.91111 6.72165 4.889 6.77424 4.84825C6.82683 4.8075 6.86438 4.75043 6.88099 4.68601C6.92886 4.24195 7.12205 3.82614 7.43055 3.50317C7.73905 3.1802 8.14558 2.9681
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 69 6e 65 64 2d 63 68 65 63 6b 6c 69 73 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 39 2e 35 35 33 33 33 20 32 2e 32 37 36 32 33 48 36 2e 34 34 36 31 35 56 33 2e 38 30 32 35 38 48 39 2e 35 35 33 33 33 56 32 2e 32 37 36 32 33 5a 4d 36 2e 34 34 36 31 35 20 30 2e 37 35 43 35 2e 35 38 38 31 36 20 30 2e 37 35 20 34 2e 38 39 32 37 20 31 2e 34 33 33 32 38 20 34 2e 38 39 32 37 20 32 2e 32 37 36 32 33 48 34 2e 31 31 35 38 34 43 32 2e 38 32 38 38 34 20 32 2e 32 37 36 32 33 20 31 2e 37 38 35 35 32 20 33 2e 33 30 31 32 35 20 31 2e 37 38 35 35 32 20 34 2e 35 36 35 37 56 31 32 2e 39 36 30 Data Ascii: ined-checklist" viewBox="0 0 16 16"> <path fill-rule="evenodd" clip-rule="evenodd" d="M9.55333 2.27623H6.44615V3.80258H9.55333V2.27623ZM6.44615 0.75C5.58816 0.75 4.8927 1.43328 4.8927 2.27623H4.11584C2.82884 2.27623 1.78552 3.30125 1.78552 4.5657V12.960
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 31 32 2e 32 39 36 31 20 39 2e 34 35 39 35 35 20 31 32 2e 32 39 39 35 20 39 2e 37 32 34 30 35 20 31 32 2e 32 31 36 31 43 39 2e 39 38 38 35 36 20 31 32 2e 31 33 32 36 20 31 30 2e 32 31 39 35 20 31 31 2e 39 36 36 38 20 31 30 2e 33 38 33 20 31 31 2e 37 34 32 38 43 31 30 2e 35 34 36 35 20 31 31 2e 35 31 38 38 20 31 30 2e 36 33 34 31 20 31 31 2e 32 34 38 33 20 31 30 2e 36 33 33 20 31 30 2e 39 37 31 48 31 30 2e 36 34 31 56 37 2e 32 31 32 43 31 30 2e 36 34 31 20 37 2e 30 34 31 35 33 20 31 30 2e 35 37 33 36 20 36 2e 38 37 37 39 37 20 31 30 2e 34 35 33 36 20 36 2e 37 35 36 39 37 43 31 30 2e 33 33 33 35 20 36 2e 36 33 35 39 36 20 31 30 2e 31 37 30 35 20 36 2e 35 36 37 33 32 20 31 30 20 36 2e 35 36 36 4c 37 2e 30 34 33 20 37 2e 32 38 39 5a 4d 36 2e 31 30 33 20 31 32 Data Ascii: 12.2961 9.45955 12.2995 9.72405 12.2161C9.98856 12.1326 10.2195 11.9668 10.383 11.7428C10.5465 11.5188 10.6341 11.2483 10.633 10.971H10.641V7.212C10.641 7.04153 10.5736 6.87797 10.4536 6.75697C10.3335 6.63596 10.1705 6.56732 10 6.566L7.043 7.289ZM6.103 12
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 32 33 33 20 31 31 2e 38 38 36 31 20 37 2e 31 38 34 39 37 20 31 31 2e 38 36 38 20 37 2e 32 33 20 31 31 2e 38 33 37 4c 39 2e 35 36 38 20 31 30 2e 32 32 37 43 39 2e 36 30 38 30 31 20 31 30 2e 31 39 39 34 20 39 2e 36 34 30 37 32 20 31 30 2e 31 36 32 35 20 39 2e 36 36 33 33 32 20 31 30 2e 31 31 39 35 43 39 2e 36 38 35 39 32 20 31 30 2e 30 37 36 35 20 39 2e 36 39 37 37 33 20 31 30 2e 30 32 38 36 20 39 2e 36 39 37 37 33 20 39 2e 39 38 43 39 2e 36 39 37 37 33 20 39 2e 39 33 31 34 20 39 2e 36 38 35 39 32 20 39 2e 38 38 33 35 33 20 39 2e 36 36 33 33 32 20 39 2e 38 34 30 35 43 39 2e 36 34 30 37 32 20 39 2e 37 39 37 34 38 20 39 2e 36 30 38 30 31 20 39 2e 37 36 30 35 38 20 39 2e 35 36 38 20 39 2e 37 33 33 4c 37 2e 32 33 20 38 2e 31 32 32 5a 4d 37 2e 34 36 36 20 31 30 Data Ascii: 233 11.8861 7.18497 11.868 7.23 11.837L9.568 10.227C9.60801 10.1994 9.64072 10.1625 9.66332 10.1195C9.68592 10.0765 9.69773 10.0286 9.69773 9.98C9.69773 9.9314 9.68592 9.88353 9.66332 9.8405C9.64072 9.79748 9.60801 9.76058 9.568 9.733L7.23 8.122ZM7.466 10
2024-04-25 17:20:54 UTC	16384	IN	Data Raw: 38 35 20 31 30 2e 38 35 34 32 20 35 2e 37 35 38 33 39 43 31 30 2e 30 38 33 34 20 35 2e 32 36 33 39 32 20 39 2e 31 37 37 31 20 35 20 38 2e 32 35 20 35 5a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 2e 35 36 32 35 20 34 2e 32 35 4c 37 2e 34 36 38 37 35 20 30 2e 35 56 38 4c 33 2e 35 36 32 35 20 34 2e 32 35 5a 22 2f 3e 0a 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 72 69 67 68 74 2d 61 72 72 6f 77 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 36 32 31 20 38 4c 37 2e 36 32 31 30 31 20 31 36 4c 35 2e 38 34 33 30 31 20 31 34 2e 32 32 32 4c 31 30 2e 38 30 39 20 39 2e 32 35 37 48 30 2e 30 31 35 30 31 34 36 56 36 2e 37 34 33 48 31 30 2e 38 30 39 4c 35 2e 38 34 33 30 31 20 31 Data Ascii: 85 10.8542 5.75839C10.0834 5.26392 9.1771 5 8.25 5Z"/><path d="M3.5625 4.25L7.46875 0.5V8L3.5625 4.25Z"/></symbol><symbol id="right-arrow" viewBox="0 0 16 16"> <path d="M15.621 8L7.62101 16L5.84301 14.222L10.809 9.257H0.0150146V6.743H10.809L5.84301 1
2024-04-25 17:20:54 UTC	4427	IN	Data Raw: 38 32 5a 4d 31 30 2e 38 38 32 20 37 2e 33 33 32 43 31 31 2e 33 31 32 35 20 37 2e 33 33 32 32 20 31 31 2e 37 33 33 33 20 37 2e 32 30 34 37 32 20 31 32 2e 30 39 31 33 20 36 2e 39 36 35 36 39 43 31 32 2e 34 34 39 33 20 36 2e 37 32 36 36 37 20 31 32 2e 37 32 38 33 20 36 2e 33 38 36 38 33 20 31 32 2e 38 39 33 32 20 35 2e 39 38 39 31 38 43 31 33 2e 30 35 38 20 35 2e 35 39 31 35 33 20 31 33 2e 31 30 31 32 20 35 2e 31 35 33 39 33 20 31 33 2e 30 31 37 32 20 34 2e 37 33 31 37 33 43 31 32 2e 39 33 33 33 20 34 2e 33 30 39 35 33 20 31 32 2e 37 32 36 20 33 2e 39 32 31 37 32 20 31 32 2e 34 32 31 37 20 33 2e 36 31 37 33 34 43 31 32 2e 31 31 37 33 20 33 2e 33 31 32 39 36 20 31 31 2e 37 32 39 35 20 33 2e 31 30 35 36 39 20 31 31 2e 33 30 37 33 20 33 2e 30 32 31 37 36 43 31 Data Ascii: 82ZM10.882 7.332C11.3125 7.3322 11.7333 7.20472 12.0913 6.96569C12.4493 6.72667 12.7283 6.38683 12.8932 5.98918C13.058 5.59153 13.1012 5.15393 13.0172 4.73173C12.9333 4.30953 12.726 3.92172 12.4217 3.61734C12.1173 3.31296 11.7295 3.10569 11.3073 3.02176C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49719	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:54 UTC	943	OUT	GET /assets/pco/page_expired/manifest-c88201c22050a32daa4c0109df080c4d1076a43dad55e1d46fc8b5539095ef00.js HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/login/new?return=People%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
2024-04-25 17:20:54 UTC	809	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7587 Connection: close Date: Wed, 17 Jan 2024 19:20:21 GMT Last-Modified: Thu, 11 Jan 2024 17:44:28 GMT ETag: "a9aece3cf02e139409e53a5bf97ef8a0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 407e03ee30fa8ebbd8caab132547e216.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: J4xvMW7c5EoNd8C_KqrEkwfhCKefutf8fMNfUMI_cdCVBVr0vRgmJw== Age: 8546434 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:20:54 UTC	6396	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 20 7b 20 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 20 69 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 3d 3d 3d 20 22 73 79 6d 62 6f 6c 22 29 20 7b 20 5f 74 79 70 65 6f 66 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 20 7b 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 3b 20 7d 3b 20 7d 20 65 6c 73 65 20 7b 20 5f 74 79 70 65 6f 66 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 20 7b 20 72 65 74 75 72 6e 20 6f 62 6a 20 26 26 20 74 Data Ascii: "use strict";function _typeof(obj) { "@babel/helpers - typeof"; if (typeof Symbol === "function" && typeof Symbol.iterator === "symbol") { _typeof = function _typeof(obj) { return typeof obj; }; } else { _typeof = function _typeof(obj) { return obj && t
2024-04-25 17:20:54 UTC	1191	IN	Data Raw: 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 53 77 61 6c 28 63 6f 6e 66 69 67 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 5b 22 63 61 74 63 68 22 5d 28 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 61 6c 65 72 74 28 63 6f 6e 66 69 67 2e 74 65 78 74 29 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 6b 65 79 3a 20 22 72 65 63 Data Ascii: lse { this.Swal(config).then(function () { return window.location.reload(); })["catch"](console.log); } } else { alert(config.text); window.location.reload(); } } }, { key: "rec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	18.155.1.14	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:54 UTC	584	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.edge.sdk.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:20:54 UTC	614	IN	HTTP/1.1 307 Temporary Redirect Server: CloudFront Date: Thu, 25 Apr 2024 17:20:54 GMT Content-Length: 0 Connection: close Access-Control-Allow-Headers: * Access-Control-Allow-Methods: * Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Cache-Control: max-age=86400 Location: https://ab5ddfb19446.87d96309.us-east-2.token.awswaf.com/ab5ddfb19446/33b184b1a0f1/challenge.js X-Cache: FunctionGeneratedResponse from cloudfront Via: 1.1 ff04cdefdd5436627fece3898d7cf2b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 X-Amz-Cf-Id: OqOLEl12dKMOvLRWOEbZtc7oxQu0bjghOsQs2-ifBuVCCC20Soi51Q==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49724	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:55 UTC	600	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:20:55 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1093044 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:20:55 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a90f7-1e577dd53d2f0f04471d2347 X-Cache: Miss from cloudfront Via: 1.1 dd169cfdbbafbb3da513bede6bc6640e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: OjyUfcyiJ1EfvTuzQRiTGzijNU7NyKVSCthydRqcWxawKw0XssGEeQ==
2024-04-25 17:20:55 UTC	15849	IN	Data Raw: 2f 2a 21 20 3c 21 2d 40 70 72 65 73 65 72 76 65 20 41 57 53 20 57 41 46 20 49 6e 74 65 67 72 61 74 69 6f 6e 20 44 65 76 65 6c 6f 70 65 72 20 47 75 69 64 65 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 61 77 73 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 77 61 66 2f 6c 61 74 65 73 74 2f 64 65 76 65 6c 6f 70 65 72 67 75 69 64 65 2f 77 61 66 2d 6a 61 76 61 73 63 72 69 70 74 2d 73 64 6b 2e 68 74 6d 6c 3e 2d 2d 3e 20 2a 2f 0a 76 61 72 20 61 32 5f 30 78 32 61 35 33 3d 5b 27 32 2e 35 2e 32 39 2e 33 35 27 2c 27 5f 5f 76 61 6c 75 65 73 27 2c 27 73 65 6e 74 27 2c 27 6e 6f 64 65 27 2c 27 74 61 67 27 2c 27 52 53 41 45 53 2d 50 4b 43 53 31 2d 56 31 5f 35 27 2c 27 73 69 67 6e 75 6d 27 2c 27 5f 5f 67 65 6e 65 72 61 74 6f 72 27 2c 27 74 6f 42 79 74 65 41 72 72 61 79 27 2c 27 63 Data Ascii: /! <!-@preserve AWS WAF Integration Developer Guide <https://docs.aws.amazon.com/waf/latest/developerguide/waf-javascript-sdk.html>--> /var a2_0x2a53=['2.5.29.35','__values','sent','node','tag','RSAES-PKCS1-V1_5','signum','__generator','toByteArray','c
2024-04-25 17:20:55 UTC	16384	IN	Data Raw: 6d 50 72 69 76 61 74 65 4b 65 79 27 2c 27 6a 73 62 6e 27 2c 27 49 6e 76 61 6c 69 64 5c 78 32 30 70 61 72 61 6d 65 74 65 72 3a 5c 78 32 30 27 2c 27 41 45 53 2d 32 35 36 2d 43 42 43 27 2c 27 47 72 65 65 6b 43 27 2c 27 67 65 74 54 42 53 43 65 72 74 69 66 69 63 61 74 65 27 2c 27 6c 61 73 74 27 2c 27 73 68 69 66 74 27 2c 27 75 6e 65 78 70 65 63 74 65 64 5f 6d 65 73 73 61 67 65 27 2c 27 6d 65 73 73 61 67 65 46 72 6f 6d 50 65 6d 27 2c 27 70 72 6f 70 73 3a 5c 78 32 30 27 2c 27 5f 65 78 70 61 6e 64 4b 65 79 27 2c 27 31 4f 69 54 72 73 6c 27 2c 27 74 61 6e 27 2c 27 76 65 72 73 69 6f 6e 73 27 2c 27 67 65 74 53 69 67 6e 61 74 75 72 65 27 2c 27 33 35 31 30 36 6c 6a 61 59 6e 45 27 2c 27 31 32 31 36 35 39 37 63 70 49 4b 74 66 27 2c 27 70 6c 75 67 69 6e 43 6f 6c 6c 65 63 Data Ascii: mPrivateKey','jsbn','Invalid\x20parameter:\x20','AES-256-CBC','GreekC','getTBSCertificate','last','shift','unexpected_message','messageFromPem','props:\x20','_expandKey','1OiTrsl','tan','versions','getSignature','35106ljaYnE','1216597cpIKtf','pluginCollec
2024-04-25 17:20:56 UTC	10702	IN	Data Raw: 6e 63 6f 75 6e 74 65 72 65 64 5c 78 32 30 66 61 69 6c 75 72 65 3a 5c 78 32 30 27 2c 27 44 6f 74 75 6d 27 2c 27 53 43 52 4f 4c 4c 5f 45 56 45 4e 54 27 2c 27 66 6f 72 6d 61 74 4b 65 79 27 2c 27 4d 61 6c 67 75 6e 5c 78 32 30 47 6f 74 68 69 63 27 2c 27 31 35 30 35 39 37 38 69 56 44 46 71 47 27 2c 27 73 75 70 70 6f 72 74 73 57 65 62 43 72 79 70 74 6f 27 2c 27 63 6f 6e 74 65 6e 74 44 6f 6d 61 69 6e 27 2c 27 62 61 64 5f 72 65 63 6f 72 64 5f 6d 61 63 27 2c 27 49 53 4f 43 50 27 2c 27 4b 68 6d 65 72 5c 78 32 30 55 49 27 2c 27 4e 6f 5c 78 32 30 63 6c 69 65 6e 74 5c 78 32 30 63 65 72 74 69 66 69 63 61 74 65 5c 78 32 30 70 72 6f 76 69 64 65 64 2e 27 2c 27 49 6e 73 74 61 6e 74 43 6f 6c 6c 65 63 74 6f 72 27 2c 27 4d 65 73 71 75 69 74 65 5c 78 32 30 53 74 64 27 2c 27 5c Data Ascii: ncountered\x20failure:\x20','Dotum','SCROLL_EVENT','formatKey','Malgun\x20Gothic','1505978iVDFqG','supportsWebCrypto','contentDomain','bad_record_mac','ISOCP','Khmer\x20UI','No\x20client\x20certificate\x20provided.','InstantCollector','Mesquite\x20Std','\
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 27 52 53 41 50 72 69 76 61 74 65 4b 65 79 2e 70 72 69 6d 65 31 27 2c 27 70 72 6f 74 6f 63 6f 6c 5f 76 65 72 73 69 6f 6e 27 2c 27 7b 33 41 46 33 36 32 33 30 2d 41 32 36 39 2d 31 31 44 31 2d 42 35 42 46 2d 30 30 30 30 46 38 30 35 31 35 31 35 7d 27 2c 27 63 68 61 6e 67 65 42 69 74 27 2c 27 5c 78 32 30 61 6e 64 5c 78 32 30 62 61 73 65 2d 73 74 72 69 6e 67 5c 78 32 30 77 61 73 3a 5c 78 32 30 27 2c 27 46 61 69 6c 65 64 5c 78 32 30 74 6f 5c 78 32 30 64 65 63 72 79 70 74 5c 78 32 30 50 4b 43 53 23 31 32 5c 78 32 30 53 61 66 65 43 6f 6e 74 65 6e 74 73 2e 27 2c 27 31 32 37 5a 64 63 4a 6d 6a 27 2c 27 6d 61 6a 6f 72 27 2c 27 6c 6f 63 6b 27 2c 27 6d 64 35 27 2c 27 41 74 74 72 69 62 75 74 65 5c 78 32 30 74 79 70 65 5c 78 32 30 6e 6f 74 5c 78 32 30 73 70 65 63 69 66 69 Data Ascii: 'RSAPrivateKey.prime1','protocol_version','{3AF36230-A269-11D1-B5BF-0000F8051515}','changeBit','\x20and\x20base-string\x20was:\x20','Failed\x20to\x20decrypt\x20PKCS#12\x20SafeContents.','127ZdcJmj','major','lock','md5','Attribute\x20type\x20not\x20specifi
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 32 30 63 6f 6d 70 75 74 65 5c 78 32 30 63 65 72 74 69 66 69 63 61 74 65 5c 78 32 30 64 69 67 65 73 74 2e 5c 78 32 30 55 6e 6b 6e 6f 77 6e 5c 78 32 30 6d 65 73 73 61 67 65 5c 78 32 30 64 69 67 65 73 74 5c 78 32 30 61 6c 67 6f 72 69 74 68 6d 5c 78 32 30 4f 49 44 2e 27 2c 27 44 4f 43 55 4d 45 4e 54 5f 49 4e 54 45 52 41 43 54 49 4f 4e 5f 45 56 45 4e 54 53 27 2c 27 68 6d 61 63 57 69 74 68 53 48 41 32 32 34 27 2c 27 73 65 74 4c 65 76 65 6c 27 2c 27 5c 78 32 30 28 6d 61 6c 66 6f 72 6d 65 64 5c 78 32 30 55 54 46 38 29 27 2c 27 6f 69 64 73 27 2c 27 4d 65 74 61 27 2c 27 55 6e 73 75 70 70 6f 72 74 65 64 5c 78 32 30 61 73 79 6d 6d 65 74 72 69 63 5c 78 32 30 63 69 70 68 65 72 2c 5c 78 32 30 4f 49 44 5c 78 32 30 27 2c 27 41 75 64 69 6f 43 6f 6e 74 65 78 74 27 2c 27 68 Data Ascii: 20compute\x20certificate\x20digest.\x20Unknown\x20message\x20digest\x20algorithm\x20OID.','DOCUMENT_INTERACTION_EVENTS','hmacWithSHA224','setLevel','\x20(malformed\x20UTF8)','oids','Meta','Unsupported\x20asymmetric\x20cipher,\x20OID\x20','AudioContext','h
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 34 38 28 5f 30 78 35 64 61 30 65 65 29 7b 5f 30 78 33 38 30 39 62 33 5b 5f 30 78 35 64 61 30 65 65 5d 26 26 28 5f 30 78 33 66 32 34 63 62 5b 5f 30 78 35 64 61 30 65 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 36 65 64 38 35 31 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 30 30 32 65 33 2c 5f 30 78 63 36 36 34 63 32 29 7b 76 61 72 20 5f 30 78 33 62 35 33 65 61 3d 61 32 5f 30 78 32 33 35 62 3b 5f 30 78 34 37 36 35 66 33 5b 5f 30 78 33 62 35 33 65 61 28 30 78 34 36 30 29 5d 28 5b 5f 30 78 35 64 61 30 65 65 2c 5f 30 78 36 65 64 38 35 31 2c 5f 30 78 34 30 30 32 65 33 2c 5f 30 78 63 36 36 34 63 32 5d 29 3e 30 78 31 7c 7c 5f 30 78 34 66 37 31 31 63 28 5f 30 78 35 64 61 30 65 65 2c 5f 30 78 36 65 64 38 35 Data Ascii: 48(_0x5da0ee){_0x3809b3[_0x5da0ee]&&(_0x3f24cb[_0x5da0ee]=function(_0x6ed851){return new Promise(function(_0x4002e3,_0xc664c2){var _0x3b53ea=a2_0x235b;_0x4765f3[_0x3b53ea(0x460)]([_0x5da0ee,_0x6ed851,_0x4002e3,_0xc664c2])>0x1\|\|_0x4f711c(_0x5da0ee,_0x6ed85
2024-04-25 17:20:56 UTC	6056	IN	Data Raw: 36 37 39 66 39 2c 5f 30 78 31 30 66 65 65 39 3d 5b 27 65 6c 65 6d 65 6e 74 27 2c 5f 30 78 66 32 30 66 31 32 28 30 78 37 61 36 29 2c 30 78 37 33 39 38 2c 30 78 30 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 67 65 74 27 2c 30 78 62 34 30 31 2c 27 64 61 74 61 27 2c 5f 30 78 66 32 30 66 31 32 28 30 78 38 66 66 29 2c 27 63 79 63 6c 65 42 75 66 66 65 72 27 5d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 61 64 66 31 61 28 5f 30 78 34 30 31 31 39 39 29 7b 74 68 69 73 5b 5f 30 78 31 30 66 65 65 39 5b 30 78 38 5d 5d 3d 5f 30 78 34 30 31 31 39 39 2c 74 68 69 73 5b 5f 30 78 31 30 66 65 65 39 5b 30 78 30 5d 5d 3d 5f 30 78 34 30 31 31 39 39 5b 5f 30 78 31 30 66 65 65 39 5b 30 78 30 5d 5d 2c 74 68 69 73 5b 5f 30 78 31 30 66 65 65 39 5b 30 78 37 5d 5d 3d 7b 27 63 6c 69 63 6b Data Ascii: 679f9,_0x10fee9=['element',_0xf20f12(0x7a6),0x7398,0x0,'prototype','get',0xb401,'data',_0xf20f12(0x8ff),'cycleBuffer'];function _0xeadf1a(_0x401199){this[_0x10fee9[0x8]]=_0x401199,this[_0x10fee9[0x0]]=_0x401199[_0x10fee9[0x0]],this[_0x10fee9[0x7]]={'click
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 29 3b 7d 2c 5f 30 78 38 31 33 62 38 61 3b 7d 28 29 3b 5f 30 78 35 37 66 35 32 39 5b 5f 30 78 34 30 37 37 35 38 28 30 78 36 39 31 29 5d 3d 5f 30 78 31 62 64 33 35 34 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 35 66 65 31 62 2c 5f 30 78 31 61 65 64 31 34 2c 5f 30 78 39 35 35 62 38 33 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 5f 30 78 31 61 65 64 31 34 5b 27 5f 5f 65 73 4d 6f 64 75 6c 65 27 5d 3d 30 78 31 3b 76 61 72 20 5f 30 78 32 61 63 30 30 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 62 39 34 64 38 3d 61 32 5f 30 78 32 33 35 62 2c 5f 30 78 32 66 63 30 37 37 3d 5b 27 62 6c 6f 62 27 2c 5f 30 78 33 62 39 34 64 38 28 30 78 38 37 33 29 2c 5f 30 78 33 62 39 34 64 38 28 30 78 38 37 62 29 2c 30 2e 31 33 34 39 39 34 32 38 34 32 32 31 35 Data Ascii: );},_0x813b8a;}();_0x57f529[_0x407758(0x691)]=_0x1bd354;},function(_0x35fe1b,_0x1aed14,_0x955b83){'use strict';_0x1aed14['__esModule']=0x1;var _0x2ac007=function(){var _0x3b94d8=a2_0x235b,_0x2fc077=['blob',_0x3b94d8(0x873),_0x3b94d8(0x87b),0.1349942842215
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 30 78 62 63 30 32 63 35 28 30 78 38 33 35 29 2c 5f 30 78 62 63 30 32 63 35 28 30 78 63 34 64 29 2c 5f 30 78 62 63 30 32 63 35 28 30 78 37 61 62 29 2c 5f 30 78 62 63 30 32 63 35 28 30 78 36 32 31 29 2c 5f 30 78 62 63 30 32 63 35 28 30 78 35 65 34 29 2c 5f 30 78 62 63 30 32 63 35 28 30 78 34 64 34 29 2c 5f 30 78 62 63 30 32 63 35 28 30 78 35 66 64 29 5d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 32 66 31 38 34 28 5f 30 78 34 36 37 63 32 30 29 7b 76 61 72 20 5f 30 78 31 61 34 64 30 33 3d 5f 30 78 34 36 37 63 32 30 5b 5f 30 78 32 65 34 30 66 66 5b 30 78 31 64 5d 5d 3b 74 68 69 73 5b 5f 30 78 32 65 34 30 66 66 5b 30 78 31 64 5d 5d 3d 5f 30 78 31 61 34 64 30 33 2c 74 68 69 73 5b 5f 30 78 32 65 34 30 66 66 5b 30 78 32 5d 5d 3d 74 68 69 73 5b 5f 30 78 32 65 34 30 Data Ascii: 0xbc02c5(0x835),_0xbc02c5(0xc4d),_0xbc02c5(0x7ab),_0xbc02c5(0x621),_0xbc02c5(0x5e4),_0xbc02c5(0x4d4),_0xbc02c5(0x5fd)];function _0x42f184(_0x467c20){var _0x1a4d03=_0x467c20[_0x2e40ff[0x1d]];this[_0x2e40ff[0x1d]]=_0x1a4d03,this[_0x2e40ff[0x2]]=this[_0x2e40
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 30 78 32 5d 2c 27 5c 78 30 39 27 3a 5f 30 78 33 33 34 62 37 35 5b 30 78 30 5d 7d 2c 5f 30 78 31 64 37 61 30 32 3b 7d 28 29 3b 5f 30 78 32 32 36 65 36 63 5b 5f 30 78 31 34 35 64 65 39 28 30 78 36 39 31 29 5d 3d 5f 30 78 31 65 33 37 65 62 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 36 64 31 64 33 2c 5f 30 78 34 64 35 61 63 36 2c 5f 30 78 35 35 64 38 38 64 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 5f 30 78 34 62 39 64 63 63 3d 61 32 5f 30 78 32 33 35 62 3b 5f 30 78 34 64 35 61 63 36 5b 5f 30 78 34 62 39 64 63 63 28 30 78 34 32 65 29 5d 3d 30 78 31 3b 76 61 72 20 5f 30 78 36 63 62 35 62 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 31 38 37 37 62 37 3d 5f 30 78 34 62 39 64 63 63 2c 5f 30 78 66 31 37 30 62 63 3d 5b 27 65 6e 63 Data Ascii: 0x2],'\x09':_0x334b75[0x0]},_0x1d7a02;}();_0x226e6c[_0x145de9(0x691)]=_0x1e37eb;},function(_0x56d1d3,_0x4d5ac6,_0x55d88d){'use strict';var _0x4b9dcc=a2_0x235b;_0x4d5ac6[_0x4b9dcc(0x42e)]=0x1;var _0x6cb5bd=function(){var _0x1877b7=_0x4b9dcc,_0xf170bc=['enc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49723	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:55 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 17:20:55 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=135760 Date: Thu, 25 Apr 2024 17:20:55 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49725	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:56 UTC	739	OUT	GET /assets/@planningcenter/icons/sprites/general-45fb8eeff447e73ce56b2ccf04643bb3bf4672a4ed64f409e42f456a38874f8a.svg HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
2024-04-25 17:20:56 UTC	802	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 134419 Connection: close Date: Wed, 17 Jan 2024 19:20:22 GMT Last-Modified: Thu, 11 Jan 2024 17:45:08 GMT ETag: "6be2c793dbf420e876d30957119dc47b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 26b12020e819f8ec63c8747ee42971f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Mgkz60o3fZISsADnIp73sM5CmBXdBOBrEU5PVWRMGrr-RafB6YJ6IQ== Age: 8546435 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 0a 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 62 65 6c 6c 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 32 33 32 37 20 31 31 2e 35 30 36 4c 31 33 2e 33 32 37 39 20 39 2e 32 33 34 30 31 56 35 2e 38 31 37 43 31 33 2e 33 33 36 36 20 34 2e 33 39 33 37 39 20 31 32 2e 37 38 30 36 20 33 2e 30 32 35 32 20 31 31 2e 37 38 31 36 20 32 2e 30 31 31 35 33 43 31 30 2e 37 38 32 37 20 30 2e 39 39 37 38 36 31 20 39 2e 34 32 32 34 34 20 30 2e 34 32 31 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <symbol id="bell" viewBox="0 0 16 16"> <path d="M15.2327 11.506L13.3279 9.23401V5.817C13.3366 4.39379 12.7806 3.0252 11.7816 2.01153C10.7827 0.997861 9.42244 0.4218
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 31 31 31 37 43 32 2e 32 31 38 37 33 20 37 2e 30 37 31 30 38 20 32 2e 31 30 39 34 31 20 37 2e 32 37 34 38 35 20 32 2e 30 36 35 31 36 20 37 2e 34 39 36 36 37 43 32 2e 30 32 30 39 31 20 37 2e 37 31 38 34 39 20 32 2e 30 34 33 37 32 20 37 2e 39 34 38 34 31 20 32 2e 31 33 30 37 31 20 38 2e 31 35 37 33 31 43 32 2e 32 31 37 36 39 20 38 2e 33 36 36 32 32 20 32 2e 33 36 34 39 33 20 38 2e 35 34 34 37 33 20 32 2e 35 35 33 38 20 38 2e 36 37 30 32 36 43 32 2e 37 34 32 36 37 20 38 2e 37 39 35 37 38 20 32 2e 39 36 34 36 38 20 38 2e 38 36 32 36 38 20 33 2e 31 39 31 37 34 20 38 2e 38 36 32 34 38 43 33 2e 34 39 35 36 37 20 38 2e 38 36 31 39 36 20 33 2e 37 38 37 30 31 20 38 2e 37 34 31 34 37 20 34 2e 30 30 31 39 33 20 38 2e 35 32 37 34 43 34 2e 32 31 36 38 34 20 38 2e 33 31 Data Ascii: 1117C2.21873 7.07108 2.10941 7.27485 2.06516 7.49667C2.02091 7.71849 2.04372 7.94841 2.13071 8.15731C2.21769 8.36622 2.36493 8.54473 2.5538 8.67026C2.74267 8.79578 2.96468 8.86268 3.19174 8.86248C3.49567 8.86196 3.78701 8.74147 4.00193 8.5274C4.21684 8.31
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 38 20 2d 30 2e 30 31 39 33 32 32 34 20 38 2e 35 33 33 34 31 20 30 2e 30 33 35 38 38 39 32 20 39 2e 35 35 30 30 34 43 30 2e 30 39 31 31 30 30 37 20 31 30 2e 35 36 36 37 20 30 2e 35 33 31 39 30 34 20 31 31 2e 35 32 34 20 31 2e 32 36 38 34 36 20 31 32 2e 32 32 36 39 43 32 2e 30 30 35 30 32 20 31 32 2e 39 32 39 38 20 32 2e 39 38 31 38 39 20 31 33 2e 33 32 35 34 20 34 20 31 33 2e 33 33 33 48 31 32 2e 36 36 37 43 31 33 2e 35 32 38 38 20 31 33 2e 33 33 33 37 20 31 34 2e 33 35 37 32 20 31 32 2e 39 39 39 36 20 31 34 2e 39 37 37 35 20 31 32 2e 34 30 31 32 43 31 35 2e 35 39 37 37 20 31 31 2e 38 30 32 38 20 31 35 2e 39 36 31 33 20 31 30 2e 39 38 36 39 20 31 35 2e 39 39 31 35 20 31 30 2e 31 32 35 36 43 31 36 2e 30 32 31 37 20 39 2e 32 36 34 32 38 20 31 35 2e 37 31 36 Data Ascii: 8 -0.0193224 8.53341 0.0358892 9.55004C0.0911007 10.5667 0.531904 11.524 1.26846 12.2269C2.00502 12.9298 2.98189 13.3254 4 13.333H12.667C13.5288 13.3337 14.3572 12.9996 14.9775 12.4012C15.5977 11.8028 15.9613 10.9869 15.9915 10.1256C16.0217 9.26428 15.716
2024-04-25 17:20:56 UTC	14626	IN	Data Raw: 34 2e 37 35 30 34 33 20 36 2e 33 35 34 31 35 20 34 2e 38 30 37 35 20 36 2e 34 30 36 37 33 20 34 2e 38 34 38 32 35 43 36 2e 34 35 39 33 32 20 34 2e 38 38 39 20 36 2e 35 32 33 39 36 20 34 2e 39 31 31 31 31 20 36 2e 35 39 30 34 39 20 34 2e 39 31 31 31 31 43 36 2e 36 35 37 30 31 20 34 2e 39 31 31 31 31 20 36 2e 37 32 31 36 35 20 34 2e 38 38 39 20 36 2e 37 37 34 32 34 20 34 2e 38 34 38 32 35 43 36 2e 38 32 36 38 33 20 34 2e 38 30 37 35 20 36 2e 38 36 34 33 38 20 34 2e 37 35 30 34 33 20 36 2e 38 38 30 39 39 20 34 2e 36 38 36 30 31 43 36 2e 39 32 38 38 36 20 34 2e 32 34 31 39 35 20 37 2e 31 32 32 30 35 20 33 2e 38 32 36 31 34 20 37 2e 34 33 30 35 35 20 33 2e 35 30 33 31 37 43 37 2e 37 33 39 30 35 20 33 2e 31 38 30 32 20 38 2e 31 34 35 35 38 20 32 2e 39 36 38 31 Data Ascii: 4.75043 6.35415 4.8075 6.40673 4.84825C6.45932 4.889 6.52396 4.91111 6.59049 4.91111C6.65701 4.91111 6.72165 4.889 6.77424 4.84825C6.82683 4.8075 6.86438 4.75043 6.88099 4.68601C6.92886 4.24195 7.12205 3.82614 7.43055 3.50317C7.73905 3.1802 8.14558 2.9681
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 35 36 38 20 38 2e 35 33 38 32 33 43 31 31 2e 32 34 37 38 20 38 2e 36 30 33 37 33 20 31 30 2e 38 36 33 31 20 38 2e 33 32 35 32 36 20 31 30 2e 37 39 37 36 20 37 2e 39 31 36 32 36 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 37 2e 38 35 35 37 20 35 2e 30 36 30 33 38 43 37 2e 34 34 32 34 34 20 35 2e 30 38 38 34 36 20 37 2e 30 38 34 36 36 20 34 2e 37 37 36 32 32 20 37 2e 30 35 36 35 37 20 34 2e 33 36 32 39 36 4c 36 2e 38 32 39 36 38 20 31 2e 30 32 34 35 34 43 36 2e 38 30 31 35 39 20 30 2e 36 31 31 32 38 35 20 37 2e 31 31 33 38 33 20 30 2e 32 35 33 35 30 32 20 37 2e 35 32 37 30 39 20 30 2e 32 32 35 34 31 35 43 37 2e 39 34 30 33 36 20 30 2e 31 39 Data Ascii: 568 8.53823C11.2478 8.60373 10.8631 8.32526 10.7976 7.91626Z"/><path fill-rule="evenodd" clip-rule="evenodd" d="M7.8557 5.06038C7.44244 5.08846 7.08466 4.77622 7.05657 4.36296L6.82968 1.02454C6.80159 0.611285 7.11383 0.253502 7.52709 0.225415C7.94036 0.19
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 36 39 36 31 43 35 2e 31 36 36 39 38 20 31 30 2e 38 33 38 39 20 35 2e 30 30 30 33 35 20 31 31 2e 30 34 32 20 34 2e 39 30 31 39 36 20 31 31 2e 32 37 39 35 43 34 2e 38 30 33 35 36 20 31 31 2e 35 31 37 31 20 34 2e 37 37 37 38 32 20 31 31 2e 37 37 38 34 20 34 2e 38 32 37 39 38 20 31 32 2e 30 33 30 36 43 34 2e 38 37 38 31 34 20 31 32 2e 32 38 32 38 20 35 2e 30 30 31 39 35 20 31 32 2e 35 31 34 34 20 35 2e 31 38 33 37 36 20 31 32 2e 36 39 36 32 43 35 2e 33 36 35 35 37 20 31 32 2e 38 37 38 20 35 2e 35 39 37 32 31 20 31 33 2e 30 30 31 39 20 35 2e 38 34 39 33 38 20 31 33 2e 30 35 32 43 36 2e 31 30 31 35 36 20 31 33 2e 31 30 32 32 20 36 2e 33 36 32 39 35 20 31 33 2e 30 37 36 34 20 36 2e 36 30 30 34 39 20 31 32 2e 39 37 38 43 36 2e 38 33 38 30 33 20 31 32 2e 38 37 39 Data Ascii: 6961C5.16698 10.8389 5.00035 11.042 4.90196 11.2795C4.80356 11.5171 4.77782 11.7784 4.82798 12.0306C4.87814 12.2828 5.00195 12.5144 5.18376 12.6962C5.36557 12.878 5.59721 13.0019 5.84938 13.052C6.10156 13.1022 6.36295 13.0764 6.60049 12.978C6.83803 12.879
2024-04-25 17:20:56 UTC	16384	IN	Data Raw: 20 37 2e 32 35 32 34 34 43 37 2e 39 39 36 39 31 20 37 2e 31 34 35 31 33 20 38 2e 35 35 36 30 38 20 37 2e 32 30 30 32 20 39 2e 30 36 34 32 34 20 37 2e 34 31 30 36 39 43 39 2e 35 37 32 34 20 37 2e 36 32 31 31 38 20 31 30 2e 30 30 36 37 20 37 2e 39 37 37 36 33 20 31 30 2e 33 31 32 33 20 38 2e 34 33 34 39 36 43 31 30 2e 36 31 37 39 20 38 2e 38 39 32 32 39 20 31 30 2e 37 38 31 20 39 2e 34 32 39 39 37 20 31 30 2e 37 38 31 20 39 2e 39 38 43 31 30 2e 37 38 32 32 20 31 30 2e 33 34 35 35 20 31 30 2e 37 31 31 31 20 31 30 2e 37 30 37 37 20 31 30 2e 35 37 31 37 20 31 31 2e 30 34 35 36 43 31 30 2e 34 33 32 34 20 31 31 2e 33 38 33 36 20 31 30 2e 32 32 37 36 20 31 31 2e 36 39 30 36 20 39 2e 39 36 39 31 31 20 31 31 2e 39 34 39 31 43 39 2e 37 31 30 36 33 20 31 32 2e 32 30 Data Ascii: 7.25244C7.99691 7.14513 8.55608 7.2002 9.06424 7.41069C9.5724 7.62118 10.0067 7.97763 10.3123 8.43496C10.6179 8.89229 10.781 9.42997 10.781 9.98C10.7822 10.3455 10.7111 10.7077 10.5717 11.0456C10.4324 11.3836 10.2276 11.6906 9.96911 11.9491C9.71063 12.20
2024-04-25 17:20:56 UTC	14808	IN	Data Raw: 2e 35 20 31 30 2e 36 39 34 35 20 33 2e 38 35 31 38 39 20 31 31 2e 37 32 32 33 20 34 2e 35 31 31 31 38 43 31 32 2e 37 35 30 31 20 35 2e 31 37 30 34 37 20 31 33 2e 35 35 31 32 20 36 2e 31 30 37 35 34 20 31 34 2e 30 32 34 32 20 37 2e 32 30 33 39 43 31 34 2e 34 39 37 33 20 38 2e 33 30 30 32 35 20 31 34 2e 36 32 31 31 20 39 2e 35 30 36 36 35 20 31 34 2e 33 37 39 39 20 31 30 2e 36 37 30 35 43 31 34 2e 31 33 38 38 20 31 31 2e 38 33 34 34 20 31 33 2e 35 34 33 35 20 31 32 2e 39 30 33 35 20 31 32 2e 36 36 39 34 20 31 33 2e 37 34 32 36 43 31 31 2e 37 39 35 33 20 31 34 2e 35 38 31 38 20 31 30 2e 36 38 31 37 20 31 35 2e 31 35 33 32 20 39 2e 34 36 39 33 31 20 31 35 2e 33 38 34 37 43 38 2e 32 35 36 39 33 20 31 35 2e 36 31 36 32 20 37 2e 30 30 30 32 37 20 31 35 2e 34 39 Data Ascii: .5 10.6945 3.85189 11.7223 4.51118C12.7501 5.17047 13.5512 6.10754 14.0242 7.2039C14.4973 8.30025 14.6211 9.50665 14.3799 10.6705C14.1388 11.8344 13.5435 12.9035 12.6694 13.7426C11.7953 14.5818 10.6817 15.1532 9.46931 15.3847C8.25693 15.6162 7.00027 15.49
2024-04-25 17:20:56 UTC	6681	IN	Data Raw: 32 2e 35 32 35 48 31 34 2e 31 36 37 43 31 34 2e 34 30 31 32 20 31 32 2e 35 32 35 20 31 34 2e 36 32 35 38 20 31 32 2e 34 33 32 20 31 34 2e 37 39 31 33 20 31 32 2e 32 36 36 34 43 31 34 2e 39 35 36 39 20 31 32 2e 31 30 30 38 20 31 35 2e 30 35 20 31 31 2e 38 37 36 32 20 31 35 2e 30 35 20 31 31 2e 36 34 32 56 35 2e 30 31 37 43 31 35 2e 30 35 20 34 2e 39 30 31 30 39 20 31 35 2e 30 32 37 31 20 34 2e 37 38 36 33 32 20 31 34 2e 39 38 32 37 20 34 2e 36 37 39 32 34 43 31 34 2e 39 33 38 34 20 34 2e 35 37 32 31 37 20 31 34 2e 38 37 33 33 20 34 2e 34 37 34 38 39 20 31 34 2e 37 39 31 33 20 34 2e 33 39 32 39 38 43 31 34 2e 37 30 39 33 20 34 2e 33 31 31 30 36 20 31 34 2e 36 31 31 39 20 34 2e 32 34 36 31 32 20 31 34 2e 35 30 34 38 20 34 2e 32 30 31 38 35 43 31 34 2e 33 39 Data Ascii: 2.525H14.167C14.4012 12.525 14.6258 12.432 14.7913 12.2664C14.9569 12.1008 15.05 11.8762 15.05 11.642V5.017C15.05 4.90109 15.0271 4.78632 14.9827 4.67924C14.9384 4.57217 14.8733 4.47489 14.7913 4.39298C14.7093 4.31106 14.6119 4.24612 14.5048 4.20185C14.39

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 17:20:56 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=135772 Date: Thu, 25 Apr 2024 17:20:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 17:20:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:57 UTC	989	OUT	GET /assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.planningcenteronline.com/login/new?return=People%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
2024-04-25 17:20:57 UTC	772	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 621 Connection: close Date: Wed, 17 Jan 2024 19:20:26 GMT Last-Modified: Thu, 11 Jan 2024 17:45:08 GMT ETag: "bd6631693305788629846dde0c3feff2" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 407e03ee30fa8ebbd8caab132547e216.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oV8YdFf1EWquNx6YkaVWSXCFX96BNqQ2lmSyF36aycfuuldOUlK7Pg== Age: 8546432 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:20:57 UTC	621	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 10 a0 03 00 04 00 00 00 01 00 00 00 10 00 00 00 00 17 9d 53 c8 00 00 01 e0 49 44 41 54 38 11 7d 53 3d 6b 54 41 14 3d 67 de 26 8f 8d 1b c1 20 22 9b 26 31 2e 16 11 13 59 b1 88 9a 22 8d c6 8f 3f 10 48 ed 12 ac 6c 62 63 2d 88 85 55 4c 61 61 65 63 23 6e 84 08 22 5a 44 42 a2 28 01 31 22 12 41 30 68 a1 8b 5f fb 91 7d 73 bd f3 f2 b1 6f df 7b 64 9a 99 7b ef 39 67 ce bd c3 10 b1 55 98 6a 0c db a6 5c 02 ed 38 c0 41 11 a9 92 7c 2d 82 39 66 fc b9 4f 33 fc 12 a5 d0 05 03 a5 8d 53 b0 c1 Data Ascii: PNGIHDRagAMAa8eXIfMM*iSIDAT8}S=kTA=g& "&1.Y"?Hlbc-ULaaec#n"ZDB(1"A0h_}so{d{9gUj\8A\|-9fO3S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49727	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:57 UTC	701	OUT	POST /ab5ddfb19446/33b184b1a0f1/verify HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 8699 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:20:57 UTC	8699	OUT	Data Raw: 7b 22 63 68 61 6c 6c 65 6e 67 65 22 3a 7b 22 69 6e 70 75 74 22 3a 22 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 78 4c 43 4a 31 59 6d 6c 6b 49 6a 6f 69 5a 6d 4e 6a 5a 6a 4e 69 4d 57 45 74 4e 57 59 31 5a 53 30 30 4d 44 6c 6b 4c 54 6b 79 59 7a 63 74 4e 44 49 78 4e 54 56 6d 59 6a 64 6b 4e 7a 67 79 49 69 77 69 59 58 52 30 5a 57 31 77 64 46 39 70 5a 43 49 36 49 6a 49 35 4d 7a 52 6a 4d 44 52 6d 4c 54 55 31 4e 44 67 74 4e 44 51 33 5a 53 30 35 4e 47 45 32 4c 54 52 68 4e 57 45 78 59 54 67 33 5a 54 45 79 59 79 49 73 49 6d 4e 79 5a 57 46 30 5a 56 39 30 61 57 31 6c 49 6a 6f 69 4d 6a 41 79 4e 43 30 77 4e 43 30 79 4e 56 51 78 4e 7a 6f 79 4d 44 6f 31 4e 53 34 34 4e 6a 49 79 4e 54 45 7a 4e 44 5a 61 49 69 77 69 5a 47 6c 6d 5a 6d 6c 6a 64 57 78 30 65 53 49 36 4f 43 77 69 Data Ascii: {"challenge":{"input":"eyJ2ZXJzaW9uIjoxLCJ1YmlkIjoiZmNjZjNiMWEtNWY1ZS00MDlkLTkyYzctNDIxNTVmYjdkNzgyIiwiYXR0ZW1wdF9pZCI6IjI5MzRjMDRmLTU1NDgtNDQ3ZS05NGE2LTRhNWExYTg3ZTEyYyIsImNyZWF0ZV90aW1lIjoiMjAyNC0wNC0yNVQxNzoyMDo1NS44NjIyNTEzNDZaIiwiZGlmZmljdWx0eSI6OCwi
2024-04-25 17:20:57 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 316 Connection: close Date: Thu, 25 Apr 2024 17:20:57 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a90f9-5a936d200bf0c4ca208bc73d X-Cache: Miss from cloudfront Via: 1.1 7f7e359e1c06a914d3d305785359b84c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: feKWVThW-8eX6QVxz41uhnWqBFmyduDi5SV6DIwt8NQ41d-iv42ctQ==
2024-04-25 17:20:57 UTC	316	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6c 57 52 34 6f 54 41 79 41 41 41 41 3a 41 7a 6e 75 7a 72 78 4d 43 78 6e 45 57 63 31 67 78 48 74 72 71 66 4f 73 50 62 4c 32 41 59 44 42 38 6f 41 61 48 74 37 43 47 36 33 4e 59 41 56 4c 36 63 71 79 7a 34 69 76 47 70 32 39 79 46 30 35 37 41 69 61 6d 61 49 61 53 43 2f 33 73 7a 6c 39 32 75 71 4b 32 51 70 41 34 72 49 41 58 33 45 2b 55 78 35 59 59 75 56 4a 4b 4f 79 6c 70 2b 36 68 46 36 68 46 38 5a 73 62 38 67 64 34 47 62 41 4a 6f 35 38 30 49 63 35 44 75 4d 68 2f 33 32 79 75 2f 65 79 79 37 69 49 42 4c 63 4e 53 7a 47 42 45 75 6a 42 71 64 6f 42 47 49 50 73 75 6b 2f 2f 70 33 4c 4e 56 6e 36 30 74 6e 46 71 5a 4d 2b 53 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAlWR4oTAyAAAA:AznuzrxMCxnEWc1gxHtrqfOsPbL2AYDB8oAaHt7CG63NYAVL6cqyz4ivGp29yF057AiamaIaSC/3szl92uqK2QpA4rIAX3E+Ux5YYuVJKOylp+6hF6hF8Zsb8gd4GbAJo580Ic5DuMh/32yu/eyy7iIBLcNSzGBEujBqdoBGIPsuk//p3LNVn60tnFqZM+S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49730	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:58 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2252 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:20:58 UTC	2252	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6c 57 52 34 6f 54 41 79 41 41 41 41 3a 41 7a 6e 75 7a 72 78 4d 43 78 6e 45 57 63 31 67 78 48 74 72 71 66 4f 73 50 62 4c 32 41 59 44 42 38 6f 41 61 48 74 37 43 47 36 33 4e 59 41 56 4c 36 63 71 79 7a 34 69 76 47 70 32 39 79 46 30 35 37 41 69 61 6d 61 49 61 53 43 2f 33 73 7a 6c 39 32 75 71 4b 32 51 70 41 34 72 49 41 58 33 45 2b 55 78 35 59 59 75 56 4a 4b 4f 79 6c 70 2b 36 68 46 36 68 46 38 5a 73 62 38 67 64 34 47 62 41 4a 6f 35 38 30 49 63 35 44 75 4d 68 2f 33 32 79 75 2f 65 79 79 37 69 49 42 4c 63 4e 53 7a 47 42 45 75 6a 42 71 64 6f 42 47 49 50 73 75 6b 2f 2f 70 33 4c 4e 56 6e 36 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAlWR4oTAyAAAA:AznuzrxMCxnEWc1gxHtrqfOsPbL2AYDB8oAaHt7CG63NYAVL6cqyz4ivGp29yF057AiamaIaSC/3szl92uqK2QpA4rIAX3E+Ux5YYuVJKOylp+6hF6hF8Zsb8gd4GbAJo580Ic5DuMh/32yu/eyy7iIBLcNSzGBEujBqdoBGIPsuk//p3LNVn6
2024-04-25 17:20:58 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:20:58 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a90fa-7b951cc230e5fcf677d523c2 X-Cache: Miss from cloudfront Via: 1.1 6b7e1e42d74fd61097787cc6c1a37c34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Yw-dOtChDAYws7W-YiqhvyFjsooJCMDwZMnPxqGLAGZEGtkW2_i4rQ==
2024-04-25 17:20:58 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 74 78 74 35 45 4e 55 69 41 41 41 41 3a 32 66 35 45 70 4f 77 4a 35 32 76 4f 6b 75 47 65 68 76 58 73 4b 50 34 76 62 39 35 56 2b 73 4c 46 76 33 43 64 62 65 46 78 67 6c 73 49 77 55 50 4c 56 79 79 67 43 2b 6d 69 78 46 4f 61 4e 4b 4c 4e 6b 36 33 47 36 58 69 68 75 48 2f 2b 6d 59 69 5a 73 64 39 41 7a 69 6e 2f 77 43 38 79 38 35 63 2f 31 52 56 4a 52 55 47 35 4d 39 67 64 4a 34 47 5a 67 76 77 4e 55 4e 32 71 33 76 30 56 69 56 66 56 6e 78 67 47 30 69 42 6e 77 62 6d 78 48 38 75 63 4d 36 77 2f 55 64 6a 6b 4c 53 6a 4f 51 35 53 63 6c 6f 48 5a 51 4e 47 2b 57 39 74 50 44 33 4b 53 39 62 53 52 62 56 49 65 6f 78 4a 61 72 63 4c Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAtxt5ENUiAAAA:2f5EpOwJ52vOkuGehvXsKP4vb95V+sLFv3CdbeFxglsIwUPLVyygC+mixFOaNKLNk63G6XihuH/+mYiZsd9Azin/wC8y85c/1RVJRUG5M9gdJ4GZgvwNUN2q3v0ViVfVnxgG0iBnwbmxH8ucM6w/UdjkLSjOQ5ScloHZQNG+W9tPD3KS9bSRbVIeoxJarcL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49732	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:59 UTC	1066	OUT	GET /assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAtxt5ENUiAAAA:2f5EpOwJ52vOkuGehvXsKP4vb95V+sLFv3CdbeFxglsIwUPLVyygC+mixFOaNKLNk63G6XihuH/+mYiZsd9Azin/wC8y85c/1RVJRUG5M9gdJ4GZgvwNUN2q3v0ViVfVnxgG0iBnwbmxH8ucM6w/UdjkLSjOQ5ScloHZQNG+W9tPD3KS9bSRbVIeoxJarcLBKPHLl29Csgezq/ysMACkd6tCghYnLHW64wxM5D0bQ4b7YZvH3oo+1Ojj2lzoNizx5NXQPYB+iOeBOf+JFrChTupZCZk0
2024-04-25 17:21:00 UTC	772	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 621 Connection: close Date: Wed, 17 Jan 2024 19:20:26 GMT Last-Modified: Thu, 11 Jan 2024 17:45:08 GMT ETag: "bd6631693305788629846dde0c3feff2" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 961ef6621cdae7a15d737e404049a1ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: L9arM5vBu7VVw0zagrY-MBehn8mz5wSrCKpdqVym42qFmj7I2EufCA== Age: 8546435 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-25 17:21:00 UTC	621	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 10 a0 03 00 04 00 00 00 01 00 00 00 10 00 00 00 00 17 9d 53 c8 00 00 01 e0 49 44 41 54 38 11 7d 53 3d 6b 54 41 14 3d 67 de 26 8f 8d 1b c1 20 22 9b 26 31 2e 16 11 13 59 b1 88 9a 22 8d c6 8f 3f 10 48 ed 12 ac 6c 62 63 2d 88 85 55 4c 61 61 65 63 23 6e 84 08 22 5a 44 42 a2 28 01 31 22 12 41 30 68 a1 8b 5f fb 91 7d 73 bd f3 f2 b1 6f df 7b 64 9a 99 7b ef 39 67 ce bd c3 10 b1 55 98 6a 0c db a6 5c 02 ed 38 c0 41 11 a9 92 7c 2d 82 39 66 fc b9 4f 33 fc 12 a5 d0 05 03 a5 8d 53 b0 c1 Data Ascii: PNGIHDRagAMAa8eXIfMM*iSIDAT8}S=kTA=g& "&1.Y"?Hlbc-ULaaec#n"ZDB(1"A0h_}so{d{9gUj\8A\|-9fO3S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49731	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:59 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2811 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:20:59 UTC	2811	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 74 78 74 35 45 4e 55 69 41 41 41 41 3a 32 66 35 45 70 4f 77 4a 35 32 76 4f 6b 75 47 65 68 76 58 73 4b 50 34 76 62 39 35 56 2b 73 4c 46 76 33 43 64 62 65 46 78 67 6c 73 49 77 55 50 4c 56 79 79 67 43 2b 6d 69 78 46 4f 61 4e 4b 4c 4e 6b 36 33 47 36 58 69 68 75 48 2f 2b 6d 59 69 5a 73 64 39 41 7a 69 6e 2f 77 43 38 79 38 35 63 2f 31 52 56 4a 52 55 47 35 4d 39 67 64 4a 34 47 5a 67 76 77 4e 55 4e 32 71 33 76 30 56 69 56 66 56 6e 78 67 47 30 69 42 6e 77 62 6d 78 48 38 75 63 4d 36 77 2f 55 64 6a 6b 4c 53 6a 4f 51 35 53 63 6c 6f 48 5a 51 4e 47 2b 57 39 74 50 44 33 4b 53 39 62 53 52 62 56 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAtxt5ENUiAAAA:2f5EpOwJ52vOkuGehvXsKP4vb95V+sLFv3CdbeFxglsIwUPLVyygC+mixFOaNKLNk63G6XihuH/+mYiZsd9Azin/wC8y85c/1RVJRUG5M9gdJ4GZgvwNUN2q3v0ViVfVnxgG0iBnwbmxH8ucM6w/UdjkLSjOQ5ScloHZQNG+W9tPD3KS9bSRbV
2024-04-25 17:21:00 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 968 Connection: close Date: Thu, 25 Apr 2024 17:21:00 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a90fb-511d27e5244193ee23656051 X-Cache: Miss from cloudfront Via: 1.1 88b63cb2f8aab28c7291262ffc15282e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 2vrGhwORUQiJ7c1f5iy3VG_sH_VNxfU_ajmyBulcFJtyzs_psHDTjw==
2024-04-25 17:21:00 UTC	968	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 65 34 42 35 46 6f 55 69 41 41 41 41 3a 65 6d 39 33 45 43 48 6a 6b 57 45 4e 4b 58 58 43 66 4e 46 31 6a 42 73 55 68 46 72 66 6d 57 59 6a 69 62 56 2f 41 6a 5a 2b 46 70 66 53 59 72 55 2b 38 6b 31 30 34 36 36 70 61 41 43 4d 2b 76 6d 43 52 4d 46 30 48 77 6a 2b 6b 50 41 63 36 75 65 76 43 78 6f 67 4c 37 6f 30 47 58 6f 47 44 46 66 4c 6c 6d 35 6d 7a 41 50 4f 30 6e 53 7a 51 6d 58 4a 43 74 66 6e 70 33 59 45 61 63 6c 31 4c 51 50 43 5a 78 31 4e 31 55 48 58 69 67 50 5a 6e 70 32 62 57 70 68 4f 38 52 38 4f 79 68 54 4a 4e 37 42 6c 53 79 61 71 61 78 78 31 39 50 6e 36 38 4f 59 7a 4a 30 67 37 48 43 34 31 73 48 6b 59 65 2f 30 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAe4B5FoUiAAAA:em93ECHjkWENKXXCfNF1jBsUhFrfmWYjibV/AjZ+FpfSYrU+8k10466paACM+vmCRMF0Hwj+kPAc6uevCxogL7o0GXoGDFfLlm5mzAPO0nSzQmXJCtfnp3YEacl1LQPCZx1N1UHXigPZnp2bWphO8R8OyhTJN7BlSyaqaxx19Pn68OYzJ0g7HC41sHkYe/0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49734	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:59 UTC	404	OUT	GET /ab5ddfb19446/33b184b1a0f1/verify HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:00 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:00 GMT X-Cache: Error from cloudfront Via: 1.1 7f7e359e1c06a914d3d305785359b84c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 4SoenQH5iQQA3wSmvVJuBxTkB7ODJkYidyIemrbGq1Ktlt8riByYHQ==
2024-04-25 17:21:00 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49733	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:20:59 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:00 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:00 GMT X-Cache: Error from cloudfront Via: 1.1 263d97c176fc51d1d08116820c013de4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: n_kcTFbY_OUQxrVnJkQB32sUGGcugQ9WnB4Pmhgz7sOrmaxpmGF2Eg==
2024-04-25 17:21:00 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49735	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:00 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:00 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:00 GMT X-Cache: Error from cloudfront Via: 1.1 d1cde188ada6755fe03b8541b71fce4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Xzyj20caZT3FPrAI36je_cS6xT43aG6PNLuc_cAfuRZkEJKLZtMZTg==
2024-04-25 17:21:00 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49736	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:00 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:00 UTC	2885	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 65 34 42 35 46 6f 55 69 41 41 41 41 3a 65 6d 39 33 45 43 48 6a 6b 57 45 4e 4b 58 58 43 66 4e 46 31 6a 42 73 55 68 46 72 66 6d 57 59 6a 69 62 56 2f 41 6a 5a 2b 46 70 66 53 59 72 55 2b 38 6b 31 30 34 36 36 70 61 41 43 4d 2b 76 6d 43 52 4d 46 30 48 77 6a 2b 6b 50 41 63 36 75 65 76 43 78 6f 67 4c 37 6f 30 47 58 6f 47 44 46 66 4c 6c 6d 35 6d 7a 41 50 4f 30 6e 53 7a 51 6d 58 4a 43 74 66 6e 70 33 59 45 61 63 6c 31 4c 51 50 43 5a 78 31 4e 31 55 48 58 69 67 50 5a 6e 70 32 62 57 70 68 4f 38 52 38 4f 79 68 54 4a 4e 37 42 6c 53 79 61 71 61 78 78 31 39 50 6e 36 38 4f 59 7a 4a 30 67 37 48 43 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAe4B5FoUiAAAA:em93ECHjkWENKXXCfNF1jBsUhFrfmWYjibV/AjZ+FpfSYrU+8k10466paACM+vmCRMF0Hwj+kPAc6uevCxogL7o0GXoGDFfLlm5mzAPO0nSzQmXJCtfnp3YEacl1LQPCZx1N1UHXigPZnp2bWphO8R8OyhTJN7BlSyaqaxx19Pn68OYzJ0g7HC
2024-04-25 17:21:00 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1056 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:00 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a90fc-5a3c90f47bd84eb84def9d88 X-Cache: Miss from cloudfront Via: 1.1 7f7e359e1c06a914d3d305785359b84c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: eUF2JOaFrxz3PaIvBX1Epq5RDjThu53a3f0qATDHAgJmWQxjRCNK9g==
2024-04-25 17:21:00 UTC	1056	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6c 44 42 35 56 36 63 59 41 41 41 41 3a 35 6d 36 48 37 36 36 55 64 2f 30 6f 69 77 5a 56 63 4c 58 47 65 78 74 34 48 4b 43 65 33 6f 31 6d 31 50 55 71 2b 73 70 33 63 7a 73 39 66 4f 72 42 44 70 4a 71 63 63 35 75 52 68 6f 7a 30 31 74 6e 6a 42 6d 39 45 64 4a 5a 55 4c 44 33 4e 6e 70 73 4f 57 63 4a 50 59 2b 4d 37 5a 2b 66 70 6f 36 79 4d 5a 77 34 36 65 6b 51 53 49 79 36 51 7a 4c 46 71 78 34 2f 6d 59 39 52 63 30 71 39 69 68 42 72 71 73 70 46 78 6a 31 51 45 75 67 57 58 2f 67 48 57 4b 6e 49 48 72 53 35 38 30 2f 45 44 65 58 4f 52 45 4a 33 4d 34 78 52 64 72 46 6b 50 45 78 2b 42 62 79 45 41 2b 4e 6a 2f 34 78 52 57 6a 55 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAlDB5V6cYAAAA:5m6H766Ud/0oiwZVcLXGext4HKCe3o1m1PUq+sp3czs9fOrBDpJqcc5uRhoz01tnjBm9EdJZULD3NnpsOWcJPY+M7Z+fpo6yMZw46ekQSIy6QzLFqx4/mY9Rc0q9ihBrqspFxj1QEugWX/gHWKnIHrS580/EDeXOREJ3M4xRdrFkPEx+BbyEA+Nj/4xRWjU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49737	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:01 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:01 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:01 GMT X-Cache: Error from cloudfront Via: 1.1 b4346add631a498bf6cdbf88cbc5ff12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: zS2y3EH4wNqVYiLV17BI8X25h2pluGlp4qJMNzEe-76MSK24S6j1HQ==
2024-04-25 17:21:01 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49738	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:03 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2976 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:03 UTC	2976	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6c 44 42 35 56 36 63 59 41 41 41 41 3a 35 6d 36 48 37 36 36 55 64 2f 30 6f 69 77 5a 56 63 4c 58 47 65 78 74 34 48 4b 43 65 33 6f 31 6d 31 50 55 71 2b 73 70 33 63 7a 73 39 66 4f 72 42 44 70 4a 71 63 63 35 75 52 68 6f 7a 30 31 74 6e 6a 42 6d 39 45 64 4a 5a 55 4c 44 33 4e 6e 70 73 4f 57 63 4a 50 59 2b 4d 37 5a 2b 66 70 6f 36 79 4d 5a 77 34 36 65 6b 51 53 49 79 36 51 7a 4c 46 71 78 34 2f 6d 59 39 52 63 30 71 39 69 68 42 72 71 73 70 46 78 6a 31 51 45 75 67 57 58 2f 67 48 57 4b 6e 49 48 72 53 35 38 30 2f 45 44 65 58 4f 52 45 4a 33 4d 34 78 52 64 72 46 6b 50 45 78 2b 42 62 79 45 41 2b Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAlDB5V6cYAAAA:5m6H766Ud/0oiwZVcLXGext4HKCe3o1m1PUq+sp3czs9fOrBDpJqcc5uRhoz01tnjBm9EdJZULD3NnpsOWcJPY+M7Z+fpo6yMZw46ekQSIy6QzLFqx4/mY9Rc0q9ihBrqspFxj1QEugWX/gHWKnIHrS580/EDeXOREJ3M4xRdrFkPEx+BbyEA+
2024-04-25 17:21:03 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1144 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:03 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a90ff-6e53369d3f5d401231a5f69b X-Cache: Miss from cloudfront Via: 1.1 7dc4818c830423900ae855831181d2b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Av0Rk3DyWe9HN7NcOpMMbao5PDY_FqQJF0MirX_PSuh5WEnAG9vKmA==
2024-04-25 17:21:03 UTC	1144	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 5a 35 74 34 65 33 34 32 41 41 41 41 3a 7a 33 4b 36 42 54 4d 46 6f 42 6a 33 4c 43 53 31 30 6b 46 5a 56 39 32 73 4c 4e 61 41 33 4b 52 6d 65 31 58 33 35 68 50 55 77 78 67 70 54 39 73 71 41 76 68 4c 77 4c 4e 68 58 52 41 47 54 6f 43 43 6e 4e 52 77 76 47 38 56 68 76 69 31 7a 35 7a 56 4d 62 6a 6f 55 56 36 43 4c 6b 69 4e 41 43 48 30 37 32 7a 58 30 4e 73 54 55 76 65 69 4d 43 30 65 67 37 4b 50 78 4b 42 79 38 70 68 6a 39 34 73 73 61 74 41 67 50 57 74 63 58 33 6b 4f 42 32 68 2f 79 51 30 48 47 4b 6e 4f 6e 39 6b 39 4f 51 4a 6a 43 6d 63 79 76 46 66 51 32 44 6d 76 4e 6f 38 6f 48 6f 46 64 41 43 73 6f 66 32 42 70 58 35 4f Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAZ5t4e342AAAA:z3K6BTMFoBj3LCS10kFZV92sLNaA3KRme1X35hPUwxgpT9sqAvhLwLNhXRAGToCCnNRwvG8Vhvi1z5zVMbjoUV6CLkiNACH072zX0NsTUveiMC0eg7KPxKBy8phj94ssatAgPWtcX3kOB2h/yQ0HGKnOn9k9OQJjCmcyvFfQ2DmvNo8oHoFdACsof2BpX5O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49739	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:03 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:03 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:03 GMT X-Cache: Error from cloudfront Via: 1.1 a251e31740a6e166e8fdccf296c41644.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Rjo_hYgVpHlBN49shFpbYT6DkV2FfNSlxijQ75aOLg5QSZuIC1SCXw==
2024-04-25 17:21:03 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49740	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:04 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:04 UTC	3331	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 5a 35 74 34 65 33 34 32 41 41 41 41 3a 7a 33 4b 36 42 54 4d 46 6f 42 6a 33 4c 43 53 31 30 6b 46 5a 56 39 32 73 4c 4e 61 41 33 4b 52 6d 65 31 58 33 35 68 50 55 77 78 67 70 54 39 73 71 41 76 68 4c 77 4c 4e 68 58 52 41 47 54 6f 43 43 6e 4e 52 77 76 47 38 56 68 76 69 31 7a 35 7a 56 4d 62 6a 6f 55 56 36 43 4c 6b 69 4e 41 43 48 30 37 32 7a 58 30 4e 73 54 55 76 65 69 4d 43 30 65 67 37 4b 50 78 4b 42 79 38 70 68 6a 39 34 73 73 61 74 41 67 50 57 74 63 58 33 6b 4f 42 32 68 2f 79 51 30 48 47 4b 6e 4f 6e 39 6b 39 4f 51 4a 6a 43 6d 63 79 76 46 66 51 32 44 6d 76 4e 6f 38 6f 48 6f 46 64 41 43 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAZ5t4e342AAAA:z3K6BTMFoBj3LCS10kFZV92sLNaA3KRme1X35hPUwxgpT9sqAvhLwLNhXRAGToCCnNRwvG8Vhvi1z5zVMbjoUV6CLkiNACH072zX0NsTUveiMC0eg7KPxKBy8phj94ssatAgPWtcX3kOB2h/yQ0HGKnOn9k9OQJjCmcyvFfQ2DmvNo8oHoFdAC
2024-04-25 17:21:05 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1232 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:05 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9100-05cf6d420da3c6bb6fd733fe X-Cache: Miss from cloudfront Via: 1.1 f9efe5e72b7e5cc47bf34a0b0debcbe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: I563n-o8v3wVTTKVa-_RcOCpd0ufVAoh7Gn6Y5mncVFmQAHLP77qNg==
2024-04-25 17:21:05 UTC	1232	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 74 53 31 34 31 6b 41 71 41 41 41 41 3a 79 48 4d 78 58 63 4d 56 4f 54 64 49 61 33 63 72 53 49 39 34 2b 36 6b 6c 66 47 5a 72 41 54 78 34 78 4e 6a 6d 6a 4f 6f 4b 6f 66 45 79 49 37 6b 5a 41 2b 4b 47 42 65 6a 46 39 36 58 4b 58 56 4b 35 6c 54 6f 71 67 47 54 4d 67 50 78 53 48 47 59 5a 30 77 4a 6d 34 72 50 63 6f 46 55 43 53 55 45 4e 56 31 66 5a 6d 7a 55 77 68 74 4f 2f 71 65 6c 49 2b 74 47 78 59 77 6d 2b 31 61 47 63 50 74 63 48 2f 45 36 58 79 4e 58 4b 47 78 78 6a 2f 38 32 6b 73 34 4c 2b 67 41 45 6d 36 73 6a 48 50 42 6a 53 75 33 41 42 61 79 6d 54 51 4a 38 49 52 6a 4e 2b 72 30 51 78 54 59 6b 4a 4b 42 71 75 64 38 30 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAtS141kAqAAAA:yHMxXcMVOTdIa3crSI94+6klfGZrATx4xNjmjOoKofEyI7kZA+KGBejF96XKXVK5lToqgGTMgPxSHGYZ0wJm4rPcoFUCSUENV1fZmzUwhtO/qelI+tGxYwm+1aGcPtcH/E6XyNXKGxxj/82ks4L+gAEm6sjHPBjSu3ABaymTQJ8IRjN+r0QxTYkJKBqud80

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49742	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:04 UTC	1288	OUT	GET /login/new HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAZ5t4e342AAAA:z3K6BTMFoBj3LCS10kFZV92sLNaA3KRme1X35hPUwxgpT9sqAvhLwLNhXRAGToCCnNRwvG8Vhvi1z5zVMbjoUV6CLkiNACH072zX0NsTUveiMC0eg7KPxKBy8phj94ssatAgPWtcX3kOB2h/yQ0HGKnOn9k9OQJjCmcyvFfQ2DmvNo8oHoFdACsof2BpX5OhOS0UI6TdkZa5BjnRiycwR7pq9+LDRP5OM7zOxZgRTAGkFJmTwmXhq9MbC+HUD1+bpF1FNnOo1XrJve340Ts00iW19rcb
2024-04-25 17:21:05 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20220 Connection: close Date: Thu, 25 Apr 2024 17:21:05 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"cf13463be3eaab452590f50f03455305" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY2NSwiZXhwIjoxNzE1Mjc1MjY1LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.iVnmy1oNTyyM1dqPJcw7ddynvRvZaMQaDpYGGFITOhTUfRG8-8_TxADG31wkB7PapC-boVqWxU15_B5pxBiYtQ; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:21:05 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: e4cdbb60-d70e-4634-8685-107822bed328 X-Runtime: 0.022216 X-Cache: Miss from cloudfront Via: 1.1 486e34c9a7512d6a57a32ef8a8030870.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nkI8qKowxFI1qO3Qu6nuLw1QNg4a06R43UxHLHU-ZxAEj4bSfLMnbQ==
2024-04-25 17:21:05 UTC	15019	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:21:05 UTC	5201	IN	Data Raw: 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 0a 3c 68 31 3e 4c 6f 67 69 6e 3c 2f 68 31 3e 0a 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 69 6f 73 5f 73 61 66 61 72 69 5f 6b 65 79 63 68 61 69 6e 5f 61 75 74 6f 5f 73 75 62 6d 69 74 5f 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 70 6c 61 6e 6e 69 6e 67 63 65 6e 74 65 72 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 22 20 61 63 63 65 70 74 2d 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 75 74 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 5a 79 72 6f 56 41 4d 61 79 Data Ascii: ="content"> <h1>Login</h1><form class="ios_safari_keychain_auto_submit_form" action="https://login.planningcenteronline.com/login" accept-charset="UTF-8" method="post"><input type="hidden" name="authenticity_token" value="ZyroVAMay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49743	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:05 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:05 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:05 GMT X-Cache: Error from cloudfront Via: 1.1 dd169cfdbbafbb3da513bede6bc6640e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: oGKxCAzo3GVRCh196hQK2IhLUXgBts63HYIswP6C0F3ACKer1frLEA==
2024-04-25 17:21:05 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49744	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:05 UTC	652	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
2024-04-25 17:21:06 UTC	520	IN	HTTP/1.1 304 Not Modified Content-Type: text/javascript Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:05 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9101-3f9a079a3399cf372be8da0f X-Cache: Miss from cloudfront Via: 1.1 7f7e359e1c06a914d3d305785359b84c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: RsNLcXSejq-2iUEH0TPwO24TSqVcNcMs2q9x2IGHN98w_VlxUGzGng==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49746	16.182.40.97	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:06 UTC	719	OUT	GET /hub.html HTTP/1.1 Host: pco-cross-storage.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:07 UTC	375	IN	HTTP/1.1 200 OK x-amz-id-2: Z77DzpGKZ3tr2jEDHxtgHLCZ/E4YX9f+mSiOEDjZyDBLGZ+IdwjrKo/ONLk8TdJGki4lkGA34Yw= x-amz-request-id: GWSZ9T4K1KNTPP47 Date: Thu, 25 Apr 2024 17:21:08 GMT Last-Modified: Thu, 30 May 2019 21:00:10 GMT ETag: "5ca1a1bb3fd2ba98021ff72ca34022b5" Accept-Ranges: bytes Content-Type: text/html Server: AmazonS3 Content-Length: 896 Connection: close
2024-04-25 17:21:07 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 76 61 72 20 73 6f 75 72 63 65 3b 0a 20 20 20 20 20 20 76 61 72 20 6f 72 69 67 69 6e 3b 0a 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 65 73 73 61 67 65 27 2c 20 72 65 63 65 69 76 65 4d 65 73 73 61 67 65 46 72 6f 6d 50 61 72 65 6e 74 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 74 6f 72 61 67 65 27 2c 20 72 65 63 65 69 76 65 4d 65 73 73 61 67 65 46 72 6f 6d 41 6e 6f 74 68 65 72 57 69 6e 64 6f 77 2c 20 66 61 6c 73 65 29 3b 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: <!DOCTYPE html><html> <head> <script> var source; var origin; window.addEventListener('message', receiveMessageFromParent, false); window.addEventListener('storage', receiveMessageFromAnotherWindow, false); function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49747	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:07 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2328 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:07 UTC	2328	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 74 53 31 34 31 6b 41 71 41 41 41 41 3a 79 48 4d 78 58 63 4d 56 4f 54 64 49 61 33 63 72 53 49 39 34 2b 36 6b 6c 66 47 5a 72 41 54 78 34 78 4e 6a 6d 6a 4f 6f 4b 6f 66 45 79 49 37 6b 5a 41 2b 4b 47 42 65 6a 46 39 36 58 4b 58 56 4b 35 6c 54 6f 71 67 47 54 4d 67 50 78 53 48 47 59 5a 30 77 4a 6d 34 72 50 63 6f 46 55 43 53 55 45 4e 56 31 66 5a 6d 7a 55 77 68 74 4f 2f 71 65 6c 49 2b 74 47 78 59 77 6d 2b 31 61 47 63 50 74 63 48 2f 45 36 58 79 4e 58 4b 47 78 78 6a 2f 38 32 6b 73 34 4c 2b 67 41 45 6d 36 73 6a 48 50 42 6a 53 75 33 41 42 61 79 6d 54 51 4a 38 49 52 6a 4e 2b 72 30 51 78 54 59 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAtS141kAqAAAA:yHMxXcMVOTdIa3crSI94+6klfGZrATx4xNjmjOoKofEyI7kZA+KGBejF96XKXVK5lToqgGTMgPxSHGYZ0wJm4rPcoFUCSUENV1fZmzUwhtO/qelI+tGxYwm+1aGcPtcH/E6XyNXKGxxj/82ks4L+gAEm6sjHPBjSu3ABaymTQJ8IRjN+r0QxTY
2024-04-25 17:21:07 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:21:07 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9103-6f449685434ec53303006b26 X-Cache: Miss from cloudfront Via: 1.1 99baebf4b5bb631267dcfa82456151cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 82neZG9emvaLqJXTqC_-Lhzcgp8Rw1gQiOhwDMZiKtvq3BteVHNFAg==
2024-04-25 17:21:07 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 62 48 52 35 58 4e 34 59 41 41 41 41 3a 74 47 58 5a 34 47 45 74 5a 35 37 41 53 54 69 67 6b 36 4b 4f 32 58 4c 6d 6e 55 42 62 6c 69 62 4c 6a 62 66 48 5a 7a 54 76 39 47 78 66 71 67 59 48 33 35 5a 67 6f 50 54 75 54 52 6f 4b 6d 35 4a 68 75 79 77 76 33 44 35 6c 6c 50 31 66 78 78 35 6f 67 38 4c 58 44 72 4a 6b 50 46 36 6a 44 2b 76 52 56 33 6f 77 31 48 4d 79 32 63 4e 44 50 6b 55 4b 76 30 59 78 4c 33 36 77 78 38 46 58 47 30 38 38 78 37 44 31 33 37 69 67 55 75 31 41 4a 74 62 48 66 53 6c 48 33 33 65 65 36 34 75 4b 56 34 74 75 77 38 55 64 6d 4b 4d 55 4d 43 6a 6f 35 38 5a 67 38 41 46 31 38 2f 69 70 2f 4f 74 59 4f 51 45 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAbHR5XN4YAAAA:tGXZ4GEtZ57ASTigk6KO2XLmnUBblibLjbfHZzTv9GxfqgYH35ZgoPTuTRoKm5Jhuywv3D5llP1fxx5og8LXDrJkPF6jD+vRV3ow1HMy2cNDPkUKv0YxL36wx8FXG088x7D137igUu1AJtbHfSlH33ee64uKV4tuw8UdmKMUMCjo58Zg8AF18/ip/OtYOQE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49753	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:08 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2796 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:08 UTC	2796	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 62 48 52 35 58 4e 34 59 41 41 41 41 3a 74 47 58 5a 34 47 45 74 5a 35 37 41 53 54 69 67 6b 36 4b 4f 32 58 4c 6d 6e 55 42 62 6c 69 62 4c 6a 62 66 48 5a 7a 54 76 39 47 78 66 71 67 59 48 33 35 5a 67 6f 50 54 75 54 52 6f 4b 6d 35 4a 68 75 79 77 76 33 44 35 6c 6c 50 31 66 78 78 35 6f 67 38 4c 58 44 72 4a 6b 50 46 36 6a 44 2b 76 52 56 33 6f 77 31 48 4d 79 32 63 4e 44 50 6b 55 4b 76 30 59 78 4c 33 36 77 78 38 46 58 47 30 38 38 78 37 44 31 33 37 69 67 55 75 31 41 4a 74 62 48 66 53 6c 48 33 33 65 65 36 34 75 4b 56 34 74 75 77 38 55 64 6d 4b 4d 55 4d 43 6a 6f 35 38 5a 67 38 41 46 31 38 2f Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAbHR5XN4YAAAA:tGXZ4GEtZ57ASTigk6KO2XLmnUBblibLjbfHZzTv9GxfqgYH35ZgoPTuTRoKm5Jhuywv3D5llP1fxx5og8LXDrJkPF6jD+vRV3ow1HMy2cNDPkUKv0YxL36wx8FXG088x7D137igUu1AJtbHfSlH33ee64uKV4tuw8UdmKMUMCjo58Zg8AF18/
2024-04-25 17:21:08 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 968 Connection: close Date: Thu, 25 Apr 2024 17:21:08 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9104-47ed22d46dd8a58739dfa5df X-Cache: Miss from cloudfront Via: 1.1 2e50d9b1ee017f302768660f02b7418e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: BElpBj4VtLE_kO0K-Eh5gFGjsb8ViKYz2rTJ2pa8N2MG15qUFQS9cw==
2024-04-25 17:21:08 UTC	968	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 71 70 31 34 6a 6e 63 30 41 41 41 41 3a 70 78 4c 44 4c 49 63 4f 79 2f 65 50 59 31 76 49 50 73 41 52 78 2f 72 4e 4f 5a 64 53 33 6d 7a 43 46 47 62 57 36 2b 6f 42 46 2f 55 74 71 5a 74 37 6e 57 74 51 49 4a 34 46 58 50 53 64 57 68 72 33 67 48 33 4a 54 51 64 47 6d 72 57 74 44 2f 44 75 4c 4e 69 5a 41 54 71 4d 2f 32 67 66 59 6e 7a 69 61 37 67 71 66 4a 51 62 41 53 56 49 59 6d 61 63 2f 62 54 41 74 77 6e 50 61 72 70 58 51 54 68 34 44 61 36 32 6b 6d 57 57 6a 4a 7a 6f 2f 76 73 5a 31 35 55 69 5a 58 51 33 4a 2f 76 2f 31 33 67 54 68 5a 4e 45 57 75 58 79 4b 76 7a 53 42 45 55 51 54 4b 43 42 75 53 45 56 4d 32 35 33 72 6c 72 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAqp14jnc0AAAA:pxLDLIcOy/ePY1vIPsARx/rNOZdS3mzCFGbW6+oBF/UtqZt7nWtQIJ4FXPSdWhr3gH3JTQdGmrWtD/DuLNiZATqM/2gfYnzia7gqfJQbASVIYmac/bTAtwnParpXQTh4Da62kmWWjJzo/vsZ15UiZXQ3J/v/13gThZNEWuXyKvzSBEUQTKCBuSEVM253rlr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49754	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:08 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:08 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:08 GMT X-Cache: Error from cloudfront Via: 1.1 7a99ed3f39c18af8fe138a695e5f657c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: HiesKlO_lzwgx0NcHi_W2T7yr7Is_2CoC8LNBo6vusVVRpBiq7nlNg==
2024-04-25 17:21:08 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49741	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:08 UTC	1297	OUT	GET /password_reset/new HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY2NSwiZXhwIjoxNzE1Mjc1MjY1LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.iVnmy1oNTyyM1dqPJcw7ddynvRvZaMQaDpYGGFITOhTUfRG8-8_TxADG31wkB7PapC-boVqWxU15_B5pxBiYtQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAbHR5XN4YAAAA:tGXZ4GEtZ57ASTigk6KO2XLmnUBblibLjbfHZzTv9GxfqgYH35ZgoPTuTRoKm5Jhuywv3D5llP1fxx5og8LXDrJkPF6jD+vRV3ow1HMy2cNDPkUKv0YxL36wx8FXG088x7D137igUu1AJtbHfSlH33ee64uKV4tuw8UdmKMUMCjo58Zg8AF18/ip/OtYOQEh/dCUxMjSo+4nnh9YzfvlUkQ/8aGJ9R52AGywL+8Ooy2xlePB6rZlpd39pLFzbMmgIYf1lw8F1fybBldFAO+3NFygHqWX
2024-04-25 17:21:08 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 18851 Connection: close Date: Thu, 25 Apr 2024 17:21:08 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"4479a3118924747758e6325ba57df64e" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY2OCwiZXhwIjoxNzE1Mjc1MjY4LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.N_oIDHOB8EXm1adfpq8inqXpY4X7MIXcd-jAWndDD6hJN4iA_2CVWMAoO4YQl6d6KdFSF9cN5NHNX8_eEwsM0Q; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:21:08 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: 65f64e37-4b18-44fd-80e5-f2f0f7178155 X-Runtime: 0.021323 X-Cache: Miss from cloudfront Via: 1.1 8e055e2d50ddfd161416dc04c902f07e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: aUPQNq8yk4gdq3lEf0wnZsgN94ZnHj4KUcLOgnrrW7tMupmqqwo7HA==
2024-04-25 17:21:08 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:21:08 UTC	2467	IN	Data Raw: 20 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 31 22 20 66 69 6c 6c 3d 22 68 73 6c 61 28 32 31 33 2c 20 31 30 30 25 2c 20 36 31 25 2c 20 30 2e 31 29 22 20 64 3d 22 4d 38 39 36 2e 39 2c 31 36 31 2e 39 4c 36 30 30 2e 36 2c 35 34 63 2d 33 38 2e 33 2d 31 33 2e 39 2d 38 30 2d 31 35 2e 33 2d 31 31 39 2e 32 2d 33 2e 39 63 2d 33 39 2e 31 2c 31 31 2e 35 2d 37 33 2e 36 2c 33 35 2d 39 38 2e 34 2c 36 37 2e 34 4c 31 36 32 2e 32 2c 34 31 35 2e 34 63 2d 33 38 2e 39 2c 35 31 2e 39 2d 36 31 2e 36 2c 31 31 34 2e 32 2d 36 35 2e 32 2c 31 37 39 4c 37 34 2e 37 2c 39 36 34 2e 36 63 2d 30 2e 38 2c 31 38 2e 35 2c 31 2e 31 2c 33 36 2e 38 2c 35 2e 35 2c 35 34 2e 35 68 38 31 36 2e 38 56 31 36 31 2e 39 7a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 31 Data Ascii: <path opacity="1" fill="hsla(213, 100%, 61%, 0.1)" d="M896.9,161.9L600.6,54c-38.3-13.9-80-15.3-119.2-3.9c-39.1,11.5-73.6,35-98.4,67.4L162.2,415.4c-38.9,51.9-61.6,114.2-65.2,179L74.7,964.6c-0.8,18.5,1.1,36.8,5.5,54.5h816.8V161.9z"/> <path opacity="1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49757	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:09 UTC	652	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
2024-04-25 17:21:09 UTC	520	IN	HTTP/1.1 304 Not Modified Content-Type: text/javascript Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:09 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9105-63a77c5e7e416bad1810ee5b X-Cache: Miss from cloudfront Via: 1.1 88b63cb2f8aab28c7291262ffc15282e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Z34FOJlM-CDm4dw0Xj-mQ-Wu9l7xfWztU6wKGD3Nl7PpE64P0m8gZQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49758	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:09 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:09 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:09 GMT X-Cache: Error from cloudfront Via: 1.1 7a99ed3f39c18af8fe138a695e5f657c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: YTOGX13W-v4_0oW_UtzmUZqo7KDI94qNbokYgH9J-G0m2FYvyWPdNQ==
2024-04-25 17:21:09 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49759	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:09 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714065636049&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-25 17:21:09 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-25 17:21:09 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-25 17:21:10 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DE56525E701C431A82DDA0E19C1612F6 Ref B: LAX311000108029 Ref C: 2024-04-25T17:21:10Z Date: Thu, 25 Apr 2024 17:21:10 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714065669.c1e7717

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49761	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:10 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 1830 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:10 UTC	1830	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 71 70 31 34 6a 6e 63 30 41 41 41 41 3a 70 78 4c 44 4c 49 63 4f 79 2f 65 50 59 31 76 49 50 73 41 52 78 2f 72 4e 4f 5a 64 53 33 6d 7a 43 46 47 62 57 36 2b 6f 42 46 2f 55 74 71 5a 74 37 6e 57 74 51 49 4a 34 46 58 50 53 64 57 68 72 33 67 48 33 4a 54 51 64 47 6d 72 57 74 44 2f 44 75 4c 4e 69 5a 41 54 71 4d 2f 32 67 66 59 6e 7a 69 61 37 67 71 66 4a 51 62 41 53 56 49 59 6d 61 63 2f 62 54 41 74 77 6e 50 61 72 70 58 51 54 68 34 44 61 36 32 6b 6d 57 57 6a 4a 7a 6f 2f 76 73 5a 31 35 55 69 5a 58 51 33 4a 2f 76 2f 31 33 67 54 68 5a 4e 45 57 75 58 79 4b 76 7a 53 42 45 55 51 54 4b 43 42 75 53 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAqp14jnc0AAAA:pxLDLIcOy/ePY1vIPsARx/rNOZdS3mzCFGbW6+oBF/UtqZt7nWtQIJ4FXPSdWhr3gH3JTQdGmrWtD/DuLNiZATqM/2gfYnzia7gqfJQbASVIYmac/bTAtwnParpXQTh4Da62kmWWjJzo/vsZ15UiZXQ3J/v/13gThZNEWuXyKvzSBEUQTKCBuS
2024-04-25 17:21:10 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:21:10 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9106-0cc1695a3abc09206a779d4a X-Cache: Miss from cloudfront Via: 1.1 99baebf4b5bb631267dcfa82456151cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: RrWm_JWJHrC0hORclXu_hpzXJo7214ziifJ80WTFwFX3dtNaWSAoqw==
2024-04-25 17:21:10 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 65 2f 39 34 30 6b 55 72 41 41 41 41 3a 6f 43 6d 35 38 53 47 35 6f 46 70 49 77 51 57 63 2b 50 41 74 47 36 6a 65 72 71 69 38 62 6a 37 76 47 6d 41 39 73 66 4f 63 56 49 70 75 71 72 45 4e 49 79 73 36 59 4d 4d 36 64 2b 76 4b 30 54 64 47 69 50 4a 4b 2f 43 4a 68 77 76 6c 4b 59 34 57 35 52 74 56 37 38 41 2f 31 47 56 76 2b 6b 2b 59 6c 65 6f 33 39 5a 6f 4f 51 54 6f 66 65 45 68 5a 78 6d 4f 30 44 69 6e 58 7a 35 6b 44 64 58 5a 4e 4b 76 57 30 38 70 69 65 71 58 47 65 44 65 63 58 44 7a 6a 30 43 6c 72 51 50 5a 6a 4b 77 35 68 4b 64 74 32 78 51 6e 67 6a 51 51 68 6f 4e 71 46 6b 4b 4a 45 7a 56 72 50 50 71 43 63 6d 37 47 5a 31 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAe/940kUrAAAA:oCm58SG5oFpIwQWc+PAtG6jerqi8bj7vGmA9sfOcVIpuqrENIys6YMM6d+vK0TdGiPJK/CJhwvlKY4W5RtV78A/1GVv+k+Yleo39ZoOQTofeEhZxmO0DinXz5kDdXZNKvW08pieqXGeDecXDzj0ClrQPZjKw5hKdt2xQngjQQhoNqFkKJEzVrPPqCcm7GZ1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49756	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:11 UTC	1436	OUT	GET /login/new HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://login.planningcenteronline.com/password_reset/new Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY2OCwiZXhwIjoxNzE1Mjc1MjY4LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.N_oIDHOB8EXm1adfpq8inqXpY4X7MIXcd-jAWndDD6hJN4iA_2CVWMAoO4YQl6d6KdFSF9cN5NHNX8_eEwsM0Q; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAe/940kUrAAAA:oCm58SG5oFpIwQWc+PAtG6jerqi8bj7vGmA9sfOcVIpuqrENIys6YMM6d+vK0TdGiPJK/CJhwvlKY4W5RtV78A/1GVv+k+Yleo39ZoOQTofeEhZxmO0DinXz5kDdXZNKvW08pieqXGeDecXDzj0ClrQPZjKw5hKdt2xQngjQQhoNqFkKJEzVrPPqCcm7GZ1EmTuahuH6Tfj2vEj95HF6S+LzbWXC6XXnDTAfz36Akqk7nzPef//+Ev687LjcD+wpweeZRefqpZOj6EJO1nrQN7vqOuH2 If-None-Match: W/"cf13463be3eaab452590f50f03455305"
2024-04-25 17:21:11 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20220 Connection: close Date: Thu, 25 Apr 2024 17:21:11 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"06aac7978eb8889e0e267cb755c152b5" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY3MSwiZXhwIjoxNzE1Mjc1MjcxLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.n7rj90NgS5P-QHICdhPmnGB43Y2yVdCcg1PVh-7ydk_Nxg9suLVf7Z_UiEkMbcPESWNcvyKX0TmghqOVUOY-VQ; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:21:11 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: 03f5c353-9711-451d-b545-552ab646d848 X-Runtime: 0.016471 X-Cache: Miss from cloudfront Via: 1.1 61a045fe2f55f26aa32d8591dc1cd98e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: U894ViBcM-HEIfGEAvsoqu3HerbDBTiCfHVo_-v6hRIgmq-0VvO4AA==
2024-04-25 17:21:11 UTC	15019	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:21:11 UTC	222	IN	Data Raw: 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 0a 3c 68 31 3e 4c 6f 67 69 6e 3c 2f 68 31 3e 0a 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 69 6f 73 5f 73 61 66 61 72 69 5f 6b 65 79 63 68 61 69 6e 5f 61 75 74 6f 5f 73 75 62 6d 69 74 5f 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 70 6c 61 6e 6e 69 6e 67 63 65 6e 74 65 72 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 22 20 61 63 63 65 70 74 2d 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 75 74 Data Ascii: ="content"> <h1>Login</h1><form class="ios_safari_keychain_auto_submit_form" action="https://login.planningcenteronline.com/login" accept-charset="UTF-8" method="post"><input type="hidden" name="aut
2024-04-25 17:21:11 UTC	4979	IN	Data Raw: 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 68 6a 59 4d 4e 59 4f 6d 59 76 41 2d 2d 38 79 78 34 38 30 6f 34 69 59 55 72 6f 71 4b 6c 4a 37 57 69 4e 31 4a 4a 72 43 6c 32 62 38 37 47 50 79 6a 70 44 32 41 72 52 7a 53 79 78 72 63 6a 2d 5f 4e 50 53 79 46 2d 65 5a 55 56 79 4f 6a 78 5a 67 74 76 37 61 71 31 51 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 0a 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 6d 62 2d 34 70 22 3e 59 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 70 68 6f 6e 65 3c 2f 6c 61 62 65 6c 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2d 77 72 61 70 70 65 72 2d 2d 69 63 6f 6e 2d 6c 65 66 74 20 6d 62 2d 32 22 3e 0a 20 20 20 20 3c 73 76 67 20 63 Data Ascii: henticity_token" value="hjYMNYOmYvA--8yx480o4iYUroqKlJ7WiN1JJrCl2b87GPyjpD2ArRzSyxrcj-_NPSyF-eZUVyOjxZgtv7aq1Q" autocomplete="off" /> <label class="mb-4p">Your email or phone</label> <div class="input-wrapper input-wrapper--icon-left mb-2"> <svg c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49763	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:11 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:11 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:11 GMT X-Cache: Error from cloudfront Via: 1.1 7fc4d53a17d950b206cd9fccf1108b8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: W-tPF6xEzosvFmtnspas8QkY7WUbQ2-Agos2AB2hEGfHMm52vFDGlw==
2024-04-25 17:21:11 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49765	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:11 UTC	652	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
2024-04-25 17:21:11 UTC	520	IN	HTTP/1.1 304 Not Modified Content-Type: text/javascript Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:11 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9107-25902f9c07126bef19f0a829 X-Cache: Miss from cloudfront Via: 1.1 9b097dfab92228268a37145aac5629c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: cGjtlvZFrBawEIjwr_Kt2VXGrObMRQ4jJnwkk1ZVyK5LuOLZ1d1Mug==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49766	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:12 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2327 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:12 UTC	2327	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 65 2f 39 34 30 6b 55 72 41 41 41 41 3a 6f 43 6d 35 38 53 47 35 6f 46 70 49 77 51 57 63 2b 50 41 74 47 36 6a 65 72 71 69 38 62 6a 37 76 47 6d 41 39 73 66 4f 63 56 49 70 75 71 72 45 4e 49 79 73 36 59 4d 4d 36 64 2b 76 4b 30 54 64 47 69 50 4a 4b 2f 43 4a 68 77 76 6c 4b 59 34 57 35 52 74 56 37 38 41 2f 31 47 56 76 2b 6b 2b 59 6c 65 6f 33 39 5a 6f 4f 51 54 6f 66 65 45 68 5a 78 6d 4f 30 44 69 6e 58 7a 35 6b 44 64 58 5a 4e 4b 76 57 30 38 70 69 65 71 58 47 65 44 65 63 58 44 7a 6a 30 43 6c 72 51 50 5a 6a 4b 77 35 68 4b 64 74 32 78 51 6e 67 6a 51 51 68 6f 4e 71 46 6b 4b 4a 45 7a 56 72 50 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAe/940kUrAAAA:oCm58SG5oFpIwQWc+PAtG6jerqi8bj7vGmA9sfOcVIpuqrENIys6YMM6d+vK0TdGiPJK/CJhwvlKY4W5RtV78A/1GVv+k+Yleo39ZoOQTofeEhZxmO0DinXz5kDdXZNKvW08pieqXGeDecXDzj0ClrQPZjKw5hKdt2xQngjQQhoNqFkKJEzVrP
2024-04-25 17:21:12 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:21:12 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9108-303cca617992b1af42d52a39 X-Cache: Miss from cloudfront Via: 1.1 936f33bed45438343f0ef2adff442814.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: vRCirsyXQfQHKetERCG9mS2dW6llLmeH2cELLovI9ZNe0Hv0Bde6GA==
2024-04-25 17:21:12 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 63 30 35 35 79 7a 38 49 41 41 41 41 3a 36 55 6c 62 45 55 36 65 4c 4b 7a 61 38 32 55 4b 58 31 73 35 4c 35 61 4a 56 35 72 4f 74 4a 35 34 4b 6c 56 5a 42 68 4d 52 78 61 54 61 32 6d 56 6b 4c 50 52 4c 56 46 71 34 73 34 31 5a 47 4a 45 48 32 77 52 77 55 52 56 51 4d 2b 4b 56 64 36 55 30 76 59 72 55 6f 78 47 78 6a 72 38 2f 43 51 50 59 46 53 45 67 68 62 6b 66 50 36 30 34 34 4f 6c 4f 36 43 69 30 76 47 75 63 6b 46 35 4e 4f 6a 6d 54 34 6d 49 70 38 74 54 64 74 4e 36 54 57 51 31 57 57 58 6c 69 79 32 4c 33 49 76 7a 6a 6a 71 76 56 6a 59 5a 6e 37 6d 58 70 38 72 6a 49 41 36 50 62 2b 4e 52 5a 4e 65 35 2f 69 42 65 48 47 68 6c Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAc055yz8IAAAA:6UlbEU6eLKza82UKX1s5L5aJV5rOtJ54KlVZBhMRxaTa2mVkLPRLVFq4s41ZGJEH2wRwURVQM+KVd6U0vYrUoxGxjr8/CQPYFSEghbkfP6044OlO6Ci0vGuckF5NOjmT4mIp8tTdtN6TWQ1WWXliy2L3IvzjjqvVjYZn7mXp8rjIA6Pb+NRZNe5/iBeHGhl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49767	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:13 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:13 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:13 GMT X-Cache: Error from cloudfront Via: 1.1 7c4bbd97f5be908e33f403c3794f629a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: fZKoNtdPEB1lkfnqsPRZbxU7qrHRuBJ_goDya9GKhyx5BIAbK-XZnA==
2024-04-25 17:21:13 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49768	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:13 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2812 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:13 UTC	2812	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 63 30 35 35 79 7a 38 49 41 41 41 41 3a 36 55 6c 62 45 55 36 65 4c 4b 7a 61 38 32 55 4b 58 31 73 35 4c 35 61 4a 56 35 72 4f 74 4a 35 34 4b 6c 56 5a 42 68 4d 52 78 61 54 61 32 6d 56 6b 4c 50 52 4c 56 46 71 34 73 34 31 5a 47 4a 45 48 32 77 52 77 55 52 56 51 4d 2b 4b 56 64 36 55 30 76 59 72 55 6f 78 47 78 6a 72 38 2f 43 51 50 59 46 53 45 67 68 62 6b 66 50 36 30 34 34 4f 6c 4f 36 43 69 30 76 47 75 63 6b 46 35 4e 4f 6a 6d 54 34 6d 49 70 38 74 54 64 74 4e 36 54 57 51 31 57 57 58 6c 69 79 32 4c 33 49 76 7a 6a 6a 71 76 56 6a 59 5a 6e 37 6d 58 70 38 72 6a 49 41 36 50 62 2b 4e 52 5a 4e 65 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAc055yz8IAAAA:6UlbEU6eLKza82UKX1s5L5aJV5rOtJ54KlVZBhMRxaTa2mVkLPRLVFq4s41ZGJEH2wRwURVQM+KVd6U0vYrUoxGxjr8/CQPYFSEghbkfP6044OlO6Ci0vGuckF5NOjmT4mIp8tTdtN6TWQ1WWXliy2L3IvzjjqvVjYZn7mXp8rjIA6Pb+NRZNe
2024-04-25 17:21:13 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 968 Connection: close Date: Thu, 25 Apr 2024 17:21:13 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9109-15a2a9424d34b8e1004dc6e8 X-Cache: Miss from cloudfront Via: 1.1 d1cde188ada6755fe03b8541b71fce4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: imdgjnBGr8K2-h1eRz8Hft4uHbJuXHQSdGz9fbxNDtBBQ1EVYCAztg==
2024-04-25 17:21:13 UTC	968	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 65 67 56 34 65 6d 67 33 41 41 41 41 3a 75 70 34 4f 39 42 59 79 77 4c 5a 56 43 46 5a 4c 6b 2f 36 75 4d 58 43 62 78 35 4f 6b 4b 62 35 4d 6c 4e 6d 77 4d 34 69 67 4a 72 77 49 53 35 43 34 70 47 52 32 2f 36 35 6a 6e 34 70 38 52 76 6e 54 65 4f 58 2f 65 53 64 47 5a 4d 4c 64 53 30 48 2f 6d 67 78 68 52 49 2f 64 6a 52 49 54 50 74 41 75 2f 43 49 59 54 67 32 43 51 62 2f 31 66 2f 45 56 65 71 78 4f 47 54 62 67 44 70 33 78 73 54 72 54 68 30 69 6e 6c 41 52 71 51 73 4a 44 6b 46 6f 77 33 42 37 56 71 4c 4c 78 34 30 66 4a 37 6c 76 43 52 32 6a 63 48 5a 49 53 78 4f 4e 30 39 73 46 33 37 5a 49 52 6c 44 51 4a 48 37 6f 44 65 2f 70 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAegV4emg3AAAA:up4O9BYywLZVCFZLk/6uMXCbx5OkKb5MlNmwM4igJrwIS5C4pGR2/65jn4p8RvnTeOX/eSdGZMLdS0H/mgxhRI/djRITPtAu/CIYTg2CQb/1f/EVeqxOGTbgDp3xsTrTh0inlARqQsJDkFow3B7VqLLx40fJ7lvCR2jcHZISxON09sF37ZIRlDQJH7oDe/p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49769	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:13 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:14 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:13 GMT X-Cache: Error from cloudfront Via: 1.1 baddfcb4f2a6876b4fcc03bcd62427ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: sm60apA-CPMMumoMU1OwcMLlbd_3xS2nUU7y0-Z7JpaqFrpXMoMMyA==
2024-04-25 17:21:14 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49770	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:14 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2888 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:14 UTC	2888	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 65 67 56 34 65 6d 67 33 41 41 41 41 3a 75 70 34 4f 39 42 59 79 77 4c 5a 56 43 46 5a 4c 6b 2f 36 75 4d 58 43 62 78 35 4f 6b 4b 62 35 4d 6c 4e 6d 77 4d 34 69 67 4a 72 77 49 53 35 43 34 70 47 52 32 2f 36 35 6a 6e 34 70 38 52 76 6e 54 65 4f 58 2f 65 53 64 47 5a 4d 4c 64 53 30 48 2f 6d 67 78 68 52 49 2f 64 6a 52 49 54 50 74 41 75 2f 43 49 59 54 67 32 43 51 62 2f 31 66 2f 45 56 65 71 78 4f 47 54 62 67 44 70 33 78 73 54 72 54 68 30 69 6e 6c 41 52 71 51 73 4a 44 6b 46 6f 77 33 42 37 56 71 4c 4c 78 34 30 66 4a 37 6c 76 43 52 32 6a 63 48 5a 49 53 78 4f 4e 30 39 73 46 33 37 5a 49 52 6c 44 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAegV4emg3AAAA:up4O9BYywLZVCFZLk/6uMXCbx5OkKb5MlNmwM4igJrwIS5C4pGR2/65jn4p8RvnTeOX/eSdGZMLdS0H/mgxhRI/djRITPtAu/CIYTg2CQb/1f/EVeqxOGTbgDp3xsTrTh0inlARqQsJDkFow3B7VqLLx40fJ7lvCR2jcHZISxON09sF37ZIRlD
2024-04-25 17:21:14 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1056 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:14 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a910a-557bc23b30f8d29520f341d3 X-Cache: Miss from cloudfront Via: 1.1 841dfa6074cf4b3b0718988f088a4ac2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: W5WarceAGOXrMzIL42-G3xfhbShYCT2P7akrNhc_xHem0sNfAcZ5Zg==
2024-04-25 17:21:14 UTC	1056	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 71 62 39 35 56 71 55 5a 41 41 41 41 3a 69 75 7a 43 42 42 57 47 78 42 76 59 4b 52 6d 50 59 6f 42 5a 44 50 47 63 47 37 67 31 30 42 6f 77 57 54 59 76 32 61 57 54 4f 42 41 6e 42 75 68 36 6a 71 38 5a 42 34 2f 57 66 75 72 5a 66 31 4f 7a 42 6e 57 52 72 41 72 65 6c 53 75 33 69 39 48 6a 63 68 37 79 48 62 51 52 69 4a 74 4a 61 74 45 45 44 67 34 64 5a 67 42 55 4f 35 67 78 6c 74 59 39 5a 79 37 71 45 61 36 5a 37 49 52 43 70 4e 43 31 37 50 4e 72 54 38 6c 70 78 33 63 46 63 50 6f 57 75 38 46 6b 71 33 62 65 30 38 5a 75 6e 4a 50 2b 7a 43 7a 38 73 59 4f 6f 6c 74 6e 4d 39 61 46 30 38 38 6d 33 4b 63 4b 73 4e 4d 72 6b 70 44 47 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAqb95VqUZAAAA:iuzCBBWGxBvYKRmPYoBZDPGcG7g10BowWTYv2aWTOBAnBuh6jq8ZB4/WfurZf1OzBnWRrArelSu3i9Hjch7yHbQRiJtJatEEDg4dZgBUO5gxltY9Zy7qEa6Z7IRCpNC17PNrT8lpx3cFcPoWu8Fkq3be08ZunJP+zCz8sYOoltnM9aF088m3KcKsNMrkpDG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49771	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:14 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:14 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:14 GMT X-Cache: Error from cloudfront Via: 1.1 824fe21e467658628899bdd8725649ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: qbMZd7sUPRyolZ59k76mwO08h0l8yijFzWcQL4nKZcbImzQPUR5fVA==
2024-04-25 17:21:14 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49772	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:14 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2957 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:14 UTC	2957	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 71 62 39 35 56 71 55 5a 41 41 41 41 3a 69 75 7a 43 42 42 57 47 78 42 76 59 4b 52 6d 50 59 6f 42 5a 44 50 47 63 47 37 67 31 30 42 6f 77 57 54 59 76 32 61 57 54 4f 42 41 6e 42 75 68 36 6a 71 38 5a 42 34 2f 57 66 75 72 5a 66 31 4f 7a 42 6e 57 52 72 41 72 65 6c 53 75 33 69 39 48 6a 63 68 37 79 48 62 51 52 69 4a 74 4a 61 74 45 45 44 67 34 64 5a 67 42 55 4f 35 67 78 6c 74 59 39 5a 79 37 71 45 61 36 5a 37 49 52 43 70 4e 43 31 37 50 4e 72 54 38 6c 70 78 33 63 46 63 50 6f 57 75 38 46 6b 71 33 62 65 30 38 5a 75 6e 4a 50 2b 7a 43 7a 38 73 59 4f 6f 6c 74 6e 4d 39 61 46 30 38 38 6d 33 4b 63 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAqb95VqUZAAAA:iuzCBBWGxBvYKRmPYoBZDPGcG7g10BowWTYv2aWTOBAnBuh6jq8ZB4/WfurZf1OzBnWRrArelSu3i9Hjch7yHbQRiJtJatEEDg4dZgBUO5gxltY9Zy7qEa6Z7IRCpNC17PNrT8lpx3cFcPoWu8Fkq3be08ZunJP+zCz8sYOoltnM9aF088m3Kc
2024-04-25 17:21:14 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1144 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:14 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a910a-46ea97da3a34943b723f1e2e X-Cache: Miss from cloudfront Via: 1.1 ed8e6c4476f2632eef2c7ce856161af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: -qaKy2SVYWVcD8sGulXTPe7d3IbbntagFqwA2I4093ZuBvpeVjXP0Q==
2024-04-25 17:21:14 UTC	1144	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 52 35 35 56 67 41 61 41 41 41 41 3a 76 71 66 4d 31 69 4a 37 6b 4c 62 4d 36 65 32 30 64 79 64 42 6f 34 69 42 4c 45 74 4a 4f 42 4c 6a 2b 73 5a 4f 35 66 52 30 69 73 2b 54 36 52 45 63 46 43 33 52 45 7a 42 37 68 72 53 65 35 61 53 31 67 64 7a 45 55 44 2b 50 72 41 4f 4a 43 6e 2b 54 6f 2b 33 56 4a 4e 39 67 66 58 31 75 41 7a 58 41 64 62 74 62 48 73 37 57 2f 6a 6b 5a 69 4e 54 75 33 5a 45 65 50 64 35 6f 77 62 4a 4e 36 32 6a 4c 72 70 4f 6a 30 34 4b 69 6c 75 34 35 35 39 43 73 6c 62 74 44 44 45 36 52 45 2f 43 46 70 79 55 54 36 69 67 32 55 32 49 6e 32 41 70 65 6a 6b 6b 4e 44 58 6c 34 73 77 73 6e 4b 74 42 75 78 49 6d Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuR55VgAaAAAA:vqfM1iJ7kLbM6e20dydBo4iBLEtJOBLj+sZO5fR0is+T6REcFC3REzB7hrSe5aS1gdzEUD+PrAOJCn+To+3VJN9gfX1uAzXAdbtbHs7W/jkZiNTu3ZEePd5owbJN62jLrpOj04Kilu4559CslbtDDE6RE/CFpyUT6ig2U2In2ApejkkNDXl4swsnKtBuxIm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49773	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:15 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:15 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:15 GMT X-Cache: Error from cloudfront Via: 1.1 824fe21e467658628899bdd8725649ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: fbFEQbAw3Vf8_XGmXsr1jwbe-u5kPXYev3weGJ-c1Kvvi8_oyqwgBg==
2024-04-25 17:21:15 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49774	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:15 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3077 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:15 UTC	3077	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 52 35 35 56 67 41 61 41 41 41 41 3a 76 71 66 4d 31 69 4a 37 6b 4c 62 4d 36 65 32 30 64 79 64 42 6f 34 69 42 4c 45 74 4a 4f 42 4c 6a 2b 73 5a 4f 35 66 52 30 69 73 2b 54 36 52 45 63 46 43 33 52 45 7a 42 37 68 72 53 65 35 61 53 31 67 64 7a 45 55 44 2b 50 72 41 4f 4a 43 6e 2b 54 6f 2b 33 56 4a 4e 39 67 66 58 31 75 41 7a 58 41 64 62 74 62 48 73 37 57 2f 6a 6b 5a 69 4e 54 75 33 5a 45 65 50 64 35 6f 77 62 4a 4e 36 32 6a 4c 72 70 4f 6a 30 34 4b 69 6c 75 34 35 35 39 43 73 6c 62 74 44 44 45 36 52 45 2f 43 46 70 79 55 54 36 69 67 32 55 32 49 6e 32 41 70 65 6a 6b 6b 4e 44 58 6c 34 73 77 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuR55VgAaAAAA:vqfM1iJ7kLbM6e20dydBo4iBLEtJOBLj+sZO5fR0is+T6REcFC3REzB7hrSe5aS1gdzEUD+PrAOJCn+To+3VJN9gfX1uAzXAdbtbHs7W/jkZiNTu3ZEePd5owbJN62jLrpOj04Kilu4559CslbtDDE6RE/CFpyUT6ig2U2In2ApejkkNDXl4sw
2024-04-25 17:21:15 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1232 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:15 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a910b-17fd086b0091288655b949db X-Cache: Miss from cloudfront Via: 1.1 7c4bbd97f5be908e33f403c3794f629a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: TmXDfpQdmu_70QtVINJxCRuBFMsO2iwDh_OzK3QIpBngAO3oSWuFPg==
2024-04-25 17:21:15 UTC	1232	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 66 58 31 34 36 31 59 6f 41 41 41 41 3a 77 49 35 42 53 61 77 49 67 41 6a 4c 4c 61 57 4a 77 39 44 6f 53 4c 2f 58 71 46 73 71 39 71 74 55 66 7a 38 76 49 4a 59 44 4f 39 64 64 61 77 53 61 4c 43 42 30 66 46 69 78 2b 31 7a 58 4c 4b 65 64 2f 46 74 73 72 33 4c 6f 6b 36 56 77 56 57 35 72 5a 58 35 49 69 37 35 4f 66 66 32 4c 53 49 79 65 59 4f 79 78 37 67 32 51 78 4f 6f 74 70 52 45 49 53 64 4c 2f 76 31 42 76 43 4b 6b 76 44 39 57 50 6b 42 6c 72 41 4c 2b 37 6b 57 4f 56 39 55 48 78 44 57 70 44 4e 69 38 4a 4f 44 70 6d 65 55 58 6a 62 57 63 76 6f 37 75 51 65 44 39 54 6c 32 30 66 54 56 4c 56 4a 79 35 39 41 53 70 78 79 54 49 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAfX1461YoAAAA:wI5BSawIgAjLLaWJw9DoSL/XqFsq9qtUfz8vIJYDO9ddawSaLCB0fFix+1zXLKed/Ftsr3Lok6VwVW5rZX5Ii75Off2LSIyeYOyx7g2QxOotpREISdL/v1BvCKkvD9WPkBlrAL+7kWOV9UHxDWpDNi8JODpmeUXjbWcvo7uQeD9Tl20fTVLVJy59ASpxyTI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49775	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:15 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:16 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:16 GMT X-Cache: Error from cloudfront Via: 1.1 2e50d9b1ee017f302768660f02b7418e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: VQQ_hRHQ6acOfcctpK2sD5YOYaWJr3JZBZh_vKTvm1EXmAFsG2UBMw==
2024-04-25 17:21:16 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49776	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:16 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3165 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:16 UTC	3165	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 66 58 31 34 36 31 59 6f 41 41 41 41 3a 77 49 35 42 53 61 77 49 67 41 6a 4c 4c 61 57 4a 77 39 44 6f 53 4c 2f 58 71 46 73 71 39 71 74 55 66 7a 38 76 49 4a 59 44 4f 39 64 64 61 77 53 61 4c 43 42 30 66 46 69 78 2b 31 7a 58 4c 4b 65 64 2f 46 74 73 72 33 4c 6f 6b 36 56 77 56 57 35 72 5a 58 35 49 69 37 35 4f 66 66 32 4c 53 49 79 65 59 4f 79 78 37 67 32 51 78 4f 6f 74 70 52 45 49 53 64 4c 2f 76 31 42 76 43 4b 6b 76 44 39 57 50 6b 42 6c 72 41 4c 2b 37 6b 57 4f 56 39 55 48 78 44 57 70 44 4e 69 38 4a 4f 44 70 6d 65 55 58 6a 62 57 63 76 6f 37 75 51 65 44 39 54 6c 32 30 66 54 56 4c 56 4a 79 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAfX1461YoAAAA:wI5BSawIgAjLLaWJw9DoSL/XqFsq9qtUfz8vIJYDO9ddawSaLCB0fFix+1zXLKed/Ftsr3Lok6VwVW5rZX5Ii75Off2LSIyeYOyx7g2QxOotpREISdL/v1BvCKkvD9WPkBlrAL+7kWOV9UHxDWpDNi8JODpmeUXjbWcvo7uQeD9Tl20fTVLVJy
2024-04-25 17:21:16 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1320 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:16 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a910c-605ec72669c2b3d65001883f X-Cache: Miss from cloudfront Via: 1.1 2e50d9b1ee017f302768660f02b7418e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: WsDtehyrFdAuTRr5yx10gpnJVtX_rUSPZU4_PDUA7BaOSqzsPaONPg==
2024-04-25 17:21:16 UTC	1320	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6c 57 52 34 6f 59 4d 7a 41 41 41 41 3a 4e 4c 42 43 62 58 35 6a 34 38 6a 6e 62 50 30 68 56 61 66 51 38 56 4d 68 46 43 6f 7a 7a 34 59 52 69 70 70 36 4d 72 4c 43 41 49 43 32 62 59 6d 62 6e 7a 66 54 71 45 35 59 51 73 66 62 59 44 56 6b 59 41 4b 4c 65 74 79 50 53 4e 4e 33 69 58 37 4b 48 72 6a 39 57 53 43 34 32 4c 71 41 4a 6b 55 6d 67 30 35 79 6c 79 48 37 77 32 55 33 78 4a 4d 44 37 56 33 56 65 61 33 2b 54 41 32 6f 54 61 49 46 6e 66 49 59 4d 31 69 55 66 32 6b 36 4e 78 6a 65 41 44 66 55 41 76 71 62 54 49 79 44 58 79 4c 6f 74 76 6f 4c 35 6f 74 34 61 63 31 4b 69 46 6a 72 69 36 59 35 2b 6f 6c 77 2f 2f 38 53 37 49 57 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAlWR4oYMzAAAA:NLBCbX5j48jnbP0hVafQ8VMhFCozz4YRipp6MrLCAIC2bYmbnzfTqE5YQsfbYDVkYAKLetyPSNN3iX7KHrj9WSC42LqAJkUmg05ylyH7w2U3xJMD7V3Vea3+TA2oTaIFnfIYM1iUf2k6NxjeADfUAvqbTIyDXyLotvoL5ot4ac1KiFjri6Y5+olw//8S7IW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49777	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:16 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:17 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:17 GMT X-Cache: Error from cloudfront Via: 1.1 9b097dfab92228268a37145aac5629c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: z0Ftf0jLTO_QkAwRhEHMGOCOzTWcd9q7XxSFzlgXm0gR7yQWxiod9g==
2024-04-25 17:21:17 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49778	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:17 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3243 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:17 UTC	3243	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6c 57 52 34 6f 59 4d 7a 41 41 41 41 3a 4e 4c 42 43 62 58 35 6a 34 38 6a 6e 62 50 30 68 56 61 66 51 38 56 4d 68 46 43 6f 7a 7a 34 59 52 69 70 70 36 4d 72 4c 43 41 49 43 32 62 59 6d 62 6e 7a 66 54 71 45 35 59 51 73 66 62 59 44 56 6b 59 41 4b 4c 65 74 79 50 53 4e 4e 33 69 58 37 4b 48 72 6a 39 57 53 43 34 32 4c 71 41 4a 6b 55 6d 67 30 35 79 6c 79 48 37 77 32 55 33 78 4a 4d 44 37 56 33 56 65 61 33 2b 54 41 32 6f 54 61 49 46 6e 66 49 59 4d 31 69 55 66 32 6b 36 4e 78 6a 65 41 44 66 55 41 76 71 62 54 49 79 44 58 79 4c 6f 74 76 6f 4c 35 6f 74 34 61 63 31 4b 69 46 6a 72 69 36 59 35 2b 6f Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAlWR4oYMzAAAA:NLBCbX5j48jnbP0hVafQ8VMhFCozz4YRipp6MrLCAIC2bYmbnzfTqE5YQsfbYDVkYAKLetyPSNN3iX7KHrj9WSC42LqAJkUmg05ylyH7w2U3xJMD7V3Vea3+TA2oTaIFnfIYM1iUf2k6NxjeADfUAvqbTIyDXyLotvoL5ot4ac1KiFjri6Y5+o
2024-04-25 17:21:17 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1408 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:17 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a910d-7be3cc0a53383dd93cba1ebd X-Cache: Miss from cloudfront Via: 1.1 263d97c176fc51d1d08116820c013de4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: EdDQ5-GqkBgXXFj4fvEBzE9-CWtGBAvDUGTdkL79Hg82Tb-ktv6fKQ==
2024-04-25 17:21:17 UTC	1408	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 74 34 78 35 6a 78 51 53 41 41 41 41 3a 35 73 43 63 52 35 67 68 4a 75 78 58 74 43 65 4c 4b 2b 51 66 54 7a 39 71 6a 45 66 64 32 59 64 58 42 48 52 77 44 4f 67 42 78 67 6b 79 6c 31 56 65 6c 73 39 4a 62 43 37 63 64 7a 32 4a 71 56 4c 43 35 63 6f 53 55 42 5a 6f 43 55 2f 34 72 6f 55 43 44 71 61 47 76 2b 6f 4c 43 4a 46 2f 56 4f 36 4d 78 63 78 49 7a 30 69 65 65 74 7a 31 67 6a 2f 30 4b 6e 6f 42 66 77 70 68 73 47 56 4b 76 43 78 4c 4b 36 46 46 79 53 65 35 49 64 72 59 4e 52 6f 6d 45 36 35 4a 66 49 36 7a 6d 62 78 62 6a 2b 33 6d 4f 36 31 77 77 71 6c 4e 31 4c 57 37 69 46 75 68 55 70 78 46 4b 6a 72 77 41 43 32 68 30 51 2b Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAt4x5jxQSAAAA:5sCcR5ghJuxXtCeLK+QfTz9qjEfd2YdXBHRwDOgBxgkyl1Vels9JbC7cdz2JqVLC5coSUBZoCU/4roUCDqaGv+oLCJF/VO6MxcxIz0ieetz1gj/0KnoBfwphsGVKvCxLK6FFySe5IdrYNRomE65JfI6zmbxbj+3mO61wwqlN1LW7iFuhUpxFKjrwAC2h0Q+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49779	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:19 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3347 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:19 UTC	3347	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 74 34 78 35 6a 78 51 53 41 41 41 41 3a 35 73 43 63 52 35 67 68 4a 75 78 58 74 43 65 4c 4b 2b 51 66 54 7a 39 71 6a 45 66 64 32 59 64 58 42 48 52 77 44 4f 67 42 78 67 6b 79 6c 31 56 65 6c 73 39 4a 62 43 37 63 64 7a 32 4a 71 56 4c 43 35 63 6f 53 55 42 5a 6f 43 55 2f 34 72 6f 55 43 44 71 61 47 76 2b 6f 4c 43 4a 46 2f 56 4f 36 4d 78 63 78 49 7a 30 69 65 65 74 7a 31 67 6a 2f 30 4b 6e 6f 42 66 77 70 68 73 47 56 4b 76 43 78 4c 4b 36 46 46 79 53 65 35 49 64 72 59 4e 52 6f 6d 45 36 35 4a 66 49 36 7a 6d 62 78 62 6a 2b 33 6d 4f 36 31 77 77 71 6c 4e 31 4c 57 37 69 46 75 68 55 70 78 46 4b 6a Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAt4x5jxQSAAAA:5sCcR5ghJuxXtCeLK+QfTz9qjEfd2YdXBHRwDOgBxgkyl1Vels9JbC7cdz2JqVLC5coSUBZoCU/4roUCDqaGv+oLCJF/VO6MxcxIz0ieetz1gj/0KnoBfwphsGVKvCxLK6FFySe5IdrYNRomE65JfI6zmbxbj+3mO61wwqlN1LW7iFuhUpxFKj
2024-04-25 17:21:19 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1496 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:19 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a910f-784780b96d2d7e2235577201 X-Cache: Miss from cloudfront Via: 1.1 824fe21e467658628899bdd8725649ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: AU6ilvGABM6q3gxVwOg5nGcBPv9tC0QhZSKUJSx8mkHQI9PdoVxHiA==
2024-04-25 17:21:19 UTC	1496	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 64 78 35 34 61 47 34 35 41 41 41 41 3a 73 4d 56 6b 65 46 57 36 43 76 2f 4f 38 46 61 66 54 4f 33 5a 46 64 54 54 77 53 64 72 79 63 51 63 73 55 46 75 67 66 6d 6b 63 63 45 52 61 72 6c 43 43 30 30 58 51 31 2f 4d 58 59 7a 53 61 47 5a 44 5a 42 59 73 75 47 71 38 30 79 45 77 57 69 43 39 38 4d 37 65 6d 53 42 68 41 71 70 2b 62 72 6d 76 76 34 45 47 30 7a 6e 74 37 48 58 31 6c 76 67 6c 6d 75 66 51 39 4e 4a 45 6e 52 2b 59 32 47 58 71 76 6e 52 64 4d 57 69 64 62 6a 75 45 76 7a 4d 46 6e 53 6b 59 2f 45 41 70 71 74 4e 35 56 74 38 5a 2f 73 31 58 64 6d 65 68 35 31 68 4a 75 32 6d 69 72 4c 34 47 33 2f 7a 56 32 57 5a 62 68 54 47 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAdx54aG45AAAA:sMVkeFW6Cv/O8FafTO3ZFdTTwSdrycQcsUFugfmkccERarlCC00XQ1/MXYzSaGZDZBYsuGq80yEwWiC98M7emSBhAqp+brmvv4EG0znt7HX1lvglmufQ9NJEnR+Y2GXqvnRdMWidbjuEvzMFnSkY/EApqtN5Vt8Z/s1Xdmeh51hJu2mirL4G3/zV2WZbhTG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49764	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:19 UTC	1350	OUT	GET /password_reset/new HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY3MSwiZXhwIjoxNzE1Mjc1MjcxLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.n7rj90NgS5P-QHICdhPmnGB43Y2yVdCcg1PVh-7ydk_Nxg9suLVf7Z_UiEkMbcPESWNcvyKX0TmghqOVUOY-VQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAt4x5jxQSAAAA:5sCcR5ghJuxXtCeLK+QfTz9qjEfd2YdXBHRwDOgBxgkyl1Vels9JbC7cdz2JqVLC5coSUBZoCU/4roUCDqaGv+oLCJF/VO6MxcxIz0ieetz1gj/0KnoBfwphsGVKvCxLK6FFySe5IdrYNRomE65JfI6zmbxbj+3mO61wwqlN1LW7iFuhUpxFKjrwAC2h0Q+tENtIlFnTex843qEA0j1k4JGP5xS201xnlW8vK7ylsJp9z0vVKZx0lEdHZ9SJaoTmzbUe1k6/LUPM4n4CY+aD4Bj8xlhV If-None-Match: W/"4479a3118924747758e6325ba57df64e"
2024-04-25 17:21:19 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 18851 Connection: close Date: Thu, 25 Apr 2024 17:21:19 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"6a48529c1e779406b90ee7992dba620f" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY3OSwiZXhwIjoxNzE1Mjc1Mjc5LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.pfnee7kNFglbECNSjjaoRIUxFCoXn6T-o_SyBAsnc8pxznk1QAzNPwAcRgDunrXrXZhwdTSqPWw4MJ_HnnEvdw; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:21:19 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: 7438d016-f1c7-453b-9412-3e2531eca42c X-Runtime: 0.017762 X-Cache: Miss from cloudfront Via: 1.1 b0a0b581dcccd27fc074709437a90f04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 8NvwIuUH1UYcikzyMXrY9Ova67OH5fiDad-3cUhonsNx8AJ1ttVKAQ==
2024-04-25 17:21:19 UTC	15019	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:21:19 UTC	3832	IN	Data Raw: 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 68 31 3e 50 61 73 73 77 6f 72 64 20 52 65 73 65 74 3c 2f 68 31 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 6d 62 2d 32 22 3e 0a 20 20 45 6e 74 65 72 20 61 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 74 6f 20 72 65 63 65 69 76 65 20 61 20 63 6f 64 65 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 0a 3c 2f 70 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 70 61 73 73 77 6f 72 64 5f 72 65 73 65 74 22 20 61 63 63 65 70 74 2d 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 Data Ascii: ="content"> <h1>Password Reset</h1><p class="mb-2"> Enter an email address or phone number to receive a code that can be used to set your password.</p><form action="/password_reset" accept-charset="UTF-8" method="post"><input t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49780	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:19 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:20 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:20 GMT X-Cache: Error from cloudfront Via: 1.1 936f33bed45438343f0ef2adff442814.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Hy1s0cx3w4CAISt5-zVFrVbTArCmA54LbgQQ9Qr2CVpJ5hOlhkvhJQ==
2024-04-25 17:21:20 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49782	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:20 UTC	652	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
2024-04-25 17:21:20 UTC	520	IN	HTTP/1.1 304 Not Modified Content-Type: text/javascript Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:20 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9110-76ea936d0321b32a0219ea1f X-Cache: Miss from cloudfront Via: 1.1 7c4bbd97f5be908e33f403c3794f629a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: g43bLoz27S_rpK-RNr3mQdgVe9m1_BbNgM5DQv8RwVVS1fh9CiiBVg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49783	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:21 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:21 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:21 GMT X-Cache: Error from cloudfront Via: 1.1 417c242b19212928b079740e6dd8f54c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: st_8apMPPAhufdY9dhccpgbw9OcOOilOQkZxXNamp59LHa1R4yqKrw==
2024-04-25 17:21:21 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49784	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:21 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 1818 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:21 UTC	1818	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 64 78 35 34 61 47 34 35 41 41 41 41 3a 73 4d 56 6b 65 46 57 36 43 76 2f 4f 38 46 61 66 54 4f 33 5a 46 64 54 54 77 53 64 72 79 63 51 63 73 55 46 75 67 66 6d 6b 63 63 45 52 61 72 6c 43 43 30 30 58 51 31 2f 4d 58 59 7a 53 61 47 5a 44 5a 42 59 73 75 47 71 38 30 79 45 77 57 69 43 39 38 4d 37 65 6d 53 42 68 41 71 70 2b 62 72 6d 76 76 34 45 47 30 7a 6e 74 37 48 58 31 6c 76 67 6c 6d 75 66 51 39 4e 4a 45 6e 52 2b 59 32 47 58 71 76 6e 52 64 4d 57 69 64 62 6a 75 45 76 7a 4d 46 6e 53 6b 59 2f 45 41 70 71 74 4e 35 56 74 38 5a 2f 73 31 58 64 6d 65 68 35 31 68 4a 75 32 6d 69 72 4c 34 47 33 2f Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAdx54aG45AAAA:sMVkeFW6Cv/O8FafTO3ZFdTTwSdrycQcsUFugfmkccERarlCC00XQ1/MXYzSaGZDZBYsuGq80yEwWiC98M7emSBhAqp+brmvv4EG0znt7HX1lvglmufQ9NJEnR+Y2GXqvnRdMWidbjuEvzMFnSkY/EApqtN5Vt8Z/s1Xdmeh51hJu2mirL4G3/
2024-04-25 17:21:21 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:21:21 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9111-49fe1cd0173120de67446d04 X-Cache: Miss from cloudfront Via: 1.1 71f1cca040033ebffc591cf9392d1528.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: tEeDPkk8bJTymiZ2KB-dkqlVBdF1fkAoEqvL6x4M1XGpekVrjmD6aA==
2024-04-25 17:21:21 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 48 52 34 63 2f 49 34 41 41 41 41 3a 33 57 79 4f 39 51 72 6e 53 6a 4d 5a 31 39 4b 35 44 53 62 63 50 4f 54 45 57 43 67 75 4e 36 4d 4b 58 67 31 76 72 72 6e 31 4c 50 41 58 72 6f 54 59 74 47 69 69 41 61 71 56 35 6c 58 43 32 4d 2f 46 64 52 77 4c 57 31 52 54 33 66 71 6c 6a 4c 56 5a 75 52 59 36 38 44 52 4b 30 78 30 65 6e 71 30 51 74 68 71 45 51 65 59 42 51 45 5a 4b 46 63 77 52 72 46 36 45 51 66 77 67 4a 2f 48 52 43 74 35 65 5a 57 54 62 47 66 35 4c 31 4f 30 79 67 52 4d 4e 6d 44 30 61 6c 76 61 73 33 53 63 4b 49 32 48 76 4a 74 2f 30 6f 41 2f 33 71 37 4a 49 44 57 49 54 6d 5a 65 38 42 46 74 78 77 71 38 6c 53 51 34 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuHR4c/I4AAAA:3WyO9QrnSjMZ19K5DSbcPOTEWCguN6MKXg1vrrn1LPAXroTYtGiiAaqV5lXC2M/FdRwLW1RT3fqljLVZuRY68DRK0x0enq0QthqEQeYBQEZKFcwRrF6EQfwgJ/HRCt5eZWTbGf5L1O0ygRMNmD0alvas3ScKI2HvJt/0oA/3q7JIDWITmZe8BFtxwq8lSQ4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49785	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:22 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:22 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:22 GMT X-Cache: Error from cloudfront Via: 1.1 9b097dfab92228268a37145aac5629c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: vOixHwCLvuL9AtBj1urf-f3pNx6zW3bZlyrrbhw0Z2iYE31sbSy8Jw==
2024-04-25 17:21:22 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49786	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:22 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2301 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:22 UTC	2301	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 48 52 34 63 2f 49 34 41 41 41 41 3a 33 57 79 4f 39 51 72 6e 53 6a 4d 5a 31 39 4b 35 44 53 62 63 50 4f 54 45 57 43 67 75 4e 36 4d 4b 58 67 31 76 72 72 6e 31 4c 50 41 58 72 6f 54 59 74 47 69 69 41 61 71 56 35 6c 58 43 32 4d 2f 46 64 52 77 4c 57 31 52 54 33 66 71 6c 6a 4c 56 5a 75 52 59 36 38 44 52 4b 30 78 30 65 6e 71 30 51 74 68 71 45 51 65 59 42 51 45 5a 4b 46 63 77 52 72 46 36 45 51 66 77 67 4a 2f 48 52 43 74 35 65 5a 57 54 62 47 66 35 4c 31 4f 30 79 67 52 4d 4e 6d 44 30 61 6c 76 61 73 33 53 63 4b 49 32 48 76 4a 74 2f 30 6f 41 2f 33 71 37 4a 49 44 57 49 54 6d 5a 65 38 42 46 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuHR4c/I4AAAA:3WyO9QrnSjMZ19K5DSbcPOTEWCguN6MKXg1vrrn1LPAXroTYtGiiAaqV5lXC2M/FdRwLW1RT3fqljLVZuRY68DRK0x0enq0QthqEQeYBQEZKFcwRrF6EQfwgJ/HRCt5eZWTbGf5L1O0ygRMNmD0alvas3ScKI2HvJt/0oA/3q7JIDWITmZe8BF
2024-04-25 17:21:22 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 968 Connection: close Date: Thu, 25 Apr 2024 17:21:22 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9112-697ad0720958f9ff6a63f0cf X-Cache: Miss from cloudfront Via: 1.1 55b6418a8a2f714a67d8e4d292154ef2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: XzEGP4PFe6v_BxnhiDJ493KXYR2wXkAKMg40IoE63zRtIUx1IVbyjA==
2024-04-25 17:21:22 UTC	968	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 37 6c 34 6a 4a 6b 31 41 41 41 41 3a 57 44 62 38 70 65 47 70 6f 39 4e 78 52 46 49 6a 4f 6e 76 64 45 58 7a 52 4c 32 50 45 6e 75 6b 4f 4e 76 50 77 4d 6a 50 79 74 48 54 71 32 30 4e 68 6b 32 48 2b 30 77 66 35 51 54 57 6a 51 71 73 72 61 65 34 32 6d 67 39 30 6c 48 63 45 54 46 43 2f 4d 64 5a 31 77 48 50 74 37 67 4a 5a 69 4f 77 35 6e 7a 33 6e 62 57 79 79 54 68 32 67 47 61 45 45 6f 65 7a 66 6e 71 50 53 6b 48 5a 47 44 68 51 67 31 70 48 39 71 6b 33 65 77 39 35 69 52 74 6b 76 36 47 63 2f 4e 77 4f 2b 6f 4b 4b 75 41 74 7a 4d 33 68 57 4f 78 70 43 36 2f 4a 44 50 30 43 6b 6c 56 78 71 54 46 7a 37 67 6a 55 62 61 2f 56 36 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAu7l4jJk1AAAA:WDb8peGpo9NxRFIjOnvdEXzRL2PEnukONvPwMjPytHTq20Nhk2H+0wf5QTWjQqsrae42mg90lHcETFC/MdZ1wHPt7gJZiOw5nz3nbWyyTh2gGaEEoezfnqPSkHZGDhQg1pH9qk3ew95iRtkv6Gc/NwO+oKKuAtzM3hWOxpC6/JDP0CklVxqTFz7gjUba/V6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49787	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:23 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:23 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:23 GMT X-Cache: Error from cloudfront Via: 1.1 6bc1c280aeef9bbdeb102c7f4e4f773e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 5yAny8ufYEXeFZfqjSXPhenAw24vH_uD0SRr7Utu0sT_DPdkw-U6vA==
2024-04-25 17:21:23 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49781	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:30 UTC	1341	OUT	GET /login/new HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY3OSwiZXhwIjoxNzE1Mjc1Mjc5LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.pfnee7kNFglbECNSjjaoRIUxFCoXn6T-o_SyBAsnc8pxznk1QAzNPwAcRgDunrXrXZhwdTSqPWw4MJ_HnnEvdw; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAu7l4jJk1AAAA:WDb8peGpo9NxRFIjOnvdEXzRL2PEnukONvPwMjPytHTq20Nhk2H+0wf5QTWjQqsrae42mg90lHcETFC/MdZ1wHPt7gJZiOw5nz3nbWyyTh2gGaEEoezfnqPSkHZGDhQg1pH9qk3ew95iRtkv6Gc/NwO+oKKuAtzM3hWOxpC6/JDP0CklVxqTFz7gjUba/V6yXDXxWz/6/l7vE9qc4/smx3p8tMCHot34NG90NIh7roLlA24BIRTzl7vUZt47L85ZR9aHAs/kLzGrmO8uPmFSCrfF8697 If-None-Match: W/"06aac7978eb8889e0e267cb755c152b5"
2024-04-25 17:21:30 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20220 Connection: close Date: Thu, 25 Apr 2024 17:21:30 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"eaccf4bd077bbaa7f9d862b4e844a288" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY5MCwiZXhwIjoxNzE1Mjc1MjkwLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.bCv8ZVLMQtZusMXsRGv_EyrDRcmRC-AFG23WeMZqdG4wLN8oW8xpL7A6L4fMg0VYUI7c9rkqzcw2VfMSrAYoVQ; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:21:30 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: 78f8136f-5ac7-4a49-827d-4eae9eeee69a X-Runtime: 0.015726 X-Cache: Miss from cloudfront Via: 1.1 ff04cdefdd5436627fece3898d7cf2b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: GIMo5EesRtdzCKxgs2FgvaoMbu-9ltjPN00abNVnaFmGJnjY4Zpvbw==
2024-04-25 17:21:30 UTC	15019	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:21:30 UTC	222	IN	Data Raw: 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 0a 3c 68 31 3e 4c 6f 67 69 6e 3c 2f 68 31 3e 0a 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 22 69 6f 73 5f 73 61 66 61 72 69 5f 6b 65 79 63 68 61 69 6e 5f 61 75 74 6f 5f 73 75 62 6d 69 74 5f 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 70 6c 61 6e 6e 69 6e 67 63 65 6e 74 65 72 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 22 20 61 63 63 65 70 74 2d 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 75 74 Data Ascii: ="content"> <h1>Login</h1><form class="ios_safari_keychain_auto_submit_form" action="https://login.planningcenteronline.com/login" accept-charset="UTF-8" method="post"><input type="hidden" name="aut
2024-04-25 17:21:30 UTC	4979	IN	Data Raw: 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 75 42 76 72 46 35 6d 61 57 47 72 6a 6a 51 54 59 38 65 33 53 59 4f 71 31 4b 73 5f 54 42 4d 70 49 77 42 6a 2d 78 4a 33 41 34 37 49 46 4e 52 75 42 76 67 47 36 4e 38 47 6b 41 33 50 4f 72 78 56 50 38 59 30 42 76 4c 5f 45 41 37 33 72 41 43 5f 50 6b 74 4f 51 32 41 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 0a 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 6d 62 2d 34 70 22 3e 59 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 70 68 6f 6e 65 3c 2f 6c 61 62 65 6c 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2d 77 72 61 70 70 65 72 2d 2d 69 63 6f 6e 2d 6c 65 66 74 20 6d 62 2d 32 22 3e 0a 20 20 20 20 3c 73 76 67 20 63 Data Ascii: henticity_token" value="uBvrF5maWGrjjQTY8e3SYOq1Ks_TBMpIwBj-xJ3A47IFNRuBvgG6N8GkA3POrxVP8Y0BvL_EA73rAC_PktOQ2A" autocomplete="off" /> <label class="mb-4p">Your email or phone</label> <div class="input-wrapper input-wrapper--icon-left mb-2"> <svg c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49789	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:31 UTC	652	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
2024-04-25 17:21:31 UTC	520	IN	HTTP/1.1 304 Not Modified Content-Type: text/javascript Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:31 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a911b-5568fbdc34fd5fd93f239cdc X-Cache: Miss from cloudfront Via: 1.1 5eb5e19c1a78889d10ff38f1551ed2aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: -JhijAPsd_rTzw3Lyxe32huO36YD9z6Alj68nS76aJorZIOA-AuBbQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49790	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:32 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2329 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:32 UTC	2329	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 37 6c 34 6a 4a 6b 31 41 41 41 41 3a 57 44 62 38 70 65 47 70 6f 39 4e 78 52 46 49 6a 4f 6e 76 64 45 58 7a 52 4c 32 50 45 6e 75 6b 4f 4e 76 50 77 4d 6a 50 79 74 48 54 71 32 30 4e 68 6b 32 48 2b 30 77 66 35 51 54 57 6a 51 71 73 72 61 65 34 32 6d 67 39 30 6c 48 63 45 54 46 43 2f 4d 64 5a 31 77 48 50 74 37 67 4a 5a 69 4f 77 35 6e 7a 33 6e 62 57 79 79 54 68 32 67 47 61 45 45 6f 65 7a 66 6e 71 50 53 6b 48 5a 47 44 68 51 67 31 70 48 39 71 6b 33 65 77 39 35 69 52 74 6b 76 36 47 63 2f 4e 77 4f 2b 6f 4b 4b 75 41 74 7a 4d 33 68 57 4f 78 70 43 36 2f 4a 44 50 30 43 6b 6c 56 78 71 54 46 7a Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAu7l4jJk1AAAA:WDb8peGpo9NxRFIjOnvdEXzRL2PEnukONvPwMjPytHTq20Nhk2H+0wf5QTWjQqsrae42mg90lHcETFC/MdZ1wHPt7gJZiOw5nz3nbWyyTh2gGaEEoezfnqPSkHZGDhQg1pH9qk3ew95iRtkv6Gc/NwO+oKKuAtzM3hWOxpC6/JDP0CklVxqTFz
2024-04-25 17:21:32 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:21:32 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a911c-34f65cd642f741d60ac2d0ab X-Cache: Miss from cloudfront Via: 1.1 55b6418a8a2f714a67d8e4d292154ef2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: GQr4RyytnftrGPF8_aCZ-kUHIHVxqi9vn4bRmLBvMR26vxtpsTnlzg==
2024-04-25 17:21:32 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 5a 2f 4e 35 56 71 42 76 41 41 41 41 3a 58 66 36 44 70 56 55 35 48 59 71 49 53 6d 2f 64 30 6d 48 6b 62 48 34 6f 55 35 68 61 71 74 64 74 66 57 4d 48 4e 75 4d 44 36 33 55 43 78 4f 51 36 75 4d 6b 4f 33 66 4b 71 2b 54 65 76 6d 6b 77 67 4c 62 44 61 33 58 70 78 48 31 69 43 6e 6d 4a 6c 55 57 33 56 33 6e 75 69 36 76 2b 56 61 38 78 58 4b 42 6f 64 42 38 46 77 71 30 34 39 55 38 33 4e 55 42 4c 61 6c 38 6b 51 69 79 64 74 31 30 6c 57 43 2b 69 69 50 4e 65 2b 4b 57 67 49 5a 37 58 41 44 4a 50 67 44 5a 61 4a 62 69 66 4b 46 56 79 4c 45 77 51 2b 4f 4d 76 39 39 42 6c 36 66 50 59 5a 59 70 39 62 2b 6a 33 56 62 30 30 6a 35 66 61 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAZ/N5VqBvAAAA:Xf6DpVU5HYqISm/d0mHkbH4oU5haqtdtfWMHNuMD63UCxOQ6uMkO3fKq+TevmkwgLbDa3XpxH1iCnmJlUW3V3nui6v+Va8xXKBodB8Fwq049U83NUBLal8kQiydt10lWC+iiPNe+KWgIZ7XADJPgDZaJbifKFVyLEwQ+OMv99Bl6fPYZYp9b+j3Vb00j5fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49791	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:33 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 1929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:33 UTC	1929	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 37 6c 34 6a 4a 6b 31 41 41 41 41 3a 57 44 62 38 70 65 47 70 6f 39 4e 78 52 46 49 6a 4f 6e 76 64 45 58 7a 52 4c 32 50 45 6e 75 6b 4f 4e 76 50 77 4d 6a 50 79 74 48 54 71 32 30 4e 68 6b 32 48 2b 30 77 66 35 51 54 57 6a 51 71 73 72 61 65 34 32 6d 67 39 30 6c 48 63 45 54 46 43 2f 4d 64 5a 31 77 48 50 74 37 67 4a 5a 69 4f 77 35 6e 7a 33 6e 62 57 79 79 54 68 32 67 47 61 45 45 6f 65 7a 66 6e 71 50 53 6b 48 5a 47 44 68 51 67 31 70 48 39 71 6b 33 65 77 39 35 69 52 74 6b 76 36 47 63 2f 4e 77 4f 2b 6f 4b 4b 75 41 74 7a 4d 33 68 57 4f 78 70 43 36 2f 4a 44 50 30 43 6b 6c 56 78 71 54 46 7a Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAu7l4jJk1AAAA:WDb8peGpo9NxRFIjOnvdEXzRL2PEnukONvPwMjPytHTq20Nhk2H+0wf5QTWjQqsrae42mg90lHcETFC/MdZ1wHPt7gJZiOw5nz3nbWyyTh2gGaEEoezfnqPSkHZGDhQg1pH9qk3ew95iRtkv6Gc/NwO+oKKuAtzM3hWOxpC6/JDP0CklVxqTFz
2024-04-25 17:21:33 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:21:33 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a911d-20643248269cf0d145b916a9 X-Cache: Miss from cloudfront Via: 1.1 dd169cfdbbafbb3da513bede6bc6640e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: EuwdKhCz2c9n5KxyfT4GFRykbM5jNt6B2FNAK0lwDd-7aHU0xWLz0w==
2024-04-25 17:21:33 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 59 55 46 35 61 72 42 6c 41 41 41 41 3a 38 55 4f 6a 4a 37 4f 44 4c 6a 55 76 74 46 75 37 47 65 66 72 6d 65 50 52 57 6a 46 6d 36 39 59 33 4e 78 4d 4c 48 59 4b 45 30 79 54 56 63 4b 69 32 34 30 68 36 79 61 6c 62 76 46 6d 2b 35 30 50 55 52 59 32 6b 63 49 37 70 55 4e 6a 48 6b 73 54 32 66 47 6f 50 45 6a 55 6b 32 51 6f 39 63 4e 63 57 44 30 67 2b 72 61 6d 38 7a 59 6d 36 47 46 6c 78 68 63 71 76 49 4c 4f 4f 68 38 51 64 77 62 78 4f 43 64 64 79 2b 2f 50 67 35 69 4c 6e 54 72 62 4f 34 32 76 78 50 57 33 6f 63 65 57 63 50 74 52 56 32 70 32 4b 7a 63 46 75 6c 48 30 61 2f 53 57 4d 34 6e 75 34 42 4e 6b 78 68 41 4e 69 6f 71 49 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAYUF5arBlAAAA:8UOjJ7ODLjUvtFu7GefrmePRWjFm69Y3NxMLHYKE0yTVcKi240h6yalbvFm+50PURY2kcI7pUNjHksT2fGoPEjUk2Qo9cNcWD0g+ram8zYm6GFlxhcqvILOOh8QdwbxOCddy+/Pg5iLnTrbO42vxPW3oceWcPtRV2p2KzcFulH0a/SWM4nu4BNkxhANioqI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49792	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:33 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:33 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:33 GMT X-Cache: Error from cloudfront Via: 1.1 dd169cfdbbafbb3da513bede6bc6640e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: -yRgsEpDIsgODecBWCVLY3Z8UY-hGmOEZ_pGeQ8fjFp1lmC2jGGH5g==
2024-04-25 17:21:33 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49793	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:33 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2798 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:33 UTC	2798	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 5a 2f 4e 35 56 71 42 76 41 41 41 41 3a 58 66 36 44 70 56 55 35 48 59 71 49 53 6d 2f 64 30 6d 48 6b 62 48 34 6f 55 35 68 61 71 74 64 74 66 57 4d 48 4e 75 4d 44 36 33 55 43 78 4f 51 36 75 4d 6b 4f 33 66 4b 71 2b 54 65 76 6d 6b 77 67 4c 62 44 61 33 58 70 78 48 31 69 43 6e 6d 4a 6c 55 57 33 56 33 6e 75 69 36 76 2b 56 61 38 78 58 4b 42 6f 64 42 38 46 77 71 30 34 39 55 38 33 4e 55 42 4c 61 6c 38 6b 51 69 79 64 74 31 30 6c 57 43 2b 69 69 50 4e 65 2b 4b 57 67 49 5a 37 58 41 44 4a 50 67 44 5a 61 4a 62 69 66 4b 46 56 79 4c 45 77 51 2b 4f 4d 76 39 39 42 6c 36 66 50 59 5a 59 70 39 62 2b 6a Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAZ/N5VqBvAAAA:Xf6DpVU5HYqISm/d0mHkbH4oU5haqtdtfWMHNuMD63UCxOQ6uMkO3fKq+TevmkwgLbDa3XpxH1iCnmJlUW3V3nui6v+Va8xXKBodB8Fwq049U83NUBLal8kQiydt10lWC+iiPNe+KWgIZ7XADJPgDZaJbifKFVyLEwQ+OMv99Bl6fPYZYp9b+j
2024-04-25 17:21:33 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 968 Connection: close Date: Thu, 25 Apr 2024 17:21:33 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a911d-23e51b4346d76d662d69f396 X-Cache: Miss from cloudfront Via: 1.1 14d757a67b913f1bc93427e69819362c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 2P5cz_1ku0gzaFL8jHI5m2rfm3X9hoFw8ABrmiBof48_YkSorO-2mA==
2024-04-25 17:21:33 UTC	968	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 67 46 4e 34 6a 6a 48 6b 41 41 41 41 3a 63 50 6b 47 65 6e 49 70 56 65 73 69 7a 78 46 73 45 7a 4f 57 43 62 68 6f 44 66 43 65 65 77 36 42 79 4f 47 51 4b 6d 53 31 51 63 4b 70 52 71 52 59 63 78 43 79 31 49 68 58 7a 65 64 68 77 67 77 68 4d 37 6e 79 30 54 43 59 6f 6f 63 46 4d 6e 58 70 58 46 54 43 35 7a 4a 74 32 6e 76 64 63 4e 4a 71 4e 44 78 76 6a 53 6d 58 42 5a 6b 70 36 71 41 6b 6f 2f 64 64 66 63 61 42 42 37 30 37 6c 4a 33 77 39 79 39 4a 72 48 33 53 4c 62 52 44 62 64 4e 52 4a 41 4f 6b 7a 6c 2b 57 39 75 44 45 78 4f 74 32 32 6f 79 31 54 73 4e 35 57 4d 48 46 68 37 72 35 41 35 45 2f 5a 55 36 4c 45 6d 2b 7a 45 64 58 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAgFN4jjHkAAAA:cPkGenIpVesizxFsEzOWCbhoDfCeew6ByOGQKmS1QcKpRqRYcxCy1IhXzedhwgwhM7ny0TCYoocFMnXpXFTC5zJt2nvdcNJqNDxvjSmXBZkp6qAko/ddfcaBB707lJ3w9y9JrH3SLbRDbdNRJAOkzl+W9uDExOt22oy1TsN5WMHFh7r5A5E/ZU6LEm+zEdX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49794	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:33 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 1800 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:33 UTC	1800	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 37 6c 34 6a 4a 6b 31 41 41 41 41 3a 57 44 62 38 70 65 47 70 6f 39 4e 78 52 46 49 6a 4f 6e 76 64 45 58 7a 52 4c 32 50 45 6e 75 6b 4f 4e 76 50 77 4d 6a 50 79 74 48 54 71 32 30 4e 68 6b 32 48 2b 30 77 66 35 51 54 57 6a 51 71 73 72 61 65 34 32 6d 67 39 30 6c 48 63 45 54 46 43 2f 4d 64 5a 31 77 48 50 74 37 67 4a 5a 69 4f 77 35 6e 7a 33 6e 62 57 79 79 54 68 32 67 47 61 45 45 6f 65 7a 66 6e 71 50 53 6b 48 5a 47 44 68 51 67 31 70 48 39 71 6b 33 65 77 39 35 69 52 74 6b 76 36 47 63 2f 4e 77 4f 2b 6f 4b 4b 75 41 74 7a 4d 33 68 57 4f 78 70 43 36 2f 4a 44 50 30 43 6b 6c 56 78 71 54 46 7a Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAu7l4jJk1AAAA:WDb8peGpo9NxRFIjOnvdEXzRL2PEnukONvPwMjPytHTq20Nhk2H+0wf5QTWjQqsrae42mg90lHcETFC/MdZ1wHPt7gJZiOw5nz3nbWyyTh2gGaEEoezfnqPSkHZGDhQg1pH9qk3ew95iRtkv6Gc/NwO+oKKuAtzM3hWOxpC6/JDP0CklVxqTFz
2024-04-25 17:21:33 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:21:33 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a911d-3f79a54e6f9663e972b8d092 X-Cache: Miss from cloudfront Via: 1.1 9b097dfab92228268a37145aac5629c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: O7ZWOKiwPjzqwIRCUinFi6WFDJlXyfWxHPG7B8gAWtKtHNjN4ufNlA==
2024-04-25 17:21:33 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 64 65 78 35 31 45 41 61 41 41 41 41 3a 57 6d 35 79 70 71 32 51 47 73 6d 34 66 47 43 41 57 57 6a 4e 66 6f 69 34 62 38 41 5a 49 33 6e 43 61 63 42 6e 70 7a 63 56 75 44 34 6e 71 55 7a 2f 6e 31 36 4b 4b 47 6b 74 4a 46 2f 78 5a 61 44 4a 39 58 77 4b 4e 30 6c 71 31 6e 64 49 65 58 44 68 78 74 73 44 63 6b 5a 39 55 4b 41 54 6b 39 75 72 30 30 59 49 78 33 49 58 72 4e 70 39 58 6e 4f 30 4b 66 6d 46 49 75 6c 66 39 65 33 4e 47 37 64 41 36 51 4a 49 32 41 45 63 43 32 66 45 4c 35 6c 39 6c 46 4a 77 66 53 6b 54 37 31 47 2f 31 69 58 50 71 6a 55 57 66 56 4d 36 6b 41 34 62 61 33 37 6c 77 41 52 73 4f 37 77 77 2b 6c 5a 33 44 7a 66 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAdex51EAaAAAA:Wm5ypq2QGsm4fGCAWWjNfoi4b8AZI3nCacBnpzcVuD4nqUz/n16KKGktJF/xZaDJ9XwKN0lq1ndIeXDhxtsDckZ9UKATk9ur00YIx3IXrNp9XnO0KfmFIulf9e3NG7dA6QJI2AEcC2fEL5l9lFJwfSkT71G/1iXPqjUWfVM6kA4ba37lwARsO7ww+lZ3Dzf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49795	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:33 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:33 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:33 GMT X-Cache: Error from cloudfront Via: 1.1 824fe21e467658628899bdd8725649ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: rifD8vYuRJ19-nD0Jaz51B7ghHqh4497CEWRQryoRRgxOB2eMXMJbw==
2024-04-25 17:21:33 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49796	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:33 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2899 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:33 UTC	2899	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 67 46 4e 34 6a 6a 48 6b 41 41 41 41 3a 63 50 6b 47 65 6e 49 70 56 65 73 69 7a 78 46 73 45 7a 4f 57 43 62 68 6f 44 66 43 65 65 77 36 42 79 4f 47 51 4b 6d 53 31 51 63 4b 70 52 71 52 59 63 78 43 79 31 49 68 58 7a 65 64 68 77 67 77 68 4d 37 6e 79 30 54 43 59 6f 6f 63 46 4d 6e 58 70 58 46 54 43 35 7a 4a 74 32 6e 76 64 63 4e 4a 71 4e 44 78 76 6a 53 6d 58 42 5a 6b 70 36 71 41 6b 6f 2f 64 64 66 63 61 42 42 37 30 37 6c 4a 33 77 39 79 39 4a 72 48 33 53 4c 62 52 44 62 64 4e 52 4a 41 4f 6b 7a 6c 2b 57 39 75 44 45 78 4f 74 32 32 6f 79 31 54 73 4e 35 57 4d 48 46 68 37 72 35 41 35 45 2f 5a 55 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAgFN4jjHkAAAA:cPkGenIpVesizxFsEzOWCbhoDfCeew6ByOGQKmS1QcKpRqRYcxCy1IhXzedhwgwhM7ny0TCYoocFMnXpXFTC5zJt2nvdcNJqNDxvjSmXBZkp6qAko/ddfcaBB707lJ3w9y9JrH3SLbRDbdNRJAOkzl+W9uDExOt22oy1TsN5WMHFh7r5A5E/ZU
2024-04-25 17:21:34 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1056 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:34 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a911d-0970a81b0bf800e125323001 X-Cache: Miss from cloudfront Via: 1.1 baddfcb4f2a6876b4fcc03bcd62427ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 3JkPFpQq92xqsZS830RirhGq2uThKz2Ro9gaoU5WL5JUT8wh2z_1WA==
2024-04-25 17:21:34 UTC	1056	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6e 45 5a 35 6a 39 77 55 41 41 41 41 3a 4d 51 54 44 2b 79 6c 75 36 68 6e 33 32 75 58 4d 52 41 54 62 48 47 77 4e 38 70 58 50 4d 76 58 62 51 30 6a 63 41 68 54 38 76 71 67 4b 51 50 33 34 53 4b 72 6b 45 44 30 78 7a 46 42 35 65 30 74 69 54 4c 4e 56 7a 43 4b 71 58 55 71 52 35 46 7a 4b 37 4a 32 63 77 47 46 59 35 77 54 56 79 66 4d 32 56 67 75 33 7a 78 35 58 4b 41 77 2f 44 72 72 34 7a 75 47 6f 39 6d 31 57 31 54 6c 57 4f 4f 31 67 43 2f 72 6f 4d 2f 42 56 78 64 58 32 39 7a 43 30 4f 4f 39 62 71 58 62 35 36 73 33 76 6d 75 79 65 6b 46 58 65 69 37 63 71 47 52 5a 64 50 69 67 59 48 69 53 4f 4c 51 71 58 53 75 53 63 7a 66 6e Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAnEZ5j9wUAAAA:MQTD+ylu6hn32uXMRATbHGwN8pXPMvXbQ0jcAhT8vqgKQP34SKrkED0xzFB5e0tiTLNVzCKqXUqR5FzK7J2cwGFY5wTVyfM2Vgu3zx5XKAw/Drr4zuGo9m1W1TlWOO1gC/roM/BVxdX29zC0OO9bqXb56s3vmuyekFXei7cqGRZdPigYHiSOLQqXSuSczfn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49797	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:34 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:34 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:34 GMT X-Cache: Error from cloudfront Via: 1.1 041a4887d523cabe8177e269cc358162.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: SF4oUYrLtlHEmwUkDvf67yl1pRZX4rKATSMyezxZXn3RbQUTrAQhAQ==
2024-04-25 17:21:34 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49798	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:34 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:34 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:34 GMT X-Cache: Error from cloudfront Via: 1.1 fba666ceffdeb316c8edf476d8994bd4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: mylFfIS6zc8KhdAXuyzboKmoMXZv84y3aXaERr7N5L4Y9M2V1iLSNg==
2024-04-25 17:21:34 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49799	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:34 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2974 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:34 UTC	2974	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6e 45 5a 35 6a 39 77 55 41 41 41 41 3a 4d 51 54 44 2b 79 6c 75 36 68 6e 33 32 75 58 4d 52 41 54 62 48 47 77 4e 38 70 58 50 4d 76 58 62 51 30 6a 63 41 68 54 38 76 71 67 4b 51 50 33 34 53 4b 72 6b 45 44 30 78 7a 46 42 35 65 30 74 69 54 4c 4e 56 7a 43 4b 71 58 55 71 52 35 46 7a 4b 37 4a 32 63 77 47 46 59 35 77 54 56 79 66 4d 32 56 67 75 33 7a 78 35 58 4b 41 77 2f 44 72 72 34 7a 75 47 6f 39 6d 31 57 31 54 6c 57 4f 4f 31 67 43 2f 72 6f 4d 2f 42 56 78 64 58 32 39 7a 43 30 4f 4f 39 62 71 58 62 35 36 73 33 76 6d 75 79 65 6b 46 58 65 69 37 63 71 47 52 5a 64 50 69 67 59 48 69 53 4f 4c 51 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAnEZ5j9wUAAAA:MQTD+ylu6hn32uXMRATbHGwN8pXPMvXbQ0jcAhT8vqgKQP34SKrkED0xzFB5e0tiTLNVzCKqXUqR5FzK7J2cwGFY5wTVyfM2Vgu3zx5XKAw/Drr4zuGo9m1W1TlWOO1gC/roM/BVxdX29zC0OO9bqXb56s3vmuyekFXei7cqGRZdPigYHiSOLQ
2024-04-25 17:21:35 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1144 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:34 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a911e-0f98c44475a428c351aa5770 X-Cache: Miss from cloudfront Via: 1.1 ed8e6c4476f2632eef2c7ce856161af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 2kMLQ4zvPu9n_tEriq3mbhxxoan48D6xxuAm0e2WCsy42hAcFFuonw==
2024-04-25 17:21:35 UTC	1144	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 59 4d 64 35 58 6f 59 63 41 41 41 41 3a 70 71 55 49 67 69 36 2f 75 38 42 63 79 4b 49 63 43 66 44 44 39 71 58 7a 43 64 32 6e 4a 62 49 43 73 4e 43 6d 4c 4b 76 75 31 6e 54 56 69 2f 30 36 79 6f 52 30 58 6c 75 71 78 48 34 30 31 4e 62 77 6a 5a 69 41 64 46 31 68 48 37 6d 62 50 59 49 77 67 49 4b 30 66 49 4e 72 6d 71 79 53 68 41 36 36 70 79 38 4a 65 49 77 47 2f 49 6b 67 46 71 6b 63 44 36 58 58 57 42 45 4f 74 4b 72 52 57 56 79 53 58 71 75 4c 52 4c 41 52 39 68 4c 4c 4a 79 31 68 6d 68 45 41 38 30 33 30 76 56 49 44 31 42 4e 2b 44 34 6d 50 51 59 76 36 6d 35 32 32 52 76 43 33 71 51 4c 75 61 61 38 42 37 47 58 44 36 67 53 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAYMd5XoYcAAAA:pqUIgi6/u8BcyKIcCfDD9qXzCd2nJbICsNCmLKvu1nTVi/06yoR0XluqxH401NbwjZiAdF1hH7mbPYIwgIK0fINrmqyShA66py8JeIwG/IkgFqkcD6XXWBEOtKrRWVySXquLRLAR9hLLJy1hmhEA8030vVID1BN+D4mPQYv6m522RvC3qQLuaa8B7GXD6gS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49800	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:35 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:35 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:35 GMT X-Cache: Error from cloudfront Via: 1.1 6b7e1e42d74fd61097787cc6c1a37c34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: UZap-XqxgkVyLkw18-SiUZDKrc9smYH4t8mPtTDvXNLq_cLy716UQA==
2024-04-25 17:21:35 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49801	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:35 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:35 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:35 GMT X-Cache: Error from cloudfront Via: 1.1 50f5f6b4e0025748bb74dce1db44c750.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: LGznwqQd3AQSipyd5WMExkPETLASm1HrKf79vTRhxu5psf708xdF4A==
2024-04-25 17:21:35 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49802	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:36 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3079 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:36 UTC	3079	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 59 4d 64 35 58 6f 59 63 41 41 41 41 3a 70 71 55 49 67 69 36 2f 75 38 42 63 79 4b 49 63 43 66 44 44 39 71 58 7a 43 64 32 6e 4a 62 49 43 73 4e 43 6d 4c 4b 76 75 31 6e 54 56 69 2f 30 36 79 6f 52 30 58 6c 75 71 78 48 34 30 31 4e 62 77 6a 5a 69 41 64 46 31 68 48 37 6d 62 50 59 49 77 67 49 4b 30 66 49 4e 72 6d 71 79 53 68 41 36 36 70 79 38 4a 65 49 77 47 2f 49 6b 67 46 71 6b 63 44 36 58 58 57 42 45 4f 74 4b 72 52 57 56 79 53 58 71 75 4c 52 4c 41 52 39 68 4c 4c 4a 79 31 68 6d 68 45 41 38 30 33 30 76 56 49 44 31 42 4e 2b 44 34 6d 50 51 59 76 36 6d 35 32 32 52 76 43 33 71 51 4c 75 61 61 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAYMd5XoYcAAAA:pqUIgi6/u8BcyKIcCfDD9qXzCd2nJbICsNCmLKvu1nTVi/06yoR0XluqxH401NbwjZiAdF1hH7mbPYIwgIK0fINrmqyShA66py8JeIwG/IkgFqkcD6XXWBEOtKrRWVySXquLRLAR9hLLJy1hmhEA8030vVID1BN+D4mPQYv6m522RvC3qQLuaa
2024-04-25 17:21:36 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1233 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:36 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9120-360406da6e96088e26b5c3da X-Cache: Miss from cloudfront Via: 1.1 7dc4818c830423900ae855831181d2b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: T0dQfUcm0EWpR-o2pyQpZzYNpcPpoGuyEp3HMO5ibckWJ88oWETwlg==
2024-04-25 17:21:36 UTC	1233	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 69 61 70 34 6d 62 33 64 41 41 41 41 3a 6d 4c 35 33 34 66 6b 45 5a 6c 41 6c 6f 58 58 63 42 6b 6a 32 6d 41 73 35 34 37 73 2f 75 44 71 52 5a 47 78 53 42 6c 50 73 77 73 46 5a 43 49 6e 53 6f 6e 79 59 61 42 52 48 50 68 6c 6b 76 46 50 76 72 6a 34 77 59 6c 79 6c 6c 62 74 4d 62 4b 4f 30 4e 5a 6d 75 79 5a 6b 4e 6f 6c 36 4c 73 6e 57 4f 72 2f 76 68 2b 73 6b 4a 73 53 51 30 69 56 61 41 38 71 74 76 34 78 38 33 66 7a 6d 59 46 34 65 34 66 42 76 39 4a 37 4c 4b 34 47 4e 43 50 49 6a 50 76 72 63 74 64 5a 6f 66 70 55 57 49 67 33 39 54 58 37 5a 4c 44 68 45 41 76 77 4b 36 58 52 4f 32 75 71 66 6e 58 62 58 34 42 38 4c 69 78 42 4b Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAiap4mb3dAAAA:mL534fkEZlAloXXcBkj2mAs547s/uDqRZGxSBlPswsFZCInSonyYaBRHPhlkvFPvrj4wYlyllbtMbKO0NZmuyZkNol6LsnWOr/vh+skJsSQ0iVaA8qtv4x83fzmYF4e4fBv9J7LK4GNCPIjPvrctdZofpUWIg39TX7ZLDhEAvwK6XRO2uqfnXbX4B8LixBK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49803	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:36 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:36 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:36 GMT X-Cache: Error from cloudfront Via: 1.1 baddfcb4f2a6876b4fcc03bcd62427ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Wf5COKTx8ZSKAbEfhicPDc2bw-8vqyaMXVg8Ni7Dz3Ul3NrTJO5_pA==
2024-04-25 17:21:36 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49804	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:38 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3172 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:38 UTC	3172	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 69 61 70 34 6d 62 33 64 41 41 41 41 3a 6d 4c 35 33 34 66 6b 45 5a 6c 41 6c 6f 58 58 63 42 6b 6a 32 6d 41 73 35 34 37 73 2f 75 44 71 52 5a 47 78 53 42 6c 50 73 77 73 46 5a 43 49 6e 53 6f 6e 79 59 61 42 52 48 50 68 6c 6b 76 46 50 76 72 6a 34 77 59 6c 79 6c 6c 62 74 4d 62 4b 4f 30 4e 5a 6d 75 79 5a 6b 4e 6f 6c 36 4c 73 6e 57 4f 72 2f 76 68 2b 73 6b 4a 73 53 51 30 69 56 61 41 38 71 74 76 34 78 38 33 66 7a 6d 59 46 34 65 34 66 42 76 39 4a 37 4c 4b 34 47 4e 43 50 49 6a 50 76 72 63 74 64 5a 6f 66 70 55 57 49 67 33 39 54 58 37 5a 4c 44 68 45 41 76 77 4b 36 58 52 4f 32 75 71 66 6e 58 62 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAiap4mb3dAAAA:mL534fkEZlAloXXcBkj2mAs547s/uDqRZGxSBlPswsFZCInSonyYaBRHPhlkvFPvrj4wYlyllbtMbKO0NZmuyZkNol6LsnWOr/vh+skJsSQ0iVaA8qtv4x83fzmYF4e4fBv9J7LK4GNCPIjPvrctdZofpUWIg39TX7ZLDhEAvwK6XRO2uqfnXb
2024-04-25 17:21:38 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1321 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:38 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9122-500dceb260ebb7133af97e85 X-Cache: Miss from cloudfront Via: 1.1 824fe21e467658628899bdd8725649ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Rfi9RVNEBLSkoOCBTZDYM_2uZz8ifPPGcZbISeuLzVCuxtVXHgOVbg==
2024-04-25 17:21:38 UTC	1321	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 53 52 34 2f 35 61 6c 41 41 41 41 3a 37 38 73 52 7a 62 41 63 32 7a 75 38 63 5a 6e 78 37 76 68 2b 50 54 76 50 33 6c 4c 43 77 43 48 51 5a 71 49 7a 72 70 34 43 78 4c 4b 43 4c 51 63 63 65 68 37 41 45 43 4d 6f 41 73 46 75 4c 4c 4d 51 67 4d 33 4c 56 66 47 4b 39 4e 76 4f 35 37 2f 70 4f 56 33 44 47 33 36 37 55 54 6d 59 7a 7a 50 6e 37 45 30 37 6d 57 63 4a 78 68 6b 44 56 49 35 34 6c 78 4e 6a 54 39 36 67 7a 61 55 70 76 70 37 6e 59 48 38 2f 63 35 42 70 4a 36 6e 4e 2f 6d 47 65 6b 64 49 72 61 44 49 68 6c 42 34 39 6f 44 4e 64 6c 45 49 55 77 35 38 64 72 4e 31 4d 73 64 30 30 7a 49 78 4d 5a 6c 30 4a 51 46 63 41 59 42 44 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuSR4/5alAAAA:78sRzbAc2zu8cZnx7vh+PTvP3lLCwCHQZqIzrp4CxLKCLQcceh7AECMoAsFuLLMQgM3LVfGK9NvO57/pOV3DG367UTmYzzPn7E07mWcJxhkDVI54lxNjT96gzaUpvp7nYH8/c5BpJ6nN/mGekdIraDIhlB49oDNdlEIUw58drN1Msd00zIxMZl0JQFcAYBD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49805	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:38 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:39 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:39 GMT X-Cache: Error from cloudfront Via: 1.1 6bc1c280aeef9bbdeb102c7f4e4f773e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Ja03FyK3WSUQSej6mP7Lx3ErNfrmQZhDJmPX-quWyBRNdZEh2H5PSA==
2024-04-25 17:21:39 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49806	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:40 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3260 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:40 UTC	3260	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 53 52 34 2f 35 61 6c 41 41 41 41 3a 37 38 73 52 7a 62 41 63 32 7a 75 38 63 5a 6e 78 37 76 68 2b 50 54 76 50 33 6c 4c 43 77 43 48 51 5a 71 49 7a 72 70 34 43 78 4c 4b 43 4c 51 63 63 65 68 37 41 45 43 4d 6f 41 73 46 75 4c 4c 4d 51 67 4d 33 4c 56 66 47 4b 39 4e 76 4f 35 37 2f 70 4f 56 33 44 47 33 36 37 55 54 6d 59 7a 7a 50 6e 37 45 30 37 6d 57 63 4a 78 68 6b 44 56 49 35 34 6c 78 4e 6a 54 39 36 67 7a 61 55 70 76 70 37 6e 59 48 38 2f 63 35 42 70 4a 36 6e 4e 2f 6d 47 65 6b 64 49 72 61 44 49 68 6c 42 34 39 6f 44 4e 64 6c 45 49 55 77 35 38 64 72 4e 31 4d 73 64 30 30 7a 49 78 4d 5a 6c Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuSR4/5alAAAA:78sRzbAc2zu8cZnx7vh+PTvP3lLCwCHQZqIzrp4CxLKCLQcceh7AECMoAsFuLLMQgM3LVfGK9NvO57/pOV3DG367UTmYzzPn7E07mWcJxhkDVI54lxNjT96gzaUpvp7nYH8/c5BpJ6nN/mGekdIraDIhlB49oDNdlEIUw58drN1Msd00zIxMZl
2024-04-25 17:21:40 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1409 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:40 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9124-008bab8655eac1b644586fc1 X-Cache: Miss from cloudfront Via: 1.1 c6b0d1d85b2590c57ac754bf9e61944e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Rq0Yaomb3EUBUZsqg4IbnuVVvevPK1HNs80bh5XrJDBC-R5IIqELmQ==
2024-04-25 17:21:40 UTC	1409	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 67 46 4e 34 6a 71 54 6c 41 41 41 41 3a 48 4e 33 66 66 56 4b 39 65 70 43 65 57 73 6c 48 4d 79 30 64 55 45 75 4b 55 36 46 63 43 2f 55 54 42 62 66 78 71 50 6e 62 4b 4c 4d 74 4e 5a 71 38 56 6e 4a 2f 62 71 2b 30 44 52 73 57 64 58 6a 38 41 31 77 2b 52 37 69 68 2b 4a 6f 71 62 64 37 78 6f 64 62 76 57 6d 77 4a 4a 74 76 65 79 41 34 4c 53 33 65 51 57 76 31 63 2b 53 33 66 65 5a 55 52 4d 65 4e 56 6f 34 35 6e 30 4d 58 73 7a 58 75 62 45 7a 6a 75 44 72 43 53 31 2f 43 42 61 48 75 4c 6b 71 52 75 69 49 46 55 70 2f 38 4a 51 37 36 77 6f 50 6c 59 37 46 69 4e 71 72 6f 2f 2b 48 46 30 47 61 34 51 4b 4b 67 6d 34 5a 35 53 50 45 44 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAgFN4jqTlAAAA:HN3ffVK9epCeWslHMy0dUEuKU6FcC/UTBbfxqPnbKLMtNZq8VnJ/bq+0DRsWdXj8A1w+R7ih+Joqbd7xodbvWmwJJtveyA4LS3eQWv1c+S3feZURMeNVo45n0MXszXubEzjuDrCS1/CBaHuLkqRuiIFUp/8JQ76woPlY7FiNqro/+HF0Ga4QKKgm4Z5SPED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49788	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:40 UTC	1350	OUT	GET /password_reset/new HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY5MCwiZXhwIjoxNzE1Mjc1MjkwLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.bCv8ZVLMQtZusMXsRGv_EyrDRcmRC-AFG23WeMZqdG4wLN8oW8xpL7A6L4fMg0VYUI7c9rkqzcw2VfMSrAYoVQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAuSR4/5alAAAA:78sRzbAc2zu8cZnx7vh+PTvP3lLCwCHQZqIzrp4CxLKCLQcceh7AECMoAsFuLLMQgM3LVfGK9NvO57/pOV3DG367UTmYzzPn7E07mWcJxhkDVI54lxNjT96gzaUpvp7nYH8/c5BpJ6nN/mGekdIraDIhlB49oDNdlEIUw58drN1Msd00zIxMZl0JQFcAYBDWtNuMT+OlyeR5Jt3V/e85Y5k2pW7rx0Xy6lIMDci9w8/eUMgn2lnEDxHw45ZJHQc2iYRA8eFDtBRd8g2S/e7wsosOBhSB If-None-Match: W/"6a48529c1e779406b90ee7992dba620f"
2024-04-25 17:21:40 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 18851 Connection: close Date: Thu, 25 Apr 2024 17:21:40 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"887574677e3580b131fdcb63d805c51a" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTcwMCwiZXhwIjoxNzE1Mjc1MzAwLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ._hgeEx6B1j80iwQuhCSnJkjRZgM7RBBS58kK6ZOsMgaU3YOKLL15GqyFUrj75wMj58rLiYYKeO4sdavnOomkLQ; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:21:40 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: 35c5299f-df62-43df-891f-7142b6caf790 X-Runtime: 0.017605 X-Cache: Miss from cloudfront Via: 1.1 407e03ee30fa8ebbd8caab132547e216.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: iB8xFoMg5Guj9mo7EY3doR5EmM4eu37IUeKZdphUWFNauyWt56z8Sw==
2024-04-25 17:21:40 UTC	15019	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:21:40 UTC	3832	IN	Data Raw: 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 68 31 3e 50 61 73 73 77 6f 72 64 20 52 65 73 65 74 3c 2f 68 31 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 6d 62 2d 32 22 3e 0a 20 20 45 6e 74 65 72 20 61 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 74 6f 20 72 65 63 65 69 76 65 20 61 20 63 6f 64 65 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 0a 3c 2f 70 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 70 61 73 73 77 6f 72 64 5f 72 65 73 65 74 22 20 61 63 63 65 70 74 2d 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 Data Ascii: ="content"> <h1>Password Reset</h1><p class="mb-2"> Enter an email address or phone number to receive a code that can be used to set your password.</p><form action="/password_reset" accept-charset="UTF-8" method="post"><input t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49808	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:41 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:41 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:41 GMT X-Cache: Error from cloudfront Via: 1.1 c6b0d1d85b2590c57ac754bf9e61944e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: vXLzxoOH5miXNOslsg6YqtdiNgev8Hdm4WU6hgpnkFBd2zNusxpRWg==
2024-04-25 17:21:41 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49809	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:41 UTC	652	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
2024-04-25 17:21:41 UTC	520	IN	HTTP/1.1 304 Not Modified Content-Type: text/javascript Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:41 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9125-48652a51242391c15261da7d X-Cache: Miss from cloudfront Via: 1.1 148f45d892bd2198be5295012ed59888.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: sfs5yLgobE66tOtdMX2B4kx_oZAm8tMaQAF3LGdndGv4pRyix0qPqw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49810	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:43 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 1801 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:43 UTC	1801	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 67 46 4e 34 6a 71 54 6c 41 41 41 41 3a 48 4e 33 66 66 56 4b 39 65 70 43 65 57 73 6c 48 4d 79 30 64 55 45 75 4b 55 36 46 63 43 2f 55 54 42 62 66 78 71 50 6e 62 4b 4c 4d 74 4e 5a 71 38 56 6e 4a 2f 62 71 2b 30 44 52 73 57 64 58 6a 38 41 31 77 2b 52 37 69 68 2b 4a 6f 71 62 64 37 78 6f 64 62 76 57 6d 77 4a 4a 74 76 65 79 41 34 4c 53 33 65 51 57 76 31 63 2b 53 33 66 65 5a 55 52 4d 65 4e 56 6f 34 35 6e 30 4d 58 73 7a 58 75 62 45 7a 6a 75 44 72 43 53 31 2f 43 42 61 48 75 4c 6b 71 52 75 69 49 46 55 70 2f 38 4a 51 37 36 77 6f 50 6c 59 37 46 69 4e 71 72 6f 2f 2b 48 46 30 47 61 34 51 4b 4b Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAgFN4jqTlAAAA:HN3ffVK9epCeWslHMy0dUEuKU6FcC/UTBbfxqPnbKLMtNZq8VnJ/bq+0DRsWdXj8A1w+R7ih+Joqbd7xodbvWmwJJtveyA4LS3eQWv1c+S3feZURMeNVo45n0MXszXubEzjuDrCS1/CBaHuLkqRuiIFUp/8JQ76woPlY7FiNqro/+HF0Ga4QKK
2024-04-25 17:21:43 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:21:43 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9127-3eb792bc19e991ce6350ba3a X-Cache: Miss from cloudfront Via: 1.1 ed8e6c4476f2632eef2c7ce856161af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: WaCPRCoC3ylDsBc2njN6Exezua4_AIqCCv6YCGj9I3Sz9zE36AKiaQ==
2024-04-25 17:21:43 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6d 62 35 34 35 7a 59 78 41 41 41 41 3a 49 61 47 5a 6d 6d 5a 66 36 61 75 77 51 77 76 6b 74 6d 59 73 7a 79 46 54 58 51 63 34 6f 46 39 54 4b 79 46 6b 7a 6c 6d 6c 51 74 48 76 72 51 56 6e 6a 56 75 73 4e 4a 62 65 50 51 48 2f 47 6c 6e 38 7a 32 39 33 64 69 4f 48 67 6e 46 4b 6a 43 79 6b 6b 79 70 49 63 53 4d 62 77 67 39 51 66 54 2b 49 77 6c 30 76 70 6f 65 4e 58 34 33 62 6a 54 58 6d 74 68 54 38 59 36 64 4e 55 4d 57 31 36 43 56 34 6e 7a 71 32 77 70 2b 4f 63 69 4b 4c 2b 61 65 4d 61 71 4f 34 39 2b 4c 35 5a 2f 55 46 6b 7a 43 54 2b 4d 69 67 73 7a 77 73 52 58 47 37 4a 46 4b 47 42 7a 56 30 45 41 35 74 66 2f 4e 77 30 4a 44 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAmb545zYxAAAA:IaGZmmZf6auwQwvktmYszyFTXQc4oF9TKyFkzlmlQtHvrQVnjVusNJbePQH/Gln8z293diOHgnFKjCykkypIcSMbwg9QfT+Iwl0vpoeNX43bjTXmthT8Y6dNUMW16CV4nzq2wp+OciKL+aeMaqO49+L5Z/UFkzCT+MigszwsRXG7JFKGBzV0EA5tf/Nw0JD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49811	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:43 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:43 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:43 GMT X-Cache: Error from cloudfront Via: 1.1 041a4887d523cabe8177e269cc358162.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 6CqXR5pmsjT3PmiTZNLBAGyjf2jS-35jeIMiWXZvsILg0FTCZUV6GQ==
2024-04-25 17:21:43 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49812	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:43 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2316 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:43 UTC	2316	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6d 62 35 34 35 7a 59 78 41 41 41 41 3a 49 61 47 5a 6d 6d 5a 66 36 61 75 77 51 77 76 6b 74 6d 59 73 7a 79 46 54 58 51 63 34 6f 46 39 54 4b 79 46 6b 7a 6c 6d 6c 51 74 48 76 72 51 56 6e 6a 56 75 73 4e 4a 62 65 50 51 48 2f 47 6c 6e 38 7a 32 39 33 64 69 4f 48 67 6e 46 4b 6a 43 79 6b 6b 79 70 49 63 53 4d 62 77 67 39 51 66 54 2b 49 77 6c 30 76 70 6f 65 4e 58 34 33 62 6a 54 58 6d 74 68 54 38 59 36 64 4e 55 4d 57 31 36 43 56 34 6e 7a 71 32 77 70 2b 4f 63 69 4b 4c 2b 61 65 4d 61 71 4f 34 39 2b 4c 35 5a 2f 55 46 6b 7a 43 54 2b 4d 69 67 73 7a 77 73 52 58 47 37 4a 46 4b 47 42 7a 56 30 45 41 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAmb545zYxAAAA:IaGZmmZf6auwQwvktmYszyFTXQc4oF9TKyFkzlmlQtHvrQVnjVusNJbePQH/Gln8z293diOHgnFKjCykkypIcSMbwg9QfT+Iwl0vpoeNX43bjTXmthT8Y6dNUMW16CV4nzq2wp+OciKL+aeMaqO49+L5Z/UFkzCT+MigszwsRXG7JFKGBzV0EA
2024-04-25 17:21:44 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 968 Connection: close Date: Thu, 25 Apr 2024 17:21:44 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9127-7eda4bbd17b8b16e4c5d4e4e X-Cache: Miss from cloudfront Via: 1.1 99baebf4b5bb631267dcfa82456151cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 2m4HYFynE7k7NVWkQ3bzH3vJ4rnlFar_HmtGmTr72LT3OiF8ZxeNPw==
2024-04-25 17:21:44 UTC	968	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 64 65 78 35 31 42 30 63 41 41 41 41 3a 6b 4c 4a 66 6d 36 4e 53 56 31 43 35 78 77 64 53 47 52 73 70 43 57 49 62 51 36 76 2b 73 41 55 65 35 47 4b 6f 64 39 4e 53 44 50 78 37 54 6d 52 76 74 51 51 36 72 35 72 6b 5a 68 32 42 61 79 47 56 70 49 53 45 56 54 63 4c 43 4f 2f 35 55 50 67 73 6a 7a 38 52 50 75 66 2b 6f 53 6c 5a 4f 6f 44 5a 68 72 6f 79 42 2f 68 67 31 5a 70 54 64 42 63 62 49 7a 65 48 51 54 43 4d 58 30 37 56 41 68 67 44 50 35 7a 44 5a 4a 50 74 51 5a 61 69 42 5a 69 48 54 48 64 79 55 50 78 34 38 49 41 6a 6b 4d 2f 77 79 53 4d 4d 49 6d 68 42 58 52 41 4b 30 54 78 79 4c 2f 72 56 70 44 73 33 57 63 38 76 56 70 4c Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAdex51B0cAAAA:kLJfm6NSV1C5xwdSGRspCWIbQ6v+sAUe5GKod9NSDPx7TmRvtQQ6r5rkZh2BayGVpISEVTcLCO/5UPgsjz8RPuf+oSlZOoDZhroyB/hg1ZpTdBcbIzeHQTCMX07VAhgDP5zDZJPtQZaiBZiHTHdyUPx48IAjkM/wySMMImhBXRAK0TxyL/rVpDs3Wc8vVpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49813	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:44 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:44 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:44 GMT X-Cache: Error from cloudfront Via: 1.1 f2c051917a765f1d1a1cd2ce1622adb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: pRhcmSqE6-_CYOcfODECNf3a4_s-O_TaC1HxncSObD0zN0FUeRHBBQ==
2024-04-25 17:21:44 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49807	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:52 UTC	1341	OUT	GET /login/new HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTcwMCwiZXhwIjoxNzE1Mjc1MzAwLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ._hgeEx6B1j80iwQuhCSnJkjRZgM7RBBS58kK6ZOsMgaU3YOKLL15GqyFUrj75wMj58rLiYYKeO4sdavnOomkLQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAdex51B0cAAAA:kLJfm6NSV1C5xwdSGRspCWIbQ6v+sAUe5GKod9NSDPx7TmRvtQQ6r5rkZh2BayGVpISEVTcLCO/5UPgsjz8RPuf+oSlZOoDZhroyB/hg1ZpTdBcbIzeHQTCMX07VAhgDP5zDZJPtQZaiBZiHTHdyUPx48IAjkM/wySMMImhBXRAK0TxyL/rVpDs3Wc8vVpLAR4wy/ytfeA/qRmPqeOatEdUiCPfPwdxriIlySjknDnlv5gNLGA37qMx2ZUXqx2aDwcPlYCkquUy2peR3+2F4w5njV0Yx If-None-Match: W/"eaccf4bd077bbaa7f9d862b4e844a288"
2024-04-25 17:21:52 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 20220 Connection: close Date: Thu, 25 Apr 2024 17:21:52 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"912fc7fd962cc5ab875548290fc74bc4" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTcxMiwiZXhwIjoxNzE1Mjc1MzEyLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.g1DmursyB83n9QH31kV6mTYOc_xJ09XqpP1mJD0k8TnCrf8CjTp6DvmrR_CfohY1CvyFPjdK7VUS8nb2ggLr2A; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:21:52 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: d70473ad-026b-484f-8074-ebf508c03c4c X-Runtime: 0.015045 X-Cache: Miss from cloudfront Via: 1.1 1148ba400afef59fe8b086c32a9a15c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Xpm8NJk4UJyZZxsvMKrCex5G6x7K02sVUIPb_SK5-5mZ5LbvyjGpcQ==
2024-04-25 17:21:52 UTC	7806	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:21:52 UTC	12414	IN	Data Raw: 37 39 2e 33 37 32 20 32 30 2e 33 33 35 31 20 34 37 39 2e 33 37 32 20 32 31 2e 30 33 38 33 56 34 37 2e 37 36 31 32 43 34 37 39 2e 33 37 32 20 34 38 2e 36 39 38 39 20 34 38 30 2e 30 37 35 20 34 39 2e 31 36 37 37 20 34 38 31 2e 30 31 33 20 34 39 2e 31 36 37 37 48 34 38 34 2e 35 32 39 43 34 38 35 2e 37 30 31 20 34 39 2e 31 36 37 37 20 34 38 36 2e 36 33 39 20 34 38 2e 39 33 33 33 20 34 38 36 2e 36 33 39 20 34 37 2e 37 36 31 32 56 32 39 2e 30 30 38 33 43 34 38 38 2e 30 34 35 20 32 36 2e 38 39 38 36 20 34 39 30 2e 36 32 34 20 32 35 2e 34 39 32 31 20 34 39 33 2e 32 30 32 20 32 35 2e 34 39 32 31 43 34 39 34 2e 31 34 20 32 35 2e 34 39 32 31 20 34 39 34 2e 38 34 33 20 32 35 2e 37 32 36 35 20 34 39 35 2e 37 38 31 20 32 35 2e 39 36 30 39 43 34 39 36 2e 30 31 35 20 32 Data Ascii: 79.372 20.3351 479.372 21.0383V47.7612C479.372 48.6989 480.075 49.1677 481.013 49.1677H484.529C485.701 49.1677 486.639 48.9333 486.639 47.7612V29.0083C488.045 26.8986 490.624 25.4921 493.202 25.4921C494.14 25.4921 494.843 25.7265 495.781 25.9609C496.015 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49816	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:52 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2661 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:52 UTC	2661	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 64 65 78 35 31 42 30 63 41 41 41 41 3a 6b 4c 4a 66 6d 36 4e 53 56 31 43 35 78 77 64 53 47 52 73 70 43 57 49 62 51 36 76 2b 73 41 55 65 35 47 4b 6f 64 39 4e 53 44 50 78 37 54 6d 52 76 74 51 51 36 72 35 72 6b 5a 68 32 42 61 79 47 56 70 49 53 45 56 54 63 4c 43 4f 2f 35 55 50 67 73 6a 7a 38 52 50 75 66 2b 6f 53 6c 5a 4f 6f 44 5a 68 72 6f 79 42 2f 68 67 31 5a 70 54 64 42 63 62 49 7a 65 48 51 54 43 4d 58 30 37 56 41 68 67 44 50 35 7a 44 5a 4a 50 74 51 5a 61 69 42 5a 69 48 54 48 64 79 55 50 78 34 38 49 41 6a 6b 4d 2f 77 79 53 4d 4d 49 6d 68 42 58 52 41 4b 30 54 78 79 4c 2f 72 56 70 44 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAdex51B0cAAAA:kLJfm6NSV1C5xwdSGRspCWIbQ6v+sAUe5GKod9NSDPx7TmRvtQQ6r5rkZh2BayGVpISEVTcLCO/5UPgsjz8RPuf+oSlZOoDZhroyB/hg1ZpTdBcbIzeHQTCMX07VAhgDP5zDZJPtQZaiBZiHTHdyUPx48IAjkM/wySMMImhBXRAK0TxyL/rVpD
2024-04-25 17:21:53 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1056 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:53 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9131-5374d4194d585740730fae36 X-Cache: Miss from cloudfront Via: 1.1 b5e757a7da6f6fe6261f56a8a9646880.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: nzb2aXZJit6MQ9NkxVCS_qY5Du2wnVREREPD6ObO1ZbNoQ2xstcZfA==
2024-04-25 17:21:53 UTC	1056	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6a 44 4a 34 6c 52 4a 41 41 41 41 41 3a 6b 45 72 45 5a 32 77 44 4c 66 50 4d 35 32 49 33 66 51 49 65 67 33 6a 50 76 65 4a 53 56 75 6f 69 74 37 65 75 37 4d 75 79 4d 66 6d 33 6c 6d 69 70 65 70 6a 2f 33 68 6f 6a 41 53 57 6d 4a 53 69 53 56 68 46 2b 57 6c 39 5a 61 70 57 48 41 50 33 50 61 6d 4a 56 43 46 70 72 50 76 6a 46 4a 38 36 56 47 2f 6f 50 64 73 6d 42 39 34 68 31 49 6a 46 74 76 54 63 58 66 4b 4f 30 6e 32 69 52 43 36 75 5a 46 64 65 71 5a 71 6e 6f 7a 36 32 48 36 64 35 6a 39 63 73 6f 6f 79 49 69 77 55 6d 44 66 6a 7a 54 55 64 64 67 42 44 73 4d 32 75 4f 67 36 52 43 4c 64 63 7a 6b 52 72 7a 31 4b 4d 6c 35 42 33 4a Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAjDJ4lRJAAAAA:kErEZ2wDLfPM52I3fQIeg3jPveJSVuoit7eu7MuyMfm3lmipepj/3hojASWmJSiSVhF+Wl9ZapWHAP3PamJVCFprPvjFJ86VG/oPdsmB94h1IjFtvTcXfKO0n2iRC6uZFdeqZqnoz62H6d5j9csooyIiwUmDfjzTUddgBDsM2uOg6RCLdczkRrz1KMl5B3J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49818	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:53 UTC	652	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
2024-04-25 17:21:53 UTC	520	IN	HTTP/1.1 304 Not Modified Content-Type: text/javascript Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:53 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9131-4f2252ed649ddc9c77213f16 X-Cache: Miss from cloudfront Via: 1.1 99baebf4b5bb631267dcfa82456151cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: WZ_YNwEyegoTjKLryb4Z2f-k_PyGdiH_FNG_moBoDxbxqYElecBHHg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49819	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:53 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2382 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:53 UTC	2382	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 64 65 78 35 31 42 30 63 41 41 41 41 3a 6b 4c 4a 66 6d 36 4e 53 56 31 43 35 78 77 64 53 47 52 73 70 43 57 49 62 51 36 76 2b 73 41 55 65 35 47 4b 6f 64 39 4e 53 44 50 78 37 54 6d 52 76 74 51 51 36 72 35 72 6b 5a 68 32 42 61 79 47 56 70 49 53 45 56 54 63 4c 43 4f 2f 35 55 50 67 73 6a 7a 38 52 50 75 66 2b 6f 53 6c 5a 4f 6f 44 5a 68 72 6f 79 42 2f 68 67 31 5a 70 54 64 42 63 62 49 7a 65 48 51 54 43 4d 58 30 37 56 41 68 67 44 50 35 7a 44 5a 4a 50 74 51 5a 61 69 42 5a 69 48 54 48 64 79 55 50 78 34 38 49 41 6a 6b 4d 2f 77 79 53 4d 4d 49 6d 68 42 58 52 41 4b 30 54 78 79 4c 2f 72 56 70 44 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAdex51B0cAAAA:kLJfm6NSV1C5xwdSGRspCWIbQ6v+sAUe5GKod9NSDPx7TmRvtQQ6r5rkZh2BayGVpISEVTcLCO/5UPgsjz8RPuf+oSlZOoDZhroyB/hg1ZpTdBcbIzeHQTCMX07VAhgDP5zDZJPtQZaiBZiHTHdyUPx48IAjkM/wySMMImhBXRAK0TxyL/rVpD
2024-04-25 17:21:54 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1056 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:54 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9131-6ac3283d62404e85363896fd X-Cache: Miss from cloudfront Via: 1.1 f2c051917a765f1d1a1cd2ce1622adb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: fXJoRErOnLbdbbbHevQ68IuEny0ZYzF8Hi_qhYQPH_Dw2Z6vn7-CGw==
2024-04-25 17:21:54 UTC	1056	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6e 75 42 34 68 7a 72 72 41 41 41 41 3a 49 67 2b 6b 45 4f 62 52 5a 51 35 53 74 4e 6d 49 69 43 62 69 70 7a 44 63 70 47 55 42 71 51 69 75 6a 45 70 55 55 6d 6a 61 38 36 64 30 75 33 55 2f 67 64 4d 6f 6d 6b 48 4a 49 4e 55 6a 4f 37 61 32 63 79 74 45 58 4d 53 71 33 68 76 52 73 65 52 69 2f 45 65 6c 46 6d 5a 2b 32 54 48 76 4f 75 6e 79 5a 4c 31 5a 6e 79 56 65 48 52 35 56 44 35 37 2b 45 65 50 41 37 4d 47 7a 71 33 53 68 5a 79 77 54 43 7a 78 2f 6f 4d 42 59 75 44 6d 69 4f 4a 58 56 77 65 6f 72 7a 66 4c 50 39 5a 77 74 65 41 32 53 53 75 31 35 70 71 2f 7a 66 2f 61 65 6a 59 58 4c 69 53 75 37 52 77 6b 46 48 73 51 55 4d 37 44 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAnuB4hzrrAAAA:Ig+kEObRZQ5StNmIiCbipzDcpGUBqQiujEpUUmja86d0u3U/gdMomkHJINUjO7a2cytEXMSq3hvRseRi/EelFmZ+2THvOunyZL1ZnyVeHR5VD57+EePA7MGzq3ShZywTCzx/oMBYuDmiOJXVweorzfLP9ZwteA2SSu15pq/zf/aejYXLiSu7RwkFHsQUM7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49820	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:53 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:54 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:54 GMT X-Cache: Error from cloudfront Via: 1.1 fba666ceffdeb316c8edf476d8994bd4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: jAB26CczBWHjv4322KkEaTTB6_y4eIv4-hr_mp25dcab-ilYA71cFw==
2024-04-25 17:21:54 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49822	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:54 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:54 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:54 GMT X-Cache: Error from cloudfront Via: 1.1 50f5f6b4e0025748bb74dce1db44c750.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: yZSLG8LECYRarqrGPkHNK0JiYZkXAu5nEqHjN01fhEwfxc7IfdGqew==
2024-04-25 17:21:54 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49823	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:54 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2983 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:54 UTC	2983	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 6a 44 4a 34 6c 52 4a 41 41 41 41 41 3a 6b 45 72 45 5a 32 77 44 4c 66 50 4d 35 32 49 33 66 51 49 65 67 33 6a 50 76 65 4a 53 56 75 6f 69 74 37 65 75 37 4d 75 79 4d 66 6d 33 6c 6d 69 70 65 70 6a 2f 33 68 6f 6a 41 53 57 6d 4a 53 69 53 56 68 46 2b 57 6c 39 5a 61 70 57 48 41 50 33 50 61 6d 4a 56 43 46 70 72 50 76 6a 46 4a 38 36 56 47 2f 6f 50 64 73 6d 42 39 34 68 31 49 6a 46 74 76 54 63 58 66 4b 4f 30 6e 32 69 52 43 36 75 5a 46 64 65 71 5a 71 6e 6f 7a 36 32 48 36 64 35 6a 39 63 73 6f 6f 79 49 69 77 55 6d 44 66 6a 7a 54 55 64 64 67 42 44 73 4d 32 75 4f 67 36 52 43 4c 64 63 7a 6b 52 72 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAjDJ4lRJAAAAA:kErEZ2wDLfPM52I3fQIeg3jPveJSVuoit7eu7MuyMfm3lmipepj/3hojASWmJSiSVhF+Wl9ZapWHAP3PamJVCFprPvjFJ86VG/oPdsmB94h1IjFtvTcXfKO0n2iRC6uZFdeqZqnoz62H6d5j9csooyIiwUmDfjzTUddgBDsM2uOg6RCLdczkRr
2024-04-25 17:21:54 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1144 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:54 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9132-36745a926946337d1a795809 X-Cache: Miss from cloudfront Via: 1.1 50f5f6b4e0025748bb74dce1db44c750.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 6DYFa96J9DlddUQqKP11oM_7vDoua-Pkf8JcplAvPr1MHwmZZKumDA==
2024-04-25 17:21:54 UTC	1144	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 72 4d 42 34 62 4a 48 33 41 41 41 41 3a 35 50 55 36 72 56 68 67 61 58 59 44 63 52 4f 4d 49 57 78 55 58 63 33 48 47 56 58 45 79 35 41 6a 6e 51 62 31 55 6c 4e 6c 6f 46 59 61 47 52 2f 4c 6e 4a 70 79 65 36 53 2f 32 47 2b 69 61 33 61 46 33 58 55 59 4b 74 62 72 63 42 78 74 71 44 2f 58 72 35 41 50 6f 72 4d 2b 6a 53 39 73 63 48 32 62 36 36 49 48 4f 33 37 43 47 63 6f 2b 42 76 71 71 41 51 62 59 35 6d 58 35 4d 4e 7a 57 54 73 54 79 57 35 44 71 6b 54 79 6d 54 7a 51 53 44 41 57 4d 59 4b 73 44 33 44 42 54 69 6d 65 44 64 6a 74 47 51 6a 76 68 4d 43 2f 51 33 38 6e 51 75 36 72 73 58 32 77 67 7a 55 48 54 79 58 42 34 71 46 70 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoArMB4bJH3AAAA:5PU6rVhgaXYDcROMIWxUXc3HGVXEy5AjnQb1UlNloFYaGR/LnJpye6S/2G+ia3aF3XUYKtbrcBxtqD/Xr5APorM+jS9scH2b66IHO37CGco+BvqqAQbY5mX5MNzWTsTyW5DqkTymTzQSDAWMYKsD3DBTimeDdjtGQjvhMC/Q38nQu6rsX2wgzUHTyXB4qFp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49824	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:55 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:55 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:55 GMT X-Cache: Error from cloudfront Via: 1.1 7fc4d53a17d950b206cd9fccf1108b8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: SYOcfyVObplN8V4elh6WEC5PYvk0ADMfoKWqBJq5P6hd4m4rejFfUw==
2024-04-25 17:21:55 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49825	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:55 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3076 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:55 UTC	3076	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 72 4d 42 34 62 4a 48 33 41 41 41 41 3a 35 50 55 36 72 56 68 67 61 58 59 44 63 52 4f 4d 49 57 78 55 58 63 33 48 47 56 58 45 79 35 41 6a 6e 51 62 31 55 6c 4e 6c 6f 46 59 61 47 52 2f 4c 6e 4a 70 79 65 36 53 2f 32 47 2b 69 61 33 61 46 33 58 55 59 4b 74 62 72 63 42 78 74 71 44 2f 58 72 35 41 50 6f 72 4d 2b 6a 53 39 73 63 48 32 62 36 36 49 48 4f 33 37 43 47 63 6f 2b 42 76 71 71 41 51 62 59 35 6d 58 35 4d 4e 7a 57 54 73 54 79 57 35 44 71 6b 54 79 6d 54 7a 51 53 44 41 57 4d 59 4b 73 44 33 44 42 54 69 6d 65 44 64 6a 74 47 51 6a 76 68 4d 43 2f 51 33 38 6e 51 75 36 72 73 58 32 77 67 7a 55 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoArMB4bJH3AAAA:5PU6rVhgaXYDcROMIWxUXc3HGVXEy5AjnQb1UlNloFYaGR/LnJpye6S/2G+ia3aF3XUYKtbrcBxtqD/Xr5APorM+jS9scH2b66IHO37CGco+BvqqAQbY5mX5MNzWTsTyW5DqkTymTzQSDAWMYKsD3DBTimeDdjtGQjvhMC/Q38nQu6rsX2wgzU
2024-04-25 17:21:55 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1232 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:55 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9133-0e5b11597749d0512ec23f49 X-Cache: Miss from cloudfront Via: 1.1 7c4bbd97f5be908e33f403c3794f629a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 5YRP9DozhnB-ECQQj6d5oH2jUwmqfcX4FpVHiBB2PhmCVYYCEyAjzA==
2024-04-25 17:21:55 UTC	1232	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 5a 35 74 34 65 35 67 36 41 41 41 41 3a 30 32 31 75 67 5a 6c 4e 39 58 36 6b 4f 34 73 58 59 35 63 43 69 70 4a 7a 66 65 54 58 6b 41 4e 34 7a 73 42 61 45 65 54 49 35 6e 67 4a 41 65 78 51 70 47 54 6d 65 75 31 34 4b 2f 76 65 74 5a 58 6b 2b 74 6c 70 78 64 34 62 43 44 37 4d 6d 79 6e 70 2b 4c 63 44 36 7a 73 69 64 55 70 79 43 37 58 43 31 43 63 48 71 50 31 35 41 70 47 50 58 4e 6e 6b 78 54 51 59 45 37 50 4c 30 59 2b 48 34 43 65 4f 58 69 6c 54 75 69 4b 69 39 47 64 36 53 30 67 7a 6a 78 73 72 35 4e 5a 48 49 31 39 59 70 46 59 39 77 6d 69 30 37 69 6f 65 4a 2f 2f 65 42 6b 51 54 54 53 4d 74 65 2f 32 45 66 75 6c 49 52 4a 30 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAZ5t4e5g6AAAA:021ugZlN9X6kO4sXY5cCipJzfeTXkAN4zsBaEeTI5ngJAexQpGTmeu14K/vetZXk+tlpxd4bCD7Mmynp+LcD6zsidUpyC7XC1CcHqP15ApGPXNnkxTQYE7PL0Y+H4CeOXilTuiKi9Gd6S0gzjxsr5NZHI19YpFY9wmi07ioeJ//eBkQTTSMte/2EfulIRJ0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49826	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:56 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:56 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:56 GMT X-Cache: Error from cloudfront Via: 1.1 7a99ed3f39c18af8fe138a695e5f657c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: gMDo1dArhZmnus17JoGlf4WS8BvbgtuZZ0PcfwCjOD1XzapGurmfRA==
2024-04-25 17:21:56 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49827	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:57 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3167 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:57 UTC	3167	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 5a 35 74 34 65 35 67 36 41 41 41 41 3a 30 32 31 75 67 5a 6c 4e 39 58 36 6b 4f 34 73 58 59 35 63 43 69 70 4a 7a 66 65 54 58 6b 41 4e 34 7a 73 42 61 45 65 54 49 35 6e 67 4a 41 65 78 51 70 47 54 6d 65 75 31 34 4b 2f 76 65 74 5a 58 6b 2b 74 6c 70 78 64 34 62 43 44 37 4d 6d 79 6e 70 2b 4c 63 44 36 7a 73 69 64 55 70 79 43 37 58 43 31 43 63 48 71 50 31 35 41 70 47 50 58 4e 6e 6b 78 54 51 59 45 37 50 4c 30 59 2b 48 34 43 65 4f 58 69 6c 54 75 69 4b 69 39 47 64 36 53 30 67 7a 6a 78 73 72 35 4e 5a 48 49 31 39 59 70 46 59 39 77 6d 69 30 37 69 6f 65 4a 2f 2f 65 42 6b 51 54 54 53 4d 74 65 2f Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAZ5t4e5g6AAAA:021ugZlN9X6kO4sXY5cCipJzfeTXkAN4zsBaEeTI5ngJAexQpGTmeu14K/vetZXk+tlpxd4bCD7Mmynp+LcD6zsidUpyC7XC1CcHqP15ApGPXNnkxTQYE7PL0Y+H4CeOXilTuiKi9Gd6S0gzjxsr5NZHI19YpFY9wmi07ioeJ//eBkQTTSMte/
2024-04-25 17:21:57 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1321 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:57 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9135-7b50941d44e9cdd41c071e06 X-Cache: Miss from cloudfront Via: 1.1 99baebf4b5bb631267dcfa82456151cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: wQISd2juyO-BK_d6Fewuc61kAe3Jqc2CFPVMt6z7m5P_49SK-jYPuA==
2024-04-25 17:21:57 UTC	1321	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 53 52 34 2f 78 32 70 41 41 41 41 3a 57 4e 71 70 35 62 68 54 6f 6a 52 4a 77 74 30 4a 34 6b 34 43 6f 38 42 6c 62 51 57 41 38 43 62 38 50 30 78 51 58 4f 6b 39 4d 45 34 74 6c 61 4a 66 51 61 56 46 76 61 6f 5a 79 6d 49 79 77 7a 37 73 56 6e 54 62 51 52 48 56 39 34 4e 38 75 6e 75 56 4a 41 4d 71 36 53 34 58 43 39 4b 4d 2f 4b 56 45 44 4a 34 36 43 64 58 36 7a 36 67 4e 76 2b 42 6d 6f 55 39 65 4d 6b 78 2b 2f 4b 52 43 42 53 39 37 6d 48 71 4d 75 41 59 77 4a 5a 78 58 39 45 38 36 52 50 66 53 55 7a 32 77 79 75 67 6b 47 48 54 43 69 79 39 57 38 58 46 2b 2f 45 6d 59 51 7a 47 30 4c 35 37 69 4e 66 70 38 68 4f 35 48 43 34 51 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuSR4/x2pAAAA:WNqp5bhTojRJwt0J4k4Co8BlbQWA8Cb8P0xQXOk9ME4tlaJfQaVFvaoZymIywz7sVnTbQRHV94N8unuVJAMq6S4XC9KM/KVEDJ46CdX6z6gNv+BmoU9eMkx+/KRCBS97mHqMuAYwJZxX9E86RPfSUz2wyugkGHTCiy9W8XF+/EmYQzG0L57iNfp8hO5HC4Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49828	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:57 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:57 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:21:57 GMT X-Cache: Error from cloudfront Via: 1.1 6bc1c280aeef9bbdeb102c7f4e4f773e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: K-uchGQJvNI8u26OActXIRN_PnBRXjmKCfMySBT08cuadRm8jwnLNw==
2024-04-25 17:21:57 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49829	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:21:59 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:21:59 UTC	3246	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 53 52 34 2f 78 32 70 41 41 41 41 3a 57 4e 71 70 35 62 68 54 6f 6a 52 4a 77 74 30 4a 34 6b 34 43 6f 38 42 6c 62 51 57 41 38 43 62 38 50 30 78 51 58 4f 6b 39 4d 45 34 74 6c 61 4a 66 51 61 56 46 76 61 6f 5a 79 6d 49 79 77 7a 37 73 56 6e 54 62 51 52 48 56 39 34 4e 38 75 6e 75 56 4a 41 4d 71 36 53 34 58 43 39 4b 4d 2f 4b 56 45 44 4a 34 36 43 64 58 36 7a 36 67 4e 76 2b 42 6d 6f 55 39 65 4d 6b 78 2b 2f 4b 52 43 42 53 39 37 6d 48 71 4d 75 41 59 77 4a 5a 78 58 39 45 38 36 52 50 66 53 55 7a 32 77 79 75 67 6b 47 48 54 43 69 79 39 57 38 58 46 2b 2f 45 6d 59 51 7a 47 30 4c 35 37 69 4e 66 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuSR4/x2pAAAA:WNqp5bhTojRJwt0J4k4Co8BlbQWA8Cb8P0xQXOk9ME4tlaJfQaVFvaoZymIywz7sVnTbQRHV94N8unuVJAMq6S4XC9KM/KVEDJ46CdX6z6gNv+BmoU9eMkx+/KRCBS97mHqMuAYwJZxX9E86RPfSUz2wyugkGHTCiy9W8XF+/EmYQzG0L57iNf
2024-04-25 17:21:59 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1409 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:21:59 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9137-24f976bc7e7f485624cc4c6e X-Cache: Miss from cloudfront Via: 1.1 c6b0d1d85b2590c57ac754bf9e61944e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: w-bCeDeniIXPoESZMzM3gWKmLDU8QJS4gPmTDLeOSylFe07RedmODQ==
2024-04-25 17:21:59 UTC	1409	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 64 65 78 35 31 42 6f 66 41 41 41 41 3a 41 6a 50 4a 76 54 2f 53 6a 36 72 47 6f 67 50 53 68 72 6e 49 73 52 42 7a 4d 37 77 63 58 6f 2b 38 54 6d 34 56 69 4a 45 39 62 76 44 37 55 71 58 42 66 65 45 58 68 6a 63 78 68 39 62 69 68 6c 6c 57 38 33 49 46 34 43 69 44 79 4d 57 66 51 6a 58 77 79 34 65 62 75 45 4d 30 39 6d 43 61 32 4c 69 6f 34 63 47 30 61 56 4f 78 7a 49 54 61 31 63 76 77 52 4a 58 7a 67 35 6b 45 66 67 69 39 46 4d 2b 6b 37 53 44 61 47 58 2f 4b 68 63 55 71 34 45 78 42 48 77 41 6b 6b 42 45 33 4f 42 6f 38 6f 68 6f 74 4a 4f 41 63 4b 37 36 64 30 75 55 69 4b 35 2b 45 79 6e 41 50 46 7a 76 2f 34 64 2b 64 77 52 70 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAdex51BofAAAA:AjPJvT/Sj6rGogPShrnIsRBzM7wcXo+8Tm4ViJE9bvD7UqXBfeEXhjcxh9bihllW83IF4CiDyMWfQjXwy4ebuEM09mCa2Lio4cG0aVOxzITa1cvwRJXzg5kEfgi9FM+k7SDaGX/KhcUq4ExBHwAkkBE3OBo8ohotJOAcK76d0uUiK5+EynAPFzv/4d+dwRp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49830	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:00 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:22:00 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:22:00 GMT X-Cache: Error from cloudfront Via: 1.1 baddfcb4f2a6876b4fcc03bcd62427ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 9ExYg3UPjqVc0yiSVKZOZoIHnswuUNryLPNUiFSLC2xmye5W3EkkTA==
2024-04-25 17:22:00 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49831	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:01 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 3334 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:22:01 UTC	3334	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 64 65 78 35 31 42 6f 66 41 41 41 41 3a 41 6a 50 4a 76 54 2f 53 6a 36 72 47 6f 67 50 53 68 72 6e 49 73 52 42 7a 4d 37 77 63 58 6f 2b 38 54 6d 34 56 69 4a 45 39 62 76 44 37 55 71 58 42 66 65 45 58 68 6a 63 78 68 39 62 69 68 6c 6c 57 38 33 49 46 34 43 69 44 79 4d 57 66 51 6a 58 77 79 34 65 62 75 45 4d 30 39 6d 43 61 32 4c 69 6f 34 63 47 30 61 56 4f 78 7a 49 54 61 31 63 76 77 52 4a 58 7a 67 35 6b 45 66 67 69 39 46 4d 2b 6b 37 53 44 61 47 58 2f 4b 68 63 55 71 34 45 78 42 48 77 41 6b 6b 42 45 33 4f 42 6f 38 6f 68 6f 74 4a 4f 41 63 4b 37 36 64 30 75 55 69 4b 35 2b 45 79 6e 41 50 46 7a Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAdex51BofAAAA:AjPJvT/Sj6rGogPShrnIsRBzM7wcXo+8Tm4ViJE9bvD7UqXBfeEXhjcxh9bihllW83IF4CiDyMWfQjXwy4ebuEM09mCa2Lio4cG0aVOxzITa1cvwRJXzg5kEfgi9FM+k7SDaGX/KhcUq4ExBHwAkkBE3OBo8ohotJOAcK76d0uUiK5+EynAPFz
2024-04-25 17:22:01 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1497 Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:22:01 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a9139-16c9b2714d6140062a145ed1 X-Cache: Miss from cloudfront Via: 1.1 b5e757a7da6f6fe6261f56a8a9646880.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: rKU5T5Q-7H8jHdZuaQppkxQun_1pUhTYNlWSAtZIJWCEnEUkYmIwTg==
2024-04-25 17:22:01 UTC	1497	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 72 6e 52 34 77 45 49 35 41 41 41 41 3a 38 67 4b 43 54 2b 2f 61 46 63 57 57 43 68 58 6f 4f 42 72 6c 71 52 72 71 73 48 77 78 38 6e 42 46 64 35 4f 6d 6e 5a 56 33 6f 4e 41 4d 7a 49 72 38 61 54 73 59 33 48 4f 33 6b 45 76 72 6d 54 6e 4e 2b 37 33 74 6a 63 35 6d 39 6e 34 79 58 6f 4a 6d 54 41 58 46 79 31 39 35 78 33 31 70 6c 52 4a 4b 51 30 6f 78 4a 6f 62 54 74 43 44 4f 71 49 2b 65 34 54 75 64 7a 73 65 6e 59 53 77 36 72 70 62 54 4a 62 52 6c 55 4f 34 4a 37 48 52 59 68 76 48 42 30 6c 6d 30 44 73 6a 39 39 2f 65 6d 69 51 53 45 36 55 49 34 54 56 2b 6f 35 33 5a 39 34 6a 63 2b 50 6c 72 33 34 77 6d 64 67 73 61 5a 34 49 34 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoArnR4wEI5AAAA:8gKCT+/aFcWWChXoOBrlqRrqsHwx8nBFd5OmnZV3oNAMzIr8aTsY3HO3kEvrmTnN+73tjc5m9n4yXoJmTAXFy195x31plRJKQ0oxJobTtCDOqI+e4TudzsenYSw6rpbTJbRlUO4J7HRYhvHB0lm0Dsj99/emiQSE6UI4TV+o53Z94jc+Plr34wmdgsaZ4I4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49832	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:02 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:22:02 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:22:02 GMT X-Cache: Error from cloudfront Via: 1.1 7dc4818c830423900ae855831181d2b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: Q_0AI3bk8IJL4TyikLoeAWYMT9sQ0AfzGqPhor7WHKUE-NIzwE-E2w==
2024-04-25 17:22:02 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49817	18.155.1.25	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:02 UTC	1350	OUT	GET /password_reset/new HTTP/1.1 Host: login.planningcenteronline.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTcxMiwiZXhwIjoxNzE1Mjc1MzEyLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.g1DmursyB83n9QH31kV6mTYOc_xJ09XqpP1mJD0k8TnCrf8CjTp6DvmrR_CfohY1CvyFPjdK7VUS8nb2ggLr2A; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoArnR4wEI5AAAA:8gKCT+/aFcWWChXoOBrlqRrqsHwx8nBFd5OmnZV3oNAMzIr8aTsY3HO3kEvrmTnN+73tjc5m9n4yXoJmTAXFy195x31plRJKQ0oxJobTtCDOqI+e4TudzsenYSw6rpbTJbRlUO4J7HRYhvHB0lm0Dsj99/emiQSE6UI4TV+o53Z94jc+Plr34wmdgsaZ4I4AIPP3CrQyGZrNljD8I9Wwpu4sJUDwcrmAaHpf+ttF1LeUJEREZecMhD1fbTmLj1iwnXbw2JUfkx63F0vikb90AeR9Q/ij If-None-Match: W/"887574677e3580b131fdcb63d805c51a"
2024-04-25 17:22:02 UTC	1365	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 18851 Connection: close Date: Thu, 25 Apr 2024 17:22:02 GMT Server: openresty Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://login.planningcenteronline.com/assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css>; rel=preload; as=style; nopush ETag: W/"c60f4649ce4f564ddf7f73fe5c8b033c" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: Set-Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTcyMiwiZXhwIjoxNzE1Mjc1MzIyLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.FW0YXkcwh3RJLDYNobXBNnHCsM_Rz_cY7F8s8FcUxxi84ub4b5hY1aWxXaHjOQosceB5Xla6T8jzCDM2Amdt9A; domain=.planningcenteronline.com; path=/; expires=Thu, 09 May 2024 17:22:02 GMT; secure; HttpOnly; SameSite=Lax X-Request-Id: 0cdf8add-d3d6-4611-812f-c8e21a1fb32a X-Runtime: 0.017901 X-Cache: Miss from cloudfront Via: 1.1 5edde4fb3a3fc71d056271c84955ceee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: d7BMRorW_JLtgMEvOnBBqpYNic8H8oY3-fR8eDGr6JkacSYilsYE6Q==
2024-04-25 17:22:02 UTC	15019	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 2d 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 74 69 74 6c 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 74 6f 20 79 6f 75 72 20 63 68 75 72 63 68 27 73 20 50 6c 61 6e 6e 69 6e 67 20 43 65 6e 74 65 72 20 61 63 63 6f 75 6e 74 2e 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 Data Ascii: <!DOCTYPE html><html class=""> <head> <title>Planning Center - Login</title> <meta content="Login" name="apple-mobile-web-app-title"/> <meta content="Log in to your church's Planning Center account." name="description"/> <meta charset="
2024-04-25 17:22:02 UTC	222	IN	Data Raw: 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 68 31 3e 50 61 73 73 77 6f 72 64 20 52 65 73 65 74 3c 2f 68 31 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 6d 62 2d 32 22 3e 0a 20 20 45 6e 74 65 72 20 61 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 74 6f 20 72 65 63 65 69 76 65 20 61 20 63 6f 64 65 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 0a 3c 2f 70 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 70 61 73 73 77 6f 72 64 5f 72 65 73 65 74 22 20 61 63 63 65 70 74 2d 63 68 61 72 73 Data Ascii: ="content"> <h1>Password Reset</h1><p class="mb-2"> Enter an email address or phone number to receive a code that can be used to set your password.</p><form action="/password_reset" accept-chars
2024-04-25 17:22:02 UTC	3610	IN	Data Raw: 65 74 3d 22 55 54 46 2d 38 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 75 74 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 69 54 64 59 6f 4a 2d 6b 44 4c 53 78 4f 78 49 45 70 5f 5f 73 34 5a 46 63 69 4b 4e 32 31 76 39 5f 56 4e 61 41 69 4e 63 67 52 36 62 39 74 47 42 54 35 38 66 74 37 56 5f 4e 46 34 67 71 50 57 6b 44 75 55 31 57 6c 65 68 53 76 45 71 33 57 50 36 59 2d 38 75 37 42 67 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 2f 3e 20 20 0a 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 6d 74 2d 31 20 6d 62 2d 31 22 3e 45 6d 61 69 6c 20 6f 72 20 50 68 6f 6e 65 3c 2f 6c 61 62 65 6c 3e 0a 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d Data Ascii: et="UTF-8" method="post"><input type="hidden" name="authenticity_token" value="iTdYoJ-kDLSxOxIEp__s4ZFciKN21v9_VNaAiNcgR6b9tGBT58ft7V_NF4gqPWkDuU1WlehSvEq3WP6Y-8u7Bg" autocomplete="off" /> <label class="mt-1 mb-1">Email or Phone</label> <input type=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49834	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:03 UTC	652	OUT	GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
2024-04-25 17:22:03 UTC	520	IN	HTTP/1.1 304 Not Modified Content-Type: text/javascript Connection: close Vary: Accept-Encoding Date: Thu, 25 Apr 2024 17:22:03 GMT cache-control: private, max-age=86400 last-modified: Thu, 25 Apr 2024 17:20:55 +0000 pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a913b-73bb47e323fb9b03116d7b87 X-Cache: Miss from cloudfront Via: 1.1 85fc1201a1918facbeb30836e7391660.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: BqTSNSvBg2R9_FXo6CXrqsYnIbnTFTew_Pb5iJdxosf1md-cWoHcew==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49835	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:04 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 1832 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:22:04 UTC	1832	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 72 6e 52 34 77 45 49 35 41 41 41 41 3a 38 67 4b 43 54 2b 2f 61 46 63 57 57 43 68 58 6f 4f 42 72 6c 71 52 72 71 73 48 77 78 38 6e 42 46 64 35 4f 6d 6e 5a 56 33 6f 4e 41 4d 7a 49 72 38 61 54 73 59 33 48 4f 33 6b 45 76 72 6d 54 6e 4e 2b 37 33 74 6a 63 35 6d 39 6e 34 79 58 6f 4a 6d 54 41 58 46 79 31 39 35 78 33 31 70 6c 52 4a 4b 51 30 6f 78 4a 6f 62 54 74 43 44 4f 71 49 2b 65 34 54 75 64 7a 73 65 6e 59 53 77 36 72 70 62 54 4a 62 52 6c 55 4f 34 4a 37 48 52 59 68 76 48 42 30 6c 6d 30 44 73 6a 39 39 2f 65 6d 69 51 53 45 36 55 49 34 54 56 2b 6f 35 33 5a 39 34 6a 63 2b 50 6c 72 33 34 77 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoArnR4wEI5AAAA:8gKCT+/aFcWWChXoOBrlqRrqsHwx8nBFd5OmnZV3oNAMzIr8aTsY3HO3kEvrmTnN+73tjc5m9n4yXoJmTAXFy195x31plRJKQ0oxJobTtCDOqI+e4TudzsenYSw6rpbTJbRlUO4J7HRYhvHB0lm0Dsj99/emiQSE6UI4TV+o53Z94jc+Plr34w
2024-04-25 17:22:04 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 880 Connection: close Date: Thu, 25 Apr 2024 17:22:04 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a913c-7fcf62887a87140742f623ba X-Cache: Miss from cloudfront Via: 1.1 824fe21e467658628899bdd8725649ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: 5HIBjW4RNS32Pj0xzuiQxX3rqxp0eaN6NATXKuv-x4E7WF--9BqDqw==
2024-04-25 17:22:04 UTC	880	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 59 55 46 35 61 6e 31 72 41 41 41 41 3a 4b 4a 4f 56 48 52 44 61 2b 36 39 66 52 58 41 54 31 75 4a 41 43 37 30 52 55 6d 35 59 50 68 70 43 4d 47 51 41 68 65 79 5a 59 77 76 54 65 50 65 63 43 4b 31 46 78 38 77 30 43 4d 4a 67 74 31 70 42 71 49 55 4f 44 51 65 45 63 70 36 32 39 42 46 6b 31 32 63 2b 5a 42 58 67 6b 4a 5a 78 64 42 41 59 76 51 66 67 34 33 36 74 58 72 71 7a 58 41 6e 48 30 48 54 71 31 76 57 56 7a 63 34 6c 34 67 6c 36 32 47 39 42 75 51 47 36 7a 5a 77 58 31 4b 4f 6b 4e 45 55 68 48 4d 49 41 4c 4c 64 52 59 6e 30 74 6e 4f 36 39 77 64 42 72 59 48 2b 6e 49 59 4d 35 41 69 30 71 72 57 45 75 57 4c 59 58 4d 38 31 Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAYUF5an1rAAAA:KJOVHRDa+69fRXAT1uJAC70RUm5YPhpCMGQAheyZYwvTePecCK1Fx8w0CMJgt1pBqIUODQeEcp629BFk12c+ZBXgkJZxdBAYvQfg436tXrqzXAnH0HTq1vWVzc4l4gl62G9BuQG6zZwX1KOkNEUhHMIALLdRYn0tnO69wdBrYH+nIYM5Ai0qrWEuWLYXM81

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49836	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:05 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:22:05 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:22:05 GMT X-Cache: Error from cloudfront Via: 1.1 88b63cb2f8aab28c7291262ffc15282e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: KcuJg1xSIAGmIweh2qzzHNvKu10YceC8m8GkPQHTqICX6Ls_2Pufcw==
2024-04-25 17:22:05 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49837	13.249.39.45	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:05 UTC	704	OUT	POST /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive Content-Length: 2300 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://login.planningcenteronline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.planningcenteronline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:22:05 UTC	2300	OUT	Data Raw: 7b 22 65 78 69 73 74 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 59 55 46 35 61 6e 31 72 41 41 41 41 3a 4b 4a 4f 56 48 52 44 61 2b 36 39 66 52 58 41 54 31 75 4a 41 43 37 30 52 55 6d 35 59 50 68 70 43 4d 47 51 41 68 65 79 5a 59 77 76 54 65 50 65 63 43 4b 31 46 78 38 77 30 43 4d 4a 67 74 31 70 42 71 49 55 4f 44 51 65 45 63 70 36 32 39 42 46 6b 31 32 63 2b 5a 42 58 67 6b 4a 5a 78 64 42 41 59 76 51 66 67 34 33 36 74 58 72 71 7a 58 41 6e 48 30 48 54 71 31 76 57 56 7a 63 34 6c 34 67 6c 36 32 47 39 42 75 51 47 36 7a 5a 77 58 31 4b 4f 6b 4e 45 55 68 48 4d 49 41 4c 4c 64 52 59 6e 30 74 6e 4f 36 39 77 64 42 72 59 48 2b 6e 49 59 4d 35 41 69 30 71 72 57 Data Ascii: {"existing_token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAYUF5an1rAAAA:KJOVHRDa+69fRXAT1uJAC70RUm5YPhpCMGQAheyZYwvTePecCK1Fx8w0CMJgt1pBqIUODQeEcp629BFk12c+ZBXgkJZxdBAYvQfg436tXrqzXAnH0HTq1vWVzc4l4gl62G9BuQG6zZwX1KOkNEUhHMIALLdRYn0tnO69wdBrYH+nIYM5Ai0qrW
2024-04-25 17:22:05 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 968 Connection: close Date: Thu, 25 Apr 2024 17:22:05 GMT access-control-allow-origin: * access-control-max-age: 86400 access-control-allow-methods: OPTIONS,GET,POST cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-amzn-waf-challenge-id: Root=1-662a913d-505f51d73b1d4b6369865f94 X-Cache: Miss from cloudfront Via: 1.1 841dfa6074cf4b3b0718988f088a4ac2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: xm57m8sfg8kY1tfYf0Ghliy7uotCD39lJLjnJoHxMex8fXPNvHNmRA==
2024-04-25 17:22:05 UTC	968	IN	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 36 61 39 34 33 39 39 36 2d 63 32 39 62 2d 34 35 31 65 2d 62 34 39 32 2d 63 61 33 31 64 66 35 37 39 66 39 63 3a 45 67 6f 41 75 53 52 34 2f 38 4f 71 41 41 41 41 3a 4f 31 47 77 51 30 71 61 41 35 51 61 73 38 42 65 58 6f 64 44 4d 41 32 4d 4e 50 7a 6a 79 4e 72 35 6c 4d 64 4a 2f 62 4b 6f 69 6e 38 46 6d 6d 4e 57 64 44 72 5a 65 39 50 6d 47 41 6a 62 37 52 4f 38 55 42 32 72 6c 62 54 64 72 52 72 31 4e 45 6e 66 72 4f 36 61 79 6e 35 71 76 71 70 41 53 50 48 48 35 41 68 31 67 54 72 61 6a 4e 72 64 53 79 75 70 62 69 63 75 34 4f 57 4e 5a 65 32 33 33 49 34 35 44 33 54 71 71 49 30 32 6a 37 70 51 56 50 39 33 6c 49 44 66 6e 76 66 67 41 77 57 34 2f 41 77 6b 55 30 6b 6c 6f 4d 5a 32 31 57 55 54 39 4b 70 6c 32 34 7a 70 35 68 37 58 42 38 74 71 6a 4a 6a Data Ascii: {"token":"6a943996-c29b-451e-b492-ca31df579f9c:EgoAuSR4/8OqAAAA:O1GwQ0qaA5Qas8BeXodDMA2MNPzjyNr5lMdJ/bKoin8FmmNWdDrZe9PmGAjb7RO8UB2rlbTdrRr1NEnfrO6ayn5qvqpASPHH5Ah1gTrajNrdSyupbicu4OWNZe233I45D3TqqI02j7pQVP93lIDfnvfgAwW4/AwkU0kloMZ21WUT9Kpl24zp5h7XB8tqjJj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49838	13.249.39.67	443	4324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 17:22:06 UTC	407	OUT	GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1 Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 17:22:06 UTC	334	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Content-Length: 48 Connection: close Date: Thu, 25 Apr 2024 17:22:06 GMT X-Cache: Error from cloudfront Via: 1.1 5eb5e19c1a78889d10ff38f1551ed2aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: spb_tKInoLOYl8Yf9OHnNNJaDVpBVy6lWCMcWqHqobzrgG9eTYLT1A==
2024-04-25 17:22:06 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 48 54 54 50 20 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"code":400,"message":"HTTP method not allowed"}

Target ID:	0
Start time:	19:20:45
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:20:48
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2200,i,5783934558795399267,4721298403190009966,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:20:51
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://people.planningcenteronline.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://login.planningcenteronline.com/login/new	HTTP Parser: Iframe src: https://pco-cross-storage.s3.amazonaws.com/hub.html
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: Iframe src: https://pco-cross-storage.s3.amazonaws.com/hub.html
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: Iframe src: https://pco-cross-storage.s3.amazonaws.com/hub.html
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: Iframe src: https://pco-cross-storage.s3.amazonaws.com/hub.html
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: Iframe src: https://pco-cross-storage.s3.amazonaws.com/hub.html
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: Iframe src: https://pco-cross-storage.s3.amazonaws.com/hub.html
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: Iframe src: https://pco-cross-storage.s3.amazonaws.com/hub.html
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: Iframe src: https://pco-cross-storage.s3.amazonaws.com/hub.html

Source: https://login.planningcenteronline.com/login/new?return=People%2F	HTTP Parser: <input type="password" .../> found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: <input type="password" .../> found

Source: https://login.planningcenteronline.com/login/new?return=People%2F	HTTP Parser: No <meta name="author".. found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: No <meta name="author".. found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: No <meta name="author".. found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: No <meta name="author".. found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: No <meta name="author".. found
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: No <meta name="author".. found
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: No <meta name="author".. found
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: No <meta name="author".. found
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: No <meta name="author".. found

Source: https://login.planningcenteronline.com/login/new?return=People%2F	HTTP Parser: No <meta name="copyright".. found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: No <meta name="copyright".. found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: No <meta name="copyright".. found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: No <meta name="copyright".. found
Source: https://login.planningcenteronline.com/login/new	HTTP Parser: No <meta name="copyright".. found
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: No <meta name="copyright".. found
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: No <meta name="copyright".. found
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: No <meta name="copyright".. found
Source: https://login.planningcenteronline.com/password_reset/new	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: people.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?return=People%2F HTTP/1.1Host: login.planningcenteronline.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/new?return=People%2F HTTP/1.1Host: login.planningcenteronline.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.OH6WsFiQIzChLGDyMPTLeiKYyehbX2JS8mCvl81MdMLKfba57ZLfRr5WSlVuqy69CwRl7Tal6O1K9GCGPfmLqA
Source: global traffic	HTTP traffic detected: GET /assets/session_package-e27311e49866e5050dcf774ae3dd00fd632a56fd9cea5d0ed408497f9576e012.css HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.planningcenteronline.com/login/new?return=People%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
Source: global traffic	HTTP traffic detected: GET /packs/js/runtime-461b1b74cc572f890c8f.js HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/login/new?return=People%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
Source: global traffic	HTTP traffic detected: GET /packs/js/882-821b6997692328fd5b75.js HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/login/new?return=People%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
Source: global traffic	HTTP traffic detected: GET /packs/js/login-a860e00a8fd55872cfa8.js HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/login/new?return=People%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
Source: global traffic	HTTP traffic detected: GET /assets/@planningcenter/icons/sprites/general-45fb8eeff447e73ce56b2ccf04643bb3bf4672a4ed64f409e42f456a38874f8a.svg HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://login.planningcenteronline.com/login/new?return=People%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
Source: global traffic	HTTP traffic detected: GET /assets/pco/page_expired/manifest-c88201c22050a32daa4c0109df080c4d1076a43dad55e1d46fc8b5539095ef00.js HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/login/new?return=People%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.edge.sdk.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/@planningcenter/icons/sprites/general-45fb8eeff447e73ce56b2ccf04643bb3bf4672a4ed64f409e42f456a38874f8a.svg HTTP/1.1Host: login.planningcenteronline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.planningcenteronline.com/login/new?return=People%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ
Source: global traffic	HTTP traffic detected: GET /assets/favicon-16-a3db94c1250254a4ba2b4aad660bf6e021907f98e04752f25eac8c0d4a33ab05.png HTTP/1.1Host: login.planningcenteronline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAtxt5ENUiAAAA:2f5EpOwJ52vOkuGehvXsKP4vb95V+sLFv3CdbeFxglsIwUPLVyygC+mixFOaNKLNk63G6XihuH/+mYiZsd9Azin/wC8y85c/1RVJRUG5M9gdJ4GZgvwNUN2q3v0ViVfVnxgG0iBnwbmxH8ucM6w/UdjkLSjOQ5ScloHZQNG+W9tPD3KS9bSRbVIeoxJarcLBKPHLl29Csgezq/ysMACkd6tCghYnLHW64wxM5D0bQ4b7YZvH3oo+1Ojj2lzoNizx5NXQPYB+iOeBOf+JFrChTupZCZk0
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/verify HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/new HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY1MywiZXhwIjoxNzE1Mjc1MjUzLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.tkp2w2b0QSzgkIcuI5zIp-Ib02M1dPKsU8q4h23Myelj2LdDhWjAYs6RKaaburX4g9b_E2ZWFPsrJqEY1S8AzQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAZ5t4e342AAAA:z3K6BTMFoBj3LCS10kFZV92sLNaA3KRme1X35hPUwxgpT9sqAvhLwLNhXRAGToCCnNRwvG8Vhvi1z5zVMbjoUV6CLkiNACH072zX0NsTUveiMC0eg7KPxKBy8phj94ssatAgPWtcX3kOB2h/yQ0HGKnOn9k9OQJjCmcyvFfQ2DmvNo8oHoFdACsof2BpX5OhOS0UI6TdkZa5BjnRiycwR7pq9+LDRP5OM7zOxZgRTAGkFJmTwmXhq9MbC+HUD1+bpF1FNnOo1XrJve340Ts00iW19rcb
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
Source: global traffic	HTTP traffic detected: GET /hub.html HTTP/1.1Host: pco-cross-storage.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /password_reset/new HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY2NSwiZXhwIjoxNzE1Mjc1MjY1LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.iVnmy1oNTyyM1dqPJcw7ddynvRvZaMQaDpYGGFITOhTUfRG8-8_TxADG31wkB7PapC-boVqWxU15_B5pxBiYtQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAbHR5XN4YAAAA:tGXZ4GEtZ57ASTigk6KO2XLmnUBblibLjbfHZzTv9GxfqgYH35ZgoPTuTRoKm5Jhuywv3D5llP1fxx5og8LXDrJkPF6jD+vRV3ow1HMy2cNDPkUKv0YxL36wx8FXG088x7D137igUu1AJtbHfSlH33ee64uKV4tuw8UdmKMUMCjo58Zg8AF18/ip/OtYOQEh/dCUxMjSo+4nnh9YzfvlUkQ/8aGJ9R52AGywL+8Ooy2xlePB6rZlpd39pLFzbMmgIYf1lw8F1fybBldFAO+3NFygHqWX
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/new HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://login.planningcenteronline.com/password_reset/newAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY2OCwiZXhwIjoxNzE1Mjc1MjY4LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.N_oIDHOB8EXm1adfpq8inqXpY4X7MIXcd-jAWndDD6hJN4iA_2CVWMAoO4YQl6d6KdFSF9cN5NHNX8_eEwsM0Q; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAe/940kUrAAAA:oCm58SG5oFpIwQWc+PAtG6jerqi8bj7vGmA9sfOcVIpuqrENIys6YMM6d+vK0TdGiPJK/CJhwvlKY4W5RtV78A/1GVv+k+Yleo39ZoOQTofeEhZxmO0DinXz5kDdXZNKvW08pieqXGeDecXDzj0ClrQPZjKw5hKdt2xQngjQQhoNqFkKJEzVrPPqCcm7GZ1EmTuahuH6Tfj2vEj95HF6S+LzbWXC6XXnDTAfz36Akqk7nzPef//+Ev687LjcD+wpweeZRefqpZOj6EJO1nrQN7vqOuH2If-None-Match: W/"cf13463be3eaab452590f50f03455305"
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /password_reset/new HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY3MSwiZXhwIjoxNzE1Mjc1MjcxLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.n7rj90NgS5P-QHICdhPmnGB43Y2yVdCcg1PVh-7ydk_Nxg9suLVf7Z_UiEkMbcPESWNcvyKX0TmghqOVUOY-VQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAt4x5jxQSAAAA:5sCcR5ghJuxXtCeLK+QfTz9qjEfd2YdXBHRwDOgBxgkyl1Vels9JbC7cdz2JqVLC5coSUBZoCU/4roUCDqaGv+oLCJF/VO6MxcxIz0ieetz1gj/0KnoBfwphsGVKvCxLK6FFySe5IdrYNRomE65JfI6zmbxbj+3mO61wwqlN1LW7iFuhUpxFKjrwAC2h0Q+tENtIlFnTex843qEA0j1k4JGP5xS201xnlW8vK7ylsJp9z0vVKZx0lEdHZ9SJaoTmzbUe1k6/LUPM4n4CY+aD4Bj8xlhVIf-None-Match: W/"4479a3118924747758e6325ba57df64e"
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/new HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY3OSwiZXhwIjoxNzE1Mjc1Mjc5LCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.pfnee7kNFglbECNSjjaoRIUxFCoXn6T-o_SyBAsnc8pxznk1QAzNPwAcRgDunrXrXZhwdTSqPWw4MJ_HnnEvdw; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAu7l4jJk1AAAA:WDb8peGpo9NxRFIjOnvdEXzRL2PEnukONvPwMjPytHTq20Nhk2H+0wf5QTWjQqsrae42mg90lHcETFC/MdZ1wHPt7gJZiOw5nz3nbWyyTh2gGaEEoezfnqPSkHZGDhQg1pH9qk3ew95iRtkv6Gc/NwO+oKKuAtzM3hWOxpC6/JDP0CklVxqTFz7gjUba/V6yXDXxWz/6/l7vE9qc4/smx3p8tMCHot34NG90NIh7roLlA24BIRTzl7vUZt47L85ZR9aHAs/kLzGrmO8uPmFSCrfF8697If-None-Match: W/"06aac7978eb8889e0e267cb755c152b5"
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /password_reset/new HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTY5MCwiZXhwIjoxNzE1Mjc1MjkwLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.bCv8ZVLMQtZusMXsRGv_EyrDRcmRC-AFG23WeMZqdG4wLN8oW8xpL7A6L4fMg0VYUI7c9rkqzcw2VfMSrAYoVQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAuSR4/5alAAAA:78sRzbAc2zu8cZnx7vh+PTvP3lLCwCHQZqIzrp4CxLKCLQcceh7AECMoAsFuLLMQgM3LVfGK9NvO57/pOV3DG367UTmYzzPn7E07mWcJxhkDVI54lxNjT96gzaUpvp7nYH8/c5BpJ6nN/mGekdIraDIhlB49oDNdlEIUw58drN1Msd00zIxMZl0JQFcAYBDWtNuMT+OlyeR5Jt3V/e85Y5k2pW7rx0Xy6lIMDci9w8/eUMgn2lnEDxHw45ZJHQc2iYRA8eFDtBRd8g2S/e7wsosOBhSBIf-None-Match: W/"6a48529c1e779406b90ee7992dba620f"
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/new HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTcwMCwiZXhwIjoxNzE1Mjc1MzAwLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ._hgeEx6B1j80iwQuhCSnJkjRZgM7RBBS58kK6ZOsMgaU3YOKLL15GqyFUrj75wMj58rLiYYKeO4sdavnOomkLQ; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoAdex51B0cAAAA:kLJfm6NSV1C5xwdSGRspCWIbQ6v+sAUe5GKod9NSDPx7TmRvtQQ6r5rkZh2BayGVpISEVTcLCO/5UPgsjz8RPuf+oSlZOoDZhroyB/hg1ZpTdBcbIzeHQTCMX07VAhgDP5zDZJPtQZaiBZiHTHdyUPx48IAjkM/wySMMImhBXRAK0TxyL/rVpDs3Wc8vVpLAR4wy/ytfeA/qRmPqeOatEdUiCPfPwdxriIlySjknDnlv5gNLGA37qMx2ZUXqx2aDwcPlYCkquUy2peR3+2F4w5njV0YxIf-None-Match: W/"eaccf4bd077bbaa7f9d862b4e844a288"
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /password_reset/new HTTP/1.1Host: login.planningcenteronline.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: planning_center_session=eyJhbGciOiJFUzI1NiJ9.eyJqdGkiOiJlYjE5ZDQ3YjZjNzcxMGFhNDg0NjhjNGE2MjRlOTI4YiIsImlhdCI6MTcxNDA2NTcxMiwiZXhwIjoxNzE1Mjc1MzEyLCJpc3MiOiIvcGNvL3Nlc3Npb24ifQ.g1DmursyB83n9QH31kV6mTYOc_xJ09XqpP1mJD0k8TnCrf8CjTp6DvmrR_CfohY1CvyFPjdK7VUS8nb2ggLr2A; aws-waf-token=6a943996-c29b-451e-b492-ca31df579f9c:EgoArnR4wEI5AAAA:8gKCT+/aFcWWChXoOBrlqRrqsHwx8nBFd5OmnZV3oNAMzIr8aTsY3HO3kEvrmTnN+73tjc5m9n4yXoJmTAXFy195x31plRJKQ0oxJobTtCDOqI+e4TudzsenYSw6rpbTJbRlUO4J7HRYhvHB0lm0Dsj99/emiQSE6UI4TV+o53Z94jc+Plr34wmdgsaZ4I4AIPP3CrQyGZrNljD8I9Wwpu4sJUDwcrmAaHpf+ttF1LeUJEREZecMhD1fbTmLj1iwnXbw2JUfkx63F0vikb90AeR9Q/ijIf-None-Match: W/"887574677e3580b131fdcb63d805c51a"
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/challenge.js HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.planningcenteronline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 25 Apr 2024 17:20:55 +0000
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ab5ddfb19446/33b184b1a0f1/telemetry HTTP/1.1Host: ab5ddfb19446.87d96309.us-east-2.token.awswaf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: people.planningcenteronline.com
Source: global traffic	DNS traffic detected: DNS query: login.planningcenteronline.com
Source: global traffic	DNS traffic detected: DNS query: ab5ddfb19446.edge.sdk.awswaf.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ab5ddfb19446.87d96309.us-east-2.token.awswaf.com
Source: global traffic	DNS traffic detected: DNS query: pco-cross-storage.s3.amazonaws.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://people.planningcenteronline.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
https://people.planningcenteronline.com