Edit tour

Windows Analysis Report
https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net

Overview

General Information

Sample URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net
Analysis ID:	1431913
Infos:

Detection

TechSupportScam

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected TechSupportScam

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2208,i,7849276847717892768,10542576573403256842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_80	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

HTML

Source	Rule	Description	Author
0.3.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
0.0.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
0.1.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
0.2.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: markssmith.icu
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: userstatics.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Host: markssmith.icuConnection: keep-aliveContent-Length: 168sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://markssmith.icuSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 25 Apr 2024 22:42:12 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jieqe7AOl3WyUmXORY3JKQeKZwCdIFHsbPwbnigLLGMYdRZWgau54THTZBIEG%2B%2BrkAe8mVjKVJm5dHkSRgXXJ5La8hHZbh%2FXxfG9gmgsz3air4QDMftVXt%2Bj48ZsysKYkg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 87a1d848088fa65d-MIAalt-svc: h3=":443"; ma=86400

Source: chromecache_101.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_101.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_97.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_97.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_97.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_79.2.dr	String found in binary or memory: https://ezgif.com/optimize
Source: chromecache_96.2.dr, chromecache_99.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_96.2.dr, chromecache_99.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_97.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_97.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_97.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_97.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_97.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_97.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_97.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_97.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_80.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-WEFZTEQC7H
Source: chromecache_97.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.5:49745 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Yara detected TechSupportScam

Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_80, type: DROPPED

Source: classification engine

Classification label: mal56.phis.win@16/62@10/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2208,i,7849276847717892768,10542576573403256842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2208,i,7849276847717892768,10542576573403256842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net	100%	SlashNext	Scareware type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://markssmith.icu/	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/-f8xo380.png	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/m-8l5t4x.png	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/r3v1h_up.js	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/_iagq4xt.js	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/xtbs383q.mp3	0%	Avira URL Cloud	safe
https://userstatics.com/get/script.js?referrer=https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/wwrdx--k.png	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/wwrdx--k-2.png	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/groie0t3.html	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/zqvabm8j.js	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/18huodt4.html	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/t2z5gydm.mp3	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/16ngwy11.css	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/rg-aa02k.js	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/sh9337d_.png	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/cvmt8hve.css	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/rwzcxxa4.png	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/nfkp-cl0.gif	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/lmq9m72q.png	0%	Avira URL Cloud	safe
https://markssmith.icu/23d80j2d/qwd13d8jqd/k58t941e.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
userstatics.com	104.21.53.38	true	false	unknown
markssmith.icu	104.21.12.42	true	false	unknown
www.google.com	142.250.189.132	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
windowsupdatebg.s.llnwi.net	208.111.136.128	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=Jieqe7AOl3WyUmXORY3JKQeKZwCdIFHsbPwbnigLLGMYdRZWgau54THTZBIEG%2B%2BrkAe8mVjKVJm5dHkSRgXXJ5La8hHZbh%2FXxfG9gmgsz3air4QDMftVXt%2Bj48ZsysKYkg%3D%3D	false		high
https://markssmith.icu/23d80j2d/qwd13d8jqd/-f8xo380.png	false	Avira URL Cloud: safe	unknown
https://userstatics.com/get/script.js?referrer=https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/_iagq4xt.js	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/m-8l5t4x.png	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/wwrdx--k-2.png	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/r3v1h_up.js	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/xtbs383q.mp3	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/wwrdx--k.png	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/groie0t3.html	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/zqvabm8j.js	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/18huodt4.html	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net	true		unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/t2z5gydm.mp3	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/16ngwy11.css	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/rg-aa02k.js	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/rwzcxxa4.png	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/nfkp-cl0.gif	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/lmq9m72q.png	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/sh9337d_.png	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/cvmt8hve.css	false	Avira URL Cloud: safe	unknown
https://markssmith.icu/23d80j2d/qwd13d8jqd/k58t941e.css	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_101.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_97.2.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_96.2.dr, chromecache_99.2.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_97.2.dr	false		high
https://getbootstrap.com/)	chromecache_96.2.dr, chromecache_99.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_97.2.dr	false	URL Reputation: safe	unknown
http://fontawesome.io/license	chromecache_101.2.dr	false		high
https://www.google.com	chromecache_97.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_99.2.dr	false		high
https://td.doubleclick.net	chromecache_97.2.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_97.2.dr	false		high
https://ezgif.com/optimize	chromecache_79.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.131.238	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.189.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.53.38	userstatics.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.12.42	markssmith.icu	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431913
Start date and time:	2024-04-26 00:41:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@16/62@10/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.50.35, 142.250.189.142, 74.125.26.84, 34.104.35.123, 142.250.64.200, 142.250.217.170, 142.250.64.234, 172.217.2.202, 142.250.64.170, 192.178.50.74, 142.250.217.234, 172.217.15.202, 192.178.50.42, 142.250.189.138, 142.250.217.202, 172.217.165.202, 172.217.3.74, 142.250.64.138, 40.68.123.157, 23.55.103.106, 23.55.103.43, 192.229.211.108, 72.21.81.240, 20.166.126.56, 13.95.31.18, 20.12.23.50, 142.250.189.131, 52.165.165.26, 208.111.136.128
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.978578243370135
Encrypted:	false
SSDEEP:	48:8ad6TGmnHyidAKZdA19ehwiZUklqehvty+3:873oGy
MD5:	917A8BD42290C4DF5B59358B420E47C3
SHA1:	7D89CBA0CFD596AC8C8E62AC266B598C8F3D9982
SHA-256:	B32150258D70D3E73EB7A29AFD74D06D1BE5ACC3CB3D68D0E333C0F664785E40
SHA-512:	66DD717DDDA0E903A4363C22B37D298B112DB32445F723201A311521748F6CB12D693AAC903B8B7CEB0CBAE1558968222635837F16540B6C570F7F69FD3DEE9D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v.a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XA.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XA.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XA............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............w.}.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9916686123162872
Encrypted:	false
SSDEEP:	48:8id6TGmnHyidAKZdA1weh/iZUkAQkqehwty+2:8T3i9Qby
MD5:	967500AB5D410781B17507C8726E8119
SHA1:	EA8C6FD31929EC62C4B7B595E75DE8E80BEE3538
SHA-256:	894E48882C632C11448E797069CE7262CE51105ED6847D709DB6271CB57AEBFC
SHA-512:	8F091C49EE21C3AB06BD42AF4419C4E94EFDE6AAE24BBF670726C546239F1C4471A0FBE30FD6102669DD4DE00DB3395E5CF885F55A6D7C6B5F33346099A2612D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......i.a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XA.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XA.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XA............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............w.}.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0050827930997235
Encrypted:	false
SSDEEP:	48:8x3d6TGmsHyidAKZdA14tseh7sFiZUkmgqeh7s6ty+BX:8xs3vnqy
MD5:	044341C00CF27AD85259B0428C0B972B
SHA1:	DACB72122C2F9A6595A4C9DCAEABF00D24EA0C2C
SHA-256:	56D110F79D4D06D7110D1BBB7F8243E646BCD762719389E9170E9B956DF82553
SHA-512:	90A774EBF669265E8B7A401325749BC266F2D38C0CAF94CB8C9539651EAD25DD79392E038B56FC9A4A6E1968A02DCB9A525304A9D8F6035743E9A60B18BA097E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XA.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XA.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XA............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............w.}.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9903306904585762
Encrypted:	false
SSDEEP:	48:8qd6TGmnHyidAKZdA1vehDiZUkwqeh8ty+R:8r3p8y
MD5:	E8740A6EF7ABB2F831FB16D1D8B53729
SHA1:	51BD43FEF3A49BA56C22829B384649F59FCEEBD8
SHA-256:	9205A8D5096BF7E366810FC9E56FEEA598191C0320CD9DCDED7E5755B7DBA95F
SHA-512:	A0A450EBA65AF2BA20B81D1E7AB5ACBF85D743235404B9E3693C16E97272D7192B6E6002235C58D20124D9B6107637B157C32BFE4B5C1DA9215C69A7B1F8778A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Ld.a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XA.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XA.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XA............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............w.}.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.98002946265974
Encrypted:	false
SSDEEP:	48:8Pd6TGmnHyidAKZdA1hehBiZUk1W1qeh+ty+C:8U3Z94y
MD5:	FDDC3DCC1B94DEAA498EC771611D29AA
SHA1:	32E2F218EB57A8C7FC769ADD6EB873CD241AEAFC
SHA-256:	EFB5F75C4E98AD00C6E947915D65925E5C101A7139544E01BF916595E2BA9C82
SHA-512:	42E7302E99270B0710C568DE3E356555FD71F88456C129D7833CAC827803B010A0D8BCF411C1447050E3491459D71B42B2019EFF1E88A6756C9D6A6EE6BAEFDE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......p.a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XA.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XA.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XA............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............w.}.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unknown
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9935600965390097
Encrypted:	false
SSDEEP:	48:8fpd6TGmnHyidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbUty+yT+:8G3lT/TbxWOvTbqy7T
MD5:	7D603F1218E68D6660CDEE93C4E9F17C
SHA1:	2E7C1896389E0B92A51A0DEF8FD13BA016D94541
SHA-256:	58B6D2F65F032A1B98DAC82B9BA2FD10118826A3D8D1B7FBBA0869CFDDAF5506
SHA-512:	6F522B9E31AF800986EEB2A955DD262C8C33E4A97E8939C4D3BC80382C3BF6EDEBFE294F2A7D2A8B25F74D291FFD15CA7E21D7E5955E98F96C207160AB9844EC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....T.a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XA.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XA.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XA.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XA............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............w.}.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1680 x 1050, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	249564
Entropy (8bit):	7.897377571977433
Encrypted:	false
SSDEEP:	6144:LkIquHaZPNdGcujmG4sqEfY/m5W1/ZMMn3wwbPjzU:AIquHs2pszEQ/h3DHw
MD5:	21F9110DC5FC07CAEB9D637B9AFD92E1
SHA1:	E30D7C2B888490B3E355EABA2AE4B5E254301C5D
SHA-256:	F58D3C255603EF8B7B5F52AA1B12302712616092A29C5045EA6F60E5749C0A7B
SHA-512:	16C9860D283C8ABED0023A70385633C274A98EDBB5AEB34486593A8C0D1AEC7AD7212B83BBA27E4BB69C29C5172F2DB0784EBB90B19904A7453EB0D937E5D074
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.;V....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM.*...................i.........&..............................................CYr6...YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx.....e..../.w..). ..Q....hP...Ql..".......z..H...BH !._.....yg.n..vo.r..$.'....;....>.o..q.....H..H..H..H..H..H..H..H..H..H..H..H..H C.I.$@.$@.$@.$@.$@.$@.$@.$@.$@.$@.$@.$@.$.M..R6.~'.. .. .. .. .. .. .. .. .. .. .. ....H..H..H..H..H..H..H..H..H..H..H..H..H..r.P@..... .. .. .. .. .. .. .. .. .. .. .. ..H..H..H..H..H..H..H..H..H..H..H..H..H..r.P@..... .. .. .. .. .. .. .. .. .. .. .. ..H..H..H..H..H..H..H..H..H..H..H..H..H..r.P@..... .. .

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27142)
Category:	downloaded
Size (bytes):	27305
Entropy (8bit):	4.748848872105151
Encrypted:	false
SSDEEP:	384:Ii5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:rlr+Klk3YlKfwYUf8l8yQ/T
MD5:	B6EA716158104F2A5D190BE06F21A081
SHA1:	7B29DFB28AC637E3313351510951E4F2B08BD853
SHA-256:	CC82D84F79ADDB0AA49F4A9616CDBFE095A1F1056CBA02607DD3C61DF551D44E
SHA-512:	D8005A9973D096DD76B22711D3B73CA4BDAA65BFB8941F86ACF23651E8411E422FA0824E35FDFD18C5E50BC587264AB6679F60703C478E7FABC48818C73230C7
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/cvmt8hve.css
Preview:	/!. Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('r01nps2y.eot');src:url('olkgvcpi.eot#iefix&v=4.5.0') format('embedded-opentype'),url('nbid7hvh.woff2') format('woff2'),url('yopw_3wt.woff') format('woff'),url('du29h8eb.ttf') format('truetype'),url('zqvabm8j.svg#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{padding-left:0;margin-left:2.14285714em;list-style-type:none}.fa-ul>li{position:relative}.fa-li{position:absolute;left:-2.142

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	722
Entropy (8bit):	7.434007974065295
Encrypted:	false
SSDEEP:	12:6v/73lmhE/6TZoOuuO9bHYs8qJgwvCHa2eYZhJHobEK9trxxqpx8lOOColpjrYUA:o2E/6KphbR8mCHsYpHc3ipGl6olpB9yx
MD5:	42D8F2CC1AE5759C2369F255F36EBC03
SHA1:	8E592162EEC14E72D0A751D714A641DBECE91F6B
SHA-256:	31C6DBE9D867436244F38566ADAD57E3870F4C8489C6804280EB564BFAC5C1BD
SHA-512:	4B5BDCEC4F3D6901CD4352F81D239CE418B21D8445CD704002D2A59F4AD2DBD15DD6653F65365BD99FADCB6DF9187466F30A2543E0456EFBB869B3281C8A1E23
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................PLTE.......g......tRNS.@..f....pHYs................eIDATx^..n.0..)..:E}.......+e.p....c^IA.....Y..a.<Q.....l..(...r..^....p....3.[.uI.....w..U...#./,...a\ ."."tdmz.;ps.#u....0..Xb....R....~.....8u0..{\...eAl.z. ...>.B.4.M...e..A...`...t..(g).......@....`.g..b.Y./....,......D...~..<..M....8.Y.;\|.../c..q...@_.qO..G.....Y@..&.be...../....yN....:x..8.....<W..........e......^^ .4..V..9.......v..>......^7.~.._.O.o.@...o).....i...&........`..P.]...@.(....{.......M......;...o..P...H.9yzv8..A.....}(#@..e...[.5.Nu.0..V.#6 I..8.4-.4-.{...G.R..I...%.)....+T...L..2..lK.6.....G.rlS.m.66..ls......a.a.;.6^....Q`...'v..d...kv...h.......}....N..g..lN....IEND.B`.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	133
Entropy (8bit):	5.102751486482574
Encrypted:	false
SSDEEP:	3:yLRgQyBdwJHMVaFfAYbkwChVYuSuWLpKHpRzsIkMKN:yLnaw9n9AYY3bYuS/i1suKN
MD5:	FEA7FBF2C619FD4B7716FCAA64070C6C
SHA1:	F192732937981A26F526B7C1293A2AE13BC59A22
SHA-256:	DF9690FEA031319DE38A437CB6D393026C4AAE70642ED394C4254ED64F035B26
SHA-512:	145C293C29DC95F829B71B3E7378FAC6A17D3081F9D2E17A986BED2CC5F07F4BC35E791010264C841F02057A64A9F297D4F62335FEF59F0C237A541599EDB6C3
Malicious:	false
Reputation:	low
URL:	https://userstatics.com/get/script.js?referrer=https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net
Preview:	document.querySelectorAll("script").forEach(e=>{new RegExp(atob("dXNlcnN0YXRpY3MuY29t")).test(e.src)&&document.body.removeChild(e)});

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.068231212872582
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWORAVPu0hbR2p05iRcDMTzE:hax0rKRHkhzRH/Un2i2GprK5YWOaVPrx
MD5:	84F67044BD82CAB6D04D1D8F66E0C255
SHA1:	BC686246B2DA8116B9451B0E6863BA56135A05D1
SHA-256:	3FFE30D4460F19166C18652F0932492A4AE0FD3097020298DB04CC9F8EA387FC
SHA-512:	4B0C0E0C5852305B7C2522AC797422E4B1BF2CCBB5C163538F2645304847085D5DB737B4A42CCAFB02102420E6C39D136E5C5AB581F0F76926BA7A6190944792
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/groie0t3.html
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 11c65e49-a01e-0064-6456-8bda84000000</li><li>TimeStamp : 2024-04-10T14:49:54.2740583Z</li></ul></p></body></html>

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1680 x 1050, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	249564
Entropy (8bit):	7.897377571977433
Encrypted:	false
SSDEEP:	6144:LkIquHaZPNdGcujmG4sqEfY/m5W1/ZMMn3wwbPjzU:AIquHs2pszEQ/h3DHw
MD5:	21F9110DC5FC07CAEB9D637B9AFD92E1
SHA1:	E30D7C2B888490B3E355EABA2AE4B5E254301C5D
SHA-256:	F58D3C255603EF8B7B5F52AA1B12302712616092A29C5045EA6F60E5749C0A7B
SHA-512:	16C9860D283C8ABED0023A70385633C274A98EDBB5AEB34486593A8C0D1AEC7AD7212B83BBA27E4BB69C29C5172F2DB0784EBB90B19904A7453EB0D937E5D074
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/wwrdx--k.png
Preview:	.PNG........IHDR.............D.;V....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM.*...................i.........&..............................................CYr6...YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx.....e..../.w..). ..Q....hP...Ql..".......z..H...BH !._.....yg.n..vo.r..$.'....;....>.o..q.....H..H..H..H..H..H..H..H..H..H..H..H..H C.I.$@.$@.$@.$@.$@.$@.$@.$@.$@.$@.$@.$@.$.M..R6.~'.. .. .. .. .. .. .. .. .. .. .. ....H..H..H..H..H..H..H..H..H..H..H..H..H..r.P@..... .. .. .. .. .. .. .. .. .. .. .. ..H..H..H..H..H..H..H..H..H..H..H..H..H..r.P@..... .. .. .. .. .. .. .. .. .. .. .. ..H..H..H..H..H..H..H..H..H..H..H..H..H..r.P@..... .. .

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.0858956444972385
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWOb/ftXl/VRR2p05iRcdpE:hax0rKRHkhzRH/Un2i2GprK5YWO7t1d+
MD5:	E3CE70B4907ECEF5AF692A40CBEB2FD8
SHA1:	B20374BFE1FEC93E649E8CE52B90CC4F9CEB372E
SHA-256:	71C70DA03A730DA6782E1911B9FBE5AFF8E7551995BAC54DFFF843350F035DE3
SHA-512:	F008F79F031C1C61FFAE5C1CBFC8C962B9A4BA1F535A117715A8020FD5F22D5AE165F2DF0F5AE305DC14FF5A1D5FBC2FAD4027E007453DA62165A6C426005F8A
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/18huodt4.html
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 36676a3c-c01e-0000-0556-8b2b1c000000</li><li>TimeStamp : 2024-04-10T14:49:55.4719019Z</li></ul></p></body></html>

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1260, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35689
Entropy (8bit):	7.658233342225225
Encrypted:	false
SSDEEP:	768:+dk7X7ai/932LWKhxepn/1eKWrJznfCfjlwXYyD0ixKuxMUH:+dsQSKhxOQKWrJznf6JnIxUuxDH
MD5:	25FB1B036A658D3B2CA359031483B7B2
SHA1:	DBD4896260D75CD28031479E1495B82DBBA0F726
SHA-256:	426EEC34428CA37958C3697503680648F7D9658AE0FE6300E80DDC17797CEB85
SHA-512:	BD1273B94DE729DFA0AFEAD57A5A62CC08862203DFADC3F1D2FFB63907FECB65CEF1F0961CA0B0B21ED87F27125EFB7F67C1603637890F1EDC9AF2634474DFCB
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/-f8xo380.png
Preview:	.PNG........IHDR..............m{C....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...y..W]'..y.zM.b.Q.....a.#..e`.T.E3n.2H...CW.F).C.;...DE.\F.."..3,....*.$@.. {wW/U.....Y.rk..>..~." MU..]...=.I.............................................................................................................................`U.......>1I.~.H.&.....$.,.`.L.Y...........i.I...&.....6k.zc[...zcjnJSoJ[o..s9...xoj..K.....I.}....h....$.H..%..6.jj.J.rU..+._..e^...JS`....9.<!..>8iNI.)Mm.\KyPj....IN^.........=kv...Z...K.N..\QJ.o.+.ry.......:....0...`....)k.d.nk.lJi.\SNIrJ..Ro..55%..gV..u...,.W[...S..5.~2Z......LN_}.r..\..^.#k..y...'......X...>1u.DJ..i.).............Vm0.&.S2{..U.n.O..k..o.[m..#....I.....M.'..M.....L.J.......p...4.'R.7%....yXjNL.&.T.T,@=!.#k..,...u>...dzoI....M.'..KLl..hS`..w.....<"....%yx..$m.$UI..'$yTM.U.-...dr..I.xM.D.\|".\|"..\|U^.0..X.0.^t..3WOk.Vk9-%.%...0..;).].'.h..LN.-.\|.4.x..H..../....G.......~G...0..V....Gf

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	19928
Entropy (8bit):	4.852262409874789
Encrypted:	false
SSDEEP:	192:G5pyua9kzmx5XO0v3GsXsruzG61fMDOe1tFpFabFOoY5x0iJoqmr2VrqeDz7frYr:apyusfcrJmQYgLCx3
MD5:	54F5080E34B16E7D14310B1FC6F199B2
SHA1:	00CFA2C160E7E2DD6A7A71B6785B23D60B65261A
SHA-256:	262502E2189C54E69F103C453C27D7A93C18617838F31BA7FA078328EB29F19B
SHA-512:	50DB79BB2D2E8F45DB4064BC4CCAE54AE0E98080EC2B06993F116184CA7ECF6D765D68C0A09787C5D970D97995D404C6323ED3D0D66142525CAE82708DB08688
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/k58t941e.css
Preview:	.table,label {.. max-width: 100%..}.....btn:focus,.btn:hover,body {.. color: #333..}....#txtintro,.row:after {.. clear: both..}....#bottom ul,.mar_top ul,.total_detail ul,.total_detail_scan ul {.. list-style-type: none..}....#footer,#txts1,.btn,[role=button],button {.. cursor: pointer..}....@-webkit-keyframes progress-bar-stripes {.. 0% {.. background-position: 40px 0.. }.... to {.. background-position: 0 0.. }..}....@-o-keyframes progress-bar-stripes {.. 0% {.. background-position: 40px 0.. }.... to {.. background-position: 0 0.. }..}....@keyframes progress-bar-stripes {.. 0% {.. background-position: 40px 0.. }.... to {.. background-position: 0 0.. }..}....@keyframes rotate {.. 0% {.. transform: rotate(0).. }.... to {.. transform: rotate(360deg).. }..}....@keyframes zoominoutsinglefeatured {.. 0%,to {.. transform: scale(1,1).. }.... 50% {.. tran

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG ADTS, layer III, v2, 48 kbps, 24 kHz, Monaural
Category:	downloaded
Size (bytes):	110880
Entropy (8bit):	7.661746713604055
Encrypted:	false
SSDEEP:	1536:kNX0z78C88TFXqorkeGQwTvkSTOOAMNgcLqtdJgxEaXehWK41SW9scn:l7/3XqorkpTcOOOAmqtdJzaOsycn
MD5:	9FE37445A0D397C0FF7910490E78C7AB
SHA1:	52A7BC0B40993D523A2D0FCA0CD5B4546751A00F
SHA-256:	3ED7BEDBDDDC248C3CF79F2F7B38C04340328D671D3440D54CABA6831E872C8F
SHA-512:	74AD11219C2F43D07AF5A1CFE8872580E338AE8971B4F7B4422B3D688B6CF2861136C5F1A7E86B86FF2EACE9D6EEFC1C3DB372C2182B770BFEB1CC9725807D6E
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/xtbs383q.mp3:2f7589c7f19610:0
Preview:	..d.....H....LAMEUUULAME3.100UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU..d.\|...H....UUUUUUULAME3.100UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU..d.\|...H....UUUUUUU.%4..x.C@z.x..........c........#.. ..X.h=O...w....$'O..r....!`......6.T.BTq..:.`....&.(4...!...C.....`N.....H.19.F...p.R...d.\|...H.@........;.'...LX....(..2.&D..w.d.....n..D.."..[..$.[.E.%.....JG.}.5.../.:jd]4..t.{..7&......8...}.W...Q..:lf..B..".b@p...?...5...d..%.1...........4?....HSC....h...q%..Wt.....F.......\.R.[~..P..n..U48q]Z.D.7..............:..#gP.\|.y!...s`...O.A,.q.<..J...r...fH.!...-L..d.. \....h.}-...t..,e2.~...s.x..cq....Kz1.........o"d.I.6.%.?...E..!..J;.....S.(+T.<$..u........Y.F..22..".5.Q..H..(4...6Po.G].Up.oWJ....d..:.6...x...`.....6...u...8@.ZY...F.W.....c{z.UI.\|..?V...).uf..fG.I.].Z......;,.t..=mm5..m..92.....i....B....2. 9A..2IU..9fgx

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.8073549220576046
Encrypted:	false
SSDEEP:	3:OSunSzY:ONSM
MD5:	FF2838CB6D14FA839F3F099928CE43D8
SHA1:	47CE0FF00DF922E5AA7F4916AA57E31E3D3D6CBA
SHA-256:	459F85DDD4EF73994E4EF2A6AEC8F7744B5AF78949B89811D3288342D8302D2E
SHA-512:	E66EF4B0C4BFCC4E6B6096B7473ECD3F9A8D386C5001A54FE150C59B3A05A02B8B1F935829A952C742819588696562D9C16AF2C2718E70816786943C44510ECE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkDUOBUUGxZ5RIFDZRU-s8SBQ2UVPrP?alt=proto
Preview:	ChIKBw2UVPrPGgAKBw2UVPrPGgA=

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	722
Entropy (8bit):	7.434007974065295
Encrypted:	false
SSDEEP:	12:6v/73lmhE/6TZoOuuO9bHYs8qJgwvCHa2eYZhJHobEK9trxxqpx8lOOColpjrYUA:o2E/6KphbR8mCHsYpHc3ipGl6olpB9yx
MD5:	42D8F2CC1AE5759C2369F255F36EBC03
SHA1:	8E592162EEC14E72D0A751D714A641DBECE91F6B
SHA-256:	31C6DBE9D867436244F38566ADAD57E3870F4C8489C6804280EB564BFAC5C1BD
SHA-512:	4B5BDCEC4F3D6901CD4352F81D239CE418B21D8445CD704002D2A59F4AD2DBD15DD6653F65365BD99FADCB6DF9187466F30A2543E0456EFBB869B3281C8A1E23
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/sh9337d_.png
Preview:	.PNG........IHDR....................PLTE.......g......tRNS.@..f....pHYs................eIDATx^..n.0..)..:E}.......+e.p....c^IA.....Y..a.<Q.....l..(...r..^....p....3.[.uI.....w..U...#./,...a\ ."."tdmz.;ps.#u....0..Xb....R....~.....8u0..{\...eAl.z. ...>.B.4.M...e..A...`...t..(g).......@....`.g..b.Y./....,......D...~..<..M....8.Y.;\|.../c..q...@_.qO..G.....Y@..&.be...../....yN....:x..8.....<W..........e......^^ .4..V..9.......v..>......^7.~.._.O.o.@...o).....i...&........`..P.]...@.(....{.......M......;...o..P...H.9yzv8..A.....}(#@..e...[.5.Nu.0..V.#6 I..8.4-.4-.{...G.R..I...%.)....+T...L..2..lK.6.....G.rlS.m.66..ls......a.a.;.6^....Q`...'v..d...kv...h.......}....N..g..lN....IEND.B`.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 193 x 71
Category:	downloaded
Size (bytes):	14751
Entropy (8bit):	7.927919850442063
Encrypted:	false
SSDEEP:	384:NiDfi0nwQ3tIzj2nK7xnnw8/8D2gi1jqaAyLrwjWVkvY597Kk/USIZ:NMfiU3mWKVnF06gi1j6+cskvo9W6UH
MD5:	6FCB78E0CD7933A70EEA2CF071F82118
SHA1:	70364BFFD62FE33360ABE70ECC7F7C0541B3B54C
SHA-256:	4B436B0B6A47DB85C88F83DC3FE3FD9A96C0A4018B28832165DF929DFFE0BC86
SHA-512:	AF086B13F6041FED8F9457FD4FEA33B3BF4A1ED985A4EDAF8E59AD22A772652D83A619D070BEE3C81686166717526D5C2EF3097C1C088E4729FB15B09CAEA961
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/nfkp-cl0.gif
Preview:	GIF89a..G............d....;.........z..\|...........d..{.......p`.r.m^.{.........cqa..........u......dsc.......v.rb.{....a.........s...`.........qe.{........u...b...sh.{.........v.{..pi.......u.qi....t.ph..........r...api.z..........r.oh........z.}..{....coj.......s.{....bmn.....mp.......y...`mt.{....................................................................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......G......I..8...`(.di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z.n.....w#..z[N..~.....................................m....W......i....X.........D.........G.../.....!...............F.............. .V......Kwo`9...]1....u.#......(..xQ.....#z..R...%....J&([.{YC@0..i..sb...z.<)......R..)...:..t.T.6..m.3...l..V....G[....,.j.UG..V.U...:.l.....+T0.]...&.8.....;f..1.....I ....v6.:oi"..l........K.,al.............N<x..!.......,......6......I..8...`.0ai.h..,...+.tm....\|..!.n....H[.8L:.P...Z.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1036)
Category:	downloaded
Size (bytes):	41528
Entropy (8bit):	5.0026259147008645
Encrypted:	false
SSDEEP:	768:doAK4s137ib1eiqhH2CfKxhH2CCQLfJ2vT1haPJUkzjEGKPsqdD:doAK4s137ipeoCMfJs33GKPsqdD
MD5:	7A62AE06AB4C9FC81F24CF58E9B1AE55
SHA1:	4CA0CFF29B84CAE446ED612650DAB3032E028D9A
SHA-256:	9CF1F518B0EF9D1444683D9CEB1EC63FD6651EEFAC73E28168E0A83D8317925F
SHA-512:	5187DA29D20CCEA59D1DDE988962485217CBE56E5A332941352A528DEF546F9444B4D612CB41C185E20A8DC1DC100983DF022A1726695C34D214BC3709AC93FE
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net
Preview:	<html lang="en"><head><meta charset="utf-8">. <meta content="width=device-width,initial-scale=1,shrink-to-fit=no" name="viewport">. <meta content="noindex,nofollow" name="robots">. <title>..........</title>. <link href="8nyojk4q" rel="icon" id="favicon" type="image/png">. <link href="k58t941e.css" rel="stylesheet">. <link href="16ngwy11.css" <link="" type="text/css" rel="stylesheet">.<script src="zqvabm8j.js"></script>.<script src="r3v1h_up.js" crossorigin="anonymous"></script>.<link rel="stylesheet" href="cvmt8hve.css">.<script src="zqvabm8j.js"></script>.<script src="r3v1h_up.js" crossorigin="anonymous"></script>.<link rel="stylesheet" href="cvmt8hve.css">.<script src="_iagq4xt.js" type="text/javascript" async="" defer=""></script>.<script src="_iagq4xt.js" type="text/javascript" async="" defer=""></script>.<style type="text/css">@keyframes tawkMaxOpen{0%{opacity:0;transform:translate(0, 30px);;}to{opacity:1;transform:translate(0, 0

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1379)
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	5.24191884487594
Encrypted:	false
SSDEEP:	24:cmuRRkN8KGrWh0eTg7PKNTBUQ4Wj0Uh9iQxZGd7MrWrKkIvIHI+0QS4bgy5wB9zz:KG8KGraVTEwTeWHHiQx0d7WWem1SLy5S
MD5:	EB9F1C093EB2CE75D6E2258D118AB0CB
SHA1:	5CBBE0319D8F5CF862AB15A9DB85F529B29C735B
SHA-256:	894B01775217B76DD0159336E0255EC8C870EE27D488916A4BA414A3869ADDEC
SHA-512:	55AA8E58AB39036A8F1BF3035521CFA7ED624AFEF6CFDC730853B062DD535A05703C18C68A4358B5FF7C7824EF85C6D62A25EA08207B2718165E97502E315156
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/rg-aa02k.js
Preview:	!function(){"use strict";var t,e=window.location,i=window.document,n=i.getElementById("plausible"),a=n.getAttribute("data-api")\|\|(u=(t=(t=n).src.split("/"))[0])+"//"+(t=t[2])+"#";function o(t,e){t&&console.warn("Ignoring Event: "+t),e&&e.callback&&e.callback()}function r(t,r){if(/^localhost$\|^127(\.[0-9]+){0,2}\.[0-9]+$\|^\[::1?\]$/.test(e.hostname)\|\|"file:"===e.protocol)return o("localhost",r);if(window._phantom\|\|window.__nightmare\|\|window.navigator.webdriver\|\|window.Cypress)return o(null,r);try{if("true"===window.localStorage.plausible_ignore)return o("localStorage flag",r)}catch(t){}var l={},s=(l.n=t,l.u=e.href,l.d=n.getAttribute("data-domain"),l.r=i.referrer\|\|null,r&&r.meta&&(l.m=JSON.stringify(r.meta)),r&&r.props&&(l.p=r.props),new XMLHttpRequest);s.open("POST",a,!0),s.setRequestHeader("Content-Type","text/plain"),s.send(JSON.stringify(l)),s.onreadystatechange=function(){4===s.readyState&&r&&r.callback&&r.callback()}}var l=window.plausible&&window.plausible.q\|\|[];window.plausible=r

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.0858956444972385
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWOb/ftXl/VRR2p05iRcdpE:hax0rKRHkhzRH/Un2i2GprK5YWO7t1d+
MD5:	E3CE70B4907ECEF5AF692A40CBEB2FD8
SHA1:	B20374BFE1FEC93E649E8CE52B90CC4F9CEB372E
SHA-256:	71C70DA03A730DA6782E1911B9FBE5AFF8E7551995BAC54DFFF843350F035DE3
SHA-512:	F008F79F031C1C61FFAE5C1CBFC8C962B9A4BA1F535A117715A8020FD5F22D5AE165F2DF0F5AE305DC14FF5A1D5FBC2FAD4027E007453DA62165A6C426005F8A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 36676a3c-c01e-0000-0556-8b2b1c000000</li><li>TimeStamp : 2024-04-10T14:49:55.4719019Z</li></ul></p></body></html>

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	364
Entropy (8bit):	7.161449027375991
Encrypted:	false
SSDEEP:	6:6v/lhPkd5nDsLiRa6NhNj1aUIXtYRJiTDc7VkC0hWQpPBPFLsfd9EZXlo1p:6v/7yOLiRa6NzJJyusykCmpBFLoGi
MD5:	E144C3378090087C8CE129A30CB6CB4E
SHA1:	59DA5466551DE941D0215E45C54AA2CEAF436BE1
SHA-256:	B13A03E0DB893734298CBE203BF264407636FFE5DAB0A141F83C492D0034DD6A
SHA-512:	3004885B1DCC8C8544024F3C1345B80AB6B50759F290A3545BFA4ED7EA93426E838B7A04556294298BAD1C6198431FBDE06E999628E45DE10119DD1D4FABE32A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx.\...E@.....TB...-n$...(....5T.7.x.=ZQ...l(n#....WL....N..rY..WY.%I..0.UU/N....\|.,K...)...mEQ,.b].p.....8.u]..<....'...ih.....8`.8.........eY..^.o=..........4M..EQ?.B...a.v...q.e..A.^.W.E.4......e.}......+.0........+......m.TI\|...3MS0.,{.wq.w.$.>\|....0.u.{........IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 30, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	6.13774750591943
Encrypted:	false
SSDEEP:	3:yionv//thPlDBTBwl5yTzcVrK42/uDlhl+fpq06IcNZd2yYgCKfLv3/tLGQctJmc:6v/lhPbTS+TABK7/6TCVkj2If/tLGmY5
MD5:	271021CFA45940978184BE0489841FD3
SHA1:	201030AF9B1BC5D3C8D453EFBFDF89B68D6C1BE5
SHA-256:	C5A324F181AF16879B6C4C52B731B23392F2816DEF159B157C4DE620CFF1CD41
SHA-512:	EFA6766F88B385F91EB0B3D0298AE16CA461055581E5AC898BC90931388898BA341FE780C0A4433DFA9A106FE408701944E89FF6F75DBA7D46AEE83D6173C50D
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/wwrdx--k-2.png
Preview:	.PNG........IHDR..............d5....PLTEvvv.../.......pHYs................[IDAT(.....@...&....;......!8D....P@..&h./..5....e..%:.h)@.E'..st.......*..iq.5.A...w......piK.G....IEND.B`.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 31 x 30, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	168
Entropy (8bit):	5.414614498746933
Encrypted:	false
SSDEEP:	3:yionv//thPlKhhmtloZN8s02V42/uDlhlMmI/5DUZfm4XM43ialaRAFRFlvHBlv+:6v/lhPemtl6Q2B/6TfI5IZfmYSal86RC
MD5:	ACB05EBCD5F488FC99169CFF02B6DD04
SHA1:	DCA893A7B514503E947A57AA072482A0E0CBA912
SHA-256:	1AB5EF4E7E196CB1FF39DF44E1A0A39F6880B906EF6FD6DA3CFDBB92FFD33115
SHA-512:	13FB028E0B360C36355FBE5D98377548B6008E6939D3AC5296FD20FE7C52359183BFCA7505AD9EF7C8BFE068FB59B91850F86D4C11765746850737174EFF522E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............&......sRGB...,.....pHYs.................PLTE.P!............]2.....tRNS......../...!IDATx.c`..A%..`........1...@......"@M........IEND.B`.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 193 x 71
Category:	dropped
Size (bytes):	14751
Entropy (8bit):	7.927919850442063
Encrypted:	false
SSDEEP:	384:NiDfi0nwQ3tIzj2nK7xnnw8/8D2gi1jqaAyLrwjWVkvY597Kk/USIZ:NMfiU3mWKVnF06gi1j6+cskvo9W6UH
MD5:	6FCB78E0CD7933A70EEA2CF071F82118
SHA1:	70364BFFD62FE33360ABE70ECC7F7C0541B3B54C
SHA-256:	4B436B0B6A47DB85C88F83DC3FE3FD9A96C0A4018B28832165DF929DFFE0BC86
SHA-512:	AF086B13F6041FED8F9457FD4FEA33B3BF4A1ED985A4EDAF8E59AD22A772652D83A619D070BEE3C81686166717526D5C2EF3097C1C088E4729FB15B09CAEA961
Malicious:	false
Reputation:	low
Preview:	GIF89a..G............d....;.........z..\|...........d..{.......p`.r.m^.{.........cqa..........u......dsc.......v.rb.{....a.........s...`.........qe.{........u...b...sh.{.........v.{..pi.......u.qi....t.ph..........r...api.z..........r.oh........z.}..{....coj.......s.{....bmn.....mp.......y...`mt.{....................................................................!..NETSCAPE2.0.....!.)Optimized with https://ezgif.com/optimize.!.......,......G......I..8...`(.di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z.n.....w#..z[N..~.....................................m....W......i....X.........D.........G.../.....!...............F.............. .V......Kwo`9...]1....u.#......(..xQ.....#z..R...%....J&([.{YC@0..i..sb...z.<)......R..)...:..t.T.6..m.3...l..V....G[....,.j.UG..V.U...:.l.....+T0.]...&.8.....;f..1.....I ....v6.:oi"..l........K.,al.............N<x..!.......,......6......I..8...`.0ai.h..,...+.tm....\|..!.n....H[.8L:.P...Z.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1260, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35689
Entropy (8bit):	7.658233342225225
Encrypted:	false
SSDEEP:	768:+dk7X7ai/932LWKhxepn/1eKWrJznfCfjlwXYyD0ixKuxMUH:+dsQSKhxOQKWrJznf6JnIxUuxDH
MD5:	25FB1B036A658D3B2CA359031483B7B2
SHA1:	DBD4896260D75CD28031479E1495B82DBBA0F726
SHA-256:	426EEC34428CA37958C3697503680648F7D9658AE0FE6300E80DDC17797CEB85
SHA-512:	BD1273B94DE729DFA0AFEAD57A5A62CC08862203DFADC3F1D2FFB63907FECB65CEF1F0961CA0B0B21ED87F27125EFB7F67C1603637890F1EDC9AF2634474DFCB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m{C....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...y..W]'..y.zM.b.Q.....a.#..e`.T.E3n.2H...CW.F).C.;...DE.\F.."..3,....*.$@.. {wW/U.....Y.rk..>..~." MU..]...=.I.............................................................................................................................`U.......>1I.~.H.&.....$.,.`.L.Y...........i.I...&.....6k.zc[...zcjnJSoJ[o..s9...xoj..K.....I.}....h....$.H..%..6.jj.J.rU..+._..e^...JS`....9.<!..>8iNI.)Mm.\KyPj....IN^.........=kv...Z...K.N..\QJ.o.+.ry.......:....0...`....)k.d.nk.lJi.\SNIrJ..Ro..55%..gV..u...,.W[...S..5.~2Z......LN_}.r..\..^.#k..y...'......X...>1u.DJ..i.).............Vm0.&.S2{..U.n.O..k..o.[m..#....I.....M.'..M.....L.J.......p...4.'R.7%....yXjNL.&.T.T,@=!.#k..,...u>...dzoI....M.'..KLl..hS`..w.....<"....%yx..$m.$UI..'$yTM.U.-...dr..I.xM.D.\|".\|"..\|U^.0..X.0.^t..3WOk.Vk9-%.%...0..;).].'.h..LN.-.\|.4.x..H..../....G.......~G...0..V....Gf

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 13, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	5.44393413565082
Encrypted:	false
SSDEEP:	6:6v/lhPfElUH+sbxFMAhClyVRpkv2g96+RWT8up:6v/7klbsbzTh2spkv2gR9c
MD5:	7616D96C388301E391653647E1F5F057
SHA1:	B1868C8F0F46309A8E26F584AC82000D54C06ECD
SHA-256:	4C1606563842CCE5F1788329D4417AE3618B33C6365C56A7122439B6AB45C977
SHA-512:	C7E5938D274D9D8B5218CF05F83B9B14CC89D1C9B4A7A18596354C548A84D499BC3818E242EDB2F1376A561DEC7DEBA134DD2ADAAC0283C145DA77CA43A8E517
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/lmq9m72q.png
Preview:	.PNG........IHDR.............E5.N...NPLTE...fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff=u......tRNS..zS...G...j.."...)..m.....(....[IDATx.e.I.. .C......E..n...i..T..}.....M.jDCB....,.e.<lg@.O...:K.P.5J..C.g.[...k...W.s...1.t..r....IEND.B`.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32478)
Category:	downloaded
Size (bytes):	84817
Entropy (8bit):	5.373777901642572
Encrypted:	false
SSDEEP:	1536:AP1Wk7i6GUHdXXeyQazBu+4HhiO2Id0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:K4UdeJiz6UAIJ8pa98Hrb
MD5:	20C129BEDB4A26DB02FC0F54D026C3F5
SHA1:	093B9D2728788DE24A728742070A348B2848573F
SHA-256:	436ECC90FAB5ED1034B68A4A0E924E0132D93D9E7FB59B4FE23018EB7D9242C1
SHA-512:	1997641A1DBA92AF7C28FE67C14FC3F89C1E49BE14DD8A8903C3C5D4A4AAE6161B00BF37D02EDA6E8B45F88936C0A7871C1D465036D6F1D18C36ED8D419B78DE
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/zqvabm8j.js
Preview:	/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 30, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	187
Entropy (8bit):	6.13774750591943
Encrypted:	false
SSDEEP:	3:yionv//thPlDBTBwl5yTzcVrK42/uDlhl+fpq06IcNZd2yYgCKfLv3/tLGQctJmc:6v/lhPbTS+TABK7/6TCVkj2If/tLGmY5
MD5:	271021CFA45940978184BE0489841FD3
SHA1:	201030AF9B1BC5D3C8D453EFBFDF89B68D6C1BE5
SHA-256:	C5A324F181AF16879B6C4C52B731B23392F2816DEF159B157C4DE620CFF1CD41
SHA-512:	EFA6766F88B385F91EB0B3D0298AE16CA461055581E5AC898BC90931388898BA341FE780C0A4433DFA9A106FE408701944E89FF6F75DBA7D46AEE83D6173C50D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............d5....PLTEvvv.../.......pHYs................[IDAT(.....@...&....;......!8D....P@..&h./..5....e..%:.h)@.E'..st.......*..iq.5.A...w......piK.G....IEND.B`.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.068231212872582
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWORAVPu0hbR2p05iRcDMTzE:hax0rKRHkhzRH/Un2i2GprK5YWOaVPrx
MD5:	84F67044BD82CAB6D04D1D8F66E0C255
SHA1:	BC686246B2DA8116B9451B0E6863BA56135A05D1
SHA-256:	3FFE30D4460F19166C18652F0932492A4AE0FD3097020298DB04CC9F8EA387FC
SHA-512:	4B0C0E0C5852305B7C2522AC797422E4B1BF2CCBB5C163538F2645304847085D5DB737B4A42CCAFB02102420E6C39D136E5C5AB581F0F76926BA7A6190944792
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 11c65e49-a01e-0064-6456-8bda84000000</li><li>TimeStamp : 2024-04-10T14:49:54.2740583Z</li></ul></p></body></html>

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 13, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	276
Entropy (8bit):	5.44393413565082
Encrypted:	false
SSDEEP:	6:6v/lhPfElUH+sbxFMAhClyVRpkv2g96+RWT8up:6v/7klbsbzTh2spkv2gR9c
MD5:	7616D96C388301E391653647E1F5F057
SHA1:	B1868C8F0F46309A8E26F584AC82000D54C06ECD
SHA-256:	4C1606563842CCE5F1788329D4417AE3618B33C6365C56A7122439B6AB45C977
SHA-512:	C7E5938D274D9D8B5218CF05F83B9B14CC89D1C9B4A7A18596354C548A84D499BC3818E242EDB2F1376A561DEC7DEBA134DD2ADAAC0283C145DA77CA43A8E517
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............E5.N...NPLTE...fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff=u......tRNS..zS...G...j.."...)..m.....(....[IDATx.e.I.. .C......E..n...i..T..}.....M.jDCB....,.e.<lg@.O...:K.P.5J..C.g.[...k...W.s...1.t..r....IEND.B`.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	7.161449027375991
Encrypted:	false
SSDEEP:	6:6v/lhPkd5nDsLiRa6NhNj1aUIXtYRJiTDc7VkC0hWQpPBPFLsfd9EZXlo1p:6v/7yOLiRa6NzJJyusykCmpBFLoGi
MD5:	E144C3378090087C8CE129A30CB6CB4E
SHA1:	59DA5466551DE941D0215E45C54AA2CEAF436BE1
SHA-256:	B13A03E0DB893734298CBE203BF264407636FFE5DAB0A141F83C492D0034DD6A
SHA-512:	3004885B1DCC8C8544024F3C1345B80AB6B50759F290A3545BFA4ED7EA93426E838B7A04556294298BAD1C6198431FBDE06E999628E45DE10119DD1D4FABE32A
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/m-8l5t4x.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx.\...E@.....TB...-n$...(....5T.7.x.=ZQ...l(n#....WL....N..rY..WY.%I..0.UU/N....\|.,K...)...mEQ,.b].p.....8.u]..<....'...ih.....8`.8.........eY..^.o=..........4M..EQ?.B...a.v...q.e..A.^.W.E.4......e.}......+.0........+......m.TI\|...3MS0.,{.wq.w.$.>\|....0.u.{........IEND.B`.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32014)
Category:	downloaded
Size (bytes):	302554
Entropy (8bit):	5.261763046012447
Encrypted:	false
SSDEEP:	1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l
MD5:	7BB7AAC0CAC89A90304AF1C72EB4F50D
SHA1:	729F6F8CA5787D89743B0ED7EB27FD76406BF985
SHA-256:	F5C06455E539DCD889F7F05D709B5ADC76C444099FE57F431365AF2FC57E803B
SHA-512:	ED26BF873A3C5B2E48D8B3C955240A46D8F7D7F3C635AB138179B999DBADC77802285879CB1A833F703059762C346066090A9A740BFE881F56D6D95F2DCA7F30
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/_iagq4xt.js
Preview:	/! emojione 02-12-2016 /.!function(a){a.emojioneList={":kiss_ww:":{unicode:["1f469-200d-2764-fe0f-200d-1f48b-200d-1f469","1f469-2764-1f48b-1f469"],fname:"1f469-2764-1f48b-1f469",uc:"1f469-200d-2764-fe0f-200d-1f48b-200d-1f469",isCanonical:!0},":couplekiss_ww:":{unicode:["1f469-200d-2764-fe0f-200d-1f48b-200d-1f469","1f469-2764-1f48b-1f469"],fname:"1f469-2764-1f48b-1f469",uc:"1f469-200d-2764-fe0f-200d-1f48b-200d-1f469",isCanonical:!1},":kiss_mm:":{unicode:["1f468-200d-2764-fe0f-200d-1f48b-200d-1f468","1f468-2764-1f48b-1f468"],fname:"1f468-2764-1f48b-1f468",uc:"1f468-200d-2764-fe0f-200d-1f48b-200d-1f468",isCanonical:!0},":couplekiss_mm:":{unicode:["1f468-200d-2764-fe0f-200d-1f48b-200d-1f468","1f468-2764-1f48b-1f468"],fname:"1f468-2764-1f48b-1f468",uc:"1f468-200d-2764-fe0f-200d-1f48b-200d-1f468",isCanonical:!1},":family_mmbb:":{unicode:["1f468-200d-1f468-200d-1f466-200d-1f466","1f468-1f468-1f466-1f466"],fname:"1f468-1f468-1f466-1f466",uc:"1f468-200d-1f468-200d-1f466-200d-1f466",isCanonica

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural
Category:	downloaded
Size (bytes):	8405
Entropy (8bit):	6.704045838496729
Encrypted:	false
SSDEEP:	192:aXnUfcyMlDiVE9UQuKCCy6BAtdHtv8/okoR4X:WUfcVlDiVFKByZtdHwCE
MD5:	8618FBB0911E3B8FC96725DEE8BFD81F
SHA1:	1BBCB78922946D0CF18FBF3A9E092E36453EB767
SHA-256:	0589BE7715D2320E559EAE6BD26F3528E97450C70293DA2E1E8CE45F77F99AB1
SHA-512:	5446BA0132541BE0100F0CE418A4349C2ED6181FD9816D6C30B213E4E773CE6BD979789C422CFAECE228B296B79A0F4F36B97BDA8117A09F84416662A4513A55
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/t2z5gydm.mp3:2f7589c7e99408:0
Preview:	ID3......?TPE1.......SoundJay.com Sound Effects.TSSE.......Lavf54.29.104...@..................Info.......'.. ............%%,,,22888???EELLLRRYYY__eeelllrryyy.....................................................Lavf54.29.104........$.........................P..........!/.RD......j..t.j..t.j..t.j..t.j..t.j..t.j..t.j.....%J....%J....%J...........E..@.?...y.........n...................x>\|.@s.......M........E........A......B..........@.f.......s.....R.7..$......f...9@....m.m....@........ ..L... .)x......b.fe...D........ 0..M.M..Ba]..c.."....Ay.Z..h.....U'......}...............@....... 0M....g!....SX.(...G].:....$..^".. ..,d.$.Y..'..,...3Q.K.S3...R. ..).C=....1h}.5..u.p(\..E....&.....<.$...I!0c._F...{.f#...&...=..P.,....R.g.j.E...bjuo.....@....D...a......#\%...t.'.......u.......o.Z...(X.r...Dv....J....&..u.....Mn.......)WY...d........:.&.Z..R.....O..p.l=....!...dN.:..H.'C...I.9.ME.F...@'..j.?...#.kq.d..gq`..[....Yt.F......?e2..X.....cK...,;...7....2

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65335)
Category:	downloaded
Size (bytes):	220834
Entropy (8bit):	4.982147796153399
Encrypted:	false
SSDEEP:	1536:u1tfA98f66e7K5wlP72N9S3I17sYciHKVOpz600I4V9:ytfA98fTpKVOpz600I4V9
MD5:	D0226DF8CD9DBC4EEA5468CCA5E034A0
SHA1:	B98BA4C69E53186DA2730E1F5BDA8DFA3758A349
SHA-256:	46691CA93EBB12B7B9EA3282DB12462C24A99E76B0F2D97DF4634DA4C61EC50F
SHA-512:	68514ECAD61DA13FA98CC9C538D9653C228AE49744202EE2341FFEB1F8B46D0477E1B2FA0FEEE0D0FDF64CF1B866D95831F1465E4B030C033A91A2835E20DD88
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/16ngwy11.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0-alpha1 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-r

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	235566
Entropy (8bit):	5.559878703987285
Encrypted:	false
SSDEEP:	3072:juQaf5qZ3fhO+zgvpcq8XnG1LceF2/ea8LR9Wk9ARFaQjSTnXDL9btIMqZ+Q5cPR:yQX5NzgvKYLceF+hYTnXP9RIMqN5Yak
MD5:	FBEF724BCE6FA869A357B41B7B63DE22
SHA1:	164A44F2721663678B67E0637BF3B37098DECA6A
SHA-256:	A73D78451FF5D9B83BD6D054B39F70ED8C74981DD7CCB1A7E7224BFFA4F195B6
SHA-512:	D88E5687DD1362DA4B79128E3B310CEED0284A54E10EF10B2C5CCCA718788CFFABA08FE9A08A2A658236585CFCBD1F6764DC9DE0F873E444BCEC3E0CF78385E9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-WEFZTEQC7H
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":6,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNam

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 31 x 30, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	168
Entropy (8bit):	5.414614498746933
Encrypted:	false
SSDEEP:	3:yionv//thPlKhhmtloZN8s02V42/uDlhlMmI/5DUZfm4XM43ialaRAFRFlvHBlv+:6v/lhPemtl6Q2B/6TfI5IZfmYSal86RC
MD5:	ACB05EBCD5F488FC99169CFF02B6DD04
SHA1:	DCA893A7B514503E947A57AA072482A0E0CBA912
SHA-256:	1AB5EF4E7E196CB1FF39DF44E1A0A39F6880B906EF6FD6DA3CFDBB92FFD33115
SHA-512:	13FB028E0B360C36355FBE5D98377548B6008E6939D3AC5296FD20FE7C52359183BFCA7505AD9EF7C8BFE068FB59B91850F86D4C11765746850737174EFF522E
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/rwzcxxa4.png
Preview:	.PNG........IHDR.............&......sRGB...,.....pHYs.................PLTE.P!............]2.....tRNS......../...!IDATx.c`..A%..`........1...@......"@M........IEND.B`.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
URL:	https://markssmith.icu/23d80j2d/qwd13d8jqd/r3v1h_up.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 00:41:58.915291071 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:41:58.915302992 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:41:59.040306091 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:03.727845907 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:03.727849007 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:03.852813005 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:08.388282061 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.388319969 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.388392925 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.388794899 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.388827085 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.388887882 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.389169931 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.389187098 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.389384031 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.389400005 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.654894114 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.663305044 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.670481920 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.670496941 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.670650959 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.670663118 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.672033072 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.672111034 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.672589064 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.672657967 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.673396111 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.673477888 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.674424887 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.674521923 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.674544096 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.674551010 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.717233896 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.717236042 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:08.717242002 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:08.767232895 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.443929911 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.443999052 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444045067 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444051981 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.444068909 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444128036 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.444135904 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444215059 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444256067 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.444259882 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444272995 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444315910 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.444320917 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444844007 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444890976 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444895983 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.444900990 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.444941998 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.444946051 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.445693016 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.445744991 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.445746899 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.445755959 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.445801973 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.445817947 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.446651936 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.446706057 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.446707010 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.446718931 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.446757078 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.446765900 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.447417974 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.447459936 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.447460890 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.447472095 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.447504997 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.447514057 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.447572947 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.447614908 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.447619915 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.448447943 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.448493004 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.448498011 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.448503971 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.448546886 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.448551893 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.448693037 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.448743105 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.452229023 CEST	49710	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.452239990 CEST	443	49710	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.465993881 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.466012001 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.466103077 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.466429949 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.466456890 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.466517925 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.466700077 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.466805935 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.466890097 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.466931105 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.467029095 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.467040062 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.467117071 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.467303991 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.467317104 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.467478037 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.467497110 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.467659950 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.467719078 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.467799902 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.467838049 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.508141041 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.604973078 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605130911 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605232954 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605317116 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605408907 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.605422020 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605448008 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.605449915 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605490923 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.605545998 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605706930 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605753899 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.605763912 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605871916 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.605920076 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.605926037 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.606138945 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.606192112 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.606198072 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.606770992 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.606832981 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.606838942 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.606944084 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.607012987 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.607018948 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.607073069 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.607135057 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.624352932 CEST	49709	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.624366045 CEST	443	49709	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.727333069 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.727628946 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.727685928 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.729177952 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.729212046 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.729281902 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.729438066 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.729490995 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.729729891 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.729753971 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.729841948 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.729911089 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.729923010 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.730041027 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.730057955 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.730376005 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.730902910 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.730962038 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.730962992 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.731039047 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.731098890 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.731471062 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.731558084 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.731570959 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.735712051 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.736815929 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.736833096 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.737971067 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.738318920 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.738396883 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.738418102 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.776115894 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.776120901 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.780190945 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.780560017 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.786395073 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.786397934 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:09.786420107 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:09.839363098 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.026246071 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.026319027 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.026361942 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.026401043 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.026470900 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.026549101 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.026566029 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.026675940 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.026724100 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.026725054 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.026738882 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.026788950 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.026803017 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.027245998 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.027290106 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.027301073 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.027314901 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.027364016 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.027394056 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.028090954 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.028151035 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.028153896 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.028166056 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.028244019 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.028280020 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.028295994 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.028347015 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.028826952 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.029052019 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.029102087 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.029103041 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.029114962 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.029158115 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.029757977 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.029923916 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.029972076 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.029994011 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.030056000 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.030102015 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.030116081 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.030683041 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.030734062 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.030738115 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.030754089 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.030810118 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.030859947 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031208038 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031287909 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031335115 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.031347990 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031368971 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031414032 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.031435966 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031506062 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031622887 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031657934 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031665087 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.031676054 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031714916 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.031765938 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031886101 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031908989 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031924963 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.031932116 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.031970978 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.032021999 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032073021 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.032089949 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032155991 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032211065 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.032226086 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032640934 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032670975 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032676935 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032696962 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.032711983 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032754898 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032767057 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032771111 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.032785892 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032794952 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.032799959 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.032835007 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033045053 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033094883 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033107996 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033168077 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033211946 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033222914 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033241987 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033292055 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033293962 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033426046 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033471107 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033473969 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033488989 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033543110 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033555984 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033569098 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033597946 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033612013 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033616066 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033659935 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033704042 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033777952 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033814907 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.033819914 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.033911943 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034080982 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034131050 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.034143925 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034267902 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034316063 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.034343958 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034599066 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034662962 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.034682989 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034742117 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034784079 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.034787893 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034867048 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034902096 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034909964 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.034914017 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034950972 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.034951925 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.034991026 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.035027027 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035077095 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.035090923 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035209894 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035258055 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.035270929 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035377026 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035423994 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.035434961 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035454035 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035499096 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.035517931 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035655975 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035703897 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035713911 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.035727024 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035769939 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.035795927 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035896063 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.035939932 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.035953999 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.036310911 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.036359072 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.036362886 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.036382914 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.036429882 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.036442995 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.037053108 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.037111044 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.037111998 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.037130117 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.037179947 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.037203074 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.038084984 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.038197041 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.038211107 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.038888931 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039035082 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039092064 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.039103985 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039205074 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039252996 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.039258957 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039387941 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039427996 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.039433956 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039545059 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039597988 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.039602995 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039710045 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.039755106 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.039760113 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.040059090 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.040113926 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.040121078 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.040252924 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.040297985 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.040303946 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.040409088 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.040462971 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.040468931 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.041018963 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.041068077 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.041073084 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.041174889 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.041219950 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.041224957 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.041899920 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.041949987 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.041954994 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.042098999 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.042145014 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.042150021 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.042717934 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.042768955 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.042776108 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.042926073 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.042973042 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.042978048 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.043073893 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.043117046 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.043123007 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.043730021 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.043781996 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.043787956 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.043881893 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.043929100 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.043935061 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.044523001 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.044573069 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.044579029 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.044673920 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.044719934 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.044724941 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.045339108 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.045398951 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.045404911 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.046166897 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.046235085 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.046241045 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.046377897 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.046432972 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.046875000 CEST	49713	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.046890020 CEST	443	49713	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.051697016 CEST	49714	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.051708937 CEST	443	49714	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.058644056 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.058721066 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.058811903 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.059220076 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.059276104 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.059897900 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.059941053 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.059997082 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.062768936 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.062786102 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.073935986 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.090472937 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.151344061 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.151675940 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.151705027 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.151767969 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.151767969 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.151784897 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.151823044 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.151923895 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.151983023 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.152010918 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.152062893 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.152658939 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.152725935 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.153047085 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.153120995 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.153625011 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.153687954 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.154681921 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.154958010 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.155606031 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.155791998 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.157111883 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.157457113 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.157474041 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.157893896 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.157905102 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.158461094 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.159131050 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.159147978 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.159957886 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.164045095 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.164047003 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.164072037 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.164096117 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.164129972 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.164148092 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.164189100 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.164272070 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.165263891 CEST	49716	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.165277958 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.165292978 CEST	443	49716	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.275535107 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.275612116 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.275685072 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.275738001 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.276386023 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.276442051 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.276895046 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.276953936 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.277184963 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.277240992 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.277388096 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.277439117 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.278320074 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.278389931 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.278908014 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.278959036 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.279196024 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.279249907 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.279923916 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.279982090 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.280653954 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.280720949 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.281183004 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.281245947 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.281668901 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.281732082 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.282385111 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.282439947 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.282782078 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.282840967 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.283355951 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.283411980 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.283857107 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.283919096 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.284923077 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.284985065 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.285227060 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.285284996 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.285543919 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.285609007 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.286325932 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.286390066 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.286902905 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.286978006 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.287004948 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.287111998 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.308300972 CEST	49715	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.308346987 CEST	443	49715	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.322336912 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.325444937 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.335920095 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.335936069 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.336266994 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.336802006 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.336837053 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.337352991 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.337843895 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.337904930 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.370846033 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.371047020 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.386451960 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.417695045 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.488789082 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.490124941 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.507410049 CEST	49719	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.507440090 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.507496119 CEST	49719	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.508203983 CEST	49719	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.508217096 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.508953094 CEST	49720	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.508995056 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.509084940 CEST	49720	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.509746075 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.509789944 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.509846926 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.510087013 CEST	49720	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.510111094 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.510560989 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.510601044 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.511285067 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.511347055 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.511420965 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.512258053 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.512291908 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.532157898 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.536112070 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.625097036 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.625267029 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.625329018 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.625808001 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.625945091 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.625986099 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.626004934 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.626333952 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.626377106 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.626386881 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.626737118 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.626789093 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.626799107 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.627131939 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.627177000 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.627186060 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628066063 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628118038 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.628128052 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628359079 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628400087 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.628411055 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628604889 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628649950 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.628659010 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628819942 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628870010 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.628876925 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.628978014 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629013062 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629017115 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.629025936 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629071951 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.629087925 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629358053 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629398108 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.629407883 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629609108 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629648924 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.629657030 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629796028 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629828930 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629833937 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.629842997 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.629883051 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.629930019 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.630367041 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.630398989 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.630405903 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.630413055 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.630467892 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.630485058 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.631212950 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.631258011 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.631266117 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.631344080 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.631385088 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.631392002 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.632035017 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.632081032 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.632081032 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.632091999 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.632128954 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.632155895 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.632967949 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.633018017 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.633028030 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.635329008 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:10.635366917 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:10.635438919 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:10.635996103 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:10.636018991 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:10.646805048 CEST	49717	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.646846056 CEST	443	49717	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.674112082 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.752558947 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.752623081 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.752712965 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.752753973 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.752873898 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.752922058 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.754271984 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.754321098 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.755033016 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.755083084 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.755264044 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.755312920 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.755975962 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.756020069 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.756526947 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.756580114 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.756886959 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.756937027 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.757776022 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.757826090 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.758445024 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.758492947 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.758624077 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.758671045 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.759102106 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.759151936 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.760067940 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.760128021 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.760449886 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.760512114 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.761276007 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.761327982 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.771933079 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.772517920 CEST	49719	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.772552967 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.773061991 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.773147106 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.773196936 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.773886919 CEST	49719	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.773968935 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.774369001 CEST	49720	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.774385929 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.774663925 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.774739027 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.774857998 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.774956942 CEST	49719	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.775476933 CEST	49720	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.775566101 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.775887012 CEST	49720	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.776278973 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.776348114 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.776993990 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.777095079 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.777447939 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.777467012 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.780678988 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.781044960 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.781084061 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.784616947 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.784688950 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.785445929 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.785545111 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.785556078 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.785620928 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.802221060 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.802278996 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.802443027 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.802491903 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.816112995 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.816147089 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.819099903 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.833013058 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.833035946 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.874236107 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.876858950 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.876919985 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.877716064 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.877774954 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.878031015 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.878077030 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.878676891 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.878731966 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.879031897 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.879087925 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.879620075 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.879673004 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.880283117 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.880337954 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.880377054 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.880424976 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.881201982 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.881248951 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.882093906 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.882143974 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.882477045 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.882541895 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.882930040 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.882982969 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.883716106 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.883769989 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.884149075 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.884198904 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.884701014 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.884751081 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.885018110 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.885063887 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.885664940 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.885710001 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.886341095 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.886394024 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.886684895 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.886739016 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.887420893 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.887474060 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.888114929 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.888178110 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.889911890 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.889919996 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.889951944 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.889980078 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.889996052 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.890010118 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.890034914 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.891885042 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.891901016 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.891946077 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.891956091 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.891985893 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.892004013 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.892846107 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.892891884 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.892900944 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.892913103 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.892976999 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.925147057 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.933986902 CEST	49718	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.934007883 CEST	443	49718	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.982038021 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:10.989631891 CEST	49725	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.989669085 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.989728928 CEST	49725	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.990325928 CEST	49726	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.990386009 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.990459919 CEST	49726	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.990967989 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:10.991003990 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:10.991555929 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:10.991573095 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:10.991625071 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:10.992037058 CEST	49725	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.992052078 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.992283106 CEST	49726	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:10.992326021 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:10.992625952 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:10.992638111 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:10.993186951 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:10.993248940 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:11.074765921 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.074843884 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.074889898 CEST	49719	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.075046062 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.075754881 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.075805902 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.075834990 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.075871944 CEST	49720	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.075869083 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.081249952 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.081381083 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.081439018 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.081478119 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.081573009 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.081625938 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.081640005 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.081774950 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.081830025 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.081841946 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.081942081 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.081995010 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.082005024 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.082089901 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.082142115 CEST	49719	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.082151890 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.082155943 CEST	443	49719	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.082161903 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.082607985 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.082676888 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.082688093 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.082772017 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.082833052 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.082844019 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.083272934 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.083332062 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.083343029 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.083429098 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.083488941 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.083498955 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.084091902 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.084146976 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.084157944 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.084176064 CEST	49721	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.084214926 CEST	443	49721	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.084376097 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.084431887 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.084441900 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.084702015 CEST	49720	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.084718943 CEST	443	49720	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.084968090 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.085026979 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.085037947 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.085133076 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.085186005 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.085197926 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.085272074 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.085326910 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.085338116 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.085907936 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.085959911 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.085971117 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.086081982 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.086149931 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.086159945 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.086973906 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.087032080 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.087043047 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.087132931 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.087187052 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.087198019 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.087608099 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.087668896 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.087678909 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.087764978 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.087821960 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.087831974 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.088083982 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.088123083 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.088186979 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.088543892 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.088607073 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.088618994 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.089042902 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.089060068 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.089113951 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.089252949 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.089268923 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.089992046 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.090004921 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.090678930 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.090713024 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.090769053 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.091384888 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.091413021 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.138652086 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.206871033 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.206904888 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.206947088 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.207094908 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.207160950 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.207180977 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.207386017 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.207453966 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.207467079 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.207518101 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.208200932 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.208272934 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.208543062 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.208605051 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.209498882 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.209568024 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.209850073 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.209913969 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.210022926 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.210091114 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.211007118 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.211086988 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.211903095 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.211975098 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.212014914 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.212084055 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.212567091 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.212637901 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.213255882 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.213330984 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.213490963 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.213561058 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.250718117 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.252470970 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.254689932 CEST	49725	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.254709005 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.255002975 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.255089045 CEST	49726	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.255106926 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.255371094 CEST	49725	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.255446911 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.255619049 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.255637884 CEST	49725	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.256195068 CEST	49726	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.256282091 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.256340981 CEST	49726	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.257256031 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.257345915 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.257802010 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.257816076 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.257860899 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.258101940 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.258116007 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.259819984 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.259886026 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.260577917 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.260653973 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.260725975 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.260732889 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.296123981 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.300123930 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.312638998 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.331094027 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.331176043 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.331904888 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.331988096 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.332097054 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.332169056 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.332623959 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.332704067 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.333180904 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.333244085 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.333739042 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.333851099 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.334026098 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.334106922 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.334846020 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.334902048 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.334999084 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.335095882 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.336153984 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.336230993 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.336572886 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.336637020 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.336853981 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.336920977 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.337378025 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.337455034 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.338285923 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.338351965 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.338449955 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.338519096 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.339282036 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.339348078 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.339462996 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.339534998 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.340209007 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.340276003 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.340934992 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.341002941 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.341167927 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.341231108 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.341886044 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.341949940 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.342694998 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.342768908 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.344588995 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.344609022 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.344645023 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.344676018 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.344695091 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.344732046 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.346427917 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.346472979 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.346537113 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.346538067 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.346555948 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.347650051 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.347846031 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.347867966 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.348879099 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.348922968 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.348947048 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.348954916 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.348984003 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.349296093 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.349374056 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.349751949 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.349829912 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.349978924 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.349987984 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.350908995 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.350960016 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.350980043 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.350986958 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.351022005 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.351186991 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.351341963 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.351356983 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.352495909 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.352688074 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.352715969 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.352943897 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.352998018 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.353312969 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.353341103 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.353374004 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.353384972 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.353394032 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.353416920 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.353451014 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.353451967 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.353458881 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.354177952 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.354228020 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.354243994 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.354288101 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.354294062 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.354378939 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.354429007 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.354604959 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.354692936 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.354789972 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.354805946 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.354871988 CEST	49722	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.354885101 CEST	443	49722	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.358025074 CEST	49731	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.358097076 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.358169079 CEST	49731	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.358371019 CEST	49731	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.358403921 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.404515028 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.404526949 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.404535055 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.420952082 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:11.420983076 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:11.421056032 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:11.423103094 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:11.423125029 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:11.525841951 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:11.526118994 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:11.554734945 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.554807901 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.554872990 CEST	49726	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.558259010 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.558415890 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.558571100 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.563992977 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.564069033 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.564124107 CEST	49725	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.567785978 CEST	49726	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.567816019 CEST	443	49726	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.570756912 CEST	49727	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.570766926 CEST	443	49727	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.574306011 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:11.574331045 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:11.576219082 CEST	49725	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.576240063 CEST	443	49725	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.617939949 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.617995977 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.618062973 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.618413925 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.618429899 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.620217085 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.620435953 CEST	49731	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.620480061 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.620848894 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:11.620956898 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.621972084 CEST	49731	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.622064114 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.622236013 CEST	49731	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.648287058 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.648345947 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.648384094 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.648407936 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.648451090 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.648468018 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.648510933 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.648557901 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.648812056 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.648821115 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649029970 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649069071 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649072886 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.649092913 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649544001 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.649552107 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649729967 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649774075 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649807930 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649822950 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.649832010 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.649858952 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.650649071 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.650676966 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.650708914 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.650743961 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.650760889 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.650760889 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.650772095 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.650820971 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651087046 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651139975 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651160955 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651182890 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651207924 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651211977 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651231050 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651243925 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651256084 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651299953 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651308060 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651345968 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651561975 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651618004 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651654005 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651730061 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651748896 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651757956 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651772022 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651797056 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651801109 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651822090 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651829958 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651868105 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.651875019 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651884079 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.651923895 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.652463913 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.652519941 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.652549982 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.652611017 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.652637959 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.652662039 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.659725904 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.659785986 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.659832001 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.659868956 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.659898996 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.659948111 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.659982920 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.661000013 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.661057949 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.661082029 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.661097050 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.661129951 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.661189079 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.668113947 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.669625998 CEST	49729	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.669642925 CEST	443	49729	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.670475006 CEST	49728	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.670486927 CEST	443	49728	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.677445889 CEST	49730	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.677475929 CEST	443	49730	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.680603981 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:11.680761099 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:11.694894075 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:11.694921970 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:11.695005894 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:11.695280075 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:11.695295095 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:11.695548058 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:11.695559978 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:11.695805073 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:11.749756098 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:11.842545986 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:11.876251936 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.876825094 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.876863003 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.877170086 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.877865076 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.877932072 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.878632069 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:11.884124041 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:11.884963989 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.885027885 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.885246992 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.885776043 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.885812998 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.888358116 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.888375998 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.888477087 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.888870001 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.888879061 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.891045094 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.891079903 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.891213894 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.891531944 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.891551018 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.893095970 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.893131971 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.893205881 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.893565893 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.893577099 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.896063089 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.896147013 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.896224022 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.896678925 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.896703005 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.899879932 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.899909973 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.900780916 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.901459932 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:11.901474953 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:11.924110889 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:11.958282948 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:11.968473911 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:11.968530893 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:11.968604088 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.007011890 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.090626001 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.090634108 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:12.094388008 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:12.094505072 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.102075100 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.102268934 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:12.102317095 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.104459047 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.104459047 CEST	49732	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.104474068 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:12.104486942 CEST	443	49732	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:12.148160934 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:12.149094105 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.149595022 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.149605989 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.150089025 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.151282072 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.152601957 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.152626991 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.152954102 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.152962923 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:12.154412985 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.156054020 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.158952951 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.163847923 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.164846897 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.164952993 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.165450096 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.165817022 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.166776896 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.166812897 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.166878939 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.166930914 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.166991949 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.167011976 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.167263031 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.167351961 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.167433977 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.168144941 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.168195009 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.168464899 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.168483019 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.168525934 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.168561935 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.169118881 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.169291973 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.169732094 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.169809103 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.170300961 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.170407057 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.170478106 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.170526981 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.170787096 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.170794964 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.170923948 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.170939922 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.171435118 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.171483040 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.172177076 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.172261953 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.172481060 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.172487974 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.172593117 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.172610044 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.179841995 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.179888964 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.179913044 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.179941893 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.179964066 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.179966927 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.179979086 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.179987907 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.180013895 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.180036068 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.180053949 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.180151939 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.180471897 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.180579901 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.180598974 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.180655003 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.180672884 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.180722952 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.181349039 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.181423903 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.181448936 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.181471109 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.181484938 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.181500912 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.181529045 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.182308912 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.182374954 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.182394981 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.182437897 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.182454109 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.182482958 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.183104992 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.183142900 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.183166981 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.183182001 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.183231115 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.183429003 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.183444023 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.183491945 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.183955908 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.184015036 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.184041023 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.184068918 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.184082031 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.184139967 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.184153080 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.184911966 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.184935093 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.184957027 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.184969902 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.184984922 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.185015917 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.185794115 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.185826063 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.185847044 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.185856104 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.185870886 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.185902119 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.186595917 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.186641932 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.186661005 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.186675072 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.186928034 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.187477112 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.187542915 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.198896885 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.208117962 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.208157063 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.214236975 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.214270115 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.214271069 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.214353085 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.214447021 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.306123972 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.306205988 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.306267023 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.306600094 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.306606054 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.306638002 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.306673050 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.306818962 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.306870937 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.306885004 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.306936026 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.307573080 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.307636976 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.307913065 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.307972908 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.308535099 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.308598995 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.309215069 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.309287071 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.309585094 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.309660912 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.310496092 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.310736895 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.310832977 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.310902119 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.311633110 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.311698914 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.312113047 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.312184095 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.312186003 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.312235117 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.313359022 CEST	49733	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.313395023 CEST	443	49733	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.396801949 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.397032976 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.397094011 CEST	49731	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.406616926 CEST	49731	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.406636953 CEST	443	49731	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.453349113 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.453612089 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.453950882 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.457869053 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.457982063 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.458039999 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.459032059 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459084988 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459105015 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459127903 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459166050 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.459172010 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459172964 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.459309101 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459351063 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459371090 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.459372044 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459384918 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459424019 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.459547997 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459595919 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.459599018 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459614038 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.459692001 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.459697008 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.460294962 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.460339069 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.460340977 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.460350037 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.461009979 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.461014986 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.461313963 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.461386919 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.461421967 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.461426973 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.461523056 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.461565971 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.461570024 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.461616993 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.462052107 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.462095976 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.462148905 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.462167025 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.462172031 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.462476969 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.462943077 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.462990046 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.463016987 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.463037968 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.463042974 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.463671923 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.463676929 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.463802099 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.463829041 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.463850021 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.463854074 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.463942051 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.463985920 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.463990927 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.464087009 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.464699030 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.464756012 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.464797020 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.464840889 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.464847088 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.464886904 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.465670109 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.465718985 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.465756893 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.465802908 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.465809107 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.465848923 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.465965033 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466089964 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466157913 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.466186047 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466317892 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466419935 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.466422081 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466449022 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466490984 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466504097 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.466517925 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466540098 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.466624022 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466677904 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.466690063 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466789961 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.466895103 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.466907978 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.467025995 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.467092037 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.467103958 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.467161894 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.467477083 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.480617046 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.480777979 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.480858088 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.495013952 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:12.495299101 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:12.495847940 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.496787071 CEST	49738	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.496798038 CEST	443	49738	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.497510910 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.497546911 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.497653961 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.498536110 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.498550892 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.498899937 CEST	49736	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.498936892 CEST	443	49736	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.499855995 CEST	49739	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.499902964 CEST	443	49739	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.502185106 CEST	49741	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.502227068 CEST	443	49741	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.503149986 CEST	49740	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.503192902 CEST	443	49740	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.532823086 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:12.532851934 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:12.533106089 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:12.533571005 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:12.533587933 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:12.536585093 CEST	49734	443	192.168.2.5	104.21.53.38
Apr 26, 2024 00:42:12.536595106 CEST	443	49734	104.21.53.38	192.168.2.5
Apr 26, 2024 00:42:12.550033092 CEST	49744	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.550087929 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.550614119 CEST	49744	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.551009893 CEST	49744	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.551043987 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.564073086 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.564105034 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:12.564208031 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.564870119 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.564882994 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:12.584069967 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.584153891 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.584170103 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.584207058 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.584230900 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.584237099 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.584259987 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.585002899 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.585074902 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.585079908 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.585119963 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.586229086 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.586265087 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.586301088 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.586306095 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.586332083 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.586354971 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.586878061 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.586935997 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.587739944 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.587784052 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.587790966 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.587795019 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.587829113 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.588521004 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.588587999 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.589339018 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.589404106 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.589478016 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.589526892 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.590043068 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.590096951 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.591267109 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.591337919 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.591345072 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.591522932 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.591847897 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.591902971 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.633176088 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.633256912 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.633301020 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.633349895 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.709027052 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.709095001 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.709198952 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.709254026 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.709897995 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.709958076 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.710589886 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.710649014 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.711316109 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.711390972 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.711602926 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.711651087 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.711673975 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.712313890 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.712397099 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.712446928 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.712495089 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.713186026 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.713243961 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.713903904 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.713956118 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.714159966 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.714220047 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.714843035 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.714898109 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.715725899 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.715780973 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.715982914 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.716039896 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.716577053 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.716655016 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.716774940 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.716829062 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.717488050 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.717550993 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.718322039 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.718398094 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.718584061 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.718643904 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.719320059 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.719400883 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.720072985 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.720149040 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.721854925 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.721863985 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.721890926 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.721946001 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.721949100 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.721970081 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.721990108 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.723701954 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.723722935 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.723761082 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.723764896 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.723799944 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.724515915 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.724572897 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.724575996 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.724594116 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.724632978 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.724888086 CEST	49737	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.724896908 CEST	443	49737	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.756285906 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.756841898 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.756865025 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.757155895 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.765948057 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.766007900 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.766239882 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:12.808211088 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:12.809551001 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.810024977 CEST	49744	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.810060978 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.810359955 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.812283039 CEST	49744	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.812350035 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.812690973 CEST	49744	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:12.819112062 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:12.819242954 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.821480036 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.821486950 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:12.821718931 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:12.822907925 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:12.860115051 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:12.862157106 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:12.862391949 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:12.862432957 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:12.863872051 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:12.863945007 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:12.868109941 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:13.053767920 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.053817034 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.053847075 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.053867102 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.053869963 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.053881884 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.053953886 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.053965092 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.054119110 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.054244041 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.054342031 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.054414034 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.054428101 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.054847002 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.054867983 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.054887056 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.054913044 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.054923058 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.054936886 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.055676937 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.055711031 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.055716991 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.055725098 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.055768967 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.055789948 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.055830956 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.055939913 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.056577921 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.056628942 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.056651115 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.056699038 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.056709051 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.056746006 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.057414055 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.057528019 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.057545900 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.057565928 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.057606936 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.057619095 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.057629108 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.058300972 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.058348894 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.059334040 CEST	49742	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:13.059345961 CEST	443	49742	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:13.085009098 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:13.085165024 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:13.085221052 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:13.085918903 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:13.085928917 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:13.085962057 CEST	49745	443	192.168.2.5	23.202.106.101
Apr 26, 2024 00:42:13.085968971 CEST	443	49745	23.202.106.101	192.168.2.5
Apr 26, 2024 00:42:13.228830099 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.228998899 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.229572058 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.229595900 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.277671099 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.328394890 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:13.344701052 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:13.441915035 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.442086935 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.442156076 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.443031073 CEST	49743	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.443053961 CEST	443	49743	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.444370985 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.444394112 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.444478035 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.445012093 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.445024967 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.452959061 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:13.480428934 CEST	49749	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:13.480475903 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.480619907 CEST	49749	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:13.482155085 CEST	49749	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:13.482173920 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.594089031 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.594172001 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.594269037 CEST	49744	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:13.614483118 CEST	49744	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:13.614522934 CEST	443	49744	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.739912987 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.742628098 CEST	49749	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:13.742640972 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.743134022 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.760771990 CEST	49749	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:13.760855913 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:13.764061928 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.773025036 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.773037910 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.773365021 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.773451090 CEST	49749	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:13.774621010 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.774672031 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.775141954 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:13.816112041 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:13.820121050 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:14.100298882 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:14.100363970 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:14.100435019 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:14.138418913 CEST	49748	443	192.168.2.5	35.190.80.1
Apr 26, 2024 00:42:14.138442039 CEST	443	49748	35.190.80.1	192.168.2.5
Apr 26, 2024 00:42:14.322849989 CEST	49750	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:14.322896957 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:14.322969913 CEST	49750	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:14.323398113 CEST	49750	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:14.323424101 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:14.521650076 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:14.521770954 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:14.521866083 CEST	49749	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:14.543423891 CEST	49749	443	192.168.2.5	104.21.12.42
Apr 26, 2024 00:42:14.543442965 CEST	443	49749	104.21.12.42	192.168.2.5
Apr 26, 2024 00:42:14.580530882 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:14.591799974 CEST	49750	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:14.591821909 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:14.592128992 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:14.592807055 CEST	49750	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:14.592860937 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:14.593200922 CEST	49750	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:14.640114069 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:14.889866114 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:14.889976025 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:15.359265089 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:15.359324932 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:15.359384060 CEST	49750	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:17.040926933 CEST	49750	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:17.040958881 CEST	443	49750	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:17.292145014 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:17.292184114 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:17.292269945 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:17.292821884 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:17.292834044 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:17.551089048 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:17.760123014 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:17.760189056 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:17.979698896 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:17.979767084 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:17.980355024 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:17.987692118 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:17.987791061 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:17.990338087 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:18.032147884 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:18.613301992 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:18.613426924 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:18.613509893 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:18.696671009 CEST	49751	443	192.168.2.5	172.67.131.238
Apr 26, 2024 00:42:18.696715117 CEST	443	49751	172.67.131.238	192.168.2.5
Apr 26, 2024 00:42:20.978631020 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:20.978771925 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:20.978846073 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:21.079583883 CEST	49723	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:42:21.079621077 CEST	443	49723	142.250.189.132	192.168.2.5
Apr 26, 2024 00:42:26.567732096 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:26.567856073 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:26.568501949 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:26.568592072 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:26.568680048 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:26.569044113 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:26.569092035 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:26.754179955 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:26.754242897 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:26.962059975 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:26.962138891 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.007854939 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.007879019 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:27.008207083 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:27.008254051 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.009972095 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.009993076 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:27.010435104 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.010441065 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:27.370023012 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:27.370104074 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.370434999 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:27.370481014 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.370491982 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:27.370560884 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.385992050 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.386022091 CEST	443	49759	23.1.237.91	192.168.2.5
Apr 26, 2024 00:42:27.386034966 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:42:27.386070967 CEST	49759	443	192.168.2.5	23.1.237.91
Apr 26, 2024 00:43:10.424201965 CEST	49762	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:43:10.424290895 CEST	443	49762	142.250.189.132	192.168.2.5
Apr 26, 2024 00:43:10.424400091 CEST	49762	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:43:10.424731970 CEST	49762	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:43:10.424766064 CEST	443	49762	142.250.189.132	192.168.2.5
Apr 26, 2024 00:43:10.810969114 CEST	443	49762	142.250.189.132	192.168.2.5
Apr 26, 2024 00:43:10.811719894 CEST	49762	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:43:10.811753988 CEST	443	49762	142.250.189.132	192.168.2.5
Apr 26, 2024 00:43:10.812062979 CEST	443	49762	142.250.189.132	192.168.2.5
Apr 26, 2024 00:43:10.813133001 CEST	49762	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:43:10.813193083 CEST	443	49762	142.250.189.132	192.168.2.5
Apr 26, 2024 00:43:10.856671095 CEST	49762	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:43:20.801599979 CEST	443	49762	142.250.189.132	192.168.2.5
Apr 26, 2024 00:43:20.801681995 CEST	443	49762	142.250.189.132	192.168.2.5
Apr 26, 2024 00:43:20.801784039 CEST	49762	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:43:21.165025949 CEST	49762	443	192.168.2.5	142.250.189.132
Apr 26, 2024 00:43:21.165101051 CEST	443	49762	142.250.189.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 00:42:06.625015020 CEST	53	61253	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:06.781939030 CEST	53	62614	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:07.740411043 CEST	53	58120	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:08.253279924 CEST	52079	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:08.253437042 CEST	60664	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:08.386100054 CEST	53	52079	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:08.387285948 CEST	53	60664	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:10.485666037 CEST	51311	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:10.485987902 CEST	58276	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:10.611128092 CEST	53	58276	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:10.611335039 CEST	53	51311	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:10.638362885 CEST	53	57842	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:10.845041990 CEST	62710	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:10.845547915 CEST	62483	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:10.973166943 CEST	53	62483	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:10.979943037 CEST	53	62710	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:11.562732935 CEST	53751	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:11.563174963 CEST	62330	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:11.689033985 CEST	53	53751	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:11.690002918 CEST	53	62330	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:11.744980097 CEST	53	60225	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:12.405699015 CEST	52170	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:12.406430960 CEST	62533	53	192.168.2.5	1.1.1.1
Apr 26, 2024 00:42:12.530777931 CEST	53	62533	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:12.531282902 CEST	53	52170	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:24.691325903 CEST	53	49585	1.1.1.1	192.168.2.5
Apr 26, 2024 00:42:43.682180882 CEST	53	65345	1.1.1.1	192.168.2.5
Apr 26, 2024 00:43:05.962419033 CEST	53	59540	1.1.1.1	192.168.2.5
Apr 26, 2024 00:43:07.191943884 CEST	53	54992	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 00:42:08.253279924 CEST	192.168.2.5	1.1.1.1	0x7375	Standard query (0)	markssmith.icu	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:08.253437042 CEST	192.168.2.5	1.1.1.1	0xfb07	Standard query (0)	markssmith.icu	65	IN (0x0001)	false
Apr 26, 2024 00:42:10.485666037 CEST	192.168.2.5	1.1.1.1	0xc3ef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:10.485987902 CEST	192.168.2.5	1.1.1.1	0xeae5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 00:42:10.845041990 CEST	192.168.2.5	1.1.1.1	0x6d96	Standard query (0)	markssmith.icu	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:10.845547915 CEST	192.168.2.5	1.1.1.1	0xdb88	Standard query (0)	markssmith.icu	65	IN (0x0001)	false
Apr 26, 2024 00:42:11.562732935 CEST	192.168.2.5	1.1.1.1	0xaed0	Standard query (0)	userstatics.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:11.563174963 CEST	192.168.2.5	1.1.1.1	0xcd1f	Standard query (0)	userstatics.com	65	IN (0x0001)	false
Apr 26, 2024 00:42:12.405699015 CEST	192.168.2.5	1.1.1.1	0x1d8f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:12.406430960 CEST	192.168.2.5	1.1.1.1	0xe56e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 00:42:08.386100054 CEST	1.1.1.1	192.168.2.5	0x7375	No error (0)	markssmith.icu		104.21.12.42	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:08.386100054 CEST	1.1.1.1	192.168.2.5	0x7375	No error (0)	markssmith.icu		172.67.131.238	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:08.387285948 CEST	1.1.1.1	192.168.2.5	0xfb07	No error (0)	markssmith.icu			65	IN (0x0001)	false
Apr 26, 2024 00:42:10.611128092 CEST	1.1.1.1	192.168.2.5	0xeae5	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 00:42:10.611335039 CEST	1.1.1.1	192.168.2.5	0xc3ef	No error (0)	www.google.com		142.250.189.132	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:10.973166943 CEST	1.1.1.1	192.168.2.5	0xdb88	No error (0)	markssmith.icu			65	IN (0x0001)	false
Apr 26, 2024 00:42:10.979943037 CEST	1.1.1.1	192.168.2.5	0x6d96	No error (0)	markssmith.icu		172.67.131.238	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:10.979943037 CEST	1.1.1.1	192.168.2.5	0x6d96	No error (0)	markssmith.icu		104.21.12.42	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:11.689033985 CEST	1.1.1.1	192.168.2.5	0xaed0	No error (0)	userstatics.com		104.21.53.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:11.689033985 CEST	1.1.1.1	192.168.2.5	0xaed0	No error (0)	userstatics.com		172.67.208.186	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:11.690002918 CEST	1.1.1.1	192.168.2.5	0xcd1f	No error (0)	userstatics.com			65	IN (0x0001)	false
Apr 26, 2024 00:42:12.531282902 CEST	1.1.1.1	192.168.2.5	0x1d8f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:25.676937103 CEST	1.1.1.1	192.168.2.5	0xa751	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:42:25.676937103 CEST	1.1.1.1	192.168.2.5	0xa751	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:38.645504951 CEST	1.1.1.1	192.168.2.5	0x4520	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:42:38.645504951 CEST	1.1.1.1	192.168.2.5	0x4520	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:42:58.781738997 CEST	1.1.1.1	192.168.2.5	0xbbea	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:42:58.781738997 CEST	1.1.1.1	192.168.2.5	0xbbea	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:43:27.701400042 CEST	1.1.1.1	192.168.2.5	0xdb8	No error (0)	windowsupdatebg.s.llnwi.net		208.111.136.128	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

markssmith.icu

https:

userstatics.com

www.bing.com

fs.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:08 UTC	747	OUT	GET /23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:09 UTC	609	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Sun, 21 Apr 2024 01:50:57 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UqaYGnxZk2WMCekLCY37fuCMFNOBygeb9bOcFUcpclFJ2hgNspgstsSDdFhlR59VUeCdPiAcnnGVDFOfjfOroTmNRkmJ7Y1ptIGEaOY2vLTN%2B8WrbAz%2FF8Bm%2F%2Bgm2rQQtQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d8357e154c09-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:09 UTC	760	IN	Data Raw: 37 64 35 31 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 0a 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e3 82 b7 e3 82 b9 e3 83 86 e3 83 a0 e3 82 bb e3 82 ad e3 83 a5 e3 83 aa e3 83 86 e3 82 a3 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c Data Ascii: 7d51<html lang="en"><head><meta charset="utf-8"> <meta content="width=device-width,initial-scale=1,shrink-to-fit=no" name="viewport"> <meta content="noindex,nofollow" name="robots"> <title></title> <
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 5f 69 61 67 71 34 78 74 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 6b 65 79 66 72 61 6d 65 73 20 74 61 77 6b 4d 61 78 4f 70 65 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 33 30 70 78 29 3b 3b 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 30 70 78 29 3b 7d 7d 40 2d 6d Data Ascii: t/javascript" async="" defer=""></script><script src="_iagq4xt.js" type="text/javascript" async="" defer=""></script><style type="text/css">@keyframes tawkMaxOpen{0%{opacity:0;transform:translate(0, 30px);;}to{opacity:1;transform:translate(0, 0px);}}@-m
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 65 6c 63 6f 6d 65 44 69 76 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0a 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 68 61 74 2d 62 6f 78 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 0a 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 56 61 72 69 61 62 6c 65 46 72 6f 6d 55 52 6c 28 6e 61 6d 65 29 20 7b 0a 20 20 20 20 6e 61 6d 65 20 3d 20 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5d 2f 2c 20 22 5c 5c 5b 22 29 2e 72 65 70 6c 61 63 65 Data Ascii: style.display = "block";document.getElementById("welcomeDiv").style.display = "block"; document.getElementById("chat-box").style.display = "none";}</script><script> function getVariableFromURl(name) { name = name.replace(/[\[]/, "\\[").replace
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 57 45 46 5a 54 45 51 43 37 48 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 2d 57 45 46 5a 54 45 51 43 37 48 27 2c 20 7b 73 65 6e 64 5f 70 61 67 65 5f 76 Data Ascii: ipt async src="https://www.googletagmanager.com/gtag/js?id=G-WEFZTEQC7H"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-WEFZTEQC7H', {send_page_v
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 72 77 7a 63 78 78 61 34 2e 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 57 69 6e 64 6f 77 73 e3 81 ae e3 82 bb e3 82 ad e3 83 a5 e3 83 aa e3 83 86 e3 82 a3 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 74 69 76 61 74 65 5f 6c 69 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 3e Data Ascii: <div class="logo"> <img src="rwzcxxa4.png"> <span>Windows</span> </div> </div> <div class="col-md-8"> <div class="activate_lic"> <ul>
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 73 3d 22 73 63 61 6e 5f 62 6f 78 5f 68 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 71 75 69 63 6b 5f 73 63 61 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 73 68 39 33 33 37 64 5f 2e 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e e3 82 b9 e3 82 ad e3 83 a3 e3 83 8b e3 83 b3 e3 82 b0 e3 83 a9 e3 83 94 e3 83 bc e3 83 89 3c 2f 73 Data Ascii: s="scan_box_header"> <div class="row"> <div class="col-md-6"> <div class="quick_scan"> <p> <img src="sh9337d_.png"> <span></s
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 6d 65 72 22 20 64 61 74 61 2d 73 70 65 65 64 3d 22 35 30 30 30 22 20 64 61 74 61 2d 74 6f 3d 22 35 31 39 30 30 22 3e 35 31 2c 39 30 30 3c 2f 68 32 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 68 20 73 63 6f 70 65 3d 22 63 6f 6c 22 3e e4 bd bf e3 81 a3 e3 81 9f e6 99 82 e9 96 93 3c 2f 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 68 20 73 63 6f 70 65 3d 22 63 6f 6c 22 3e 35 e7 a7 92 3c 2f 74 68 3e Data Ascii: mer" data-speed="5000" data-to="51900">51,900</h2> </div> </th> </tr> <tr> <th scope="col"></th> <th scope="col">5</th>
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 42 61 73 69 63 20 65 78 61 6d 70 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 3e e3 82 b9 e3 82 b1 e3 82 b8 e3 83 a5 e3 83 bc e3 83 ab e3 81 95 e3 82 8c e3 81 9f e3 82 b9 e3 82 ad e3 83 a3 e3 83 b3 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 Data Ascii: " aria-label="Basic example"> <button class="btn btn-secondary" type="button"></button> </div> </div> </div> </div> </div>
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 6d 2d 38 6c 35 74 34 78 2e 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 Data Ascii: <li> <a href="#"> <img src="m-8l5t4x.png"> </a> </li> <li> <a href="#"> <img src="data:image/png;ba
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 77 77 72 64 78 2d 2d 6b 2d 32 2e 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 Data Ascii: <a href="#"> <img src="wwrdx--k-2.png"> </a> </li> </ul> </div> </div> </div> </div> <div class="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:09 UTC	649	OUT	GET /23d80j2d/qwd13d8jqd/k58t941e.css HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:09 UTC	685	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:09 GMT Content-Type: text/css Content-Length: 19928 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:07 GMT ETag: "6615dfe7-4dd8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FSyLgZu%2FA8sT9aXiVS48Phf6gSSzluoyTueFZbr1AIUQfCDAR%2F7lokyFj4MyIHpabUZo3uPeoJwqzqZy6eOoT7uDSnSxqfhE3HctsJ0RE6Uux2%2B5wGWV0vy9kQGiZV%2BB8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d8398fe28d9a-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:09 UTC	684	IN	Data Raw: 2e 74 61 62 6c 65 2c 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 3a 68 6f 76 65 72 2c 62 6f 64 79 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 0d 0a 7d 0d 0a 0d 0a 23 74 78 74 69 6e 74 72 6f 2c 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 0d 0a 7d 0d 0a 0d 0a 23 62 6f 74 74 6f 6d 20 75 6c 2c 2e 6d 61 72 5f 74 6f 70 20 75 6c 2c 2e 74 6f 74 61 6c 5f 64 65 74 61 69 6c 20 75 6c 2c 2e 74 6f 74 61 6c 5f 64 65 74 61 69 6c 5f 73 63 61 6e 20 75 6c 20 7b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 0d 0a 23 66 6f 6f 74 65 72 2c 23 74 78 74 73 31 2c 2e 62 74 Data Ascii: .table,label { max-width: 100%}.btn:focus,.btn:hover,body { color: #333}#txtintro,.row:after { clear: both}#bottom ul,.mar_top ul,.total_detail ul,.total_detail_scan ul { list-style-type: none}#footer,#txts1,.bt
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 3a 20 34 30 70 78 20 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 30 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 7a 6f 6f 6d 69 6e 6f 75 74 73 69 6e 67 6c 65 66 65 61 74 75 72 65 64 20 7b 0d 0a 20 20 20 20 30 25 2c 74 6f 20 7b 0d 0a 20 20 Data Ascii: : 40px 0 } to { background-position: 0 0 }}@keyframes rotate { 0% { transform: rotate(0) } to { transform: rotate(360deg) }}@keyframes zoominoutsinglefeatured { 0%,to {
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 35 25 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 0d 0a 7d 0d 0a 0d 0a 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 0d 0a 7d 0d 0a 0d 0a 2e 62 74 5f 63 61 6e 20 2e 62 74 6e 2c 2e 62 74 5f 63 61 6e 32 20 2e 62 74 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 32 70 78 3b 0d 0a 20 20 20 Data Ascii: font-size: 85%}img { border: 0}button,input { margin: 0; font: inherit; font-size: inherit; line-height: inherit}.bt_can .btn,.bt_can2 .btn { margin-right: 15px; height: 30px; padding: 12px;
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 6f 72 70 68 61 6e 73 3a 20 33 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 6f 77 73 3a 20 33 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 67 65 2d 62 72 65 61 6b 2d 61 66 74 65 72 3a 20 61 76 6f 69 64 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 74 61 62 6c 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 74 61 62 6c 65 20 74 64 2c 2e 74 61 62 6c 65 20 74 68 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 74 61 62 6c Data Ascii: orphans: 3; widows: 3 } h2 { page-break-after: avoid } .table { border-collapse: collapse!important } .table td,.table th { background-color: #fff!important } .tabl
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 0d 0a 0d 0a 68 34 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 0d 0a 7d 0d 0a 0d 0a 70 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 0d 0a 7d 0d 0a 0d 0a 2e 74 65 78 74 2d 6c 65 66 74 2c 74 68 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2c 2e 74 65 78 74 2d 63 65 6e 74 65 72 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0d 0a 7d 0d 0a 0d 0a 75 6c 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 0d 0a 7d 0d 0a 0d 0a 2e 72 6f 77 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 31 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 35 70 78 0d 0a 7d 0d 0a 0d 0a Data Ascii: h4 { font-size: 18px}p { margin: 0 0 10px}.text-left,th { text-align: left}.btn,.text-center { text-align: center}ul { margin-top: 0}.row { margin-right: -15px; margin-left: -15px}
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 6c 69 2c 2e 62 74 6e 2c 2e 69 6c 62 2c 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 0d 0a 7d 0d 0a 0d 0a 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 32 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 33 3b 0d 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 20 20 20 20 2d 6d Data Ascii: li,.btn,.ilb,label { display: inline-block}label { margin-bottom: 5px; font-weight: 700}.btn { padding: 6px 12px; margin-bottom: 0; font-weight: 400; line-height: 1.42857143; white-space: nowrap; -m
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 67 72 65 73 73 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 20 20 62 61 Data Ascii: ition: relative; float: left}.btn-group>.btn:active,.btn-group>.btn:focus,.btn-group>.btn:hover { z-index: 2}.btn-group>.btn:first-child { margin-left: 0}.progress { margin-bottom: 20px; overflow: hidden; ba
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 31 34 64 39 61 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 34 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 34 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 30 70 78 0d 0a 7d 0d 0a 0d 0a 23 70 6f 70 5f 75 70 5f 6e 65 77 20 70 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 31 70 78 0d 0a 7d 0d 0a 0d 0a 23 70 6f 70 5f Data Ascii: background: #114d9a; width: 440px; text-align: left; padding-top: 4px; color: #fff; padding-left: 20px; padding-right: 20px}#pop_up_new p { font-weight: 500; font-size: 12px; line-height: 21px}#pop_
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 69 6d 69 7a 65 31 20 75 6c 20 7b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 0d 0a 7d 0d 0a 0d 0a 2e 61 63 74 69 76 61 74 65 5f 6c 69 63 20 75 6c 20 6c 69 2c 2e 6d 69 6e 69 6d 69 7a 65 20 75 6c 20 6c 69 2c 2e 6d 69 6e 69 6d 69 7a 65 31 20 75 6c 20 6c 69 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 0d 0a 7d 0d 0a 0d 0a 2e 6d 69 6e 69 6d 69 7a 65 20 75 6c 20 6c 69 20 61 20 69 6d 67 2c 2e 6d 69 6e 69 6d 69 7a 65 31 20 75 6c 20 6c 69 20 61 20 69 6d 67 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 34 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 0d 0a Data Ascii: imize1 ul { list-style-type: none; float: right}.activate_lic ul li,.minimize ul li,.minimize1 ul li { float: left; display: inline-block}.minimize ul li a img,.minimize1 ul li a img { width: 140px; height: auto
2024-04-25 22:42:09 UTC	1369	IN	Data Raw: 5f 71 75 69 63 6b 20 2e 74 61 62 6c 65 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 36 36 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 35 72 65 6d 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 6c 65 20 74 68 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 32 35 72 65 6d 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 68 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 0d 0a 7d 0d 0a 0d 0a 2e 62 74 5f 63 61 6e 20 7b 0d 0a 20 20 20 20 6d 61 Data Ascii: _quick .table { width: 665px; margin-left: 20px; border-radius: .25rem; margin-top: 20px}.table th { padding: .25rem}.table-bordered td,.table-bordered th { border-bottom: 1px solid #dee2e6}.bt_can { ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:09 UTC	649	OUT	GET /23d80j2d/qwd13d8jqd/16ngwy11.css HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:10 UTC	687	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:09 GMT Content-Type: text/css Content-Length: 220834 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:07 GMT ETag: "6615dfe7-35ea2" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=42CA8hE28C6wqEAZ%2FPzQMubMgx2Box3kw1O3sKS6Ta8qI5ATx5vwGvvX81P1zO0UKzNAfGtfVivPA1rcq2g7QKMucoWLnKOKtVSwpB%2FN%2Br%2F2OWP1vwRZmnYf5dbqotFsuA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d83c3dc26dad-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:10 UTC	682	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 2d 61 6c 70 68 61 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.0-alpha1 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-ind
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 31 32 35 32 39 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 3a 23 31 39 38 37 35 34 3b 2d 2d 62 73 2d 69 6e 66 6f 3a 23 30 64 63 61 66 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 62 73 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 64 61 72 6b 3a 23 32 31 32 35 32 39 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 72 67 62 3a 31 33 2c 31 31 30 2c 32 35 33 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 72 67 62 3a 31 30 38 2c 31 31 37 2c 31 32 35 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 72 67 62 3a 32 35 2c 31 33 35 2c 38 34 3b 2d 2d Data Ascii: 12529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 62 73 2d 67 72 61 64 69 65 6e 74 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 35 29 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 29 3b 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 66 6f Data Ascii: goe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255, 0.15), rgba(255, 255, 255, 0));--bs-body-font-family:var(--bs-fo
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 72 2d 72 67 62 29 2c 20 30 2e 30 37 35 29 3b 2d 2d 62 73 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 6c 67 3a 30 20 31 72 65 6d 20 33 72 65 6d 20 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 2d 72 67 62 29 2c 20 30 2e 31 37 35 29 3b 2d 2d 62 73 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 69 6e 73 65 74 3a 69 6e 73 65 74 20 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 2d 72 67 62 29 2c 20 30 2e 30 37 35 29 3b 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 64 69 73 61 62 6c 65 64 2d 62 67 3a 76 Data Ascii: r-rgb), 0.075);--bs-box-shadow-lg:0 1rem 3rem rgba(var(--bs-body-color-rgb), 0.175);--bs-box-shadow-inset:inset 0 1px 2px rgba(var(--bs-body-color-rgb), 0.075);--bs-emphasis-color:#000;--bs-form-control-bg:var(--bs-body-bg);--bs-form-control-disabled-bg:v
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 73 75 62 74 6c 65 3a 23 31 61 31 64 32 30 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 30 38 34 32 39 38 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 34 39 35 30 35 37 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 30 66 35 31 33 32 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 30 35 35 31 36 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 36 36 34 64 30 33 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 38 34 32 30 32 39 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 34 39 35 30 35 37 Data Ascii: subtle:#1a1d20;--bs-primary-border-subtle:#084298;--bs-secondary-border-subtle:#495057;--bs-success-border-subtle:#0f5132;--bs-info-border-subtle:#055160;--bs-warning-border-subtle:#664d03;--bs-danger-border-subtle:#842029;--bs-light-border-subtle:#495057
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 72 65 6d 20 2b 20 2e 36 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 32 37 35 72 65 6d 20 2b 20 2e 33 76 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e Data Ascii: min-width:1200px){.h2,h2{font-size:2rem}}.h3,h3{font-size:calc(1.3rem + .6vw)}@media (min-width:1200px){.h3,h3{font-size:1.75rem}}.h4,h4{font-size:calc(1.275rem + .3vw)}@media (min-width:1200px){.h4,h4{font-size:1.5rem}}.h5,h5{font-size:1.25rem}.h6,h6{fon
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 63 6f 64 65 2d 63 6f 6c 6f 72 29 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 31 38 37 35 72 65 6d 20 2e 33 37 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e Data Ascii: :inherit;color:inherit;word-break:normal}code{font-size:.875em;color:var(--bs-code-color);word-wrap:break-word}a>code{color:inherit}kbd{padding:.1875rem .375rem;font-size:.875em;color:var(--bs-body-bg);background-color:var(--bs-body-color);border-radius:.
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 66 69 65 6c 64 73 65 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 65 67 65 6e 64 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 32 37 35 72 65 6d 20 2b 20 2e 33 76 77 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 6c 65 67 65 6e 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 7d 6c 65 67 65 6e 64 2b 2a 7b 63 6c 65 61 72 3a 6c 65 66 74 7d 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d Data Ascii: fieldset{min-width:0;padding:0;margin:0;border:0}legend{float:left;width:100%;padding:0;margin-bottom:.5rem;font-size:calc(1.275rem + .3vw);line-height:inherit}@media (min-width:1200px){legend{font-size:1.5rem}}legend+*{clear:left}::-webkit-datetime-edit-
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 34 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 34 37 35 72 65 6d 20 2b 20 32 2e 37 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c 61 79 2d 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 35 72 65 6d 7d 7d 2e 64 69 73 70 6c 61 79 2d 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 34 32 35 72 65 6d 20 2b 20 32 2e 31 76 77 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 64 69 73 70 6c Data Ascii: font-size:4rem}}.display-4{font-size:calc(1.475rem + 2.7vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.display-4{font-size:3.5rem}}.display-5{font-size:calc(1.425rem + 2.1vw);font-weight:300;line-height:1.2}@media (min-width:1200px){.displ
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 29 20 2a 20 2e 35 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 29 20 2a 20 2e 35 29 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 35 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 Data Ascii: h:100%;padding-right:calc(var(--bs-gutter-x) * .5);padding-left:calc(var(--bs-gutter-x) * .5);margin-right:auto;margin-left:auto}@media (min-width:576px){.container,.container-sm{max-width:540px}}@media (min-width:768px){.container,.container-md,.containe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49713	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:09 UTC	649	OUT	GET /23d80j2d/qwd13d8jqd/cvmt8hve.css HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:10 UTC	685	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:09 GMT Content-Type: text/css Content-Length: 27305 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:07 GMT ETag: "6615dfe7-6aa9" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dlem%2Fl%2BPxPt1G%2BUOpP1QZToBfYuUzBe6Svca4QJA4VKDQ%2FTGxxGZrSy4mLv6RS8s23HFedzZmT7Xo9UVIm0zAdk7MibWJGhPSjdsw9L2Q1LLzYprtUL2Jm6tTfzRDq8Amw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d83c3912a680-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:10 UTC	684	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 72 30 31 6e 70 73 32 79 2e 65 6f 74 27 29 3b 73 72 63 3a 75 72 6c 28 27 6f 6c 6b 67 76 63 70 69 2e 65 6f 74 23 69 65 66 69 78 26 76 Data Ascii: /! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('r01nps2y.eot');src:url('olkgvcpi.eot#iefix&v
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 73 69 7a 65 3a 31 2e 33 33 33 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 31 35 25 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 66 77 7b 77 69 64 74 68 3a 31 2e 32 38 35 37 31 34 32 39 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 75 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 2e 31 34 32 38 35 37 31 34 65 6d 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 66 61 Data Ascii: size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{padding-left:0;margin-left:2.14285714em;list-style-type:none}.fa
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 38 30 7b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 33 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 Data Ascii: 80{filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=2);-webkit-transform:rotate(180deg);-ms-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=3);-webkit-transform:rota
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 68 2d 6c 61 72 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 39 22 7d 2e 66 61 2d 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 61 22 7d 2e 66 61 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 62 22 7d 2e 66 61 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 63 22 7d 2e 66 61 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 64 22 7d 2e 66 61 2d 73 65 61 72 63 68 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 65 22 7d 2e 66 61 2d 73 65 61 72 63 68 2d 6d 69 6e 75 73 3a 62 65 Data Ascii: h-large:before{content:"\f009"}.fa-th:before{content:"\f00a"}.fa-th-list:before{content:"\f00b"}.fa-check:before{content:"\f00c"}.fa-remove:before,.fa-close:before,.fa-times:before{content:"\f00d"}.fa-search-plus:before{content:"\f00e"}.fa-search-minus:be
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 5c 66 30 33 30 22 7d 2e 66 61 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 31 22 7d 2e 66 61 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 7d 2e 66 61 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 33 22 7d 2e 66 61 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 34 22 7d 2e 66 61 2d 74 65 78 74 2d 77 69 64 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 35 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 36 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: \f030"}.fa-font:before{content:"\f031"}.fa-bold:before{content:"\f032"}.fa-italic:before{content:"\f033"}.fa-text-height:before{content:"\f034"}.fa-text-width:before{content:"\f035"}.fa-align-left:before{content:"\f036"}.fa-align-center:before{content:"\f
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 66 61 2d 6d 69 6e 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 36 22 7d 2e 66 61 2d 74 69 6d 65 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 37 22 7d 2e 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 38 22 7d 2e 66 61 2d 71 75 65 73 74 69 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 39 22 7d 2e 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 61 22 7d 2e 66 61 2d 63 72 6f 73 73 68 61 69 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 62 22 7d 2e 66 61 2d 74 69 6d 65 73 2d 63 69 72 63 6c 65 Data Ascii: fa-minus-circle:before{content:"\f056"}.fa-times-circle:before{content:"\f057"}.fa-check-circle:before{content:"\f058"}.fa-question-circle:before{content:"\f059"}.fa-info-circle:before{content:"\f05a"}.fa-crosshairs:before{content:"\f05b"}.fa-times-circle
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 63 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 64 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 65 22 7d 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 2d 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 31 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 32 Data Ascii: }.fa-folder-open:before{content:"\f07c"}.fa-arrows-v:before{content:"\f07d"}.fa-arrows-h:before{content:"\f07e"}.fa-bar-chart-o:before,.fa-bar-chart:before{content:"\f080"}.fa-twitter-square:before{content:"\f081"}.fa-facebook-square:before{content:"\f082
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 63 65 72 74 69 66 69 63 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 33 22 7d 2e 66 61 2d 68 61 6e 64 2d 6f 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 34 22 7d 2e 66 61 2d 68 61 6e 64 2d 6f 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 35 22 7d 2e 66 61 2d 68 61 6e 64 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 36 22 7d 2e 66 61 2d 68 61 6e 64 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 37 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: bell:before{content:"\f0f3"}.fa-certificate:before{content:"\f0a3"}.fa-hand-o-right:before{content:"\f0a4"}.fa-hand-o-left:before{content:"\f0a5"}.fa-hand-o-up:before{content:"\f0a6"}.fa-hand-o-down:before{content:"\f0a7"}.fa-arrow-circle-left:before{cont
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 33 22 7d 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 34 22 7d 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 35 22 7d 2e 66 61 2d 6d 6f 6e 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 36 22 7d 2e 66 61 2d 63 61 72 65 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 37 22 7d 2e 66 61 2d 63 61 72 65 74 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 38 22 7d 2e 66 61 2d 63 61 72 65 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: quare:before{content:"\f0d3"}.fa-google-plus-square:before{content:"\f0d4"}.fa-google-plus:before{content:"\f0d5"}.fa-money:before{content:"\f0d6"}.fa-caret-down:before{content:"\f0d7"}.fa-caret-up:before{content:"\f0d8"}.fa-caret-left:before{content:"\f0
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 36 22 7d 2e 66 61 2d 62 75 69 6c 64 69 6e 67 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 37 22 7d 2e 66 61 2d 68 6f 73 70 69 74 61 6c 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 38 22 7d 2e 66 61 2d 61 6d 62 75 6c 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 39 22 7d 2e 66 61 2d 6d 65 64 6b 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 61 22 7d 2e 66 61 2d 66 69 67 68 74 65 72 2d 6a 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 62 22 7d 2e 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 63 22 7d 2e 66 61 2d 68 2d 73 71 75 61 72 65 3a 62 Data Ascii: before{content:"\f0f6"}.fa-building-o:before{content:"\f0f7"}.fa-hospital-o:before{content:"\f0f8"}.fa-ambulance:before{content:"\f0f9"}.fa-medkit:before{content:"\f0fa"}.fa-fighter-jet:before{content:"\f0fb"}.fa-beer:before{content:"\f0fc"}.fa-h-square:b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:09 UTC	634	OUT	GET /23d80j2d/qwd13d8jqd/zqvabm8j.js HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:10 UTC	696	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:09 GMT Content-Type: application/javascript Content-Length: 84817 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-14b51" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=grfNnhnk1sioIfElzhTsz8tALeVtPGcqpE4yr0Ysi7TN50yXl778M3X0EmgiyISj%2BlEQC8VwE2ZuP2lIREwBO2jkmUY16DZ4ZinMTBG3yds18O38X%2BZNlAZqxse3dDP9ew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d83c3bd02260-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:10 UTC	673	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 Data Ascii: /! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a wind
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 30 3e 61 3f 74 68 69 73 5b 61 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 61 5d 3a 64 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: 0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 21 3d 61 26 26 61 3d 3d 3d 61 2e 77 69 6e 64 6f 77 7d 2c 69 73 4e 75 6d 65 72 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 6e 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2d 70 61 72 73 65 46 6c 6f 61 74 28 61 29 2b 31 3e 3d 30 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 61 29 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 21 31 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6a 2e 63 61 6c 6c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 3f 21 31 3a 21 30 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e Data Ascii: !=a&&a===a.window},isNumeric:function(a){return!n.isArray(a)&&a-parseFloat(a)+1>=0},isPlainObject:function(a){return"object"!==n.type(a)\|\|a.nodeType\|\|n.isWindow(a)?!1:a.constructor&&!j.call(a.constructor.prototype,"isPrototypeOf")?!1:!0},isEmptyObject:fun
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 28 76 61 72 20 64 2c 65 3d 5b 5d 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 2c 68 3d 21 63 3b 67 3e 66 3b 66 2b 2b 29 64 3d 21 62 28 61 5b 66 5d 2c 66 29 2c 64 21 3d 3d 68 26 26 65 2e 70 75 73 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 2c 68 3d 73 28 61 29 2c 69 3d 5b 5d 3b 69 66 28 68 29 66 6f 72 28 3b 67 3e 66 3b 66 2b 2b 29 64 3d 62 28 61 5b 66 5d 2c 66 2c 63 29 2c 6e 75 6c 6c 21 3d 64 26 26 69 2e 70 75 73 68 28 64 29 3b 65 6c 73 65 20 66 6f 72 28 66 20 69 6e 20 61 29 64 3d 62 28 61 5b 66 5d 2c 66 2c 63 29 2c 6e 75 6c 6c 21 3d 64 26 26 69 2e 70 75 73 68 28 64 29 3b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 5b 5d 2c 69 Data Ascii: (var d,e=[],f=0,g=a.length,h=!c;g>f;f++)d=!b(a[f],f),d!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,f=0,g=a.length,h=s(a),i=[];if(h)for(;g>f;f++)d=b(a[f],f,c),null!=d&&i.push(d);else for(f in a)d=b(a[f],f,c),null!=d&&i.push(d);return e.apply([],i
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 4e 2b 22 29 29 7c 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 50 3d 22 3a 28 22 2b 4d 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 4f 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 52 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 Data Ascii: '((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+N+"))\|)"+L+"\\]",P=":("+M+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+O+"))\|.*)\$\|)",Q=new RegExp(L+"+","g"),R=new RegExp("^"+L+"+\|((?:^\|[^\\\\])(?:\\\\.)
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 29 7b 47 2e 61 70 70 6c 79 28 61 2c 49 2e 63 61 6c 6c 28 62 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 77 68 69 6c 65 28 61 5b 63 2b 2b 5d 3d 62 5b 64 2b 2b 5d 29 3b 61 2e 6c 65 6e 67 74 68 3d 63 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 2c 62 2c 64 2c 65 29 7b 76 61 72 20 66 2c 68 2c 6a 2c 6b 2c 6c 2c 6f 2c 72 2c 73 2c 77 2c 78 3b 69 66 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 64 3d 64 7c 7c 5b 5d 2c 6b 3d 62 2e 6e 6f 64 65 54 79 70 65 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 7c 7c 31 21 3d 3d 6b 26 26 39 21 3d 3d 6b 26 26 31 31 21 3d Data Ascii: ction(a,b){G.apply(a,I.call(b))}:function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function gb(a,b,d,e){var f,h,j,k,l,o,r,s,w,x;if((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,d=d\|\|[],k=b.nodeType,"string"!=typeof a\|\|!a\|\|1!==k&&9!==k&&11!=
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 62 29 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 7c 22 29 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 63 5b 65 5d 5d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6c 62 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 26 26 61 2c 64 3d 63 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 26 26 28 7e 62 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 2d 28 7e 61 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 3b 69 66 28 63 29 77 68 69 6c 65 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 63 3d 3d 3d 62 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 61 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6d 62 28 61 Data Ascii: b){var c=a.split("\|"),e=a.length;while(e--)d.attrHandle[c[e]]=b}function lb(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex\|\|C)-(~a.sourceIndex\|\|C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function mb(a
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 75 2c 21 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 63 5d 3a 5b 5d 7d 7d 2c 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 63 62 2c 64 62 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: u,!g.getElementsByName\|\|!g.getElementsByName(u).length}),c.getById?(d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a);return c&&c.parentNode?[c]:[]}},d.filter.ID=function(a){var b=a.replace(cb,db);return functio
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 7d 29 2c 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4c 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a Data Ascii: sh(".#.+[+~]")}),jb(function(a){var b=g.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"[^$\|!~]?="),a.querySelectorAll(":enabled").length\|\|q.push(":
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 5d 2c 69 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 67 3f 2d 31 3a 62 3d 3d 3d 67 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 62 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 68 5b 64 5d 3d 3d 3d 69 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6c 62 28 68 5b 64 5d 2c 69 5b 64 5d 29 3a 68 5b 64 5d 3d 3d 3d 76 3f 2d 31 3a 69 5b 64 5d 3d 3d 3d 76 3f 31 3a 30 7d 2c 67 29 3a 6e 7d 2c 67 62 2e 6d 61 74 63 68 65 Data Ascii: ],i=[b];if(!e\|\|!f)return a===g?-1:b===g?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return lb(a,b);c=a;while(c=c.parentNode)h.unshift(c);c=b;while(c=c.parentNode)i.unshift(c);while(h[d]===i[d])d++;return d?lb(h[d],i[d]):h[d]===v?-1:i[d]===v?1:0},g):n},gb.matche

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49714	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:09 UTC	663	OUT	GET /23d80j2d/qwd13d8jqd/r3v1h_up.js HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://markssmith.icu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:10 UTC	705	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:09 GMT Content-Type: application/javascript Content-Length: 60044 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-ea8c" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SM%2BzxKvQyNjIT08%2BEAqynIai8uom7zgo1snxI1JeT%2B%2BHlVNaNBp2fU4Cj1ZmRjNbEVmo4as7qCTPCQK5D4PO%2Bx4JcwpXKeSCFmuBI%2BaBAVNTwWOhcEgJDwz%2FlqA3RABjlg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d83c4a5c5c79-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:10 UTC	664	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 69 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 6e 26 26 69 28 74 2c 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 28 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 29 7b 76 61 72 20 6f 3d 6e 5b 69 5d 2c 73 3d 65 5b 69 5d 2c 72 3d 73 26 26 61 2e 69 73 45 6c 65 6d 65 6e 74 28 73 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 6e 75 6c 6c 3d 3d 3d 28 6c 3d 73 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6c 3f 22 22 2b 6c 3a 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6c 29 2e 6d 61 74 63 68 28 2f Data Ascii: Element:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var i in n)if(Object.prototype.hasOwnProperty.call(n,i)){var o=n[i],s=e[i],r=s&&a.isElement(s)?"element":null===(l=s)\|\|"undefined"==typeof l?""+l:{}.toString.call(l).match(/
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 6e 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 22 62 73 2e 61 6c 65 72 74 22 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 6e 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: n.close=function(t){var e=this._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},n.dispose=function(){e.removeData(this._element,"bs.alert"),this._element=null},n._getRootElement=function(t){v
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 30 2c 6e 3d 21 30 2c 69 3d 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 74 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 29 5b 30 5d 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 29 7b 69 66 28 22 72 61 64 69 6f 22 3d 3d 3d 6f 2e 74 79 70 65 29 69 66 28 6f 2e 63 68 65 63 6b 65 64 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c Data Ascii: s._element=t}var n=t.prototype;return n.toggle=function(){var t=!0,n=!0,i=e(this._element).closest('[data-toggle="buttons"]')[0];if(i){var o=this._element.querySelector('input:not([type="hidden"])');if(o){if("radio"===o.type)if(o.checked&&this._element.cl
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 28 22 4c 41 42 45 4c 22 21 3d 3d 69 2e 74 61 67 4e 61 6d 65 7c 7c 6f 26 26 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 6f 2e 74 79 70 65 29 26 26 64 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 28 6e 29 2c 22 74 6f 67 67 6c 65 22 29 7d 7d 29 29 2e 6f 6e 28 22 66 6f 63 75 73 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 20 62 6c 75 72 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 Data Ascii: ins("disabled")))return void t.preventDefault();("LABEL"!==i.tagName\|\|o&&"checkbox"!==o.type)&&d._jQueryInterface.call(e(n),"toggle")}})).on("focus.bs.button.data-api blur.bs.button.data-api",'[data-toggle^="button"]',(function(t){var n=e(t.target).closes
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 30 2c 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 30 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 22 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e Data Ascii: iding=!1,this.touchTimeout=null,this.touchStartX=0,this.touchDeltaX=0,this._config=this._getConfig(e),this._element=t,this._indicatorsElement=this._element.querySelector(".carousel-indicators"),this._touchSupported="ontouchstart"in document.documentElemen
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 74 6f 28 74 29 7d 29 29 3b 65 6c 73 65 7b 69 66 28 69 3d 3d 3d 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 75 73 65 28 29 2c 76 6f 69 64 20 74 68 69 73 2e 63 79 63 6c 65 28 29 3b 76 61 72 20 6f 3d 74 3e 69 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 3b 74 68 69 73 2e 5f 73 6c 69 64 65 28 6f 2c 74 68 69 73 2e 5f 69 74 65 6d 73 5b 74 5d 29 7d 7d 2c 6e 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 67 29 2c 65 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 29 2c 74 68 69 73 2e Data Ascii: ).one("slid.bs.carousel",(function(){return n.to(t)}));else{if(i===t)return this.pause(),void this.cycle();var o=t>i?"next":"prev";this._slide(o,this._items[t])}},n.dispose=function(){e(this._element).off(g),e.removeData(this._element,"bs.carousel"),this.
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 29 2c 74 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 28 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 29 2c 74 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 79 63 6c 65 28 65 29 7d 29 2c 35 30 30 2b 74 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 3b 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 Data Ascii: ginalEvent.clientX-t.touchStartX),t._handleSwipe(),"hover"===t._config.pause&&(t.pause(),t.touchTimeout&&clearTimeout(t.touchTimeout),t.touchTimeout=setTimeout((function(e){return t.cycle(e)}),500+t._config.interval))};e(this._element.querySelectorAll(".c
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 73 29 26 26 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 77 72 61 70 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 28 6f 2b 28 22 70 72 65 76 22 3d 3d 3d 74 3f 2d 31 3a 31 29 29 25 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 72 3f 74 68 69 73 2e 5f 69 74 65 6d 73 5b 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 5d 3a 74 68 69 73 2e 5f 69 74 65 6d 73 5b 72 5d 7d 2c 6e 2e 5f 74 72 69 67 67 65 72 53 6c 69 64 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: ==o\|\|n&&o===s)&&!this._config.wrap)return e;var r=(o+("prev"===t?-1:1))%this._items.length;return-1===r?this._items[this._items.length-1]:this._items[r]},n._triggerSlideEvent=function(t,n){var i=this._getItemIndex(t),o=this._getItemIndex(this._element.que

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49718	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:10 UTC	695	OUT	GET /23d80j2d/qwd13d8jqd/wwrdx--k.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:10 UTC	690	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:10 GMT Content-Type: image/png Content-Length: 249564 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:09 GMT ETag: "6615dfe9-3cedc" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x944BOWw9t%2BhyEbAR%2FTjjomIwbuWaEWYjQqMdPibJHg1lPcRwVPQe%2BrWNm6rWkWkivqrGVxsWyUyEf75EzyQ9hcm%2FfTWXSfNOX6WULKwrdyCI7E7ijAeTO0wshr%2Bkp6GCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d83feee1099a-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:10 UTC	679	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 90 00 00 04 1a 08 06 00 00 00 44 97 3b 56 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 50 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 02 01 12 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 26 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 06 90 a0 03 00 04 00 00 00 01 00 00 04 1a 00 00 00 00 43 59 72 36 00 00 01 59 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d Data Ascii: PNGIHDRD;VgAMAa cHRMz&u0`:pQ<PeXIfMM*i&CYr6YiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xm
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 80 04 48 80 04 48 80 04 48 80 04 48 20 43 c0 49 12 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 90 4d 80 02 52 36 0d 7e 27 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 10 0a 48 bc 08 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 0a 48 bc 06 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 Data Ascii: HHHH CI$@$@$@$@$@$@$@$@$@$@$@$@$MR6~' HHHHHHHHHHHHHrP@ HHHHHHHHHHHHHrP@
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 0a 48 bc 06 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 0a 48 bc 06 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 0a 48 bc 06 48 80 04 48 80 04 48 80 04 Data Ascii: HHHHHHHHHHrP@ HHHHHHHHHHHHHrP@ HHHHHHHHHHHHHrP@ HHHH
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 90 00 09 90 00 09 90 00 09 90 00 09 90 c0 6e 48 80 02 52 1f 9f d4 36 c7 aa 35 10 fb 6d 6e db 75 67 7c fe ba 2a 13 01 d4 36 5c 27 22 62 1c 92 70 6a e4 8c 91 1b e0 04 d4 08 15 c8 06 10 1d 34 c5 9a 2d 3e 59 51 36 2a 80 18 59 04 e2 43 db 36 ee 74 dc 88 14 6d fd b6 fb 96 71 16 da 6f a4 db 6f b5 ef 0e 51 03 4a c3 09 56 90 63 c0 44 8f db 6d 98 29 37 75 bf c2 25 6e 4c cf 11 48 63 9d ae b7 de b8 4f 8a 07 ce 54 b4 ca 38 61 33 4d bb 39 d1 b3 6d 9d c3 36 b7 af 7e 53 c7 6d e6 04 e8 f8 f4 1a 30 e3 34 7f cc 58 cc 0e ad 59 f3 d5 6a 6d 2f 40 fb d6 6d b4 3b ac cd 74 67 1a f3 0f 09 ec 00 01 bd 9c f4 37 a4 7f 35 2a 45 cd dc bf 3a bd c6 2c 41 54 db e8 bd 43 23 e3 ac ef d6 94 7f bb 4b a0 ed 8e 51 b8 07 fb 89 92 99 66 1e 2c 1a 49 a4 f7 05 bd 0f 5a f7 76 4c 71 fe cc e9 c1 d4 08 Data Ascii: nHR65mnug\|6\'"bpj4->YQ6YC6tmqooQJVcDm)7u%nLHcOT8a3M9m6~Sm04XYjm/@m;tg75*E:,ATC#KQf,IZvLq
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 d0 2f 09 50 40 ea 97 a7 a5 6d 50 d9 82 8e f1 c6 b6 ad 82 98 00 19 c0 76 18 c2 79 6b cb 06 ba 8d 13 c2 48 d2 38 74 2d 87 9f dd 8f 2d 88 18 b1 02 7d 19 d1 a1 75 4b 4b 9c b0 db 5a fd a0 91 ad 50 64 ed 7b f7 f8 0a b9 0d ac f4 f0 34 e2 c8 8a 3e 52 5e ca 52 23 8c 32 75 88 32 8c 55 5e d2 a2 f3 da 56 ff 59 d6 93 0e 54 6b df a6 5f ec 5b dd b7 d6 ae 11 7d 94 49 95 67 89 47 1a ff 64 39 79 a1 0c 66 da e9 3c 7e ce 48 85 67 9a 66 da 6b 2f 90 bb 30 da 36 67 b0 35 6e fe 25 81 1d 24 60 ae 31 fc 56 34 ca c8 69 5f 5f 7a ad ea f5 16 37 bf 10 bd 6e 93 e2 b1 ae 3e fc 6e f4 b7 a5 bf b7 8e 42 c7 0e 8e 65 8f dd dc e6 5e 2a 00 bd b3 58 d1 8d b6 98 6c 6e f3 e6 dc e8 1f dc e1 70 5e f5 45 04 bd ef 69 5b 8d 26 33 cf 0f ac Data Ascii: @$@$@$@$@$@$@$/P@mPvykH8t--}uKKZPd{4>R^R#2u2U^VYTk_[}IgGd9yf<~Hgfk/06g5n%$`1V4i__z7n>nBe^*Xlnp^Ei[&3
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 96 ea ea 6a 89 87 83 26 96 51 ef 51 7a 4f b4 cd ba 1b ea 7d 24 73 4b b1 57 70 4a 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 b0 db 11 a0 80 d4 8f 4e 69 c7 74 71 1a 4d 82 94 42 50 09 d4 e9 57 e6 f7 4a 12 e2 4e 73 53 bd 78 51 f4 bc b2 a2 5c ea b6 37 18 31 c8 03 f1 47 c5 25 1f 84 02 4d 65 a6 91 44 69 13 65 84 af 70 00 9a 04 44 4e 08 42 68 64 6a fd 40 20 4a a8 e0 60 de 3c 07 04 08 17 31 0d 40 32 02 16 fa 72 7b 91 d2 0e 22 8a 46 17 64 fc bc d8 44 3b db ad cc eb 73 23 49 13 52 be 05 eb 25 1d 43 4a 3f 88 48 e9 a4 13 62 0d a2 91 ca 6a 70 ac ea 3c b5 44 1e 2b 75 53 b6 70 d4 b9 d3 b6 24 40 48 3f 67 f6 01 ee 0e 80 56 d1 4f cf 8f 46 6c a8 cb 56 53 7e f9 70 ee 5d 10 b4 1c 10 8f 3c a8 35 e3 48 44 64 c6 94 51 b2 ff 14 6b 4f 2b 57 0e 90 85 6f 21 Data Ascii: j&QQzO}$sKWpJ$@$@$@$@$@$@$@$NitqMBPWJNsSxQ\71G%MeDiepDNBhdj@ J`<1@2r{"FdD;s#IR%CJ?Hbjp<D+uSp$@H?gVOFlVS~p]<5HDdQkO+Wo!
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 8b 95 de cd b4 e1 1f 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 81 dd 82 00 05 a4 3e 3c 8d 1a c1 a2 42 8c be cd 9d 40 84 8b 89 ee d1 77 bc 4d 9a 34 5d 2e 28 6e 9e 90 01 88 12 92 70 93 84 eb 37 ca d4 09 23 e4 ec 8f 7d 54 0e 3d b8 cc d4 18 19 84 36 1a 75 14 82 7a b4 62 6d 4c 96 7c b8 56 3e dc b0 49 36 d7 37 9a 34 44 fa 76 f8 80 aa 4a 19 37 72 88 4c 1d 3f 46 26 8d 19 24 c3 50 da 47 df fb 8f 42 49 da 8e e9 b2 2d 22 8f 3d b1 44 9e 7f 65 be d4 87 c2 52 51 3b 54 13 a2 49 5d 43 b3 04 02 1a e7 82 ba 4a 69 8d bc d1 37 d0 51 17 09 db c5 4d f0 01 22 78 f4 18 f0 d9 dd ec c4 99 c3 64 78 ad 1d e3 d3 f1 e8 9e 7e 7b 93 ac af 47 ea c0 3e b6 bd 86 57 ca 41 93 10 7a 96 c7 16 ae d8 26 cb 36 34 e7 59 db 73 8b 47 0f 2a 93 d1 Data Ascii: ><B@wM4].(np7#}T=6uzbmL\|V>I674DvJ7rL?F&$PGBI-"=DeRQ;TI]CJi7QM"xdx~{G>WAz&64YsG*
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: f8 e9 43 7b 65 78 0f 7d f7 c8 6e f7 3b 7f 79 bd 9c 73 fd 4b 39 db df 74 c9 41 32 75 54 55 ce b2 9e 98 b9 ed 4b b3 bb d5 cd af 1e 5c 22 37 cf 5d 5e f4 b6 1a 9d 52 c8 de f8 50 93 25 ee 3a 16 87 88 d7 1c 46 f4 5d 40 c3 f8 3a b7 e6 88 c6 01 96 6e 97 9e 34 49 b6 36 46 64 29 52 0b 6e 86 48 d7 12 c1 6f 1d e2 66 12 a2 55 6f d8 be a3 ab e5 b0 29 9a ec d2 b2 c5 6b 1a e5 d9 c5 9b e5 32 8c c3 e3 b6 9c d7 e7 1e 36 a6 a0 80 74 f8 de 83 8c 78 a4 3d 78 b1 8d 46 e7 e9 e7 c3 cd 2d 46 44 bb ff d5 b5 12 d4 da 69 b4 bc 04 f4 5a ba fe a2 fd e4 cf 4f ae 90 85 2b ea f3 b6 e3 8a dd 83 80 cb 85 e7 3a 9e b7 29 e4 7c 75 e2 f9 ab a9 69 35 15 ac 1b e2 91 4e 35 bd 5d 0c 61 8d 49 4c 69 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 d0 5f 09 50 40 ea c3 33 a3 ef 22 a3 Data Ascii: C{ex}n;ysK9tA2uTUK\"7]^RP%:F]@:n4I6Fd)RnHofUo)k26tx=xF-FDiZO+:)\|ui5N5]aILi$@$@$@$@$@$@$@$_P@3"
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: 02 24 d0 9f 09 30 85 5d 1f 9e 1d 4d bb 96 d0 70 19 77 52 9c 4e 37 04 99 a8 94 43 9a a9 f5 24 e4 f4 23 67 c9 41 93 44 a2 58 bd 16 be dd 3b 1e 7a 4d 1a 1d a3 11 fc 83 28 22 b4 f5 a1 ee 51 34 1e 94 48 08 91 4b 1e a4 a4 43 ee b9 14 6a a8 38 51 5f c1 89 08 23 49 36 4b 24 12 16 1f 84 29 84 1e c1 91 e5 c5 76 10 94 10 ca 14 d5 bc 76 ce b8 b8 bd 0e 19 58 51 26 2e a4 b8 8b 62 bb a4 2f 2d cb b6 7b e4 f2 6b 1f 91 5f 7d ff 0c bc 2b 2d 32 e7 a3 fb ca 7b 6f bf 29 6f 7d 50 27 2e 7f a5 b8 2b 6a 20 20 85 25 1a 6d c6 7e 34 41 8f ba c7 fa de 14 a3 71 c6 69 81 27 33 aa be 1f 53 29 23 e8 2a da a5 94 be 7a a3 ed 57 20 22 a8 00 a4 b5 81 ea 9a a3 26 4d 59 2c 0e 87 28 d2 31 95 fb ba be 8d fc f6 73 b3 3a 0c 4b a3 8e d4 34 7a e5 f2 33 a6 e6 ac d7 08 96 33 67 8f 32 9f 77 d6 34 c8 5f Data Ascii: $0]MpwRN7C$#gADX;zM("Q4HKCj8Q_#I6K$)vvXQ&.b/-{k_}+-2{o)o}P'.+j %m~4Aqi'3S)#*zW "&MY,(1s:K4z33g2w4_
2024-04-25 22:42:10 UTC	1369	IN	Data Raw: ef 68 7d 4b 60 fc 90 80 ac da d4 22 2e 3c a4 62 a6 ee 91 0f cf 70 0f ae 46 b7 15 75 e4 c0 1b 1d 0e 08 b7 78 1e d3 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 a0 bf 12 e8 5b ef 7f 7f a5 b2 93 c6 e5 84 c8 a1 02 d2 80 ca 01 12 8a 44 c4 e7 71 48 35 a2 8f 8e 3f 66 3f 29 2f 17 89 c1 ef f9 af 7b fe 03 c9 c8 07 07 21 92 d0 c1 81 e9 46 44 40 45 39 6a 20 a1 80 52 a8 b9 45 6a b1 6d b4 7e 9d 0c 0f 24 e5 17 57 5d 2c 53 87 88 b8 e0 97 0a 43 43 d9 b4 2d 21 37 df f8 77 79 7f 6d 8b 78 6a 26 49 d2 8d b4 77 a8 5b e4 f5 b9 c4 ef f4 88 cb e5 42 34 13 de 88 46 df 89 48 10 02 07 a2 26 10 05 d5 14 8d c9 56 bc 37 3d f7 d5 0f e4 ac 43 27 8a 03 ea cc e1 07 ec 2d 8f bd be 1e 42 c8 20 b4 b7 52 5a 39 9d 2e 13 05 b5 93 70 15 b1 9b 8c c7 18 63 57 5b 5b 17 ea b0 cd Data Ascii: h}K`".<bpFuxHHHHHHHH[DqH5?f?)/{!FD@E9j REjm~$W],SCC-!7wymxj&Iw[B4FH&V7=C'-B RZ9.pcW[[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49717	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:10 UTC	697	OUT	GET /23d80j2d/qwd13d8jqd/wwrdx--k-2.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:10 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:10 GMT Content-Type: image/png Content-Length: 187 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:09 GMT ETag: "6615dfe9-bb" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w7PjAc%2FS13abuvPwl05mX2R3nYruC4J7AAExlBjIvbt7Dg9BvCf%2BVDMTdHOZtKR%2FZfczH5dnzSS7kZHzlec1mmgaDtQyNnEwxRM%2FzAB48829%2BhoO7UsLLwWDetDN9mkJuA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d83ffc072203-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:10 UTC	187	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 1e 01 03 00 00 00 c4 a0 64 35 00 00 00 06 50 4c 54 45 76 76 76 fe fe fe 2f ba f0 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 5b 49 44 41 54 28 15 d5 d0 a1 0d 80 40 0c 85 e1 26 08 04 82 91 3b 0a a3 dc 06 8c 80 21 38 44 c9 09 0c a1 50 40 bc f0 26 68 c5 2f be dc 35 97 13 ff 8f 65 a4 b3 25 3a 9a 68 29 40 d6 45 27 05 aa 73 74 fd 2e 8a de d9 1f da 98 2a ae 7f 69 71 da 35 f2 a9 41 81 ac a7 77 a5 fc fb 0b da ad 0d 70 69 4b d6 47 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRd5PLTEvvv/pHYs[IDAT(@&;!8DP@&h/5e%:h)@E'st.*iq5AwpiKGIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49719	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:10 UTC	717	OUT	GET /23d80j2d/qwd13d8jqd/rwzcxxa4.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	686	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: image/png Content-Length: 168 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:09 GMT ETag: "6615dfe9-a8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hhQ6NXZ82iXUYob%2FjrgLKeYW2mQYfWb9G48L1Z5mCY9cpF%2FWh%2FSzGM6h3Faf%2BhrgiHGoN6YbW%2FDOcSifOGrm0VDFm5W%2FOg3Y5xmuuPOGvigCw8khEXw3aTlUCREdDHxHdQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d842b989a66b-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 1e 04 03 00 00 00 26 dc d8 af 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 0f 50 4c 54 45 f4 50 21 00 00 00 83 bb 03 03 a6 f1 fc ba 03 5d 32 e9 94 00 00 00 05 74 52 4e 53 ff 00 ff ff ff 08 b1 e7 2f 00 00 00 21 49 44 41 54 78 9c 63 60 80 00 41 25 08 10 60 18 d6 02 82 a8 00 8b 80 31 04 08 ba 40 c0 f0 16 00 00 8a 22 40 4d a4 c1 93 b8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR&sRGB,pHYsPLTEP!]2tRNS/!IDATxc`A%`1@"@MIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49720	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:10 UTC	717	OUT	GET /23d80j2d/qwd13d8jqd/m-8l5t4x.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	695	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: image/png Content-Length: 364 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-16c" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BSy0pPzg7d%2Bn32YaEIPxR%2BCqRbfv%2FrQWz%2FVQ4LYls1Nf%2BCgVYlvVwc8JCdPQHlS4zsQJhij%2B%2BOjpMB%2BuVAuS7FMht3617TpW%2Bdqo%2F7squC69nloMrHN9QBkF83w3zprE5w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d842bcf2743e-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	364	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 0c 08 02 00 00 00 d9 17 cb b0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 0e 49 44 41 54 78 da 5c 90 bf 8e 45 40 14 c6 b1 a3 94 a8 54 42 a5 13 c9 2d 6e 24 b4 a2 90 28 e4 96 1a 0f e4 35 54 1a 37 91 78 00 3d 5a 51 88 82 c2 9f 6c 28 6e 23 d8 b3 d7 ae cc ee 57 4c be f9 9d f9 4e ce 1c 72 59 16 e2 57 59 96 25 49 02 c6 30 0c 55 55 2f 4e 11 98 ea ba fe 7c ab 2c 4b 9c 93 d0 29 08 82 b6 6d 45 51 2c 8a 62 5d d7 b3 70 bb dd fa be e7 38 ce 75 5d 04 e9 3c cf 81 02 c2 d3 27 84 b0 a6 69 68 1c c7 ab c0 f3 bc e3 38 60 e2 38 86 f0 09 bb ae a3 ee f7 bb 65 59 e7 1d 5e 88 6f 3d 1e 8f 93 98 a6 a9 eb fa f7 e0 34 4d 13 7f 45 51 3f 1f 42 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx\E@TB-n$(5T7x=ZQl(n#WLNrYWY%I0UU/N\|,K)mEQ,b]p8u]<'ih8`8eY^o=4MEQ?B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49721	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:10 UTC	717	OUT	GET /23d80j2d/qwd13d8jqd/sh9337d_.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	685	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: image/png Content-Length: 722 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-2d2" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gPsywWPFQFbcxaXklQKnAS4dUEI1r1jfoXr1mTAn%2FTgtxh3qCro5QjQxTPPA2%2BoMcnh2gF2DleoxBCp3ro7bPGay%2BM7boohL5%2FMulWuUC7pw9b5sP17fEFy%2FSjbOEme5zg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d842bac1a51c-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	684	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 01 03 00 00 00 f9 f0 f3 88 00 00 00 06 50 4c 54 45 00 00 00 00 00 00 a5 67 b9 cf 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 65 49 44 41 54 78 5e c5 95 bd 6e dc 30 0c 80 29 08 a8 3a 45 7d 80 e0 f4 1a 19 0e f6 2b 65 f4 70 c8 09 b8 a1 63 5e 49 41 87 be 06 83 0e 59 95 cd 83 61 d6 3c 51 c7 8b b9 b7 c6 1d 6c 7f 96 28 fe 13 e4 72 19 be 5e be fc 0b 10 70 b7 80 e8 eb 92 33 d1 ba 5b f0 75 49 a2 8f 0f 9a ef 77 cc be a4 55 81 a3 ec 8b 23 b5 2f 2c ac c7 88 2a 02 61 5c 20 cc 2a 22 07 22 74 2a 64 6d 7a 9c 3b 70 73 d3 23 75 a9 a1 06 f2 85 30 a2 80 58 62 f5 fc af 02 52 0e ac 07 ba 7e cc d8 fd b1 08 38 75 30 08 98 7b 5c 92 9c da 65 41 Data Ascii: PNGIHDRPLTEgtRNS@fpHYseIDATx^n0):E}+epc^IAYa<Ql(r^p3[uIwU#/,a\ ""t*dmz;ps#u0XbR~8u0{\eA
2024-04-25 22:42:11 UTC	38	IN	Data Raw: 76 f0 d9 d1 68 87 a7 1d af 10 f0 bf cc 7d 97 05 fc 05 4e 81 b1 67 bf 81 6c 4e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: vh}NglNIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49722	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:10 UTC	656	OUT	GET /23d80j2d/qwd13d8jqd/_iagq4xt.js HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	707	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: application/javascript Content-Length: 302554 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-49dda" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vW7lfs%2F%2FSJOeU5zvO5fks0rXCMVa2ZsrwUc50WH0X8SEUKoFR8O2l40gpUXwd%2BU%2F8xdahHnTqbuIwqS3%2FpZe1d1yiz%2BtFgZORlRTJSQRnHZiBPRv0f%2F6xl6jwwCFb8gFww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d842cd353370-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	662	IN	Data Raw: 2f 2a 21 20 65 6d 6f 6a 69 6f 6e 65 20 30 32 2d 31 32 2d 32 30 31 36 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 65 6d 6f 6a 69 6f 6e 65 4c 69 73 74 3d 7b 22 3a 6b 69 73 73 5f 77 77 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 34 36 39 2d 32 30 30 64 2d 32 37 36 34 2d 66 65 30 66 2d 32 30 30 64 2d 31 66 34 38 62 2d 32 30 30 64 2d 31 66 34 36 39 22 2c 22 31 66 34 36 39 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 39 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 34 36 39 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 39 22 2c 75 63 3a 22 31 66 34 36 39 2d 32 30 30 64 2d 32 37 36 34 2d 66 65 30 66 2d 32 30 30 64 2d 31 66 34 38 62 2d 32 30 30 64 2d 31 66 34 36 39 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 63 6f 75 70 6c 65 6b 69 73 Data Ascii: /! emojione 02-12-2016 /!function(a){a.emojioneList={":kiss_ww:":{unicode:["1f469-200d-2764-fe0f-200d-1f48b-200d-1f469","1f469-2764-1f48b-1f469"],fname:"1f469-2764-1f48b-1f469",uc:"1f469-200d-2764-fe0f-200d-1f48b-200d-1f469",isCanonical:!0},":couplekis
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 30 30 64 2d 32 37 36 34 2d 66 65 30 66 2d 32 30 30 64 2d 31 66 34 38 62 2d 32 30 30 64 2d 31 66 34 36 38 22 2c 22 31 66 34 36 38 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 34 36 38 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 22 2c 75 63 3a 22 31 66 34 36 38 2d 32 30 30 64 2d 32 37 36 34 2d 66 65 30 66 2d 32 30 30 64 2d 31 66 34 38 62 2d 32 30 30 64 2d 31 66 34 36 38 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 31 7d 2c 22 3a 66 61 6d 69 6c 79 5f 6d 6d 62 62 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 34 36 38 2d 32 30 30 64 2d 31 66 34 36 38 2d 32 30 30 64 2d 31 66 34 36 36 2d 32 30 30 64 2d 31 66 34 36 36 22 2c 22 31 66 34 36 38 2d 31 66 34 36 38 2d 31 66 34 36 36 2d 31 66 34 36 36 22 5d 2c 66 6e 61 Data Ascii: 00d-2764-fe0f-200d-1f48b-200d-1f468","1f468-2764-1f48b-1f468"],fname:"1f468-2764-1f48b-1f468",uc:"1f468-200d-2764-fe0f-200d-1f48b-200d-1f468",isCanonical:!1},":family_mmbb:":{unicode:["1f468-200d-1f468-200d-1f466-200d-1f466","1f468-1f468-1f466-1f466"],fna
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 6e 61 6d 65 3a 22 31 66 34 36 39 2d 31 66 34 36 39 2d 31 66 34 36 36 2d 31 66 34 36 36 22 2c 75 63 3a 22 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 36 2d 32 30 30 64 2d 31 66 34 36 36 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 66 61 6d 69 6c 79 5f 77 77 67 62 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 37 2d 32 30 30 64 2d 31 66 34 36 36 22 2c 22 31 66 34 36 39 2d 31 66 34 36 39 2d 31 66 34 36 37 2d 31 66 34 36 36 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 34 36 39 2d 31 66 34 36 39 2d 31 66 34 36 37 2d 31 66 34 36 36 22 2c 75 63 3a 22 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 37 2d 32 30 30 64 2d 31 Data Ascii: name:"1f469-1f469-1f466-1f466",uc:"1f469-200d-1f469-200d-1f466-200d-1f466",isCanonical:!0},":family_wwgb:":{unicode:["1f469-200d-1f469-200d-1f467-200d-1f466","1f469-1f469-1f467-1f466"],fname:"1f469-1f469-1f467-1f466",uc:"1f469-200d-1f469-200d-1f467-200d-1
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 36 38 2d 32 30 30 64 2d 31 66 34 36 38 2d 32 30 30 64 2d 31 66 34 36 37 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 66 61 6d 69 6c 79 5f 6d 77 67 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 34 36 38 2d 32 30 30 64 2d 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 37 22 2c 22 31 66 34 36 38 2d 31 66 34 36 39 2d 31 66 34 36 37 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 34 36 38 2d 31 66 34 36 39 2d 31 66 34 36 37 22 2c 75 63 3a 22 31 66 34 36 38 2d 32 30 30 64 2d 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 37 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 66 61 6d 69 6c 79 5f 77 77 62 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 39 2d 32 30 30 64 2d 31 66 34 36 36 22 2c 22 31 66 34 36 39 2d Data Ascii: 68-200d-1f468-200d-1f467",isCanonical:!0},":family_mwg:":{unicode:["1f468-200d-1f469-200d-1f467","1f468-1f469-1f467"],fname:"1f468-1f469-1f467",uc:"1f468-200d-1f469-200d-1f467",isCanonical:!0},":family_wwb:":{unicode:["1f469-200d-1f469-200d-1f466","1f469-
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 7d 2c 22 3a 66 6f 75 72 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 30 30 33 34 2d 66 65 30 66 2d 32 30 65 33 22 2c 22 30 30 33 34 2d 32 30 65 33 22 5d 2c 66 6e 61 6d 65 3a 22 30 30 33 34 2d 32 30 65 33 22 2c 75 63 3a 22 30 30 33 34 2d 32 30 65 33 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 66 69 76 65 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 30 30 33 35 2d 66 65 30 66 2d 32 30 65 33 22 2c 22 30 30 33 35 2d 32 30 65 33 22 5d 2c 66 6e 61 6d 65 3a 22 30 30 33 35 2d 32 30 65 33 22 2c 75 63 3a 22 30 30 33 35 2d 32 30 65 33 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 73 69 78 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 30 30 33 36 2d 66 65 30 66 2d 32 30 65 33 22 2c 22 30 30 33 36 2d 32 30 65 33 22 5d 2c 66 6e 61 6d 65 3a 22 30 30 Data Ascii: },":four:":{unicode:["0034-fe0f-20e3","0034-20e3"],fname:"0034-20e3",uc:"0034-20e3",isCanonical:!0},":five:":{unicode:["0035-fe0f-20e3","0035-20e3"],fname:"0035-20e3",uc:"0035-20e3",isCanonical:!0},":six:":{unicode:["0036-fe0f-20e3","0036-20e3"],fname:"00
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 77 61 74 65 72 5f 70 6f 6c 6f 5f 74 6f 6e 65 34 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 64 2d 31 66 33 66 65 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 64 2d 31 66 33 66 65 22 2c 75 63 3a 22 31 66 39 33 64 2d 31 66 33 66 65 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 77 61 74 65 72 5f 70 6f 6c 6f 5f 74 6f 6e 65 33 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 64 2d 31 66 33 66 64 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 64 2d 31 66 33 66 64 22 2c 75 63 3a 22 31 66 39 33 64 2d 31 66 33 66 64 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 77 61 74 65 72 5f 70 6f 6c 6f 5f 74 6f 6e 65 32 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 64 2d 31 66 Data Ascii: ,isCanonical:!0},":water_polo_tone4:":{unicode:["1f93d-1f3fe"],fname:"1f93d-1f3fe",uc:"1f93d-1f3fe",isCanonical:!0},":water_polo_tone3:":{unicode:["1f93d-1f3fd"],fname:"1f93d-1f3fd",uc:"1f93d-1f3fd",isCanonical:!0},":water_polo_tone2:":{unicode:["1f93d-1f
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 2d 31 66 33 66 62 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 31 7d 2c 22 3a 6a 75 67 67 6c 69 6e 67 5f 74 6f 6e 65 35 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 39 2d 31 66 33 66 66 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 39 2d 31 66 33 66 66 22 2c 75 63 3a 22 31 66 39 33 39 2d 31 66 33 66 66 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 6a 75 67 67 6c 65 72 5f 74 6f 6e 65 35 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 39 2d 31 66 33 66 66 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 39 2d 31 66 33 66 66 22 2c 75 63 3a 22 31 66 39 33 39 2d 31 66 33 66 66 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 31 7d 2c 22 3a 6a 75 67 67 6c 69 6e 67 5f 74 6f 6e 65 34 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 39 2d 31 66 Data Ascii: -1f3fb",isCanonical:!1},":juggling_tone5:":{unicode:["1f939-1f3ff"],fname:"1f939-1f3ff",uc:"1f939-1f3ff",isCanonical:!0},":juggler_tone5:":{unicode:["1f939-1f3ff"],fname:"1f939-1f3ff",uc:"1f939-1f3ff",isCanonical:!1},":juggling_tone4:":{unicode:["1f939-1f
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 33 66 65 22 2c 75 63 3a 22 31 66 39 33 38 2d 31 66 33 66 65 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 31 7d 2c 22 3a 63 61 72 74 77 68 65 65 6c 5f 74 6f 6e 65 33 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 38 2d 31 66 33 66 64 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 38 2d 31 66 33 66 64 22 2c 75 63 3a 22 31 66 39 33 38 2d 31 66 33 66 64 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 70 65 72 73 6f 6e 5f 64 6f 69 6e 67 5f 63 61 72 74 77 68 65 65 6c 5f 74 6f 6e 65 33 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 38 2d 31 66 33 66 64 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 38 2d 31 66 33 66 64 22 2c 75 63 3a 22 31 66 39 33 38 2d 31 66 33 66 64 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 31 7d 2c 22 3a 63 61 72 74 77 68 Data Ascii: 3fe",uc:"1f938-1f3fe",isCanonical:!1},":cartwheel_tone3:":{unicode:["1f938-1f3fd"],fname:"1f938-1f3fd",uc:"1f938-1f3fd",isCanonical:!0},":person_doing_cartwheel_tone3:":{unicode:["1f938-1f3fd"],fname:"1f938-1f3fd",uc:"1f938-1f3fd",isCanonical:!1},":cartwh
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 31 66 39 33 36 2d 31 66 33 66 65 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 36 2d 31 66 33 66 65 22 2c 75 63 3a 22 31 66 39 33 36 2d 31 66 33 66 65 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 6d 6f 74 68 65 72 5f 63 68 72 69 73 74 6d 61 73 5f 74 6f 6e 65 34 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 36 2d 31 66 33 66 65 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 36 2d 31 66 33 66 65 22 2c 75 63 3a 22 31 66 39 33 36 2d 31 66 33 66 65 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 31 7d 2c 22 3a 6d 72 73 5f 63 6c 61 75 73 5f 74 6f 6e 65 33 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 36 2d 31 66 33 66 64 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 36 2d 31 66 33 66 64 22 2c 75 63 3a 22 31 66 39 33 36 2d 31 66 33 66 64 22 2c 69 Data Ascii: 1f936-1f3fe"],fname:"1f936-1f3fe",uc:"1f936-1f3fe",isCanonical:!0},":mother_christmas_tone4:":{unicode:["1f936-1f3fe"],fname:"1f936-1f3fe",uc:"1f936-1f3fe",isCanonical:!1},":mrs_claus_tone3:":{unicode:["1f936-1f3fd"],fname:"1f936-1f3fd",uc:"1f936-1f3fd",i
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 31 7d 2c 22 3a 6d 61 6e 5f 69 6e 5f 74 75 78 65 64 6f 5f 74 6f 6e 65 32 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 35 2d 31 66 33 66 63 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 35 2d 31 66 33 66 63 22 2c 75 63 3a 22 31 66 39 33 35 2d 31 66 33 66 63 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 30 7d 2c 22 3a 74 75 78 65 64 6f 5f 74 6f 6e 65 32 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 35 2d 31 66 33 66 63 22 5d 2c 66 6e 61 6d 65 3a 22 31 66 39 33 35 2d 31 66 33 66 63 22 2c 75 63 3a 22 31 66 39 33 35 2d 31 66 33 66 63 22 2c 69 73 43 61 6e 6f 6e 69 63 61 6c 3a 21 31 7d 2c 22 3a 6d 61 6e 5f 69 6e 5f 74 75 78 65 64 6f 5f 74 6f 6e 65 31 3a 22 3a 7b 75 6e 69 63 6f 64 65 3a 5b 22 31 66 39 33 35 2d 31 66 33 66 62 22 5d 2c 66 6e 61 6d 65 3a Data Ascii: 1},":man_in_tuxedo_tone2:":{unicode:["1f935-1f3fc"],fname:"1f935-1f3fc",uc:"1f935-1f3fc",isCanonical:!0},":tuxedo_tone2:":{unicode:["1f935-1f3fc"],fname:"1f935-1f3fc",uc:"1f935-1f3fc",isCanonical:!1},":man_in_tuxedo_tone1:":{unicode:["1f935-1f3fb"],fname:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49725	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	656	OUT	GET /23d80j2d/qwd13d8jqd/rg-aa02k.js HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	693	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: application/javascript Content-Length: 1380 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-564" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HfdzPp8yqeReSnTD1UQeP8tYyjWL4T0tn%2BnOQlTudQHURsgbe17Q3ahCaZMoOewFRpcwwn1jIvvwZM%2BElhQz4hRTo3BicqdxZCnPORQE6mraSwBSIBGIOQOkzcpMOWrdaQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d845bbd4b3c7-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	676	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 69 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 6e 3d 69 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 6c 61 75 73 69 62 6c 65 22 29 2c 61 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 70 69 22 29 7c 7c 28 75 3d 28 74 3d 28 74 3d 6e 29 2e 73 72 63 2e 73 70 6c 69 74 28 22 2f 22 29 29 5b 30 5d 29 2b 22 2f 2f 22 2b 28 74 3d 74 5b 32 5d 29 2b 22 23 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 74 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 49 67 6e 6f 72 69 6e 67 20 45 76 65 6e 74 3a 20 22 2b 74 29 2c 65 26 26 65 2e 63 61 6c 6c 62 61 63 6b 26 26 65 2e 63 61 6c 6c 62 Data Ascii: !function(){"use strict";var t,e=window.location,i=window.document,n=i.getElementById("plausible"),a=n.getAttribute("data-api")\|\|(u=(t=(t=n).src.split("/"))[0])+"//"+(t=t[2])+"#";function o(t,e){t&&console.warn("Ignoring Event: "+t),e&&e.callback&&e.callb
2024-04-25 22:42:11 UTC	704	IN	Data Raw: 72 26 26 72 2e 6d 65 74 61 26 26 28 6c 2e 6d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 2e 6d 65 74 61 29 29 2c 72 26 26 72 2e 70 72 6f 70 73 26 26 28 6c 2e 70 3d 72 2e 70 72 6f 70 73 29 2c 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 3b 73 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 61 2c 21 30 29 2c 73 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2c 73 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6c 29 29 2c 73 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 72 26 26 72 2e 63 61 6c 6c 62 61 63 6b 26 26 72 2e 63 61 6c 6c 62 61 63 6b Data Ascii: r&&r.meta&&(l.m=JSON.stringify(r.meta)),r&&r.props&&(l.p=r.props),new XMLHttpRequest);s.open("POST",a,!0),s.setRequestHeader("Content-Type","text/plain"),s.send(JSON.stringify(l)),s.onreadystatechange=function(){4===s.readyState&&r&&r.callback&&r.callback

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	717	OUT	GET /23d80j2d/qwd13d8jqd/lmq9m72q.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: image/png Content-Length: 276 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:08 GMT ETag: "6615dfe8-114" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eKm3%2Bma%2FfFHxskwcCazEue0BZai%2F1xPBDTrTYKKhMiSrOO8LDqOlyDu2nUlTqNk%2FZp3PlXRUxmQ4bEnDFIAot93nkATHDCimcalnu8iDAx7z0lRspxCXVPL1Xg73mnLskA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d845bd99a675-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	276	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 0d 08 03 00 00 00 45 35 14 4e 00 00 00 4e 50 4c 54 45 00 00 00 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 3d 75 17 bb 00 00 00 1a 74 52 4e 53 00 a8 7a 53 ac b5 04 47 c1 96 15 6a 90 cd 22 a1 0c d8 9e 29 09 a4 6d 0f ae b2 10 a7 28 a1 00 00 00 5b 49 44 41 54 78 9c 65 8c 49 16 80 20 0c 43 99 e7 19 04 bd ff 45 15 a8 6e cc a2 e9 7f 69 83 d0 54 e7 1d 7d a2 f9 cc f4 05 4d 1a 6a 44 43 42 96 91 9d e2 b4 2c e1 65 07 3c 6c 67 40 ec 4f d5 01 b9 3a 4b 02 50 98 35 4a 8e 05 43 aa 67 1a 5b b8 c7 9e 17 6b f6 8d 88 57 14 73 b9 Data Ascii: PNGIHDRE5NNPLTEfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff=utRNSzSGj")m([IDATxeI CEniT}MjDCB,e<lg@O:KP5JCg[kWs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49727	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	394	OUT	GET /23d80j2d/qwd13d8jqd/wwrdx--k-2.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	680	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: image/png Content-Length: 187 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:09 GMT ETag: "6615dfe9-bb" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6025 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eFQ%2B7EgzBlLzUi13R4FxUU8ni2EFb4dKa02Op9TOOMQqfzJwQj5wgGpdurZBqBm5T2huJ7oplX0CQPIbER1DeCqaTXfyLOrm%2B7GC7ayDS86LQCcLoR5GsCH8h%2B9oyxlfIg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d845cc344c0a-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	187	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 1e 01 03 00 00 00 c4 a0 64 35 00 00 00 06 50 4c 54 45 76 76 76 fe fe fe 2f ba f0 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 5b 49 44 41 54 28 15 d5 d0 a1 0d 80 40 0c 85 e1 26 08 04 82 91 3b 0a a3 dc 06 8c 80 21 38 44 c9 09 0c a1 50 40 bc f0 26 68 c5 2f be dc 35 97 13 ff 8f 65 a4 b3 25 3a 9a 68 29 40 d6 45 27 05 aa 73 74 fd 2e 8a de d9 1f da 98 2a ae 7f 69 71 da 35 f2 a9 41 81 ac a7 77 a5 fc fb 0b da ad 0d 70 69 4b d6 47 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRd5PLTEvvv/pHYs[IDAT(@&;!8DP@&h/5e%:h)@E'st.*iq5AwpiKGIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49728	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	717	OUT	GET /23d80j2d/qwd13d8jqd/-f8xo380.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: image/png Content-Length: 35689 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:08 GMT ETag: "6615dfe8-8b69" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YI5X9k6hKHEFGV7cM3ihAlZTqcFQ2JjSAjdh%2FqRNWozo9Ci%2B7IrRSF61kpTdJBlTzxneIIcmfW8V7Qprb%2FFjFv24qC2vxEPAeyoGupAgdVn9VGVmHCK5b1pRetxWu6ZTeg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d8465b848dcd-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	685	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 ec 08 06 00 00 00 90 6d 7b 43 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec dd 79 9c a5 57 5d 27 fe cf 79 aa 7a 4d c8 86 62 00 51 09 b4 bd 94 81 61 c8 8c 23 f8 1b 65 60 1c 54 10 45 33 6e e0 32 48 d0 19 d9 43 57 07 46 29 19 43 ba 3b 89 01 c3 88 44 45 18 5c 46 a2 08 22 0a b2 33 2c b2 13 a0 bb 2a 84 24 40 80 10 20 7b 77 57 2f 55 cf f9 fd d1 09 59 c8 72 6b bd f7 3e f7 fd 7e bd 22 20 4d 55 dd cf bd 5d cf b9 9f fb 3d e7 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRm{CgAMAa cHRMz&u0`:pQ<bKGDIDATxyW]'yzMbQa#e`TE3n2HCWF)C;DE\F"3,*$@ {wW/UYrk>~" MU]=I
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 02 0b 00 58 bc 1d 9f 3e 31 75 dd 44 4a bb ad 69 cb 29 b5 a9 13 a9 d9 96 9a 07 a7 a6 a4 94 d4 dc 56 6d 30 00 26 de 53 32 7b f2 da 55 fa 6e f7 4f c9 fd 6b f2 e8 6f 95 5b 6d 92 b1 23 c9 e4 cc 0d 49 bd bc 94 b2 b7 4d bb 27 b5 ec 4d 19 db 93 9d 9b ae 4c 8a 4a 13 00 b8 03 05 16 00 70 ef ce bc e4 98 34 eb 27 52 da 87 37 25 0f ab c9 a9 a9 79 58 6a 4e 4c da a4 26 b5 54 93 54 2c 40 3d 21 c9 23 6b ad 8f 2c b7 16 9c 75 3e 99 bc f4 86 64 7a 6f 49 f6 b4 b5 ee 4d b2 27 ed da 4b 4c 6c 01 c0 68 53 60 01 00 77 f4 fc bd df 9b b1 3c 22 c9 a9 a5 94 87 25 79 78 92 87 24 6d 93 24 55 49 c5 8a aa 27 24 79 54 4d 1e 55 ca 2d c5 d6 d8 91 64 72 fa cb 49 fd 78 4d f9 44 da 7c 22 a5 7c 22 bb b7 7c 55 5e 00 30 1a 14 58 00 30 ca 5e 74 e9 03 33 57 4f 6b d2 9e 56 6b 39 2d 25 a7 25 f9 0e c1 Data Ascii: X>1uDJi)Vm0&S2{UnOko[m#IM'MLJp4'R7%yXjNL&TT,@=!#k,u>dzoIM'KLlhS`w<"%yx$m$UI'$yTMU-drIxMD\|"\|"\|U^0X0^t3WOkVk9-%%
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: d4 9e b5 39 58 7e a6 a4 fc 56 da fc 48 35 c0 00 0c a7 4d a5 e6 c5 49 f3 a2 4c ee 7d 4b 6d 72 51 d6 6d 7d 6b a6 4a 2b 1a 00 ba 44 81 05 c0 68 79 fe a5 df 91 b1 f9 df 2a b3 e5 bf 27 39 59 20 40 77 d6 f5 e5 49 a5 cd 93 32 3b 73 45 9d 9c 7e 65 0e b7 af ce 05 13 d7 89 06 80 8e 5c e8 00 60 04 ec d8 f3 d0 26 cd 33 6b 6d 7f 23 29 1b 05 02 74 d8 29 25 39 37 6b 9b df 2f 93 d3 ff d0 26 2f cb ae ad 1f 14 0b 00 c3 4c 81 05 40 b7 6d df f3 d8 52 9a e7 a6 e6 27 6a 52 04 02 8c 90 75 35 39 bd 24 a7 67 72 fa c3 b5 d6 ff 9d d9 35 af cf 85 9b 0e 89 06 80 61 a3 c0 02 a0 7b ce f8 d8 9a 9c b8 f1 17 4b 9a e7 26 f5 df 08 04 20 3f 58 4a f9 c1 6c 9c 3b af ee 98 7e 65 9a b9 57 e6 a5 a7 5e 23 16 00 86 85 02 0b 80 ee 78 e6 65 eb b2 f1 c8 cf 97 94 df 49 f2 d0 c4 c1 ec 00 77 72 bf 52 f3 Data Ascii: 9X~VH5MIL}KmrQm}kJ+Dhy*'9Y @wI2;sE~e\`&3km#)t)%97k/&/L@mR'jRu59$gr5a{K& ?XJl;~eW^#xeIwrR
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 00 8c 08 05 16 00 47 4d 4e 9f 5a 26 67 3e 58 6a 5e 95 e4 38 81 00 30 d0 6a 9e 50 e6 da cf 64 72 fa e9 49 2d 02 01 e8 36 05 16 c0 a8 7b ee 55 1b 9a c9 e9 b3 4b f2 f1 24 ff 41 20 00 0c 91 13 4b 72 51 99 9c 7e 5f ce da b3 4d 1c 00 dd a5 c0 02 18 65 93 7b ff 63 59 bb ef 13 35 79 61 92 35 02 01 60 38 95 1f 2e 6d f3 a9 66 c7 f4 cb 73 e6 25 c7 c8 03 a0 7b 14 58 00 a3 68 c7 a7 4f 6c b6 4f bf aa a4 bc 27 c9 16 81 00 d0 01 6b 6a cd b3 ca d8 da 4f 67 72 fa bf 88 03 a0 5b 14 58 00 a3 66 c7 cc e9 a5 ae 99 a9 25 67 24 71 66 08 00 5d 73 4a 49 de da 4c 4e bf 3e 67 7e fe 7e e2 00 e8 06 05 16 c0 a8 38 73 e6 c1 65 72 fa ad a5 d6 d7 27 b1 a0 07 a0 d3 6a 72 7a 19 9b bb 34 93 33 cf ce 54 f5 be 07 60 c8 f9 45 0e d0 75 53 ef 1e cf e4 de ed 65 ac 7e 36 89 2d 15 00 8c 90 7a 42 49 Data Ascii: GMNZ&g>Xj^80jPdrI-6{UK$A KrQ~_Me{cY5ya5`8.mfs%{XhOlO'kjOgr[Xf%g$qf]sJILN>g~~8ser'jrz43T`EuSe~6-zBI
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 2c 80 7b 72 e6 25 c7 64 6c ed 33 4a e6 5e a0 b8 02 00 fa a4 49 cd 13 4a a9 3f 99 c9 e9 7f ac 4d 7b 76 ce 99 f8 b0 58 80 51 a2 c0 02 b8 2b 53 7b 8e cd ec d8 d3 4a ea 64 92 fb 0b 04 00 18 00 25 c9 13 4b db 3c 31 db a7 3f 50 4b 76 65 d7 d6 37 8b 05 18 05 0a 2c 80 db 9b ba ec b8 1c 3c f2 5b 65 b6 6c 4f aa 33 ae 00 80 c1 54 f2 e8 92 fc 43 26 a7 3f 5e 53 ff 30 57 6c fd cb 5c 5c e6 05 03 74 95 02 0b 20 49 9e 7f e9 77 64 4d fb db 65 76 fe d9 49 39 41 20 00 c0 90 78 64 49 79 6d 4e 99 fe dd 3a 39 73 61 0e 1f 73 51 2e 78 d0 ac 58 80 ae 51 60 01 a3 ed cc 99 07 37 e3 f5 39 b5 b6 4f 4b cd 31 49 95 09 00 30 84 ca 43 4a ea cb b2 76 df 0b eb 8e e9 57 e6 50 fb 87 b9 60 e2 3a b9 00 5d a1 c0 02 46 d3 8e 3d 8f 68 32 f6 dc 5a eb 2f d6 ea 77 21 00 d0 19 f7 2b 35 2f ce da e6 f9 Data Ascii: ,{r%dl3J^IJ?M{vXQ+S{Jd%K<1?PKve7,<[elO3TC&?^S0Wl\\t IwdMevI9A xdIymN:9sasQ.xXQ`79OK1I0CJvWP`:]F=h2Z/w!+5/
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 93 d3 1f ae c9 5b d2 b6 ff 94 73 27 3e 25 1e e8 26 05 16 8c b2 e7 ee 39 29 eb c6 1e db 24 4f ac b3 f5 a7 53 72 1f a7 59 01 00 30 44 c6 92 3c aa 24 8f 4a d3 9c 9d c9 e9 af 97 52 de d6 26 6f ce fa b1 b7 65 6a d3 4d 22 82 6e 50 60 c1 28 99 aa 4d 0e 7c ee b4 94 f6 f1 a5 e6 f1 29 f9 f7 a9 75 4c 69 05 00 40 47 dc ef 5b 77 34 9c 9d 3b 94 c9 e9 f7 d6 5a de 92 3a f6 96 9c bb e9 72 f1 c0 f0 52 60 41 d7 9d 75 d9 77 a6 ce ff 68 d3 d6 c7 d5 d9 99 27 a6 e4 fe 49 9c 67 05 00 40 d7 ad 4b f2 63 a5 d4 1f 4b 99 7b 79 26 a7 af 28 35 ef 68 9b f2 8e e4 f0 3b b2 f3 61 d7 8b 08 86 87 02 0b ba 66 ea ca f5 39 70 e8 87 9a e4 bf d4 92 ff 92 76 ee e1 49 8a f3 ac 00 00 18 71 a7 d4 92 33 4a ad 67 24 6b e6 32 39 fd 91 5a f2 f6 d4 fc 4b 36 7c ed 23 99 7a cc 9c 88 60 70 29 b0 60 d8 3d f3 Data Ascii: [s'>%&9)$OSrY0D<$JR&oejM"nP`(M\|)uLi@G[w4;Z:rR`Auwh'Ig@KcK{y&(5h;af9pvIq3Jg$k29ZK6\|#z`p)`=
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: ef 6b 9a e6 7b 93 7c 5f ad ed 83 53 9b ef cd 6c 7d 60 9a b9 3b 4e 51 95 6f fd 1f 00 00 00 06 db b1 49 1e 9e d4 87 d7 24 e5 f6 6f e5 4a 4d 26 a7 af 4d 8e 96 5a 25 f9 42 9b fa 85 b4 e5 8b 69 f2 c5 1c 6e bf 92 0b 26 ae 13 21 0b a1 c0 62 e1 a6 6a 93 c3 d3 df 95 b9 b1 07 25 ed 77 a7 94 07 35 b5 3e 28 25 0f ac 35 0f 4a c9 f7 66 36 0f 48 33 d7 24 4d 92 a4 d6 5b 27 4b 8b 29 53 00 00 80 ee bb ef 2d ff 9c 76 74 5f 4d b9 f5 ed 61 b2 b6 49 26 a7 0f 24 f9 52 92 2f 97 92 af a4 e6 8b 6d f2 e5 34 f5 2b 29 f9 52 0e 1c fa 72 5e f6 88 1b c4 c8 ad 14 58 dc d1 d4 9e b5 39 b0 f6 7e 19 3b fc c0 cc 97 fb 27 cd f7 34 69 bf 3b 29 df 5d 4b 7d 50 4a 79 50 66 67 1e 90 94 35 29 ed 2d ff a3 7a db 16 3f 03 54 00 00 00 dc bb 8d 39 7a 33 ae 2d b7 ce 3b 1c 3d 7f eb 96 37 95 eb d6 27 93 d3 Data Ascii: k{\|_Sl}`;NQoI$oJM&MZ%Bin&!bj%w5>(%5Jf6H3$M['K)S-vt_MaI&$R/m4+)Rr^X9~;'4i;)]K}PJyPfg5)-z?T9z3-;=7'
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 58 00 00 00 00 dd d1 c5 02 cb 19 58 00 00 00 00 1d 62 0b 21 00 00 00 00 03 ac 74 f2 10 77 5b 08 01 00 00 00 3a a3 76 b1 c0 aa b6 10 02 00 00 00 74 46 2d b6 10 02 00 00 00 30 c0 4a ed 60 81 55 6c 21 04 00 00 00 e8 10 13 58 00 00 00 00 0c b4 2e 9e 81 d5 9a c0 02 00 00 00 e8 0e 77 21 04 00 00 00 60 a0 d9 42 08 00 00 00 c0 40 eb 60 81 d5 16 13 58 00 00 00 00 dd 61 0b 21 00 00 00 00 03 cd 16 42 00 00 00 00 06 9a 2d 84 00 00 00 00 0c 34 13 58 00 00 00 00 0c 34 67 60 01 00 00 00 30 d0 3a 58 60 55 05 16 00 00 00 40 77 14 5b 08 01 00 00 00 18 5d fd 29 b0 4a 6b 02 0b 00 00 00 a0 33 aa 2d 84 00 00 00 00 0c 34 5b 08 01 00 00 00 18 68 1d 2c b0 4a 31 81 05 00 00 00 d0 1d b6 10 02 00 00 00 30 d0 6c 21 04 00 00 00 60 a0 75 71 02 cb 16 42 00 00 00 80 0e 31 81 05 00 00 00 Data Ascii: XXb!tw[:vtF-0J`Ul!X.w!`B@`Xa!B-4X4g`0:X`U@w[])Jk3-4[h,J10l!`uqB1
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: eb dc 04 56 5a 13 58 00 00 00 00 5d 52 3b 37 81 e5 10 77 00 00 00 80 4e 29 b1 85 10 00 00 00 80 01 56 bb 77 17 42 13 58 00 00 00 00 5d 52 dc 85 10 00 00 00 80 41 56 dd 85 10 00 00 00 80 41 d6 74 6d 02 ab 9a c0 02 00 00 00 e8 94 b6 6b 13 58 c5 5d 08 01 00 00 00 3a a5 71 17 42 00 00 00 00 06 59 db b5 bb 10 ae e0 6d 15 01 00 00 00 e8 16 13 58 00 00 00 00 2c 5d e7 b6 10 3a 03 0b 00 00 00 a0 5b 6a 71 17 42 00 00 00 00 06 58 71 88 3b 00 00 00 00 83 ac c6 04 16 00 00 00 00 03 ac 74 6d 0b 61 51 60 01 00 00 00 74 4a b5 85 10 00 00 00 80 41 56 db ae 6d 21 74 17 42 00 00 00 80 4e e9 dc 21 ee a5 55 60 01 00 00 00 74 49 2d b6 10 02 00 00 00 30 c0 3a 37 81 15 5b 08 01 00 00 00 3a c5 04 16 00 00 00 00 03 ad 6b 13 58 35 31 81 05 00 00 00 d0 25 9d bb 0b a1 02 0b 00 00 00 Data Ascii: VZX]R;7wN)VwBX]RAVAtmkX]:qBYmX,]:[jqBXq;tmaQ`tJAVm!tBN!U`tI-0:7[:kX51%
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 6b 05 96 bb 10 02 00 00 00 74 4b e9 58 81 55 6d 21 04 00 00 00 e8 98 8e 15 58 45 81 05 00 00 00 d0 2d 9d bb 0b 61 b5 85 10 00 00 00 a0 53 ba 76 06 56 69 4c 60 01 00 00 00 74 4a d7 0a ac ea 2e 84 00 00 00 00 dd d2 74 ed 2e 84 b1 85 10 00 00 00 a0 53 6a e7 0a 2c 13 58 00 00 00 00 dd d2 b5 02 cb 16 42 00 00 00 80 4e a9 9d 3b 03 ab b1 85 10 00 00 00 a0 4b 9a 32 bf 62 5f ba 2f 0f a8 98 c0 02 00 00 00 e8 94 ee 4d 60 39 03 0b 00 00 00 a0 5b 3a 77 17 c2 6a 0b 21 00 00 00 40 a7 74 6d 02 ab 98 c0 02 00 00 00 e8 96 ce 15 58 8d 02 0b 00 00 00 a0 53 6c 21 04 00 00 00 60 90 95 da b1 bb 10 3a c4 1d 00 00 00 a0 63 9c 81 05 00 00 00 c0 20 ab 5d db 42 58 8b 2d 84 00 00 00 00 9d 52 3b 77 06 96 09 2c 00 00 00 80 4e e9 5c 81 65 0b 21 00 00 00 40 b7 8c 75 ae c0 b2 85 10 00 00 Data Ascii: ktKXUm!XE-aSvViL`tJ.t.Sj,XBN;K2b_/M`9[:wj!@tmXSl!`:c ]BX-R;w,N\e!@u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49729	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	717	OUT	GET /23d80j2d/qwd13d8jqd/nfkp-cl0.gif HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:11 UTC	690	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: image/gif Content-Length: 14751 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-399f" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qdi03BkcKI%2FojjHmlNxNDOe%2F1C4RGPoCrslXcMmf6oVCY7%2BWrQWzglfO6f%2BqaDhmYqO2NCnjxbDYtBMEvHsrrvAz3LljqesyZ3E0eKGiLUtAmniT%2Bbzo0RJr5NNCq%2Fp2Vg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84659107441-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	679	IN	Data Raw: 47 49 46 38 39 61 c1 00 47 00 f6 01 00 ff fd ff fd cc 01 fb df 64 fd e8 8f f9 d3 3b f8 e6 a0 fa f2 d1 d0 dc f0 98 b3 d8 7a a5 d7 7c a4 d4 f8 e5 a0 f6 f0 d3 a2 b9 db fa de 64 fb e7 94 7b a4 d5 f0 ec da a8 b6 d2 70 60 ef 82 72 f1 6d 5e ef 7b a4 d6 ea e9 e1 e4 da a8 fb df 63 71 61 f0 db e3 f5 ea e6 e0 d1 cb ba 83 75 ea dc e4 f5 f9 dd 64 73 63 f0 ea e7 e2 d5 d0 b6 84 76 ec 72 62 f3 7b a4 d4 fb df 61 e5 e1 e5 dc e3 f6 d1 cc b7 83 73 f3 fb df 60 dc e3 f5 e8 e5 df cb c5 c4 71 65 e7 7b a3 d4 e8 e5 e3 d1 cd b7 84 75 ef fb df 62 dd e3 f5 73 68 e2 7b a3 d3 e7 e4 e3 ca c4 c0 85 76 f0 7b a2 d3 70 69 de e6 e3 e0 c8 c3 c5 84 75 ec 71 69 df cc c6 bd 84 74 f3 70 68 df dc e2 f5 e3 df e7 cf c9 b8 83 72 f4 fc df 61 70 69 dc 7a a0 d2 a3 a3 e8 e1 e4 ec ec de a8 82 72 f2 6f 68 Data Ascii: GIF89aGd;z\|d{p`rm^{cqaudscvrb{as`qe{ubsh{v{piuqitphrapizroh
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: e8 ed e5 05 e1 ac da ee ed 04 ce f4 e8 f0 20 ea 56 ad a9 ff a2 d8 e1 4b 77 6f 60 39 01 00 a3 5d 31 c8 10 9f bd 75 0d 23 a2 b3 16 c5 80 c4 8b e5 28 02 c1 78 51 e3 13 8b 1c bb 23 7a f4 11 52 a4 15 90 25 0d 8e ec 91 92 e1 4a 26 28 5b d2 7b 59 43 40 30 99 03 69 2a 89 89 73 62 10 84 13 7a ce 3c 29 d4 9d 81 a3 00 8e 9a 52 9a 14 29 d2 a6 12 9e 3a 9d aa 74 95 54 ab 36 01 14 6d a7 33 09 cf ad a0 6c d2 c2 56 a0 1b af b1 47 5b a5 1d 10 96 2c d0 b3 6a d1 96 55 47 cb d4 56 9f 55 be 16 ed 3a a3 6c d0 bb e6 f8 1e d1 2b 54 30 8c 5d 14 00 07 26 aa 38 80 e1 17 d6 1a 3b 66 ac f8 31 0d c9 96 87 10 c6 49 20 b3 0c cc 94 ef 76 36 02 3a 6f 69 22 a7 a7 6c 96 f9 b0 08 81 c6 9e 85 0c 4b b8 2c 61 6c 19 b4 89 e5 1e d5 b4 aa ef df c0 83 0b 1f 4e 3c 78 04 00 21 f9 04 05 0a 00 04 00 2c Data Ascii: VKwo`9]1u#(xQ#zR%J&([{YC@0i*sbz<)R):tT6m3lVG[,jUGVU:l+T0]&8;f1I v6:oi"lK,alN<x!,
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: ce d4 25 d0 d1 86 d5 da c3 d8 d9 da d4 dc ca cc df d5 ba cb e3 e4 ce c3 34 d2 de e9 ce ab 91 ef d5 eb f2 f3 e5 aa 5c f7 f4 f9 52 fb da fd a8 fc e3 d7 cf 89 ad 5d 03 91 e4 43 88 83 42 85 87 10 23 3e 64 98 f0 86 2a 8a 37 24 6a 84 88 b1 22 0c 52 4f 2a b0 8b e6 d0 61 47 8f 2e 32 ff 3d b9 b0 b1 25 85 93 28 c7 7c 82 22 32 da a0 92 25 61 c6 dc b3 0a 0a 00 97 1a 73 ee 1c c2 6d 4d cd 5c 2e 85 0e f5 d1 47 a7 8d 9f 10 71 02 7d b8 74 88 1d 2c 50 a7 6e ac 4a 74 ca 1a 0c 60 c3 8a 0d 6b 93 65 05 72 17 c6 aa c5 e0 94 27 b1 44 52 a5 7e 6b 3b 87 2e 16 07 78 f3 e6 b5 7b 24 ad de bf 80 f1 ee c3 e0 80 30 d8 c2 87 c5 22 0e bb 98 71 d8 40 86 d5 36 56 bc 36 31 d8 5e 0e 8e 64 06 c4 96 2b 89 cd 30 08 07 fe 1b 68 34 e0 8a a0 5d 60 48 b7 da f3 89 d6 df 60 ff ab 4c 7b 1e ed ca ae 51 Data Ascii: %4\R]CB#>d7$j"ROaG.2=%(\|"2%asmM\.Gq}t,PnJt`ker'DR~k;.x{$0"q@6V61^d+0h4]`H`L{Q
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 82 1b 21 92 03 4f 1e 43 f8 cd 0c 4b 98 25 65 92 49 d9 0d 64 c8 ff 8a 0a 71 b6 33 a9 53 8a 35 9f 3f 2d 62 e4 95 8e 68 d1 25 10 9f 21 dd 09 54 e8 3d a7 4f 9d 20 9b 4a 75 a4 82 af 60 c3 8a d5 88 35 2b 92 a8 e1 e8 dc 1c cb 16 6c 53 b3 62 d0 ba e2 f3 e6 a6 d5 a1 70 e3 9e 9a 7b 2e e9 45 64 6f f3 86 c1 73 70 5e cd 95 55 ef 6e 14 2c 86 b0 4b c3 65 af b0 5c fa 69 61 64 c6 4a 0c 07 78 17 2c b1 62 75 97 31 67 46 e3 58 ad e7 cf a1 45 37 29 6d da e2 e3 5a 81 55 77 f1 b4 eb b4 e2 d4 b2 7d e2 96 0c 94 32 6c 7c b9 f5 1e 3e 36 a2 b8 f1 e3 c6 51 3b 14 81 bc f9 08 11 e2 40 48 9f 4e 9d fa f3 4b 96 0b 8a a8 ce 7d 7a f4 ee e0 c3 77 87 3e 6a bb f8 f3 e2 bf a3 5f cf 9d 14 fb f7 d4 a3 9b 01 e1 9e fc 18 fa da f0 43 61 ef 7e bd 15 fd d3 00 b8 5a 13 02 4a 52 e0 11 ac 31 71 a0 31 0b Data Ascii: !OCK%eIdq3S5?-bh%!T=O Ju`5+lSbp{.Edosp^Un,Ke\iadJx,bu1gFXE7)mZUw}2l\|>6Q;@HNK}zw>j_Ca~ZJR1q1
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: be 8b 2d 01 ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f0 e2 fa d5 6a d7 81 d9 db 16 59 ea 06 c8 d4 be 83 b5 4e c5 02 18 b0 d7 40 82 70 0c 22 3c 68 70 a1 9f 89 c6 4a 98 80 58 b0 1f 46 7d 15 75 35 d4 b6 91 63 44 8f 1f a9 85 4c 75 ee 63 ab 92 26 dd 48 4c c9 6c a5 b9 91 8b 60 c6 64 93 86 a6 ca ff 7e 16 8f 69 ca f3 70 a7 99 34 e1 7c da 02 2a 92 ca 8b a7 50 a3 46 25 8a af aa d5 ab 58 ab 26 55 ba 2e ab 57 78 47 18 a6 4b f7 e2 ab d9 b3 68 f3 71 25 95 f6 6b d8 8b e2 c6 16 35 5a 66 26 d7 b6 5e df e2 ec 33 97 ee 18 a4 6b 6d de 1c 4b 98 42 59 bc 88 13 db 5b ab d0 62 ca 44 7d fd 8a e9 79 57 b1 55 59 25 c8 1d a3 6a b9 b3 e7 00 4a 1b 3b 76 99 59 b2 20 5c 29 45 37 dd 4c f6 b3 6b c5 34 2b 75 6b 19 97 ac e9 36 72 3e 1e 7e 5d 0f 33 e1 6d bb 79 0b 3f 8b 51 75 b0 df db fc dd 86 34 Data Ascii: -jYN@p"<hpJXF}u5cDLuc&HLl`d~ip4\|*PF%X&U.WxGKhq%k5Zf&^3kmKBY[bD}yWUY%jJ;vY \)E7Lk4+uk6r>~]3my?Qu4
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: dc 02 c6 8c aa b2 b7 28 a3 b5 10 55 ec 79 c7 06 8a c8 2f 86 16 b6 2c 78 bf ae 79 88 3a ae f0 d3 6c 11 d5 d2 c9 ed b3 ea 10 e7 84 a4 de 96 79 6d 3e 89 96 3b 25 6d a9 e8 9a ab ee ba ec b2 62 ed bb 93 81 0b 6d 55 db 66 c1 e7 39 19 a6 a1 29 a8 00 07 2c f0 c0 04 17 0c 6a 10 00 21 f9 04 05 0a 00 01 00 2c 00 00 01 00 c1 00 46 00 00 06 ff 40 80 70 48 2c 1a 8f c8 a4 6d 77 6b 3a 9f 3b 9b 72 4a ad 5a af d8 ac 76 cb b5 32 a1 e0 68 77 4c 2e 9b cf 68 25 13 b7 c3 b9 df 6c a7 34 4d af db ef 67 a6 6e cf e7 7f 99 73 78 82 63 38 81 83 87 49 7f 8a 8b 80 88 8e 56 6f 86 8f 8f 8d 52 96 52 8c 92 93 9b 36 70 85 9c 94 61 a2 5f 9a a0 87 9e 6e 3a a6 87 95 52 a3 4f ab 8e 3a a8 70 a5 b1 66 8a af 50 b6 b7 67 a8 36 b3 70 aa bd 69 b9 ba 72 c4 75 c1 6f aa 52 cb 91 c9 b8 62 97 d4 d4 95 d1 Data Ascii: (Uy/,xy:lym>;%mbmUf9),j!,F@pH,mwk:;rJZv2hwL.h%l4Mgnsxc8IVoRR6pa_n:RO:pfPg6piruoRb
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 42 cf 50 bc 7b 4a 0e af 76 57 bf 72 fe fb fb 92 a2 d7 4f cf bd 47 7b fc 00 1a a2 df 2d fc 9d d5 1d 6d 01 66 36 4f 4e 07 4a e7 5f 82 10 fa 33 20 2e f4 c9 d7 43 84 18 2e b8 de 85 89 35 88 61 82 19 6d 68 59 5b 1f 42 18 62 23 ae f8 45 61 89 26 6a 58 60 62 fc b1 08 e2 3c 13 8d f8 a0 8c 33 7e 67 e3 7f 38 e2 97 d1 83 7e 79 d8 63 80 0e bd 78 56 8c 43 42 98 0d ff 78 73 09 99 64 82 cb 74 c2 db 7e f5 5c 52 c3 95 58 66 79 a5 0f 4f 0e e2 c3 97 60 86 19 e6 2e 52 42 65 5f 00 68 a6 a9 e6 9a 6c b6 b9 26 97 4f fa e0 e6 9c 74 d6 c9 a6 21 4c ae 34 9d 2f 76 f6 e9 67 9f 70 9e f4 e7 a0 84 fa 79 08 7a 37 49 a3 4c 2e 85 36 ea e8 a3 90 46 2a e9 a4 f1 a0 c7 4a 77 3f 4c aa e9 a6 9c aa 09 40 a7 a0 a6 a9 08 64 0c 21 8a 4e a8 a8 a6 aa ea aa 77 c2 f7 09 9f ab ca c9 ea ac 73 ca 4a 2b 9d Data Ascii: BP{JvWrOG{-mf6ONJ_3 .C.5amhY[Bb#Ea&jX`b<3~g8~ycxVCBxsdt~\RXfyO`.RBe_hl&Ot!L4/vgpyz7IL.6F*Jw?L@d!NwsJ+
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 57 2b c7 b5 83 55 77 f5 75 d7 64 33 15 f6 54 63 97 ad f6 51 67 f7 94 f6 da 70 b7 dd d2 db 70 ab 2d 37 48 74 d7 4d f6 dd 78 e3 dc ad a5 42 f0 8d cb df 9c 9a 0c f2 e1 88 27 ae f8 e2 8c 37 ee f8 e1 81 00 00 21 f9 04 05 0a 00 01 00 2c 00 00 04 00 c1 00 43 00 00 07 ff 80 00 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 90 45 3c 45 91 96 97 98 99 9a 9b 9c 9d 93 3c 94 9d a2 a3 a4 a5 a6 9a 9f a0 a1 a7 ac ad ae af 97 46 aa b3 95 b0 b6 b7 b8 ac 47 b3 bc ab b9 bf c0 c1 8b a9 aa c4 a0 b5 c2 c9 ca b8 c6 c7 45 cd be cb d2 91 cf d5 d6 d6 c2 45 bb bc d7 cf bd 94 c8 d3 e2 89 45 44 e6 e7 e8 e7 e1 b6 d0 e0 dd ed e0 e3 f2 85 e5 e9 f6 48 48 eb ac da df 3c 47 ef d7 fa 45 9b 27 ae 1c c0 67 e7 f2 05 58 c8 b0 a1 c3 87 10 23 46 fc 77 b0 db 37 7d 04 97 d5 bb 97 0e 5f 11 89 20 43 86 Data Ascii: W+Uwud3TcQgpp-7HtMxB'7!,CE<E<FGEEEDHH<GE'gX#Fw7}_ C
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 6c 8f 23 57 be dc 95 d9 e6 67 9f 27 a2 78 11 b9 cd ea c0 1d 3f 4e 7b 17 55 af ef b0 bb 83 7f 05 53 20 79 a5 da b7 f7 92 4d 5a f3 fa b9 ef f3 bf 8f 2f 1f d4 27 fa 1f a1 77 1f 7e d8 9d f4 59 2b bc 00 e8 91 7d 03 9a 42 57 81 28 f1 07 dd 2c 96 b5 c4 60 83 a5 40 68 a0 5a 1b 25 68 ce 44 09 f9 86 61 86 e2 69 78 a0 75 1e b6 17 d3 85 23 ea 52 e2 4d fa 49 c8 5a 82 96 a9 d6 e2 5c d8 c5 e8 4f 34 0a 41 a5 1b 75 37 3e a4 df 90 27 c6 52 0e 36 82 08 26 62 ff 90 2b 11 39 a4 8c 79 fd 23 62 8d 41 2d c9 24 26 1a 9a 04 e5 23 54 25 49 25 40 57 5e 59 d0 21 4f 35 64 65 25 4e a4 a9 e6 9a 6a 86 49 08 9b 70 a6 b9 25 23 ba fd 08 66 26 49 e4 a9 e7 9e 7b ce 59 11 9f 80 ea f9 4b 8f bb e1 19 e8 a1 88 06 ea 27 27 4e 24 ea 68 a2 bf fc a8 db 9d 97 24 d1 e8 a5 98 66 aa e9 a6 99 a2 c3 e9 a7 Data Ascii: l#Wg'x?N{US yMZ/'w~Y+}BW(,`@hZ%hDaixu#RMIZ\O4Au7>'R6&b+9y#bA-$&#T%I%@W^Y!O5de%NjIp%#f&I{YK''N$h$f
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: b2 bd d2 80 dc 71 b7 27 8b 7c 30 b9 23 bb 4c 30 cc 2f cb 8c 2f cd 33 db 4c 2f ce 37 eb fc 2e cf 3b 23 65 ec d0 28 b3 32 b4 b1 8c 25 ad f4 d2 94 04 02 00 21 f9 04 05 0a 00 01 00 2c 00 00 04 00 c1 00 43 00 00 07 ff 80 00 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 56 59 91 95 96 97 98 99 9a 9b 9c 59 56 9f 94 9d a2 a3 a4 a5 a6 90 9f a9 a1 a7 ac ad ae af 8e a9 b2 5a b0 b5 b6 b7 a4 5a b2 bb 93 b8 be bf c0 8a bc 9e bb ab c1 c7 c8 af bc bd c4 c5 c9 cf d0 9d ba ce 94 94 d3 d4 d1 d9 da 8b cb cc 5a df b4 cd c3 c6 db e5 cf d7 bb b4 9f 55 58 ed ee ea dd e4 e6 f3 be dd b4 ba ed 56 e0 eb ec f0 d8 f4 00 6f 8d f3 c4 ce 5b 35 82 55 98 c9 92 17 b0 21 ab 85 d5 0a 1e 9c 18 31 21 25 88 0e 33 b6 c2 b8 8e a2 47 82 17 55 69 1c 69 ea 5a c5 8f 1e f1 65 31 49 b2 a5 28 96 1d 51 Data Ascii: q'\|0#L0//3L/7.;#e(2%!,CVYYVZZZUXVo[5U!1!%3GUiiZe1I(Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49730	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	675	OUT	GET /23d80j2d/qwd13d8jqd/t2z5gydm.mp3 HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full Range: bytes=0-
2024-04-25 22:42:11 UTC	711	IN	HTTP/1.1 206 Partial Content Date: Thu, 25 Apr 2024 22:42:11 GMT Content-Type: audio/mpeg Content-Length: 8405 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-20d5" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6023 Content-Range: bytes 0-8404/8405 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O51p2ZPtM7FMkNI9k%2B6H4GZoIP1lpuO3HOSE80hMikgXPE5HHoGsFhuOjZt7KWmnZFzSQVS0Rl4%2BK0BPnyA2KeHDKLD%2BPHDs%2B6Xzz2WVry6VAfZ2UGFZnoGvToWcO3y1nQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d8465a947421-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:11 UTC	658	IN	Data Raw: 49 44 33 04 00 00 00 00 00 3f 54 50 45 31 00 00 00 1c 00 00 03 53 6f 75 6e 64 4a 61 79 2e 63 6f 6d 20 53 6f 75 6e 64 20 45 66 66 65 63 74 73 00 54 53 53 45 00 00 00 0f 00 00 03 4c 61 76 66 35 34 2e 32 39 2e 31 30 34 00 ff fb 40 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 49 6e 66 6f 00 00 00 07 00 00 00 27 00 00 20 8c 00 0b 0b 12 12 12 18 18 1f 1f 1f 25 25 2c 2c 2c 32 32 38 38 38 3f 3f 3f 45 45 4c 4c 4c 52 52 59 59 59 5f 5f 65 65 65 6c 6c 6c 72 72 79 79 79 7f 7f 85 85 85 8c 8c 92 92 92 99 99 9f 9f 9f a6 a6 a6 ac ac b2 b2 b2 b9 b9 bf bf bf c6 c6 cc cc cc d3 d3 d3 d9 d9 df df df e6 e6 ec ec ec f3 f3 f9 f9 f9 ff ff 4c 61 76 66 35 34 2e 32 39 2e 31 30 34 00 00 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ID3?TPE1SoundJay.com Sound EffectsTSSELavf54.29.104@Info' %%,,,22888???EELLLRRYYY__eeelllrryyyLavf54.29.104$
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 8c 04 2c 03 d4 00 33 51 00 4b ad 53 33 7f ff fb 52 c4 20 00 11 29 93 43 3d ca 00 09 9c 31 68 7d ca 35 b8 fa 75 c8 70 28 5c bc 92 45 f5 af ff fa 26 86 81 fd 11 d1 3c 92 24 cf ff ff 49 21 30 63 8e 5f 46 89 df f4 7b a9 66 23 1a 1d 02 26 2e 96 ea 3d ff f5 50 1a 2c 99 ab 2a 89 89 52 97 67 d7 6a 06 45 e1 0b a2 62 6a 75 6f 83 9e c1 96 14 40 cd dc 08 00 44 0f ff c6 61 e5 88 b0 97 d9 de 96 b5 a0 23 5c 25 f8 ea 8e e2 74 fa 27 d4 f3 0a d4 8a ab b9 f6 75 18 84 d5 09 bc c2 a7 a5 6f ff 5a 15 09 18 28 58 dd 72 e7 ff ff 44 76 81 10 8a d8 9d 4a b6 ff fa 94 26 e2 aa 94 93 75 ff fe d3 00 dd 4d 6e be a6 ff fe a1 bd e8 29 57 59 ef ff f2 64 9e ca 2a a9 a9 95 07 bb 80 3a 8e 26 7f 5a ff fb 52 c4 05 80 0b d5 8b 4f ed b5 ad c1 70 b1 6c 3d 96 b5 ba f8 21 b5 a0 86 64 4e f4 3a d7 85 Data Ascii: ,3QKS3R )C=1h}5up(\E&<$I!0c_F{f#&.=P,RgjEbjuo@Da#\%t'uoZ(XrDvJ&uMn)WYd:&ZROpl=!dN:
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 9a 5c c1 1e 58 08 00 00 0e ef 1c 7d 46 60 56 4d 20 5a 30 12 6e 90 d3 80 46 f8 90 ce 9c 92 65 43 e6 65 a3 3a 99 76 7c fb 52 31 08 7c 04 ae 64 ba 14 6b 6f ff 36 5a 21 d6 0b de 96 69 ff ff ba 43 50 39 dd 73 7f ff ff 2b 0e 37 b3 ff ff eb b0 bc f6 f5 ba ff ff 8e 95 37 a9 bf ff c8 39 aa 66 6a 60 04 8c 70 28 25 a0 37 fa fc 5a 9b ff fb 52 c4 07 00 0b 39 89 49 ed cd ad c1 6b 31 69 bd b9 b5 b8 f2 d7 a2 2f ed c8 e8 ef 90 3b 0e 98 72 4a 47 5c b4 7c e9 6d 27 7e e8 6f d1 06 a4 05 66 6c 8d 7d 7f af f5 58 d8 18 13 e8 cd ff ff f4 18 7f 04 d3 e7 ba 7f ff a0 98 ec 09 12 ec 8f b7 ff da 54 27 fb 7a df ff fa 89 7f ea ff ff 96 ad a1 a9 90 22 f2 48 c0 b2 50 ef ef 59 be 71 56 75 2d 86 65 4c c4 76 a0 3b 5e 98 59 24 18 b6 45 89 12 f1 48 ac 5d 2b 93 4b 56 96 a5 dd 88 b0 54 e7 db f7 Data Ascii: \X}F`VM Z0nFeCe:v\|R1\|dko6Z!iCP9s+779fj`p(%7ZR9Ik1i/;rJG\\|m'~ofl}XT'z"HPYqVu-eLv;^Y$EH]+KVT
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 39 8b 67 e8 a9 ad d1 4f 31 29 fd b9 35 b8 b4 fe ee af ff be 3e 84 9d d7 3d ff fa d5 63 72 58 0f c1 dc e2 d8 77 a0 ff ff fa 63 27 ff ff fe 5b fe df ff d4 5f df ef ff fe 62 ba 09 5a 83 06 a8 80 30 29 54 7f eb e5 b8 3a dc 86 1a 76 a6 db 01 0d b8 73 95 71 d0 59 2c 13 86 e6 a7 da ce a5 5d 7b 75 04 22 0b 92 7e bd 7f ff ca 61 c1 3a e7 ff ff fa 45 e0 41 ba e5 cf ff ff 2b 12 b7 31 48 c1 ec af ff 5e a2 28 4f 28 ba ba 9b ff fa c9 df ef ff fe 5e a5 9d ae 48 16 72 80 e0 b2 88 df e1 f9 b6 69 e6 4a f7 3a 57 5f 02 ad e8 60 55 72 81 4c d0 98 37 35 4d 6c b3 ae b5 5f 6e a0 9f 13 92 7b 6b 5f ff da a1 7e 32 5c f7 ff fe ff fb 52 c4 48 00 0b 19 8b 4d ed c9 ad c1 53 b1 69 bd b8 c1 b8 c7 85 f8 74 c9 ad 65 7b 7f ff e6 03 ba bb ff ff f9 80 e1 af ea ff ff 93 bb ff ff fe 6b 4d 07 4a Data Ascii: 9gO1)5>=crXwc'[_bZ0)T:vsqY,]{u"~a:EA+1H^(O(^HriJ:W_`UrL75Ml_n{k_~2\RHMSite{kMJ
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 07 3c d0 dc 9b 65 b2 d0 a1 77 b6 da ce 04 bc 59 0b 57 77 ff ff 59 0e 0e 0d f3 5f ff fe e3 40 4a b2 e7 7a 7b 7f 6a ea 58 74 08 a1 aa 9f ff ff f1 d1 ed eb 7f ff eb 2f 57 f5 b7 ff f9 7e 09 8a 83 07 8c 70 30 4d 44 7f f5 8d 03 9f 28 87 e9 66 ea 3e e3 0e 03 61 b6 06 ff fb 52 c4 64 80 0a f5 89 4f ed c2 0d c1 5c b1 29 7d b9 35 b8 4c 73 0a 65 b3 cb 3d 29 14 50 ad 77 db a8 33 90 5c 47 df b7 bf ed 91 e2 4c f9 b7 ff fe 7c d8 41 81 de 92 dc 99 6f ff fd c5 ab 1c 77 47 ff fe d2 a0 bb f5 ec bf ff f9 46 b6 fb 7f ff 98 3b bd d1 82 ce 41 18 20 d1 1d fd fd c6 ce ee 38 ee 44 13 51 d3 18 98 13 05 a4 24 cb 84 f9 1e 54 48 f3 14 91 55 48 7a d5 64 84 62 0f 21 e7 f7 af ea fd aa 17 64 d5 73 55 ff ff da 98 a4 fa 7f ff fe 45 13 34 94 eb ff ff d2 99 8c 17 f5 ff ff ca 7b 7d bf ff cc 6a Data Ascii: <ewYWwY_@Jz{jXt/W~p0MD(f>aRdO\)}5Lse=)Pw3\GL\|AowGF;A 8DQ$THUHzdb!dsUE4{}j
2024-04-25 22:42:11 UTC	1369	IN	Data Raw: 65 e5 5a b2 fa ac b0 57 68 2a 25 78 c3 4b 2a e5 99 68 49 71 93 b0 17 2d f6 49 22 9f e7 7f f9 2f e5 7f 4d 02 10 00 00 08 42 c5 70 a2 81 a2 22 53 b2 22 25 16 2b 50 76 9b ca 86 bf 68 b1 e9 26 30 ed 85 8f 5d 69 50 d4 b1 57 4b 3a ee df e5 5d 58 76 b7 54 fa 81 58 88 1a 92 d6 7b 59 dc ec 8a 30 dc b0 c1 4e 3e 2e 1d 9d db ff ff ff ff ff ff fd 08 c8 8f ff ee 54 45 4d 4c 14 10 25 23 b3 ff ff fd 7e a8 aa 9f aa a7 d1 55 39 8a 18 18 34 39 1d bf b1 8a 18 18 30 41 85 aa ae 1a a8 aa a7 fe 9a 2f f9 55 4f fd 32 2a 4c 41 4d 45 33 2e 39 39 2e 35 aa aa aa aa ff fb 52 c4 97 00 09 d9 89 6d a6 1c 4d d9 33 91 e5 64 c6 0d 28 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa Data Ascii: eZWh%xKhIq-I"/MBp"S"%+Pvh&0]iPWK:]XvTX{Y0N>.TEML%#~U9490A/UO2*LAME3.99.5RmM3d(
2024-04-25 22:42:11 UTC	902	IN	Data Raw: aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa ff fb 52 c4 a1 83 c0 00 01 a4 00 00 00 20 00 00 34 80 00 00 04 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa 4c 41 4d 45 33 2e 39 39 2e 35 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa Data Ascii: R 4LAME3.99.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49731	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	679	OUT	POST / HTTP/1.1 Host: markssmith.icu Connection: keep-alive Content-Length: 168 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://markssmith.icu Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:11 UTC	168	OUT	Data Raw: 7b 22 6e 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 73 73 6d 69 74 68 2e 69 63 75 2f 32 33 64 38 30 6a 32 64 2f 71 77 64 31 33 64 38 6a 71 64 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 31 33 38 31 33 65 38 3d 30 31 30 31 25 32 30 34 38 30 37 36 25 32 30 34 34 31 33 39 26 31 33 38 31 33 65 38 3d 68 74 74 70 73 3a 2f 2f 70 6c 61 79 67 61 6d 65 73 35 2e 6e 65 74 22 2c 22 64 22 3a 22 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 22 2c 22 72 22 3a 6e 75 6c 6c 7d Data Ascii: {"n":"pageview","u":"https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net","d":"steampowered.com","r":null}
2024-04-25 22:42:12 UTC	570	IN	HTTP/1.1 403 Forbidden Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jieqe7AOl3WyUmXORY3JKQeKZwCdIFHsbPwbnigLLGMYdRZWgau54THTZBIEG%2B%2BrkAe8mVjKVJm5dHkSRgXXJ5La8hHZbh%2FXxfG9gmgsz3air4QDMftVXt%2Bj48ZsysKYkg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d848088fa65d-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	571	IN	Data Raw: 32 33 34 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 Data Ascii: 234<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to dis
2024-04-25 22:42:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49732	23.202.106.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 22:42:11 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=116533 Date: Thu, 25 Apr 2024 22:42:11 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49733	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:11 UTC	675	OUT	GET /23d80j2d/qwd13d8jqd/xtbs383q.mp3 HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full Range: bytes=0-
2024-04-25 22:42:12 UTC	720	IN	HTTP/1.1 206 Partial Content Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: audio/mpeg Content-Length: 110880 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-1b120" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Content-Range: bytes 0-110879/110880 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AuNJYHO9SzvtrjI0%2BbFl34apgeC3drM7GmEaDAB2SI%2Fdvx993PIUJcobCzPUZY%2FZ1SKqsvM%2FNx0tgHqKkM4ouqkPRfckckLVWCPEhDI8i6zwxDXScqsktUd%2BUxXm7P2LVg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d849a8c35c75-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	649	IN	Data Raw: ff f3 64 c4 00 00 00 03 48 00 00 00 00 4c 41 4d 45 55 55 55 4c 41 4d 45 33 2e 31 30 30 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 ff f3 64 c4 7c 00 00 03 48 00 00 00 00 55 55 55 55 55 55 55 4c 41 4d 45 33 2e 31 30 30 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: dHLAMEUUULAME3.100UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUd\|HUUUUUUULAME3.100UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 38 71 5d 5a a4 44 ab 37 98 0e da ee b8 16 00 c6 05 e8 2a cc 11 d2 0a 85 3a 1e 83 23 67 50 f0 7c c2 79 21 90 e3 c5 73 60 80 ec df 4f 0f 41 2c da 71 b6 3c 16 c5 4a 17 b6 b6 72 d8 c9 86 f6 66 48 92 21 89 f6 e4 2d 4c ff f3 64 c4 eb 20 5c 12 80 01 9b 68 00 7d 2d a7 19 0e 74 f3 09 2c 65 32 e8 9f 7e d5 07 0e 73 cd 78 16 cf 63 71 af ff e2 f2 b2 4b 7a 31 cf bd 7f ff ff 7f ff ff cf a7 a6 6f 22 64 e3 49 96 36 07 25 04 3f ff ff ea 45 04 19 21 a1 ed 4a 3b ab f7 a5 c2 c7 53 b2 28 2b 54 fb 3c 24 ff b5 75 ff ff ff ff ff ff e1 e3 59 95 46 cd 1b 32 32 2a 1d b2 22 cd 35 9c 51 fb 1c 48 cd 8a 07 28 34 9f d3 ef 36 50 6f d9 ad 47 5d 2e 55 70 d5 6f 57 4a ca d5 ff f3 64 c4 ec 3a cc 36 bd bf d8 78 02 86 a8 60 0a 01 a5 13 d1 93 36 a2 08 04 75 df c0 a2 38 40 fc 5a 59 05 8f 04 46 a4 Data Ascii: 8q]ZD7:#gP\|y!s`OA,q<JrfH!-Ld \h}-t,e2~sxcqKz1o"dI6%?E!J;S(+T<$uYF22"5QH(46PoG].UpoWJd:6x`6u8@ZYF
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 64 c4 11 20 19 96 b6 46 d3 cc 94 d8 93 f5 68 13 e4 4e 88 8c 27 a6 08 4a 4b a2 45 6b 49 11 70 42 26 d4 17 a6 01 60 87 1e 50 73 87 f9 c7 1a 63 94 fc 38 e4 d4 07 cf 94 bb 38 92 4f 95 ca dc fd f3 bb f3 81 89 93 08 d9 c3 e3 6f fb 23 9f ff d3 82 8e e0 1a 20 5b b8 b9 e1 3f 4e 84 93 08 93 be c6 ff f7 33 d3 e9 18 22 9e a8 91 e1 80 e1 80 6c e2 bf f6 92 0a 05 cd a5 4f e4 bd 2a c4 00 21 e8 dc ee 44 a9 ba ba f5 f4 5a e6 f3 3e c1 6b e0 ff f3 64 c4 13 20 ab d6 ba 16 cb c4 94 d3 68 16 a2 e8 68 9f 26 f0 50 c3 ac eb b5 5b 95 45 23 a5 1c 2b 8e 50 ac 43 d6 d3 aa a7 c9 e6 fb eb 2c 31 77 37 31 90 ce 49 49 a9 d0 fd 0b 2b 06 61 85 0a 46 43 be 5f f2 ba 4a 71 c3 ab 06 97 2f fa 9b 52 b4 ac a6 56 0c 03 21 f5 a3 d2 8d ff fe 9b fd af ff e5 37 39 e2 4d 99 cb cd 33 b3 96 0d a4 f5 ff f7 Data Ascii: d FhN'JKEkIpB&`Psc88Oo# [?N3"lO*!DZ>kd hh&P[E#+PC,1w71II+aFC_Jq/RV!79M3
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 03 89 0b 27 e9 48 da 96 04 60 50 02 ff 10 bd be 81 f7 5e 40 0f 27 ab 7b a4 34 38 90 0b ed f8 3b cd 8b e8 65 67 1f 75 6c 11 c2 f4 7d 55 a8 8a 00 e8 4e 45 b4 99 48 93 61 e9 86 fa 6b d4 99 36 6a dd 4c 40 c9 d5 ff f3 64 c4 3e 1e 0a c6 ca 9e 7c 05 10 fa 08 37 7a 64 c1 79 bc e1 00 9d 91 55 45 52 8a 82 0c a4 fc bb ab 23 7f 55 f4 62 9a a7 52 6a b4 66 da 88 87 93 d1 6d 73 bb bc 21 80 af f3 ba 7f ff eb 05 47 88 41 d0 6d 3d 55 55 84 02 10 cc 84 ff bd 9a fa de b7 a1 dd 13 10 3f c1 de 18 4e 5f d6 90 c9 18 0a ca aa ff 6a 9b 15 b7 b6 a1 a9 c5 2c bc da 4b de 01 a6 74 39 3d bd 98 1e 12 85 d4 6d 7d 0e 28 04 ff e9 af fa 00 38 9b 37 cc be 49 02 cc f8 ff f3 64 c4 48 1e 9c 1e ce 9e 78 c5 6c 82 c6 0d 24 cc da df 85 76 ff d6 c1 8d 6e ea ae 8f 6b 17 46 46 ef f6 fb bd a9 ab 23 7f Data Ascii: 'H`P^@'{48;egul}UNEHak6jL@d>\|7zdyUER#UbRjfms!GAm=UU?N_j,Kt9=m}(87IdHxl$vnkFF#
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 1b 1f aa 9a c6 5d c9 40 00 51 55 35 69 b6 e1 8e e0 7a 70 e3 85 8d 16 b5 29 2f 10 8e e2 e2 b5 af eb e1 e1 b2 ac 6d af ac 5b 54 ab 4d 38 ac 71 7f fb 73 4d 6b 5f d5 ff c8 80 23 08 47 90 23 00 50 6d ea 4d 18 1f 58 7a e2 47 c3 a1 f2 6c 4e 51 82 cc b1 7f 2d e4 91 42 94 05 01 65 a0 b5 25 67 bf f0 29 1a 40 44 96 22 22 58 97 f0 97 65 71 59 61 8c 81 38 d1 c4 f0 0a 14 c4 a9 9a cb 27 cf 46 b7 35 da dd f8 59 50 f9 cb 8f 71 37 0c ff f3 64 c4 1f 1b d4 26 9e 7a 60 c4 f4 c8 e9 86 14 77 ab 23 a9 5e 0a a7 85 01 d4 b9 fd 9d 86 14 11 96 b7 8b de 62 b6 a5 ec 63 2f a1 b2 97 37 fd b6 47 28 41 6d 7b 23 90 c7 63 bf 33 fa 51 d5 bf a9 51 e5 a5 50 be 5a 39 53 59 75 ff 99 bf fb ca 43 4a 43 5d e4 32 b3 55 bf fd 34 fe 15 95 00 95 d0 08 08 f6 02 0a 6f a9 46 fb e2 cd a5 dc 6e e5 b5 5a 8f Data Ascii: ]@QU5izp)/m[TM8qsMk_#G#PmMXzGlNQ-Be%g)@D""XeqYa8'F5YPq7d&z`w#^bc/7G(Am{#c3QQPZ9SYuCJC]2U4oFnZ
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 52 b6 8a 8e 56 dd 16 63 19 72 15 90 d2 df f6 bd 14 bd aa 96 fe ec 2c d5 3b 83 16 77 ab 1c e7 39 de cc 77 e7 45 10 82 d7 0f 04 83 98 a7 ce 42 6f ba ff ff ff ff f4 a3 b7 68 80 c8 55 ab 79 1e 18 c5 aa c1 ff f3 64 c4 75 1c d3 ce da 56 7a 44 7a 45 34 70 10 8a 1c 65 f1 2a d1 d8 75 55 40 41 07 48 1e 03 48 8b 55 4c 64 4a 55 00 8f d9 b0 10 62 4f 46 51 2b c7 40 27 01 55 e3 94 14 ab 23 1c 38 c7 fb 6b 14 ad fc d5 2b 2a b6 45 cf cb 55 51 32 80 98 02 9d fc b3 f5 86 a4 70 54 15 09 50 0a 82 a1 df 95 05 54 59 67 4a 82 cf 5c 4a 78 ac af ff d6 fc 6b 89 12 11 2c 1a 12 b8 44 26 0e e2 35 07 6a 48 87 25 9d 9f c6 e5 da 58 ca ed 5b 6a 55 20 6d 96 d5 ff f3 64 c4 84 1c 51 96 a1 bc c3 06 48 5a cd 9e c9 76 1d 99 47 ba e9 f3 95 75 4b 3e 4f 52 38 29 12 79 90 91 f2 0d 8d 18 36 e7 16 33 Data Ascii: RVcr,;w9wEBohUyduVzDzE4peuU@AHHULdJUbOFQ+@'U#8k+EUQ2pTPTYgJ\Jxk,D&5jH%X[jU mdQHZvGuK>OR8)y63
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: ba fe d6 5e 7b 04 ee 8c b3 a6 2a 87 45 db 52 d7 e0 2a a7 ad 7e 84 65 fd 3f 30 18 d5 df fd 46 fa 2b a2 66 35 a6 70 31 91 33 8a be d1 2d e8 35 3d 89 f7 ed 2b 3f f5 d5 fd 3a ca 9f ef ff ff f9 cf 14 27 51 7f ff d3 a8 3e 48 00 23 38 30 68 66 a0 ec 6a 9f 25 a0 00 96 d7 f2 00 55 15 bb 16 b0 e8 a0 07 83 09 ad fd b2 fc 35 a4 69 af 62 bf 69 18 0c 35 2e da d0 54 35 69 da 36 c1 33 35 fc 27 28 36 aa 32 71 b3 88 87 7a 0d 8c ff f3 64 c4 36 1c f1 62 ae 5e ca 46 cc eb ff ff 91 fd 52 55 d9 a8 cc 7d 40 d4 4b 0b 04 83 a1 a0 08 98 ad c5 41 a0 ad e0 6e 89 67 f5 8c 7f d7 e2 ff f9 50 54 04 78 4a 22 d1 d3 f8 b3 d6 64 61 d2 41 d1 84 c8 92 99 d9 10 a8 3a 49 81 ff ea e4 8d f3 75 ea 4a c6 2a 15 26 21 6e ef a5 21 90 0c 86 d5 7c 83 89 9a fd f2 f0 30 0b 14 f7 7b 22 10 5e b7 48 b0 cd c9 Data Ascii: ^{ER~e?0F+f5p13-5=+?:'Q>H#80hfj%U5ibi5.T5i635'(62qzd6b^FRU}@KAngPTxJ"daA:IuJ*&!n!\|0{"^H
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: ab b3 79 34 7b 94 45 20 27 06 0e 12 86 f0 60 b2 4d 45 23 55 b8 3d ff da f4 4d c7 8a 3f ff ff fd 5c ea 5b ff f7 be ac aa e0 c0 83 c7 08 29 49 11 45 48 74 5f fe 2b fd 19 e8 49 f4 31 8c 4b bc 48 72 ff f3 64 c4 9e 29 eb d6 aa 44 ca cb 50 a9 04 c8 1e 7a 57 7b 71 2c b5 40 81 89 02 52 80 8c b9 77 55 e0 00 bb 4e 25 bd c7 c0 df df e4 c8 8e 63 44 93 0c 27 ad f7 2a 92 f9 cc 81 b1 bc 76 e2 4f 12 ab a0 67 00 36 58 d8 e0 b6 ac 4e c0 8a 0b 76 79 e2 af 28 59 bd 98 93 79 83 cf 86 ac 44 65 41 18 02 ee 3c 11 1e b9 cd 36 67 72 7b 1a 42 c3 82 a2 0a a4 c3 84 63 94 c1 87 56 35 7f 76 7f b2 4b b2 b2 0d df b7 ff ff 63 52 a7 27 ff ac dc c6 45 1d ff f3 64 c4 79 24 f3 26 b2 5e cb ce b4 1c 22 3c 83 d9 ab 77 67 24 64 c8 ea fc b9 22 fb a4 6d 05 dc 30 ca 10 05 0a 9e a9 40 34 c8 99 30 2b Data Ascii: y4{E '`ME#U=M?\[)IEHt_+I1KHrd)DPzW{q,@RwUN%cD'*vOg6XNvy(YyDeA<6gr{BcV5vKcR'Edy$&^"<wg$d"m0@40+
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: a2 4c cb c4 78 a7 e3 5f 29 03 4e d0 2f 01 5f ad 5e 82 d7 94 f7 42 d8 8b 06 63 5e 59 a8 bf a6 8e 4d 58 08 11 44 c0 87 3d 48 f6 cd ff 89 84 23 3a bb 6a df ff ff fd 3f ff fc b4 ba 4e e9 8e 1e 12 b9 bf ff 55 62 87 48 fb 22 a8 8f 53 cd 55 c0 82 b5 72 65 5b bb 72 a4 b5 b9 a1 54 17 e2 77 fb 11 2f 6a b1 e5 cf 88 bb 8c 9f 7c a6 42 0c e7 65 a1 c9 b5 ff 85 51 68 fe e4 56 4c 0d 82 90 3e 5b d5 45 d3 74 87 95 cf a5 d7 ff f3 64 c4 3a 1c 92 06 c2 56 c3 04 d0 9f a7 5b b2 9d 59 18 38 00 83 ba 37 f6 d3 bd 95 55 df a2 d9 7f fc 22 b0 37 61 6a 2c 15 6f ff d7 67 ff ac a0 3e 3c 46 08 3b fe b3 e3 91 79 77 af e2 79 c7 88 14 90 7c ba d5 d1 1e a2 aa 7d 37 ab 6b d4 a2 28 5d ea be 72 ec a8 d7 f8 74 85 c7 df 40 42 65 c8 d5 e5 67 27 d9 9b fe ab 5d bd 67 59 2a 0c c9 87 30 ba 54 30 27 95 Data Ascii: Lx_)N/_^Bc^YMXD=H#:j?NUbH"SUre[rTw/j\|BeQhVL>[Etd:V[Y87U"7aj,og><F;ywy\|}7k(]rt@Beg']gY*0T0'
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 54 c6 dd 71 1b 55 ff ff ff ff ff ff 87 1e ac 6c ec 8f 22 33 df 77 bc 77 9a c6 73 48 5a ff 5e 90 75 1e 37 ff ff ff ff ff ff ff ff ef ab dd 58 9c 64 7f 1f 7a be f7 fe 7f a5 35 ed 6b 78 50 62 ff f3 64 c4 d2 35 bc 06 da 5f 98 78 03 f1 43 77 bc 35 43 b8 ef 46 9f a8 d4 6d 34 0c d2 38 cd 46 00 c0 29 ab 1c 70 95 d9 80 87 19 7a 8a 90 86 67 e9 a0 76 e8 60 01 13 f4 1b ba 4e 33 02 ec 12 22 44 c8 c1 16 1a 80 c8 1f ca 24 b2 c7 70 4d 80 25 80 04 a0 37 46 05 16 75 24 5e 47 63 ec 79 27 49 67 26 c6 06 d5 ad 24 87 78 5d 87 6a 26 66 49 a4 92 d1 39 bd 48 b1 f9 92 05 f1 da 68 4b 18 16 a6 4b 1b 26 6c 8c a2 89 74 e9 2a 8a bd 23 12 e9 76 ff f3 64 c4 7e 2d 5b 1e 9c 09 db 68 03 c6 67 8b ac e9 24 83 13 4d 0d 93 7d 53 e9 75 57 eb 7f 7f fb b2 9f df ad 2b b5 4f 4d 15 19 cc 68 33 65 65 Data Ascii: TqUl"3wwsHZ^u7Xdz5kxPbd5_xCw5CFm48F)pzgv`N3"D$pM%7Fu$^Gcy'Ig&$x]j&fI9HhKK&lt*#vd~-[hg$M}SuW+OMh3ee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49734	104.21.53.38	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	649	OUT	GET /get/script.js?referrer=https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net HTTP/1.1 Host: userstatics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://markssmith.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:12 UTC	804	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.2.1 Access-Control-Allow-Origin: https://markssmith.icu Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: X-Requested-With,content-type Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zmDZnUNTsotmSS2kqXOjudmLUexDwIh%2F4e9GEjo%2BN83TCpglmPxoo2JOxWFNW7WRQd6qeY7xdWxZjVwY%2Fg5FZMB1K90xwL8KRk%2F3dZtVHOcwP2wOUi%2F8aXMrYK%2F%2F%2BFYuOBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84a1d118de2-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	139	IN	Data Raw: 38 35 0d 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 7b 6e 65 77 20 52 65 67 45 78 70 28 61 74 6f 62 28 22 64 58 4e 6c 63 6e 4e 30 59 58 52 70 59 33 4d 75 59 32 39 74 22 29 29 2e 74 65 73 74 28 65 2e 73 72 63 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 29 3b 0d 0a Data Ascii: 85document.querySelectorAll("script").forEach(e=>{new RegExp(atob("dXNlcnN0YXRpY3MuY29t")).test(e.src)&&document.body.removeChild(e)});
2024-04-25 22:42:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49737	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	392	OUT	GET /23d80j2d/qwd13d8jqd/wwrdx--k.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:12 UTC	690	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: image/png Content-Length: 249564 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:09 GMT ETag: "6615dfe9-3cedc" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6026 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wL9R0LHNV3S26s%2BENV3QDupf8kPU%2FFnaYojEc4TkBecPpkL%2FxyrXd3A1zG%2FQzPcYTBiGT3vQB4r69Wb1nfRBbc9JoXntvSwSQ4vOdm2WLL%2BDmW0az0S3gCWuGLaLH6UoEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84b5d68571f-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	679	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 90 00 00 04 1a 08 06 00 00 00 44 97 3b 56 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 50 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 02 01 12 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 26 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 06 90 a0 03 00 04 00 00 00 01 00 00 04 1a 00 00 00 00 43 59 72 36 00 00 01 59 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d Data Ascii: PNGIHDRD;VgAMAa cHRMz&u0`:pQ<PeXIfMM*i&CYr6YiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xm
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 80 04 48 80 04 48 80 04 48 80 04 48 20 43 c0 49 12 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 90 4d 80 02 52 36 0d 7e 27 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 10 0a 48 bc 08 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 0a 48 bc 06 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 Data Ascii: HHHH CI$@$@$@$@$@$@$@$@$@$@$@$@$MR6~' HHHHHHHHHHHHHrP@ HHHHHHHHHHHHHrP@
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 0a 48 bc 06 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 0a 48 bc 06 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 72 08 50 40 ca c1 c1 19 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 0a 48 bc 06 48 80 04 48 80 04 48 80 04 Data Ascii: HHHHHHHHHHrP@ HHHHHHHHHHHHHrP@ HHHHHHHHHHHHHrP@ HHHH
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 90 00 09 90 00 09 90 00 09 90 00 09 90 c0 6e 48 80 02 52 1f 9f d4 36 c7 aa 35 10 fb 6d 6e db 75 67 7c fe ba 2a 13 01 d4 36 5c 27 22 62 1c 92 70 6a e4 8c 91 1b e0 04 d4 08 15 c8 06 10 1d 34 c5 9a 2d 3e 59 51 36 2a 80 18 59 04 e2 43 db 36 ee 74 dc 88 14 6d fd b6 fb 96 71 16 da 6f a4 db 6f b5 ef 0e 51 03 4a c3 09 56 90 63 c0 44 8f db 6d 98 29 37 75 bf c2 25 6e 4c cf 11 48 63 9d ae b7 de b8 4f 8a 07 ce 54 b4 ca 38 61 33 4d bb 39 d1 b3 6d 9d c3 36 b7 af 7e 53 c7 6d e6 04 e8 f8 f4 1a 30 e3 34 7f cc 58 cc 0e ad 59 f3 d5 6a 6d 2f 40 fb d6 6d b4 3b ac cd 74 67 1a f3 0f 09 ec 00 01 bd 9c f4 37 a4 7f 35 2a 45 cd dc bf 3a bd c6 2c 41 54 db e8 bd 43 23 e3 ac ef d6 94 7f bb 4b a0 ed 8e 51 b8 07 fb 89 92 99 66 1e 2c 1a 49 a4 f7 05 bd 0f 5a f7 76 4c 71 fe cc e9 c1 d4 08 Data Ascii: nHR65mnug\|6\'"bpj4->YQ6YC6tmqooQJVcDm)7u%nLHcOT8a3M9m6~Sm04XYjm/@m;tg75*E:,ATC#KQf,IZvLq
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 d0 2f 09 50 40 ea 97 a7 a5 6d 50 d9 82 8e f1 c6 b6 ad 82 98 00 19 c0 76 18 c2 79 6b cb 06 ba 8d 13 c2 48 d2 38 74 2d 87 9f dd 8f 2d 88 18 b1 02 7d 19 d1 a1 75 4b 4b 9c b0 db 5a fd a0 91 ad 50 64 ed 7b f7 f8 0a b9 0d ac f4 f0 34 e2 c8 8a 3e 52 5e ca 52 23 8c 32 75 88 32 8c 55 5e d2 a2 f3 da 56 ff 59 d6 93 0e 54 6b df a6 5f ec 5b dd b7 d6 ae 11 7d 94 49 95 67 89 47 1a ff 64 39 79 a1 0c 66 da e9 3c 7e ce 48 85 67 9a 66 da 6b 2f 90 bb 30 da 36 67 b0 35 6e fe 25 81 1d 24 60 ae 31 fc 56 34 ca c8 69 5f 5f 7a ad ea f5 16 37 bf 10 bd 6e 93 e2 b1 ae 3e fc 6e f4 b7 a5 bf b7 8e 42 c7 0e 8e 65 8f dd dc e6 5e 2a 00 bd b3 58 d1 8d b6 98 6c 6e f3 e6 dc e8 1f dc e1 70 5e f5 45 04 bd ef 69 5b 8d 26 33 cf 0f ac Data Ascii: @$@$@$@$@$@$@$/P@mPvykH8t--}uKKZPd{4>R^R#2u2U^VYTk_[}IgGd9yf<~Hgfk/06g5n%$`1V4i__z7n>nBe^*Xlnp^Ei[&3
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 96 ea ea 6a 89 87 83 26 96 51 ef 51 7a 4f b4 cd ba 1b ea 7d 24 73 4b b1 57 70 4a 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 b0 db 11 a0 80 d4 8f 4e 69 c7 74 71 1a 4d 82 94 42 50 09 d4 e9 57 e6 f7 4a 12 e2 4e 73 53 bd 78 51 f4 bc b2 a2 5c ea b6 37 18 31 c8 03 f1 47 c5 25 1f 84 02 4d 65 a6 91 44 69 13 65 84 af 70 00 9a 04 44 4e 08 42 68 64 6a fd 40 20 4a a8 e0 60 de 3c 07 04 08 17 31 0d 40 32 02 16 fa 72 7b 91 d2 0e 22 8a 46 17 64 fc bc d8 44 3b db ad cc eb 73 23 49 13 52 be 05 eb 25 1d 43 4a 3f 88 48 e9 a4 13 62 0d a2 91 ca 6a 70 ac ea 3c b5 44 1e 2b 75 53 b6 70 d4 b9 d3 b6 24 40 48 3f 67 f6 01 ee 0e 80 56 d1 4f cf 8f 46 6c a8 cb 56 53 7e f9 70 ee 5d 10 b4 1c 10 8f 3c a8 35 e3 48 44 64 c6 94 51 b2 ff 14 6b 4f 2b 57 0e 90 85 6f 21 Data Ascii: j&QQzO}$sKWpJ$@$@$@$@$@$@$@$NitqMBPWJNsSxQ\71G%MeDiepDNBhdj@ J`<1@2r{"FdD;s#IR%CJ?Hbjp<D+uSp$@H?gVOFlVS~p]<5HDdQkO+Wo!
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 8b 95 de cd b4 e1 1f 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 81 dd 82 00 05 a4 3e 3c 8d 1a c1 a2 42 8c be cd 9d 40 84 8b 89 ee d1 77 bc 4d 9a 34 5d 2e 28 6e 9e 90 01 88 12 92 70 93 84 eb 37 ca d4 09 23 e4 ec 8f 7d 54 0e 3d b8 cc d4 18 19 84 36 1a 75 14 82 7a b4 62 6d 4c 96 7c b8 56 3e dc b0 49 36 d7 37 9a 34 44 fa 76 f8 80 aa 4a 19 37 72 88 4c 1d 3f 46 26 8d 19 24 c3 50 da 47 df fb 8f 42 49 da 8e e9 b2 2d 22 8f 3d b1 44 9e 7f 65 be d4 87 c2 52 51 3b 54 13 a2 49 5d 43 b3 04 02 1a e7 82 ba 4a 69 8d bc d1 37 d0 51 17 09 db c5 4d f0 01 22 78 f4 18 f0 d9 dd ec c4 99 c3 64 78 ad 1d e3 d3 f1 e8 9e 7e 7b 93 ac af 47 ea c0 3e b6 bd 86 57 ca 41 93 10 7a 96 c7 16 ae d8 26 cb 36 34 e7 59 db 73 8b 47 0f 2a 93 d1 Data Ascii: ><B@wM4].(np7#}T=6uzbmL\|V>I674DvJ7rL?F&$PGBI-"=DeRQ;TI]CJi7QM"xdx~{G>WAz&64YsG*
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: f8 e9 43 7b 65 78 0f 7d f7 c8 6e f7 3b 7f 79 bd 9c 73 fd 4b 39 db df 74 c9 41 32 75 54 55 ce b2 9e 98 b9 ed 4b b3 bb d5 cd af 1e 5c 22 37 cf 5d 5e f4 b6 1a 9d 52 c8 de f8 50 93 25 ee 3a 16 87 88 d7 1c 46 f4 5d 40 c3 f8 3a b7 e6 88 c6 01 96 6e 97 9e 34 49 b6 36 46 64 29 52 0b 6e 86 48 d7 12 c1 6f 1d e2 66 12 a2 55 6f d8 be a3 ab e5 b0 29 9a ec d2 b2 c5 6b 1a e5 d9 c5 9b e5 32 8c c3 e3 b6 9c d7 e7 1e 36 a6 a0 80 74 f8 de 83 8c 78 a4 3d 78 b1 8d 46 e7 e9 e7 c3 cd 2d 46 44 bb ff d5 b5 12 d4 da 69 b4 bc 04 f4 5a ba fe a2 fd e4 cf 4f ae 90 85 2b ea f3 b6 e3 8a dd 83 80 cb 85 e7 3a 9e b7 29 e4 7c 75 e2 f9 ab a9 69 35 15 ac 1b e2 91 4e 35 bd 5d 0c 61 8d 49 4c 69 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 d0 5f 09 50 40 ea c3 33 a3 ef 22 a3 Data Ascii: C{ex}n;ysK9tA2uTUK\"7]^RP%:F]@:n4I6Fd)RnHofUo)k26tx=xF-FDiZO+:)\|ui5N5]aILi$@$@$@$@$@$@$@$_P@3"
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 02 24 d0 9f 09 30 85 5d 1f 9e 1d 4d bb 96 d0 70 19 77 52 9c 4e 37 04 99 a8 94 43 9a a9 f5 24 e4 f4 23 67 c9 41 93 44 a2 58 bd 16 be dd 3b 1e 7a 4d 1a 1d a3 11 fc 83 28 22 b4 f5 a1 ee 51 34 1e 94 48 08 91 4b 1e a4 a4 43 ee b9 14 6a a8 38 51 5f c1 89 08 23 49 36 4b 24 12 16 1f 84 29 84 1e c1 91 e5 c5 76 10 94 10 ca 14 d5 bc 76 ce b8 b8 bd 0e 19 58 51 26 2e a4 b8 8b 62 bb a4 2f 2d cb b6 7b e4 f2 6b 1f 91 5f 7d ff 0c bc 2b 2d 32 e7 a3 fb ca 7b 6f bf 29 6f 7d 50 27 2e 7f a5 b8 2b 6a 20 20 85 25 1a 6d c6 7e 34 41 8f ba c7 fa de 14 a3 71 c6 69 81 27 33 aa be 1f 53 29 23 e8 2a da a5 94 be 7a a3 ed 57 20 22 a8 00 a4 b5 81 ea 9a a3 26 4d 59 2c 0e 87 28 d2 31 95 fb ba be 8d fc f6 73 b3 3a 0c 4b a3 8e d4 34 7a e5 f2 33 a6 e6 ac d7 08 96 33 67 8f 32 9f 77 d6 34 c8 5f Data Ascii: $0]MpwRN7C$#gADX;zM("Q4HKCj8Q_#I6K$)vvXQ&.b/-{k_}+-2{o)o}P'.+j %m~4Aqi'3S)#*zW "&MY,(1s:K4z33g2w4_
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: ef 68 7d 4b 60 fc 90 80 ac da d4 22 2e 3c a4 62 a6 ee 91 0f cf 70 0f ae 46 b7 15 75 e4 c0 1b 1d 0e 08 b7 78 1e d3 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 a0 bf 12 e8 5b ef 7f 7f a5 b2 93 c6 e5 84 c8 a1 02 d2 80 ca 01 12 8a 44 c4 e7 71 48 35 a2 8f 8e 3f 66 3f 29 2f 17 89 c1 ef f9 af 7b fe 03 c9 c8 07 07 21 92 d0 c1 81 e9 46 44 40 45 39 6a 20 a1 80 52 a8 b9 45 6a b1 6d b4 7e 9d 0c 0f 24 e5 17 57 5d 2c 53 87 88 b8 e0 97 0a 43 43 d9 b4 2d 21 37 df f8 77 79 7f 6d 8b 78 6a 26 49 d2 8d b4 77 a8 5b e4 f5 b9 c4 ef f4 88 cb e5 42 34 13 de 88 46 df 89 48 10 02 07 a2 26 10 05 d5 14 8d c9 56 bc 37 3d f7 d5 0f e4 ac 43 27 8a 03 ea cc e1 07 ec 2d 8f bd be 1e 42 c8 20 b4 b7 52 5a 39 9d 2e 13 05 b5 93 70 15 b1 9b 8c c7 18 63 57 5b 5b 17 ea b0 cd Data Ascii: h}K`".<bpFuxHHHHHHHH[DqH5?f?)/{!FD@E9j REjm~$W],SCC-!7wymxj&Iw[B4FH&V7=C'-B RZ9.pcW[[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49736	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	392	OUT	GET /23d80j2d/qwd13d8jqd/rwzcxxa4.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:12 UTC	676	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: image/png Content-Length: 168 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:09 GMT ETag: "6615dfe9-a8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6025 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YactIddH5cJ41n%2BBPiLxUwBfGXrzt25g2ZJlhEegiEafgzWkfjHWMLwQx41vNdFdCBw0rhzF5kaLhojtqcD2DEVjR0cNd1GeUhHGQ19wFLLACpzWUU9vctChqMSkmVjcUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84b5b0aa662-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 1e 04 03 00 00 00 26 dc d8 af 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 0f 50 4c 54 45 f4 50 21 00 00 00 83 bb 03 03 a6 f1 fc ba 03 5d 32 e9 94 00 00 00 05 74 52 4e 53 ff 00 ff ff ff 08 b1 e7 2f 00 00 00 21 49 44 41 54 78 9c 63 60 80 00 41 25 08 10 60 18 d6 02 82 a8 00 8b 80 31 04 08 ba 40 c0 f0 16 00 00 8a 22 40 4d a4 c1 93 b8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR&sRGB,pHYsPLTEP!]2tRNS/!IDATxc`A%`1@"@MIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49738	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	392	OUT	GET /23d80j2d/qwd13d8jqd/sh9337d_.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:12 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: image/png Content-Length: 722 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-2d2" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I0TEXcDkYtgl6MV6N1%2FTW09mpePjUqvT5QPCRw%2B2u54pswcKh1EK49s5KQTTCglYEATzlUyiAB7PZLwA3TYb9ozg6czo7ye%2FDReIrIiuCLi%2FXPFbgeaXsxxagsEF8rGKZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84b6b419ae5-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 01 03 00 00 00 f9 f0 f3 88 00 00 00 06 50 4c 54 45 00 00 00 00 00 00 a5 67 b9 cf 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 65 49 44 41 54 78 5e c5 95 bd 6e dc 30 0c 80 29 08 a8 3a 45 7d 80 e0 f4 1a 19 0e f6 2b 65 f4 70 c8 09 b8 a1 63 5e 49 41 87 be 06 83 0e 59 95 cd 83 61 d6 3c 51 c7 8b b9 b7 c6 1d 6c 7f 96 28 fe 13 e4 72 19 be 5e be fc 0b 10 70 b7 80 e8 eb 92 33 d1 ba 5b f0 75 49 a2 8f 0f 9a ef 77 cc be a4 55 81 a3 ec 8b 23 b5 2f 2c ac c7 88 2a 02 61 5c 20 cc 2a 22 07 22 74 2a 64 6d 7a 9c 3b 70 73 d3 23 75 a9 a1 06 f2 85 30 a2 80 58 62 f5 fc af 02 52 0e ac 07 ba 7e cc d8 fd b1 08 38 75 30 08 98 7b 5c 92 9c da 65 41 Data Ascii: PNGIHDRPLTEgtRNS@fpHYseIDATx^n0):E}+epc^IAYa<Ql(r^p3[uIwU#/,a\ ""t*dmz;ps#u0XbR~8u0{\eA
2024-04-25 22:42:12 UTC	36	IN	Data Raw: d9 d1 68 87 a7 1d af 10 f0 bf cc 7d 97 05 fc 05 4e 81 b1 67 bf 81 6c 4e 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: h}NglNIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49739	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	392	OUT	GET /23d80j2d/qwd13d8jqd/m-8l5t4x.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:12 UTC	681	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: image/png Content-Length: 364 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-16c" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6025 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XMQ%2FOAWpDvTqavlbg9Tmuu68glcYlqH0iycGO2Ov30w1cRJAqKnWRVtv%2Fd5DyeiCxF6%2FfCMdb9O0QI5fSANsNe8AeadmN6yOrKVTpDQFZWhpuuNlYQkeJQRMyRhZgC7IHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84b6fc467ba-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	364	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 0c 08 02 00 00 00 d9 17 cb b0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 0e 49 44 41 54 78 da 5c 90 bf 8e 45 40 14 c6 b1 a3 94 a8 54 42 a5 13 c9 2d 6e 24 b4 a2 90 28 e4 96 1a 0f e4 35 54 1a 37 91 78 00 3d 5a 51 88 82 c2 9f 6c 28 6e 23 d8 b3 d7 ae cc ee 57 4c be f9 9d f9 4e ce 1c 72 59 16 e2 57 59 96 25 49 02 c6 30 0c 55 55 2f 4e 11 98 ea ba fe 7c ab 2c 4b 9c 93 d0 29 08 82 b6 6d 45 51 2c 8a 62 5d d7 b3 70 bb dd fa be e7 38 ce 75 5d 04 e9 3c cf 81 02 c2 d3 27 84 b0 a6 69 68 1c c7 ab c0 f3 bc e3 38 60 e2 38 86 f0 09 bb ae a3 ee f7 bb 65 59 e7 1d 5e 88 6f 3d 1e 8f 93 98 a6 a9 eb fa f7 e0 34 4d 13 7f 45 51 3f 1f 42 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx\E@TB-n$(5T7x=ZQl(n#WLNrYWY%I0UU/N\|,K)mEQ,b]p8u]<'ih8`8eY^o=4MEQ?B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49740	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	392	OUT	GET /23d80j2d/qwd13d8jqd/lmq9m72q.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:12 UTC	685	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: image/png Content-Length: 276 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:08 GMT ETag: "6615dfe8-114" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S4bW%2FNWLTqR3Ub7FMlJZQRXy568h8WblMvnr%2F77WA7R9%2BaQpgylqwf2w5bPouGv23xmYg0PEASrfTneUcwZhZ0x33En%2BhZQVnq8nfezkn4Zz6NvTVw9RZh1%2BX7TVUVRq5A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84b69ba3358-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	276	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 0d 08 03 00 00 00 45 35 14 4e 00 00 00 4e 50 4c 54 45 00 00 00 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 3d 75 17 bb 00 00 00 1a 74 52 4e 53 00 a8 7a 53 ac b5 04 47 c1 96 15 6a 90 cd 22 a1 0c d8 9e 29 09 a4 6d 0f ae b2 10 a7 28 a1 00 00 00 5b 49 44 41 54 78 9c 65 8c 49 16 80 20 0c 43 99 e7 19 04 bd ff 45 15 a8 6e cc a2 e9 7f 69 83 d0 54 e7 1d 7d a2 f9 cc f4 05 4d 1a 6a 44 43 42 96 91 9d e2 b4 2c e1 65 07 3c 6c 67 40 ec 4f d5 01 b9 3a 4b 02 50 98 35 4a 8e 05 43 aa 67 1a 5b b8 c7 9e 17 6b f6 8d 88 57 14 73 b9 Data Ascii: PNGIHDRE5NNPLTEfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff=utRNSzSGj")m([IDATxeI CEniT}MjDCB,e<lg@O:KP5JCg[kWs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49741	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	392	OUT	GET /23d80j2d/qwd13d8jqd/nfkp-cl0.gif HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:12 UTC	692	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: image/gif Content-Length: 14751 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:10 GMT ETag: "6615dfea-399f" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XiSWYnZwnqILs5PUmHJ8I%2FJ1vr34c636qilsZiGIPV0Rs%2BcV5Gcxi2S%2B8iy%2FypBunf5eOtzFlE3CvYFa5uun5q1ePTK9vcHNev%2FwGb4zgk6YMGY5U%2BevdpxHX00oMMyO%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84b7c5b5d10-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:12 UTC	677	IN	Data Raw: 47 49 46 38 39 61 c1 00 47 00 f6 01 00 ff fd ff fd cc 01 fb df 64 fd e8 8f f9 d3 3b f8 e6 a0 fa f2 d1 d0 dc f0 98 b3 d8 7a a5 d7 7c a4 d4 f8 e5 a0 f6 f0 d3 a2 b9 db fa de 64 fb e7 94 7b a4 d5 f0 ec da a8 b6 d2 70 60 ef 82 72 f1 6d 5e ef 7b a4 d6 ea e9 e1 e4 da a8 fb df 63 71 61 f0 db e3 f5 ea e6 e0 d1 cb ba 83 75 ea dc e4 f5 f9 dd 64 73 63 f0 ea e7 e2 d5 d0 b6 84 76 ec 72 62 f3 7b a4 d4 fb df 61 e5 e1 e5 dc e3 f6 d1 cc b7 83 73 f3 fb df 60 dc e3 f5 e8 e5 df cb c5 c4 71 65 e7 7b a3 d4 e8 e5 e3 d1 cd b7 84 75 ef fb df 62 dd e3 f5 73 68 e2 7b a3 d3 e7 e4 e3 ca c4 c0 85 76 f0 7b a2 d3 70 69 de e6 e3 e0 c8 c3 c5 84 75 ec 71 69 df cc c6 bd 84 74 f3 70 68 df dc e2 f5 e3 df e7 cf c9 b8 83 72 f4 fc df 61 70 69 dc 7a a0 d2 a3 a3 e8 e1 e4 ec ec de a8 82 72 f2 6f 68 Data Ascii: GIF89aGd;z\|d{p`rm^{cqaudscvrb{as`qe{ubsh{v{piuqitphrapizroh
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 46 02 e8 ed e5 05 e1 ac da ee ed 04 ce f4 e8 f0 20 ea 56 ad a9 ff a2 d8 e1 4b 77 6f 60 39 01 00 a3 5d 31 c8 10 9f bd 75 0d 23 a2 b3 16 c5 80 c4 8b e5 28 02 c1 78 51 e3 13 8b 1c bb 23 7a f4 11 52 a4 15 90 25 0d 8e ec 91 92 e1 4a 26 28 5b d2 7b 59 43 40 30 99 03 69 2a 89 89 73 62 10 84 13 7a ce 3c 29 d4 9d 81 a3 00 8e 9a 52 9a 14 29 d2 a6 12 9e 3a 9d aa 74 95 54 ab 36 01 14 6d a7 33 09 cf ad a0 6c d2 c2 56 a0 1b af b1 47 5b a5 1d 10 96 2c d0 b3 6a d1 96 55 47 cb d4 56 9f 55 be 16 ed 3a a3 6c d0 bb e6 f8 1e d1 2b 54 30 8c 5d 14 00 07 26 aa 38 80 e1 17 d6 1a 3b 66 ac f8 31 0d c9 96 87 10 c6 49 20 b3 0c cc 94 ef 76 36 02 3a 6f 69 22 a7 a7 6c 96 f9 b0 08 81 c6 9e 85 0c 4b b8 2c 61 6c 19 b4 89 e5 1e d5 b4 aa ef df c0 83 0b 1f 4e 3c 78 04 00 21 f9 04 05 0a 00 04 Data Ascii: F VKwo`9]1u#(xQ#zR%J&([{YC@0i*sbz<)R):tT6m3lVG[,jUGVU:l+T0]&8;f1I v6:oi"lK,alN<x!
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: b1 7e ce d4 25 d0 d1 86 d5 da c3 d8 d9 da d4 dc ca cc df d5 ba cb e3 e4 ce c3 34 d2 de e9 ce ab 91 ef d5 eb f2 f3 e5 aa 5c f7 f4 f9 52 fb da fd a8 fc e3 d7 cf 89 ad 5d 03 91 e4 43 88 83 42 85 87 10 23 3e 64 98 f0 86 2a 8a 37 24 6a 84 88 b1 22 0c 52 4f 2a b0 8b e6 d0 61 47 8f 2e 32 ff 3d b9 b0 b1 25 85 93 28 c7 7c 82 22 32 da a0 92 25 61 c6 dc b3 0a 0a 00 97 1a 73 ee 1c c2 6d 4d cd 5c 2e 85 0e f5 d1 47 a7 8d 9f 10 71 02 7d b8 74 88 1d 2c 50 a7 6e ac 4a 74 ca 1a 0c 60 c3 8a 0d 6b 93 65 05 72 17 c6 aa c5 e0 94 27 b1 44 52 a5 7e 6b 3b 87 2e 16 07 78 f3 e6 b5 7b 24 ad de bf 80 f1 ee c3 e0 80 30 d8 c2 87 c5 22 0e bb 98 71 d8 40 86 d5 36 56 bc 36 31 d8 5e 0e 8e 64 06 c4 96 2b 89 cd 30 08 07 fe 1b 68 34 e0 8a a0 5d 60 48 b7 da f3 89 d6 df 60 ff ab 4c 7b 1e ed ca Data Ascii: ~%4\R]CB#>d7$j"ROaG.2=%(\|"2%asmM\.Gq}t,PnJt`ker'DR~k;.x{$0"q@6V61^d+0h4]`H`L{
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 11 49 82 1b 21 92 03 4f 1e 43 f8 cd 0c 4b 98 25 65 92 49 d9 0d 64 c8 ff 8a 0a 71 b6 33 a9 53 8a 35 9f 3f 2d 62 e4 95 8e 68 d1 25 10 9f 21 dd 09 54 e8 3d a7 4f 9d 20 9b 4a 75 a4 82 af 60 c3 8a d5 88 35 2b 92 a8 e1 e8 dc 1c cb 16 6c 53 b3 62 d0 ba e2 f3 e6 a6 d5 a1 70 e3 9e 9a 7b 2e e9 45 64 6f f3 86 c1 73 70 5e cd 95 55 ef 6e 14 2c 86 b0 4b c3 65 af b0 5c fa 69 61 64 c6 4a 0c 07 78 17 2c b1 62 75 97 31 67 46 e3 58 ad e7 cf a1 45 37 29 6d da e2 e3 5a 81 55 77 f1 b4 eb b4 e2 d4 b2 7d e2 96 0c 94 32 6c 7c b9 f5 1e 3e 36 a2 b8 f1 e3 c6 51 3b 14 81 bc f9 08 11 e2 40 48 9f 4e 9d fa f3 4b 96 0b 8a a8 ce 7d 7a f4 ee e0 c3 77 87 3e 6a bb f8 f3 e2 bf a3 5f cf 9d 14 fb f7 d4 a3 9b 01 e1 9e fc 18 fa da f0 43 61 ef 7e bd 15 fd d3 00 b8 5a 13 02 4a 52 e0 11 ac 31 71 a0 Data Ascii: I!OCK%eIdq3S5?-bh%!T=O Ju`5+lSbp{.Edosp^Un,Ke\iadJx,bu1gFXE7)mZUw}2l\|>6Q;@HNK}zw>j_Ca~ZJR1q
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 89 c5 be 8b 2d 01 ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f0 e2 fa d5 6a d7 81 d9 db 16 59 ea 06 c8 d4 be 83 b5 4e c5 02 18 b0 d7 40 82 70 0c 22 3c 68 70 a1 9f 89 c6 4a 98 80 58 b0 1f 46 7d 15 75 35 d4 b6 91 63 44 8f 1f a9 85 4c 75 ee 63 ab 92 26 dd 48 4c c9 6c a5 b9 91 8b 60 c6 64 93 86 a6 ca ff 7e 16 8f 69 ca f3 70 a7 99 34 e1 7c da 02 2a 92 ca 8b a7 50 a3 46 25 8a af aa d5 ab 58 ab 26 55 ba 2e ab 57 78 47 18 a6 4b f7 e2 ab d9 b3 68 f3 71 25 95 f6 6b d8 8b e2 c6 16 35 5a 66 26 d7 b6 5e df e2 ec 33 97 ee 18 a4 6b 6d de 1c 4b 98 42 59 bc 88 13 db 5b ab d0 62 ca 44 7d fd 8a e9 79 57 b1 55 59 25 c8 1d a3 6a b9 b3 e7 00 4a 1b 3b 76 99 59 b2 20 5c 29 45 37 dd 4c f6 b3 6b c5 34 2b 75 6b 19 97 ac e9 36 72 3e 1e 7e 5d 0f 33 e1 6d bb 79 0b 3f 8b 51 75 b0 df db fc dd Data Ascii: -jYN@p"<hpJXF}u5cDLuc&HLl`d~ip4\|*PF%X&U.WxGKhq%k5Zf&^3kmKBY[bD}yWUY%jJ;vY \)E7Lk4+uk6r>~]3my?Qu
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 9d a7 dc 02 c6 8c aa b2 b7 28 a3 b5 10 55 ec 79 c7 06 8a c8 2f 86 16 b6 2c 78 bf ae 79 88 3a ae f0 d3 6c 11 d5 d2 c9 ed b3 ea 10 e7 84 a4 de 96 79 6d 3e 89 96 3b 25 6d a9 e8 9a ab ee ba ec b2 62 ed bb 93 81 0b 6d 55 db 66 c1 e7 39 19 a6 a1 29 a8 00 07 2c f0 c0 04 17 0c 6a 10 00 21 f9 04 05 0a 00 01 00 2c 00 00 01 00 c1 00 46 00 00 06 ff 40 80 70 48 2c 1a 8f c8 a4 6d 77 6b 3a 9f 3b 9b 72 4a ad 5a af d8 ac 76 cb b5 32 a1 e0 68 77 4c 2e 9b cf 68 25 13 b7 c3 b9 df 6c a7 34 4d af db ef 67 a6 6e cf e7 7f 99 73 78 82 63 38 81 83 87 49 7f 8a 8b 80 88 8e 56 6f 86 8f 8f 8d 52 96 52 8c 92 93 9b 36 70 85 9c 94 61 a2 5f 9a a0 87 9e 6e 3a a6 87 95 52 a3 4f ab 8e 3a a8 70 a5 b1 66 8a af 50 b6 b7 67 a8 36 b3 70 aa bd 69 b9 ba 72 c4 75 c1 6f aa 52 cb 91 c9 b8 62 97 d4 d4 Data Ascii: (Uy/,xy:lym>;%mbmUf9),j!,F@pH,mwk:;rJZv2hwL.h%l4Mgnsxc8IVoRR6pa_n:RO:pfPg6piruoRb
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 54 3e 42 cf 50 bc 7b 4a 0e af 76 57 bf 72 fe fb fb 92 a2 d7 4f cf bd 47 7b fc 00 1a a2 df 2d fc 9d d5 1d 6d 01 66 36 4f 4e 07 4a e7 5f 82 10 fa 33 20 2e f4 c9 d7 43 84 18 2e b8 de 85 89 35 88 61 82 19 6d 68 59 5b 1f 42 18 62 23 ae f8 45 61 89 26 6a 58 60 62 fc b1 08 e2 3c 13 8d f8 a0 8c 33 7e 67 e3 7f 38 e2 97 d1 83 7e 79 d8 63 80 0e bd 78 56 8c 43 42 98 0d ff 78 73 09 99 64 82 cb 74 c2 db 7e f5 5c 52 c3 95 58 66 79 a5 0f 4f 0e e2 c3 97 60 86 19 e6 2e 52 42 65 5f 00 68 a6 a9 e6 9a 6c b6 b9 26 97 4f fa e0 e6 9c 74 d6 c9 a6 21 4c ae 34 9d 2f 76 f6 e9 67 9f 70 9e f4 e7 a0 84 fa 79 08 7a 37 49 a3 4c 2e 85 36 ea e8 a3 90 46 2a e9 a4 f1 a0 c7 4a 77 3f 4c aa e9 a6 9c aa 09 40 a7 a0 a6 a9 08 64 0c 21 8a 4e a8 a8 a6 aa ea aa 77 c2 f7 09 9f ab ca c9 ea ac 73 ca 4a Data Ascii: T>BP{JvWrOG{-mf6ONJ_3 .C.5amhY[Bb#Ea&jX`b<3~g8~ycxVCBxsdt~\RXfyO`.RBe_hl&Ot!L4/vgpyz7IL.6F*Jw?L@d!NwsJ
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 9d d3 57 2b c7 b5 83 55 77 f5 75 d7 64 33 15 f6 54 63 97 ad f6 51 67 f7 94 f6 da 70 b7 dd d2 db 70 ab 2d 37 48 74 d7 4d f6 dd 78 e3 dc ad a5 42 f0 8d cb df 9c 9a 0c f2 e1 88 27 ae f8 e2 8c 37 ee f8 e1 81 00 00 21 f9 04 05 0a 00 01 00 2c 00 00 04 00 c1 00 43 00 00 07 ff 80 00 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 90 45 3c 45 91 96 97 98 99 9a 9b 9c 9d 93 3c 94 9d a2 a3 a4 a5 a6 9a 9f a0 a1 a7 ac ad ae af 97 46 aa b3 95 b0 b6 b7 b8 ac 47 b3 bc ab b9 bf c0 c1 8b a9 aa c4 a0 b5 c2 c9 ca b8 c6 c7 45 cd be cb d2 91 cf d5 d6 d6 c2 45 bb bc d7 cf bd 94 c8 d3 e2 89 45 44 e6 e7 e8 e7 e1 b6 d0 e0 dd ed e0 e3 f2 85 e5 e9 f6 48 48 eb ac da df 3c 47 ef d7 fa 45 9b 27 ae 1c c0 67 e7 f2 05 58 c8 b0 a1 c3 87 10 23 46 fc 77 b0 db 37 7d 04 97 d5 bb 97 0e 5f 11 89 20 Data Ascii: W+Uwud3TcQgpp-7HtMxB'7!,CE<E<FGEEEDHH<GE'gX#Fw7}_
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: 71 45 6c 8f 23 57 be dc 95 d9 e6 67 9f 27 a2 78 11 b9 cd ea c0 1d 3f 4e 7b 17 55 af ef b0 bb 83 7f 05 53 20 79 a5 da b7 f7 92 4d 5a f3 fa b9 ef f3 bf 8f 2f 1f d4 27 fa 1f a1 77 1f 7e d8 9d f4 59 2b bc 00 e8 91 7d 03 9a 42 57 81 28 f1 07 dd 2c 96 b5 c4 60 83 a5 40 68 a0 5a 1b 25 68 ce 44 09 f9 86 61 86 e2 69 78 a0 75 1e b6 17 d3 85 23 ea 52 e2 4d fa 49 c8 5a 82 96 a9 d6 e2 5c d8 c5 e8 4f 34 0a 41 a5 1b 75 37 3e a4 df 90 27 c6 52 0e 36 82 08 26 62 ff 90 2b 11 39 a4 8c 79 fd 23 62 8d 41 2d c9 24 26 1a 9a 04 e5 23 54 25 49 25 40 57 5e 59 d0 21 4f 35 64 65 25 4e a4 a9 e6 9a 6a 86 49 08 9b 70 a6 b9 25 23 ba fd 08 66 26 49 e4 a9 e7 9e 7b ce 59 11 9f 80 ea f9 4b 8f bb e1 19 e8 a1 88 06 ea 27 27 4e 24 ea 68 a2 bf fc a8 db 9d 97 24 d1 e8 a5 98 66 aa e9 a6 99 a2 c3 Data Ascii: qEl#Wg'x?N{US yMZ/'w~Y+}BW(,`@hZ%hDaixu#RMIZ\O4Au7>'R6&b+9y#bA-$&#T%I%@W^Y!O5de%NjIp%#f&I{YK''N$h$f
2024-04-25 22:42:12 UTC	1369	IN	Data Raw: ce 0b b2 bd d2 80 dc 71 b7 27 8b 7c 30 b9 23 bb 4c 30 cc 2f cb 8c 2f cd 33 db 4c 2f ce 37 eb fc 2e cf 3b 23 65 ec d0 28 b3 32 b4 b1 8c 25 ad f4 d2 94 04 02 00 21 f9 04 05 0a 00 01 00 2c 00 00 04 00 c1 00 43 00 00 07 ff 80 00 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 56 59 91 95 96 97 98 99 9a 9b 9c 59 56 9f 94 9d a2 a3 a4 a5 a6 90 9f a9 a1 a7 ac ad ae af 8e a9 b2 5a b0 b5 b6 b7 a4 5a b2 bb 93 b8 be bf c0 8a bc 9e bb ab c1 c7 c8 af bc bd c4 c5 c9 cf d0 9d ba ce 94 94 d3 d4 d1 d9 da 8b cb cc 5a df b4 cd c3 c6 db e5 cf d7 bb b4 9f 55 58 ed ee ea dd e4 e6 f3 be dd b4 ba ed 56 e0 eb ec f0 d8 f4 00 6f 8d f3 c4 ce 5b 35 82 55 98 c9 92 17 b0 21 ab 85 d5 0a 1e 9c 18 31 21 25 88 0e 33 b6 c2 b8 8e a2 47 82 17 55 69 1c 69 ea 5a c5 8f 1e f1 65 31 49 b2 a5 28 96 Data Ascii: q'\|0#L0//3L/7.;#e(2%!,CVYYVZZZUXVo[5U!1!%3GUiiZe1I(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49742	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	392	OUT	GET /23d80j2d/qwd13d8jqd/-f8xo380.png HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:13 UTC	682	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:12 GMT Content-Type: image/png Content-Length: 35689 Connection: close Last-Modified: Wed, 10 Apr 2024 00:40:08 GMT ETag: "6615dfe8-8b69" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6024 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xLEARyUcE50ahLvWuS695%2F2XSyafqa8cADMbrgfBtloilkSegwnWcKXAd1lsMVZ6wxNp4iKlJNOIHRAzUFL92zeNk%2BplrZiIxd2qU49AQxfl8ZuD8B1pBtlgz4L2XfYCAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84f2c902876-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:13 UTC	687	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 ec 08 06 00 00 00 90 6d 7b 43 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec dd 79 9c a5 57 5d 27 fe cf 79 aa 7a 4d c8 86 62 00 51 09 b4 bd 94 81 61 c8 8c 23 f8 1b 65 60 1c 54 10 45 33 6e e0 32 48 d0 19 d9 43 57 07 46 29 19 43 ba 3b 89 01 c3 88 44 45 18 5c 46 a2 08 22 0a b2 33 2c b2 13 a0 bb 2a 84 24 40 80 10 20 7b 77 57 2f 55 cf f9 fd d1 09 59 c8 72 6b bd f7 3e f7 fd 7e bd 22 20 4d 55 dd cf bd 5d cf b9 9f fb 3d e7 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRm{CgAMAa cHRMz&u0`:pQ<bKGDIDATxyW]'yzMbQa#e`TE3n2HCWF)C;DE\F"3,*$@ {wW/UYrk>~" MU]=I
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: 00 58 bc 1d 9f 3e 31 75 dd 44 4a bb ad 69 cb 29 b5 a9 13 a9 d9 96 9a 07 a7 a6 a4 94 d4 dc 56 6d 30 00 26 de 53 32 7b f2 da 55 fa 6e f7 4f c9 fd 6b f2 e8 6f 95 5b 6d 92 b1 23 c9 e4 cc 0d 49 bd bc 94 b2 b7 4d bb 27 b5 ec 4d 19 db 93 9d 9b ae 4c 8a 4a 13 00 b8 03 05 16 00 70 ef ce bc e4 98 34 eb 27 52 da 87 37 25 0f ab c9 a9 a9 79 58 6a 4e 4c da a4 26 b5 54 93 54 2c 40 3d 21 c9 23 6b ad 8f 2c b7 16 9c 75 3e 99 bc f4 86 64 7a 6f 49 f6 b4 b5 ee 4d b2 27 ed da 4b 4c 6c 01 c0 68 53 60 01 00 77 f4 fc bd df 9b b1 3c 22 c9 a9 a5 94 87 25 79 78 92 87 24 6d 93 24 55 49 c5 8a aa 27 24 79 54 4d 1e 55 ca 2d c5 d6 d8 91 64 72 fa cb 49 fd 78 4d f9 44 da 7c 22 a5 7c 22 bb b7 7c 55 5e 00 30 1a 14 58 00 30 ca 5e 74 e9 03 33 57 4f 6b d2 9e 56 6b 39 2d 25 a7 25 f9 0e c1 30 80 Data Ascii: X>1uDJi)Vm0&S2{UnOko[m#IM'MLJp4'R7%yXjNL&TT,@=!#k,u>dzoIM'KLlhS`w<"%yx$m$UI'$yTMU-drIxMD\|"\|"\|U^0X0^t3WOkVk9-%%0
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: b5 39 58 7e a6 a4 fc 56 da fc 48 35 c0 00 0c a7 4d a5 e6 c5 49 f3 a2 4c ee 7d 4b 6d 72 51 d6 6d 7d 6b a6 4a 2b 1a 00 ba 44 81 05 c0 68 79 fe a5 df 91 b1 f9 df 2a b3 e5 bf 27 39 59 20 40 77 d6 f5 e5 49 a5 cd 93 32 3b 73 45 9d 9c 7e 65 0e b7 af ce 05 13 d7 89 06 80 8e 5c e8 00 60 04 ec d8 f3 d0 26 cd 33 6b 6d 7f 23 29 1b 05 02 74 d8 29 25 39 37 6b 9b df 2f 93 d3 ff d0 26 2f cb ae ad 1f 14 0b 00 c3 4c 81 05 40 b7 6d df f3 d8 52 9a e7 a6 e6 27 6a 52 04 02 8c 90 75 35 39 bd 24 a7 67 72 fa c3 b5 d6 ff 9d d9 35 af cf 85 9b 0e 89 06 80 61 a3 c0 02 a0 7b ce f8 d8 9a 9c b8 f1 17 4b 9a e7 26 f5 df 08 04 20 3f 58 4a f9 c1 6c 9c 3b af ee 98 7e 65 9a b9 57 e6 a5 a7 5e 23 16 00 86 85 02 0b 80 ee 78 e6 65 eb b2 f1 c8 cf 97 94 df 49 f2 d0 c4 c1 ec 00 77 72 bf 52 f3 e2 cc Data Ascii: 9X~VH5MIL}KmrQm}kJ+Dhy*'9Y @wI2;sE~e\`&3km#)t)%97k/&/L@mR'jRu59$gr5a{K& ?XJl;~eW^#xeIwrR
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: 08 05 16 00 47 4d 4e 9f 5a 26 67 3e 58 6a 5e 95 e4 38 81 00 30 d0 6a 9e 50 e6 da cf 64 72 fa e9 49 2d 02 01 e8 36 05 16 c0 a8 7b ee 55 1b 9a c9 e9 b3 4b f2 f1 24 ff 41 20 00 0c 91 13 4b 72 51 99 9c 7e 5f ce da b3 4d 1c 00 dd a5 c0 02 18 65 93 7b ff 63 59 bb ef 13 35 79 61 92 35 02 01 60 38 95 1f 2e 6d f3 a9 66 c7 f4 cb 73 e6 25 c7 c8 03 a0 7b 14 58 00 a3 68 c7 a7 4f 6c b6 4f bf aa a4 bc 27 c9 16 81 00 d0 01 6b 6a cd b3 ca d8 da 4f 67 72 fa bf 88 03 a0 5b 14 58 00 a3 66 c7 cc e9 a5 ae 99 a9 25 67 24 71 66 08 00 5d 73 4a 49 de da 4c 4e bf 3e 67 7e fe 7e e2 00 e8 06 05 16 c0 a8 38 73 e6 c1 65 72 fa ad a5 d6 d7 27 b1 a0 07 a0 d3 6a 72 7a 19 9b bb 34 93 33 cf ce 54 f5 be 07 60 c8 f9 45 0e d0 75 53 ef 1e cf e4 de ed 65 ac 7e 36 89 2d 15 00 8c 90 7a 42 49 7d 59 Data Ascii: GMNZ&g>Xj^80jPdrI-6{UK$A KrQ~_Me{cY5ya5`8.mfs%{XhOlO'kjOgr[Xf%g$qf]sJILN>g~~8ser'jrz43T`EuSe~6-zBI}Y
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: 7b 72 e6 25 c7 64 6c ed 33 4a e6 5e a0 b8 02 00 fa a4 49 cd 13 4a a9 3f 99 c9 e9 7f ac 4d 7b 76 ce 99 f8 b0 58 80 51 a2 c0 02 b8 2b 53 7b 8e cd ec d8 d3 4a ea 64 92 fb 0b 04 00 18 00 25 c9 13 4b db 3c 31 db a7 3f 50 4b 76 65 d7 d6 37 8b 05 18 05 0a 2c 80 db 9b ba ec b8 1c 3c f2 5b 65 b6 6c 4f aa 33 ae 00 80 c1 54 f2 e8 92 fc 43 26 a7 3f 5e 53 ff 30 57 6c fd cb 5c 5c e6 05 03 74 95 02 0b 20 49 9e 7f e9 77 64 4d fb db 65 76 fe d9 49 39 41 20 00 c0 90 78 64 49 79 6d 4e 99 fe dd 3a 39 73 61 0e 1f 73 51 2e 78 d0 ac 58 80 ae 51 60 01 a3 ed cc 99 07 37 e3 f5 39 b5 b6 4f 4b cd 31 49 95 09 00 30 84 ca 43 4a ea cb b2 76 df 0b eb 8e e9 57 e6 50 fb 87 b9 60 e2 3a b9 00 5d a1 c0 02 46 d3 8e 3d 8f 68 32 f6 dc 5a eb 2f d6 ea 77 21 00 d0 19 f7 2b 35 2f ce da e6 f9 65 c7 Data Ascii: {r%dl3J^IJ?M{vXQ+S{Jd%K<1?PKve7,<[elO3TC&?^S0Wl\\t IwdMevI9A xdIymN:9sasQ.xXQ`79OK1I0CJvWP`:]F=h2Z/w!+5/e
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: 1f ae c9 5b d2 b6 ff 94 73 27 3e 25 1e e8 26 05 16 8c b2 e7 ee 39 29 eb c6 1e db 24 4f ac b3 f5 a7 53 72 1f a7 59 01 00 30 44 c6 92 3c aa 24 8f 4a d3 9c 9d c9 e9 af 97 52 de d6 26 6f ce fa b1 b7 65 6a d3 4d 22 82 6e 50 60 c1 28 99 aa 4d 0e 7c ee b4 94 f6 f1 a5 e6 f1 29 f9 f7 a9 75 4c 69 05 00 40 47 dc ef 5b 77 34 9c 9d 3b 94 c9 e9 f7 d6 5a de 92 3a f6 96 9c bb e9 72 f1 c0 f0 52 60 41 d7 9d 75 d9 77 a6 ce ff 68 d3 d6 c7 d5 d9 99 27 a6 e4 fe 49 9c 67 05 00 40 d7 ad 4b f2 63 a5 d4 1f 4b 99 7b 79 26 a7 af 28 35 ef 68 9b f2 8e e4 f0 3b b2 f3 61 d7 8b 08 86 87 02 0b ba 66 ea ca f5 39 70 e8 87 9a e4 bf d4 92 ff 92 76 ee e1 49 8a f3 ac 00 00 18 71 a7 d4 92 33 4a ad 67 24 6b e6 32 39 fd 91 5a f2 f6 d4 fc 4b 36 7c ed 23 99 7a cc 9c 88 60 70 29 b0 60 d8 3d f3 b2 75 Data Ascii: [s'>%&9)$OSrY0D<$JR&oejM"nP`(M\|)uLi@G[w4;Z:rR`Auwh'Ig@KcK{y&(5h;af9pvIq3Jg$k29ZK6\|#z`p)`=u
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: 9a e6 7b 93 7c 5f ad ed 83 53 9b ef cd 6c 7d 60 9a b9 3b 4e 51 95 6f fd 1f 00 00 00 06 db b1 49 1e 9e d4 87 d7 24 e5 f6 6f e5 4a 4d 26 a7 af 4d 8e 96 5a 25 f9 42 9b fa 85 b4 e5 8b 69 f2 c5 1c 6e bf 92 0b 26 ae 13 21 0b a1 c0 62 e1 a6 6a 93 c3 d3 df 95 b9 b1 07 25 ed 77 a7 94 07 35 b5 3e 28 25 0f ac 35 0f 4a c9 f7 66 36 0f 48 33 d7 24 4d 92 a4 d6 5b 27 4b 8b 29 53 00 00 80 ee bb ef 2d ff 9c 76 74 5f 4d b9 f5 ed 61 b2 b6 49 26 a7 0f 24 f9 52 92 2f 97 92 af a4 e6 8b 6d f2 e5 34 f5 2b 29 f9 52 0e 1c fa 72 5e f6 88 1b c4 c8 ad 14 58 dc d1 d4 9e b5 39 b0 f6 7e 19 3b fc c0 cc 97 fb 27 cd f7 34 69 bf 3b 29 df 5d 4b 7d 50 4a 79 50 66 67 1e 90 94 35 29 ed 2d ff a3 7a db 16 3f 03 54 00 00 00 dc bb 8d 39 7a 33 ae 2d b7 ce 3b 1c 3d 7f eb 96 37 95 eb d6 27 93 d3 fb 93 Data Ascii: {\|_Sl}`;NQoI$oJM&MZ%Bin&!bj%w5>(%5Jf6H3$M['K)S-vt_MaI&$R/m4+)Rr^X9~;'4i;)]K}PJyPfg5)-z?T9z3-;=7'
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: 00 00 00 dd d1 c5 02 cb 19 58 00 00 00 00 1d 62 0b 21 00 00 00 00 03 ac 74 f2 10 77 5b 08 01 00 00 00 3a a3 76 b1 c0 aa b6 10 02 00 00 00 74 46 2d b6 10 02 00 00 00 30 c0 4a ed 60 81 55 6c 21 04 00 00 00 e8 10 13 58 00 00 00 00 0c b4 2e 9e 81 d5 9a c0 02 00 00 00 e8 0e 77 21 04 00 00 00 60 a0 d9 42 08 00 00 00 c0 40 eb 60 81 d5 16 13 58 00 00 00 00 dd 61 0b 21 00 00 00 00 03 cd 16 42 00 00 00 00 06 9a 2d 84 00 00 00 00 0c 34 13 58 00 00 00 00 0c 34 67 60 01 00 00 00 30 d0 3a 58 60 55 05 16 00 00 00 40 77 14 5b 08 01 00 00 00 18 5d fd 29 b0 4a 6b 02 0b 00 00 00 a0 33 aa 2d 84 00 00 00 00 0c 34 5b 08 01 00 00 00 18 68 1d 2c b0 4a 31 81 05 00 00 00 d0 1d b6 10 02 00 00 00 30 d0 6c 21 04 00 00 00 60 a0 75 71 02 cb 16 42 00 00 00 80 0e 31 81 05 00 00 00 c0 40 Data Ascii: Xb!tw[:vtF-0J`Ul!X.w!`B@`Xa!B-4X4g`0:X`U@w[])Jk3-4[h,J10l!`uqB1@
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: 04 56 5a 13 58 00 00 00 00 5d 52 3b 37 81 e5 10 77 00 00 00 80 4e 29 b1 85 10 00 00 00 80 01 56 bb 77 17 42 13 58 00 00 00 00 5d 52 dc 85 10 00 00 00 80 41 56 dd 85 10 00 00 00 80 41 d6 74 6d 02 ab 9a c0 02 00 00 00 e8 94 b6 6b 13 58 c5 5d 08 01 00 00 00 3a a5 71 17 42 00 00 00 00 06 59 db b5 bb 10 ae e0 6d 15 01 00 00 00 e8 16 13 58 00 00 00 00 2c 5d e7 b6 10 3a 03 0b 00 00 00 a0 5b 6a 71 17 42 00 00 00 00 06 58 71 88 3b 00 00 00 00 83 ac c6 04 16 00 00 00 00 03 ac 74 6d 0b 61 51 60 01 00 00 00 74 4a b5 85 10 00 00 00 80 41 56 db ae 6d 21 74 17 42 00 00 00 80 4e e9 dc 21 ee a5 55 60 01 00 00 00 74 49 2d b6 10 02 00 00 00 30 c0 3a 37 81 15 5b 08 01 00 00 00 3a c5 04 16 00 00 00 00 03 ad 6b 13 58 35 31 81 05 00 00 00 d0 25 9d bb 0b a1 02 0b 00 00 00 a0 5b Data Ascii: VZX]R;7wN)VwBX]RAVAtmkX]:qBYmX,]:[jqBXq;tmaQ`tJAVm!tBN!U`tI-0:7[:kX51%[
2024-04-25 22:42:13 UTC	1369	IN	Data Raw: 96 bb 10 02 00 00 00 74 4b e9 58 81 55 6d 21 04 00 00 00 e8 98 8e 15 58 45 81 05 00 00 00 d0 2d 9d bb 0b 61 b5 85 10 00 00 00 a0 53 ba 76 06 56 69 4c 60 01 00 00 00 74 4a d7 0a ac ea 2e 84 00 00 00 00 dd d2 74 ed 2e 84 b1 85 10 00 00 00 a0 53 6a e7 0a 2c 13 58 00 00 00 00 dd d2 b5 02 cb 16 42 00 00 00 80 4e a9 9d 3b 03 ab b1 85 10 00 00 00 a0 4b 9a 32 bf 62 5f ba 2f 0f a8 98 c0 02 00 00 00 e8 94 ee 4d 60 39 03 0b 00 00 00 a0 5b 3a 77 17 c2 6a 0b 21 00 00 00 40 a7 74 6d 02 ab 98 c0 02 00 00 00 e8 96 ce 15 58 8d 02 0b 00 00 00 a0 53 6c 21 04 00 00 00 60 90 95 da b1 bb 10 3a c4 1d 00 00 00 a0 63 9c 81 05 00 00 00 c0 20 ab 5d db 42 58 8b 2d 84 00 00 00 00 9d 52 3b 77 06 96 09 2c 00 00 00 80 4e e9 5c 81 65 0b 21 00 00 00 40 b7 8c 75 ae c0 b2 85 10 00 00 00 a0 Data Ascii: tKXUm!XE-aSvViL`tJ.t.Sj,XBN;K2b_/M`9[:wj!@tmXSl!`:c ]BX-R;w,N\e!@u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49744	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	718	OUT	GET /23d80j2d/qwd13d8jqd/18huodt4.html HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:13 UTC	607	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 10 Apr 2024 14:50:11 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JixjVLeB7GBESWZmNRXs6Rlu4fr8BdJR6GhitatJdxZXQM%2BQ5HIqY1D6XYrSxlf9HspMYgQcwvdBxO8pCsaH5O88Pv08lY%2Fen%2Fq3823L3v1W2XC0dAGLdxrEN4qdIObBWQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d84f7f8ed9bd-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:13 UTC	328	IN	Data Raw: 31 34 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 6e 74 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 68 31 3e 3c 70 3e 3c 75 6c 3e 3c 6c 69 3e 48 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 20 34 30 34 3c 2f 6c 69 3e 3c 6c 69 3e 45 72 72 6f 72 43 6f 64 65 3a 20 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 6c 69 3e 3c 6c 69 3e 52 65 71 75 65 73 74 49 64 20 3a 20 33 36 36 37 36 61 33 63 2d 63 30 31 65 2d 30 30 30 30 2d 30 35 35 36 2d 38 62 32 62 31 63 30 30 30 30 30 30 3c 2f 6c 69 3e 3c Data Ascii: 141<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 36676a3c-c01e-0000-0556-8b2b1c000000</li><
2024-04-25 22:42:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49745	23.202.106.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:12 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 22:42:13 UTC	487	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (dce/26AC) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=116565 Date: Thu, 25 Apr 2024 22:42:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 22:42:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49743	35.190.80.1	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:13 UTC	539	OUT	OPTIONS /report/v4?s=Jieqe7AOl3WyUmXORY3JKQeKZwCdIFHsbPwbnigLLGMYdRZWgau54THTZBIEG%2B%2BrkAe8mVjKVJm5dHkSRgXXJ5La8hHZbh%2FXxfG9gmgsz3air4QDMftVXt%2Bj48ZsysKYkg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://markssmith.icu Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:13 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 25 Apr 2024 22:42:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49749	104.21.12.42	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:13 UTC	718	OUT	GET /23d80j2d/qwd13d8jqd/groie0t3.html HTTP/1.1 Host: markssmith.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:14 UTC	605	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 10 Apr 2024 14:50:11 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZcWKNcwDuU31QKhyanQkJRiTACFJHq3YIu61LYCU%2B2bMITwxh00tx3TQMiq0pAmRkSlwadKwCih2Ak6spJMrJeM3aErG7NHLG1OjpqLa%2BNhOdqx4itiUUUz8DvuvTVVJhg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d855493fd9f9-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:14 UTC	328	IN	Data Raw: 31 34 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 6e 74 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 68 31 3e 3c 70 3e 3c 75 6c 3e 3c 6c 69 3e 48 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 20 34 30 34 3c 2f 6c 69 3e 3c 6c 69 3e 45 72 72 6f 72 43 6f 64 65 3a 20 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 6c 69 3e 3c 6c 69 3e 52 65 71 75 65 73 74 49 64 20 3a 20 31 31 63 36 35 65 34 39 2d 61 30 31 65 2d 30 30 36 34 2d 36 34 35 36 2d 38 62 64 61 38 34 30 30 30 30 30 30 3c 2f 6c 69 3e 3c Data Ascii: 141<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 11c65e49-a01e-0064-6456-8bda84000000</li><
2024-04-25 22:42:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49748	35.190.80.1	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:13 UTC	482	OUT	POST /report/v4?s=Jieqe7AOl3WyUmXORY3JKQeKZwCdIFHsbPwbnigLLGMYdRZWgau54THTZBIEG%2B%2BrkAe8mVjKVJm5dHkSRgXXJ5La8hHZbh%2FXxfG9gmgsz3air4QDMftVXt%2Bj48ZsysKYkg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 497 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:42:13 UTC	497	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 31 34 2c 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 72 6b 73 73 6d 69 74 68 2e 69 63 75 2f 32 33 64 38 30 6a 32 64 2f 71 77 64 31 33 64 38 6a 71 64 2f 69 6e 64 65 78 2e 68 74 6d 6c 3f 31 33 38 31 33 65 38 3d 30 31 30 31 25 32 30 34 38 30 37 36 25 32 30 34 34 31 33 39 26 31 33 38 31 33 65 38 3d 68 74 74 70 73 3a 2f 2f 70 6c 61 79 67 61 6d 65 73 35 2e 6e 65 74 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 Data Ascii: [{"age":1,"body":{"elapsed_time":814,"method":"POST","phase":"application","protocol":"http/1.1","referrer":"https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net","sampling_fraction":1.0,"server
2024-04-25 22:42:14 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 25 Apr 2024 22:42:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49750	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:14 UTC	393	OUT	GET /23d80j2d/qwd13d8jqd/18huodt4.html HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:15 UTC	603	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 10 Apr 2024 14:50:11 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IaTMgnfat8rxhtTnXYhr17eoPmjNtyxZOJniC9uEQoz5aH8%2F9AsoXUmK1Lh9JFdQTKtYGqVQ2G0TZcpLjG9Y9G5MUhmpZYojcZAnX21blqAjsCEpicC1lziFXESm9Mdepg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d85a8e3a875b-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:15 UTC	328	IN	Data Raw: 31 34 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 6e 74 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 68 31 3e 3c 70 3e 3c 75 6c 3e 3c 6c 69 3e 48 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 20 34 30 34 3c 2f 6c 69 3e 3c 6c 69 3e 45 72 72 6f 72 43 6f 64 65 3a 20 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 6c 69 3e 3c 6c 69 3e 52 65 71 75 65 73 74 49 64 20 3a 20 33 36 36 37 36 61 33 63 2d 63 30 31 65 2d 30 30 30 30 2d 30 35 35 36 2d 38 62 32 62 31 63 30 30 30 30 30 30 3c 2f 6c 69 3e 3c Data Ascii: 141<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 36676a3c-c01e-0000-0556-8b2b1c000000</li><
2024-04-25 22:42:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49751	172.67.131.238	443	1892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:17 UTC	393	OUT	GET /23d80j2d/qwd13d8jqd/groie0t3.html HTTP/1.1 Host: markssmith.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2024-04-25 22:42:18 UTC	611	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:42:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 10 Apr 2024 14:50:11 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RjzRAUfIdisc9TRXBLYNc%2FdtgeRJE0ULIJmKn6nH5Roj%2BcUg2anhkAj9p%2BTtng60z9KDqXiIEftmWzHzOzNfi1xwfV8QEVPcD%2BQtYdplr%2FZDBwkL9PMjlVPU14L7T7XReg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a1d86edd3f7bf9-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:42:18 UTC	328	IN	Data Raw: 31 34 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 6e 74 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 68 31 3e 3c 70 3e 3c 75 6c 3e 3c 6c 69 3e 48 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 20 34 30 34 3c 2f 6c 69 3e 3c 6c 69 3e 45 72 72 6f 72 43 6f 64 65 3a 20 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 6c 69 3e 3c 6c 69 3e 52 65 71 75 65 73 74 49 64 20 3a 20 31 31 63 36 35 65 34 39 2d 61 30 31 65 2d 30 30 36 34 2d 36 34 35 36 2d 38 62 64 61 38 34 30 30 30 30 30 30 3c 2f 6c 69 3e 3c Data Ascii: 141<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 11c65e49-a01e-0064-6456-8bda84000000</li><
2024-04-25 22:42:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49759	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:42:27 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714084913084&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-25 22:42:27 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-25 22:42:27 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-25 22:42:27 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 18198E99C4C64D4CA5D44E9FB13BC611 Ref B: LAX311000114023 Ref C: 2024-04-25T22:42:27Z Date: Thu, 25 Apr 2024 22:42:27 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714084947.d8f1435

Target ID:	0
Start time:	00:42:00
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:42:04
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2208,i,7849276847717892768,10542576573403256842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:42:06
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/k58t941e.css HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/16ngwy11.css HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/cvmt8hve.css HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/zqvabm8j.js HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/r3v1h_up.js HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://markssmith.icusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/wwrdx--k.png HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/wwrdx--k-2.png HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/rwzcxxa4.png HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/m-8l5t4x.png HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/sh9337d_.png HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/_iagq4xt.js HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/rg-aa02k.js HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/lmq9m72q.png HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/wwrdx--k-2.png HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/-f8xo380.png HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/nfkp-cl0.gif HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/t2z5gydm.mp3 HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=fullRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/xtbs383q.mp3 HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=fullRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /get/script.js?referrer=https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net HTTP/1.1Host: userstatics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://markssmith.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/wwrdx--k.png HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/rwzcxxa4.png HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/sh9337d_.png HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/m-8l5t4x.png HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/lmq9m72q.png HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/nfkp-cl0.gif HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/-f8xo380.png HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/18huodt4.html HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/groie0t3.html HTTP/1.1Host: markssmith.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/18huodt4.html HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /23d80j2d/qwd13d8jqd/groie0t3.html HTTP/1.1Host: markssmith.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Windows Analysis Report
https://markssmith.icu/23d80j2d/qwd13d8jqd/index.html?13813e8=0101%2048076%2044139&13813e8=https://playgames5.net