Edit tour

Windows Analysis Report
https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638

Overview

General Information

Sample URL:	https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638
Analysis ID:	1433169
Infos:

Errors URL not reachable

Detection

Phisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Yara detected Phisher

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2028,i,14383046284550637843,4217427290722038496,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_78	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security
dropped/chromecache_99	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714379378992&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 29 Apr 2024 08:30:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeexpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatepragma: no-cachevary: Accept-Encoding,User-Agent,User-Agentx-frame-options: SAMEORIGINx-xss-protection: 1; mode=blockx-content-type-options: nosniffalt-svc: h3=":443"; ma=86400CF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=15OAtRSx2uUpKe%2FI9pn1N1P9rHSgxQpfacJRR11z8qM7QIB8FKfTCeCDuBzyUdJjPIPvU5cwz6nWyOy9z1MsBct7hjkf%2F8pOTPy8VzUoNAXhSPiF%2BXvEnT8a8V04yWGF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 87bdedd0a94d61c4-ORD

Source: chromecache_99.2.dr	String found in binary or memory: http://185.66.88.174#
Source: chromecache_90.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_90.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_79.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Raleway:100
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCAIT5lu.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCIIT5lu.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCMIT5lu.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCkIT5lu.woff2)
Source: chromecache_98.2.dr, chromecache_74.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_98.2.dr, chromecache_74.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_98.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_78.2.dr	String found in binary or memory: https://persistdrum.cfd/?s1=351082&s2=1175653013&s3=6702&s4=ISP&ow=&s10=3079
Source: chromecache_77.2.dr	String found in binary or memory: https://trk-adulvion.com/scripts/push/v9e118mez8
Source: chromecache_82.2.dr	String found in binary or memory: https://unisonroad.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: classification engine

Classification label: mal72.phis.win@22/62@22/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2028,i,14383046284550637843,4217427290722038496,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2028,i,14383046284550637843,4217427290722038496,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638	0%	Avira URL Cloud	safe
https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638	0%	Virustotal		Browse
https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
https://trk-amropode.com//scripts/pg/v9e118mez8	0%	URL Reputation	safe
https://trk-amropode.com//scripts/sw/v9e118mez8	0%	URL Reputation	safe
https://trk-adulvion.com/scripts/push/v9e118mez8	0%	URL Reputation	safe
https://ossiaband.cfd/assets/js/intl_functions.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b	0%	Avira URL Cloud	safe
https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370	0%	Avira URL Cloud	safe
https://ossiaband.cfd/assets/js/isp/common.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b	0%	Avira URL Cloud	safe
http://185.66.88.174/assets/css/lightbox.css	0%	Avira URL Cloud	safe
https://ossiaband.cfd/assets/js/gbvar.js?v=83	0%	Avira URL Cloud	safe
https://persistdrum.cfd/?s1=351082&s2=1175653013&s3=6702&s4=ISP&ow=&s10=3079	0%	Avira URL Cloud	safe
https://jantyport.com/0/2/50714/cbaa88a6638a953f4ff32304e1559c27/ltm_265/298587_1/201_26638_3571761_5431315_smd	0%	Avira URL Cloud	safe
https://ossiaband.cfd/assets/js/vendor/jquery-3.4.1.min.js	0%	Avira URL Cloud	safe
http://185.66.88.174/	0%	Avira URL Cloud	safe
https://ossiaband.cfd/service-worker.js	0%	Avira URL Cloud	safe
http://185.66.88.174/	1%	Virustotal		Browse
https://ossiaband.cfd/fim/3079-US/0d24812bb25030e5022cb4746e2d1585.jpg	0%	Avira URL Cloud	safe
https://ossiaband.cfd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	0%	Avira URL Cloud	safe
https://ossiaband.cfd/	0%	Avira URL Cloud	safe
https://ossiaband.cfd/assets/js/vendor/bootstrap/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://ossiaband.cfd/fim/3079-US/c55e29793b062a2aa768004df29f785f.jpg	0%	Avira URL Cloud	safe
http://185.66.88.174#	0%	Avira URL Cloud	safe
http://185.66.88.174/assets/images/slide-02.jpg	0%	Avira URL Cloud	safe
https://ossiaband.cfd/inc/msg.v3.js?662f5a9494fa7	0%	Avira URL Cloud	safe
https://ossiaband.cfd/fim/3079-US/1ded2ac178f6ef5710b31241b6caed70.jpg	0%	Avira URL Cloud	safe
https://ossiaband.cfd/	0%	Virustotal		Browse
http://185.66.88.174/assets/css/owl-carousel.css	0%	Avira URL Cloud	safe
https://ossiaband.cfd/assets/js/vendor/bootstrap/css/bootstrap.min.css	0%	Avira URL Cloud	safe
http://185.66.88.174#	1%	Virustotal		Browse
https://ossiaband.cfd/assets/vendors/fontawesome/webfonts/fa-solid-900.woff2	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
http://185.66.88.174/cl/298587_smd/265/3571761/3180/201/26638	0%	Avira URL Cloud	safe
https://ossiaband.cfd/fim/3079-US/735a271b96cf0cd241ae210c5fe7da15.jpg	0%	Avira URL Cloud	safe
http://185.66.88.174/assets/images/slide-03.jpg	0%	Avira URL Cloud	safe
http://185.66.88.174/assets/images/slide-01.jpg	0%	Avira URL Cloud	safe
https://ossiaband.cfd/assets/vendors/fontawesome/css/all.css	0%	Avira URL Cloud	safe
https://ossiaband.cfd/assets/css/isp/common.css?v=6f0cfeb1af067fdd48b2b1e03bf20e6b	0%	Avira URL Cloud	safe
http://185.66.88.174/assets/css/templatemo-breezed.css	0%	Avira URL Cloud	safe
http://185.66.88.174/assets/css/font-awesome.css	0%	Avira URL Cloud	safe
https://unisonroad.com	100%	Avira URL Cloud	phishing
https://ossiaband.cfd/fim/3079-US/4853eea1522e7e5501574b30947d9d88.ico	0%	Avira URL Cloud	safe
https://ossiaband.cfd/uploads/archive/company/175/images/onlinesurvey-color.png	0%	Avira URL Cloud	safe
https://ossiaband.cfd/assets/js/functions.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b	0%	Avira URL Cloud	safe
http://185.66.88.174/assets/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://unisonroad.com	10%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
persistdrum.cfd	172.67.219.132	true	false	unknown
storage.bhs.cloud.ovh.net	142.44.227.102	true	false	high
trk-amropode.com	172.67.205.30	true	false	unknown
www.google.com	142.250.191.164	true	false	high
trk-adulvion.com	172.67.177.226	true	false	unknown
event.trk-adulvion.com	104.21.80.104	true	false	unknown
ossiaband.cfd	104.21.95.127	true	false	unknown
jantyport.com	193.163.199.51	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
sdfsd.s3.bhs.cloud.ovh.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/js/intl_functions.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b	false	Avira URL Cloud: safe	unknown
https://trk-amropode.com//scripts/pg/v9e118mez8	false	URL Reputation: safe	unknown
http://185.66.88.174/assets/css/lightbox.css	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/js/gbvar.js?v=83	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/js/isp/common.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b	false	Avira URL Cloud: safe	unknown
https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh	false		high
https://jantyport.com/0/2/50714/cbaa88a6638a953f4ff32304e1559c27/ltm_265/298587_1/201_26638_3571761_5431315_smd	false	Avira URL Cloud: safe	unknown
https://persistdrum.cfd/?s1=351082&s2=1175653013&s3=6702&s4=ISP&ow=&s10=3079	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/js/vendor/jquery-3.4.1.min.js	false	Avira URL Cloud: safe	unknown
http://185.66.88.174/	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ossiaband.cfd/service-worker.js	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/fim/3079-US/0d24812bb25030e5022cb4746e2d1585.jpg	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/fim/3079-US/c55e29793b062a2aa768004df29f785f.jpg	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ossiaband.cfd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/js/vendor/bootstrap/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
http://185.66.88.174/assets/images/slide-02.jpg	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/inc/msg.v3.js?662f5a9494fa7	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/fim/3079-US/1ded2ac178f6ef5710b31241b6caed70.jpg	false	Avira URL Cloud: safe	unknown
http://185.66.88.174/assets/css/owl-carousel.css	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/js/vendor/bootstrap/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/vendors/fontawesome/webfonts/fa-solid-900.woff2	false	Avira URL Cloud: safe	unknown
http://185.66.88.174/cl/298587_smd/265/3571761/3180/201/26638	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/fim/3079-US/735a271b96cf0cd241ae210c5fe7da15.jpg	false	Avira URL Cloud: safe	unknown
http://185.66.88.174/assets/images/slide-03.jpg	false	Avira URL Cloud: safe	unknown
http://185.66.88.174/assets/images/slide-01.jpg	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/vendors/fontawesome/css/all.css	false	Avira URL Cloud: safe	unknown
https://trk-amropode.com//scripts/sw/v9e118mez8	false	URL Reputation: safe	unknown
https://ossiaband.cfd/assets/css/isp/common.css?v=6f0cfeb1af067fdd48b2b1e03bf20e6b	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=15OAtRSx2uUpKe%2FI9pn1N1P9rHSgxQpfacJRR11z8qM7QIB8FKfTCeCDuBzyUdJjPIPvU5cwz6nWyOy9z1MsBct7hjkf%2F8pOTPy8VzUoNAXhSPiF%2BXvEnT8a8V04yWGF	false		high
http://185.66.88.174/assets/css/templatemo-breezed.css	false	Avira URL Cloud: safe	unknown
http://185.66.88.174/assets/css/font-awesome.css	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/fim/3079-US/4853eea1522e7e5501574b30947d9d88.ico	false	Avira URL Cloud: safe	unknown
https://trk-adulvion.com/scripts/push/v9e118mez8	false	URL Reputation: safe	unknown
https://ossiaband.cfd/uploads/archive/company/175/images/onlinesurvey-color.png	false	Avira URL Cloud: safe	unknown
https://ossiaband.cfd/assets/js/functions.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b	false	Avira URL Cloud: safe	unknown
http://185.66.88.174/assets/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fontawesome.com/license/free	chromecache_90.2.dr	false		high
http://185.66.88.174#	chromecache_99.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_90.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_98.2.dr	false		high
https://getbootstrap.com)	chromecache_98.2.dr, chromecache_74.2.dr	false	Avira URL Cloud: safe	low
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_98.2.dr, chromecache_74.2.dr	false		high
https://unisonroad.com	chromecache_82.2.dr	false	10%, Virustotal, Browse Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.44.227.102	storage.bhs.cloud.ovh.net	Canada	16276	OVHFR	false
172.67.205.30	trk-amropode.com	United States	13335	CLOUDFLARENETUS	false
172.67.219.132	persistdrum.cfd	United States	13335	CLOUDFLARENETUS	false
193.163.199.51	jantyport.com	Denmark	1935	FR-RENATER-LIMOUSINReseauRegionalLimousinEU	false
185.66.88.174	unknown	Ukraine	207451	AGROSVITUA	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.177.226	trk-adulvion.com	United States	13335	CLOUDFLARENETUS	false
142.250.191.164	www.google.com	United States	15169	GOOGLEUS	false
104.21.95.127	ossiaband.cfd	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1433169
Start date and time:	2024-04-29 10:29:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@22/62@22/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.190.67, 172.217.1.110, 142.251.178.84, 34.104.35.123, 172.217.2.42, 23.203.40.158, 142.250.190.131, 40.127.169.103, 199.232.214.172, 23.35.68.210, 23.35.68.152, 192.229.211.108, 20.242.39.171, 142.250.190.40, 142.250.191.174
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, prod.fs.microsoft.com.akadns.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Apr 29 07:29:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9788192234167963
Encrypted:	false
SSDEEP:	48:88duTKuGHDidAKZdA19ehwiZUklqehwy+3:81HaLy
MD5:	7074CA326E8F68F3C7161AFF19E97F1F
SHA1:	18C5924221A71C17E9286EF925ECF533B1DE69CD
SHA-256:	39176DA58A712FD45174DDDEB62B7D9FDC41AB06A40ECAB00A066500A937C4F3
SHA-512:	3DE649E05A50D9CF36A1149EED3B03CC047A6CADC66F5562322A8779022F9FC3BB94266663571877F432C38B7572D168F57CF6567FA010143A3879C2CEB96F83
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....O.k....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.C....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.C....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.C....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.C..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.C...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............:.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Apr 29 07:29:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9908527556411926
Encrypted:	false
SSDEEP:	48:83duTKuGHDidAKZdA1weh/iZUkAQkqeh7y+2:8AHw9QSy
MD5:	6139086CAC479062B5934CC0598B2C7B
SHA1:	15CCF9231561BF08CD3F70BA4D1B0EC3338C6233
SHA-256:	6E5D4AF9C7C8508D64CCA7668E9A6CBE4090FCD9CC50E2182D8DC68048717342
SHA-512:	0EE5A30CF0FC0E2B0E6C3D6BADE76C2C020C0781557841048AC727BC7F7B0A2807193C870AA27F2627D0DE7C52093ACE51A772F8D49610C2C88F61B860E3EFCA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....n.k....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.C....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.C....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.C....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.C..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.C...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............:.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003932010877797
Encrypted:	false
SSDEEP:	48:8xfduTKusHDidAKZdA14tseh7sFiZUkmgqeh7sly+BX:8xIHmnXy
MD5:	3BA48C44CBDE2B1836BEC34FD0F9DB70
SHA1:	5EA8D5445A8D85F35188088924F66718A6DA7F66
SHA-256:	3BB43347D436FD4E24E04C6ABBDD11852C047B0AC72E6D6EF05BBF7A53C75B2B
SHA-512:	E0F179ACEC8C2D77C58539D54AB3E8B5253F38C125B61CAF42896B9CA13746D1D68184698F8803A28E26BA659C746E2A27825DA24CFEAC27FEF951CDDE5BD5C8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.C....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.C....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.C....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.C..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............:.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Apr 29 07:29:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9892097324773292
Encrypted:	false
SSDEEP:	48:8OduTKuGHDidAKZdA1vehDiZUkwqehPy+R:8/Hbdy
MD5:	3E5A93FEBBD057EDD536870065D914E8
SHA1:	B2E84BF07C9C7824AAEBBD3F082D10A8252D0029
SHA-256:	20530CBFC3145A2609F3416BB83630E0002C2E5DCAC78EAFA37A3CC8FF7A62FD
SHA-512:	4306172DB68228DE5E6CDB9215CD59AF0981DB00BC610EBB4C94D408B46D37B0F045B8464026FE30F9275479A97EBEE2710E36622913EB504A731441A9086A60
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....\.k....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.C....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.C....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.C....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.C..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.C...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............:.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Apr 29 07:29:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.98118472280184
Encrypted:	false
SSDEEP:	48:8FduTKuGHDidAKZdA1hehBiZUk1W1qehRy+C:8mH79xy
MD5:	EC561DD56AA19E993F70C5A556AD72AD
SHA1:	F76FFE4B111538208B6C465234E7D1F743075651
SHA-256:	AD19D38439CFD36D360FC95A10B48DF48B0697A0B3DA6C0E5882D7E57B935617
SHA-512:	F62063BD721B459791422E56B89771CBCC207D4B4C475138B6A2C82B47D61C3ADFC3B50790521FC7A15974BFA3EC77F2304E09C75B4F73D7D7662624828299F5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....~.k....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.C....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.C....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.C....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.C..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.C...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............:.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Apr 29 07:29:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.991417458329765
Encrypted:	false
SSDEEP:	48:8kduTKuGHDidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbXy+yT+:89HbT/TbxWOvTbXy7T
MD5:	8BAFFBA22EFA74ABE986963A4B61F076
SHA1:	7CA99687613C669ED8D8316E03D0F2439858CA8C
SHA-256:	F71C8093CB473A0A8A694BB3B03A6634B2D3174D73DD2425E503E782B2FF0EEF
SHA-512:	F346FF7F6718FCE86E1B7D749C30689B2820CFE73D5CC6A80F6F772B905B05D30FCD2BF7E21495C1DD2114A398FC368AAE202A52351F12B4B1C3A2C7D023659F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......sk....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.C....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.C....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.C....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.C..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.C...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............:.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 155764
Category:	downloaded
Size (bytes):	23243
Entropy (8bit):	7.984242408236174
Encrypted:	false
SSDEEP:	384:cxTLn7Mu2Io0bMwHY/PRwUh7WLtc97azDuG268sAMtSfIeqwt3Ds3/7:cJLnvwRwH8ZPCL6ODuFJ5vRqeq7
MD5:	22D170FC47C8CD6E3481146F9AA9689D
SHA1:	A0EC631C8629F8A4F12C6CEBCF373395C370077A
SHA-256:	BCDF21B735A59A5C9075AEEBA0369C10D4E1FF9A2B3926B9126F14A699192A75
SHA-512:	32F6DEBCB56F64A2C667C5C2942B254829131B76D5C6DA7AD51B50F33C856BE1B799634B5C05C6AD10BB6A1375D7465EBC534D647CBA0DC2D816F9ECF884E825
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/assets/css/bootstrap.min.css
Preview:	...........}k..6.....?...n;3[.wf..<0..`<.....>@.R>......T.....Sb.......w7...T0....#(2.........m.O..5.f..u2......z.W.>..Z..n..O.E.?./O.a...FA........'..?>\..,.....k..{.=m...o.Mr...p....._.. .p.?.....u.....:=.?........../.../..O...<....!Y}....v{?..N.aw^}3...v.....%e...d..y...e.M..'....%..x3.N...9.N;....I8a.OI...Y.v..sV....f....5.R.3.,....)bo.y4Z/.........vY......X...Q..O..$..e.c.=.........f...$ynPq8m.f.Qv:.v..1.Wf.4..c...r...@.:K./...t.......\|v)`.1^.g..4...]Z..p...x{f...xH..yt.Y...v5..Lp.......S...c..I..WV...S.;'....].....z....$..\......!...1;Di....e.'..._5..#o.ioz.z.9..y..p..?=....Na3kY}8.O...m..O..#{..#.=.Q..19..>+.6......Fy..o.u.E......?.....#.O...%..o..U..j.Z'.s.<... ?..e.>gl\.X...zL...VU......>....!S..d..pe.\\9.d...\|... xW....=.$.f.._..zb.e....e..i..C.....&............'Q..........)..gJ...C~I. a.~..e}....p..NL.......A6g.....(.?..K..{..oF.h:Z...D..U.l...h...+.p....5Z3.........y.?.....*....r....>35...+..W.{EBp...d[n....:M^.a.?..........3%...\|a.....

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1302 x 276, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	41556
Entropy (8bit):	7.914653851093548
Encrypted:	false
SSDEEP:	768:Y354N9p/kWuAtcBjune1BFglFgVv39dsB8jyxA3aDsec72Nb:lN9SBAtcBiwHjv39dG8cA3Msb2x
MD5:	2E83A25D5C3A76DF81898C86384AC584
SHA1:	F64B7460EAC72C1F9A54ED66E8A4BB1B0A029E5B
SHA-256:	6659B4426A9DBA95133C0E3B27B5D952D6CC1E574B88640A7E7BCEC354D902C1
SHA-512:	E1532C35DEC2CD7A82541642846D33CDD23E94EABD8FE766CF11EEE41E305C5CAA57C2DEE3EECB896F95F4F9737F901583F23382DFC6FBD9BDD0DCA052D314C9
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/uploads/archive/company/175/images/onlinesurvey-color.png
Preview:	.PNG........IHDR.............^\j.....pHYs..........o.d...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x800, components 3
Category:	downloaded
Size (bytes):	34209
Entropy (8bit):	7.264386603005865
Encrypted:	false
SSDEEP:	768:9aSnZkOdFH7vdlCZahNdH6BegoBBCiMGWUQalUQGUCXib9S:gmZDjH7vkOdHbgHB53H4S
MD5:	23860F0237FC817E9C5E175F0A184462
SHA1:	518ECEDFE18AA171586F02909D367EC9585BFB0E
SHA-256:	DCDD8D6E39E336CB7CD39AA9272F8978027AB096D8CE60104D28CA1AFD4108AB
SHA-512:	7579EF5A0D97520494CA521D45B4F5BC6916D65E9DC0E4CCCA4135DA2ADA818917061DA09C04C222DA76E260A8B44D5EB1CCB233A6C39B2441D54AB9F2545A2D
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/assets/images/slide-03.jpg
Preview:	......Exif..II*...............@........... ...........................................................................(...........1...........2...........i..........................'.......'..Adobe Photoshop CS5 Windows.2019:12:06 18:52:05...........0221....................@........... ...............................j...........r...(...................z...........t.......H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................P...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...Kj.j..Us.....p.C....BxI.v..N..(a..J..Hb...P.....S. .0...`'.R.5.a8.P......'......

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	41186
Entropy (8bit):	5.104736030355274
Encrypted:	false
SSDEEP:	768:prUQt39aafbqoLIYlHY/SYySnfyYrKHbJ1ONFQF8Fj2gwFRSR5WIxk:pgQt39aafbqoLIYlHY/SYySnfyYrKHbr
MD5:	6FA789426F8EB624D78683EE3B4F87EA
SHA1:	AC1C117CAC20BD08807E6538582361BF4A1EEE05
SHA-256:	920B8D8972275D746FD1BEE5B5F1B3C20A87728ACE3DBC2E90B2AE699C495F14
SHA-512:	0A54EF5D1403864F162EFC305FFD6378F24904D79C34312B6D0DC98D4D9537E9A9F1EDEB67FF6702B43443D005CC33CA09FA495BA732E5C989B5E567DE1E9AAA
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/css/isp/common.css?v=6f0cfeb1af067fdd48b2b1e03bf20e6b
Preview:	../* Chrome, Safari, Edge, Opera /.input::-webkit-outer-spin-button,.input::-webkit-inner-spin-button {..-webkit-appearance: none;..margin: 0;.}..follow_st{..font-size: 20px;. font-weight: 800;.}..qfinmob{..display: none;.}.:root {. touch-action: pan-x pan-y;. height: 100% .}./ Change the white to any color */.input:-webkit-autofill,.select:-webkit-autofill {..transition: background-color 5000s ease-in-out 0s;.}.#modal_email_popup #advEmailSub{..display: inline-block;..width: 180px;.}.#modal_email_popup .input_alone{..position: relative;.}.#modal_email .modal-dialog, #modal_email_popup .modal-dialog{..max-width: 800px;.}.#modal_email .modal-content, #modal_email_popup .modal-content{..border-radius: 15px;..margin-top: 200px;.}.#modal_email .input_alone, #modal_email_popup .input_alone{..width: 100%;.}.#modal_email .input_alone input, #modal_email_popup .input_alone input{..border-radius: 30px;..padding: 20px;..background-color: #F4F4F4;..border: none;.}.#modal_email .input_alone

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1302 x 276, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	41556
Entropy (8bit):	7.914653851093548
Encrypted:	false
SSDEEP:	768:Y354N9p/kWuAtcBjune1BFglFgVv39dsB8jyxA3aDsec72Nb:lN9SBAtcBiwHjv39dG8cA3Msb2x
MD5:	2E83A25D5C3A76DF81898C86384AC584
SHA1:	F64B7460EAC72C1F9A54ED66E8A4BB1B0A029E5B
SHA-256:	6659B4426A9DBA95133C0E3B27B5D952D6CC1E574B88640A7E7BCEC354D902C1
SHA-512:	E1532C35DEC2CD7A82541642846D33CDD23E94EABD8FE766CF11EEE41E305C5CAA57C2DEE3EECB896F95F4F9737F901583F23382DFC6FBD9BDD0DCA052D314C9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............^\j.....pHYs..........o.d...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7321)
Category:	downloaded
Size (bytes):	7322
Entropy (8bit):	5.227500119410646
Encrypted:	false
SSDEEP:	192:T9ZRIOUcWQOZBdK+eydsdof+4Wd/si4E+wC/Hhdk/yMJV4pHnX:T9ZWOUpQSduydsdorWdkit8BdLMY9X
MD5:	D7389F6C79E28FAF16D96B0D2346E056
SHA1:	1523089C9B42EB35F91354DC02D3F7A9488EF583
SHA-256:	23B333974694CD7A3512EBC085F87C3C7FD29D7F80361657036275D26D292C76
SHA-512:	0D3FD1F321037E9551E079C2D5C604FCD60910B6823EB42570D0FDBF2552E7607F7F09103C77DDCC9136C1ADFEDE077E12995861D498A46FE5652928FB693394
Malicious:	false
Reputation:	low
URL:	https://trk-adulvion.com/scripts/push/v9e118mez8
Preview:	'use strict';const smPushApplicationServerPublicKey="BJbujtKImkiLWjlWkMGYMo2_sM0al24KoS7U6TJ1U7sKJaxlIULz5s6p7tN6WbnLisCq_Si5hP7X0769TvPDFTQ=",smPushSiteId="v9e118mez8",smClientId="q2goykjdrv",serviceWorker="/service-worker.js";let smPushDomain="push.trk-adulvion.com",pushLogging=!0;const version=817;let smPushSubscriptionId,subscriptionDomain="subscription.trk-adulvion.com",eventDomain="event.trk-adulvion.com",sessionId="";const utmObj={mt:"",utm_source:"",utm_medium:"",utm_campaign:"",source_one:"",source_two:"",source_three:"",source_four:"",source_five:""},taboolaUrl="https://api.taboola.com/2.0/json/smpush-general/user.sync?app.type=web&app.apikey=dd83e155339c3c4626a1a3e8465b50db3024b412";function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/"),d=window.atob(c),e=new Uint8Array(d.length);for(let b=0;b<d.length;++b)e[b]=d.charCodeAt(b);return e}function pullUrlParams(a){let b=getUrlVars();a.timezone=new Intl.DateTimeFormat(

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/js/vendor/bootstrap/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x800, components 3
Category:	dropped
Size (bytes):	46372
Entropy (8bit):	7.535098287008139
Encrypted:	false
SSDEEP:	768:ZbSGktF89z/shxBy2v7UVmxu3SLxiwxzGgxN0L/D+5gcVXaXZQ:Bzkt0z/shiK7Uwxa+xiw9GqNE7WgcVXR
MD5:	9047B730C8F1BC337A6536AADA472778
SHA1:	55EE0A2DBB6950787663D49A5E8315903E0EF120
SHA-256:	C6936D295F5701BCB297D51761147B4B794F9E8488A2DDB9C4C45C832843148E
SHA-512:	2BADBD2C594D643F6CB4CA0CE02B3DBC638EB37D8A9A7FF5985458C507D2BEA713F1E5A4D5D479AE7E03D32CD360CB19B6C5E428079A92C5A76744C7B15BBE8D
Malicious:	false
Reputation:	low
Preview:	.....(Exif..II*...............@........... ...........................................................................(...........1...........2...........i..........................'.......'..Adobe Photoshop CS5 Windows.2019:12:06 21:23:13...........0221....................@........... ...............................j...........r...(...................z...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................P...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......8.o...Z.....x....fik....&R.f..go.9hx....N...q..A..S.s..ClCA<.Q......^.#..U

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16020
Entropy (8bit):	5.427716224673665
Encrypted:	false
SSDEEP:	384:tydcqIn4ltSfI30/ARKd2ZerEzwLstGJ2:tSBU4j
MD5:	D3D139E8320A0459A3F807DD048A3349
SHA1:	D4AB66B4D9762BADDDD29E720D5AAA72C84FBDFA
SHA-256:	3AE77622D65B9DE991986EDC988AD1915E92141FE60DD5B51135EC3ABC0DE79E
SHA-512:	AD46B627426EFD2F21296BB403D1A1BF59A03CED9525666A1AA13247AC07E9A890236C903B349FFF2C7FF35A2A310C578515F6E4B9242AF331E85C4F90A034E5
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Raleway:100,200,300,400,500,600,700,800,900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCAIT5lu.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCkIT5lu.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Raleway';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyCIIT5lu.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1622
Entropy (8bit):	4.798133134876905
Encrypted:	false
SSDEEP:	24:HzcmEmvFYFu73atK2/BrAKWfQIELFtFyuHgdXzDGsV1BTVRjEgsqO3KIDRWW2kx:HIm0Xp/BPoQPLFCdHGs5jNsqO1DwWrx
MD5:	FED66FB89ACBA82DD74138EBD750C23B
SHA1:	1266EAE7ABAFB19A2714D9FB00D05CC263ADD748
SHA-256:	72B629CD526729BD25E6091B21E3E3ED6E16E17FB549A700F029F0C5693B0F4F
SHA-512:	CE481698DA730D19035486BCB5C3A2C59E36ABC554F07F9ABC272FFA53376AF75BABA0F3DF54C8D46AC8AE4C596D6CEC20B716BD75E68C9368010F7E98A0C1D8
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/inc/msg.v3.js?662f5a9494fa7
Preview:	function pushCount(pshparams,pshpub,pshfingerprint){....var xhr = new XMLHttpRequest();..xhr.open('POST', '');..xhr.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');..xhr.onload = function() {...if (xhr.status === 200) {....var res = JSON.parse(xhr.responseText);....if (res.data === true) {.....console.log('push fired');....}else{.....console.log('params not found');....}...}..};..var pshparams = pshparams;..var pshpub = pshpub;..var data = '_type=ajax&_action=master-pushCount&s1=' + pshparams + '&s2=' + pshpub + '&fp=' + pshfingerprint;..xhr.send(data);.}....var MYCALL = MYCALL \|\| (function(){. var pshparams = {}; // private. return {. init : function(Args) {. . //console.log(Args[2]);. pshparams = Args[0];. pshpub = Args[1];. pshdomain = Args[2];. pshfingerprint = Args[3];. // some other initialising. },. send : function() {. var script = document.createElement("scrip

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	5.071138600360055
Encrypted:	false
SSDEEP:	3:gnkAqRAdu6/GY7voOkADYnvbrbVvSQTQW+iWBSVYqW4c9b:7AqJm7+mYnvLRTQn9SVYqW4c9b
MD5:	4075D4486994126764722A928005649E
SHA1:	4BFB5A16F864300D457C655E522A28816C276C08
SHA-256:	C0B0C5228980F9971909B3B1ABBD338CC038B71447770A51BA9D5E9B0DE01F5B
SHA-512:	1C8F302FAFBACF80A6E3B3B1CB73E9566FA59EC95ED01290A9742FA6E45A62CE99A7CEC8CCC7D94AAB081AAB6D8999D5DE93918D2DB3A9836AABCF727C5827F2
Malicious:	false
Reputation:	low
URL:	https://jantyport.com/0/2/50714/cbaa88a6638a953f4ff32304e1559c27/ltm_265/298587_1/201_26638_3571761_5431315_smd
Preview:	<script type="text/javascript">window.location.href="https://persistdrum.cfd/?s1=351082&s2=1175653013&s3=6702&s4=ISP&ow=&s10=3079"</script>

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	27902
Entropy (8bit):	3.5483017143882973
Encrypted:	false
SSDEEP:	192:dwZeent/UhugCMJ03uNab7u777w7H7F777kEiBRmJVF36o:w6hzJ+37u777w7H7F777kNo
MD5:	84C32257E4F31EE1BFEC96ECA163D1C8
SHA1:	7976B911D2E8A9BB4EA2F1C15DC03D616D21C08B
SHA-256:	DB041FEB90650C2531ED5D8F67BA55436B1DBBD7307E37BCFA3CE566D51DD191
SHA-512:	39CCFBA1464D527C99B93BD5C464FA01E2255BE3D6EDAA9CC84D39EF927BB05D326E994C94E5CF06F2F7FC59DFF35C5736806ABE00B4B066C4958D4AE8317903
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/
Preview:	<script>if(window.location.hash.length > 0) window.location.href = window.location.origin + '/' + window.location.hash.replace("#","");</script><!DOCTYPE html>..<html lang="en">.. <head>.. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.. <meta name="description" content="">.. <meta name="author" content="">.. <link href="https://fonts.googleapis.com/css?family=Raleway:100,200,300,400,500,600,700,800,900&display=swap" rel="stylesheet">.. <title>OFFERTO</title>.. <link rel="stylesheet" type="text/css" href="assets/css/bootstrap.min.css">.. <link rel="stylesheet" type="text/css" href="assets/css/font-awesome.css">.. <link rel="stylesheet" href="assets/css/templatemo-breezed.css">.. <link rel="stylesheet" href="assets/css/owl-carousel.css">.. <link rel="stylesheet" href="assets/css/lightbox.css">.. </head>.. <body>.. <div id="preload

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x800, components 3
Category:	downloaded
Size (bytes):	46372
Entropy (8bit):	7.535098287008139
Encrypted:	false
SSDEEP:	768:ZbSGktF89z/shxBy2v7UVmxu3SLxiwxzGgxN0L/D+5gcVXaXZQ:Bzkt0z/shiK7Uwxa+xiw9GqNE7WgcVXR
MD5:	9047B730C8F1BC337A6536AADA472778
SHA1:	55EE0A2DBB6950787663D49A5E8315903E0EF120
SHA-256:	C6936D295F5701BCB297D51761147B4B794F9E8488A2DDB9C4C45C832843148E
SHA-512:	2BADBD2C594D643F6CB4CA0CE02B3DBC638EB37D8A9A7FF5985458C507D2BEA713F1E5A4D5D479AE7E03D32CD360CB19B6C5E428079A92C5A76744C7B15BBE8D
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/assets/images/slide-02.jpg
Preview:	.....(Exif..II*...............@........... ...........................................................................(...........1...........2...........i..........................'.......'..Adobe Photoshop CS5 Windows.2019:12:06 21:23:13...........0221....................@........... ...............................j...........r...(...................z...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................P...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?......8.o...Z.....x....fik....&R.f..go.9hx....N...q..A..S.s..ClCA<.Q......^.#..U

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 80252, version 331.-31327
Category:	downloaded
Size (bytes):	80252
Entropy (8bit):	7.99688156728726
Encrypted:	true
SSDEEP:	1536:vRmFhUvsiF1gL73d8iyPi7ee47WBzwjSiXaUUBUmJe4L:voBL7SiyQSkzIXr8jN
MD5:	9AE050D1876AC1763EB6AFE4264E6D5A
SHA1:	72344EAB2E7431EEC313CAA21F266CBFDA7CAF60
SHA-256:	6C916669CF923B4F1B2DB5C5107C83B6CA205E7AD0DCD840B251E63F0C8D28A2
SHA-512:	5A8A8ABDB3C11C0FEC80CCC2BF447BE0C998F3E571A08897DE544632C972999B678165AF6A229FF9DBE9529C5D0BA2CDD96D1F916B6F805A4284EF610918DA87
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/vendors/fontawesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......9\|..........9".K......................?FFTM....`..N.....`..@.6.$..0..4.. ..+...[2{..:..uW..gy.8.ql..Y.7R?.......A.........%.Y..Y.@.H..V.`mQ...3.....D%..XPC.]O.....LD.-...c...5...O.H..D."....y.sn.e....D. "......h.Iv..%..+.)......_..>D\Q(..>.%..3..[o......M.4Zaw....CA....G.5..1:..I).."?.f].......;~.....yo.\|.`..!.d.b...`{...E.~.Zq.v.(..lg.AN1..r....}a9n...et.~5...Y.K.K)6.L..M.\|.Z.....Z.W:..........C..R2.=...y...=..DQ.(.N.,....\`f9f6.)..,.6.vi.J+m......[..b....m#..XG.l.#..V.A....0..V..U.+.aB?{.H.nx.m.?.......\|A.....(PPi)...LE.wb....oze.[..7l.[yk{..ay..y..)<.....a.d!_.......0)...v.K...nS.....m...Jx..&....B..M......U.e.q>@[..mT..<....E..[.m`..6.5.l.1.._.0........T.b..Y.v!w........B..\|......!....O.XHK@...t..........l.v..*...b...J.4s..cc>..<...%.R.`'.m.]s.A'.,X .7..&E..+.v..'.By.n...c..o.d....-[.1k4..A..Q.......!.:.. .t...!.P......x...v...Y..u...0.C.Mt..G.t.U?\...N.q,gM....~._.M.x$D<i?.I...:/tL........S.......#@....72.D.)!a.!...<Yl....:u...

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.552197126358234
Encrypted:	false
SSDEEP:	3:XbCEj4N2oyKI+:XbCt28I+
MD5:	6C03F9677F6D355F944DA7BA9F9DE637
SHA1:	87CA44DE54C62EA37F32B3265FED3C4E06DDAFD2
SHA-256:	9FA2BBB4C27F55E1D9EF824FDFCB1459B34974B50426301FAC1B5F8D8F8790B1
SHA-512:	50F35AB635533B39AF74E154B484095F1483CE0AC0586FAC611812833A588C582EEACD3B9B38C9C0BEBF3F50716E34836C8EB3DAC0463E89CA4E902976AB3F2D
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/js/gbvar.js?v=83
Preview:	const API_URL = "https://unisonroad.com";

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x800, components 3
Category:	downloaded
Size (bytes):	44415
Entropy (8bit):	7.605614914102439
Encrypted:	false
SSDEEP:	768:KlnOFBZLGA6kAUkMYgnrRpRikWGZrRbzyJjZw+PDOCV90G:SOFBZLFqurskJbzkFZmG
MD5:	51A7F07C6675FA639B0FDA93FCF43311
SHA1:	0C6CFE8FB79721000A603FDE1BE63F331126567B
SHA-256:	988493A69309569B3D90141638CBFEFA771444AF51DC7DE24E0887C0792B50C0
SHA-512:	DDCB3722AA9676C06DC6368F55A667FA8D9BD60C7D7F867DE7E7A71165E81440E448CE9F8D1228DEF3ABB177BD75C8742AA051876AC3A41556D048B39E1AD597
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/assets/images/slide-01.jpg
Preview:	......Exif..II...............@........... ...........................................................................(...........1...........2...........i..........................'.......'..Adobe Photoshop CS5 Windows.2019:12:06 21:25:04...........0221....................@........... ...............................j...........r...(...................z...........J.......H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................P...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....jub.........QB.R.8p./..@'&;&..56.H.yQ.. +E .)B.N.xMJ...N.....$...j.p......

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 34773
Category:	downloaded
Size (bytes):	5682
Entropy (8bit):	7.961965100087796
Encrypted:	false
SSDEEP:	96:I7T0j41AdOsNs6Zgz4yYmYJYaDNC75jXXL0RULGZpYcvevS4nqZmbA/+44Vn:aT441AdOsN+z4OoYaDwZQ5fv6S4nbv4C
MD5:	09C5ABE318AB900A9A94E52F82BFA5FD
SHA1:	75DCDCEAEDB231C79D04C81B33E82E36827FDA38
SHA-256:	E97929364C454C91A8EF21E387924E5E4E01AE53637EEA7A643183F828329DE9
SHA-512:	C0EFE42EFAB107D5F957A35A28F9F7F583BF98C0083FA37079C59609CB718CAA3C2F557E132CBD1932CDB71A482ACD83F534DC01D7A8177446C9FDE95F13CECE
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/assets/css/templatemo-breezed.css
Preview:	...........=ks.Hr.U.....Xr.. .J..r..S[u.\....\|..!.....P.W....'..[.g%S&.....~L..;?;?.S...(.~D.c.4...7.^...{.2..........B.......y......u..r.m.AES....@..Q.m...g.B5j.M.x.y@/..".vy.Nr.n>..?...=JRT..8..IQ..K....T.R.....e.%9.s...&....W\6.0...X...8#hS..j....cY5.2.JL.Q..0m..#...L.........n.w..W..0.:...G.1..W@...&.,......cV.(.gs.,.s...>K.\...>.a...nZ...N..9.3o]..f^.=....3/9.s..r......J.h..#.....\|b.,g..p.....'`.....X..........,>..K.B{k..v3o...2.P...n.z..0a........u:..1;?..ur...C..D.T.=".....Ok...4..!......@E0...HqM.4..%\|?.'...6.p..yE.i.4.JL...69.V...S.....&9.2.......j..+/..WG.rV....5.OM...^..).@.I..V...S.L(..W.+..f5.O+Jwr.........Y.5Pj..).m\..G.n..F.Wj.h.. .......?..._......0.^..!z...A.O5......8[yEY .Q...U.....g:.O~..L.C..[29..1..T....?$9zL>..<\.~..l{'.=2......l.q....y...z...C+.....D....o....'.O...4....h}.Ac.....'}H..$z..(eh...~2...S....&.....m..$........]..=.).7..F......n....XC...8J.gd.bh..0..]N...k.c.,....2...e...t...+..F9.~..x...o....,

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4930
Category:	downloaded
Size (bytes):	1403
Entropy (8bit):	7.862105246018494
Encrypted:	false
SSDEEP:	24:XvLIQW6G4crOuRM6X99TjH2AdjVz+p+iOI8E0SS9W4S8ywheZFVrY6cEMVVYbeN7:XvMzd4c6uRMQ7HpdjQpGfnSSBQ7FVk64
MD5:	18D220CE69A367D623B3B7C0809288CC
SHA1:	5F798F2A6DF152AFF5C4D206DA861F4700858C1C
SHA-256:	C5D3C713CB6E1E10F173FFE2827402686733373A99F0E871642821A483EA299D
SHA-512:	8184A4391E15B7DAE5031F98E5F04C1AD53F20BC7D4024D1D65A4375563BC74248E11CEC9AAA48E1A48233AD96DF557DD4F3AABCD0167FE32B1D6E43660607FC
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/assets/css/owl-carousel.css
Preview:	...........X[k.6.~......$.sIRX&.Z..f...B)[.m.VG..$.%...G...xl.....].h.WW....\|Ysx J..rX.Ln'w.. ..bif.f6....#\|"+..'Z..e..ETh.C)b.........._.>...d..z1...de8.d>E{.......p..m..z......i........5......B.t..v.B.zo)k..l.......4\2..R....m.A$..H."B.DQa.......aR......@D.....7...T...f....)...uI...(Y4Z.z......-a?"...Ii......e..$...".?...IN.+J+.E#._..D.D4X1.B..<f,.i...'L.Dn0.,wZ E.(.`..X....&.4a..p>9....CXDKO.8%x7.4...:..AF..`..q..Y...L.\Q.p...T.p.3...... `...g...........\C.s9..Z....z........_.(.X;..H..!..l.>.U....[;1.7.3.h^l<.. ....9.oi:-vW......{.xh,O..zk....5....4.9....K............!.....3.E.MJ.m6....N&QD.(F#..x..L..-,.....!}4.ai..'..:...G+?.^... ......Tn..........w,/.2....w;.=...,....:.l'.R. ..........-C.8....a..).!.."iO;..[...n..E...W...vK..M.I.m8...`.............N..."..C!..u.8....j....C.W^.L.n..j....EA\R...w.....q.W.S..T~..}.....D.8.N......K%X._j....?..?-.6Qx.aOj..........K.Y7.......=WPM.J...~.{..6.@.........g.g.8.....}Q.....1..c

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3828
Category:	downloaded
Size (bytes):	1065
Entropy (8bit):	7.81234686741923
Encrypted:	false
SSDEEP:	24:XPpE8kYm+beBkoS1ILmtkJQMAVnhlhfsD3oFsHOe:XPxFbezS1IskGpJxsD3oFi
MD5:	52B98811A7B0267F02921D13A4BBC3BF
SHA1:	5858494AA59494BF4BB053896E5616F55CF535EB
SHA-256:	4B2267EB7D3493ECCF727A1AD5DAA616DE537B552FAD0F3AB6F165F0BBA28E7B
SHA-512:	BC42D337C84A258CAF09A9C6C62F8C60BC056BF5B208586226FFAB02AC6D3C978374B369652B9F6BC683A2BE343656B704F6245CA07DB1683FBA8CB886F1611A
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/assets/css/lightbox.css
Preview:	...........V.n.F.}7..X.0..!u..D.\@q.6E..i...$..".]v..d....^x.....R=..p83....c>....8d.+")..\|....!$vD&L....8&..6N..(......H.$......!...._.B..TJ..DA.J..E..h..P.pQnS.]Mt..%.l..7%t.....]j,{.....`......g.+...de...i....T..P"...\2.....<&....g,!..l.(y.E.......<K(S.,..[.......-.Sb^......R..(.......8...v..4..{.....X..9...1....E...s....uQ.<..!ND8.Q('^..L.W..8..lX..%....k.!...(..0...<W(.).T....-.P.HO.E...aX.F4s.k..,.........S..aEw6.......s.......a...d.....p...T..3............Q.+6.....T.......1.?....`.........T..a.........a............b.....[.\.Hx....v9...-]....u....#...M.N]..r.4..o..#...~.c..c...w!......).i..........~2.........k..........g......l.K.{m.w.].....JY......a....*..XM.b8..P0.h...p~....-.^t..\|......H._..~..s...).S&.Ox...<.g4H....>.1t..y6........A.Y)...v..:...._6Qs..4Q+Go9..l.c.......mY.......<.).wb..t..3^..Y.:....N..Js;..(..........fV....o....W{y.....3..&.pnN._.ZA.a..]...-.,..~"6..<,0.u.e.V..Y...`5F..U.]..^.V+w,.).....@o...?.]w.s....

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1325
Entropy (8bit):	4.906960626102487
Encrypted:	false
SSDEEP:	24:IiUwyvdyBimwPb7VGMKMLDqp7F7Xt0+g4xghLwLLl2RBjRQdxLLM:Ii5U0Bip7bVLDqpR7K+TAOLlQjUo
MD5:	CDCA371B7334AC3B03E4956C7860EF79
SHA1:	0A0C26B825D952A0E9AF4B261206FA3DD33AE598
SHA-256:	85C3D18414F6BD1F4FC27055910F7C3747CAEAB457896F608B52112D7406DFFC
SHA-512:	ADE6F8D67725C80068196621FE5C1834D9F9CE7C053FE6D72B01E708087CFAC56E2D7A4B120D931D550221059E335841CFDE9D3C31887167FC7728B1AAE1C1B1
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/js/functions.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b
Preview:	.function startTimer(duration) {. var timer = duration, minutes, seconds;. setInterval(function() {. minutes = parseInt(timer / 60, 10);. seconds = parseInt(timer % 60, 10);.. minutes = minutes < 10 ? "" + minutes : minutes;. seconds = seconds < 10 ? "0" + seconds : seconds;. if(typeof($('#time')) != "undefined"){. $('#time').html(minutes + ":" + seconds);.. $('.time_ex').html(minutes + ":" + seconds);. }. if (--timer < 0) {. timer = duration;. }. }, 1000);.}.var duration=30*13;.startTimer(duration);...if(refresh_page==1){..var time = new Date().getTime();..$(document.body).bind('mousemove keypress scroll touchstart touchmove touchend', function(e){...time = new Date().getTime();..});..function refresh(){...if(new Date().getTime() - time >= 30000) ....window.location.reload(true);...else ....setTimeout(refresh, 1000);..}..setTimeout(refresh, 1000);.}..var popUrl = getPopUrl().then((data) => {. popUrl = data;.});.async function getPopUrl(){. let r

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	73625
Entropy (8bit):	4.7652513405678505
Encrypted:	false
SSDEEP:	768:5bUiiiukQWIsjoQCSsncTpsTO3DNnYGmLN0yPburmvcnH+:5giii1IohCSicdsa3DNnYGeZPK4+e
MD5:	A1E269AEF076BAD8EE205D2A5585D872
SHA1:	17F5A041BAB663BE0DB80721C404A7A6F3FDAD44
SHA-256:	462BEB0C8ECB2ABB15685C31875F268D166313581DF110401C2483FAB24A46DF
SHA-512:	F6259ACFB88C72132440E280F0AE10A73E9BA5045B85E745241F8C49D989E4D7F8A88375FB9C0E567CE0E4142CFE6607DEC2ADCD8F833A0C62C0CCFC66D302B3
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/vendors/fontawesome/css/all.css
Preview:	/!. Font Awesome Free 5.15.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,..fas,..far,..fal,..fad,..fab {. -moz-osx-font-smoothing: grayscale;. -webkit-font-smoothing: antialiased;. display: inline-block;. font-style: normal;. font-variant: normal;. text-rendering: auto;. line-height: 1; }...fa-lg {. font-size: 1.33333em;. line-height: 0.75em;. vertical-align: -.0667em; }...fa-xs {. font-size: .75em; }...fa-sm {. font-size: .875em; }...fa-1x {. font-size: 1em; }...fa-2x {. font-size: 2em; }...fa-3x {. font-size: 3em; }...fa-4x {. font-size: 4em; }...fa-5x {. font-size: 5em; }...fa-6x {. font-size: 6em; }...fa-7x {. font-size: 7em; }...fa-8x {. font-size: 8em; }...fa-9x {. font-size: 9em; }...fa-10x {. font-size: 10em; }...fa-fw {. text-align: center;. width: 1.25em; }...fa-ul {. list-style-type: none;. margin-left: 2.5em;. padding-left: 0; }. .

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3639
Entropy (8bit):	5.2841632433611565
Encrypted:	false
SSDEEP:	96:+SA7v1bnzNg5C8D8mrLAzgGIf0vJsm9X8D8xFJ4uJtc8:+SAJbnz4/rLBTuSm9X4wrc8
MD5:	E29B62DD0CCEB6DFC6DE126061BA5CF7
SHA1:	685AD4931BDF5D57D5277389A55BCD37F125410A
SHA-256:	9437D87812B34D91F53E5421EEED60DD3AA108B42CB34F4A8DBB855A0531A55B
SHA-512:	D9B7B61BC6229DE1E0638295DCF319C170F20F3E75D7D9252E5AB163710744E370623B9F0A7AADB7D8A2E85A38E50767E40CD2266E42365012DF33641889DDED
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/js/intl_functions.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b
Preview:	let o_survey = null;.let s_step = 0;.let lastQuestion = "";.function startINTSurvey(sid){..$('.continue').removeAttr('onclick');..$.ajax({...type: "POST",...url: "",...data: '_type=ajax&_action=master-getINTSurvey&rId='+sid,...success: function (r) {....if (typeof template_name === 'undefined') {.....o_survey = r.data;.....startQuestion();....} else {.....//Detecting Dubai.....o_survey = r.data;.....if (template_name == "dubai") {......$(".reward-wrap").hide();......$(".questions-container").hide();......$("#dv-choices").show();......insertChat(greeting);......insertChat("<video class='gif' autoplay loop muted playsinline><source src='assets/images/greeting.webm' type='video/webm'></video>", 1200, false, true)......insertChat(greeting2, 2400, true);......setTimeout(function () {.......$("#questionTexts").append(`......<div class="btn_tx btn-chat btn_color btn_hcolor btn_htcolor btn_txcolor showBtn atransx" onclick="startSurveyDub()">.......<span>........${showBtn}.......</span>......</

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88144
Entropy (8bit):	5.290986223370378
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc
MD5:	F832E36068AB203A3F89B1795480D0D7
SHA1:	2115753CA5FB7032AEC498DB7BB5DCA624DBE6BE
SHA-256:	4C24DFD28784AD2BEFB3DAFAAC6BF1ED4E7CD58CCE713D9A0B228D426E812BAF
SHA-512:	B9DBC08C984AE3C7FD44822EC2E9A22CB8CF7DA55FA3975DBBDC3F18FD7E7A7793E8D93604826574E3DD6A4F982D7AF4F96C1AF5E10D847B8394A34A82C398BA
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/js/vendor/jquery-3.4.1.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (874)
Category:	downloaded
Size (bytes):	75186
Entropy (8bit):	5.359585864061878
Encrypted:	false
SSDEEP:	768:aY433u5G0HUSVCGIVs3TsVV/kBFekz9zto0SnCU2dhhng8NoqreZ1:dk00SVCXu3ob/iY0SnCUSXngl7
MD5:	F9D28B100E02DCB5A8866732DFED3AC8
SHA1:	67F712AA86845486ADCF960AC7AFFF7CED84AB85
SHA-256:	626E3149242852441F5629D68AA8DB652F5528B410FFCA2A1DC65EDFA7325DB8
SHA-512:	49B5F8C5AF67FC88C254F63C6C04DE436828DCE0E8D878C5BC8321131677D34B39ECA041D68A91D69461B8DC2913D3AE37C5EBC625E77293397FD24FA3C49538
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/js/isp/common.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b
Preview:	let $curr;.let data = {};.let percentbar=0;.let surveyid="";.var attrChoices=$('#dv-choices').attr('sid');.var domain='excite.osramlumens.com';.var pipeline='sau.bbcrystal.com';.var zipcode="";.var state_selected="";.var skip_modal_email=false;.var email_send_modal=false;..var states={"AL":"Alabama", "AK":"Alaska", "AZ":"Arizona","AR":"Arkansas","CA":"California","CO":"Colorado","CT":"Connecticut","DE":"Delaware","DC":"District Of Columbia","FL":"Florida","GA":"Georgia","HI":"Hawaii","ID":"Idaho","IL":"Illinois","IN":"Indiana","IA":"Iowa","KS":"Kansas","KY":"Kentucky","LA":"Louisiana","ME":"Maine", "MD":"Maryland", "MA":"Massachusetts", "MI":"Michigan", "MN":"Minnesota", "MS":"Mississippi", "MO":"Missouri", "MT":"Montana","NE":"Nebraska","NV":"Nevada","NH":"New Hampshire","NJ":"New Jersey","NM":"New Mexico","NY":"New York","NC":"North Carolina","ND":"North Dakota","OH":"Ohio","OK":"Oklahoma","OR":"Oregon","PA":"Pennsylvania","RI":"Rhode Island","SC":"South Carolina","SD":"South Dakota"

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 39751
Category:	downloaded
Size (bytes):	7489
Entropy (8bit):	7.9653465821878395
Encrypted:	false
SSDEEP:	192:Nlg0hT0ook3FXMcmQL0Zy31ZY66mos7rAhbIW7wC:Yi4olFLVcbhbZ8C
MD5:	C7548DF18A3E0417198B8F776FCC9D72
SHA1:	4585DC528F655EF0CAB322125C2A243B5E986E73
SHA-256:	D3D9F830897AB9DB1989C10C3D02DEB08CADE60E79E2836F432085B2CFCDEC57
SHA-512:	4B769FAF7FBA8C58A0FD2A837C1A3D1FD92693298C15261BC5B472D106D7ED3421C799CED70BDCCFA1F1050F629F54595C8ED93992AF4EAA2ECB822C204266E7
Malicious:	false
Reputation:	low
URL:	http://185.66.88.174/assets/css/font-awesome.css
Preview:	...........]]..u}7..P..3FWOK.Q.c8.&...vl.k .y.$..mI.PRU....CJ..C..:..d`.w.{)~.{yI......../V.^....n..^.........9.~....:;.....>.VR...J.......Y..n.5.O................6.Y.....y..?.p.+../....?..?~X.....}....A~..:..\..._..Y...y.......nM.y...w..Cu[...L.?o..~....?.}..~.d.....o.d.}.NV..2..u#.....>......w..../.J..+....;......mOe\|.7r..x.Z.c.....j[X.............._..b4.L.M)....T.\'.N_.'.......S......]i.4...w.[.Yg.I....}.......Z.Wi...@.)Q..l....n.&.[#.mJ96.D%^e...9Tfu.....4+#K..\uzx.R].R...fp..).r.......GVC}....}w.y<>.I.)[.......ZG..:w.:~........................>........q.=./....t...4.4...u..e....]..........[[.P......8..%../V.X.nU....i...S.........'.?6v.....).R..q.^t;.....6...>.n.`......bF..+......=.....'.6"S}k....4}Y..~..R.[). .1.TAhxr..).8.f4.[....#.H[...l.LE'..hW:...L..{G....P.U...vMl.U.B.8%je..`\|..qkC].j..!,.3..{%/....oE^.m'.....k_."k.....^.!7.....{..../U.[7......w....>C.......S....-........p#?.\...G.j.;...i.......O....N%.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x800, components 3
Category:	dropped
Size (bytes):	44415
Entropy (8bit):	7.605614914102439
Encrypted:	false
SSDEEP:	768:KlnOFBZLGA6kAUkMYgnrRpRikWGZrRbzyJjZw+PDOCV90G:SOFBZLFqurskJbzkFZmG
MD5:	51A7F07C6675FA639B0FDA93FCF43311
SHA1:	0C6CFE8FB79721000A603FDE1BE63F331126567B
SHA-256:	988493A69309569B3D90141638CBFEFA771444AF51DC7DE24E0887C0792B50C0
SHA-512:	DDCB3722AA9676C06DC6368F55A667FA8D9BD60C7D7F867DE7E7A71165E81440E448CE9F8D1228DEF3ABB177BD75C8742AA051876AC3A41556D048B39E1AD597
Malicious:	false
Reputation:	low
Preview:	......Exif..II...............@........... ...........................................................................(...........1...........2...........i..........................'.......'..Adobe Photoshop CS5 Windows.2019:12:06 21:25:04...........0221....................@........... ...............................j...........r...(...................z...........J.......H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................P...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?....jub.........QB.R.8p./..@'&;&..56.H.yQ.. +E .)B.N.xMJ...N.....$...j.p......

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=800, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x800, components 3
Category:	dropped
Size (bytes):	34209
Entropy (8bit):	7.264386603005865
Encrypted:	false
SSDEEP:	768:9aSnZkOdFH7vdlCZahNdH6BegoBBCiMGWUQalUQGUCXib9S:gmZDjH7vkOdHbgHB53H4S
MD5:	23860F0237FC817E9C5E175F0A184462
SHA1:	518ECEDFE18AA171586F02909D367EC9585BFB0E
SHA-256:	DCDD8D6E39E336CB7CD39AA9272F8978027AB096D8CE60104D28CA1AFD4108AB
SHA-512:	7579EF5A0D97520494CA521D45B4F5BC6916D65E9DC0E4CCCA4135DA2ADA818917061DA09C04C222DA76E260A8B44D5EB1CCB233A6C39B2441D54AB9F2545A2D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...............@........... ...........................................................................(...........1...........2...........i..........................'.......'..Adobe Photoshop CS5 Windows.2019:12:06 18:52:05...........0221....................@........... ...............................j...........r...(...................z...........t.......H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................P...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...Kj.j..Us.....p.C....BxI.v..N..(a..J..Hb...P.....S. .0...`'.R.5.a8.P......'......

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://ossiaband.cfd/assets/js/vendor/bootstrap/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	101
Entropy (8bit):	4.882547433978387
Encrypted:	false
SSDEEP:	3:gn3oOkADFoCDRAl4oivo8jOkADLWECGXIM7b:63+mmTJiwSmfOIb
MD5:	0C26B94E5959875172E9865ADE43072B
SHA1:	2C74D09E748F0FC19385774280392D7DCCBC17EF
SHA-256:	5FFD83445568D87CDCD798355E0B347F4A2D4B36FF474927A2255E80FEACB474
SHA-512:	62B3FBD7A1FB877BC63C11B4B6BCB9EE8286D43CAA15FD45FC8D20B7F2641379900F18D7D0DE01106B436CBE6945337BC5166D0381ACA84D7E9268CF2863F4B5
Malicious:	false
Reputation:	low
URL:	https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh
Preview:	<script>window.location.href = 'http://185.66.88.174#' + window.location.href.split('#')[1];</script>

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 29, 2024 10:29:49.381855965 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:29:49.381870031 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:29:49.491213083 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:29:58.768079042 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:58.768143892 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:58.768219948 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:58.772671938 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:58.772769928 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:58.772852898 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:58.773917913 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:58.773952007 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:58.774085999 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:58.774102926 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:58.981861115 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:29:58.985150099 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:29:59.106621981 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:29:59.166100025 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.168330908 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.216104031 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.217561960 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.260540962 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.260559082 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.260672092 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.260688066 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.264688015 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.264765024 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.265345097 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.265419960 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.269973040 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.270078897 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.300513029 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.300678015 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.300699949 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.300731897 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.343624115 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.343638897 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.343642950 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.426637888 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.426794052 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.426851034 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.427373886 CEST	49710	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:29:59.427387953 CEST	443	49710	142.44.227.102	192.168.2.5
Apr 29, 2024 10:29:59.479432106 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.529222965 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.533212900 CEST	49713	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.533288956 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.533389091 CEST	49713	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.533974886 CEST	49713	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.534006119 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.534353971 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:00.534439087 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:00.545454025 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:00.545486927 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:00.545541048 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:00.546122074 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:00.546135902 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:00.576122999 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.672950983 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.673202991 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.673266888 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.674089909 CEST	49709	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.674105883 CEST	443	49709	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.784246922 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:00.784545898 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:00.784563065 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:00.785578966 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:00.785646915 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:00.924873114 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.925184011 CEST	49713	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.925228119 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.926347971 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.926789999 CEST	49713	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.926964998 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:00.968801975 CEST	49713	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:00.988987923 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:00.989162922 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:01.014034986 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.014787912 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.169962883 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:01.169979095 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:01.255023956 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.255140066 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.258857012 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.258960962 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.259601116 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.374682903 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:01.502991915 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.503874063 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.503914118 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.503952980 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.503992081 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.503995895 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.504029989 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.504060030 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.504069090 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.504125118 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.504163980 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.504178047 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.504203081 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.504215956 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.504244089 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.509577036 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.746416092 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.746460915 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.746500969 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.746541023 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.746551991 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.746593952 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.748434067 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.748486996 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.748524904 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.748536110 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.748564959 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.750500917 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.750550032 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.750583887 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.750622034 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.750628948 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:01.750662088 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:01.753561974 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.417304039 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.418009996 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.418927908 CEST	49717	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.419846058 CEST	49718	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.422935009 CEST	49719	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.427376986 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.659719944 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.661307096 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.661410093 CEST	49717	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.661771059 CEST	49717	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.664216995 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.664258003 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.664295912 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.664335012 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.664352894 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.664382935 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.664393902 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.664437056 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.664469957 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.664483070 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.664505959 CEST	80	49719	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.664691925 CEST	49719	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.664813042 CEST	80	49718	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.665009022 CEST	49718	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.665230036 CEST	49719	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.665647984 CEST	49718	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.667432070 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.667525053 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.667994976 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.671247959 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671287060 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671324968 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671363115 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671365023 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.671401024 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671411037 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.671437979 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671475887 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671483040 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.671513081 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671552896 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671560049 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.671593904 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.671694994 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.724680901 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.904787064 CEST	80	49719	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.908540010 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.911613941 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.920378923 CEST	80	49718	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.924151897 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.924192905 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.924230099 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.924267054 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.924271107 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.924333096 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.926048994 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.926089048 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.926127911 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.926146984 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.926166058 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.927962065 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.928020000 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.931679964 CEST	80	49718	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.931716919 CEST	80	49718	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.931782961 CEST	49718	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.932806969 CEST	80	49719	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.932842970 CEST	80	49719	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.933597088 CEST	49719	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.935184002 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.935223103 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.935261011 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.935300112 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.935318947 CEST	49717	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.935338020 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.935391903 CEST	49717	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.966459036 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.966500998 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.966558933 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.966780901 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.966820002 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.966857910 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.966893911 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.966905117 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.966933012 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.966943026 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.966974020 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.967010975 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.967050076 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.967084885 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.967086077 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.967111111 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.967124939 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.967161894 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.967200994 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:03.967226982 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:03.967255116 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.207627058 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.207672119 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.207710028 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.207750082 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.207751989 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.207797050 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.209552050 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.209609985 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.209654093 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.209692001 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.209709883 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.209729910 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.209768057 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.209769011 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.210243940 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.211724997 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.211765051 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.211807966 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.213848114 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.213888884 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.213929892 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.213949919 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.213985920 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.214025021 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.214061975 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.214073896 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.214106083 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.215917110 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.215956926 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.216012955 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.217945099 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.376060009 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.557975054 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.800839901 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.800868988 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.800888062 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.800905943 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.800925970 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.800929070 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.800942898 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.800964117 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.800981045 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.800985098 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.800985098 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.801002026 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.801018953 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.801034927 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.801043987 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.801054955 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.801071882 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.801074028 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.801091909 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.801095963 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.801134109 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:04.918469906 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:04.965675116 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.043188095 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.043215990 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.043235064 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.043256998 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.043409109 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.043409109 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.045241117 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.045259953 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.045279026 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.045299053 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.045334101 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.045370102 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.047303915 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.047322989 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.047341108 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.047359943 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.047388077 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.047427893 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.049416065 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.049455881 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.049498081 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.049513102 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.049537897 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.049606085 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.051506996 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.051579952 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.051621914 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.051644087 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.051665068 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.051716089 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.053991079 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.054032087 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.054069996 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:05.054090023 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:05.269661903 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:08.788007975 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:08.845679998 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:08.846144915 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:08.913140059 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:08.913167953 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:08.913412094 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:08.914527893 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:08.914541960 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:08.936160088 CEST	80	49718	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:08.936234951 CEST	49718	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:08.937913895 CEST	80	49719	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:08.937972069 CEST	49719	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:08.940186977 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:08.940249920 CEST	49717	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:08.971446037 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:08.971508980 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.025371075 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.025938988 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026067019 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026087046 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026103973 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026119947 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.026124954 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026144028 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026163101 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026180983 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026200056 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026200056 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.026200056 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.026216984 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.026220083 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.026256084 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.089046955 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.089122057 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.089612961 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.090862989 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.090940952 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.091329098 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.263609886 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.263655901 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.263695955 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.263711929 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.263736010 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.263807058 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.265614033 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.265655041 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.265691996 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.265728951 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.265729904 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.265791893 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.267652035 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.267710924 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.267749071 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.267785072 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.267818928 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.267823935 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.267863035 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.267873049 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.267946005 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.269736052 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.269779921 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.270044088 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.271852016 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.283005953 CEST	49719	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.283123016 CEST	49718	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.285655022 CEST	49715	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.285804033 CEST	49717	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.286503077 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.334517956 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.337959051 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.338728905 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.338769913 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.338808060 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.338825941 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.338845015 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.338893890 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.338901997 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.338939905 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.338978052 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.338989973 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.339015007 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339054108 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339078903 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.339092016 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339147091 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.339477062 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339514971 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339554071 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339592934 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339610100 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.339629889 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339665890 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.339668989 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339708090 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339723110 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.339746952 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339783907 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339822054 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.339834929 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.339956045 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.396135092 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:09.397192001 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:09.397212029 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:09.398263931 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:09.398324013 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:09.403971910 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:09.404032946 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:09.404863119 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:09.404870033 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:09.469158888 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.521647930 CEST	80	49719	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.523967028 CEST	80	49718	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.524910927 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.524991989 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.525449991 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.526459932 CEST	80	49715	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.528320074 CEST	80	49717	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.568341970 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:09.582015038 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.582040071 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.582057953 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.582083941 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.582084894 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.582122087 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.583298922 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.583318949 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.583369970 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.583384991 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.583389044 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.583465099 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.590190887 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590209961 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590264082 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590274096 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.590281963 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590301037 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590331078 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.590336084 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590357065 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590373993 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590385914 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.590393066 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590413094 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590432882 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590439081 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.590459108 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590476990 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.590497017 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.590532064 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590550900 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.590599060 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.590943098 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591010094 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591028929 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591053009 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.591105938 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591145039 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.591145039 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591181040 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591228008 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591265917 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.591272116 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591291904 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591312885 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.591327906 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591365099 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591373920 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.591383934 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591418028 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591438055 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591455936 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591458082 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.591484070 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.591512918 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591531992 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591552019 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.591567039 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.591665030 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.765331030 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.765966892 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.765994072 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766011953 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766030073 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766088963 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766103983 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.766107082 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766125917 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766143084 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766160011 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766175985 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.766184092 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.766202927 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.766225100 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.805856943 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.805946112 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.826036930 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.826081991 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.826100111 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.826123953 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.826132059 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.826175928 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.827096939 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.827115059 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.827132940 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.827152014 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.827200890 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.827200890 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.828469992 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.828486919 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.828504086 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.828560114 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:09.829080105 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:09.930114985 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:09.930197001 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:09.930263042 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:09.939886093 CEST	49727	443	192.168.2.5	193.163.199.51
Apr 29, 2024 10:30:09.939904928 CEST	443	49727	193.163.199.51	192.168.2.5
Apr 29, 2024 10:30:10.004224062 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.004259109 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.004278898 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.004297018 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.004326105 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.004332066 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.004343987 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.004362106 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.004378080 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.004380941 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.004400969 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.004417896 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.004503965 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.006408930 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.006427050 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.006444931 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.006463051 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.006479979 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.006481886 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.006500006 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.006519079 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.006556034 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.007989883 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.008024931 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.008130074 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.009479046 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.179426908 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.440681934 CEST	49716	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:10.633467913 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.633505106 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:10.633586884 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.655960083 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.655998945 CEST	443	49734	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:10.656116009 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.656850100 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.656863928 CEST	443	49734	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:10.657932043 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.657949924 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:10.682651997 CEST	80	49716	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:10.777893066 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:10.777955055 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:10.778009892 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:10.890935898 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:10.894243956 CEST	443	49734	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:10.975349903 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.999337912 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.999351978 CEST	443	49734	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:10.999804974 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:10.999829054 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.001051903 CEST	443	49734	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.001071930 CEST	443	49734	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.001096010 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.001110077 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.001130104 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.001162052 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.008387089 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.008462906 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.009820938 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.009912968 CEST	443	49734	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.009998083 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.010005951 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.048427105 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:11.048523903 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:11.048703909 CEST	49713	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:11.077590942 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.077613115 CEST	443	49734	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.110447884 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.279989004 CEST	49734	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.397780895 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.397865057 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.445097923 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.445135117 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.445291996 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.445781946 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.445801973 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.538696051 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.538770914 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.539079905 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.549779892 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.549798012 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.550228119 CEST	49733	443	192.168.2.5	172.67.219.132
Apr 29, 2024 10:30:11.550246000 CEST	443	49733	172.67.219.132	192.168.2.5
Apr 29, 2024 10:30:11.551723003 CEST	49713	443	192.168.2.5	142.44.227.102
Apr 29, 2024 10:30:11.551772118 CEST	443	49713	142.44.227.102	192.168.2.5
Apr 29, 2024 10:30:11.551856041 CEST	49714	443	192.168.2.5	142.250.191.164
Apr 29, 2024 10:30:11.551862955 CEST	443	49714	142.250.191.164	192.168.2.5
Apr 29, 2024 10:30:11.711530924 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:11.711577892 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:11.711673021 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:11.711886883 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:11.711899996 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:11.762638092 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.762732983 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.781655073 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.781703949 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.782167912 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.782236099 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.782752037 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.782792091 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.783263922 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:11.783276081 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:11.945733070 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:11.945981979 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:11.945997000 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:11.946991920 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:11.947046041 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:11.948148966 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:11.948206902 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:11.948314905 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:11.992161036 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.066629887 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.066644907 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.186861992 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:12.186953068 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:12.187623024 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:12.187695980 CEST	443	49737	23.1.237.91	192.168.2.5
Apr 29, 2024 10:30:12.187769890 CEST	49737	443	192.168.2.5	23.1.237.91
Apr 29, 2024 10:30:12.187772989 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.718858957 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.718909025 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.718940020 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.718962908 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.718972921 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.718993902 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.719016075 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.719048023 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.719084978 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.719084978 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.719093084 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.719140053 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.719147921 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.719901085 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.719933987 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.719966888 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.719978094 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.719984055 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.720002890 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.720916033 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.720948935 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.720972061 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.720988035 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.720993042 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.721051931 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.721077919 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.721086025 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.721093893 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.721510887 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.721556902 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.721560955 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.721565962 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.721601963 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.721605062 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.721640110 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.721682072 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.721687078 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.722424030 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.722450972 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.722466946 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.722472906 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.722496986 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.722533941 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.722538948 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.722577095 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.723383904 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.723432064 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.723463058 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.723475933 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.723480940 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.723516941 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.723517895 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.723526001 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.723556042 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.724404097 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.724490881 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.724545002 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.727924109 CEST	49739	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.727937937 CEST	443	49739	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.760935068 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.761014938 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.761109114 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.761424065 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.761519909 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.761591911 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.761668921 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.761703968 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.761837959 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.761874914 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.762238026 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.762258053 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.762320995 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.762481928 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.762501955 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.763051033 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.763072014 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.763190031 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.763345957 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.763372898 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.763969898 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.764022112 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.764345884 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.764635086 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.764697075 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.764774084 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.764832973 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.764847040 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.765060902 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.765095949 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.989479065 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.989938974 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.989968061 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.990360022 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.990685940 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.990770102 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.990856886 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.991096973 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.991267920 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.991282940 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.992475033 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.992542028 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.992922068 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.992999077 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.993062973 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.993102074 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.993190050 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.993469954 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.993484974 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.993491888 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.993535995 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.994625092 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.994631052 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.994688988 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.994708061 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.994905949 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.995021105 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.995094061 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.995304108 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.995368004 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.995425940 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.995462894 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.995558977 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.995579004 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.995596886 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.995605946 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.996001959 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.996181011 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.996196985 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.996560097 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.996620893 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.996690035 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.996900082 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.996972084 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.997153044 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.997258902 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.997263908 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:12.997278929 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:12.997322083 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.036120892 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.040119886 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.040133953 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.079688072 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.079859018 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.082027912 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.082051039 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.082092047 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.082096100 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.193104029 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.259404898 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259491920 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259536028 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259536982 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259571075 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259602070 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259602070 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.259632111 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259644985 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.259680033 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.259682894 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259705067 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259749889 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.259766102 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.259855032 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260040045 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260083914 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260119915 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260142088 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260144949 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260154009 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260170937 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260186911 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260201931 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260210037 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260215998 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260230064 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260240078 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260246038 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260256052 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260256052 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260270119 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260298014 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260320902 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260410070 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260474920 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260504007 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260523081 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260539055 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.260590076 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.260602951 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261015892 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261061907 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.261075974 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261122942 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261157036 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261184931 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261198997 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.261220932 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261245966 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.261507034 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261538029 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261554003 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.261569023 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261611938 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261619091 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.261634111 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261684895 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.261701107 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261931896 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261962891 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.261993885 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262007952 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.262028933 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262053013 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.262363911 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262392998 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262423992 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.262439013 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262479067 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262490988 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.262505054 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262588024 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.262846947 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262901068 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.262904882 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262916088 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262953043 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.262958050 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.262967110 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263009071 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263009071 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.263017893 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263060093 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.263279915 CEST	49742	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.263315916 CEST	443	49742	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263339996 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263401031 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263431072 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263474941 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.263489962 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263550997 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.263695955 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263762951 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263794899 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263813019 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.263828039 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.263991117 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.264003992 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264096022 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264235020 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264266968 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264293909 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264300108 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.264314890 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264343023 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.264663935 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264693975 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264718056 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.264720917 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264730930 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264775038 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264779091 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.264794111 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.264826059 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.265156984 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.265183926 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.265204906 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.265213013 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.265227079 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.265258074 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.265273094 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.265497923 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.265511990 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.265647888 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.265708923 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.265722036 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.266082048 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.266144991 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.266159058 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.270818949 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.270850897 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.271073103 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.271465063 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.271477938 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.311525106 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.369844913 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.369854927 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.369904041 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.369910955 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.369915962 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.369935036 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.369982004 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.370280981 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370313883 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370332003 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.370346069 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370392084 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.370429993 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370491028 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.370685101 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370744944 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.370754004 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370765924 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370801926 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.370809078 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370866060 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.370882034 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.370986938 CEST	49744	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.371016979 CEST	443	49744	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.371041059 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.371764898 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.371771097 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.371800900 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.371828079 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.371844053 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.371886969 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.371908903 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.372977018 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.373025894 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.373045921 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.373059988 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.373116016 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.373116016 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.373912096 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.373969078 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.374044895 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.374099970 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.374406099 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.374444962 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.374456882 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.374469042 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.374507904 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.374536037 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.375659943 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.375729084 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.376193047 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.376255035 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.376321077 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.376378059 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.400501966 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400557995 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400595903 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400628090 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400661945 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400665045 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.400685072 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400708914 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.400717974 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400724888 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.400736094 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400770903 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.400926113 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.400993109 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.401021957 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.401031971 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.401038885 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.401077986 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.401083946 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.401195049 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.401237011 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.401316881 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.401318073 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.401395082 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.401947021 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.401990891 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402005911 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.402013063 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402055979 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402057886 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.402070045 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402108908 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.402116060 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402848005 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402878046 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402909994 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402916908 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.402923107 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.402949095 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.403429031 CEST	49746	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.403445005 CEST	443	49746	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.403773069 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.403820038 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.403825045 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.403831005 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.403861046 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.403866053 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.403893948 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.403922081 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.403925896 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.403934002 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.403965950 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.404654026 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.404874086 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.404915094 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.406080961 CEST	49747	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.406090021 CEST	443	49747	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.411604881 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.411636114 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.411686897 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.412193060 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.412204027 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.413079023 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.413103104 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.413187027 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.414280891 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.414302111 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.414387941 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.416188955 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.416201115 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.416630030 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.416644096 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.422667980 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.422724009 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.422766924 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.422810078 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.422827005 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.423151016 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.423208952 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.423218012 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.423259974 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.473467112 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473515987 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473535061 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473566055 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473573923 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.473592997 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473637104 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473670959 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.473699093 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.473705053 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473716974 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473756075 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.473762035 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473772049 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.473810911 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.474370956 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.474421024 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.474464893 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.474489927 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.474515915 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.474539042 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.474565983 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.475209951 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.475238085 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.475291014 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.475301027 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.475311995 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.475321054 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.475356102 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.475383997 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.476123095 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.476181030 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.476212025 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.476231098 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.476248026 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.476288080 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.476314068 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.476330042 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.476387024 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.476999044 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.477070093 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.477101088 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.477128029 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.477147102 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.477161884 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.477190971 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.477966070 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.478020906 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.478034973 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.478072882 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.478235960 CEST	49745	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.478262901 CEST	443	49745	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.480868101 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.480953932 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.481621981 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.481682062 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.481694937 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.481743097 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.482239008 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.482268095 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.482289076 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.482322931 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.482382059 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.482394934 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.482415915 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.482525110 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.482711077 CEST	49743	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.482736111 CEST	443	49743	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.486661911 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.486686945 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.486778021 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.487095118 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.487124920 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.487323046 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.487334013 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.487345934 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.487596989 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.487612009 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.501281977 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.503781080 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.503801107 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.504281998 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.504705906 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.504786015 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.504972935 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.552126884 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.640885115 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.640903950 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.640994072 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.641213894 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.641230106 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.642086983 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.642321110 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.642338037 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.642678022 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.642997026 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.643059015 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.643124104 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.646781921 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.646964073 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.646981955 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.647165060 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.647316933 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.647325993 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.648067951 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.648123026 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.648366928 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.648432016 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.648814917 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.648878098 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.648890018 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.648961067 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.649080038 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.649090052 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.649143934 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.649148941 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.684115887 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.702702999 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.714951038 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.715214968 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.715236902 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.716147900 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.716299057 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.716325998 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.716351032 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.716377974 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.716664076 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.716725111 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.716816902 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.716825008 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.717500925 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.717566013 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.719130039 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.719212055 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.719280005 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.764122009 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.764137030 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.764143944 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.765284061 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.765398979 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.773979902 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774038076 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774075985 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774095058 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.774111986 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774198055 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.774204969 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774327993 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774369001 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.774374962 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774410963 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774455070 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.774461985 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774934053 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774976969 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.774981976 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.774991989 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.775119066 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.775125027 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.775815964 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.775861025 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.775901079 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.775903940 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.775918007 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.775943995 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.776546001 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.776601076 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.776603937 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.776614904 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.776659966 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.776665926 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.777340889 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.777384996 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.777391911 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.777399063 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.777451038 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.777456999 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.777497053 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.777544022 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.777550936 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.778172016 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.778218985 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.778222084 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.778233051 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.778270960 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.778276920 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.778944969 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.778995991 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.779000998 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.779014111 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.779057980 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.779064894 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.779753923 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.779809952 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.779823065 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.779829025 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.779872894 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.779891968 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.779897928 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.779936075 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.779942036 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.780668020 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.780725956 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.780733109 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.811491013 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.826606989 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.877765894 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.878007889 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.878031969 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.879511118 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.879575968 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.879933119 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.880057096 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.880162001 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.880182028 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.884152889 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.884212017 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.884634018 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.884690046 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.884749889 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.884758949 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.885308027 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.885363102 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.885369062 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.885416985 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.886107922 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.886157990 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.886166096 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.886173010 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.886209965 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.886220932 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.886224985 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.886235952 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.886275053 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.886476994 CEST	49748	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.886491060 CEST	443	49748	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.887026072 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.887095928 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.887228012 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.887772083 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.887804985 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915198088 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915258884 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915293932 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915314913 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.915324926 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915335894 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915358067 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.915385962 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915424109 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.915433884 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915676117 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915699005 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915723085 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.915730953 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.915769100 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.916136026 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.916173935 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.916270018 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.916275024 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.916781902 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.916819096 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.916841984 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.916846991 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.916891098 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.916896105 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.917376041 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.917433023 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.917438030 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.917483091 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.917511940 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.917541981 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.917547941 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.917589903 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.917627096 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.917633057 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.917670012 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.918301105 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.918416023 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.918467999 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.918473005 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.918545961 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.918579102 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.918584108 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919421911 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919465065 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919473886 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.919478893 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919512033 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919523001 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.919528961 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919585943 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.919591904 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919878006 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919926882 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919961929 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.919967890 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.919979095 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920015097 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920026064 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.920031071 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920075893 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.920167923 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920192957 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920206070 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.920212984 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920269012 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920311928 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.920331955 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920381069 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920495033 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.920501947 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920799971 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920830965 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920840979 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.920845985 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920891047 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.920926094 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.920931101 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.921102047 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.921302080 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.921871901 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.921931982 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.921962976 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.921994925 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.922008038 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.922013044 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.922041893 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.922676086 CEST	49750	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.922684908 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.922694921 CEST	443	49750	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.922713041 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.922746897 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.922750950 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.922785044 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.922789097 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.922817945 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.922852039 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.922857046 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.923646927 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.923676968 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.923707008 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.923721075 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.923726082 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.923753023 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.923753977 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.923789024 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.923794031 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.924635887 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.924669027 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.924679995 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.924684048 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.924709082 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.924727917 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.924734116 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.924771070 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.925429106 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.925491095 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.925520897 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.925534964 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.925539017 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.925569057 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.925579071 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.925582886 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.925620079 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.926448107 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.926495075 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.983818054 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.983884096 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:13.984110117 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.984863997 CEST	49752	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:13.984882116 CEST	443	49752	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.030113935 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.030172110 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.030576944 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.030622005 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.030633926 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.030642033 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.030668974 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.031055927 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:14.031168938 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:14.032124043 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.032174110 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.032179117 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.032208920 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.032248020 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.032255888 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.032987118 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.033031940 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.033055067 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.033060074 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.033085108 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.033519030 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.033564091 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.033569098 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.033612967 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.033659935 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.033850908 CEST	49749	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.033859968 CEST	443	49749	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.055197954 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.055326939 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.055378914 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.055953026 CEST	49751	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.055964947 CEST	443	49751	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.060151100 CEST	49720	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:14.060458899 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.060488939 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.060544968 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.062217951 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.062231064 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.074855089 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.074884892 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.075025082 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.075248957 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.075274944 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.118496895 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.118746996 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.118797064 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.119277954 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.119611025 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.119733095 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.119759083 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.121381998 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.121433020 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.121464014 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.121517897 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.121572018 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.121596098 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.121629000 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.121655941 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.122575045 CEST	49753	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.122602940 CEST	443	49753	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.152690887 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.152820110 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.152879000 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.152905941 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153016090 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153074026 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.153089046 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153177977 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153230906 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.153244019 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153331995 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153397083 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.153409004 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153503895 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153554916 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.153567076 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153671026 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.153727055 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.153738976 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.154267073 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.154356003 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.154412985 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.154426098 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.154479027 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.154491901 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.154592991 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.154649019 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.154660940 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.155167103 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.155234098 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.155246019 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.155323029 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.155378103 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.155390978 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.156042099 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.156146049 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.156178951 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.156193972 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.156285048 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.156337976 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.156358957 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.156404972 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.156917095 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.157069921 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.157131910 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.157144070 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.157233000 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.157289028 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.157301903 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.157361984 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.157545090 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.157802105 CEST	49754	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.157824993 CEST	443	49754	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.161061049 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.161097050 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.289493084 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.289762020 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.289781094 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.290129900 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.290465117 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.290535927 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.290595055 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.297399998 CEST	80	49720	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:14.308012962 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.308239937 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.308250904 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.309298038 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.309380054 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.310334921 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.310391903 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.310466051 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.336110115 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.344497919 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:14.344564915 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:14.346980095 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:14.347040892 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:14.356117964 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.357909918 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.357920885 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.404556036 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.572330952 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.572410107 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.572443008 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.572453976 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.572464943 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.572500944 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.572531939 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.572532892 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.572541952 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.572628975 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.572642088 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.572726011 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.573415041 CEST	49757	443	192.168.2.5	172.67.177.226
Apr 29, 2024 10:30:14.573431015 CEST	443	49757	172.67.177.226	192.168.2.5
Apr 29, 2024 10:30:14.577789068 CEST	49725	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:14.577857971 CEST	49724	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:14.578131914 CEST	49759	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.578160048 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.578382015 CEST	49759	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.578860044 CEST	49759	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.578871012 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.611406088 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.611433983 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.611510992 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.611851931 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.611865044 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.702609062 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.702754974 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.702872038 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.703432083 CEST	49755	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.703464031 CEST	443	49755	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.707267046 CEST	49761	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.707289934 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.707406998 CEST	49761	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.707612991 CEST	49761	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.707623959 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724592924 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724643946 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724679947 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724729061 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724761009 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.724785089 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724879026 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724905014 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.724909067 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724919081 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.724934101 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.725035906 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.725043058 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.725435019 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.725465059 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.725496054 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.725518942 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.725524902 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.725550890 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.726324081 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.726351023 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.726373911 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.726378918 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.726425886 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.726455927 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.726460934 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.726480007 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.726504087 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.726510048 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.727085114 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.727332115 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.727400064 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.727423906 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.727452993 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.727477074 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.727483988 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.727509022 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.728239059 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.728269100 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.728300095 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.728300095 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.728313923 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.728370905 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.728461027 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.728468895 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.729142904 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.729177952 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.729209900 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.729233980 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.729239941 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.729295015 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.729300976 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.729414940 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.730056047 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.730115891 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.730146885 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.730178118 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.730205059 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.730232954 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.730232954 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.730242014 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.730408907 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.731182098 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.731268883 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.771210909 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:14.771282911 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:14.807446003 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.807712078 CEST	49759	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.807720900 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.808197975 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.808911085 CEST	49759	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.808986902 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.809086084 CEST	49759	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.821293116 CEST	80	49725	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:14.824107885 CEST	80	49724	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:14.834636927 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.834769011 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.835130930 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.835164070 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.835191965 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.835201025 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.835230112 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.835623980 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.835656881 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.835684061 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.835690022 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.835714102 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.835764885 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.835834026 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.837553024 CEST	49756	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.837568045 CEST	443	49756	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.838751078 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.841409922 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.841424942 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.841794014 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.844562054 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.844624996 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.844835997 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.845509052 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.845516920 CEST	49728	80	192.168.2.5	185.66.88.174
Apr 29, 2024 10:30:14.845530987 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.846252918 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.846278906 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.846304893 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.846539021 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.846615076 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.846626043 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.846741915 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.846755981 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.847589016 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.847614050 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.847650051 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.847701073 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.847739935 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.847928047 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.847934008 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.847945929 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.848613977 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.848647118 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.856121063 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.889230013 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.889240026 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.936857939 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.937196016 CEST	49761	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.937203884 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.937674046 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.938703060 CEST	49761	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.938781977 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:14.939341068 CEST	49761	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:14.980117083 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.073884964 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.074170113 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.074197054 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.074561119 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.075012922 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.075012922 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.075027943 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.075073957 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.075242996 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.075467110 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.075494051 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.076688051 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.076881886 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.076946974 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.077879906 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.077951908 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.078130960 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.078141928 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.078433990 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.078450918 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.078670979 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.079071045 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.079148054 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.079200983 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.082036972 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.082277060 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.082289934 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.084016085 CEST	80	49728	185.66.88.174	192.168.2.5
Apr 29, 2024 10:30:15.085835934 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.085942030 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.086239100 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.086406946 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.086621046 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.111639023 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.111706018 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.111794949 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.117574930 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.119812965 CEST	49760	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.119839907 CEST	443	49760	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.119878054 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.120145082 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.127985954 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.127994061 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.127998114 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.176367998 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.246126890 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.246166945 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.246335030 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.246503115 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.246515989 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.312122107 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.312278986 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.312693119 CEST	49759	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.313059092 CEST	49759	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.313074112 CEST	443	49759	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.316878080 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.316956043 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.317388058 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.317388058 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.317461967 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.469755888 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.469831944 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.469892025 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.469924927 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.469963074 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.471223116 CEST	49762	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.471241951 CEST	443	49762	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.473310947 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.473366022 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.473440886 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.473479033 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.473568916 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.474127054 CEST	49765	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.474153042 CEST	443	49765	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.475488901 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.475830078 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.475842953 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.475862980 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.475888014 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.475987911 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.476013899 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.476485968 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.476913929 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.477037907 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.478137016 CEST	49763	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.478147030 CEST	443	49763	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.478653908 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.478719950 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.479176044 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.479182959 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.480329037 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.480348110 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.480429888 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.480650902 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.480663061 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.481338978 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.481461048 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.481544018 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.481590986 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.481720924 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.481905937 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.482367992 CEST	49764	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.482391119 CEST	443	49764	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.489134073 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.489161968 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.489252090 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.489445925 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.489469051 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.489517927 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.489705086 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.489715099 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.489870071 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.489883900 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.491873980 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.491899014 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.492116928 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.492116928 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.492144108 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.520282030 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.520559072 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.520658016 CEST	49761	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.521189928 CEST	49761	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.521199942 CEST	443	49761	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.531697989 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.547408104 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.547755957 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.547794104 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.548295975 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.548824072 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.548917055 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.549000025 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.592139959 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.594072104 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.633068085 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.633101940 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:15.633313894 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.633495092 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.633512974 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:15.707972050 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.708250999 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.708260059 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.708715916 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.709925890 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.709989071 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.710035086 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.720969915 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.721196890 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.721211910 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.722246885 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.722317934 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.722676992 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.722676992 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.722750902 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.723217010 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.723444939 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.723454952 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.727068901 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.727183104 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.727497101 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.727629900 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.727669001 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.728315115 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.728622913 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.728638887 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.730154991 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.730525970 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.730525970 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.730609894 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.730628014 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.738091946 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738181114 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738214970 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738251925 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738277912 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.738286018 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738312006 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.738409042 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738436937 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738461971 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.738467932 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738529921 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.738538027 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.738571882 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.740403891 CEST	49766	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.740415096 CEST	443	49766	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.744813919 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.744843006 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.745255947 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.747004032 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.747016907 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.750577927 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.750587940 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.765563965 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.765579939 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.772120953 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.781482935 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.781483889 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.781490088 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.781493902 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:15.811116934 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.827052116 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.827052116 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:15.866231918 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:15.866506100 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.866518021 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:15.868006945 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:15.868216991 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.869194984 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.869194984 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.869208097 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:15.869272947 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:15.924680948 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.924696922 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:15.969830990 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:15.974570036 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.974951029 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.974978924 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.975315094 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.976135969 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:15.976198912 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:15.976667881 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.020129919 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.094984055 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.095082998 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.095190048 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.095581055 CEST	49773	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.095599890 CEST	443	49773	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.095781088 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.095820904 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.098980904 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.099752903 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.099764109 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.103241920 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.103291035 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.103346109 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.103534937 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.104578018 CEST	49769	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.104588985 CEST	443	49769	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.130625010 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.130681992 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.130752087 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.130772114 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.130783081 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.130836964 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.132714033 CEST	49772	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.132735968 CEST	443	49772	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.132767916 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.132905006 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.133125067 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.133136988 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.133738995 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.133769989 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.133928061 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.134123087 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.134156942 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.134609938 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.134804964 CEST	49771	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.134816885 CEST	443	49771	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.136246920 CEST	49770	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.136256933 CEST	443	49770	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.243258953 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243357897 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243390083 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243410110 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.243421078 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243429899 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243535995 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.243549109 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243622065 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.243626118 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243943930 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243971109 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.243998051 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.244015932 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.244021893 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.244051933 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.244055986 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.244077921 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.244107962 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.244127989 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.246220112 CEST	49774	443	192.168.2.5	172.67.205.30
Apr 29, 2024 10:30:16.246236086 CEST	443	49774	172.67.205.30	192.168.2.5
Apr 29, 2024 10:30:16.308784962 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.308837891 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.308876038 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.308911085 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.308944941 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.308963060 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.308974981 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.308989048 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.309004068 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.309050083 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.309192896 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.309259892 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.309309959 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.309317112 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.309339046 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.309726000 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.309962988 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310030937 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310066938 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310100079 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310102940 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.310121059 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310168982 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.310318947 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.310785055 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310852051 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310885906 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310915947 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.310923100 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.310935974 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.311109066 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.311125040 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.311279058 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.311764956 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.311815023 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.311847925 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.311877966 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.311882019 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.311897039 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.311929941 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.312681913 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.312717915 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.312750101 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.312777042 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.312793016 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.312825918 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.312839031 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.313589096 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.313618898 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.313647032 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.313652039 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.313667059 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.313699007 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.313781977 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.313819885 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.314049959 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.314049959 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.324450016 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.324652910 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.324671984 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.325190067 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.325552940 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.325632095 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.325638056 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.325669050 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.372927904 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.417645931 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:16.417675972 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:16.417849064 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:16.417983055 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:16.417994022 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:16.487387896 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.487445116 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.487531900 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.487804890 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.487852097 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.559582949 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.559680939 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.559968948 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.559988022 CEST	443	49775	35.190.80.1	192.168.2.5
Apr 29, 2024 10:30:16.560017109 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.560159922 CEST	49775	443	192.168.2.5	35.190.80.1
Apr 29, 2024 10:30:16.625678062 CEST	49767	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.625698090 CEST	443	49767	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.646248102 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:16.646469116 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:16.646487951 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:16.647532940 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:16.647588015 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:16.648597956 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:16.648660898 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:16.648830891 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:16.648837090 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:16.689182997 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:16.714773893 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.715017080 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.715044975 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.715445995 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.715783119 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.715861082 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.715950012 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:16.756118059 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:16.758959055 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:17.008049011 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:17.008178949 CEST	443	49776	104.21.80.104	192.168.2.5
Apr 29, 2024 10:30:17.008230925 CEST	49776	443	192.168.2.5	104.21.80.104
Apr 29, 2024 10:30:17.117861986 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.117908001 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.117939949 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.117970943 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.117997885 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:17.118001938 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118033886 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118068933 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:17.118092060 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118097067 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:17.118112087 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118175030 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:17.118283987 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118334055 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118366957 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118396997 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118417025 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:17.118439913 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118463993 CEST	49777	443	192.168.2.5	104.21.95.127
Apr 29, 2024 10:30:17.118530989 CEST	443	49777	104.21.95.127	192.168.2.5
Apr 29, 2024 10:30:17.118630886 CEST	49777	443	192.168.2.5	104.21.95.127

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 29, 2024 10:29:55.850771904 CEST	53	62269	1.1.1.1	192.168.2.5
Apr 29, 2024 10:29:55.905571938 CEST	53	64639	1.1.1.1	192.168.2.5
Apr 29, 2024 10:29:56.562521935 CEST	53	50108	1.1.1.1	192.168.2.5
Apr 29, 2024 10:29:57.244431019 CEST	59781	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:29:57.244569063 CEST	55181	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:29:57.550707102 CEST	53	55181	1.1.1.1	192.168.2.5
Apr 29, 2024 10:29:57.552006960 CEST	53	59781	1.1.1.1	192.168.2.5
Apr 29, 2024 10:29:58.731529951 CEST	65024	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:29:58.734709978 CEST	49854	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:29:59.034843922 CEST	53	65024	1.1.1.1	192.168.2.5
Apr 29, 2024 10:29:59.039902925 CEST	53	49854	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:00.432035923 CEST	54998	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:00.432621956 CEST	53565	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:00.542475939 CEST	53	54998	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:00.543617010 CEST	53	53565	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:03.526799917 CEST	53	64669	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:08.766947985 CEST	65325	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:08.767333984 CEST	62866	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:08.884871960 CEST	53	62866	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:08.895658970 CEST	53	65325	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:08.905885935 CEST	53	49885	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:10.449009895 CEST	55840	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:10.449158907 CEST	49759	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:10.609426022 CEST	53	55840	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:10.610045910 CEST	53	49759	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:11.552465916 CEST	59989	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:11.552645922 CEST	64172	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:11.709919930 CEST	53	64172	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:11.711050987 CEST	53	59989	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:13.488848925 CEST	57099	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:13.489074945 CEST	64052	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:13.602380037 CEST	53	57099	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:13.648988008 CEST	53	64052	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:13.928733110 CEST	63752	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:13.928890944 CEST	62864	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:14.041115046 CEST	53	62864	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:14.048840046 CEST	53	52837	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:14.074318886 CEST	53	63752	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:14.098129988 CEST	53	58540	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:15.132776976 CEST	59124	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:15.133063078 CEST	60199	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:15.245094061 CEST	53	60199	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:15.245675087 CEST	53	59124	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:15.521887064 CEST	57671	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:15.521887064 CEST	57073	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:15.632328033 CEST	53	57073	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:15.632347107 CEST	53	57671	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:16.287333012 CEST	61659	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:16.287333012 CEST	59217	53	192.168.2.5	1.1.1.1
Apr 29, 2024 10:30:16.400260925 CEST	53	61659	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:16.416765928 CEST	53	59217	1.1.1.1	192.168.2.5
Apr 29, 2024 10:30:16.574052095 CEST	53	54977	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 29, 2024 10:29:59.034918070 CEST	192.168.2.5	1.1.1.1	c217	(Port unreachable)	Destination Unreachable
Apr 29, 2024 10:30:13.649046898 CEST	192.168.2.5	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 29, 2024 10:29:57.244431019 CEST	192.168.2.5	1.1.1.1	0x4d61	Standard query (0)	sdfsd.s3.bhs.cloud.ovh.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:29:57.244569063 CEST	192.168.2.5	1.1.1.1	0x270f	Standard query (0)	sdfsd.s3.bhs.cloud.ovh.net	65	IN (0x0001)	false
Apr 29, 2024 10:29:58.731529951 CEST	192.168.2.5	1.1.1.1	0x9869	Standard query (0)	sdfsd.s3.bhs.cloud.ovh.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:29:58.734709978 CEST	192.168.2.5	1.1.1.1	0xde19	Standard query (0)	sdfsd.s3.bhs.cloud.ovh.net	65	IN (0x0001)	false
Apr 29, 2024 10:30:00.432035923 CEST	192.168.2.5	1.1.1.1	0x3591	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:00.432621956 CEST	192.168.2.5	1.1.1.1	0x7efd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 29, 2024 10:30:08.766947985 CEST	192.168.2.5	1.1.1.1	0x7707	Standard query (0)	jantyport.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:08.767333984 CEST	192.168.2.5	1.1.1.1	0x2c08	Standard query (0)	jantyport.com	65	IN (0x0001)	false
Apr 29, 2024 10:30:10.449009895 CEST	192.168.2.5	1.1.1.1	0xe26e	Standard query (0)	persistdrum.cfd	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:10.449158907 CEST	192.168.2.5	1.1.1.1	0x1b88	Standard query (0)	persistdrum.cfd	65	IN (0x0001)	false
Apr 29, 2024 10:30:11.552465916 CEST	192.168.2.5	1.1.1.1	0x4794	Standard query (0)	ossiaband.cfd	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:11.552645922 CEST	192.168.2.5	1.1.1.1	0xa246	Standard query (0)	ossiaband.cfd	65	IN (0x0001)	false
Apr 29, 2024 10:30:13.488848925 CEST	192.168.2.5	1.1.1.1	0x1488	Standard query (0)	ossiaband.cfd	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:13.489074945 CEST	192.168.2.5	1.1.1.1	0xbdd	Standard query (0)	ossiaband.cfd	65	IN (0x0001)	false
Apr 29, 2024 10:30:13.928733110 CEST	192.168.2.5	1.1.1.1	0xb629	Standard query (0)	trk-adulvion.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:13.928890944 CEST	192.168.2.5	1.1.1.1	0x74bf	Standard query (0)	trk-adulvion.com	65	IN (0x0001)	false
Apr 29, 2024 10:30:15.132776976 CEST	192.168.2.5	1.1.1.1	0x4101	Standard query (0)	trk-amropode.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:15.133063078 CEST	192.168.2.5	1.1.1.1	0xd72a	Standard query (0)	trk-amropode.com	65	IN (0x0001)	false
Apr 29, 2024 10:30:15.521887064 CEST	192.168.2.5	1.1.1.1	0xfdd0	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:15.521887064 CEST	192.168.2.5	1.1.1.1	0x3bc9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 29, 2024 10:30:16.287333012 CEST	192.168.2.5	1.1.1.1	0xc923	Standard query (0)	event.trk-adulvion.com	65	IN (0x0001)	false
Apr 29, 2024 10:30:16.287333012 CEST	192.168.2.5	1.1.1.1	0xb7e6	Standard query (0)	event.trk-adulvion.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 29, 2024 10:29:57.550707102 CEST	1.1.1.1	192.168.2.5	0x270f	No error (0)	sdfsd.s3.bhs.cloud.ovh.net	storage.bhs.cloud.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 10:29:57.552006960 CEST	1.1.1.1	192.168.2.5	0x4d61	No error (0)	sdfsd.s3.bhs.cloud.ovh.net	storage.bhs.cloud.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 10:29:57.552006960 CEST	1.1.1.1	192.168.2.5	0x4d61	No error (0)	storage.bhs.cloud.ovh.net		142.44.227.102	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:29:59.034843922 CEST	1.1.1.1	192.168.2.5	0x9869	No error (0)	sdfsd.s3.bhs.cloud.ovh.net	storage.bhs.cloud.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 10:29:59.034843922 CEST	1.1.1.1	192.168.2.5	0x9869	No error (0)	storage.bhs.cloud.ovh.net		142.44.227.102	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:29:59.039902925 CEST	1.1.1.1	192.168.2.5	0xde19	No error (0)	sdfsd.s3.bhs.cloud.ovh.net	storage.bhs.cloud.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 10:30:00.542475939 CEST	1.1.1.1	192.168.2.5	0x3591	No error (0)	www.google.com		142.250.191.164	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:00.543617010 CEST	1.1.1.1	192.168.2.5	0x7efd	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 29, 2024 10:30:08.895658970 CEST	1.1.1.1	192.168.2.5	0x7707	No error (0)	jantyport.com		193.163.199.51	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:10.432106972 CEST	1.1.1.1	192.168.2.5	0xaa22	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 10:30:10.432106972 CEST	1.1.1.1	192.168.2.5	0xaa22	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:10.609426022 CEST	1.1.1.1	192.168.2.5	0xe26e	No error (0)	persistdrum.cfd		172.67.219.132	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:10.609426022 CEST	1.1.1.1	192.168.2.5	0xe26e	No error (0)	persistdrum.cfd		104.21.45.222	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:10.610045910 CEST	1.1.1.1	192.168.2.5	0x1b88	No error (0)	persistdrum.cfd			65	IN (0x0001)	false
Apr 29, 2024 10:30:11.709919930 CEST	1.1.1.1	192.168.2.5	0xa246	No error (0)	ossiaband.cfd			65	IN (0x0001)	false
Apr 29, 2024 10:30:11.711050987 CEST	1.1.1.1	192.168.2.5	0x4794	No error (0)	ossiaband.cfd		104.21.95.127	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:11.711050987 CEST	1.1.1.1	192.168.2.5	0x4794	No error (0)	ossiaband.cfd		172.67.144.245	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:13.602380037 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	ossiaband.cfd		104.21.95.127	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:13.602380037 CEST	1.1.1.1	192.168.2.5	0x1488	No error (0)	ossiaband.cfd		172.67.144.245	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:13.648988008 CEST	1.1.1.1	192.168.2.5	0xbdd	No error (0)	ossiaband.cfd			65	IN (0x0001)	false
Apr 29, 2024 10:30:14.041115046 CEST	1.1.1.1	192.168.2.5	0x74bf	No error (0)	trk-adulvion.com			65	IN (0x0001)	false
Apr 29, 2024 10:30:14.074318886 CEST	1.1.1.1	192.168.2.5	0xb629	No error (0)	trk-adulvion.com		172.67.177.226	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:14.074318886 CEST	1.1.1.1	192.168.2.5	0xb629	No error (0)	trk-adulvion.com		104.21.80.104	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:15.245094061 CEST	1.1.1.1	192.168.2.5	0xd72a	No error (0)	trk-amropode.com			65	IN (0x0001)	false
Apr 29, 2024 10:30:15.245675087 CEST	1.1.1.1	192.168.2.5	0x4101	No error (0)	trk-amropode.com		172.67.205.30	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:15.245675087 CEST	1.1.1.1	192.168.2.5	0x4101	No error (0)	trk-amropode.com		104.21.22.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:15.632347107 CEST	1.1.1.1	192.168.2.5	0xfdd0	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:16.400260925 CEST	1.1.1.1	192.168.2.5	0xc923	No error (0)	event.trk-adulvion.com			65	IN (0x0001)	false
Apr 29, 2024 10:30:16.416765928 CEST	1.1.1.1	192.168.2.5	0xb7e6	No error (0)	event.trk-adulvion.com		104.21.80.104	A (IP address)	IN (0x0001)	false
Apr 29, 2024 10:30:16.416765928 CEST	1.1.1.1	192.168.2.5	0xb7e6	No error (0)	event.trk-adulvion.com		172.67.177.226	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sdfsd.s3.bhs.cloud.ovh.net

185.66.88.174

jantyport.com

https:

persistdrum.cfd

www.bing.com

ossiaband.cfd

trk-adulvion.com

trk-amropode.com

a.nel.cloudflare.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49716	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:01.259601116 CEST	428	OUT	GET / HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:01.503874063 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:01 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 X-Powered-By: PHP/7.1.33 Cache-Control: max-age=2592000 Expires: Wed, 29 May 2024 08:30:01 GMT Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 38 61 32 0d 0a 20 3c 73 63 72 69 70 74 3e 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 20 2b 20 27 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 [TRUNCATED] Data Ascii: 68a2 <script>if(window.location.hash.length > 0) window.location.href = window.location.origin + '/' + window.location.hash.replace("#","");</script><!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <link href="https://fonts.googleapis.com/css?family=Raleway:100,200,300,400,500,600,700,800,900&display=swap" rel="stylesheet"> <title>OFFERTO</title> <link rel="stylesheet" type="text/css" href="assets/css/bootstrap.min.css"> <link rel="stylesheet" type="text/css" href="assets/css/font-awesome.css"> <link rel="stylesheet" href="assets/css/templatemo-breezed.css"> <link rel="stylesheet" href="assets/css/owl-carousel.css"> <link rel="stylesheet" href="assets/css/lightbox
Apr 29, 2024 10:30:01.503914118 CEST	1289	IN	Data Raw: 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 20 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 72 65 6c 6f 61 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 75 6d 70 65 72 22 3e 3c Data Ascii: .css"> </head> <body> <div id="preloader"><div class="jumper"><div></div><div></div><div></div></div></div> <header class="header-area header-sticky"> <div class="container"> <div cla
Apr 29, 2024 10:30:01.503952980 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 73 6c 69 64 65 2d 30 31 2e 6a 70 67 22 20 61 6c 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: <img src="assets/images/slide-01.jpg" alt=""> <div class="text-content"> <h5>Welcome To OFFERTO</h5> <a href="#" class="main-stroked-button">Learn More</a>
Apr 29, 2024 10:30:01.503992081 CEST	1289	IN	Data Raw: 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c Data Ascii: /div> </div> </div> </div> </div> <div class="scroll-down scroll-to-section"><a href="#about"><i class="fa fa-arrow-down"></i></a></div> <section class="section" id="about
Apr 29, 2024 10:30:01.504029989 CEST	1289	IN	Data Raw: 70 6e 67 22 20 61 6c 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 52 6f 62 75 73 74 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: png" alt=""> <h4>Robust</h4> </div> </div> <div class="col-md-6 col-sm-6">
Apr 29, 2024 10:30:01.504069090 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 Data Ascii: </div> </div> </section> <section class="section" id="features"> <div class="container"> <div class="row"> <div class="col-lg-4 col-md-6 col-sm-12 co
Apr 29, 2024 10:30:01.504125118 CEST	1289	IN	Data Raw: 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 65 61 74 75 72 65 73 2d 69 63 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: m"> <div class="features-icon"> <img src="assets/images/features-icon-1.png" alt=""> </div> <div class="features-content">
Apr 29, 2024 10:30:01.504163980 CEST	1289	IN	Data Raw: 20 75 6c 74 72 69 63 69 65 73 2c 20 75 74 20 66 61 75 63 69 62 75 73 20 76 65 6c 69 74 20 75 6c 74 72 69 63 69 65 73 2e 20 4e 61 6d 20 65 75 20 74 75 72 70 69 73 20 71 75 61 6d 2e 20 44 75 69 73 20 61 63 20 63 6f 6e 64 69 6d 65 6e 74 75 6d 20 65 Data Ascii: ultricies, ut faucibus velit ultricies. Nam eu turpis quam. Duis ac condimentum eros.</p> <a href="#" class="text-button-icon"> Learn More <i class="fa fa-arrow-right"></i>
Apr 29, 2024 10:30:01.504203081 CEST	1289	IN	Data Raw: 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 38 20 63 6f 6c 2d 73 6d 2d 31 32 22 3e 0d 0a 20 20 20 20 Data Ascii: "> <div class="col-md-8 col-sm-12"> <fieldset> <input name="email" type="text" id="email" placeholder="Enter your
Apr 29, 2024 10:30:01.504244089 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 6c 74 65 72 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </div> <div class="filters"> <ul> <li class="active" data-filter="*">All</li> <li data-filter=".des">Web Design</li>
Apr 29, 2024 10:30:01.746416092 CEST	1289	IN	Data Raw: 61 2d 6c 69 67 68 74 62 6f 78 3d 22 69 6d 61 67 65 2d 31 22 20 64 61 74 61 2d 74 69 74 6c 65 3d 22 4f 75 72 20 50 72 6f 6a 65 63 74 73 22 3e 3c 69 6d 67 20 73 72 63 3d 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 70 72 6f 6a 65 63 74 2d 69 74 65 Data Ascii: a-lightbox="image-1" data-title="Our Projects"><img src="assets/images/project-item-02.jpg" alt=""></a> </div> </div> <div class="col-lg-4 col-md-4 col-sm
Apr 29, 2024 10:30:03.417304039 CEST	341	OUT	GET /assets/css/bootstrap.min.css HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:03.671247959 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:03 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Mon, 08 Jul 2019 19:53:30 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Wed, 29 May 2024 08:30:03 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 23243 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 8f e4 36 92 e0 f7 03 ee 3f e4 96 d1 e8 6e 3b 33 5b ca 77 66 c1 c6 3c 30 8b 1b 60 3c 1f c6 bb c0 02 be 3e 40 99 52 3e a6 95 8f 93 b2 ba 54 2e d4 fe f6 e3 53 62 90 11 94 94 a5 b2 bd 77 37 1e bb 94 54 30 18 8c 08 06 23 28 32 f8 e9 db 7f f9 ef ff ad f7 6d ef 4f e7 f3 35 bf 66 d1 a5 f7 75 32 1c 0f c3 de 87 fd f5 7a c9 57 9f 3e ed 92 eb 5a bf 1c 6e ce c7 4f 1f 45 85 3f 9f 2f 4f d9 61 b7 bf f6 46 41 18 0e d8 7f 96 bd 7f db 27 06 a2 3f 3e 5c f7 e7 2c a7 a1 1f 0f d7 6b 92 f5 7b 7f 3d 6d 86 02 ea 6f 87 4d 72 ca 93 b8 f7 70 8a 93 ac f7 e3 5f ff cd 20 e3 70 dd 3f ac 05 01 d7 c7 75 fe a9 a4 e9 d3 3a 3d af 3f 1d a3 9c e1 fa f4 b7 bf fe f9 2f 7f ff e9 2f 82 c4 4f ab 8c c1 3c 0f 06 eb f4 21 59 7d 13 04 f3 f5 76 7b 3f 18 1c 4e f1 61 77 5e 7d 33 9b 85 c1 76 c4 0a 2e 0f d9 25 65 10 b3 ed 64 b4 09 79 c1 e1 f4 65 f5 4d b2 18 27 8b 0d fb 99 25 f1 ea 9b 78 33 9e 4e a6 ec d7 39 8b 4e 3b 06 bd 8d e7 49 38 61 05 4f 49 9a 9e 1f 59 c1 76 13 06 73 56 b0 cb 92 e4 b4 fa 66 b4 88 e6 a2 c6 35 [TRUNCATED] Data Ascii: }k6?n;3[wf<0`<>@R>T.Sbw7T0#(2mO5fu2zW>ZnOE?/OaFA'?>\,k{=moMrp_ p?u:=?//O<!Y}v{?Naw^}3v.%edyeM'%x3N9N;I8aOIYvsVf5R3,)boy4Z/vYXQO$ec=f$ynPq8mfQv:v1Wf4cr@:K/t\|v)`1^g4]Zpx{fxHytYv5.LpScIWVS;']z$\!1;Die'_5#oiozz9yp?=Na3kY}8OmO#{#=Q19>+6FyouE?#O%oUjZ's< ?e>gl\XzLVU>!Sdpe\\9d\| xW.=$f_zbeeiC&.'Q)gJC~I a~e}pNLA6g(?K{oF
Apr 29, 2024 10:30:04.557975054 CEST	385	OUT	GET /assets/images/slide-02.jpg HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:04.800839901 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:04 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Fri, 06 Dec 2019 20:23:12 GMT Accept-Ranges: bytes Content-Length: 46372 Cache-Control: max-age=31536000 Expires: Tue, 29 Apr 2025 08:30:04 GMT Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e1 07 28 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 40 06 00 00 01 01 03 00 01 00 00 00 20 03 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d0 00 00 00 69 87 04 00 01 00 00 00 e4 00 00 00 1c 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 39 3a 31 32 3a 30 36 20 32 31 3a 32 33 3a 31 33 00 04 00 00 90 07 00 04 00 00 00 30 32 32 31 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 6a 01 00 00 1b 01 05 00 01 00 00 00 72 01 00 00 28 01 03 00 [TRUNCATED] Data Ascii: (ExifII*@ (12i''Adobe Photoshop CS5 Windows2019:12:06 21:23:130221@ jr(zHHAdobe_CMAdobedP"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?8o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:03.418009996 CEST	340	OUT	GET /assets/css/font-awesome.css HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:03.664216995 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:03 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Wed, 16 Jan 2019 21:22:24 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Wed, 29 May 2024 08:30:03 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 7489 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5d 5d 8f e4 b8 75 7d 37 e0 ff 50 d9 85 b3 33 46 57 4f 4b fd 51 dd 63 38 f6 26 86 11 03 76 6c c4 6b 20 0f 79 a1 24 aa c4 6d 49 d4 50 52 55 d7 04 fb df 43 4a f5 c1 43 a9 8e 3a c0 be 64 60 8c 77 a4 7b 29 7e dc 7b 79 49 9e c3 fa f4 eb 7f fa e5 2f 56 bf 5e ad fe a8 eb 6e f5 fd 5e b6 ba 92 ab 87 db cd ed dd 2a 39 ac 7e 9f 89 9d dc 8a 3a 3b ac d6 ab a2 eb 9a cf 9f 3e e5 56 52 8c 82 b7 4a db e7 bf f7 9e 8c 85 fd 59 a5 b2 6e e5 35 9d 4f e5 f1 fd 07 f7 d5 cf ab bf ff e9 cf ab bf fe f1 cf ab e8 36 ba 59 fd db df ff fe 79 f5 97 3f fd 70 2a e4 a3 2b f2 d3 2f 7f f1 e9 d7 ab 3f fe f5 3f 7e 58 fd ed fb 1f fe 7d f8 ca fa ea 9f 41 7e a8 d5 3a 17 a9 5c fd 8f 95 5f 1d ff 59 a9 f2 f0 79 f5 9d fb f0 b1 b5 df fd c6 bd 6e 4d fa 79 d5 9b f2 c3 77 b7 b7 43 75 5b bf d2 eb bd 4c dc 3f 6f a5 ee 7e b7 fb ed d0 3f df 7d fc bf 2a 7e ab 64 ae de fe f9 ac 6f eb 64 2a d1 7d f8 4e 56 89 cc 32 99 ad 75 23 eb ee d0 c8 ef 3e de bc a3 cc bd ce f3 f8 77 d3 e2 86 e7 ef 2f e2 4a 09 ef 2b a0 eb e6 f4 3b d3 cb [TRUNCATED] Data Ascii: ]]u}7P3FWOKQc8&vlk y$mIPRUCJC:d`w{)~{yI/V^n^9~:;>VRJYn5O6Yy?p+/??~X}A~:\_YynMywCu[L?o~?}~dod}NV2u#>w/J+;mOe\|7rxZcj[X_b4LM)T\'N_'S]i4w[YgI}ZWi@)Qln&[#mJ96D%^e9Tfu4+#K\uzxR]Rfp)rGVC}}wy<>I)[ZG:w:~>*q=/t44ue][[P8%/VXnUi.S'?6v)Rq^t;6>n`bF+='6"S}k4}Y~R[) 1TAhxr)8f4[#H[lLE'hW:L{GPUvMlUB8%je`\|qkC]j!,3{%/
Apr 29, 2024 10:30:03.664258003 CEST	1289	IN	Data Raw: d4 ca c5 6f 45 5e 09 6d 27 9b f6 c3 f3 c7 6b 5f bb 22 6b bf f7 fb d3 17 5e e5 21 37 a2 b2 e1 12 1a 7b f7 ab f1 ff 2f 55 e9 8c a8 5b 37 e5 d8 91 d1 9d 1d c9 0f 77 99 dc 8e 9f b6 3e 43 de fe e4 fe 8a ee de 53 e4 fd e3 0b 2d d4 7f ff d3 d8 90 ff ef Data Ascii: oE^m'k_"k^!7{/U[7w>CS-p#?\Gj;iON%EF:nU~&70Nkri /xkm%[lEZqVi/U.Q_]^SlMYUmu]DMo)Y
Apr 29, 2024 10:30:03.664295912 CEST	1289	IN	Data Raw: b5 0e df c4 4b 29 c8 f2 e6 c9 37 ec 5c d1 b1 f1 cd 59 1e 98 a4 44 c9 75 5b 0a b6 94 dc f8 d6 6c 6d a6 76 a7 d9 60 36 7e 47 75 46 89 7a cb ba 6a 13 c1 48 8b 9a c9 42 64 17 a5 ac 33 b6 a1 b7 f1 cd 7c dc 0c 25 c2 0f 68 a0 15 4d 2d 37 10 ca c5 b6 96 Data Ascii: K)7\YDu[lmv`6~GuFzjHBd3\|%hM-7L00lfKo\|6KZ#B7Cqt'utn[,'$E40j%wv:/W!(6 wny.nd}$w\|mQfSga}p9(I
Apr 29, 2024 10:30:03.664335012 CEST	1289	IN	Data Raw: 2a 0f 43 a6 42 8b 87 83 df 52 b0 59 29 02 80 f1 20 3c 60 20 ec 8a 8e 55 c9 b7 3d 3b 71 54 8a 01 dc a3 18 8c 8f c1 5a a3 78 de f4 ac e9 94 33 e6 e7 3d 9e 2b cb 37 c1 f3 09 cf 5a 56 4d 17 d8 f2 e5 65 de 87 1f ba bc 23 bd 08 b8 e6 52 a7 e3 71 f6 b0 Data Ascii: *CBRY) <` U=;qTZx3=+7ZVMe#RqF C1,A:}vN)2['FS'=A\|MjHDs'H#M's%I~r,C~Jst?`hg+q6U[6G[L
Apr 29, 2024 10:30:03.664393902 CEST	1289	IN	Data Raw: c1 50 45 49 82 b6 41 af 76 89 12 c8 e5 e5 4e 89 ba 63 ec c8 28 c1 0d 9a be ce 38 16 3f 4a 7c ab ce 44 27 12 06 2e 8b 80 24 30 ec 32 35 19 3d c6 05 5e c0 a0 e0 66 4e aa 11 87 1a 36 0f 94 0c d6 15 a5 f7 93 5a b9 0b e5 1a ad 28 22 33 02 72 40 7e c4 Data Ascii: PEIAvNc(8?J\|D'.$025=^fN6Z("3r@~t:do[fw4C,Wu\/mSoa=LG)"3~lvS";Zri>zczm4/la-EcsLIGw/]U?
Apr 29, 2024 10:30:03.664437056 CEST	1289	IN	Data Raw: 94 e4 ae c0 86 18 76 28 6a 6b 6f eb b4 64 09 2f f0 20 d2 92 31 d0 62 20 40 24 a2 1c cf 5a 53 86 60 8b 81 06 51 e8 de 0c bf 14 c6 da 0c 2c 87 8b 46 60 be 97 17 2d 3d 56 8c 81 e5 70 d1 8a af 15 c7 3d 0b e8 0d 17 a5 fb 6b a5 49 96 17 03 df e1 ac 43 Data Ascii: v(jkod/ 1b @$ZS`Q,F`-=Vp=kIC'wmHbpq?N.;mF6Vr.slKRC_BcJb$mFdN#M,]?8N14'v+ES44OAg~u^;1p@gq[iVN3
Apr 29, 2024 10:30:03.664469957 CEST	162	IN	Data Raw: 37 cb bb df c0 9c a8 a4 ec d8 d9 f0 85 36 d1 da 09 b3 2e 0f a3 4c a3 5b 35 2c 19 57 22 69 ed 7a b0 93 bf 71 8f f7 2a b3 de bb 8a 9a b7 e1 9f 85 1c 70 d0 e7 7f 37 36 23 70 cb 8d d5 dd f0 cf 4a 18 bb b6 ff bc 5a 9f de 9f ef 0b 5a 15 2a cb 64 3d 3c Data Ascii: 76.L[5,W"izqp76#pJZZd=<~gd*1gD7vSGcT-U~_yG
Apr 29, 2024 10:30:03.724680901 CEST	385	OUT	GET /assets/images/slide-01.jpg HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:03.966459036 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:03 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Fri, 06 Dec 2019 20:25:04 GMT Accept-Ranges: bytes Content-Length: 44415 Cache-Control: max-age=31536000 Expires: Tue, 29 Apr 2025 08:30:03 GMT Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e1 06 cc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 40 06 00 00 01 01 03 00 01 00 00 00 20 03 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d0 00 00 00 69 87 04 00 01 00 00 00 e4 00 00 00 1c 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 39 3a 31 32 3a 30 36 20 32 31 3a 32 35 3a 30 34 00 04 00 00 90 07 00 04 00 00 00 30 32 32 31 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 6a 01 00 00 1b 01 05 00 01 00 00 00 72 01 00 00 28 01 03 00 [TRUNCATED] Data Ascii: ExifII*@ (12i''Adobe Photoshop CS5 Windows2019:12:06 21:25:040221@ jr(zJHHAdobe_CMAdobedP"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?jub
Apr 29, 2024 10:30:03.966500998 CEST	1289	IN	Data Raw: b6 84 c0 14 e2 51 42 fb 52 d5 38 2a 70 82 2f bb 08 2a 40 27 26 3b 26 2e 05 35 36 c8 48 ee 98 9d 79 51 94 e9 a5 20 2b 45 20 98 29 42 05 2a 4e 92 78 4d 4a e0 a7 09 80 4e 82 97 09 d3 05 24 0a 97 09 6a 92 70 0a 16 9a 7f ff d0 a4 14 a0 a1 89 53 0e 2a Data Ascii: QBR8p/@'&;&.56HyQ +E )BNxMJN$jpS.RxRioJEqyB5H5R=KtA1,x)M$C()qO!PTSJpTFjs(KoAA;
Apr 29, 2024 10:30:03.966780901 CEST	1289	IN	Data Raw: 00 00 42 6c 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 72 64 54 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 42 6c 64 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 52 73 6c 74 55 6e 74 46 23 50 78 6c Data Ascii: Bl doub@oBrdTUntF#RltBld UntF#RltRsltUntF#Pxl@RvectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@Y8BIMHH8BIM&
Apr 29, 2024 10:30:03.966820002 CEST	1289	IN	Data Raw: 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 Data Ascii: gndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongleftOutsetlongbottomOutsetlongrightOutsetlong8BIM(?8BIM8BIM8BIMfPJ
Apr 29, 2024 10:30:03.966857910 CEST	1289	IN	Data Raw: 69 c5 c3 f7 42 05 49 9a ef 8a 23 5f 22 00 77 c5 09 ae 0e fa 31 a7 8a 96 e7 78 04 d2 96 c3 03 e4 6e 6c fc 51 c0 1d 82 a4 2d b4 70 54 86 45 c3 b8 3f 10 9a 54 dd 81 e0 97 b5 a2 4c 01 e2 aa 0b 72 1d c1 fb 82 98 a2 c7 ff 00 38 4c 7c 53 55 49 0e 5d 20 Data Ascii: iBI#_"w1xnlQ-pTE?TLr8L\|SUI] 2xp(6yV4NVNL?F)Is<Jp8' '!uRBJfhH;O0yC8p' @DAkyB`,'Tc"dG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:03.661771059 CEST	346	OUT	GET /assets/css/templatemo-breezed.css HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:03.935184002 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:03 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Fri, 06 Dec 2019 21:35:42 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Wed, 29 May 2024 08:30:03 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 5682 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 73 db 48 72 df 55 a5 ff 80 d8 e5 58 72 08 18 20 05 4a a2 ea 72 af ac 53 5b 75 97 5c ad f7 c3 a5 92 7c 00 89 21 89 15 08 f0 00 50 92 57 a5 ff 9e 9e 27 e6 89 97 bd 5b 2e 67 25 53 26 80 e9 9e 99 9e 9e 9e 7e 4c 0f de bf 3b 3f 3b 3f fb 53 85 d0 cf 28 f5 7e 44 87 63 9e 34 08 df db 37 cd b1 5e bd 7f df b0 7b 87 32 d8 94 87 f7 cd c1 8f af 16 fe 9a 42 e0 82 ef de e3 bf ef df 79 fe 98 9f f3 b3 1f 93 75 8e bc 72 eb 6d ca a2 41 45 53 9f 9f 8d c2 40 90 84 51 e0 6d 01 de fb 67 af 42 35 6a bc 4d 0d 78 c2 79 40 2f e1 eb 22 f0 76 79 b9 4e 72 af 6e 3e e5 08 3f bd 0a bc 3d 4a 52 54 c1 f7 38 f0 d6 49 51 90 ef 4b c0 85 92 e6 54 91 52 d7 81 d7 a0 ba c9 0e 65 91 25 39 be 73 13 90 b6 26 1b 8c f7 16 57 5c 36 18 30 0a 03 ef 58 a1 bc a4 38 23 68 53 8d 92 6a b3 87 ef d0 92 63 59 35 db 32 cf 4a 4c a7 51 fd f3 30 6d 81 b2 23 c1 ce cf 4c 92 8c ab 97 8e ea 1f b2 03 6e bb 77 aa f2 8b 57 9c 1f 30 ea 3a d8 95 e5 2e 47 c9 31 ab 09 57 40 15 bf df 26 87 2c ff f4 bb bf 95 c7 63 56 d4 ab 28 0c 67 73 [TRUNCATED] Data Ascii: =ksHrUXr JrS[u\\|!PW'[.g%S&~L;?;?S(~Dc47^{2ByurmAES@QmgB5jMxy@/"vyNrn>?=JRT8IQKTRe%9s&W\60X8#hSjcY52JLQ0m#LnwW0:.G1W@&,cV(gs,s>K\>anZN93o]f^=3/9srJh#\|b,gp'`X,>KB{kv3o2Pnz0au:1;?urCDT="Ok4!@E0HqM4%\|?'6pyEi4JL69VS&92j+/WGrV5OM^)@IVSL(W+f5O+JwrY5Pj)m\GnFWjh *?_0^!zAO58[yEY QUg:O~LC[291T?$9zL><\~l{'=2lqyzC+Do'O4h}Ac'}H$z(eh~2
Apr 29, 2024 10:30:03.935223103 CEST	1289	IN	Data Raw: 0a ee aa e4 53 bd 81 1e f0 be 26 b4 8b a4 ce 14 6d ca 2a c1 24 a6 83 e0 fd 13 15 97 80 5d 90 c6 2a 3d e4 29 e3 37 e5 11 46 95 f5 87 dd 03 86 6e ca 03 bf cd 58 43 81 b2 94 38 4a d4 67 64 ba 62 68 95 09 30 8f d9 5d 4e e0 eb eb 6b 8e 63 8a 2c d6 16 Data Ascii: S&m$]=)7FnXC8Jgdbh0]Nkc,2et+F9~xo*,p@ixfno%lm^>OzCa.Pyg&C-z\|XKNsP_\a1R%iv%N0:MaT
Apr 29, 2024 10:30:03.935261011 CEST	1289	IN	Data Raw: 9c 4b 38 d9 e6 ae b9 41 14 2d dc 59 bc ca f8 60 98 dc a2 83 6e ac c8 4b 87 a9 8b cb 7b bf 06 75 92 6c 76 1c 51 96 f1 c1 28 10 69 69 72 4c df ab 8e 69 cb 9f 39 25 c4 95 6b 3e b3 07 16 95 5e 72 be 0f 1f 4c 3e 7c ba 68 e3 c3 c9 24 f6 b0 d5 db 3a 08 Data Ascii: K8A-Y`nK{ulvQ(iirLi9%k>^rL>\|h$: (Hqqo13DDFU__\M-~}.)"3Xc'?w:zvt-Ln`Xdq@vNi&!eg}cd3iU6pqqhwi$pOA
Apr 29, 2024 10:30:03.935300112 CEST	1289	IN	Data Raw: 1d 01 73 1f 8d 68 2a 59 dd b1 4d d2 06 f6 ac 2b 02 ad 1a ce f5 8d cd 3d d7 3a fe 5c 83 a2 72 ca eb 56 f1 90 95 a4 67 51 a9 a8 93 4f 7d 2a e2 b8 f6 77 aa 31 f7 90 93 54 56 44 be 13 75 cf 72 b7 36 6f 9a a5 b8 db ac 3c 6d f6 3e a8 1c 39 ac 1d ec d1 Data Ascii: shYM+=:\rVgQO}w1TVDur6o<m>9=>UOH~;-<9{9L6K>`q/TR#/ =mJH_t]A73#v3D$$"NEYt=l[FbJ:(=b<s&x'/0<$4eQi
Apr 29, 2024 10:30:03.935338020 CEST	933	IN	Data Raw: 4d c8 52 e8 61 7e 45 62 90 5c c4 d1 2c 8a 63 f8 dc e8 53 7a c5 0e 96 f1 77 78 d1 85 d9 7c 11 91 ec b9 19 35 64 5a c0 59 74 e9 61 c5 9c dc 8e c2 ab d9 1c 3e 51 3c c7 f7 f1 d4 10 fb 5a 58 eb 2c 02 ed d8 61 63 2a c2 b4 07 8f fb c4 2b 0e e3 0a 65 68 Data Ascii: MRa~Eb\,cSzwx\|5dZYta>Q<ZX,ac*+eh'n3e>7(ogtTSS_$9E\J5"1_xfK0^,nHFH@wuS[&Bo!u,t8mUa#fv!VbRQ4{dsJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:03.665230036 CEST	340	OUT	GET /assets/css/owl-carousel.css HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:03.932806969 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:03 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Tue, 23 Jul 2019 09:49:52 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Wed, 29 May 2024 08:30:03 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1403 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 58 5b 6b e4 36 14 7e ce c2 fe 87 d3 94 85 24 c4 73 49 52 58 26 14 5a b2 81 66 09 d9 c2 96 42 29 5b 90 6d d9 56 47 96 8c 24 cf 25 a5 ff bd 47 b2 ec f1 78 6c cf e4 a1 b0 cc ae 8f ce 5d df b9 68 a7 57 57 ef df c1 15 7c 59 73 78 20 4a 96 9a 72 58 dd 4c 6e 27 77 8e fe 20 8b ad 62 69 66 e0 66 36 bf 0d f0 e7 23 7c 22 2b 16 c3 27 5a 1a 1d 65 8e eb 99 45 54 68 1a 43 29 62 aa 16 f0 f5 f1 11 9e 9f 1e 1e 5f be 3e c2 d3 0b 64 c6 14 7a 31 9d a6 cc 64 65 38 89 64 3e 45 7b b5 b9 9b fd 8f 90 cb 70 9a 13 6d a8 9a 7a 1d d6 c6 f4 fd bb 69 e5 ea be af 01 ba a8 a8 e7 98 c8 35 0f a2 fa e8 1f a4 42 cc 74 c1 c9 76 01 42 0a 7a 6f 29 6b 16 9b 6c 01 f3 d9 ec 83 fb 0e d6 34 5c 32 13 18 52 04 19 86 ca 6d b8 41 24 b9 c4 48 8c 22 42 17 44 51 61 1c f3 f4 0a 0a a9 99 61 52 80 a2 9c 18 b6 a2 40 44 0c af 01 c3 d8 37 90 b0 0d 54 0a f1 dc 66 83 89 14 12 29 8c 06 a6 75 49 9d 9f d0 28 59 34 5a 9c 7a af 05 bd bb 87 7f 2d 61 3f 22 f7 a5 0d 49 69 15 dc a0 1e 8c 2a d7 81 91 65 94 05 24 aa 18 0a 22 82 3f fc e9 [TRUNCATED] Data Ascii: X[k6~$sIRX&ZfB)[mVG$%Gxl]hWW\|Ysx JrXLn'w biff6#\|"+'ZeEThC)b_>dz1de8d>E{pmzi5BtvBzo)kl4\2RmA$H"BDQaaR@D7Tf)uI(Y4Zz-a?"Iie$"?IN+J+.E#._DD4X1B<f,i'LDn0,wZ E(`X&4ap>9CXDKO8%x74:AF.`qYL\QpTp3 `g\Cs9Zz_(X;H!l>U[;173h^l< 9oi:-vW{xh,Ozk549K!3EMJm6N&QD(F#xL-,!}4ai':G+?^ Tnw,/2w;=,:l'R -C8a)!"iO;[nEWvK.MIm8`N"C!u8jCW^LnjEA\RwqWST~
Apr 29, 2024 10:30:03.932842970 CEST	521	IN	Data Raw: d4 7d ad 1f d7 c5 ca 44 b3 38 ce 4e 10 c2 d9 d1 91 9a f7 4b 25 58 a0 5f 6a e6 9d 9b 82 e4 e8 a1 3f f4 92 3f 2d e9 36 51 78 a0 61 4f 6a f6 e1 a0 c8 ea dd d6 ce 9c de 0a dc 4b ff 59 37 fd a5 91 f0 8b 1b c6 3d 57 50 4d e9 4a ab 1b a3 7e a0 7b fa 0f Data Ascii: }D8NK%X_j??-6QxaOjKY7=WPMJ~{6@gg8}Q1c4Je`qG68$n-H!1g"5Y+)RgWo 0C_&#BERc+I-&B[5cZueQV_?>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:03.665647984 CEST	336	OUT	GET /assets/css/lightbox.css HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:03.931679964 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:03 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Wed, 09 Oct 2019 12:44:04 GMT Accept-Ranges: bytes Cache-Control: max-age=2592000 Expires: Wed, 29 May 2024 08:30:03 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1065 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 56 db 6e db 46 10 7d 37 e0 7f 58 a4 30 12 1b 21 75 b1 e4 44 0c 5c 40 71 82 36 45 0b b9 69 1f fa ba 24 97 e2 22 cb 5d 76 b9 94 64 07 fd f7 ce 5e 78 a7 a5 c0 08 fa 52 3d d8 e4 70 38 33 e7 cc f0 cc a6 2a 63 3e 0b bd 98 16 38 64 c4 2b 22 29 18 a3 7c 8b be 9e 9f 21 24 76 44 26 4c ec 03 94 d2 38 26 fc 9d 36 4e ae d0 bd 28 a8 a2 82 a3 84 1e 48 8c 24 f9 bb a4 12 2e 12 21 11 dd fc e1 a3 5f ca 42 a1 bc 54 4a 87 1a 44 41 f0 a6 4a 09 0a 45 fc 80 68 81 b8 50 88 70 51 6e 53 1f 5d 4d 74 8e dc 25 08 6c 06 93 37 25 74 9b aa 00 cd a6 d3 5d 6a 2c 7b 1a ab d4 1a f6 60 f8 e7 fc ec fc cc 67 da 2b 14 87 0d 64 65 f8 c1 02 69 e2 e1 b0 10 ac 54 c4 04 50 22 0f d0 d4 5c 32 92 a8 ea fa d1 a3 3c 26 87 00 ad e0 67 2c 21 8e be 6c a5 28 79 ec 45 82 09 19 a0 90 81 c9 3c 4b 28 53 04 2c b9 14 5b 1a 07 1f fe fa 94 e1 2d f9 53 62 5e 00 1f 99 ff 1b 05 52 0b 91 28 7f cd f2 14 bf da e4 38 a2 ea e1 76 b5 bc 34 ef 0b 7b 0f c9 fd d5 d2 58 a0 1b 39 94 1e 00 31 9c 0c 80 1d 45 d4 86 d1 d0 73 d1 85 05 96 a9 75 51 [TRUNCATED] Data Ascii: VnF}7X0!uD\@q6Ei$"]vd^xR=p83c>8d+")\|!$vD&L8&6N(H$.!_BTJDAJEhPpQnS]Mt%l7%t]j,{`g+deiTP"\2<&g,!l(yE<K(S,[-Sb^R(8v4{X91EsuQ<!ND8Q('^LW8lX%k!(.0<W()T-PHOEaXF4sk,SaEw6sadpT3Q+6T1?`Taab[\Hxv9-]u#MN]r4o#~ccw!.)i~2kglK{mw]JYa.*XMb8P0hp~-^t\|H_~s)S&Ox<g4H>1ty6AY)v:_6Qs4Q+Go9lcmY<)wbt3^Y:NJs;(
Apr 29, 2024 10:30:03.931716919 CEST	183	IN	Data Raw: 98 0b 02 a5 b0 a2 cd 97 e5 66 56 1d 0d 1c 1f 6f dd f2 ec eb 57 7b 79 d6 c6 ce ea 9c f9 33 92 8d 26 8f 70 6e 4e e3 5f eb 83 5a 41 1f 61 13 cc ae 5d ee ce e1 2d 14 2c 1e 89 7e 22 36 ae e8 b5 3c 2c 30 19 75 e7 65 16 56 ad 18 59 e9 8e fa 1a 60 35 46 Data Ascii: fVoW{y3&pnN_ZAa]-,~"6<,0ueVY`5FU]^V+w,)@o?]wsR&)xIUWmn~ozETESyt6v`2/YW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49720	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:03.667994976 CEST	500	OUT	GET /cl/298587_smd/265/3571761/3180/201/26638 HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:04.918469906 CEST	604	IN	HTTP/1.1 302 Found Date: Mon, 29 Apr 2024 08:30:03 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 X-Powered-By: PHP/7.1.33 Location: https://jantyport.com/0/2/50714/cbaa88a6638a953f4ff32304e1559c27/ltm_265/298587_1/201_26638_3571761_5431315_smd Cache-Control: max-age=2592000 Expires: Wed, 29 May 2024 08:30:03 GMT Content-Length: 145 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 20 3c 73 63 72 69 70 74 3e 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 20 2b 20 27 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 22 22 29 3b 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>if(window.location.hash.length > 0) window.location.href = window.location.origin + '/' + window.location.hash.replace("#","");</script>
Apr 29, 2024 10:30:08.788007975 CEST	385	OUT	GET /assets/images/slide-03.jpg HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:09.025938988 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:08 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Fri, 06 Dec 2019 17:52:04 GMT Accept-Ranges: bytes Content-Length: 34209 Cache-Control: max-age=31536000 Expires: Tue, 29 Apr 2025 08:30:08 GMT Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e1 05 f6 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 40 06 00 00 01 01 03 00 01 00 00 00 20 03 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d0 00 00 00 69 87 04 00 01 00 00 00 e4 00 00 00 1c 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 39 3a 31 32 3a 30 36 20 31 38 3a 35 32 3a 30 35 00 04 00 00 90 07 00 04 00 00 00 30 32 32 31 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 6a 01 00 00 1b 01 05 00 01 00 00 00 72 01 00 00 28 01 03 00 [TRUNCATED] Data Ascii: ExifII*@ (12i''Adobe Photoshop CS5 Windows2019:12:06 18:52:050221@ jr(ztHHAdobe_CMAdobedP"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?KjjUs
Apr 29, 2024 10:30:09.026067019 CEST	1289	IN	Data Raw: 0d a9 f6 a9 c2 70 12 43 1d a9 f6 a9 42 78 49 0c 76 a5 b5 4e 13 c2 28 61 09 e1 4a 13 c2 48 62 02 90 0a 50 9c 04 96 95 80 53 01 20 d5 30 d4 90 b0 0a 60 27 0d 52 01 35 0c 61 38 0a 50 9c 04 90 c6 13 c2 94 27 84 10 ff 00 ff d0 ca 01 38 09 c0 52 0b 51 Data Ascii: pCBxIvN(aJHbPS 0`'R5a8P'8RQ6'N$:(08"5L5H1+ESRa+[lRSLhF hFSB%H,JPJBE0@%MDHGr[VH!!ebZ$L1kTBZj
Apr 29, 2024 10:30:09.026087046 CEST	1289	IN	Data Raw: ed 00 00 00 00 00 10 00 48 00 00 00 01 00 02 00 48 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 Data Ascii: HH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp
Apr 29, 2024 10:30:09.026103973 CEST	1289	IN	Data Raw: 00 00 04 90 00 00 00 01 00 00 00 a0 00 00 00 50 00 00 01 e0 00 00 96 00 00 00 04 74 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a Data Ascii: PtAdobe_CMAdobedP"?
Apr 29, 2024 10:30:09.026124954 CEST	1289	IN	Data Raw: 00 ff e1 0e d4 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02
Apr 29, 2024 10:30:09.026144028 CEST	1289	IN	Data Raw: 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 45 39 42 36 44 38 32 43 31 43 31 38 45 41 31 31 42 39 36 39 44 42 39 43 31 32 33 38 31 31 37 30 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 39 2d Data Ascii: ved" stEvt:instanceID="xmp.iid:E9B6D82C1C18EA11B969DB9C12381170" stEvt:when="2019-12-06T18:51:01+07:00" stEvt:softwareAgent="Adobe Photoshop CS5 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EAB6D82C1C18EA
Apr 29, 2024 10:30:09.026163101 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 29, 2024 10:30:09.026180983 CEST	1289	IN	Data Raw: 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 04 06 06 0c 08 0c 16 0c 0c 16 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: @\| 0@pP`!1
Apr 29, 2024 10:30:09.026200056 CEST	1289	IN	Data Raw: c9 a2 a0 1a 05 44 0d 16 16 6a 2c 96 29 41 4b 02 a5 28 00 02 94 14 49 40 05 00 a5 4a 10 0b 04 a2 00 00 01 4a 96 00 20 16 28 3e 59 e9 e8 a8 28 28 29 41 4a 0a 20 94 02 94 00 10 94 02 84 b4 92 ad 40 05 01 15 60 94 14 02 80 2e 40 14 a0 02 94 00 0b 61 Data Ascii: Dj,)AK(I@JJ (>Y(()AJ @`.@a eX((J,R)@(JY4)5)DPYj((PP)PPTE(DB%,OEjPJa`(@,JPBP)@KYA@@X(`XU,RJ)@@,K
Apr 29, 2024 10:30:09.026220083 CEST	1289	IN	Data Raw: a5 8a 96 28 a1 62 82 a5 2c 00 2a 6a 29 64 15 29 40 05 05 05 12 50 52 80 01 41 4b 20 02 80 58 a9 60 0a 08 0a 82 95 00 00 08 00 28 07 cc 7f 5e 80 52 a0 02 d5 80 2a 28 0b 14 02 94 02 84 16 88 80 b2 82 80 50 10 50 0a 00 05 2a 00 2d 02 28 80 0a 10 01 Data Ascii: (b,j)d)@PRAK X`(^R(PP-(JQr)PPj)Q)@)J)DJRXRAJ,PXR \|TP-,ZPPP(@@4TP*R)T@,[,RXQ%4
Apr 29, 2024 10:30:09.263609886 CEST	1289	IN	Data Raw: 05 12 16 59 9a 85 35 15 2c 04 08 28 13 e3 de ee 89 2d 29 52 81 48 a5 8b 42 c0 a0 b4 92 a8 a9 40 05 40 15 42 11 42 ad 91 42 c2 c4 0a a0 81 65 00 52 29 45 02 28 82 a4 a0 00 02 c5 14 00 b2 0b 40 02 50 28 84 b4 4a 20 54 ab 50 6a 2d 20 51 54 49 45 58 Data Ascii: Y5,(-)RHB@@BBBeR)E(@P(J TPj- QTIEXJXRRPSRRM((T$h")DQBdbIA(PBM \|oYjRZ@(@ZX,PTE5@P@,@,@)J4PPX,U%RSQJj-X @J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:09.089612961 CEST	292	OUT	GET /assets/images/slide-01.jpg HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:09.339477062 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:09 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Fri, 06 Dec 2019 20:25:04 GMT Accept-Ranges: bytes Content-Length: 44415 Cache-Control: max-age=31536000 Expires: Tue, 29 Apr 2025 08:30:09 GMT Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e1 06 cc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 40 06 00 00 01 01 03 00 01 00 00 00 20 03 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d0 00 00 00 69 87 04 00 01 00 00 00 e4 00 00 00 1c 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 39 3a 31 32 3a 30 36 20 32 31 3a 32 35 3a 30 34 00 04 00 00 90 07 00 04 00 00 00 30 32 32 31 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 6a 01 00 00 1b 01 05 00 01 00 00 00 72 01 00 00 28 01 03 00 [TRUNCATED] Data Ascii: ExifII*@ (12i''Adobe Photoshop CS5 Windows2019:12:06 21:25:040221@ jr(zJHHAdobe_CMAdobedP"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?jub
Apr 29, 2024 10:30:09.339514971 CEST	1289	IN	Data Raw: 14 b6 84 c0 14 e2 51 42 fb 52 d5 38 2a 70 82 2f bb 08 2a 40 27 26 3b 26 2e 05 35 36 c8 48 ee 98 9d 79 51 94 e9 a5 20 2b 45 20 98 29 42 05 2a 4e 92 78 4d 4a e0 a7 09 80 4e 82 97 09 d3 05 24 0a 97 09 6a 92 70 0a 16 9a 7f ff d0 a4 14 a0 a1 89 53 0e Data Ascii: QBR8p/@'&;&.56HyQ +E )BNxMJN$jpS.RxRioJEqyB5H5R=KtA1,x)M$C()qO!PTSJpTFjs(KoAA;
Apr 29, 2024 10:30:09.339554071 CEST	1289	IN	Data Raw: 00 00 00 42 6c 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 72 64 54 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 42 6c 64 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 52 73 6c 74 55 6e 74 46 23 50 78 Data Ascii: Bl doub@oBrdTUntF#RltBld UntF#RltRsltUntF#Pxl@RvectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@Y8BIMHH8BIM
Apr 29, 2024 10:30:09.339592934 CEST	1289	IN	Data Raw: 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 Data Ascii: igndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongleftOutsetlongbottomOutsetlongrightOutsetlong8BIM(?8BIM8BIM8BIMfPJ
Apr 29, 2024 10:30:09.339629889 CEST	1289	IN	Data Raw: 3e 69 c5 c3 f7 42 05 49 9a ef 8a 23 5f 22 00 77 c5 09 ae 0e fa 31 a7 8a 96 e7 78 04 d2 96 c3 03 e4 6e 6c fc 51 c0 1d 82 a4 2d b4 70 54 86 45 c3 b8 3f 10 9a 54 dd 81 e0 97 b5 a2 4c 01 e2 aa 0b 72 1d c1 fb 82 98 a2 c7 ff 00 38 4c 7c 53 55 49 0e 5d Data Ascii: >iBI#_"w1xnlQ-pTE?TLr8L\|SUI] 2xp(6yV4NVNL?F)Is<Jp8' '!uRBJfhH;O0yC8p' @DAkyB`,'Tc"dG
Apr 29, 2024 10:30:09.339668989 CEST	1289	IN	Data Raw: 64 3a 41 45 30 41 31 32 30 44 33 34 31 38 45 41 31 31 42 39 36 39 44 42 39 43 31 32 33 38 31 31 37 30 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 43 44 45 46 38 45 33 45 41 38 36 31 31 45 39 42 30 33 39 Data Ascii: d:AE0A120D3418EA11B969DB9C12381170" xmpMM:DocumentID="xmp.did:9CDEF8E3EA8611E9B0398D6068616341" xmpMM:OriginalDocumentID="xmp.did:9CDEF8E3EA8611E9B0398D6068616341" crs:AlreadyApplied="True" photoshop:ColorMode="3" dc:format="image/jpeg"> <xmpM
Apr 29, 2024 10:30:09.339708090 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 29, 2024 10:30:09.339746952 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 29, 2024 10:30:09.339783907 CEST	1289	IN	Data Raw: 91 1a 22 89 61 48 41 61 86 69 8a 94 86 0a 92 22 22 22 23 51 11 1f 87 e8 7c 11 34 48 99 0b 24 ac 52 48 96 b2 96 15 89 61 29 52 48 ac 64 d6 6c a9 35 4b 35 4b 4b 22 05 72 b2 a5 6d 2c a4 44 30 4a d9 12 4b 44 52 a4 51 55 15 28 c8 52 25 14 ac 28 d2 32 Data Ascii: "aHAai"""#Q\|4H$RHa)RHdl5K5KK"rm,D0JKDRQU(R%(24(+,Q(i$Meea!H)%D%1B I,$2K"+I(Dh!U""%sR!ZZ$E~MH\)YBDDU&iYjX`JXXRVh)I(%e(DlBR0bKKEZZ
Apr 29, 2024 10:30:09.339822054 CEST	1289	IN	Data Raw: 30 d6 60 5a 5a 44 88 25 25 54 28 85 45 88 8a 35 00 0c b0 14 b0 94 ba 95 5d 0c a9 2b 24 44 91 0a 44 92 b1 ac e9 95 22 54 8a c0 90 48 91 06 61 22 21 48 95 22 88 d1 14 6a 6b 59 b2 c8 0d 52 c4 20 23 2e 81 51 23 49 14 29 10 89 4b 23 2a b1 10 c8 d4 b4 Data Ascii: 0`ZZD%%T(E5]+$DD"THa"!H"jkYR #.Q#I)K#A-$ E_ij%3VkX52CbTHSW-1,P)$HV,fk2DHK@a@BK-5-dXH*A!HHQ"%#DQRKJYt $(U
Apr 29, 2024 10:30:09.583298922 CEST	1289	IN	Data Raw: b1 08 c2 40 16 45 24 24 09 08 c5 51 14 4b 44 a9 10 a1 63 2c 45 0a 44 2b 11 08 92 c9 46 a1 96 96 21 35 2c 04 8a b1 a9 a6 6a 35 9b a9 77 35 05 44 cd 64 45 1f 3d ea 7e 02 57 35 95 18 65 89 51 48 35 97 59 b5 9a ab 26 5b 89 69 61 65 48 49 68 96 20 9a Data Ascii: @E$$QKDc,ED+F!5,j5w5DdE=~W5eQH5Y&[iaeHIh D&IHQKBM&QH(3\|MI2*2T-I"IeW:fkHa&P0BJEd$"@BDB90[F)b@fcSJY"!ZSD.Y$,1B"j4V)6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49725	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:09.091329098 CEST	292	OUT	GET /assets/images/slide-02.jpg HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:09.338728905 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:09 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Fri, 06 Dec 2019 20:23:12 GMT Accept-Ranges: bytes Content-Length: 46372 Cache-Control: max-age=31536000 Expires: Tue, 29 Apr 2025 08:30:09 GMT Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e1 07 28 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 40 06 00 00 01 01 03 00 01 00 00 00 20 03 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d0 00 00 00 69 87 04 00 01 00 00 00 e4 00 00 00 1c 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 39 3a 31 32 3a 30 36 20 32 31 3a 32 33 3a 31 33 00 04 00 00 90 07 00 04 00 00 00 30 32 32 31 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 6a 01 00 00 1b 01 05 00 01 00 00 00 72 01 00 00 28 01 03 00 [TRUNCATED] Data Ascii: (ExifII*@ (12i''Adobe Photoshop CS5 Windows2019:12:06 21:23:130221@ jr(zHHAdobe_CMAdobedP"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?8o
Apr 29, 2024 10:30:09.338769913 CEST	1289	IN	Data Raw: 83 10 94 5a 1d a1 96 94 e1 bb 78 fe f5 a8 d6 66 69 6b 9b b7 b0 d5 26 52 d6 92 66 02 9b 67 6f c1 39 68 78 d0 a0 84 0e 02 4e de 11 a8 71 98 e1 41 b5 cb 88 53 0d 73 1c 81 43 6c 43 41 3c f7 51 f5 83 b4 8d 10 83 5e e1 23 80 a7 55 72 75 70 f3 08 21 67 Data Ascii: Zxfik&Rfgo9hxNqASsClCA<Q^#Urup!g4as/gi#tAw~(c8FB:{F7'CBj=1lw*RC~)!H1v ={AOzff{wT1d-Jk6NBeRN!L<9
Apr 29, 2024 10:30:09.338808060 CEST	1289	IN	Data Raw: 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 Data Ascii: olEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@oBl doub@oBrdTUntF#RltBld UntF#RltRsltUntF#Pxl@RvectorDataboolPgPsenumPgPsPgPCL
Apr 29, 2024 10:30:09.338845015 CEST	1289	IN	Data Raw: 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 Data Ascii: cellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongleftOutsetlongbottomOutset
Apr 29, 2024 10:30:09.338901997 CEST	1289	IN	Data Raw: ee d4 73 e0 82 9f ff d1 c1 df 49 3a b5 4b d2 a8 ea 01 0a 4d a1 a1 10 37 cd 69 db 59 10 a9 9e 28 d5 d5 f7 29 80 a6 10 42 31 4b a7 9d 11 ab 21 ba 13 29 05 21 09 21 90 3e 01 4c 07 f9 05 11 0a 60 84 10 cd a3 4d 54 c1 85 00 42 93 5d 1f 04 10 94 22 89 Data Ascii: sI:KM7iY()B1K!)!!>L`MTB]",iAfKHCdpv\|G ?4aAa_w?$4<c"!@X!m`T^GX*m{ sjSY/Ld5XFD$4BQs\|Ts\|B>!MZ1
Apr 29, 2024 10:30:09.338939905 CEST	1289	IN	Data Raw: 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 39 2d 31 32 Data Ascii: ements/1.1/" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmp:CreateDate="2019-12-06T10:39:42+07:00" xmp:ModifyDate="2019-12-06T21:23:13+07:00" xmp:MetadataDate="2019-12-06T21:23:13+07:00" xmpMM:InstanceID="xmp.iid:EEB6D82C1C18EA11B969DB9C123
Apr 29, 2024 10:30:09.338978052 CEST	1289	IN	Data Raw: 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 45 45 42 36 44 38 32 43 31 43 31 38 45 41 31 31 42 39 36 39 44 42 39 43 31 32 33 38 31 31 37 30 22 20 73 74 45 76 74 3a 77 Data Ascii: action="saved" stEvt:instanceID="xmp.iid:EEB6D82C1C18EA11B969DB9C12381170" stEvt:when="2019-12-06T21:23:13+07:00" stEvt:softwareAgent="Adobe Photoshop CS5 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> <
Apr 29, 2024 10:30:09.339015007 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 29, 2024 10:30:09.339054108 CEST	1289	IN	Data Raw: 01 00 00 01 11 02 12 10 03 13 20 21 30 70 04 40 50 60 31 14 80 90 a0 b0 41 22 11 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 31 d0 12 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 ff da 00 0c 03 01 01 02 11 03 11 00 00 00 f8 e7 e8 Data Ascii: !0p@P`1A"1"$t!\ZeIqtqfV3Qkqf#!ePTm-3lbC[.e332\IIEHiR\Y kCYRSS%D/bh,&2dfE .7RVTm!hB(
Apr 29, 2024 10:30:09.339092016 CEST	1289	IN	Data Raw: a2 82 10 c6 09 73 34 5a ec 9b c9 d1 9b d1 26 f7 3b 1a 2b 80 43 34 52 4e 64 e7 10 8c ad 54 cd 0b 4a 47 0a 24 24 04 45 67 6a 42 26 c4 03 10 c6 01 17 32 20 38 63 28 d6 36 3b 23 a9 6e ca 95 c8 c0 68 d0 54 01 2d 49 a1 d1 1d 49 a4 b3 33 24 82 ec 52 73 Data Ascii: s4Z&;+C4RNdTJG$$EgjB&2 8c(6;#nhT-II3$RsYtHXE%EdjheiQX9i@JfHi%d0>;U%A$EKTTy7HL$HHC3@L@6)vN77gdnR#HIkhdV%*p@
Apr 29, 2024 10:30:09.582015038 CEST	1289	IN	Data Raw: 52 32 8a 2c e8 cb a1 28 92 07 0e 5a 92 a4 44 10 a1 a4 9d 16 6e 5c 2a 41 44 54 96 96 52 e4 b9 d2 22 cc 92 25 82 52 40 00 b3 52 e4 42 24 95 40 05 1a c9 d1 26 d1 70 c5 40 59 9d b1 40 09 1a b9 0b 01 8c 0b 34 97 79 3a f3 2e 32 b3 31 8c 71 79 9b c6 d9 Data Ascii: R2,(ZDn\ADTR"%R@RB$@&p@Y@4y:.21qy#;I5QD&09!(RhI3s57S33$IFh#3;T$VJ)j.KKG(J8"((p~/eYYlUiF3UIuRkj2jh4CBV6Du"&R&v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49728	185.66.88.174	80	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 29, 2024 10:30:09.525449991 CEST	292	OUT	GET /assets/images/slide-03.jpg HTTP/1.1 Host: 185.66.88.174 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 29, 2024 10:30:09.765966892 CEST	1289	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:09 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33 Last-Modified: Fri, 06 Dec 2019 17:52:04 GMT Accept-Ranges: bytes Content-Length: 34209 Cache-Control: max-age=31536000 Expires: Tue, 29 Apr 2025 08:30:09 GMT Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/jpeg Data Raw: ff d8 ff e1 05 f6 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 03 00 01 00 00 00 40 06 00 00 01 01 03 00 01 00 00 00 20 03 00 00 02 01 03 00 03 00 00 00 9e 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 b4 00 00 00 32 01 02 00 14 00 00 00 d0 00 00 00 69 87 04 00 01 00 00 00 e4 00 00 00 1c 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 39 3a 31 32 3a 30 36 20 31 38 3a 35 32 3a 30 35 00 04 00 00 90 07 00 04 00 00 00 30 32 32 31 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 40 06 00 00 03 a0 04 00 01 00 00 00 20 03 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 6a 01 00 00 1b 01 05 00 01 00 00 00 72 01 00 00 28 01 03 00 [TRUNCATED] Data Ascii: ExifII*@ (12i''Adobe Photoshop CS5 Windows2019:12:06 18:52:050221@ jr(ztHHAdobe_CMAdobedP"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?KjjU
Apr 29, 2024 10:30:09.765994072 CEST	1289	IN	Data Raw: 73 0d a9 f6 a9 c2 70 12 43 1d a9 f6 a9 42 78 49 0c 76 a5 b5 4e 13 c2 28 61 09 e1 4a 13 c2 48 62 02 90 0a 50 9c 04 96 95 80 53 01 20 d5 30 d4 90 b0 0a 60 27 0d 52 01 35 0c 61 38 0a 50 9c 04 90 c6 13 c2 94 27 84 10 ff 00 ff d0 ca 01 38 09 c0 52 0b Data Ascii: spCBxIvN(aJHbPS 0`'R5a8P'8RQ6'N$:(08"5L5H1+ESRa+[lRSLhF hFSB%H,JPJBE0@%MDHGr[VH!!ebZ$L1kTBZ
Apr 29, 2024 10:30:09.766011953 CEST	1289	IN	Data Raw: 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 02 00 48 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e Data Ascii: HH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff2Z5-8BIMp
Apr 29, 2024 10:30:09.766030073 CEST	1289	IN	Data Raw: 00 00 00 04 90 00 00 00 01 00 00 00 a0 00 00 00 50 00 00 01 e0 00 00 96 00 00 00 04 74 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b Data Ascii: PtAdobe_CMAdobedP"?
Apr 29, 2024 10:30:09.766088963 CEST	1289	IN	Data Raw: 01 00 ff e1 0e d4 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/0
Apr 29, 2024 10:30:09.766107082 CEST	1289	IN	Data Raw: 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 45 39 42 36 44 38 32 43 31 43 31 38 45 41 31 31 42 39 36 39 44 42 39 43 31 32 33 38 31 31 37 30 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 39 Data Ascii: aved" stEvt:instanceID="xmp.iid:E9B6D82C1C18EA11B969DB9C12381170" stEvt:when="2019-12-06T18:51:01+07:00" stEvt:softwareAgent="Adobe Photoshop CS5 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EAB6D82C1C18E
Apr 29, 2024 10:30:09.766125917 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Apr 29, 2024 10:30:09.766143084 CEST	1289	IN	Data Raw: 0e 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 04 06 06 0c 08 0c 16 0c 0c 16 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: @\| 0@pP`!1
Apr 29, 2024 10:30:09.766160011 CEST	1289	IN	Data Raw: a2 c9 a2 a0 1a 05 44 0d 16 16 6a 2c 96 29 41 4b 02 a5 28 00 02 94 14 49 40 05 00 a5 4a 10 0b 04 a2 00 00 01 4a 96 00 20 16 28 3e 59 e9 e8 a8 28 28 29 41 4a 0a 20 94 02 94 00 10 94 02 84 b4 92 ad 40 05 01 15 60 94 14 02 80 2e 40 14 a0 02 94 00 0b Data Ascii: Dj,)AK(I@JJ (>Y(()AJ @`.@a eX((J,R)@(JY4)5)DPYj((PP)PPTE(DB%,OEjPJa`(@,JPBP)@KYA@@X(`XU,RJ)@@,
Apr 29, 2024 10:30:09.766184092 CEST	1289	IN	Data Raw: 54 a5 8a 96 28 a1 62 82 a5 2c 00 2a 6a 29 64 15 29 40 05 05 05 12 50 52 80 01 41 4b 20 02 80 58 a9 60 0a 08 0a 82 95 00 00 08 00 28 07 cc 7f 5e 80 52 a0 02 d5 80 2a 28 0b 14 02 94 02 84 16 88 80 b2 82 80 50 10 50 0a 00 05 2a 00 2d 02 28 80 0a 10 Data Ascii: T(b,j)d)@PRAK X`(^R(PP-(JQr)PPj)Q)@)J)DJRXRAJ,PXR \|TP-,ZPPP(@@4TP*R)T@,[,RXQ%
Apr 29, 2024 10:30:10.004224062 CEST	1289	IN	Data Raw: 48 05 12 16 59 9a 85 35 15 2c 04 08 28 13 e3 de ee 89 2d 29 52 81 48 a5 8b 42 c0 a0 b4 92 a8 a9 40 05 40 15 42 11 42 ad 91 42 c2 c4 0a a0 81 65 00 52 29 45 02 28 82 a4 a0 00 02 c5 14 00 b2 0b 40 02 50 28 84 b4 4a 20 54 ab 50 6a 2d 20 51 54 49 45 Data Ascii: HY5,(-)RHB@@BBBeR)E(@P(J TPj- QTIEXJXRRPSRRM((T$h")DQBdbIA(PBM \|oYjRZ@(@ZX,PTE5@P@,@,@)J4PPX,U%RSQJj-X @J

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	142.44.227.102	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:29:59 UTC	722	OUT	GET /v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh HTTP/1.1 Host: sdfsd.s3.bhs.cloud.ovh.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	142.44.227.102	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:00 UTC	748	OUT	GET /v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh HTTP/1.1 Host: sdfsd.s3.bhs.cloud.ovh.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:00 UTC	463	IN	HTTP/1.1 200 OK content-type: text/html etag: 0c26b94e5959875172e9865ade43072b last-modified: Sun, 28 Apr 2024 12:17:46 GMT x-timestamp: 1714306665.51051 accept-ranges: bytes content-length: 101 x-trans-id: txfa38324ffd794c5d9fef9-00662f5a88 x-openstack-request-id: txfa38324ffd794c5d9fef9-00662f5a88 date: Mon, 29 Apr 2024 08:30:00 GMT x-iplb-request-id: 51B53E5A:A380_8E2CE366:01BB_662F5A86_DEF02B0A:2816 x-iplb-instance: 58703 connection: close
2024-04-29 08:30:00 UTC	101	IN	Data Raw: 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 3a 2f 2f 31 38 35 2e 36 36 2e 38 38 2e 31 37 34 23 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 27 23 27 29 5b 31 5d 3b 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>window.location.href = 'http://185.66.88.174#' + window.location.href.split('#')[1];</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49727	193.163.199.51	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:09 UTC	763	OUT	GET /0/2/50714/cbaa88a6638a953f4ff32304e1559c27/ltm_265/298587_1/201_26638_3571761_5431315_smd HTTP/1.1 Host: jantyport.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://185.66.88.174/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:09 UTC	313	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 08:30:09 GMT content-type: text/html; charset=UTF-8 content-length: 139 server: Apache set-cookie: uid6702=1175653013-20240429043009-de80e6f61a5b40b4b170b9cc93a94f3b-0; domain=; expires=Wed, 29-May-2024 08:30:09 GMT; path=/; SameSite=None; Secure connection: close
2024-04-29 08:30:09 UTC	139	IN	Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 65 72 73 69 73 74 64 72 75 6d 2e 63 66 64 2f 3f 73 31 3d 33 35 31 30 38 32 26 73 32 3d 31 31 37 35 36 35 33 30 31 33 26 73 33 3d 36 37 30 32 26 73 34 3d 49 53 50 26 6f 77 3d 26 73 31 30 3d 33 30 37 39 22 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script type="text/javascript">window.location.href="https://persistdrum.cfd/?s1=351082&s2=1175653013&s3=6702&s4=ISP&ow=&s10=3079"</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49733	172.67.219.132	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:11 UTC	729	OUT	GET /?s1=351082&s2=1175653013&s3=6702&s4=ISP&ow=&s10=3079 HTTP/1.1 Host: persistdrum.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://jantyport.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:11 UTC	960	IN	HTTP/1.1 302 Found Date: Mon, 29 Apr 2024 08:30:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 set-cookie: PHPSESSID=250956772e395ba029ced90a6cc00e4b; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvkxkumDnIIjGCuUohDDwzW1ovEb9BoaYUUKplPONfpxhx05JRX8YG2T9eGcGwS%2B5RoeABht8QVhvFLU8ePilK2hZfLdsXvc3Ac5sEQ7uPQSMlaRj%2BenHXDc%2BWET5X1x9Ks%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedb759f62276-ORD
2024-04-29 08:30:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49713	142.44.227.102	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:11 UTC	123	IN	HTTP/1.1 408 Request Time-out content-length: 110 cache-control: no-cache content-type: text/html connection: close
2024-04-29 08:30:11 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49737	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:11 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714379378992&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-29 08:30:11 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-29 08:30:11 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-29 08:30:12 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DE780EC5D0694BD591E01EAD3FD57882 Ref B: LAX311000114023 Ref C: 2024-04-29T08:30:12Z Date: Mon, 29 Apr 2024 08:30:12 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714379411.236307c5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49739	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:11 UTC	707	OUT	GET /71f5afdee459cf14a701e297ec4ea370 HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://jantyport.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:12 UTC	890	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close set-cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q73s52SlxvTgtW8nTJHbF2AB2VIY4w6%2ByNPne5bGu4zF6RZY0DHOT34Ux4ObIj%2FFiaxmhsi9P2CeY5%2BAQMgOYy4rYQ669N96C1NpIGxFzEqU1LWd96yWkOTzDYYFjR45"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedbdf82b28ef-ORD
2024-04-29 08:30:12 UTC	479	IN	Data Raw: 37 62 38 33 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 61 72 63 68 69 76 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c Data Ascii: 7b83<html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="robots" content="noindex, nofollow, noarchive"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1"> <
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 73 73 69 61 62 61 6e 64 2e 63 66 64 2f 61 73 73 65 74 73 2f 6a 73 2f 76 65 6e 64 6f 72 2f 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 61 73 3d 22 73 74 79 6c 65 22 20 6f 6e 6c 6f 61 64 3d 22 74 68 69 73 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 22 3e 0a 20 20 3c 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 73 73 69 61 62 61 6e 64 2e 63 66 64 2f 61 73 73 65 74 73 2f 6a 73 2f 76 65 6e 64 6f 72 2f 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 3c 2f 6e Data Ascii: href="https://ossiaband.cfd/assets/js/vendor/bootstrap/css/bootstrap.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'"> <noscript><link rel="stylesheet" href="https://ossiaband.cfd/assets/js/vendor/bootstrap/css/bootstrap.min.css"></n
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 35 33 30 31 33 22 3b 0a 20 20 20 20 76 61 72 20 66 70 20 3d 20 22 37 31 66 35 61 66 64 65 65 34 35 39 63 66 31 34 61 37 30 31 65 32 39 37 65 63 34 65 61 33 37 30 22 3b 0a 20 20 20 20 76 61 72 20 65 73 6f 75 72 63 65 20 3d 20 62 74 6f 61 28 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 3b 0a 20 20 20 20 4d 59 43 41 4c 4c 2e 69 6e 69 74 28 5b 73 31 2c 73 32 2c 65 73 6f 75 72 63 65 2c 66 70 5d 29 3b 0a 20 20 20 20 4d 59 43 41 4c 4c 2e 73 65 6e 64 28 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 Data Ascii: 53013"; var fp = "71f5afdee459cf14a701e297ec4ea370"; var esource = btoa(location.hostname); MYCALL.init([s1,s2,esource,fp]); MYCALL.send();</script>... Google Tag Manager --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.st
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 3c 2f 73 70 61 6e 3e 0a 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 65 6e 75 5f 6d 6f 62 22 3e 0a 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 61 6d 62 22 3e 3c 69 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 36 70 78 3b 22 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 62 61 72 73 20 66 61 2d 31 78 22 3e 3c 2f 69 3e 3c 2f 73 70 61 6e 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 65 6e 75 5f 63 22 3e 0a 09 09 09 09 3c 75 6c 3e 0a 09 09 09 09 09 3c 6c 69 3e 4d 65 6e 75 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 44 65 61 6c 73 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 57 69 72 65 6c 65 73 73 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 49 6e 74 65 72 6e 65 74 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c Data Ascii: </span></span><div class="menu_mob"><span class="hamb"><i style="font-size: 26px;" class="fas fa-bars fa-1x"></i></span><div class="menu_c"><ul><li>Menu</li><li>Deals</li><li>Wireless</li><li>Internet</li><
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 09 09 3c 68 72 3e 0a 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2d 74 69 6d 6d 69 6e 67 20 6d 62 2d 30 22 3e 0a 09 09 09 09 09 09 09 3c 73 74 72 6f 6e 67 3e 0a 09 09 09 09 09 09 09 09 59 6f 75 20 68 61 76 65 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 63 6c 61 73 73 3d 22 74 69 6d 65 20 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 22 3e 36 3a 33 30 3c 2f 73 70 61 6e 3e 20 74 6f 20 61 6e 73 77 65 72 20 74 68 65 20 71 75 65 73 74 69 6f 6e 73 2e 20 48 75 72 72 79 20 75 70 21 09 09 09 09 09 09 09 3c 2f 73 74 72 6f 6e 67 3e 0a 09 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2d 66 6f 6f 74 65 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 70 Data Ascii: <hr><p class="message-timming mb-0"><strong>You have <span id="time" class="time color-primary-text">6:30</span> to answer the questions. Hurry up!</strong></p><div class="message-footer" style="width: 100%;p
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 65 6d 61 69 6c 5f 6c 65 61 64 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 30 22 3e 0a 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 73 75 62 6d 69 74 2d 6c 61 6e 67 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 53 75 62 6d 69 74 22 3e 0a 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 45 6d 61 69 6c 20 41 64 64 72 65 73 73 22 3e 0a 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 73 6b 69 70 2d 6c 61 6e 67 2d 72 65 77 61 72 64 22 20 74 79 70 65 3d Data Ascii: </div></div></div></div><input id="email_lead" type="hidden" value="0"><input id="submit-lang" type="hidden" value="Submit"><input id="input-placeholder" type="hidden" value="Email Address"><input id="skip-lang-reward" type=
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 2e 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 6c 6f 61 64 5f 74 65 78 74 32 20 6d 62 2d 31 22 3e 0a 09 09 09 09 09 09 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 73 70 69 6e 6e 65 72 20 66 61 2d 73 70 69 6e 20 63 68 65 63 6b 32 20 6d 72 2d 32 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 3e 43 68 65 63 6b 69 6e 67 20 66 6f 72 20 64 75 70 6c 69 63 61 74 65 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 2e 2e 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 6c 6f 61 64 5f 74 65 78 74 33 20 6d 62 2d 31 22 3e 0a 09 09 09 09 09 09 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 73 70 69 6e 6e 65 72 20 66 61 2d 73 70 69 6e 20 63 68 65 63 6b 33 20 6d 72 2d 32 22 20 61 72 69 61 2d Data Ascii: .</p><p class="load_text2 mb-1"><i class="fa fa-spinner fa-spin check2 mr-2" aria-hidden="true"></i>Checking for duplicate IP addresses...</p><p class="load_text3 mb-1"><i class="fa fa-spinner fa-spin check3 mr-2" aria-
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 2d 74 69 6d 65 22 3e 31 31 20 48 6f 75 72 73 20 41 67 6f 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 2d 63 6f 6c 22 3e 0a 09 09 09 09 09 09 09 3c 69 6d 67 20 61 6c 74 3d 22 70 72 6f 66 69 6c 65 49 6d 61 67 65 22 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 2d 69 6d 67 20 6c 61 7a 79 2d 69 6d 61 67 65 22 20 64 61 74 61 2d 73 72 63 3d 22 2f 66 69 6d 2f 33 30 37 39 2d 55 53 2f 31 64 65 64 32 61 63 31 37 38 66 36 65 66 35 37 31 Data Ascii: /span><span class="comment-time">11 Hours Ago</span></div></div></div><div class="comment"><div class="img-col"><img alt="profileImage" class="comment-img lazy-image" data-src="/fim/3079-US/1ded2ac178f6ef571
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 20 79 6f 75 72 20 66 69 76 65 20 71 75 65 73 74 69 6f 6e 20 73 75 72 76 65 79 20 70 6f 70 70 65 64 20 75 70 20 49 20 74 68 6f 75 67 68 74 20 22 74 68 65 72 65 20 77 61 73 20 6e 6f 20 77 61 79 20 74 68 65 20 72 65 77 61 72 64 73 20 77 65 72 65 20 61 63 74 75 61 6c 6c 79 20 76 61 6c 75 65 64 20 6f 76 65 72 20 24 31 30 30 22 2e 20 54 68 61 74 27 73 20 6a 75 73 74 20 62 65 69 6e 67 20 68 6f 6e 65 73 74 2e 20 42 75 74 20 74 68 65 6e 20 49 20 67 6f 74 20 74 6f 20 74 68 65 20 65 6e 64 20 61 6e 64 20 67 6f 74 20 74 6f 20 73 65 6c 65 63 74 20 69 74 20 61 6e 64 20 49 20 74 68 6f 75 67 68 74 2c 20 22 54 68 69 73 20 69 73 20 74 68 65 20 67 72 65 61 74 65 73 74 20 73 75 72 76 65 79 20 69 6e 20 74 68 65 20 68 69 73 74 6f 72 79 20 6f 66 20 73 75 72 76 65 79 73 21 22 20 Data Ascii: your five question survey popped up I thought "there was no way the rewards were actually valued over $100". That's just being honest. But then I got to the end and got to select it and I thought, "This is the greatest survey in the history of surveys!"
2024-04-29 08:30:12 UTC	1369	IN	Data Raw: 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 22 3e 43 6f 6d 6d 65 6e 74 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 2d 74 69 6d 65 22 3e 31 20 44 61 79 20 41 67 6f 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 2d 63 6f 6c 22 3e 0a 09 09 09 09 09 09 09 3c 69 6d 67 20 61 6c 74 3d 22 70 72 6f 66 69 6c 65 49 6d 61 67 65 22 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 2d 69 6d 67 20 6c 61 7a 79 2d 69 6d 61 67 65 22 20 64 61 74 61 2d 73 72 63 3d 22 2f 66 69 6d 2f 33 30 Data Ascii: lor-primary-text">Comment</span><span class="comment-time">1 Day Ago</span></div></div></div><div class="comment"><div class="img-col"><img alt="profileImage" class="comment-img lazy-image" data-src="/fim/30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49743	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:12 UTC	657	OUT	GET /assets/js/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	832	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Sun, 05 May 2024 00:21:58 GMT last-modified: Tue, 23 Mar 2021 22:52:06 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 115695 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NI3E7Av0nP5VtMElWjbnIZAyGzZ0UMbrrHCSqu7LozX5M8Q3syv4dXZ%2By%2FW8Hz6G0hQqierifXA%2BBUEfCqf%2F9a4tJOy4FTWuxlLECxrrs%2BuIfedisBcN0HH%2Bh8pPsMu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc48cdeacab-ORD
2024-04-29 08:30:13 UTC	537	IN	Data Raw: 37 62 62 63 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7bbc/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 22 53 65 67 6f 65 20 55 49 22 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 2c 22 41 70 70 6c 65 Data Ascii: ;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ttom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}dfn{font-style:italic}b,strong{font-weight:
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a Data Ascii: -size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 64 69 73 70 6c 61 79 2d 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 Data Ascii: 5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300;line-height:1.2}.display-2{font-size:5.5rem;font-w
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 Data Ascii: -size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 30 2c 2e 63 6f 6c 2d 78 6c 2d 31 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 32 2c 2e 63 6f 6c 2d 78 6c 2d 32 2c 2e 63 6f 6c 2d Data Ascii: 6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col-xl-11,.col-xl-12,.col-xl-2,.col-
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f Data Ascii: 10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.o
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 63 6f 6c 2d 73 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d Data Ascii: set-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset-11{margin-left:91.666667%}@media (min-width:576px){.col-sm{-ms-flex-preferred-size:0;flex-basis:0;-
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 34 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f Data Ascii: 91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-ms-flex-order:-1;order:-1}.order-sm-last{-webkit-box-ordinal-group:14;-ms-flex-order:13;order:13}.order-sm-0{-webkit-box-o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49744	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:12 UTC	647	OUT	GET /assets/vendors/fontawesome/css/all.css HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	824	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Sun, 05 May 2024 00:22:22 GMT last-modified: Mon, 19 Jul 2021 19:00:02 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 115671 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RBRhl3%2BTmumVvSGTOIudq8mw742h7kGZ8rY2SY67UuwMADCNh5eCLYMv98zl6z2hR1IyzFPiplN9zPYrweoQITSRoeYBPbGylbhD0gCegw2bATPaHet%2FWTnIB9wAWw55"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc489971230-ORD
2024-04-29 08:30:13 UTC	545	IN	Data Raw: 37 62 63 34 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 32 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 0a 2e 66 61 73 2c 0a 2e 66 61 72 2c 0a 2e 66 61 6c 2c 0a 2e 66 61 64 2c 0a 2e 66 61 62 20 7b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 Data Ascii: 7bc4/! Font Awesome Free 5.15.2 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fas,.far,.fal,.fad,.fab { -moz-osx-font-smoothing:
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 6d 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 37 35 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 31 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 32 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 33 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 34 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 35 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 36 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 36 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 37 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 38 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: m { font-size: .875em; }.fa-1x { font-size: 1em; }.fa-2x { font-size: 2em; }.fa-3x { font-size: 3em; }.fa-4x { font-size: 4em; }.fa-5x { font-size: 5em; }.fa-6x { font-size: 6em; }.fa-7x { font-size: 7em; }.fa-8x { font-s
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 20 7d 20 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f Data Ascii: -webkit-transform: rotate(360deg); transform: rotate(360deg); } }@keyframes fa-spin { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transfo
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 74 65 72 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 66 61 2d 73 74 61 63 6b 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 Data Ascii: ,:root .fa-rotate-180,:root .fa-rotate-270,:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-flip-both { -webkit-filter: none; filter: none; }.fa-stack { display: inline-block; height: 2em; line-height: 2em; position:
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 6c 69 67 6e 2d 6a 75 73 74 69 66 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 39 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 36 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c 69 67 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 38 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c 69 70 61 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 34 32 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c 6c 65 72 67 69 65 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 36 31 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6d 61 7a 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 Data Ascii: lign-justify:before { content: "\f039"; }.fa-align-left:before { content: "\f036"; }.fa-align-right:before { content: "\f038"; }.fa-alipay:before { content: "\f642"; }.fa-allergies:before { content: "\f461"; }.fa-amazon:before { cont
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 7d 0a 0a 2e 66 61 2d 61 70 70 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 64 31 22 3b 20 7d 0a 0a 2e 66 61 2d 61 70 70 6c 65 2d 70 61 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 31 35 22 3b 20 7d 0a 0a 2e 66 61 2d 61 72 63 68 69 76 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 38 37 22 3b 20 7d 0a 0a 2e 66 61 2d 61 72 63 68 77 61 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 37 22 3b 20 7d 0a 0a 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 63 69 72 63 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 35 38 22 3b 20 7d 0a 0a 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d Data Ascii: }.fa-apple-alt:before { content: "\f5d1"; }.fa-apple-pay:before { content: "\f415"; }.fa-archive:before { content: "\f187"; }.fa-archway:before { content: "\f557"; }.fa-arrow-alt-circle-down:before { content: "\f358"; }.fa-arrow-alt-
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 33 22 3b 20 7d 0a 0a 2e 66 61 2d 61 75 64 69 6f 2d 64 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 39 65 22 3b 20 7d 0a 0a 2e 66 61 2d 61 75 74 6f 70 72 65 66 69 78 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 31 63 22 3b 20 7d 0a 0a 2e 66 61 2d 61 76 69 61 6e 65 78 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 37 34 22 3b 20 7d 0a 0a 2e 66 61 2d 61 76 69 61 74 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 32 31 22 3b 20 7d 0a 0a 2e 66 61 2d 61 77 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 39 22 3b 20 7d 0a 0a 2e 66 61 2d 61 77 73 3a 62 65 66 6f 72 65 20 7b Data Ascii: 3"; }.fa-audio-description:before { content: "\f29e"; }.fa-autoprefixer:before { content: "\f41c"; }.fa-avianex:before { content: "\f374"; }.fa-aviato:before { content: "\f421"; }.fa-award:before { content: "\f559"; }.fa-aws:before {
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 72 65 65 2d 71 75 61 72 74 65 72 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 34 31 22 3b 20 7d 0a 0a 2e 66 61 2d 62 61 74 74 6c 65 2d 6e 65 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 38 33 35 22 3b 20 7d 0a 0a 2e 66 61 2d 62 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 33 36 22 3b 20 7d 0a 0a 2e 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 66 63 22 3b 20 7d 0a 0a 2e 66 61 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 62 34 22 3b 20 7d 0a 0a 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a Data Ascii: ree-quarters:before { content: "\f241"; }.fa-battle-net:before { content: "\f835"; }.fa-bed:before { content: "\f236"; }.fa-beer:before { content: "\f0fc"; }.fa-behance:before { content: "\f1b4"; }.fa-behance-square:before { content:
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 65 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 65 32 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 64 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 63 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 64 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6f 6b 2d 64 65 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 62 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6f 6b 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 20 Data Ascii: content: "\f0e7"; }.fa-bomb:before { content: "\f1e2"; }.fa-bone:before { content: "\f5d7"; }.fa-bong:before { content: "\f55c"; }.fa-book:before { content: "\f02d"; }.fa-book-dead:before { content: "\f6b7"; }.fa-book-medical:before
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 0a 2e 66 61 2d 62 75 6c 6c 68 6f 72 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 31 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 6c 6c 73 65 79 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 34 30 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 72 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 36 61 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 72 6f 6d 6f 62 65 6c 65 78 70 65 72 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 37 66 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 30 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 73 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 Data Ascii: .fa-bullhorn:before { content: "\f0a1"; }.fa-bullseye:before { content: "\f140"; }.fa-burn:before { content: "\f46a"; }.fa-buromobelexperte:before { content: "\f37f"; }.fa-bus:before { content: "\f207"; }.fa-bus-alt:before { content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49747	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:12 UTC	669	OUT	GET /assets/css/isp/common.css?v=6f0cfeb1af067fdd48b2b1e03bf20e6b HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	818	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:13 GMT last-modified: Thu, 18 Jan 2024 16:20:16 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kGxU4iRPooW76YTNS4JDIafN7sT7S2iMxE%2B80wEoUh%2F8m0%2FnjMvOujFxYu%2FdH9BzjaoLHgN4C3jZIxVEzHKRF8Ncvlcp%2BMzpGXLjIYr0j3suFtW3LLF0fX86fqEyxBcj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc48ae361bf-ORD
2024-04-29 08:30:13 UTC	551	IN	Data Raw: 37 62 63 62 0d 0a 0a 0a 2f 2a 20 43 68 72 6f 6d 65 2c 20 53 61 66 61 72 69 2c 20 45 64 67 65 2c 20 4f 70 65 72 61 20 2a 2f 0a 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 0a 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 66 6f 6c 6c 6f 77 5f 73 74 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 38 30 30 3b 0a 7d 0a 2e 71 66 69 6e 6d 6f 62 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 3a 72 6f 6f 74 20 7b 0a 20 20 74 6f 75 63 68 2d 61 63 74 69 6f Data Ascii: 7bcb/* Chrome, Safari, Edge, Opera */input::-webkit-outer-spin-button,input::-webkit-inner-spin-button {-webkit-appearance: none;margin: 0;}.follow_st{font-size: 20px; font-weight: 800;}.qfinmob{display: none;}:root { touch-actio
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 74 69 76 65 3b 0a 7d 0a 23 6d 6f 64 61 6c 5f 65 6d 61 69 6c 20 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2c 20 23 6d 6f 64 61 6c 5f 65 6d 61 69 6c 5f 70 6f 70 75 70 20 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 0a 7d 0a 23 6d 6f 64 61 6c 5f 65 6d 61 69 6c 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 2c 20 23 6d 6f 64 61 6c 5f 65 6d 61 69 6c 5f 70 6f 70 75 70 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 30 70 78 3b 0a 7d 0a 23 6d 6f 64 61 6c 5f 65 6d 61 69 6c 20 2e 69 6e 70 75 74 5f 61 6c 6f 6e 65 2c 20 23 6d 6f 64 61 6c 5f 65 6d 61 69 6c 5f 70 6f 70 75 70 20 2e 69 6e 70 75 74 5f 61 6c 6f Data Ascii: tive;}#modal_email .modal-dialog, #modal_email_popup .modal-dialog{max-width: 800px;}#modal_email .modal-content, #modal_email_popup .modal-content{border-radius: 15px;margin-top: 200px;}#modal_email .input_alone, #modal_email_popup .input_alo
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 41 42 42 39 43 37 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 09 74 6f 70 3a 20 2d 31 35 70 78 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 2d 31 35 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 7d 0a 2e 73 74 61 79 6c 2c 20 2e 74 68 6b 73 2c 20 2e 6f 6e 65 5f 6d 6d 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 30 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 38 30 30 3b 0a 7d 0a 2e 73 74 61 79 6c Data Ascii: display: inline-block;border-radius: 100%;background-color: #ABB9C7;color: #ffffff;font-size: 30px;top: -15px; right: -15px; padding: 0 15px; font-weight: 700;}.stayl, .thks, .one_mm{font-size: 40px;font-weight: 800;}.stayl
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 32 66 32 66 32 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 7d 0a 0a 2f 2a 68 65 61 64 65 72 2a 2f 0a 2e 63 72 5f 6c 65 67 5f 6c 2c 20 2e 63 72 5f 6c 65 67 5f 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 34 30 25 3b 0a 7d 0a 0a 2e 63 72 5f 6c 65 67 5f 6c 20 69 6d 67 2c 20 2e 63 72 5f 6c 65 67 5f 72 20 69 6d 67 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 63 72 5f 6c 65 67 5f 6c 20 7b 0a 09 6c 65 66 74 3a 20 30 3b 0a 7d 0a 0a 2e 63 72 5f 6c 65 67 5f 72 20 7b 0a 09 72 Data Ascii: }body {font-family: sans-serif !important;background-color: #f2f2f2;}body {}/header/.cr_leg_l, .cr_leg_r {position: absolute;top: 0;width: 40%;}.cr_leg_l img, .cr_leg_r img {width: 100%;}.cr_leg_l {left: 0;}.cr_leg_r {r
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 68 74 3a 20 37 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6a 75 6c 79 5f 6d 62 5f 6c 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 25 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 35 70 78 3b 0a 7d 0a 0a 2e 6a 75 6c 79 5f 6d 62 5f 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 20 39 37 25 3b 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0a 7d 0a 0a 2e 73 69 74 65 2d 6c Data Ascii: ht: 70px;position: absolute;background-repeat: no-repeat;background-size: contain;display: none;}.july_mb_l {background-position: 0%;margin-left: -15px;margin-top: -15px;}.july_mb_r {background-position-x: 97%;bottom: 0;}.site-l
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 6e 67 3a 20 32 30 70 78 20 31 30 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 33 70 78 20 37 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 33 29 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 7d 0a 0a 2e 72 65 77 61 72 64 2d 62 69 67 2d 63 69 72 63 6c 65 20 7b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 2e 38 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 32 35 70 78 20 33 Data Ascii: ng: 20px 10px;line-height: 1.2;box-shadow: 0 3px 7px rgba(0, 0, 0, 0.3);width: 100px;height: 100px;}.reward-big-circle {border-radius: 100px;position: absolute;text-align: center;line-height: 0.8;font-size: 20px;padding: 30px 25px 3
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 2a 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 2a 2f 0a 7d 0a 0a 2e 63 68 6f 69 63 65 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 61 6e 73 77 65 72 4f 70 74 69 6f 6e 3a 6e 6f 74 28 2e 62 74 6e 2d 70 72 69 6d 61 72 79 29 20 7b 0a 09 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 30 66 30 66 30 3b 0a 7d 0a 0a 2e 63 68 6f 69 63 65 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 61 6e 73 77 65 72 4f 70 74 69 6f 6e 3a 6e 6f 74 28 2e 62 74 6e 2d 70 72 69 6d 61 72 79 29 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f Data Ascii: * margin-bottom: 20px; */}.choices-container .answerOption:not(.btn-primary) {color: var(--primary-color);background-color: #f0f0f0;}.choices-container .answerOption:not(.btn-primary):hover {color: #fff;background-color: var(--secondary-colo
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 74 3b 0a 7d 0a 0a 2e 63 68 6f 69 63 65 73 20 2e 61 6e 73 77 65 72 4f 70 74 69 6f 6e 2c 20 2e 63 6f 6e 74 69 6e 75 65 5f 73 20 7b 0a 09 77 69 64 74 68 3a 20 37 30 25 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 32 70 78 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 61 6e 73 77 65 72 4f 70 74 69 6f 6e 3a 66 6f 63 75 73 2c 20 2e 63 6f 6e 74 69 6e 75 65 5f 73 3a 66 Data Ascii: t;}.choices .answerOption, .continue_s {width: 70%;padding: 10px;display: table;margin: auto;font-size: 18px;font-weight: 700;text-align: center;border-radius: 22px;cursor: pointer;border: none;}.answerOption:focus, .continue_s:f
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 37 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 37 70 78 3b 0a 7d 0a 0a 2e 63 6f 6d 6d 65 6e 74 20 2e 61 63 74 69 6f 6e 73 20 2e 61 63 74 2d 6c 69 6b 65 2c 0a 2e 63 6f 6d 6d 65 6e 74 20 2e 61 63 74 69 6f 6e 73 20 2e 61 63 74 2d 63 6f 6d 6d 65 6e 74 20 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 76 69 63 6f 6e 20 7b 0a 09 77 69 64 74 68 3a 20 31 36 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 37 70 78 3b 0a 7d 0a 0a 2e 76 74 65 78 74 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 09 63 6f 6c 6f 72 3a 20 23 33 38 42 44 33 36 3b 0a 7d 0a 0a 2e 72 61 74 69 6e 67 Data Ascii: low: hidden;padding-left: 7px;padding-right: 7px;}.comment .actions .act-like,.comment .actions .act-comment {cursor: pointer;}.vicon {width: 16px;margin: 7px;}.vtext {font-size: 10px;font-style: italic;color: #38BD36;}.rating
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 6f 70 79 72 69 67 68 74 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 7d 0a 0a 23 70 6f 6c 69 63 79 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 39 30 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0a 7d 0a 0a 23 70 6f 6c 69 63 79 2d 62 74 6e 2c 0a 23 74 65 72 6d 73 2d 62 74 6e 20 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 2f 2a 20 50 6f 70 20 55 70 20 63 6f 64 65 20 50 6f 6c 69 63 79 20 2a 2f 0a 0a 23 70 6f 6c 69 63 79 2d 63 6c 6f 73 65 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 Data Ascii: opyright {font-size: 13px;}#policy-content {overflow: auto;padding: 20px;height: 900px;margin-top: 30px;}#policy-btn,#terms-btn {cursor: pointer;text-decoration: underline;}/* Pop Up code Policy */#policy-close {margin-right: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49746	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:12 UTC	622	OUT	GET /inc/msg.v3.js?662f5a9494fa7 HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	828	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:13 GMT last-modified: Tue, 05 Dec 2023 15:48:56 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aaz5lXaMXFx1JVRr8ejoPf2mO3PVA01QX7oQr59clipls4JJV9UqyRXDaqrIBPEoS%2B3H5Q51%2ByKvHRfNat5g0NVVOtDdQnujNCk%2Fhuyb19zJFC5UfoHhm3MJSSI2TM2H"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc48bda1cde-ORD
2024-04-29 08:30:13 UTC	541	IN	Data Raw: 36 35 36 0d 0a 66 75 6e 63 74 69 6f 6e 20 70 75 73 68 43 6f 75 6e 74 28 70 73 68 70 61 72 61 6d 73 2c 70 73 68 70 75 62 2c 70 73 68 66 69 6e 67 65 72 70 72 69 6e 74 29 7b 0a 09 0a 09 76 61 72 20 78 68 72 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 09 78 68 72 2e 6f 70 65 6e 28 27 50 4f 53 54 27 2c 20 27 27 29 3b 0a 09 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 2c 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 27 29 3b 0a 09 78 68 72 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 69 66 20 28 78 68 72 2e 73 74 61 74 75 73 20 3d 3d 3d 20 32 30 30 29 20 7b 0a 09 09 09 76 61 72 20 72 Data Ascii: 656function pushCount(pshparams,pshpub,pshfingerprint){var xhr = new XMLHttpRequest();xhr.open('POST', '');xhr.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');xhr.onload = function() {if (xhr.status === 200) {var r
2024-04-29 08:30:13 UTC	1088	IN	Data Raw: 62 20 2b 20 27 26 66 70 3d 27 20 2b 20 70 73 68 66 69 6e 67 65 72 70 72 69 6e 74 3b 0a 09 78 68 72 2e 73 65 6e 64 28 64 61 74 61 29 3b 0a 7d 0a 0a 0a 0a 76 61 72 20 4d 59 43 41 4c 4c 20 3d 20 4d 59 43 41 4c 4c 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 76 61 72 20 70 73 68 70 61 72 61 6d 73 20 3d 20 7b 7d 3b 20 2f 2f 20 70 72 69 76 61 74 65 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 69 6e 69 74 20 3a 20 66 75 6e 63 74 69 6f 6e 28 41 72 67 73 29 20 7b 0a 20 20 20 20 09 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 41 72 67 73 5b 32 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 73 68 70 61 72 61 6d 73 20 3d 20 41 72 67 73 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 73 68 70 75 62 20 3d 20 41 Data Ascii: b + '&fp=' + pshfingerprint;xhr.send(data);}var MYCALL = MYCALL \|\| (function(){ var pshparams = {}; // private return { init : function(Args) { //console.log(Args[2]); pshparams = Args[0]; pshpub = A
2024-04-29 08:30:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49745	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:12 UTC	712	OUT	GET /uploads/archive/company/175/images/onlinesurvey-color.png HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	816	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: image/png Content-Length: 41556 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:13 GMT last-modified: Thu, 10 Mar 2022 19:58:45 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ir997m5lluaOG6NfY51tj%2FLesIiSEWjW1pTfga1MdgeunO%2BXM5BjIoBVHjaZsOaAvs64jL7iOGkY7B96Eg9%2F9M4qpuKywcxNDyOcbQgLEbSkTiTXWb8Cx9gssfbYxQFS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc48807224f-ORD
2024-04-29 08:30:13 UTC	553	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 16 00 00 01 14 08 06 00 00 00 5e 5c 6a c6 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR^\jpHYsodOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: a5 1c cf 92 09 84 62 dc e6 8f 47 fc b7 0b ff fc 1d d3 22 c4 49 62 b9 58 2a 14 e3 51 12 71 8e 44 9a 8c f3 32 a5 22 89 42 92 29 c5 25 d2 ff 64 e2 df 2c fb 03 3e df 35 00 b0 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 Data Ascii: bG"IbXQqD2"B)%d,>5j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(*`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 2f c8 5d 70 79 a1 ce c2 f4 85 a7 16 a9 2e 12 2c 3a 96 40 4c 88 4e 38 94 f0 41 10 2a a8 16 8c 25 f2 13 77 25 8e 0a 79 c2 1d c2 67 22 2f d1 36 d1 88 d8 43 5c 2a 1e 4e f2 48 2a 4d 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 ed 5d 4f 58 2f 59 df b5 61 fa 86 9d 1b Data Ascii: /]py.,:@LN8A%w%yg"/6C\NHMz5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<*mOW~&zMk^kU}]OX/Ya
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 96 7a 2d 87 b9 59 58 15 22 b7 01 00 00 00 00 00 00 00 74 07 81 45 d0 9b 9f 1f 3f a8 d3 f9 f4 de d3 44 20 a0 fe 59 0b 09 21 15 2a 10 22 ac 44 88 99 19 b3 9d 59 58 10 52 b6 0c 21 65 ca fc f5 5f b3 32 84 14 15 11 52 f4 9e 90 f7 6a 7a 84 d0 69 d3 46 17 ef 05 c8 75 00 00 00 00 00 00 00 00 dd 40 60 11 f4 c6 2d 66 d3 b9 ac fc 17 ed 8b af 8d 02 42 ac ad 08 a9 54 f1 33 ef 57 22 c4 ba 22 21 e6 65 be f4 75 b4 f9 eb b7 85 3d 2d ec 8e 1c 74 69 36 09 b9 0f 00 00 00 00 00 00 00 a0 5d 66 c8 02 d0 87 25 69 37 fa 64 e5 bf 70 fd ec 46 6a 35 21 2f 5e 12 92 f3 94 90 b7 ff 5a e8 d9 ca 92 90 9a 0e 84 d8 59 33 09 2a 12 42 08 55 58 a1 bc fb 21 c1 ab 5e d6 f7 ce df 3a 96 f7 b8 21 4a 01 00 00 00 00 00 00 00 40 7b d0 63 11 f4 a2 fa c1 f5 97 7f 2f c8 6f c1 ea 43 15 ca 13 52 d9 96 90 Data Ascii: z-YX"tE?D Y!"DYXR!e_2RjziFu@`-fBT3W""!eu=-ti6]f%i7dpFj5!/^ZY3BUX!^:!J@{c/oCR
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 00 00 68 0f 02 8b c0 ca 86 94 1b 23 09 db de 8a 8e f6 84 94 2f c7 59 9a 85 85 6a d5 50 bb 9a e7 51 7a 00 00 00 00 00 00 00 00 da 83 c0 22 30 16 7e 3b 61 e8 8b c2 77 d6 ac 3e a4 56 13 52 d3 81 cb 64 d3 b3 6d a9 b9 28 3d 00 00 00 00 00 00 00 00 ed 42 60 11 18 5b 93 7a 7d 2c 61 db 5b b1 5a 15 42 2c ca 73 96 66 ab f7 ea fc b0 ca 2e 87 50 7a 00 00 00 00 00 00 00 00 da 85 c0 22 30 b2 f0 ce f5 01 cf de be b1 63 f5 21 b5 9a 90 5a 8e 5c 26 9b 9e 62 5d 73 09 4a 0f 00 00 00 00 00 00 00 40 fb 04 6a b5 1a b9 00 5f 54 65 ff 9a 1b cf de be f6 66 f7 21 5b 42 ea bb 71 96 e6 0a ef d5 69 05 6e be f5 51 7a 00 00 00 00 00 00 00 00 da 87 1e 8b f0 45 cb d3 6f f6 7a f6 f6 b5 1d eb 0f d6 aa ce 65 b2 e9 f1 56 8e ab 50 7a 00 00 00 00 00 00 00 00 ba 81 1e 8b f0 45 d5 7e 5a 7b e5 c9 Data Ascii: h#/YjPQz"0~;aw>VRdm(=B`[z},a[ZB,sf.Pz"0c!Z\&b]sJ@j_Tef![BqinQzEozeVPzE~Z{
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 99 99 e9 fa e4 c9 13 7b cd 26 94 16 be 86 26 84 10 2b 2b ab fc 5a b5 6a dd af 5d bb 76 46 93 26 4d 6e 34 6b d6 ec aa 9f 9f 5f 5a 69 77 5e 7e d7 f2 bb ef 8a 8a ea b0 fa 90 b3 23 21 b5 6a 70 96 ef 4e 7f 92 8b 0f 6a 8b db a2 06 02 30 b3 66 cd 9a ee b3 66 cd 9a fb fc f9 73 61 29 cf 4b 74 85 0a 15 de 4c 9a 34 69 d9 dc b9 73 37 23 67 01 00 00 00 00 00 80 10 04 16 19 91 cb e5 a2 4b 97 2e b5 89 8b 8b f3 b9 76 ed 5a 53 cd 9f 29 8e 92 43 13 42 48 cd 9a 35 1f 36 6d da f4 7a cb 96 2d 2f fb f9 f9 9d 6a d4 a8 51 1e d3 1d 8c b9 7e 6e ca ba 3b 89 a3 59 1f 43 0b 11 21 65 39 1b 3d 4f 1f af ec d1 ad 6b 25 fb 54 d4 48 80 2f 1b 34 68 d0 fc 5d bb 76 0d d0 f2 b9 8a ee d2 a5 cb 99 53 a7 4e 8d 44 0e 03 00 00 00 00 00 00 02 8b 9f 70 f2 e4 49 8f 63 c7 8e 75 8f 8d 8d f5 bd 73 e7 4e Data Ascii: {&&++Zj]vF&Mn4k_Ziw^~#!jpNj0ffsa)KtL4is7#gK.vZS)CBH56mz-/jQ~n;YC!e9=Ok%TH/4h]vSNDpIcusN
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 18 a8 f8 d4 7b 4b 6f 25 7c cf 3a 4f 84 95 08 a9 c8 dd c8 ca 72 ef 8b de 2d ae 56 6f 2d 9a 27 94 56 5e 5e 9e b5 31 a7 23 35 35 d5 f2 cd 9b 37 16 7c 38 c6 fc fc 7c ab ec ec 6c 33 d4 3a 00 00 00 00 00 00 d3 61 6e c8 89 cf cc cc 34 f7 f7 f7 3f 9c 92 92 e2 41 4c 30 a0 a8 41 ff f0 c3 0f 0b 3f f5 c6 ba cc e4 ae bf 15 e4 b3 9f 28 91 e2 b4 93 17 fd 9d 65 b5 4d 68 9a 00 5f 96 93 93 e3 c0 a3 73 1f f5 f0 e1 43 27 17 17 97 fb 28 19 00 00 00 00 00 00 d3 60 b0 bd 4b f6 ef df df bc 71 e3 c6 49 29 29 29 5d 89 e9 06 15 89 a3 a3 63 ce a8 51 a3 4e 7d ea bd 1f 93 4b d0 5b d1 ba 22 21 95 2a 72 76 3c e5 de 17 bd 5b e5 d8 60 29 9a 26 c0 97 69 02 8b bc f1 e0 c1 03 27 94 0a 00 00 00 00 00 80 e9 30 c8 c0 e2 88 11 23 66 f6 ed db 77 5f 41 41 81 87 89 97 1f 3d 65 ca 94 c5 9f 7a 23 3a Data Ascii: {Ko%\|:Or-Vo-'V^^1#557\|8\|l3:an4?AL0A?(eMh_sC'(`KqI)))]cQN}K["!*rv<[`)&i'0#fw_AA=ez#:
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 8f 27 da eb bd 48 57 ae 5c f9 66 7c 7c 7c 6b 7f 7f 7f 25 72 19 00 00 00 00 00 00 38 0d 2c c6 c4 c4 78 63 5e c5 cf 13 08 04 f4 ac 59 b3 e6 7e ea bd e9 49 17 e7 ab 09 db de 8a 66 84 54 ab cc dd f1 10 42 ef a9 d1 18 73 2b 02 e8 58 c3 86 0d f3 7f fb ed b7 d6 13 27 4e 8c 2a ed bc 8b 66 66 66 59 23 46 8c d8 f4 f4 e9 d3 26 5e 5e 5e b9 c8 5d 00 00 00 00 00 00 20 84 e3 c0 62 60 60 e0 36 82 a0 e2 67 f5 ec d9 f3 48 83 06 0d f2 3f f5 5e 4c f6 dd 5e ac 77 e8 5c e3 af a1 d0 1c a9 5d 58 26 bd 41 f9 4a f9 28 59 00 fd 58 b6 6c d9 ca 94 94 94 06 12 89 44 4a fe ea bd 48 33 fc 28 4d 08 a1 3b 75 ea b4 f9 c6 8d 1b 4d 36 6e dc b8 00 b9 09 00 00 00 00 00 00 1f 33 e7 ea 8b 3b 77 ee bc e9 e5 cb 97 56 28 82 cf 3f d8 cf 9e 3d 3b f2 53 6f 0c be 7c 6a ee 7b b6 81 61 33 33 42 aa 55 e1 Data Ascii: 'HW\f\|\|\|k%r8,xc^Y~IfTBs+X'N*fffY#F&^^^] b``6gH?^L^w\]X&AJ(YXlDJH3(M;uM6n3;wV(?=;So\|j{a33BU
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 95 4a a5 d7 a3 47 8f aa 3f 79 f2 c4 fe a3 9e c1 4c ea 0b 4d 08 21 ee ee ee 19 1e 1e 1e a9 8d 1b 37 be d5 b2 65 cb f8 ae 5d bb 62 05 6f 00 1d db b1 63 47 bb 73 e7 ce 75 b8 79 f3 a6 f7 af bf fe 5a 2b 2f 2f cf 9a 6d db b5 b1 b1 c9 6b d0 a0 c1 6d 0f 0f 8f 3b 4d 9a 34 b9 de b6 6d db 8b 0d 1a 34 c8 47 ee ea c6 f1 e3 c7 1b 5e bc 78 b1 4d 7a 7a 7a ed ec ec 6c d7 f4 f4 f4 3a af 5e bd b2 64 51 6e ff 28 3f 42 08 a9 56 ad da 13 07 07 87 1c 37 37 b7 0c 5f 5f df d8 36 6d da 5c c4 c3 01 7f 6d db b6 4d ac 50 28 7c 95 4a 65 63 a5 52 29 fa f8 19 8f 49 99 53 14 45 8b 44 22 a5 58 2c 8e 13 89 44 4a fc 40 00 a0 3d bb 77 ef 6e 75 eb d6 ad c6 b7 6f df 6e 90 94 94 24 7a f0 e0 81 d3 87 f7 ea d4 a9 93 be 77 ef de fe 5e 5e 5e f8 41 1d 78 25 2e 2e 8e 52 28 14 62 9a a6 5d 68 9a ae f5 Data Ascii: JG?yLM!7e]bocGsuyZ+//mkm;M4m4G^xMzzzl:^dQn(?BV77__6m\mMP(\|JecR)ISED"X,DJ@=wnuon$zw^^^Ax%..R(b]h
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: ce 09 04 82 6c ae 7f d0 53 ab d5 c4 d7 d7 f7 8b 01 77 a1 50 98 a8 8b ef 8e 8c 8c 1c 52 b5 6a d5 6b a5 69 9f 13 27 4e 9c c0 e6 3b a3 a3 a3 c5 0c be 2f 5b 24 12 c5 a0 2e b3 7b cd 9f 3f 7f 00 93 bc f5 f1 f1 d9 66 c8 d7 14 89 44 12 c5 c1 8f cb 5f bc d6 50 14 15 6b 88 3f 66 25 27 27 5b 33 a9 37 ce ce ce 71 a9 a9 a9 96 68 6b 9f 7f 31 8c 35 64 a7 a5 a5 59 70 1a 58 ac 56 ad da 15 be 34 9e f6 ed db 6f 31 b4 82 ae 71 70 fd 25 d6 41 c5 23 eb 39 ed ad 58 2e e3 dc dd 2f fd 5a f3 a9 ca 6b 61 61 71 47 5f f9 ca e1 c3 63 36 93 00 d3 d1 a3 47 1b 7e d4 0b 8b 77 0f b6 b5 6a d5 8a 33 94 00 bd 29 05 16 87 0e 1d 3a 9b 83 3a 93 3d 78 f0 e0 b9 fa bc 41 e3 aa ed 7a 79 79 31 7a 68 98 38 71 e2 04 be 06 a7 04 02 41 f6 90 21 43 22 71 23 f5 ff d7 98 31 63 a6 7c d4 63 5d 6d 20 af 6c 33 Data Ascii: lSwPRjki'N;/[$.{?fD_Pk?f%''[37qhk15dYpXV4o1qp%A#9X./ZkaaqG_c6G~wj3)::=xAzyy1zh8qA!C"q#1c\|c]m l3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49742	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:12 UTC	657	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	746	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Fri, 19 Apr 2024 20:54:07 GMT ETag: "6622d9ef-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EoKzq8hYZ6yHE4WqwB8dOPVlwi4%2FBwiHmPZmS8dt1lj5CbpsmxWHeJiuz7eYkMBHRjMpv5njr5eRU3ldcM9OSkaaEXiR8phm3TK1GPercimp33w%2FuC4P%2F%2BnI8H2wvPaU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc48d4589f7-ORD X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 01 May 2024 08:30:13 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-04-29 08:30:13 UTC	623	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-04-29 08:30:13 UTC	616	IN	Data Raw: 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 Data Ascii: length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.queryS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49748	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:13 UTC	681	OUT	GET /assets/vendors/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ossiaband.cfd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ossiaband.cfd/assets/vendors/fontawesome/css/all.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	829	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: font/woff2 Content-Length: 80252 Connection: close Cache-Control: public, max-age=604800 expires: Sun, 05 May 2024 00:24:17 GMT last-modified: Mon, 19 Jul 2021 19:00:02 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 115556 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zKHuEMYBtxRcbqpU2n2DHcY8ORaZzFLFLj6Maqv6Vubv479zgmzQiHPr7XndhdQ7r%2Bs%2B8GuDHXela4%2FYvrYQc7eeC0qi7sdUDFIrxYJ0dKoXS7hDutTaFLreET33JxqT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc7bdd5e26d-ORD
2024-04-29 08:30:13 UTC	540	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 39 7c 00 0d 00 00 00 03 1e ec 00 01 39 22 01 4b 85 a1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 99 4e 11 08 0a 8a f4 60 88 ce 40 01 36 02 24 03 9f 30 0b 9f 34 00 04 20 05 8a 2b 07 e2 2e 5b 32 7b 92 00 3a ee ab 8a 00 75 57 e5 e6 67 79 bf 38 d5 8a 71 6c 12 bd 59 f9 37 52 3f ce f7 0a b8 eb 83 f3 00 41 0a fb 13 b3 ff ff ff ff b7 25 0b 59 ae 9d 59 98 40 12 48 0a b4 56 fb 60 6d 51 cf fb bc 33 11 99 02 09 16 44 25 aa 10 58 50 43 0a 5d 4f a2 89 a4 e0 96 4c 44 98 2d 0e d6 d9 98 63 a9 bb c9 35 d3 c5 d2 b2 4f 07 48 e4 09 44 04 22 02 11 c1 f1 79 97 73 6e e4 65 8e f1 18 e1 44 ce 20 22 10 11 88 08 f2 9c f3 68 cf 96 49 76 ed f3 8b 25 bc 90 2b c8 29 10 11 c4 11 fa e4 5f bd a7 3e 44 2a 5c 51 Data Ascii: wOF29\|9"K?FFTM`N`@6$04 +.[2{:uWgy8qlY7R?A%YY@HV`mQ3D%XPC]OLD-c5OHD"ysneD "hIv%+)_>D*\Q
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: b0 9d 7c 41 05 b5 92 a5 e2 28 50 50 69 29 2a 8e b4 0b 4c 45 1a 77 62 9a da 84 ea ca 6f 7a 65 1b 5b da d8 37 6c ac 5b 79 6b 7b ab ba 61 79 bb 9b 79 ab ba 29 3c 8f ea fa af 18 61 8e 64 21 5f cb b2 10 c6 d8 04 0f 0c 30 29 fd ff e6 87 94 76 b7 4b ed f6 db 6e 53 a7 c4 c3 e7 ed 6d b3 d9 2e 4a 78 80 81 26 90 05 85 1c 42 14 e6 4d e3 df f1 f2 f0 f3 55 b4 65 ee 97 71 3e 40 5b 0f 04 6d 54 da 18 3c fc fd 12 f8 45 fe e8 be 5b 03 6d 60 03 c7 36 ad 35 e6 6c 17 31 e1 e3 5f 06 30 b8 d1 c2 c0 9c ac 16 fa 54 fc 62 d0 18 59 d7 76 21 77 c2 8f e6 a1 fd e1 e7 85 14 96 f3 42 93 0e 7c b0 06 7f c0 bf cd 21 a0 da a1 ef ee 4f d3 58 48 4b 40 b4 89 85 74 88 f4 1f b8 f6 ef 07 80 81 0c 6c 9c 76 d5 fd 2a 97 d0 af e6 ab 62 a4 eb f8 4a d1 34 73 e1 be c0 63 63 3e 17 18 3c fe f4 a7 25 b5 52 Data Ascii: \|A(PPi)LEwboze[7l[yk{ayy)<ad!_0)vKnSm.Jx&BMUeq>@[mT<E[m`65l1_0TbYv!wB\|!OXHK@tlvbJ4scc><%R
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 5a 56 49 6d 7d 53 6b fe 5f 27 b7 cb 02 dc 2e cb f6 f2 eb bd 30 fe 15 cf 37 e6 aa 99 16 ed fa 63 32 b0 6c 4f db 6d fb 79 3d 2e 04 23 18 5e 54 4c 2f 88 f3 6e 5e af f7 8f e2 44 dd 0a 87 ed f2 f8 85 34 3b ce 6b c0 93 f7 82 b4 5a 76 a7 fb 5f a9 59 7e 94 e4 65 d3 cf 1b 5e fd f5 3d 09 25 32 b2 2a 1b 5a bb 42 23 a2 13 92 d2 32 f3 8b cb 6b ea 1a 5a db bb 7a f4 ee 5f 4c 66 5e 49 55 4d 43 c7 ae 3d 7a 85 d2 33 b3 73 f3 0b cb aa eb 1a 5a 7b f1 e5 cf 48 70 6a 8c ce 16 29 6c 4e 08 02 47 a1 73 04 2a 8d c5 d3 17 8e c6 d3 99 7c b1 54 a9 33 3a b8 b8 7b 01 30 41 63 b0 44 3a 8b dd cb e8 43 af 8b 7b be 3e b9 1c 9e 9e 3f 7e f1 fd 6f 67 2f 5e 79 f2 ee d7 9f ff 9d ba 72 eb ef 2b 0f 0f f8 5f 3c 4d 34 da aa cf 24 f6 f1 55 4b bd 2b c9 f2 d6 ae 91 13 29 dc a8 63 d0 d4 fe e2 65 9b f7 Data Ascii: ZVIm}Sk_'.07c2lOmy=.#^TL/n^D4;kZv_Y~e^=%2ZB#2kZz_Lf^IUMC=z3sZ{Hpj)lNGs\|T3:{0AcD:C{>?~og/^yr+_<M4$UK+)ce
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 35 23 5c 5b 58 24 2f 50 8a 97 f5 eb a1 6d b0 0d 07 6b be 6f d0 6f 89 1b e7 63 84 c0 eb 87 83 00 96 07 25 ce ae fd 7d e2 d4 ab 27 6d 55 fe 1e 8f 24 6b 75 3e 28 cd 1c ce 4f 3a 18 2e db b9 79 81 5a ab 1e 4c 8c 90 27 32 2f 13 b7 88 4b 3e 31 aa 96 51 52 d7 b4 58 94 43 18 80 b4 3f 83 2c eb 0e d5 7d 39 fd 41 9e c0 8d c7 ab dc 9c ad bd f1 be 8f 16 77 34 76 35 61 17 6c 5b 4b b1 ac eb f5 fa ca bb 32 cf a5 ca a4 04 d9 f0 c2 bb f6 85 90 dc c5 2d c4 06 86 90 a4 df 85 3b b8 21 44 b1 70 c1 cb 99 b0 13 b4 3a 3a c5 3d 23 cb b4 ce dc b6 20 46 6e e9 d4 43 50 2f 50 10 dc 76 bb 68 cd 19 78 af ef 3c c5 9a 03 32 75 44 01 cd 70 dd 5d 8b a8 83 0b 10 45 d3 3a 92 d1 88 10 e5 c3 29 75 d2 58 ce cf 9f 1b d9 8a 5c c6 5c b2 d7 ae 12 f8 f0 3d 8c 32 26 db 7a 5c 6b 2d d6 b6 67 b4 8c 9c 47 Data Ascii: 5#\[X$/Pmkooc%}'mU$ku>(O:.yZL'2/K>1QRXC?,}9Aw4v5al[K2-;!Dp::=# FnCP/Pvhx<2uDp]E:)uX\\=2&z\k-gG
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 1b 9c 3c 8b 3b d4 8a fa 5d 32 5e 3b 6f 71 57 c0 8d fa 96 6f 78 52 70 82 c4 34 d8 e9 00 92 54 71 69 e1 37 d5 6f 57 6f a4 e1 e7 8c 02 e6 4f c4 ed bc f8 a1 e6 cd 3f 18 73 eb b8 f3 7f 9e f2 a7 a2 74 85 73 7f 04 1f 45 92 57 85 81 53 f2 a2 de 34 c5 71 52 fc aa fd 2f 30 56 0a ad e7 b2 52 63 b5 df 4f e7 0b 9a fc 55 c6 b1 79 99 9b a2 5d 2e 16 dd 49 76 02 cd c6 84 ee 30 da c1 aa 83 da 9a 3d 2a f5 0e 29 7d 0b 8e 76 26 30 35 b3 ad 4e 2e 0d a4 e5 62 d9 6f 27 99 f6 d2 63 6d f2 4c d9 df d9 47 ca 9b 6c 5f ca e4 46 6b df ae 67 da 3e 5b 91 1e da 1a 69 7b 33 cf 27 0a ae e5 27 01 2b 57 bc c5 a7 a4 c5 af 93 31 d5 e8 73 35 5f ad b7 c0 da 0c 77 91 8b 1d 02 d8 f0 9b 7a f1 e2 f6 1b 46 63 65 16 4b 70 6a ae 56 4d ab a0 3b 34 fd 44 7c 70 e7 a4 70 f6 6e 7e cc 77 e6 db 19 85 07 e7 fd Data Ascii: <;]2^;oqWoxRp4Tqi7oWoO?stsEWS4qR/0VRcOUy].Iv0=*)}v&05N.bo'cmLGl_Fkg>[i{3''+W1s5_wzFceKpjVM;4D\|ppn~w
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 81 77 49 48 5f d6 e6 51 5c 46 08 d8 a1 15 d6 1f 23 d8 6a 9f 42 f2 26 d1 ec 0a 84 90 be 0e 8c 68 3b d4 12 c0 49 6f 17 9b 4c 26 da 71 f6 62 a9 0c 58 23 c8 2c 72 92 d8 03 84 07 a1 04 32 cc 45 1b 4b f4 70 a7 26 6d fe a4 1e d8 63 77 df 8a fd fa 1b e3 b9 0d 01 91 20 bb 90 76 43 9a f3 08 ff cb 86 6b b9 21 a0 06 fa 28 77 a1 cd a4 f1 e1 7c 84 1d 58 c2 ab 11 d8 db 6b f2 53 28 ae 39 71 bf 88 4e d9 90 f9 0c ef 47 89 77 82 5e 6d bc 43 18 ff b7 ab 69 12 f0 fb bd 08 a6 89 6f 08 56 4e b7 db a4 22 07 04 29 f3 51 a4 a2 3f c6 be c4 d4 4a 63 65 27 48 2d ab 94 10 d6 b6 01 b1 d7 39 6c 84 1a ec fb 47 68 08 06 b5 34 e5 ec 2b b1 19 43 49 b7 ab ec e7 84 77 c6 90 ab c6 21 0d a4 29 ba b5 88 ac 55 bf cd 0c 80 d8 e9 77 b7 7a c9 c7 5f 4e 88 a1 b5 f3 0d d9 fe b3 d0 09 e0 1a e2 12 76 04 Data Ascii: wIH_Q\F#jB&h;IoL&qbX#,r2EKp&mcw vCk!(w\|XkS(9qNGw^mCioVN")Q?Jce'H-9lGh4+CIw!)Uwz_Nv
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 9c 74 f2 93 44 7e 54 87 6d 8a 4d c8 e3 7c 10 2a 39 fd f4 8a 9b 5c 56 8e f0 9d d5 73 31 19 db 17 ac 9e b0 1e e5 95 be ff ba 93 8e 48 09 02 d7 b0 0b 4a ee 30 99 b3 43 a2 ce 07 6b d6 aa 0a 04 1e 2b db 53 e6 5c a1 9f fd 2d d2 d7 e0 9b 25 11 df 5e ff b0 47 45 96 59 b2 bf 1a c9 6b 8c a9 2b 6f ac d8 cb eb 7b 6e 4e d7 b4 83 dd 19 02 99 40 08 22 33 18 2d 34 bb e3 d1 44 70 14 e1 bf 36 de 3a f9 a7 55 50 8b fe 48 18 69 75 21 e9 4c 32 69 d2 ab 64 9a 09 96 cd 00 06 ff 97 4d b3 aa 6e 97 e5 5e 67 99 39 a2 2d 4a 17 2b 2f 71 c1 07 34 b1 9f 1d fe 52 d0 0b b9 ae 23 a4 b0 21 15 3d 08 79 11 4f bd e5 b4 25 dd 31 86 6c 20 e3 d9 8e 65 4d 4c cb a1 f9 59 18 49 d4 3b 76 86 72 b6 a3 a3 50 f6 31 69 48 77 10 19 33 bc 57 e6 fc 4f ea 4b f0 55 57 7b cb 35 e9 5c 7a 36 4b c2 c0 7e ab aa dc Data Ascii: tD~TmM\|*9\Vs1HJ0Ck+S\-%^GEYk+o{nN@"3-4Dp6:UPHiu!L2idMn^g9-J+/q4R#!=yO%1l eMLYI;vrP1iHw3WOKUW{5\z6K~
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 0c 81 fa f5 4b b2 98 29 da 23 a6 d8 5c 89 14 d0 f1 85 e9 ce db 0f 9c 7a 48 b3 12 33 3c 6a 98 f5 ea 42 0e 31 f5 b9 fa 6d 58 40 1a 4e 24 fa ea 01 05 12 02 ca 94 7a 19 8d b0 43 d0 7f 6b ad 6a 16 d1 df 0c b6 56 b2 a5 7b 4b da 89 20 e3 9e d7 53 89 8a 4a b2 47 96 4e 19 1f c2 5a 39 56 64 cf b2 85 c2 a9 42 ee 64 29 e7 cf 60 7e a0 5e b0 58 f2 95 93 76 e1 df 7c 67 b5 34 54 a6 4f 15 4f 3d ee 69 f5 95 f5 dd 7b c5 ca d2 da ce d6 42 65 c4 1b f2 3d b8 7a 9f bc 7e 74 13 72 aa d7 ce 97 c0 43 32 fb 19 91 49 22 40 63 ae c7 3e 07 a4 de a1 45 6c 52 be 19 ec ac 35 18 f9 52 d5 9c af 51 2a 2b 5d 8b 3f 1c 54 54 94 76 70 7a 36 ff 67 af be f7 d6 19 42 ba 33 22 34 19 bc 95 3d 4c d0 f3 47 d9 4f 46 be 71 12 c0 02 fb 8f 07 f9 85 23 d4 64 d3 c2 85 43 e5 c2 ba f9 e1 23 7d 6c cc 9e 41 42 Data Ascii: K)#\zH3<jB1mX@N$zCkjV{K SJGNZ9VdBd)`~^Xv\|g4TOO=i{Be=z~trC2I"@c>ElR5RQ*+]?TTvpz6gB3"4=LGOFq#dC#}lAB
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 8e f0 70 54 8e bc 4f 86 d5 48 28 83 99 18 ed 90 a0 e2 40 89 9d 49 5d d5 3c 15 df 37 41 d9 8f 1c 86 a1 a4 7a 45 3c 91 d1 2b c8 a3 da b3 ad a6 61 cc 9b 21 f8 02 61 65 bc 6a 0a 3c 56 fb 63 da ba e4 30 db ff 2c f4 90 0c 27 f5 cf 9e 3e f3 b4 cf b5 37 3c da 27 06 df 42 b0 e3 48 1e 22 d9 cd 9a 76 bf eb 23 b4 0a 56 26 70 77 bf 5b aa 3d 71 6e a4 23 ff 6a 66 4c 8a 64 21 2e 0c e6 e5 08 c0 05 40 a1 46 a3 9f f8 1d 93 bd 0d 72 f9 d5 21 1b 0c 30 5c ba f8 81 94 44 f4 d8 2b 29 c9 63 f3 bc 30 ee 86 57 7a 8e f1 f1 b8 50 ca 91 95 60 d8 bc 1a 0f a6 ac 2e 0d dc 82 23 39 59 19 0a f7 4a 07 80 47 91 0d 5a bc b7 03 72 bc a6 61 e0 43 08 dd 44 49 bf 14 02 45 a3 eb 76 e2 13 8b 81 25 bf 84 c2 f8 84 47 fa 89 bc 98 39 c0 70 a2 a1 39 31 97 e9 05 10 c0 de cd 27 bd b5 07 54 53 0c cf 1f f5 Data Ascii: pTOH(@I]<7AzE<+a!aej<Vc0,'>7<'BH"v#V&pw[=qn#jfLd!.@Fr!0\D+)c0WzP`.#9YJGZraCDIEv%G9p91'TS
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 1b 37 8f d2 f6 cf d9 8b ec 80 e4 2e 2f 2d 38 6a 77 f7 75 9d 0b ab da d6 7d b3 ec df 71 94 dc c2 37 59 f9 36 e3 c6 48 18 c7 1a 83 60 ed d8 d7 f4 5f 59 f9 e8 96 09 39 5a 3b 72 77 cc d0 31 47 b3 71 8e 30 ee 58 01 12 a0 53 2c ce e3 db 67 c7 7b f3 b3 0b d0 fc bd d0 f4 e7 35 43 ae 90 83 d1 f4 bc 00 2d 7c 6f ab 1c 6c b7 4d b9 17 42 52 5f c3 91 36 b7 d7 8e 34 a2 6b 95 b9 03 48 11 5d 79 26 fd 26 e7 72 a1 78 a2 53 c7 9c 27 db 35 43 37 7d dc c6 54 90 1e 8d 70 46 79 ba c5 6c 18 6e 62 2d a0 e9 98 35 a8 d6 05 97 1a 3b 26 91 7c 66 bf 66 e6 5e cd 13 99 16 46 47 43 e4 b9 71 39 69 9b 7b 9c 26 2a 57 66 0d bf d3 41 73 72 fd 29 f9 e2 83 8e 47 a9 d4 93 d1 b3 e0 82 82 da ac 48 d0 24 68 96 76 95 c3 65 ef 8d 27 ed db d4 63 0e 72 27 f6 72 e7 91 d8 44 35 e2 65 be b9 ba 23 08 2f b0 Data Ascii: 7./-8jwu}q7Y6H`_Y9Z;rw1Gq0XS,g{5C-\|olMBR_64kH]y&&rxS'5C7}TpFylnb-5;&\|ff^FGCq9i{&*WfAsr)GH$hve'cr'rD5e#/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49749	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:13 UTC	631	OUT	GET /assets/js/vendor/jquery-3.4.1.min.js HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	846	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Sun, 05 May 2024 00:21:58 GMT last-modified: Tue, 23 Mar 2021 22:52:06 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 115695 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CM%2Fhf9X1IdbCakX5%2FVeThXecxLyx%2Bhop33jEQen4mDUL9ZstBCuItjIw0H1Anvo3%2F0BNbBm0AYLW2oROtgYYGgg0nRb9rgXsBPJANSOueMKSXVomJ8gQwE%2Fqe6XOnMD%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc89cfde259-ORD
2024-04-29 08:30:13 UTC	523	IN	Data Raw: 37 62 61 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bae/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 45 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 Data Ascii: .call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 6d 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 75 3b 73 2b 2b Data Ascii: ructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 64 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 69 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e Data Ascii: urn e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 49 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 57 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 24 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 Data Ascii: new RegExp("^"+M+"([>+~]\|"+M+")"+M+""),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"\|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+$),CHILD:new Re
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 72 26 26 28 28 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 6d 29 21 3d 3d 43 26 26 54 28 65 29 2c 65 3d 65 7c 7c 43 2c 45 29 29 7b 69 66 28 31 31 21 3d 3d 70 26 26 28 75 3d 5a 2e 65 78 65 63 28 74 Data Ascii: ;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)return n;if(!r&&((e?e.ownerDocument\|\|e:m)!==C&&T(e),e=e\|\|C,E)){if(11!==p&&(u=Z.exec(t
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 74 79 70 Data Ascii: n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.typ
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 6b 2c 21 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 Data Ascii: gName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=k,!C.getElementsByName\|\|!C.getElementsByName
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c Data Ascii: a=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[^$]="+M+"(?:''\|\"\
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 77 68 69 6c 65 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 Data Ascii: function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49750	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:13 UTC	641	OUT	GET /assets/js/vendor/bootstrap/js/bootstrap.min.js HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	838	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Sun, 05 May 2024 00:23:19 GMT last-modified: Tue, 23 Mar 2021 22:52:06 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 115614 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kTgyKo%2BQ2YW1SVQBHGdV54avoWNzEfm8k650bzG8UlZHE8FLEwjuI6vPerZo9LPdotIw8SPvOfud8P0nEOZFl7P4pHBCYOMa7ZMaQMSTEWtP8CHw0wObvNqKJy82oEm%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc89dd6639e-ORD
2024-04-29 08:30:13 UTC	531	IN	Data Raw: 37 62 62 37 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bb7/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 69 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 6e 26 26 69 28 74 2c 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: or(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 6c 3d 6f 2c 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6c 29 2e 6d 61 74 63 68 28 2f 5c 73 28 5b 61 2d 7a 41 2d 5a 5d 2b 29 2f 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 6e 65 77 20 52 65 67 45 78 70 28 72 29 2e 74 65 73 74 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 74 Data Ascii: ype},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(l=o,{}.toString.call(l).match(/\s([a-zA-Z]+)/)[1].toLowerCase());if(!new RegExp(r).test(a))throw new Error(t
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 28 74 29 2e 64 65 74 61 63 68 28 29 2e 74 72 69 67 67 65 72 28 75 2e 43 4c 4f 53 45 44 29 2e 72 65 6d 6f 76 65 28 29 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: d()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._destroyElement=function(t){o(t).detach().trigger(u.CLOSED).remove()},t._jQueryInterface=function(e){return th
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 29 2c 74 26 26 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 43 29 7d 2c 65 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 72 65 6d 6f 76 65 44 61 74 Data Ascii: ist.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-pressed",!p(this._element).hasClass(C)),t&&p(this._element).toggleClass(C)},e.dispose=function(){p.removeDat
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 74 69 76 65 22 2c 41 43 54 49 56 45 5f 49 54 45 4d 3a 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 49 54 45 4d 3a 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 4e 45 58 54 5f 50 52 45 56 3a 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 2c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 Data Ascii: -api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".active",ACTIVE_ITEM:".active.carousel-item",ITEM:".carousel-item",NEXT_PREV:".carousel-item-next, .carousel-i
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 65 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 65 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 74 28 74 68 69 73 2e 5f 65 6c Data Ascii: henVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];var i=this._getItemIndex(this._activeElement);if(!(e>this._items.length-1\|\|e<0))if(this._isSliding)t(this._el
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 3d 3d 3d 68 2c 69 3d 74 3d 3d 3d 63 2c 73 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 72 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 73 7c 7c 6e 26 26 73 3d 3d 3d 72 29 26 Data Ascii: (),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirection=function(t,e){var n=t===h,i=t===c,s=this._getItemIndex(e),r=this._items.length-1;if((i&&0===s\|\|n&&s===r)&
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 2b 69 29 2c 6f 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 6f 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 49 29 7d 2c 30 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 36 30 30 29 29 3a 28 Data Ascii: reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "+i),o._isSliding=!1,setTimeout(function(){return t(o._element).trigger(I)},0)}).emulateTransitionEnd(600)):(
2024-04-29 08:30:13 UTC	1369	IN	Data Raw: 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 3d 22 2e 22 2b 6e 2c 6f 3d 74 2e 66 6e 5b 65 5d 2c 61 3d 7b 74 6f 67 67 6c 65 3a 21 30 2c 70 61 72 65 6e 74 3a 22 22 7d 2c 6c 3d 7b 74 6f 67 67 6c 65 3a 22 62 6f 6f 6c 65 61 6e 22 2c 70 61 72 65 6e 74 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 29 22 7d 2c 68 3d 7b 53 48 4f 57 3a 22 73 68 6f 77 22 2b 69 2c 53 48 4f Data Ascii: ace,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i="."+n,o=t.fn[e],a={toggle:!0,parent:""},l={toggle:"boolean",parent:"(string\|element)"},h={SHOW:"show"+i,SHO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49751	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:13 UTC	652	OUT	GET /assets/js/functions.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:14 UTC	828	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:13 GMT last-modified: Wed, 10 Apr 2024 18:23:45 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2XZe%2BdObUj0hJ3elikdX1J6aKhejgSOFCsIjk1r4RoZjJr1Unx0p9L%2BF1OiH0Sfo2%2FpRjGiEfmjXALQhOdTGWSzL3fxVcgiwZ0m0OdrvU4TPWM2XyINOngk6SLrGuo9M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc89f551080-ORD
2024-04-29 08:30:14 UTC	541	IN	Data Raw: 35 32 64 0d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 54 69 6d 65 72 28 64 75 72 61 74 69 6f 6e 29 20 7b 0a 20 20 76 61 72 20 74 69 6d 65 72 20 3d 20 64 75 72 61 74 69 6f 6e 2c 20 6d 69 6e 75 74 65 73 2c 20 73 65 63 6f 6e 64 73 3b 0a 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 6d 69 6e 75 74 65 73 20 3d 20 70 61 72 73 65 49 6e 74 28 74 69 6d 65 72 20 2f 20 36 30 2c 20 31 30 29 3b 0a 20 20 20 20 73 65 63 6f 6e 64 73 20 3d 20 70 61 72 73 65 49 6e 74 28 74 69 6d 65 72 20 25 20 36 30 2c 20 31 30 29 3b 0a 0a 20 20 20 20 6d 69 6e 75 74 65 73 20 3d 20 6d 69 6e 75 74 65 73 20 3c 20 31 30 20 3f 20 22 22 20 2b 20 6d 69 6e 75 74 65 73 20 3a 20 6d 69 6e 75 74 65 73 3b 0a 20 20 20 20 73 65 63 6f 6e 64 73 20 3d 20 Data Ascii: 52dfunction startTimer(duration) { var timer = duration, minutes, seconds; setInterval(function() { minutes = parseInt(timer / 60, 10); seconds = parseInt(timer % 60, 10); minutes = minutes < 10 ? "" + minutes : minutes; seconds =
2024-04-29 08:30:14 UTC	791	IN	Data Raw: 61 74 69 6f 6e 29 3b 0a 0a 0a 69 66 28 72 65 66 72 65 73 68 5f 70 61 67 65 3d 3d 31 29 7b 0a 09 76 61 72 20 74 69 6d 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 24 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 62 69 6e 64 28 27 6d 6f 75 73 65 6d 6f 76 65 20 6b 65 79 70 72 65 73 73 20 73 63 72 6f 6c 6c 20 74 6f 75 63 68 73 74 61 72 74 20 74 6f 75 63 68 6d 6f 76 65 20 74 6f 75 63 68 65 6e 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 09 09 74 69 6d 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 7d 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 72 65 66 72 65 73 68 28 29 7b 0a 09 09 69 66 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 20 2d 20 74 69 6d 65 20 3e 3d 20 33 30 Data Ascii: ation);if(refresh_page==1){var time = new Date().getTime();$(document.body).bind('mousemove keypress scroll touchstart touchmove touchend', function(e){time = new Date().getTime();});function refresh(){if(new Date().getTime() - time >= 30
2024-04-29 08:30:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49752	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:13 UTC	618	OUT	GET /assets/js/gbvar.js?v=83 HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:13 UTC	834	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:13 GMT Content-Type: application/javascript Content-Length: 41 Connection: close Cache-Control: public, max-age=604800 expires: Sun, 05 May 2024 00:23:19 GMT last-modified: Wed, 21 Feb 2024 21:29:05 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 115614 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KeGOgNmr59FIWk8lbpRU5WQMCSfq60S3sPugPonxm4mbgTUzh8aNkbn1GWBOOz%2BciRVRnFhusdvgQ8IlFJncSHUIKEY98Y0VqjpYcOjfugzewkDpXMfJMlaQtZnJ4aAj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc908f4027b-ORD
2024-04-29 08:30:13 UTC	41	IN	Data Raw: 63 6f 6e 73 74 20 41 50 49 5f 55 52 4c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 75 6e 69 73 6f 6e 72 6f 61 64 2e 63 6f 6d 22 3b Data Ascii: const API_URL = "https://unisonroad.com";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49753	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:13 UTC	657	OUT	GET /assets/js/intl_functions.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:14 UTC	826	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:14 GMT last-modified: Thu, 14 Sep 2023 15:07:29 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lp2TZ0JP%2Fs1f3eW6pkVtInFrNSufi2QyzOJYLrCwhbhglLiV%2F6LnoeC1yX5Pvw2lpLrfVgiO0dhFnN7jBSjYawt3bqTZQRHM3QvnXcHYByWmr5bVmrX6N4LpZfKORAEE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedc90d850ccc-ORD
2024-04-29 08:30:14 UTC	543	IN	Data Raw: 65 33 37 0d 0a 6c 65 74 20 6f 5f 73 75 72 76 65 79 20 3d 20 6e 75 6c 6c 3b 0a 6c 65 74 20 73 5f 73 74 65 70 20 3d 20 30 3b 0a 6c 65 74 20 6c 61 73 74 51 75 65 73 74 69 6f 6e 20 3d 20 22 22 3b 0a 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 49 4e 54 53 75 72 76 65 79 28 73 69 64 29 7b 0a 09 24 28 27 2e 63 6f 6e 74 69 6e 75 65 27 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 6f 6e 63 6c 69 63 6b 27 29 3b 0a 09 24 2e 61 6a 61 78 28 7b 0a 09 09 74 79 70 65 3a 20 22 50 4f 53 54 22 2c 0a 09 09 75 72 6c 3a 20 22 22 2c 0a 09 09 64 61 74 61 3a 20 27 5f 74 79 70 65 3d 61 6a 61 78 26 5f 61 63 74 69 6f 6e 3d 6d 61 73 74 65 72 2d 67 65 74 49 4e 54 53 75 72 76 65 79 26 72 49 64 3d 27 2b 73 69 64 2c 0a 09 09 73 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b Data Ascii: e37let o_survey = null;let s_step = 0;let lastQuestion = "";function startINTSurvey(sid){$('.continue').removeAttr('onclick');$.ajax({type: "POST",url: "",data: '_type=ajax&_action=master-getINTSurvey&rId='+sid,success: function (r) {
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 09 09 69 6e 73 65 72 74 43 68 61 74 28 67 72 65 65 74 69 6e 67 29 3b 0a 09 09 09 09 09 69 6e 73 65 72 74 43 68 61 74 28 22 3c 76 69 64 65 6f 20 63 6c 61 73 73 3d 27 67 69 66 27 20 61 75 74 6f 70 6c 61 79 20 6c 6f 6f 70 20 6d 75 74 65 64 20 70 6c 61 79 73 69 6e 6c 69 6e 65 3e 3c 73 6f 75 72 63 65 20 73 72 63 3d 27 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 67 72 65 65 74 69 6e 67 2e 77 65 62 6d 27 20 74 79 70 65 3d 27 76 69 64 65 6f 2f 77 65 62 6d 27 3e 3c 2f 76 69 64 65 6f 3e 22 2c 20 31 32 30 30 2c 20 66 61 6c 73 65 2c 20 74 72 75 65 29 0a 09 09 09 09 09 69 6e 73 65 72 74 43 68 61 74 28 67 72 65 65 74 69 6e 67 32 2c 20 32 34 30 30 2c 20 74 72 75 65 29 3b 0a 09 09 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 Data Ascii: insertChat(greeting);insertChat("<video class='gif' autoplay loop muted playsinline><source src='assets/images/greeting.webm' type='video/webm'></video>", 1200, false, true)insertChat(greeting2, 2400, true);setTimeout(function () {
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 65 73 22 29 2e 73 68 6f 77 28 29 3b 0a 09 09 24 28 27 23 71 75 65 73 74 69 6f 6e 42 6f 64 79 27 29 2e 68 74 6d 6c 28 27 27 29 2e 73 68 6f 77 28 29 3b 0a 09 09 24 28 22 2e 73 70 72 6f 67 72 65 73 73 62 61 72 22 29 2e 73 68 6f 77 28 29 3b 0a 09 09 6c 65 74 20 71 73 20 3d 20 6f 5f 73 75 72 76 65 79 2e 71 75 65 73 74 69 6f 6e 73 5b 6b 71 75 65 73 74 69 6f 6e 73 5b 73 5f 73 74 65 70 20 2d 20 31 5d 5d 3b 0a 09 09 24 28 27 23 71 75 65 73 74 69 6f 6e 54 65 78 74 27 29 2e 68 74 6d 6c 28 71 73 2e 6e 61 6d 65 29 3b 0a 09 09 0a 09 09 2f 2f 62 61 72 63 65 6c 6f 6e 61 2c 61 70 72 69 6c 69 61 0a 09 09 69 66 20 28 74 79 70 65 6f 66 20 71 75 65 73 74 69 6f 6e 74 78 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 09 09 09 24 28 27 23 71 75 65 73 74 69 6f 6e 54 Data Ascii: es").show();$('#questionBody').html('').show();$(".sprogressbar").show();let qs = o_survey.questions[kquestions[s_step - 1]];$('#questionText').html(qs.name);//barcelona,apriliaif (typeof questiontx !== 'undefined') {$('#questionT
2024-04-29 08:30:14 UTC	365	IN	Data Raw: 6f 64 79 27 29 2e 61 70 70 65 6e 64 28 60 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 61 6e 73 77 65 72 4f 70 74 69 6f 6e 20 62 74 6e 5f 63 6f 6c 6f 72 20 62 74 6e 5f 68 63 6f 6c 6f 72 20 62 74 6e 5f 68 74 63 6f 6c 6f 72 20 62 74 6e 5f 74 78 63 6f 6c 6f 72 20 62 75 74 74 6f 6e 20 62 74 6e 2d 74 78 20 62 68 2d 63 6f 6c 6f 72 20 62 74 78 68 2d 63 6f 6c 6f 72 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 70 78 3b 22 3e 60 2b 76 2b 60 3c 2f 62 75 74 74 6f 6e 3e 60 29 3b 0a 09 09 09 7d 29 3b 0a 09 09 09 24 28 22 2e 61 6e 73 77 65 72 4f 70 74 69 6f 6e 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 6c 61 73 74 51 75 65 73 74 69 6f 6e 20 3d 20 24 28 74 68 69 73 29 2e 74 65 78 74 28 29 Data Ascii: ody').append(`<button class="answerOption btn_color btn_hcolor btn_htcolor btn_txcolor button btn-tx bh-color btxh-color" style="margin-right: 2px;">`+v+`</button>`);});$(".answerOption").on("click", function () {lastQuestion = $(this).text()
2024-04-29 08:30:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49754	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:13 UTC	446	OUT	GET /uploads/archive/company/175/images/onlinesurvey-color.png HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:14 UTC	829	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:14 GMT Content-Type: image/png Content-Length: 41556 Connection: close Cache-Control: public, max-age=604800 expires: Sun, 05 May 2024 14:57:01 GMT last-modified: Thu, 10 Mar 2022 19:58:45 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 63193 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=67Kc1vQKWpw%2BuiFMaIzXEFbyWZPTaRhIUsUWsLt8ihbvaWTlBioAo9FJ2r9Mo9Zmn7cCQX67L%2F9ZwKHgNa2jxNZHZzCa%2FqryeGePEUS0x0k686BhKlB%2FSMm5c53Gze0l"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedca0d93e255-ORD
2024-04-29 08:30:14 UTC	540	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 16 00 00 01 14 08 06 00 00 00 5e 5c 6a c6 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR^\jpHYsodOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 24 81 32 5d 81 47 04 f8 e0 c2 cc f4 4c a5 1c cf 92 09 84 62 dc e6 8f 47 fc b7 0b ff fc 1d d3 22 c4 49 62 b9 58 2a 14 e3 51 12 71 8e 44 9a 8c f3 32 a5 22 89 42 92 29 c5 25 d2 ff 64 e2 df 2c fb 03 3e df 35 00 b0 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d Data Ascii: $2]GLbG"IbXQqD2"B)%d,>5j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(*`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: df fc ed f3 87 e2 9d e2 0b e3 7b 17 98 2f c8 5d 70 79 a1 ce c2 f4 85 a7 16 a9 2e 12 2c 3a 96 40 4c 88 4e 38 94 f0 41 10 2a a8 16 8c 25 f2 13 77 25 8e 0a 79 c2 1d c2 67 22 2f d1 36 d1 88 d8 43 5c 2a 1e 4e f2 48 2a 4d 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 e8 54 5a 28 d7 2a 07 b2 67 65 57 66 bf cd 89 ca 39 96 ab 9e 2b cd ed cc b3 ca db 90 37 9c ef 9f ff ed 12 c2 12 e1 92 b6 a5 86 4b 57 2d 1d 58 e6 bd ac 6a 39 b2 3c 71 79 db 0a e3 15 05 2b 86 56 06 ac 3c b8 8a b6 2a 6d d5 4f ab ed 57 97 ae 7e bd 26 7a 4d 6b 81 5e c1 ca 82 c1 b5 01 6b eb 0b 55 0a e5 85 7d eb dc d7 Data Ascii: {/]py.,:@LN8A%w%yg"/6C\NHMz5y$3,'LL:v m2=:1qB!Mggfven/kY-BTZ(geWf9+7KW-Xj9<qy+V<*mOW~&zMk^kU}
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 4b 88 d0 fa af ff 96 1e ed 63 5b ed c2 96 7a 2d 87 b9 59 58 15 22 b7 01 00 00 00 00 00 00 00 74 07 81 45 d0 9b 9f 1f 3f a8 d3 f9 f4 de d3 44 20 a0 fe 59 0b 09 21 15 2a 10 22 ac 44 88 99 19 b3 9d 59 58 10 52 b6 0c 21 65 ca fc f5 5f b3 32 84 14 15 11 52 f4 9e 90 f7 6a 7a 84 d0 69 d3 46 17 ef 05 c8 75 00 00 00 00 00 00 00 00 dd 40 60 11 f4 c6 2d 66 d3 b9 ac fc 17 ed 8b af 8d 02 42 ac ad 08 a9 54 f1 33 ef 57 22 c4 ba 22 21 e6 65 be f4 75 b4 f9 eb b7 85 3d 2d ec 8e 1c 74 69 36 09 b9 0f 00 00 00 00 00 00 00 a0 5d 66 c8 02 d0 87 25 69 37 fa 64 e5 bf 70 fd ec 46 6a 35 21 2f 5e 12 92 f3 94 90 b7 ff 5a e8 d9 ca 92 90 9a 0e 84 d8 59 33 09 2a 12 42 08 55 58 a1 bc fb 21 c1 ab 5e d6 f7 ce df 3a 96 f7 b8 21 4a 01 00 00 00 00 00 00 00 40 7b d0 63 11 f4 a2 fa c1 f5 97 7f Data Ascii: Kc[z-YX"tE?D Y!"DYXR!e_2RjziFu@`-fBT3W""!eu=-ti6]f%i7dpFj5!/^ZY3BUX!^:!J@{c
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: a6 17 db b9 4f 45 e9 01 00 00 00 00 00 00 00 68 0f 02 8b c0 ca 86 94 1b 23 09 db de 8a 8e f6 84 94 2f c7 59 9a 85 85 6a d5 50 bb 9a e7 51 7a 00 00 00 00 00 00 00 00 da 83 c0 22 30 16 7e 3b 61 e8 8b c2 77 d6 ac 3e a4 56 13 52 d3 81 cb 64 d3 b3 6d a9 b9 28 3d 00 00 00 00 00 00 00 00 ed 42 60 11 18 5b 93 7a 7d 2c 61 db 5b b1 5a 15 42 2c ca 73 96 66 ab f7 ea fc b0 ca 2e 87 50 7a 00 00 00 00 00 00 00 00 da 85 c0 22 30 b2 f0 ce f5 01 cf de be b1 63 f5 21 b5 9a 90 5a 8e 5c 26 9b 9e 62 5d 73 09 4a 0f 00 00 00 00 00 00 00 40 fb 04 6a b5 1a b9 00 5f 54 65 ff 9a 1b cf de be f6 66 f7 21 5b 42 ea bb 71 96 e6 0a ef d5 69 05 6e be f5 51 7a 00 00 00 00 00 00 00 00 da 87 1e 8b f0 45 cb d3 6f f6 7a f6 f6 b5 1d eb 0f d6 aa ce 65 b2 e9 f1 56 8e ab 50 7a 00 00 00 00 00 00 00 Data Ascii: OEh#/YjPQz"0~;aw>VRdm(=B`[z},a[ZB,sf.Pz"0c!Z\&b]sJ@j_Tef![BqinQzEozeVPz
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: e1 9e 95 95 e5 9a 9d 9d ed 42 d3 34 95 99 99 e9 fa e4 c9 13 7b cd 26 94 16 be 86 26 84 10 2b 2b ab fc 5a b5 6a dd af 5d bb 76 46 93 26 4d 6e 34 6b d6 ec aa 9f 9f 5f 5a 69 77 5e 7e d7 f2 bb ef 8a 8a ea b0 fa 90 b3 23 21 b5 6a 70 96 ef 4e 7f 92 8b 0f 6a 8b db a2 06 02 30 b3 66 cd 9a ee b3 66 cd 9a fb fc f9 73 61 29 cf 4b 74 85 0a 15 de 4c 9a 34 69 d9 dc b9 73 37 23 67 01 00 00 00 00 00 80 10 04 16 19 91 cb e5 a2 4b 97 2e b5 89 8b 8b f3 b9 76 ed 5a 53 cd 9f 29 8e 92 43 13 42 48 cd 9a 35 1f 36 6d da f4 7a cb 96 2d 2f fb f9 f9 9d 6a d4 a8 51 1e d3 1d 8c b9 7e 6e ca ba 3b 89 a3 59 1f 43 0b 11 21 65 39 1b 3d 4f 1f af ec d1 ad 6b 25 fb 54 d4 48 80 2f 1b 34 68 d0 fc 5d bb 76 0d d0 f2 b9 8a ee d2 a5 cb 99 53 a7 4e 8d 44 0e 03 00 00 00 00 00 00 02 8b 9f 70 f2 e4 49 Data Ascii: B4{&&++Zj]vF&Mn4k_Ziw^~#!jpNj0ffsa)KtL4is7#gK.vZS)CBH56mz-/jQ~n;YC!e9=Ok%TH/4h]vSNDpI
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 61 1b 62 42 bd 14 3f 70 76 76 be 1f 18 18 a8 f8 d4 7b 4b 6f 25 7c cf 3a 4f 84 95 08 a9 c8 dd c8 ca 72 ef 8b de 2d ae 56 6f 2d 9a 27 94 56 5e 5e 9e b5 31 a7 23 35 35 d5 f2 cd 9b 37 16 7c 38 c6 fc fc 7c ab ec ec 6c 33 d4 3a 00 00 00 00 00 00 d3 61 6e c8 89 cf cc cc 34 f7 f7 f7 3f 9c 92 92 e2 41 4c 30 a0 a8 41 ff f0 c3 0f 0b 3f f5 c6 ba cc e4 ae bf 15 e4 b3 9f 28 91 e2 b4 93 17 fd 9d 65 b5 4d 68 9a 00 5f 96 93 93 e3 c0 a3 73 1f f5 f0 e1 43 27 17 17 97 fb 28 19 00 00 00 00 00 00 d3 60 b0 bd 4b f6 ef df df bc 71 e3 c6 49 29 29 29 5d 89 e9 06 15 89 a3 a3 63 ce a8 51 a3 4e 7d ea bd 1f 93 4b d0 5b d1 ba 22 21 95 2a 72 76 3c e5 de 17 bd 5b e5 d8 60 29 9a 26 c0 97 69 02 8b bc f1 e0 c1 03 27 94 0a 00 00 00 00 00 80 e9 30 c8 c0 e2 88 11 23 66 f6 ed db 77 5f 41 41 81 Data Ascii: abB?pvv{Ko%\|:Or-Vo-'V^^1#557\|8\|l3:an4?AL0A?(eMh_sC'(`KqI)))]cQN}K["!*rv<[`)&i'0#fw_AA
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 1b 5d bb 76 4d bd 72 e5 ca 57 d5 ab 57 8f 27 da eb bd 48 57 ae 5c f9 66 7c 7c 7c 6b 7f 7f 7f 25 72 19 00 00 00 00 00 00 38 0d 2c c6 c4 c4 78 63 5e c5 cf 13 08 04 f4 ac 59 b3 e6 7e ea bd e9 49 17 e7 ab 09 db de 8a 66 84 54 ab cc dd f1 10 42 ef a9 d1 18 73 2b 02 e8 58 c3 86 0d f3 7f fb ed b7 d6 13 27 4e 8c 2a ed bc 8b 66 66 66 59 23 46 8c d8 f4 f4 e9 d3 26 5e 5e 5e b9 c8 5d 00 00 00 00 00 00 20 84 e3 c0 62 60 60 e0 36 82 a0 e2 67 f5 ec d9 f3 48 83 06 0d f2 3f f5 5e 4c f6 dd 5e ac 77 e8 5c e3 af a1 d0 1c a9 5d 58 26 bd 41 f9 4a f9 28 59 00 fd 58 b6 6c d9 ca 94 94 94 06 12 89 44 4a fe ea bd 48 33 fc 28 4d 08 a1 3b 75 ea b4 f9 c6 8d 1b 4d 36 6e dc b8 00 b9 09 00 00 00 00 00 00 1f 33 e7 ea 8b 3b 77 ee bc e9 e5 cb 97 56 28 82 cf 3f d8 cf 9e 3d 3b f2 53 6f 0c be Data Ascii: ]vMrWW'HW\f\|\|\|k%r8,xc^Y~IfTBs+X'N*fffY#F&^^^] b``6gH?^L^w\]X&AJ(YXlDJH3(M;uM6n3;wV(?=;So
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 21 34 47 76 0e 1e 3c d8 f4 dc b9 73 ed 95 4a a5 d7 a3 47 8f aa 3f 79 f2 c4 fe a3 9e c1 4c ea 0b 4d 08 21 ee ee ee 19 1e 1e 1e a9 8d 1b 37 be d5 b2 65 cb f8 ae 5d bb 62 05 6f 00 1d db b1 63 47 bb 73 e7 ce 75 b8 79 f3 a6 f7 af bf fe 5a 2b 2f 2f cf 9a 6d db b5 b1 b1 c9 6b d0 a0 c1 6d 0f 0f 8f 3b 4d 9a 34 b9 de b6 6d db 8b 0d 1a 34 c8 47 ee ea c6 f1 e3 c7 1b 5e bc 78 b1 4d 7a 7a 7a ed ec ec 6c d7 f4 f4 f4 3a af 5e bd b2 64 51 6e ff 28 3f 42 08 a9 56 ad da 13 07 07 87 1c 37 37 b7 0c 5f 5f df d8 36 6d da 5c c4 c3 01 7f 6d db b6 4d ac 50 28 7c 95 4a 65 63 a5 52 29 fa f8 19 8f 49 99 53 14 45 8b 44 22 a5 58 2c 8e 13 89 44 4a fc 40 00 a0 3d bb 77 ef 6e 75 eb d6 ad c6 b7 6f df 6e 90 94 94 24 7a f0 e0 81 d3 87 f7 ea d4 a9 93 be 77 ef de fe 5e 5e 5e f8 41 1d 78 25 2e Data Ascii: !4Gv<sJG?yLM!7e]bocGsuyZ+//mkm;M4m4G^xMzzzl:^dQn(?BV77__6m\mMP(\|JecR)ISED"X,DJ@=wnuon$zw^^^Ax%.
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 6e 6d 8f fa f6 ff d7 8e 1d 3b da 7c a9 ce 09 04 82 6c ae 7f d0 53 ab d5 c4 d7 d7 f7 8b 01 77 a1 50 98 a8 8b ef 8e 8c 8c 1c 52 b5 6a d5 6b a5 69 9f 13 27 4e 9c c0 e6 3b a3 a3 a3 c5 0c be 2f 5b 24 12 c5 a0 2e b3 7b cd 9f 3f 7f 00 93 bc f5 f1 f1 d9 66 c8 d7 14 89 44 12 c5 c1 8f cb 5f bc d6 50 14 15 6b 88 3f 66 25 27 27 5b 33 a9 37 ce ce ce 71 a9 a9 a9 96 68 6b 9f 7f 31 8c 35 64 a7 a5 a5 59 70 1a 58 ac 56 ad da 15 be 34 9e f6 ed db 6f 31 b4 82 ae 71 70 fd 25 d6 41 c5 23 eb 39 ed ad 58 2e e3 dc dd 2f fd 5a f3 a9 ca 6b 61 61 71 47 5f f9 ca e1 c3 63 36 93 00 d3 d1 a3 47 1b 7e d4 0b 8b 77 0f b6 b5 6a d5 8a 33 94 00 bd 29 05 16 87 0e 1d 3a 9b 83 3a 93 3d 78 f0 e0 b9 fa bc 41 e3 aa ed 7a 79 79 31 7a 68 98 38 71 e2 04 be 06 a7 04 02 41 f6 90 21 43 22 71 23 f5 ff d7 Data Ascii: nm;\|lSwPRjki'N;/[$.{?fD_Pk?f%''[37qhk15dYpXV4o1qp%A#9X./ZkaaqG_c6G~wj3)::=xAzyy1zh8qA!C"q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49755	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:14 UTC	741	OUT	POST / HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive Content-Length: 41 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ossiaband.cfd Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:14 UTC	41	OUT	Data Raw: 5f 74 79 70 65 3d 61 6a 61 78 26 5f 61 63 74 69 6f 6e 3d 6d 61 73 74 65 72 2d 67 65 74 50 6f 70 75 6e 64 65 72 44 61 74 61 Data Ascii: _type=ajax&_action=master-getPopunderData
2024-04-29 08:30:14 UTC	808	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FIbTu2fuvqBAyx9Px8P4AwhFH7pV0EkWBGMdVWbJzpWsBHw%2BCzzSGYqvGju2IUG4SufReFrxbvWeYBGzjE7B8rUZNTPqHDItEVb5GzNKn7utPwJb3sUhhs28Z1l%2Bw9hz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedcb8f24e110-ORD
2024-04-29 08:30:14 UTC	76	IN	Data Raw: 34 36 0d 0a 7b 22 6e 6f 74 69 66 79 22 3a 5b 5d 2c 22 64 61 74 61 22 3a 22 7b 5c 22 70 6f 70 75 6e 64 65 72 5f 6d 6f 64 65 5c 22 3a 5b 7b 5c 22 74 79 70 65 5c 22 3a 30 2c 5c 22 64 65 76 69 63 65 5c 22 3a 30 7d 5d 7d 22 7d 0d 0a Data Ascii: 46{"notify":[],"data":"{\"popunder_mode\":[{\"type\":0,\"device\":0}]}"}
2024-04-29 08:30:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49756	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:14 UTC	653	OUT	GET /assets/js/isp/common.js?v=6f0cfeb1af067fdd48b2b1e03bf20e6b HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:14 UTC	828	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:14 GMT last-modified: Fri, 05 Apr 2024 15:36:18 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cWsnIAGSb6zVVR2MAsqA6PMap6t%2BJhfVCAb5CDNx5zN%2FZAz5PoBer2NN0vWmHAZeCBmPdsjnShxgPhDYMZVovix%2FTyBoahZ6BV2SYe9n5R3u35ESA3ora7sfqoEpCo8N"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedcc991186de-ORD
2024-04-29 08:30:14 UTC	541	IN	Data Raw: 37 62 63 30 0d 0a 6c 65 74 20 24 63 75 72 72 3b 0a 6c 65 74 20 64 61 74 61 20 3d 20 7b 7d 3b 0a 6c 65 74 20 70 65 72 63 65 6e 74 62 61 72 3d 30 3b 0a 6c 65 74 20 73 75 72 76 65 79 69 64 3d 22 22 3b 0a 76 61 72 20 61 74 74 72 43 68 6f 69 63 65 73 3d 24 28 27 23 64 76 2d 63 68 6f 69 63 65 73 27 29 2e 61 74 74 72 28 27 73 69 64 27 29 3b 0a 76 61 72 20 64 6f 6d 61 69 6e 3d 27 65 78 63 69 74 65 2e 6f 73 72 61 6d 6c 75 6d 65 6e 73 2e 63 6f 6d 27 3b 0a 76 61 72 20 70 69 70 65 6c 69 6e 65 3d 27 73 61 75 2e 62 62 63 72 79 73 74 61 6c 2e 63 6f 6d 27 3b 0a 76 61 72 20 7a 69 70 63 6f 64 65 3d 22 22 3b 0a 76 61 72 20 73 74 61 74 65 5f 73 65 6c 65 63 74 65 64 3d 22 22 3b 0a 76 61 72 20 73 6b 69 70 5f 6d 6f 64 61 6c 5f 65 6d 61 69 6c 3d 66 61 6c 73 65 3b 0a 76 61 72 20 Data Ascii: 7bc0let $curr;let data = {};let percentbar=0;let surveyid="";var attrChoices=$('#dv-choices').attr('sid');var domain='excite.osramlumens.com';var pipeline='sau.bbcrystal.com';var zipcode="";var state_selected="";var skip_modal_email=false;var
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 41 22 3a 22 49 6f 77 61 22 2c 22 4b 53 22 3a 22 4b 61 6e 73 61 73 22 2c 22 4b 59 22 3a 22 4b 65 6e 74 75 63 6b 79 22 2c 22 4c 41 22 3a 22 4c 6f 75 69 73 69 61 6e 61 22 2c 22 4d 45 22 3a 22 4d 61 69 6e 65 22 2c 20 22 4d 44 22 3a 22 4d 61 72 79 6c 61 6e 64 22 2c 20 22 4d 41 22 3a 22 4d 61 73 73 61 63 68 75 73 65 74 74 73 22 2c 20 22 4d 49 22 3a 22 4d 69 63 68 69 67 61 6e 22 2c 20 22 4d 4e 22 3a 22 4d 69 6e 6e 65 73 6f 74 61 22 2c 20 22 4d 53 22 3a 22 4d 69 73 73 69 73 73 69 70 70 69 22 2c 20 22 4d 4f 22 3a 22 4d 69 73 73 6f 75 72 69 22 2c 20 22 4d 54 22 3a 22 4d 6f 6e 74 61 6e 61 22 2c 22 4e 45 22 3a 22 4e 65 62 72 61 73 6b 61 22 2c 22 4e 56 22 3a 22 4e 65 76 61 64 61 22 2c 22 4e 48 22 3a 22 4e 65 77 20 48 61 6d 70 73 68 69 72 65 22 2c 22 4e 4a 22 3a 22 4e Data Ascii: A":"Iowa","KS":"Kansas","KY":"Kentucky","LA":"Louisiana","ME":"Maine", "MD":"Maryland", "MA":"Massachusetts", "MI":"Michigan", "MN":"Minnesota", "MS":"Mississippi", "MO":"Missouri", "MT":"Montana","NE":"Nebraska","NV":"Nevada","NH":"New Hampshire","NJ":"N
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 28 61 74 74 72 43 68 6f 69 63 65 73 29 29 7b 0a 20 20 20 73 75 72 76 65 79 69 64 3d 24 28 27 23 64 76 2d 63 68 6f 69 63 65 73 27 29 2e 61 74 74 72 28 27 73 69 64 27 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 62 69 72 74 68 64 61 79 46 69 6c 6c 28 29 7b 0a 09 2f 2a 62 69 72 74 68 64 61 79 2a 2f 0a 09 76 61 72 20 6d 6f 6e 74 68 3d 20 5b 22 4a 61 6e 75 61 72 79 22 2c 20 22 46 65 62 72 75 61 72 79 22 2c 20 22 4d 61 72 63 68 22 2c 20 22 41 70 72 69 6c 22 2c 20 22 4d 61 79 22 2c 20 22 4a 75 6e 65 22 2c 20 22 4a 75 6c 79 22 2c 20 22 41 75 67 75 73 74 22 2c 20 22 53 65 70 74 65 6d 62 65 72 22 2c 20 22 4f 63 74 6f 62 65 72 22 2c 20 22 4e 6f 76 65 6d 62 65 72 22 2c 20 22 44 65 63 65 6d 62 65 72 22 5d 3b 0a 09 76 61 72 20 79 65 61 72 3d 5b 5d 3b 0a 09 76 61 72 20 64 Data Ascii: (attrChoices)){ surveyid=$('#dv-choices').attr('sid');}function birthdayFill(){/birthday/var month= ["January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December"];var year=[];var d
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 7c 7c 20 61 64 76 45 6d 61 69 6c 3d 3d 34 29 7b 0a 09 09 24 28 27 2e 64 75 65 5f 68 2c 20 2e 74 65 78 74 32 54 27 29 2e 68 69 64 65 28 29 3b 0a 09 09 24 28 27 2e 74 65 78 74 32 54 2e 74 78 32 74 27 29 2e 73 68 6f 77 28 29 3b 0a 09 7d 0a 09 69 66 28 24 28 27 23 6d 6f 64 61 6c 5f 65 6d 61 69 6c 27 29 2e 6c 65 6e 67 74 68 3e 30 20 26 26 20 6c 70 6f 77 3d 3d 27 38 27 20 26 26 20 74 79 70 65 6f 66 20 74 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 4e 61 6d 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 4e 61 6d 65 3d 3d 27 31 2e 34 2d 70 6f 70 75 6e 64 65 72 45 6d 61 69 6c 27 29 7b 0a 09 09 76 61 72 20 69 64 5f 6d 6f 64 61 6c 5f 65 6d 61 69 6c 3d 24 28 27 23 70 73 65 6c 5f 69 64 27 29 2e 76 61 6c 28 29 Data Ascii: \|\| advEmail==4){$('.due_h, .text2T').hide();$('.text2T.tx2t').show();}if($('#modal_email').length>0 && lpow=='8' && typeof templateVersionName !== 'undefined' && templateVersionName=='1.4-popunderEmail'){var id_modal_email=$('#psel_id').val()
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 44 41 32 27 7d 29 3b 0a 20 20 7d 2c 20 31 35 30 30 29 3b 0a 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 22 23 76 32 61 2c 23 76 32 62 22 29 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 24 28 22 23 76 32 63 2c 23 76 33 62 22 29 2e 73 68 6f 77 28 29 3b 0a 09 24 28 27 23 66 63 32 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 66 61 2d 63 69 72 63 6c 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 27 29 3b 0a 09 24 28 22 23 76 32 62 2e 62 6c 22 29 2e 63 73 73 28 7b 27 63 6f 6c 6f 72 27 3a 27 23 30 30 30 27 7d 29 3b 0a 09 24 28 27 23 66 63 33 27 29 2e 63 73 73 28 7b 27 63 6f 6c 6f 72 27 3a 27 23 30 33 34 44 41 32 27 7d 29 3b 0a 20 20 7d 2c 20 33 35 30 30 29 3b 0a 20 20 73 65 Data Ascii: DA2'}); }, 1500); setTimeout(function() { $("#v2a,#v2b").hide(); $("#v2c,#v3b").show();$('#fc2').removeClass('fa-circle').addClass('fa-check-circle');$("#v2b.bl").css({'color':'#000'});$('#fc3').css({'color':'#034DA2'}); }, 3500); se
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 68 27 3a 27 30 25 27 7d 29 3b 0a 09 24 28 27 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 2e 64 75 62 27 29 2e 63 73 73 28 7b 27 77 69 64 74 68 27 3a 27 31 30 30 25 27 7d 29 3b 0a 09 63 6f 75 6e 74 5f 70 28 29 3b 0a 09 73 65 74 54 69 6d 65 6f 75 74 28 0a 09 09 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 24 28 27 2e 63 68 65 63 6b 31 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 66 61 2d 73 70 69 6e 6e 65 72 20 66 61 2d 73 70 69 6e 27 29 2e 61 64 64 43 6c 61 73 73 28 27 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 27 29 2e 73 68 6f 77 28 29 3b 0a 09 09 09 24 28 27 2e 6c 6f 61 64 5f 74 65 78 74 31 2e 6c 6f 61 64 74 78 73 74 72 69 70 27 29 2e 63 73 73 28 7b 27 63 6f 6c 6f 72 27 3a 27 23 65 34 65 33 65 33 27 7d 29 3b 0a 09 09 09 24 28 27 23 70 65 72 63 65 6e 74 Data Ascii: h':'0%'});$('.progress-bar.dub').css({'width':'100%'});count_p();setTimeout(function(){$('.check1').removeClass('fa-spinner fa-spin').addClass('fa-check-circle').show();$('.load_text1.loadtxstrip').css({'color':'#e4e3e3'});$('#percent
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 73 75 72 76 65 79 2d 62 75 74 74 6f 6e 20 62 75 74 74 6f 6e 73 20 62 74 78 68 2d 63 6f 6c 6f 72 20 62 74 6e 2d 74 78 20 62 68 2d 63 6f 6c 6f 72 22 3e 27 2b 76 2e 61 6e 73 77 65 72 54 65 78 74 2b 27 3c 2f 62 75 74 74 6f 6e 3e 27 29 0a 20 20 20 20 20 20 2e 66 61 64 65 49 6e 28 29 3b 0a 20 20 20 20 7d 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 4f 66 28 69 64 65 6d 2c 73 6b 69 70 41 64 76 45 6d 61 69 6c 3d 66 61 6c 73 65 29 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 24 28 27 23 6f 70 2d 27 2b 69 64 65 6d 29 2e 61 74 74 72 28 27 64 61 74 61 2d 69 64 27 29 3b 0a 09 75 72 6c 20 3d 20 72 65 70 6c 61 63 65 55 72 6c 50 61 72 61 6d 28 75 72 6c 2c 20 27 73 31 27 2c 20 61 66 66 5f 69 64 29 3b 0a 09 75 72 6c 20 3d 20 72 65 70 6c 61 63 65 Data Ascii: class="survey-button buttons btxh-color btn-tx bh-color">'+v.answerText+'</button>') .fadeIn(); });}function sendOf(idem,skipAdvEmail=false){var url = $('#op-'+idem).attr('data-id');url = replaceUrlParam(url, 's1', aff_id);url = replace
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 61 72 72 5f 70 6f 70 75 6e 64 65 72 73 5b 27 70 6f 70 75 6e 64 65 72 5f 72 65 66 72 65 73 68 5f 69 64 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 0a 09 09 76 61 72 20 70 5f 73 65 6c 3d 61 72 72 5f 70 6f 70 75 6e 64 65 72 73 5b 27 70 6f 70 75 6e 64 65 72 5f 72 65 66 72 65 73 68 5f 69 64 27 5d 3b 0a 09 09 70 6f 70 5f 72 65 66 72 65 73 68 5f 69 64 3d 61 72 72 5f 70 6f 70 75 6e 64 65 72 73 5b 27 70 6f 70 75 6e 64 65 72 5f 72 65 66 72 65 73 68 5f 69 64 27 5d 3b 0a 09 09 70 6f 70 5f 74 3d 61 72 72 5f 70 6f 70 75 6e 64 65 72 73 5b 27 64 79 6e 61 6d 69 63 27 5d 5b 70 6f 70 5f 72 65 66 72 65 73 68 5f 69 64 5d 3b 0a 09 09 73 69 64 5f 70 6f 70 75 6e 64 65 72 3d 61 72 72 5f 70 6f 70 75 6e 64 65 72 73 5b 27 68 69 74 73 69 64 5f 70 6f 70 75 Data Ascii: typeof arr_popunders['popunder_refresh_id']!='undefined'){var p_sel=arr_popunders['popunder_refresh_id'];pop_refresh_id=arr_popunders['popunder_refresh_id'];pop_t=arr_popunders['dynamic'][pop_refresh_id];sid_popunder=arr_popunders['hitsid_popu
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 5f 62 6c 61 6e 6b 27 29 3b 09 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 29 3b 09 0a 09 09 7d 65 6c 73 65 7b 0a 09 09 09 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 72 72 5f 70 6f 70 75 6e 64 65 72 73 5b 27 75 72 6c 73 27 5d 29 2e 66 6f 72 45 61 63 68 28 28 5b 6b 65 79 2c 20 76 61 6c 75 65 5d 29 20 3d 3e 20 7b 0a 09 09 09 09 69 66 28 70 6f 70 5f 64 3d 3d 31 20 26 26 20 24 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3c 35 37 36 20 7c 7c 20 70 6f 70 5f 64 3d 3d 32 20 26 26 20 24 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3e 20 35 37 36 20 7c 7c 20 70 6f 70 5f 64 3d 3d 30 29 7b 0a 09 09 09 09 09 69 66 28 6b 65 79 3d 3d 61 72 72 5f 70 6f 70 75 6e 64 65 72 73 5b 27 70 6f 70 75 6e Data Ascii: _blank');}}});}});}else{Object.entries(arr_popunders['urls']).forEach(([key, value]) => {if(pop_d==1 && $(window).width()<576 \|\| pop_d==2 && $(window).width()> 576 \|\| pop_d==0){if(key==arr_popunders['popun
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 29 3b 0a 09 09 6c 65 74 20 70 72 20 3d 20 24 28 27 23 6f 70 2d 27 2b 69 64 65 6d 29 2e 61 74 74 72 28 27 64 61 74 61 2d 70 72 6d 27 29 2e 73 70 6c 69 74 28 27 2d 27 29 3b 0a 09 09 69 66 28 63 6a 78 2e 69 6e 64 65 78 4f 66 28 69 64 65 6d 29 20 3d 3d 20 2d 31 29 7b 0a 09 09 09 63 6a 78 2e 70 75 73 68 28 69 64 65 6d 29 3b 0a 09 09 09 6c 65 74 20 69 6e 61 6d 65 20 3d 20 24 28 27 23 6f 70 2d 27 2b 69 64 65 6d 29 2e 66 69 6e 64 28 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 69 5f 6e 61 6d 65 5d 27 29 2e 76 61 6c 28 29 3b 0a 09 09 09 76 61 72 20 72 5f 70 61 72 61 6d 73 20 3d 20 7b 0a 09 09 09 09 74 72 61 63 6b 69 6e 67 47 75 69 64 3a 24 28 27 23 74 72 61 63 6b 69 6e 67 47 75 69 64 27 29 2e 76 61 6c 28 29 2c 0a 09 09 09 09 6f 66 66 65 72 57 61 6c 6c 49 44 3a 6c 70 6f 77 Data Ascii: );let pr = $('#op-'+idem).attr('data-prm').split('-');if(cjx.indexOf(idem) == -1){cjx.push(idem);let iname = $('#op-'+idem).find('input[name=i_name]').val();var r_params = {trackingGuid:$('#trackingGuid').val(),offerWallID:lpow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49757	172.67.177.226	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:14 UTC	536	OUT	GET /scripts/push/v9e118mez8 HTTP/1.1 Host: trk-adulvion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:14 UTC	1342	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:14 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 1300 Last-Modified: Mon, 29 Apr 2024 08:08:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ItZCALoSw6TX4apkHu98qwywT6X3diVZWGmUFg9RuRHiil49bh9Ad%2F%2BRF2fITzWNujdegVM04umZWOdXRHkM%2FTj3HeJipJ4UsPhMFsRNbxeM24%2B%2FMl20pX84i4VOrpmt45eh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-29 08:30:14 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 37 62 64 65 64 63 63 62 62 35 63 32 39 64 38 2d 4f 52 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 87bdedccbb5c29d8-ORDalt-svc: h3=":443"; ma=86400
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 31 63 39 61 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 3d 22 42 4a 62 75 6a 74 4b 49 6d 6b 69 4c 57 6a 6c 57 6b 4d 47 59 4d 6f 32 5f 73 4d 30 61 6c 32 34 4b 6f 53 37 55 36 54 4a 31 55 37 73 4b 4a 61 78 6c 49 55 4c 7a 35 73 36 70 37 74 4e 36 57 62 6e 4c 69 73 43 71 5f 53 69 35 68 50 37 58 30 37 36 39 54 76 50 44 46 54 51 3d 22 2c 73 6d 50 75 73 68 53 69 74 65 49 64 3d 22 76 39 65 31 31 38 6d 65 7a 38 22 2c 73 6d 43 6c 69 65 6e 74 49 64 3d 22 71 32 67 6f 79 6b 6a 64 72 76 22 2c 73 65 72 76 69 63 65 57 6f 72 6b 65 72 3d 22 2f 73 65 72 76 69 63 65 2d 77 6f 72 6b 65 72 2e 6a 73 22 3b 6c 65 74 20 73 6d 50 75 73 68 44 6f 6d 61 69 6e 3d 22 70 75 73 Data Ascii: 1c9a'use strict';const smPushApplicationServerPublicKey="BJbujtKImkiLWjlWkMGYMo2_sM0al24KoS7U6TJ1U7sKJaxlIULz5s6p7tN6WbnLisCq_Si5hP7X0769TvPDFTQ=",smPushSiteId="v9e118mez8",smClientId="q2goykjdrv",serviceWorker="/service-worker.js";let smPushDomain="pus
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 2e 73 6f 75 72 63 65 5f 74 77 6f 2c 62 2e 73 6f 75 72 63 65 5f 74 77 6f 29 2c 61 2e 73 6f 75 72 63 65 54 68 72 65 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 2c 62 2e 73 6f 75 72 63 65 5f 74 68 72 65 65 29 2c 61 2e 73 6f 75 72 63 65 46 6f 75 72 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 66 6f 75 72 2c 62 2e 73 6f 75 72 63 65 5f 66 6f 75 72 29 2c 61 2e 73 6f 75 72 63 65 46 69 76 65 3d 73 65 74 49 66 4e 75 6c 6c 28 75 74 6d 4f 62 6a 2e 73 6f 75 72 63 65 5f 66 69 76 65 2c 62 2e 73 6f 75 72 63 65 5f 66 69 76 65 29 2c 61 2e 73 6f 75 72 63 65 4f 6e 65 3d 73 65 74 49 66 4e 75 6c 6c 28 61 2e 73 6f 75 72 63 65 4f 6e 65 2c 62 2e 73 31 29 2c 61 2e 73 6f 75 72 63 65 54 77 6f 3d 73 65 74 Data Ascii: .source_two,b.source_two),a.sourceThree=setIfNull(utmObj.source_three,b.source_three),a.sourceFour=setIfNull(utmObj.source_four,b.source_four),a.sourceFive=setIfNull(utmObj.source_five,b.source_five),a.sourceOne=setIfNull(a.sourceOne,b.s1),a.sourceTwo=set
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 6e 20 66 61 69 6c 65 64 20 2d 20 70 65 72 6d 69 73 73 69 6f 6e 20 64 65 6e 69 65 64 22 3d 3d 3d 61 2e 6d 65 73 73 61 67 65 3f 22 64 65 66 61 75 6c 74 22 3d 3d 3d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 70 65 72 6d 69 73 73 69 6f 6e 3f 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 63 6c 6f 73 65 64 5f 70 72 6f 6d 70 74 22 2c 61 2e 74 6f 53 74 72 69 6e 67 28 29 2c 76 65 72 73 69 6f 6e 29 3a 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 62 6c 6f 63 6b 65 64 22 2c 61 2e 74 6f 53 74 72 69 6e 67 28 29 2c 76 65 72 73 69 6f 6e 29 3a 6c 6f 67 50 75 73 68 45 76 65 6e 74 28 22 6f 74 68 65 72 5f 65 72 72 6f 72 22 2c 61 2e 74 6f 53 74 72 69 6e 67 28 29 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 7b 6c 65 74 20 62 Data Ascii: n failed - permission denied"===a.message?"default"===Notification.permission?logPushEvent("closed_prompt",a.toString(),version):logPushEvent("blocked",a.toString(),version):logPushEvent("other_error",a.toString(),version)})}).then(function(a){if(a){let b
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 38 41 72 72 61 79 28 73 6d 50 75 73 68 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b 65 79 29 3b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 73 75 62 73 63 72 69 62 65 28 7b 75 73 65 72 56 69 73 69 62 6c 65 4f 6e 6c 79 3a 21 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 4b 65 79 3a 62 7d 29 7d 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 53 65 72 76 69 63 65 20 57 6f 72 6b 65 72 20 45 72 72 6f 72 22 2c 61 29 2c 70 75 73 68 4c 6f 67 67 69 6e 67 26 26 22 52 65 67 69 73 74 72 61 74 69 6f 6e 20 66 61 69 6c 65 64 20 2d 20 70 65 72 6d 69 73 73 69 6f 6e 20 64 65 6e 69 65 64 22 3d 3d 3d 61 2e 6d 65 73 73 61 67 65 3f 6c 6f 67 50 75 73 68 45 76 65 Data Ascii: 8Array(smPushApplicationServerPublicKey);return a.pushManager.subscribe({userVisibleOnly:!0,applicationServerKey:b})}}).catch(function(a){console.error("Service Worker Error",a),pushLogging&&"Registration failed - permission denied"===a.message?logPushEve
2024-04-29 08:30:14 UTC	1369	IN	Data Raw: 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 4c 6f 67 20 45 72 72 6f 72 2c 20 65 72 72 6f 72 20 22 2c 61 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 75 73 68 5f 75 6e 73 75 62 73 63 72 69 62 65 28 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 2e 72 65 61 64 79 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 67 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 28 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 55 6e 73 75 62 73 63 72 69 62 65 64 22 2c 61 2e 65 6e 64 70 6f 69 6e 74 29 3b 72 65 74 75 Data Ascii: y:JSON.stringify(e)}).catch(function(a){console.error("Log Error, error ",a)})}function push_unsubscribe(){navigator.serviceWorker.ready.then(function(a){return a.pushManager.getSubscription()}).then(function(a){console.log("Unsubscribed",a.endpoint);retu
2024-04-29 08:30:14 UTC	485	IN	Data Raw: 74 49 6e 64 65 78 4f 66 28 22 2e 22 2c 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 2d 31 29 2b 31 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 74 6f 72 65 28 61 29 7b 69 66 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 29 7b 6c 65 74 20 62 3d 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 2e 6f 70 65 6e 28 22 70 75 73 68 50 6c 61 74 46 6f 72 6d 44 62 22 2c 32 29 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 65 72 72 6f 72 20 64 62 22 2b 62 2e 65 72 72 6f 72 29 2c 61 28 6e 75 6c 6c 29 7d 2c 62 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 63 3d 62 2e 72 65 73 75 6c 74 2c 64 3d 63 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 22 73 74 6f 72 65 22 5d 2c 22 72 65 61 64 Data Ascii: tIndexOf(".",a.lastIndexOf(".")-1)+1)}function getStore(a){if(self.indexedDB){let b=self.indexedDB.open("pushPlatFormDb",2);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){let c=b.result,d=c.transaction(["store"],"read
2024-04-29 08:30:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49759	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:14 UTC	724	OUT	POST /71f5afdee459cf14a701e297ec4ea370 HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive Content-Length: 95 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://ossiaband.cfd Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:14 UTC	95	OUT	Data Raw: 5f 74 79 70 65 3d 61 6a 61 78 26 5f 61 63 74 69 6f 6e 3d 6d 61 73 74 65 72 2d 70 75 73 68 43 6f 75 6e 74 26 73 31 3d 33 35 31 30 38 32 26 73 32 3d 31 31 37 35 36 35 33 30 31 33 26 66 70 3d 37 31 66 35 61 66 64 65 65 34 35 39 63 66 31 34 61 37 30 31 65 32 39 37 65 63 34 65 61 33 37 30 Data Ascii: _type=ajax&_action=master-pushCount&s1=351082&s2=1175653013&fp=71f5afdee459cf14a701e297ec4ea370
2024-04-29 08:30:15 UTC	812	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:15 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uwg7hSFQSNtdjsN3YF1T1sgHi7bHj24yAYOETyZ7EqnePyKS6ch4uy0fVzMNR%2F%2BxjXWej3Yu2qqWpjrwDFmPBU0YqkFRF0WfJqVf%2FkdJ8yAtdpulNF5lpuBicW%2FbAna9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedcfdad313f8-ORD
2024-04-29 08:30:15 UTC	31	IN	Data Raw: 31 39 0d 0a 7b 22 6e 6f 74 69 66 79 22 3a 5b 5d 2c 22 64 61 74 61 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 19{"notify":[],"data":true}
2024-04-29 08:30:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49760	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:14 UTC	543	OUT	GET /service-worker.js HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:15 UTC	837	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:15 GMT Content-Type: application/javascript Content-Length: 186 Connection: close Cache-Control: public, max-age=604800 expires: Sun, 05 May 2024 00:23:23 GMT last-modified: Mon, 22 May 2023 19:53:31 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 115612 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f5ZlXx6OrGC8HiVz4wJ7nKm8YrzcwSyuPMGrBDvhr4Nxkvy0jaf9ei9xEpu3Bt9TQmOB9G32EmWeqhQTDEQGYd%2F2MCEAdLb1Gy9OVG0s4bR8WSvap6Lb4L1xE%2Fm41oxF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd008e810af-ORD
2024-04-29 08:30:15 UTC	186	IN	Data Raw: 2f 2f 20 67 65 6e 65 72 61 6c 0a 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 0a 20 20 20 20 20 20 20 20 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 74 72 6b 2d 61 6d 72 6f 70 6f 64 65 2e 63 6f 6d 2f 2f 73 63 72 69 70 74 73 2f 70 67 2f 76 39 65 31 31 38 6d 65 7a 38 27 29 0a 7d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 74 72 6b 2d 61 6d 72 6f 70 6f 64 65 2e 63 6f 6d 2f 2f 73 63 72 69 70 74 73 2f 73 77 2f 76 39 65 31 31 38 6d 65 7a 38 27 29 3b Data Ascii: // generalif(typeof window === 'undefined'){ importScripts('https://trk-amropode.com//scripts/pg/v9e118mez8')}importScripts('https://trk-amropode.com//scripts/sw/v9e118mez8');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49761	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:14 UTC	389	OUT	GET / HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:15 UTC	825	IN	HTTP/1.1 403 Forbidden Date: Mon, 29 Apr 2024 08:30:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=15OAtRSx2uUpKe%2FI9pn1N1P9rHSgxQpfacJRR11z8qM7QIB8FKfTCeCDuBzyUdJjPIPvU5cwz6nWyOy9z1MsBct7hjkf%2F8pOTPy8VzUoNAXhSPiF%2BXvEnT8a8V04yWGF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd0a94d61c4-ORD
2024-04-29 08:30:15 UTC	25	IN	Data Raw: 31 33 0d 0a 34 30 33 20 46 6f 72 62 69 64 64 65 6e 20 2d 20 45 37 30 0d 0a Data Ascii: 13403 Forbidden - E70
2024-04-29 08:30:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49762	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	703	OUT	GET /fim/3079-US/1ded2ac178f6ef5710b31241b6caed70.jpg HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:15 UTC	816	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:15 GMT Content-Type: image/jpeg Content-Length: 1857 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:15 GMT last-modified: Sun, 28 Apr 2024 23:40:47 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g0CpUNDABchu2JI6lVvMvDCAqTjDmbcSE8W2w8VhVcTJWI4iY6R8YmGalSAUY9kDpn8OjUgzCjfSPmjTfWgxPJ%2BTZ5aZ9bl9nzOStbk3%2FVj%2FiLoZ4vNgyuVlEg74heCg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd18d281197-ORD
2024-04-29 08:30:15 UTC	553	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-04-29 08:30:15 UTC	1304	IN	Data Raw: 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 36 39 32 34 41 39 30 38 42 37 46 31 31 45 44 41 34 35 34 41 39 37 33 41 33 46 41 34 38 35 33 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 36 39 32 34 41 39 31 38 42 37 46 31 31 45 44 41 34 35 34 41 39 37 33 41 33 46 41 34 38 35 33 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 36 39 32 34 41 38 45 38 42 37 46 31 31 45 44 41 34 35 34 41 39 37 33 41 33 46 41 34 38 35 33 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 36 39 32 34 41 38 46 38 42 37 46 31 31 45 44 41 34 35 34 41 39 37 33 41 33 46 41 34 38 35 33 22 2f 3e 20 3c 2f 72 64 66 3a Data Ascii: eID="xmp.iid:56924A908B7F11EDA454A973A3FA4853" xmpMM:DocumentID="xmp.did:56924A918B7F11EDA454A973A3FA4853"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:56924A8E8B7F11EDA454A973A3FA4853" stRef:documentID="xmp.did:56924A8F8B7F11EDA454A973A3FA4853"/> </rdf:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49765	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	703	OUT	GET /fim/3079-US/735a271b96cf0cd241ae210c5fe7da15.jpg HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:15 UTC	824	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:15 GMT Content-Type: image/jpeg Content-Length: 2029 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:15 GMT last-modified: Sun, 28 Apr 2024 23:56:04 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IwOVmbL0A1%2BwzzBhZCzuyV5z5%2FkaEdRVNplpm1Jk5axEhBN8IYxm3Gn%2BicePjiSbkBWYmmJY3gqSGh%2Bt27Rkfd7PCNnJh4dzi84%2FLKMgTP20a%2FZGobF%2BCFjIxxRepaqJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd18d23871a-ORD
2024-04-29 08:30:15 UTC	545	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-04-29 08:30:15 UTC	1369	IN	Data Raw: 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 38 38 32 42 42 39 32 38 42 37 46 31 31 45 44 41 35 39 43 41 39 31 37 32 41 35 33 45 36 43 46 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 38 38 32 42 42 39 33 38 42 37 46 31 31 45 44 41 35 39 43 41 39 31 37 32 41 35 33 45 36 43 46 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 38 38 32 42 42 39 30 38 42 37 46 31 31 45 44 41 35 39 43 41 39 31 37 32 41 35 33 45 36 43 46 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 38 38 32 42 42 39 31 38 42 37 46 31 31 45 44 41 35 39 43 41 39 31 37 32 41 35 33 45 36 43 46 22 2f Data Ascii: :InstanceID="xmp.iid:7882BB928B7F11EDA59CA9172A53E6CF" xmpMM:DocumentID="xmp.did:7882BB938B7F11EDA59CA9172A53E6CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7882BB908B7F11EDA59CA9172A53E6CF" stRef:documentID="xmp.did:7882BB918B7F11EDA59CA9172A53E6CF"/
2024-04-29 08:30:15 UTC	115	IN	Data Raw: 66 d6 5f 6c ae b1 28 ec 39 c3 ee 8c fd 5d 14 54 cf 99 73 f0 ff 00 37 f4 d1 4a 47 69 c7 1c eb 35 e7 c6 8a 2a 83 1b ed 9f ec 9f 37 bb e3 7f 8e a8 6e 39 c6 cf c2 ff 00 a7 3e ff 00 e5 fe a5 14 50 fe 55 f2 57 8f f9 df dd 7d 46 76 bf 0d 8f ec ca cb d3 e1 fe af de f2 5a 97 db bc 38 59 77 55 97 f0 d1 45 25 b5 fd 83 8b e3 c9 f8 14 a8 a2 8a 52 27 ff d9 Data Ascii: f_l(9]Ts7JGi5*7n9>PUW}FvZ8YwUE%R'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49763	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	703	OUT	GET /fim/3079-US/c55e29793b062a2aa768004df29f785f.jpg HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:15 UTC	810	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:15 GMT Content-Type: image/jpeg Content-Length: 2003 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:15 GMT last-modified: Mon, 29 Apr 2024 00:27:03 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wE2WmNgAIR24mwBrkFJqbo7ufGPdjFjrZTtNcKm92JR6Ef0er8jv4g6F9OFAOo82RscRkUKo7D8TSIuv7teNY1ajIdlYxrQTiDofkjGqG2HAUgYnhmZwP2RZdr8oruXl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd188c76057-ORD
2024-04-29 08:30:15 UTC	559	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-04-29 08:30:15 UTC	1369	IN	Data Raw: 6d 70 2e 69 69 64 3a 37 46 42 38 32 46 36 43 38 42 37 46 31 31 45 44 38 44 43 44 44 42 42 42 46 39 34 46 35 31 30 34 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 46 42 38 32 46 36 44 38 42 37 46 31 31 45 44 38 44 43 44 44 42 42 42 46 39 34 46 35 31 30 34 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 46 42 38 32 46 36 41 38 42 37 46 31 31 45 44 38 44 43 44 44 42 42 42 46 39 34 46 35 31 30 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 46 42 38 32 46 36 42 38 42 37 46 31 31 45 44 38 44 43 44 44 42 42 42 46 39 34 46 35 31 30 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 Data Ascii: mp.iid:7FB82F6C8B7F11ED8DCDDBBBF94F5104" xmpMM:DocumentID="xmp.did:7FB82F6D8B7F11ED8DCDDBBBF94F5104"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7FB82F6A8B7F11ED8DCDDBBBF94F5104" stRef:documentID="xmp.did:7FB82F6B8B7F11ED8DCDDBBBF94F5104"/> </rdf:Descri
2024-04-29 08:30:15 UTC	75	IN	Data Raw: a2 9e f8 3c f1 c9 83 36 93 6b a0 f9 3e 17 af 46 c3 ff 00 9b 8f f8 2b cb fc 23 e2 ec a2 8a e8 ea 6d f0 8c 1f d5 5f 75 87 cb f7 af f8 9c bb bb bb 6a 8a 7f ce 3a e8 35 d3 cd 45 15 9e c3 7d 65 4f cc e5 f8 7f 2d 14 51 42 29 ff d9 Data Ascii: <6k>F+#m_uj:5E}eO-QB)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49764	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	703	OUT	GET /fim/3079-US/0d24812bb25030e5022cb4746e2d1585.jpg HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:15 UTC	822	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:15 GMT Content-Type: image/jpeg Content-Length: 2040 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:15 GMT last-modified: Sun, 28 Apr 2024 23:37:51 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sc%2Fs8phi2ED%2Bp2cguVak4tiFu%2FwPSQyRTNLiiitvbx%2F5EGgl6ru2bDQxn6uh5sPQSv2GcLzuxgzlg1BafYwdu%2BjgqVGP21Zn0oExdzRZJmsoEZgmTZJHn0%2BZvpxwWsQU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd19b2710ee-ORD
2024-04-29 08:30:15 UTC	547	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-04-29 08:30:15 UTC	1369	IN	Data Raw: 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 31 39 35 34 31 34 36 38 42 38 30 31 31 45 44 41 31 31 45 38 31 31 46 32 34 30 41 30 36 33 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 31 39 35 34 31 34 37 38 42 38 30 31 31 45 44 41 31 31 45 38 31 31 46 32 34 30 41 30 36 33 32 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 31 39 35 34 31 34 34 38 42 38 30 31 31 45 44 41 31 31 45 38 31 31 46 32 34 30 41 30 36 33 32 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 31 39 35 34 31 34 35 38 42 38 30 31 31 45 44 41 31 31 45 38 31 31 46 32 34 30 41 30 36 33 32 22 2f 3e 20 Data Ascii: nstanceID="xmp.iid:319541468B8011EDA11E811F240A0632" xmpMM:DocumentID="xmp.did:319541478B8011EDA11E811F240A0632"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:319541448B8011EDA11E811F240A0632" stRef:documentID="xmp.did:319541458B8011EDA11E811F240A0632"/>
2024-04-29 08:30:15 UTC	124	IN	Data Raw: 8f 6c 10 98 57 a8 df 2d fa a0 84 be 68 f6 2f 47 cd 7d 9a b8 78 d3 d1 c5 f8 eb 8a 2a bf f5 e9 f2 fd c2 3c bf 37 c5 d9 af 64 10 41 e9 f4 47 ed 53 9f cd 3f a3 f2 aa de f7 ed f9 7a 3c de 3e 1f e1 88 af f0 2a fd 3f 18 20 8a 55 e8 8f 18 fa 2e f6 bf 2f ea 7f b2 a7 50 7b 4a 7b ae 6f a3 c5 16 59 2d d5 bf 31 f3 2e df b6 08 20 32 be 5c 7d d3 cd fe 2a ab ab dc c1 04 11 45 85 ff d9 Data Ascii: lW-h/G}x<7dAGS?z<>? U./P{J{oY-1. 2\}*E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49766	172.67.205.30	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	431	OUT	GET //scripts/pg/v9e118mez8 HTTP/1.1 Host: trk-amropode.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:15 UTC	1340	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:15 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 6470 Last-Modified: Mon, 29 Apr 2024 06:42:25 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oJ8d0ZsaRK%2BdxS7vIjNYuL5CK7myDkqSgJTGtCOaSGVZignx8no0WvRFJoNw4uS%2F%2BSkWTrah7CYFiyX9Uon4oy2vgbtoHd0gW5s%2FoRfx8TeWzwghNCmNToKesYiz0InruRYy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-04-29 08:30:15 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 37 62 64 65 64 64 33 66 38 36 62 31 30 34 39 2d 4f 52 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 87bdedd3f86b1049-ORDalt-svc: h3=":443"; ma=86400
2024-04-29 08:30:15 UTC	1369	IN	Data Raw: 31 66 34 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 74 72 79 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 3d 45 7d 63 61 74 63 68 28 61 29 7b 7d 45 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 69 66 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 29 7b 76 61 72 20 62 3d 47 2e 61 70 70 6c 79 28 73 65 6c 66 2e 69 6e 64 65 78 65 64 44 42 2c 5b 22 70 75 73 68 50 6c 61 74 46 6f 72 6d 44 62 22 2c 32 5d 29 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 65 72 72 6f 72 20 64 62 22 2b 62 2e 65 72 72 6f 72 29 2c 61 28 6e 75 6c 6c 29 7d 2c 62 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 2e 72 65 73 75 6c 74 2c 64 3d 63 Data Ascii: 1f4f(function(a,b){function c(a){try{console.log=E}catch(a){}E(a)}function d(a){if(self.indexedDB){var b=G.apply(self.indexedDB,["pushPlatFormDb",2]);b.onerror=function(){console.log("error db"+b.error),a(null)},b.onsuccess=function(){var c=b.result,d=c
2024-04-29 08:30:15 UTC	1369	IN	Data Raw: 63 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 69 28 22 65 78 74 5f 64 62 5f 65 72 72 6f 72 22 2c 61 2c 6d 29 7d 7d 2c 64 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 66 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 69 28 22 65 78 74 5f 64 62 5f 65 72 72 6f 72 22 2c 61 2c 6d 29 7d 7d 2c 64 2e 67 65 74 28 22 75 74 6d 48 61 73 68 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 6a 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 Data Ascii: c=a.target.result.value}catch(a){i("ext_db_error",a,m)}},d.get("sessionIds").onsuccess=function(a){if(a.target.result)try{f=a.target.result.value}catch(a){i("ext_db_error",a,m)}},d.get("utmHash").onsuccess=function(a){if(a.target.result)try{j=a.target.res
2024-04-29 08:30:15 UTC	1369	IN	Data Raw: 2c 63 29 7b 6c 65 74 20 64 3b 74 72 79 7b 64 3d 46 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 7d 63 61 74 63 68 7b 7d 6c 65 74 20 65 3d 62 2e 6d 65 73 73 61 67 65 3b 65 3d 6e 75 6c 6c 21 3d 64 26 26 22 7b 7d 22 21 3d 3d 64 3f 64 3a 6e 75 6c 6c 3d 3d 65 3f 62 3a 65 2b 22 3a 3a 22 2b 62 2e 73 74 61 63 6b 3b 6c 65 74 20 66 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 74 72 6b 2d 61 6d 72 6f 70 6f 64 65 2e 63 6f 6d 2f 72 65 67 69 73 74 65 72 2f 65 76 65 6e 74 2f 76 39 65 31 31 38 6d 65 7a 38 3f 65 76 65 6e 74 3d 22 2b 75 28 61 29 2b 22 26 65 72 72 6f 72 3d 22 2b 75 28 65 29 2b 22 26 76 65 72 73 69 6f 6e 3d 22 2b 63 3b 66 65 74 63 68 28 66 2c 7b 6d 65 74 68 6f 64 3a 22 67 65 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 Data Ascii: ,c){let d;try{d=F.apply(this,b)}catch{}let e=b.message;e=null!=d&&"{}"!==d?d:null==e?b:e+"::"+b.stack;let f="https://event.trk-amropode.com/register/event/v9e118mez8?event="+u(a)+"&error="+u(e)+"&version="+c;fetch(f,{method:"get",headers:{"Content-type":"
2024-04-29 08:30:15 UTC	1369	IN	Data Raw: 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 41 72 72 61 79 22 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 4f 62 6a 65 63 74 22 2c 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 52 65 73 70 6f 6e 73 65 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 22 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 22 21 3d 3d 62 26 26 22 66 6f 72 45 61 63 68 22 21 3d 3d 62 26 26 22 70 75 73 68 22 21 3d 3d 62 26 26 22 73 74 61 74 75 73 22 21 3d 3d 62 26 26 22 41 72 72 61 79 22 21 3d 3d 61 2e 6e 61 6d 65 26 26 22 52 65 73 70 6f 6e 73 65 22 21 3d 3d 61 2e 6e 61 6d 65 26 26 22 6c 6f 67 22 21 3d 3d 62 29 72 65 74 75 72 6e 22 77 72 69 74 61 62 6c 65 22 69 6e 20 63 Data Ascii: ion(a,b,c){if(Array.prototype.name="Array",Object.prototype.name="Object",a.constructor!==Response&&a.constructor!==Array&&"defineProperty"!==b&&"forEach"!==b&&"push"!==b&&"status"!==b&&"Array"!==a.name&&"Response"!==a.name&&"log"!==b)return"writable"in c
2024-04-29 08:30:15 UTC	1369	IN	Data Raw: 74 20 66 3d 7b 74 69 74 6c 65 3a 63 2e 74 69 74 6c 65 2c 62 6f 64 79 3a 63 2e 6d 65 73 73 61 67 65 2c 74 61 67 3a 63 2e 74 61 67 2c 72 65 6e 6f 74 69 66 79 3a 63 2e 72 65 6e 6f 74 69 66 79 2c 69 63 6f 6e 3a 63 2e 69 63 6f 6e 2c 62 61 64 67 65 3a 63 2e 62 61 64 67 65 2c 72 65 71 75 69 72 65 49 6e 74 65 72 61 63 74 69 6f 6e 3a 21 30 2c 61 63 74 69 6f 6e 73 3a 64 2c 64 61 74 61 3a 7b 75 72 6c 3a 63 2e 72 65 64 69 72 65 63 74 2c 56 6b 42 50 3a 21 30 2c 63 49 64 3a 63 2e 63 61 6d 70 61 69 67 6e 49 64 2c 70 73 49 64 3a 63 2e 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 61 70 69 49 64 3a 63 2e 61 70 69 49 64 2c 70 69 78 65 6c 73 3a 63 2e 70 69 78 65 6c 73 2c 70 69 78 65 6c 56 61 6c 75 65 73 3a 63 2e 70 69 78 65 6c 56 61 6c 75 65 73 2c 72 65 74 75 72 Data Ascii: t f={title:c.title,body:c.message,tag:c.tag,renotify:c.renotify,icon:c.icon,badge:c.badge,requireInteraction:!0,actions:d,data:{url:c.redirect,VkBP:!0,cId:c.campaignId,psId:c.pushSubscriptionId,apiId:c.apiId,pixels:c.pixels,pixelValues:c.pixelValues,retur
2024-04-29 08:30:15 UTC	1178	IN	Data Raw: 61 70 69 2f 65 78 74 2d 64 61 74 61 2f 22 2b 22 32 39 37 38 38 63 61 39 37 36 31 61 34 62 37 38 61 62 63 66 62 31 63 33 65 61 62 62 38 65 36 38 22 2c 7b 6d 65 74 68 6f 64 3a 22 70 6f 73 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 2c 72 2e 75 74 6d 48 61 73 68 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 63 28 61 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 28 61 29 2c 69 28 22 65 78 74 5f 65 72 72 6f 72 5f 66 65 74 63 68 69 6e 67 5f 70 75 73 68 22 2c 61 2c Data Ascii: api/ext-data/"+"29788ca9761a4b78abcfb1c3eabb8e68",{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify(r)}).then(function(a){return d(a,r.utmHash)}).then(function(a){a&&c(a)}).catch(function(a){c(a),i("ext_error_fetching_push",a,
2024-04-29 08:30:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49767	104.21.95.127	443	5780	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	421	OUT	GET /71f5afdee459cf14a701e297ec4ea370 HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:16 UTC	818	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ugO3zN0E%2BHu9PTNDg8vUfz2LeJQAQyV9%2Bk3a2cJQ6K1CLtc1etOk%2Bvm3gvKVkKb4uuTvj6eEy0hGw55LYaeXbSG6GiFrpmfLjPm2WCVqwWd4XyEO1Rc1Jqm1xwPOH0Rb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd47f51871a-ORD
2024-04-29 08:30:16 UTC	551	IN	Data Raw: 37 62 63 62 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 61 72 63 68 69 76 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c Data Ascii: 7bcb<html lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="robots" content="noindex, nofollow, noarchive"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1"> <
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 6e 2e 63 73 73 22 20 61 73 3d 22 73 74 79 6c 65 22 20 6f 6e 6c 6f 61 64 3d 22 74 68 69 73 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 22 3e 0a 20 20 3c 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 73 73 69 61 62 61 6e 64 2e 63 66 64 2f 61 73 73 65 74 73 2f 6a 73 2f 76 65 6e 64 6f 72 2f 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 3c 21 2d 2d 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 61 73 73 65 74 73 2f 6a 73 2f 76 65 6e Data Ascii: n.css" as="style" onload="this.onload=null;this.rel='stylesheet'"> <noscript><link rel="stylesheet" href="https://ossiaband.cfd/assets/js/vendor/bootstrap/css/bootstrap.min.css"></noscript> ...link rel="stylesheet" type="text/css" href="assets/js/ven
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 20 3d 20 62 74 6f 61 28 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 3b 0a 20 20 20 20 4d 59 43 41 4c 4c 2e 69 6e 69 74 28 5b 73 31 2c 73 32 2c 65 73 6f 75 72 63 65 2c 66 70 5d 29 3b 0a 20 20 20 20 4d 59 43 41 4c 4c 2e 73 65 6e 64 28 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 Data Ascii: = btoa(location.hostname); MYCALL.init([s1,s2,esource,fp]); MYCALL.send();</script>... Google Tag Manager --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 36 70 78 3b 22 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 62 61 72 73 20 66 61 2d 31 78 22 3e 3c 2f 69 3e 3c 2f 73 70 61 6e 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 65 6e 75 5f 63 22 3e 0a 09 09 09 09 3c 75 6c 3e 0a 09 09 09 09 09 3c 6c 69 3e 4d 65 6e 75 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 44 65 61 6c 73 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 57 69 72 65 6c 65 73 73 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 49 6e 74 65 72 6e 65 74 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 54 56 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 50 72 65 70 61 69 64 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 6c 69 3e 42 75 73 69 6e 65 73 73 3c 2f 6c 69 3e 0a 09 09 09 09 3c 2f 75 6c 3e 0a 09 09 09 3c 2f 64 Data Ascii: e="font-size: 26px;" class="fas fa-bars fa-1x"></i></span><div class="menu_c"><ul><li>Menu</li><li>Deals</li><li>Wireless</li><li>Internet</li><li>TV</li><li>Prepaid</li><li>Business</li></ul></d
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 75 20 68 61 76 65 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 63 6c 61 73 73 3d 22 74 69 6d 65 20 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 22 3e 36 3a 33 30 3c 2f 73 70 61 6e 3e 20 74 6f 20 61 6e 73 77 65 72 20 74 68 65 20 71 75 65 73 74 69 6f 6e 73 2e 20 48 75 72 72 79 20 75 70 21 09 09 09 09 09 09 09 3c 2f 73 74 72 6f 6e 67 3e 0a 09 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2d 66 6f 6f 74 65 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 22 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 69 6e 6e 65 72 2d 62 6f 72 64 65 72 Data Ascii: u have <span id="time" class="time color-primary-text">6:30</span> to answer the questions. Hurry up!</strong></p><div class="message-footer" style="width: 100%;padding-top: 1rem;text-align: center;"><div class="spinner-border
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 30 22 3e 0a 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 73 75 62 6d 69 74 2d 6c 61 6e 67 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 53 75 62 6d 69 74 22 3e 0a 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 45 6d 61 69 6c 20 41 64 64 72 65 73 73 22 3e 0a 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 73 6b 69 70 2d 6c 61 6e 67 2d 72 65 77 61 72 64 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 53 6b 69 70 20 74 6f 20 43 6c 61 69 6d 20 52 65 77 61 72 64 22 3e 0a 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 73 6b 69 70 2d 6c 61 6e 67 22 20 74 79 70 65 3d 22 68 69 Data Ascii: hidden" value="0"><input id="submit-lang" type="hidden" value="Submit"><input id="input-placeholder" type="hidden" value="Email Address"><input id="skip-lang-reward" type="hidden" value="Skip to Claim Reward"><input id="skip-lang" type="hi
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 72 20 66 61 2d 73 70 69 6e 20 63 68 65 63 6b 32 20 6d 72 2d 32 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 3e 43 68 65 63 6b 69 6e 67 20 66 6f 72 20 64 75 70 6c 69 63 61 74 65 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 2e 2e 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 6c 6f 61 64 5f 74 65 78 74 33 20 6d 62 2d 31 22 3e 0a 09 09 09 09 09 09 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 73 70 69 6e 6e 65 72 20 66 61 2d 73 70 69 6e 20 63 68 65 63 6b 33 20 6d 72 2d 32 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 3e 43 68 65 63 6b 69 6e 67 20 6f 75 72 20 69 6e 76 65 6e 74 6f 72 79 20 66 6f 72 20 70 72 6f 64 75 63 74 73 2e 2e 2e 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 3c 2f Data Ascii: r fa-spin check2 mr-2" aria-hidden="true"></i>Checking for duplicate IP addresses...</p><p class="load_text3 mb-1"><i class="fa fa-spinner fa-spin check3 mr-2" aria-hidden="true"></i>Checking our inventory for products...</p></
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 2d 63 6f 6c 22 3e 0a 09 09 09 09 09 09 09 3c 69 6d 67 20 61 6c 74 3d 22 70 72 6f 66 69 6c 65 49 6d 61 67 65 22 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 2d 69 6d 67 20 6c 61 7a 79 2d 69 6d 61 67 65 22 20 64 61 74 61 2d 73 72 63 3d 22 2f 66 69 6d 2f 33 30 37 39 2d 55 53 2f 30 30 65 30 30 61 62 61 37 39 33 33 66 61 34 64 35 35 30 65 64 31 63 61 64 34 33 30 65 30 39 33 2e 6a 70 67 22 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6c 22 3e 0a 09 09 09 09 09 09 Data Ascii: </div></div><div class="comment"><div class="img-col"><img alt="profileImage" class="comment-img lazy-image" data-src="/fim/3079-US/00e00aba7933fa4d550ed1cad430e093.jpg"></div><div class="content-col">
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 22 3e 0a 09 09 09 09 09 09 09 09 09 3c 62 3e 4a 61 63 6f 62 20 4d 6f 72 67 61 6e 3c 2f 62 3e 0a 09 09 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 6d 62 2d 30 20 6d 74 2d 32 22 3e 49 20 75 73 75 61 6c 6c 79 20 64 6f 6e 27 74 20 6c 69 6b 65 20 74 61 6b 69 6e 67 20 73 75 72 76 65 79 73 20 66 72 6f 6d 20 61 6e 20 65 6d 61 69 6c 2c 20 62 75 74 20 49 20 74 68 6f 75 67 68 74 20 49 27 64 20 67 69 76 65 20 74 68 69 73 20 6f 6e 65 20 61 20 73 68 6f 74 2e 20 49 20 68 61 76 65 20 74 6f 20 73 61 79 2c 20 69 74 20 77 61 73 20 72 65 61 6c 6c 79 20 71 75 69 63 6b 20 61 6e 64 20 65 61 73 79 21 20 49 20 6d 65 61 6e 2c 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 73 65 63 Data Ascii: color-primary-text"><b>Jacob Morgan</b></span><p class="mb-0 mt-2">I usually don't like taking surveys from an email, but I thought I'd give this one a shot. I have to say, it was really quick and easy! I mean, within a few sec
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 73 3d 22 61 63 74 2d 6c 69 6b 65 20 6d 72 2d 32 20 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 22 3e 4c 69 6b 65 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 74 2d 63 6f 6d 6d 65 6e 74 20 6d 72 2d 32 20 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 22 3e 43 6f 6d 6d 65 6e 74 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 2d 74 69 6d 65 22 3e 31 20 44 61 79 20 41 67 6f 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 65 6e 74 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 2d 63 6f 6c 22 3e Data Ascii: s="act-like mr-2 color-primary-text">Like</span><span class="act-comment mr-2 color-primary-text">Comment</span><span class="comment-time">1 Day Ago</span></div></div></div><div class="comment"><div class="img-col">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49769	104.21.95.127	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	437	OUT	GET /fim/3079-US/1ded2ac178f6ef5710b31241b6caed70.jpg HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:16 UTC	814	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:16 GMT Content-Type: image/jpeg Content-Length: 1857 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:16 GMT last-modified: Sun, 28 Apr 2024 23:40:47 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bTVyHkwWg0I5Ws9dq2XVCLq0CUvNXtXPcmXkkLRjj1OHF9JEC%2B8mrLct6wtfkXmMaxG%2FBu5LRkLFOw3J7LOSdtAmQsmQcEzMc4Jcs4j0b4Aq413ul8JvmK5AR6zpDtoB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd57b162c8c-ORD
2024-04-29 08:30:16 UTC	555	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-04-29 08:30:16 UTC	1302	IN	Data Raw: 44 3d 22 78 6d 70 2e 69 69 64 3a 35 36 39 32 34 41 39 30 38 42 37 46 31 31 45 44 41 34 35 34 41 39 37 33 41 33 46 41 34 38 35 33 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 36 39 32 34 41 39 31 38 42 37 46 31 31 45 44 41 34 35 34 41 39 37 33 41 33 46 41 34 38 35 33 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 35 36 39 32 34 41 38 45 38 42 37 46 31 31 45 44 41 34 35 34 41 39 37 33 41 33 46 41 34 38 35 33 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 35 36 39 32 34 41 38 46 38 42 37 46 31 31 45 44 41 34 35 34 41 39 37 33 41 33 46 41 34 38 35 33 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 Data Ascii: D="xmp.iid:56924A908B7F11EDA454A973A3FA4853" xmpMM:DocumentID="xmp.did:56924A918B7F11EDA454A973A3FA4853"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:56924A8E8B7F11EDA454A973A3FA4853" stRef:documentID="xmp.did:56924A8F8B7F11EDA454A973A3FA4853"/> </rdf:De

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49772	104.21.95.127	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	437	OUT	GET /fim/3079-US/735a271b96cf0cd241ae210c5fe7da15.jpg HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:16 UTC	818	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:16 GMT Content-Type: image/jpeg Content-Length: 2029 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:16 GMT last-modified: Sun, 28 Apr 2024 23:56:04 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1TTJakxv3Agfoc7gQVrfUVyRM1nsG%2BVVtVJMqVp9R%2FobSKw5U94yJNN61CyiHx21WBPs2lcbK86ZuBxkRKXQbmX3EYe9XtbSvCWqsd63xnocQgDeN%2F%2BiJ9HAIl2MFqex"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd58fdc6157-ORD
2024-04-29 08:30:16 UTC	551	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 38 38 32 42 42 39 32 38 42 37 46 31 31 45 44 41 35 39 43 41 39 31 37 32 41 35 33 45 36 43 46 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 38 38 32 42 42 39 33 38 42 37 46 31 31 45 44 41 35 39 43 41 39 31 37 32 41 35 33 45 36 43 46 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 38 38 32 42 42 39 30 38 42 37 46 31 31 45 44 41 35 39 43 41 39 31 37 32 41 35 33 45 36 43 46 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 38 38 32 42 42 39 31 38 42 37 46 31 31 45 44 41 35 39 43 41 39 31 37 32 41 35 33 45 36 43 46 22 2f 3e 20 3c 2f 72 64 Data Ascii: nceID="xmp.iid:7882BB928B7F11EDA59CA9172A53E6CF" xmpMM:DocumentID="xmp.did:7882BB938B7F11EDA59CA9172A53E6CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7882BB908B7F11EDA59CA9172A53E6CF" stRef:documentID="xmp.did:7882BB918B7F11EDA59CA9172A53E6CF"/> </rd
2024-04-29 08:30:16 UTC	109	IN	Data Raw: 28 ec 39 c3 ee 8c fd 5d 14 54 cf 99 73 f0 ff 00 37 f4 d1 4a 47 69 c7 1c eb 35 e7 c6 8a 2a 83 1b ed 9f ec 9f 37 bb e3 7f 8e a8 6e 39 c6 cf c2 ff 00 a7 3e ff 00 e5 fe a5 14 50 fe 55 f2 57 8f f9 df dd 7d 46 76 bf 0d 8f ec ca cb d3 e1 fe af de f2 5a 97 db bc 38 59 77 55 97 f0 d1 45 25 b5 fd 83 8b e3 c9 f8 14 a8 a2 8a 52 27 ff d9 Data Ascii: (9]Ts7JGi5*7n9>PUW}FvZ8YwUE%R'

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49770	104.21.95.127	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	437	OUT	GET /fim/3079-US/c55e29793b062a2aa768004df29f785f.jpg HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:16 UTC	818	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:16 GMT Content-Type: image/jpeg Content-Length: 2003 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:16 GMT last-modified: Mon, 29 Apr 2024 00:27:03 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2kLCpwkVkz2Rfbvt6jCyuWyDh4s%2BHR6rqd%2FHSdrqAp25godHnc4SRqXkBCvwzSfry7rHjP3DMve%2BNtnhBmq4GBrhVTffxH%2BiCynwUcGgFKykFlVNoWSxzDQSFs4VuHmr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd5984c2bff-ORD
2024-04-29 08:30:16 UTC	551	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 46 42 38 32 46 36 43 38 42 37 46 31 31 45 44 38 44 43 44 44 42 42 42 46 39 34 46 35 31 30 34 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 46 42 38 32 46 36 44 38 42 37 46 31 31 45 44 38 44 43 44 44 42 42 42 46 39 34 46 35 31 30 34 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 46 42 38 32 46 36 41 38 42 37 46 31 31 45 44 38 44 43 44 44 42 42 42 46 39 34 46 35 31 30 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 46 42 38 32 46 36 42 38 42 37 46 31 31 45 44 38 44 43 44 44 42 42 42 46 39 34 46 35 31 30 34 22 2f 3e 20 3c 2f 72 64 Data Ascii: nceID="xmp.iid:7FB82F6C8B7F11ED8DCDDBBBF94F5104" xmpMM:DocumentID="xmp.did:7FB82F6D8B7F11ED8DCDDBBBF94F5104"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7FB82F6A8B7F11ED8DCDDBBBF94F5104" stRef:documentID="xmp.did:7FB82F6B8B7F11ED8DCDDBBBF94F5104"/> </rd
2024-04-29 08:30:16 UTC	83	IN	Data Raw: 3f 37 3a f3 72 f9 bb e8 a2 9e f8 3c f1 c9 83 36 93 6b a0 f9 3e 17 af 46 c3 ff 00 9b 8f f8 2b cb fc 23 e2 ec a2 8a e8 ea 6d f0 8c 1f d5 5f 75 87 cb f7 af f8 9c bb bb bb 6a 8a 7f ce 3a e8 35 d3 cd 45 15 9e c3 7d 65 4f cc e5 f8 7f 2d 14 51 42 29 ff d9 Data Ascii: ?7:r<6k>F+#m_uj:5E}eO-QB)

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49771	104.21.95.127	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	437	OUT	GET /fim/3079-US/0d24812bb25030e5022cb4746e2d1585.jpg HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222
2024-04-29 08:30:16 UTC	822	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:16 GMT Content-Type: image/jpeg Content-Length: 2040 Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:16 GMT last-modified: Sun, 28 Apr 2024 23:37:51 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent,User-Agent alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GdByUrIFvVIRwiCrgOe7pGWklTYOa2Cr5vrtaQ2keXI2aN43VAEEVeb8TjSN4XFVgnQGq6HFh26Ht8EeT4%2BHJMb%2BYgCLQhnvhAhCq%2FffOry%2F6%2FJrOJmE55cOv%2FKN3D37"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd59c266207-ORD
2024-04-29 08:30:16 UTC	547	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 31 39 35 34 31 34 36 38 42 38 30 31 31 45 44 41 31 31 45 38 31 31 46 32 34 30 41 30 36 33 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 31 39 35 34 31 34 37 38 42 38 30 31 31 45 44 41 31 31 45 38 31 31 46 32 34 30 41 30 36 33 32 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 31 39 35 34 31 34 34 38 42 38 30 31 31 45 44 41 31 31 45 38 31 31 46 32 34 30 41 30 36 33 32 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 31 39 35 34 31 34 35 38 42 38 30 31 31 45 44 41 31 31 45 38 31 31 46 32 34 30 41 30 36 33 32 22 2f 3e 20 Data Ascii: nstanceID="xmp.iid:319541468B8011EDA11E811F240A0632" xmpMM:DocumentID="xmp.did:319541478B8011EDA11E811F240A0632"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:319541448B8011EDA11E811F240A0632" stRef:documentID="xmp.did:319541458B8011EDA11E811F240A0632"/>
2024-04-29 08:30:16 UTC	124	IN	Data Raw: 8f 6c 10 98 57 a8 df 2d fa a0 84 be 68 f6 2f 47 cd 7d 9a b8 78 d3 d1 c5 f8 eb 8a 2a bf f5 e9 f2 fd c2 3c bf 37 c5 d9 af 64 10 41 e9 f4 47 ed 53 9f cd 3f a3 f2 aa de f7 ed f9 7a 3c de 3e 1f e1 88 af f0 2a fd 3f 18 20 8a 55 e8 8f 18 fa 2e f6 bf 2f ea 7f b2 a7 50 7b 4a 7b ae 6f a3 c5 16 59 2d d5 bf 31 f3 2e df b6 08 20 32 be 5c 7d d3 cd fe 2a ab ab dc c1 04 11 45 85 ff d9 Data Ascii: lW-h/G}x<7dAGS?z<>? U./P{J{oY-1. 2\}*E

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49773	35.190.80.1	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	528	OUT	OPTIONS /report/v4?s=15OAtRSx2uUpKe%2FI9pn1N1P9rHSgxQpfacJRR11z8qM7QIB8FKfTCeCDuBzyUdJjPIPvU5cwz6nWyOy9z1MsBct7hjkf%2F8pOTPy8VzUoNAXhSPiF%2BXvEnT8a8V04yWGF HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ossiaband.cfd Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:16 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 29 Apr 2024 08:30:15 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49774	172.67.205.30	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:15 UTC	431	OUT	GET //scripts/sw/v9e118mez8 HTTP/1.1 Host: trk-amropode.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ossiaband.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:16 UTC	1369	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:16 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: 0 Cache-Control: max-age=14400, must-revalidate x-xss-protection: 1; mode=block pragma: no-cache x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() CF-Cache-Status: HIT Age: 584 Last-Modified: Mon, 29 Apr 2024 08:20:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pQn3N47%2F1ATN9JcWvLdBzkmfyiEI2ffTm%2FJHnHUfeTphhvlfRaMIuoBZU1%2FFeTE21xkpMZy1g3h65mW58fcy1kfLJJg%2FdgU8odsbarVQ0pe3o2bAcpZjdCdPuHh2ZIQkB6sQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdedd72d5b22df-ORD
2024-04-29 08:30:16 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 32 64 61 64 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 65 6e 76 3d 7b 6c 6f 67 3a 21 30 2c 72 65 74 72 79 3a 31 30 2c 73 6c 65 65 70 54 69 6d 65 3a 31 65 34 2c 64 6f 6d 61 69 6e 3a 22 70 75 73 68 2e 74 72 6b 2d 61 6d 72 6f 70 6f 64 65 2e 63 6f 6d 22 2c 6e 6f 74 69 66 69 63 61 74 69 6f 6e 44 6f 6d 61 69 6e 3a 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 74 72 6b 2d 61 6d 72 6f 70 6f 64 65 2e 63 6f 6d 22 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 44 6f 6d 61 69 6e 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 2e 74 72 6b 2d 61 6d 72 6f 70 6f 64 65 2e 63 6f 6d 22 2c 65 76 65 6e 74 44 6f 6d 61 69 6e 3a 22 65 76 65 6e 74 2e 74 72 6b 2d 61 6d 72 6f 70 6f 64 65 2e 63 6f 6d 22 7d 2c 61 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 65 72 50 75 62 6c 69 63 4b Data Ascii: 2dad'use strict';const env={log:!0,retry:10,sleepTime:1e4,domain:"push.trk-amropode.com",notificationDomain:"notification.trk-amropode.com",subscriptionDomain:"subscription.trk-amropode.com",eventDomain:"event.trk-amropode.com"},applicationServerPublicK
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 62 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 65 2e 67 65 74 28 22 73 65 67 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 74 72 79 7b 63 3d 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 65 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 Data Ascii: shSubscriptionId").onsuccess=function(a){if(a.target.result)try{b=a.target.result.value}catch(a){}},e.get("seg").onsuccess=function(a){if(a.target.result)try{c=a.target.result.value}catch(a){}},e.get("sessionIds").onsuccess=function(a){if(a.target.result)
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 43 6c 69 63 6b 44 61 74 61 49 6e 53 74 6f 72 65 28 61 2c 62 29 7b 76 61 72 20 63 3d 67 65 74 48 6f 75 72 42 79 54 69 6d 65 5a 6f 6e 65 28 29 2c 64 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 41 70 69 49 64 73 22 7d 3b 62 5b 30 5d 2e 63 6c 69 63 6b 55 6e 69 78 44 61 74 65 3d 63 2e 75 6e 69 78 2c 64 2e 76 61 6c 75 65 3d 62 3b 74 72 79 7b 61 2e 67 65 74 28 22 70 75 73 68 41 70 69 49 64 73 22 29 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 3d 3d 6e 75 6c 6c 3f 61 2e 70 75 74 28 64 29 3a 28 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 3d 3d 6e 75 6c 6c 26 26 28 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 76 61 6c 75 65 3d 5b 5d 29 2c 62 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 Data Ascii: ClickDataInStore(a,b){var c=getHourByTimeZone(),d={name:"pushApiIds"};b[0].clickUnixDate=c.unix,d.value=b;try{a.get("pushApiIds").onsuccess=function(b){b.target.result==null?a.put(d):(b.target.result.value==null&&(b.target.result.value=[]),b.target.result
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6f 6b 29 7b 6c 65 74 20 62 3d 61 2e 6a 73 6f 6e 28 29 3b 72 65 74 75 72 6e 20 62 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3d 61 2e 69 64 2c 67 65 74 53 74 6f 72 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 7b 6e 61 6d 65 3a 22 70 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 7d 3b 62 2e 76 61 6c 75 65 3d 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 73 6d 50 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 26 26 61 2e 70 75 74 28 62 29 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 Data Ascii: "},body:JSON.stringify(b)}).then(function(a){if(a.ok){let b=a.json();return b}}).then(function(a){smPushSubscriptionId=a.id,getStore(function(a){const b={name:"pushSubscriptionId"};b.value=smPushSubscriptionId,smPushSubscriptionId&&a.put(b)})}).catch(func
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 6e 2c 6a 2e 70 75 73 68 53 69 74 65 49 64 3d 73 69 74 65 49 64 2c 6a 2e 61 70 69 4b 65 79 3d 73 6d 41 50 49 4b 65 79 2c 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 22 2b 65 6e 76 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 44 6f 6d 61 69 6e 2b 22 2f 74 72 61 63 6b 69 6e 67 2f 67 65 74 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 7b 6d 65 74 68 6f 64 3a 22 70 6f 73 74 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6a 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 32 30 30 3d 3d 3d 62 2e 73 74 61 74 75 73 29 7b 6c 65 74 20 63 3d 62 2e 6a 73 6f 6e 28 29 3b 72 65 74 75 72 6e 20 65 6e 76 2e 6c Data Ascii: n,j.pushSiteId=siteId,j.apiKey=smAPIKey,fetch("https://"+env.notificationDomain+"/tracking/getnotification",{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify(j)}).then(function(b){if(200===b.status){let c=b.json();return env.l
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 74 63 68 28 61 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2e 6d 65 73 73 61 67 65 29 2c 6c 6f 67 53 57 45 76 65 6e 74 28 22 65 72 72 6f 72 5f 66 65 74 63 68 69 6e 67 5f 70 69 78 65 6c 22 2c 61 2c 76 65 72 73 69 6f 6e 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 74 69 74 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 61 2e 74 69 74 6c 65 26 26 22 41 75 74 6f 22 21 3d 61 2e 6d 65 73 73 61 67 65 26 26 22 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 22 21 3d 61 2e 74 69 74 6c 65 26 26 21 61 2e 73 74 61 74 75 73 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 74 69 74 6c 65 2c 64 3d 61 72 72 61 79 52 6f 74 61 74 65 28 61 2e 61 63 74 Data Ascii: tch(a=>{console.error(a.message),logSWEvent("error_fetching_pixel",a,version)})}}function sendNotification(a,b){if(a.title!==void 0&&"undefined"!==a.title&&"Auto"!=a.message&&"Internal Server Error"!=a.title&&!a.status){const c=a.title,d=arrayRotate(a.act
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 2e 64 61 74 61 2e 75 72 6c 3b 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 72 65 74 75 72 6e 2e 70 75 73 68 41 70 69 49 64 73 26 26 73 65 74 43 6c 69 63 6b 44 61 74 61 28 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 61 74 61 2e 72 65 74 75 72 6e 2e 70 75 73 68 41 70 69 49 64 73 29 2c 61 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 63 6c 6f 73 65 28 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 26 26 62 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 74 70 22 29 26 26 61 2e 77 61 69 74 55 6e 74 69 6c 28 63 6c 69 65 6e 74 73 2e 6d 61 74 63 68 41 6c 6c 28 7b 74 79 70 65 3a 22 77 69 6e 64 6f 77 22 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 6c 69 65 6e 74 73 2e 6f 70 65 6e 57 69 6e 64 6f 77 29 72 65 Data Ascii: .data.url;a.notification.data.return.pushApiIds&&setClickData(a.notification.data.return.pushApiIds),a.notification.close(),"undefined"!=typeof b&&b.startsWith("http")&&a.waitUntil(clients.matchAll({type:"window"}).then(function(){if(clients.openWindow)re
2024-04-29 08:30:16 UTC	1369	IN	Data Raw: 65 22 2c 41 4d 50 5f 53 55 42 53 43 52 49 42 45 3a 22 61 6d 70 2d 77 65 62 2d 70 75 73 68 2d 73 75 62 73 63 72 69 62 65 22 2c 41 4d 50 5f 55 4e 53 55 42 53 43 52 49 42 45 3a 22 61 6d 70 2d 77 65 62 2d 70 75 73 68 2d 75 6e 73 75 62 73 63 72 69 62 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 48 6f 75 72 42 79 54 69 6d 65 5a 6f 6e 65 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 44 61 74 65 28 29 2e 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 28 22 65 6e 2d 55 53 22 2c 7b 74 69 6d 65 5a 6f 6e 65 3a 22 41 6d 65 72 69 63 61 2f 43 68 69 63 61 67 6f 22 2c 68 6f 75 72 31 32 3a 21 31 7d 29 2c 62 3d 6e 65 77 20 44 61 74 65 28 61 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 7b 64 61 74 65 3a 62 2c 75 6e 69 78 3a 44 61 74 65 2e 70 61 72 73 65 28 62 29 Data Ascii: e",AMP_SUBSCRIBE:"amp-web-push-subscribe",AMP_UNSUBSCRIBE:"amp-web-push-unsubscribe"};function getHourByTimeZone(){var a=new Date().toLocaleString("en-US",{timeZone:"America/Chicago",hour12:!1}),b=new Date(a).toISOString();return{date:b,unix:Date.parse(b)
2024-04-29 08:30:16 UTC	749	IN	Data Raw: 63 74 69 6f 6e 20 62 72 6f 61 64 63 61 73 74 52 65 70 6c 79 28 61 2c 62 29 7b 73 65 6c 66 2e 63 6c 69 65 6e 74 73 2e 6d 61 74 63 68 41 6c 6c 28 29 2e 74 68 65 6e 28 63 3d 3e 7b 66 6f 72 28 6c 65 74 20 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 63 5b 64 5d 3b 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 63 6f 6d 6d 61 6e 64 3a 61 2c 70 61 79 6c 6f 61 64 3a 62 7d 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 6c 42 61 73 65 36 34 54 6f 55 69 6e 74 38 41 72 72 61 79 28 61 29 7b 63 6f 6e 73 74 20 62 3d 22 3d 22 2e 72 65 70 65 61 74 28 28 34 2d 61 2e 6c 65 6e 67 74 68 25 34 29 25 34 29 2c 63 3d 28 61 2b 62 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2f 22 29 Data Ascii: ction broadcastReply(a,b){self.clients.matchAll().then(c=>{for(let d=0;d<c.length;d++){const e=c[d];e.postMessage({command:a,payload:b})}})}function urlBase64ToUint8Array(a){const b="=".repeat((4-a.length%4)%4),c=(a+b).replace(/\-/g,"+").replace(/_/g,"/")

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49775	35.190.80.1	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:16 UTC	472	OUT	POST /report/v4?s=15OAtRSx2uUpKe%2FI9pn1N1P9rHSgxQpfacJRR11z8qM7QIB8FKfTCeCDuBzyUdJjPIPvU5cwz6nWyOy9z1MsBct7hjkf%2F8pOTPy8VzUoNAXhSPiF%2BXvEnT8a8V04yWGF HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 383 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:16 UTC	383	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 31 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 35 2e 31 32 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 73 73 69 61 62 61 6e 64 2e 63 66 64 2f 22 2c Data Ascii: [{"age":0,"body":{"elapsed_time":814,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.95.127","status_code":403,"type":"http.error"},"type":"network-error","url":"https://ossiaband.cfd/",
2024-04-29 08:30:16 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Mon, 29 Apr 2024 08:30:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49776	104.21.80.104	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:16 UTC	532	OUT	OPTIONS /register/event_log/v9e118mez8 HTTP/1.1 Host: event.trk-adulvion.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://ossiaband.cfd User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://ossiaband.cfd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 08:30:17 UTC	1182	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:16 GMT Content-Length: 0 Connection: close expires: 0 Cache-Control: no-cache, no-store, max-age=0, must-revalidate access-control-allow-headers: content-type x-xss-protection: 1; mode=block pragma: no-cache referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data: access-control-allow-methods: POST x-frame-options: SAMEORIGIN access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params access-control-allow-origin: * vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=() access-control-max-age: 1800 CF-Cache-Status: DYNAMIC
2024-04-29 08:30:17 UTC	419	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 46 25 32 42 59 6b 58 67 47 53 6a 47 7a 4c 49 4a 79 37 62 73 57 68 38 6c 32 6f 4e 67 79 32 25 32 46 33 39 59 62 68 4f 70 4f 6c 67 68 53 79 43 31 35 4f 61 54 7a 75 6f 4e 6b 36 6c 46 43 76 76 65 52 4e 4f 6a 49 75 48 69 64 58 32 69 76 4c 25 32 42 4b 48 54 4c 50 51 4b 53 70 51 69 43 6d 49 52 77 49 6c 48 78 6c 4d 6c 4f 66 50 44 35 4f 25 32 42 72 66 45 68 41 57 37 69 34 5a 6b 32 59 49 78 25 32 42 78 56 72 39 62 4d 30 41 47 58 47 4f 50 39 54 6f 38 4e 78 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F%2BYkXgGSjGzLIJy7bsWh8l2oNgy2%2F39YbhOpOlghSyC15OaTzuoNk6lFCvveRNOjIuHidX2ivL%2BKHTLPQKSpQiCmIRwIlHxlMlOfPD5O%2BrfEhAW7i4Zk2YIx%2BxVr9bM0AGXGOP9To8Nx"}],"group":"cf-nel","max

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49777	104.21.95.127	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 08:30:16 UTC	790	OUT	GET /fim/3079-US/4853eea1522e7e5501574b30947d9d88.ico HTTP/1.1 Host: ossiaband.cfd Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ossiaband.cfd/71f5afdee459cf14a701e297ec4ea370 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3659149aab309e8f076849db9fa8c222; _ga_DKB9VH2QW4=GS1.1.1714379415.1.0.1714379415.0.0.0; _ga=GA1.1.1433533608.1714379415
2024-04-29 08:30:17 UTC	822	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 08:30:17 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=604800 expires: Mon, 06 May 2024 08:30:17 GMT last-modified: Sun, 28 Apr 2024 23:37:51 GMT vary: Accept-Encoding,User-Agent,User-Agent x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W8V9nxvENNMnBiGApG0hj4Q8KrxIAginI3EFHilkVsQCXDR%2Bq%2F9rI6fw%2FbzNcvU0fBRgle3eI%2FjmuQevjep9Yiu%2BQ3g4A5KD6XlsOKkeFHH5JJyxTvgVCjKM4xno1abJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87bdeddbc80d117f-ORD
2024-04-29 08:30:17 UTC	547	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 00 0c 00 bc 00 13 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 00 20 00 be 00 d0 00 be 00 Data Ascii: 3c2e h6 (00 h&(
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: 00 00 be 00 95 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 bd 00 f8 00 be 00 66 00 be 00 2b 00 be 00 db 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 f4 00 bd 00 59 00 00 00 00 00 00 00 00 00 00 00 00 00 bc 00 39 00 be 00 e9 00 be 00 ff 00 bd 00 f8 00 bf 00 67 00 ff 00 01 00 00 00 00 00 c1 00 29 00 be 00 db 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 bd 00 f5 00 bd 00 59 00 00 00 01 00 00 00 00 00 00 00 00 00 bb 00 3c 00 be 00 cb 00 bd 00 65 00 ff 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 c1 00 29 00 be 00 db 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 f4 00 bf 00 58 00 00 00 01 00 00 00 00 00 00 00 00 00 80 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc 00 2a 00 bf 00 db 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 f4 00 bc Data Ascii: f+Y9g)Y<e)X*
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: 00 be 00 ff 00 be 00 fe 00 be 00 d5 00 be 00 47 00 ff 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 00 08 00 bd 00 6d 00 be 00 eb 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 bf 00 d6 00 bd 00 46 00 ff 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 00 08 00 bf 00 6f 00 bf 00 ea 00 bf 00 fe 00 be 00 ff 00 be 00 Data Ascii: GmFo
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: be 00 fc 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 e3 00 be 00 5a 00 cc 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 00 10 00 bc 00 86 00 be 00 f4 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 fe 00 be 00 d7 00 be 00 47 00 ff 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc 00 22 00 bd 00 af 00 be 00 fb 00 be 00 ff 00 be 00 ff 00 be 00 fe 00 be 00 e3 00 bf 00 5c 00 cc 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 00 10 00 bd 00 87 00 be 00 f3 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 d5 00 bd 00 46 00 aa 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ZG"\F
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: 00 11 00 be 00 79 00 bd 00 c2 00 bd 00 92 00 bd 00 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 00 03 00 b6 00 07 00 bf 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: y
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: 00 d4 00 06 00 bf 00 38 00 bd 00 a3 00 be 00 ef 00 bf 00 fe 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 f2 00 bf 00 af 00 bb 00 40 00 b9 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 00 07 00 bf 00 3c 00 bf 00 a3 00 be 00 ec 00 be 00 fd 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 fe 00 be 00 f3 00 be 00 b0 00 be 00 47 00 bf 00 Data Ascii: 8@<G
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 bd 00 f1 00 be 00 b0 00 bc 00 45 00 b3 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 00 06 00 be 00 3b 00 be 00 a9 00 bf 00 ef 00 be 00 fd 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 f2 00 be 00 b0 00 bc 00 44 Data Ascii: E;D
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: 00 f6 00 be 00 fe 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 f2 00 be 00 b0 00 bb 00 40 00 db 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 00 0e 00 bf 00 6b 00 be 00 de 00 bd 00 fd 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 bf 00 f6 00 be 00 c4 00 bd 00 55 00 c4 00 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 bf 00 0c 00 be 00 4f 00 be 00 c1 00 bf 00 f6 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 bf 00 fe 00 be 00 f3 00 be 00 b0 00 Data Ascii: @kUO
2024-04-29 08:30:17 UTC	1369	IN	Data Raw: c1 00 be 00 f7 00 bf 00 fe 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 f3 00 be 00 b0 00 be 00 3f 00 b3 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 01 00 b4 00 11 00 c0 00 51 00 be 00 bc 00 be 00 f4 00 bf 00 fe 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 ff 00 be 00 fe 00 be 00 f3 00 bd Data Ascii: ?Q

Target ID:	0
Start time:	10:29:49
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:29:54
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=2028,i,14383046284550637843,4217427290722038496,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:29:56
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: dropped/chromecache_78, type: DROPPED
Source: Yara match	File source: dropped/chromecache_99, type: DROPPED

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174
Source: unknown	TCP traffic detected without corresponding DNS query: 185.66.88.174

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 29 Apr 2024 08:30:03 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33Last-Modified: Wed, 16 Jan 2019 21:22:24 GMTAccept-Ranges: bytesCache-Control: max-age=2592000Expires: Wed, 29 May 2024 08:30:03 GMTVary: Accept-EncodingContent-Encoding: gzipContent-Length: 7489Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5d 5d 8f e4 b8 75 7d 37 e0 ff 50 d9 85 b3 33 46 57 4f 4b fd 51 dd 63 38 f6 26 86 11 03 76 6c c4 6b 20 0f 79 a1 24 aa c4 6d 49 d4 50 52 55 d7 04 fb df 43 4a f5 c1 43 a9 8e 3a c0 be 64 60 8c 77 a4 7b 29 7e dc 7b 79 49 9e c3 fa f4 eb 7f fa e5 2f 56 bf 5e ad fe a8 eb 6e f5 fd 5e b6 ba 92 ab 87 db cd ed dd 2a 39 ac 7e 9f 89 9d dc 8a 3a 3b ac d6 ab a2 eb 9a cf 9f 3e e5 56 52 8c 82 b7 4a db e7 bf f7 9e 8c 85 fd 59 a5 b2 6e e5 35 9d 4f e5 f1 fd 07 f7 d5 cf ab bf ff e9 cf ab bf fe f1 cf ab e8 36 ba 59 fd db df ff fe 79 f5 97 3f fd 70 2a e4 a3 2b f2 d3 2f 7f f1 e9 d7 ab 3f fe f5 3f 7e 58 fd ed fb 1f fe 7d f8 ca fa ea 9f 41 7e a8 d5 3a 17 a9 5c fd 8f 95 5f 1d ff 59 a9 f2 f0 79 f5 9d fb f0 b1 b5 df fd c6 bd 6e 4d fa 79 d5 9b f2 c3 77 b7 b7 43 75 5b bf d2 eb bd 4c dc 3f 6f a5 ee 7e b7 fb ed d0 3f df 7d fc bf 2a 7e ab 64 ae de fe f9 ac 6f eb 64 2a d1 7d f8 4e 56 89 cc 32 99 ad 75 23 eb ee d0 c8 ef 3e de bc a3 cc bd ce f3 f8 77 d3 e2 86 e7 ef 2f e2 4a 09 ef 2b a0 eb e6 f4 3b d3 cb f7 b7 a3 dd 6d 4f 65 7c eb bd 37 72 db 97 c2 78 c5 5a c1 63 af 0f a3 b9 97 6a 5b 58 fb a9 dd eb f2 f2 bc ed 0e a5 f4 1e ff f4 cb 5f dc e6 62 34 83 4c b5 4d 29 ac 09 a8 ba 54 b5 5c 27 a5 4e 5f cf aa 27 a5 e0 ff a2 87 e6 ed 53 b4 f2 8c c6 fb 98 fa 2a 5d 69 85 34 aa 1b 1e 77 f2 ad 5b 1b 59 67 f6 49 bd fd bc 12 7d a7 87 17 ae c1 af ca 5a e1 a0 57 69 dd 15 a3 40 dd 29 51 2a d1 ca 6c 94 ab f4 d7 b5 6e df 26 82 5b 23 0e 6d 2a 4a 39 36 ca ba 44 25 5e 65 bb ea 0a 39 54 66 75 7f ff ab 95 ed b2 ad 34 2b 23 4b d1 a9 9d 5c 75 7a 78 af 52 5d af 52 d7 bb b6 d9 66 70 11 db 29 eb 72 eb b9 c7 d8 96 e8 f6 fe f8 47 56 43 7d 86 8e 2a 8e 9d 7d 77 bb 79 3c 3e df 49 d3 29 5b 9d b5 ad fc b6 fe bc 5a 47 8f bf 3a 77 f7 3a 7e 9b 94 1c 0f 8a c7 f7 f7 d3 f7 f7 fe fb 87 e9 fb 07 ff fd e3 f4 fd a3 ff 3e df 8f ef f7 2a eb 0a d7 aa f8 f9 71 13 3d c4 2f c7 da 0f c3 74 ac b9 8d 34 9d 34 17 dd be 1c 75 1b 91 65 b6 e7 d7 a5 cc 5d d3 07 bd ca f6 af aa 8f 8f e2 5b 5b e2 50 ee b9 af da a3 01 ae 9d 03 38 83 aa 25 14 fc 2f 56 e6 58 ba 6e 55 a7 b4 fd fe 69 b0 2e 82 53 19 91 b4 ba ec bb d1 f4 c6 af af 27 9f 3f 36 76 f2 bc d3 8d 1b ba f0 29 e9 82 52 f9 e6 71 fc 5e 74 3b f6 e1 f3 93 df d3 89 36 d6 d6 a1 c7 3e af 6e ed 60 db bf 1e dd df d1 c9 62 46 c9 cf 2b db 12 95 d9 fa dc 3d db d7 df ca e1 8f 27 b0 36 22 53 7d 6b 0b 89 fc ef 34 7d 59 0e fd 7e 1c f8 52 0b 5b 29 f7 20 90 31 ce 54 41 68 78 72 96 9a 29 ec 38 aa 66 34 f2 5b df 12 e7 8a 05 23 b8 48 5b 8f fc 83 6c 8c 4c 45 27 b3 95 68 57 3a b7 93 e9 83 9d 4c 07 7f 7b 47 e5 de d1 c6 50 86 55 fd 9d f5 76 4d 6c 1b 55 8f 42 a7 38 25 6a 65 c3 ee 60 7c
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 29 Apr 2024 08:30:03 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33Last-Modified: Mon, 08 Jul 2019 19:53:30 GMTAccept-Ranges: bytesCache-Control: max-age=2592000Expires: Wed, 29 May 2024 08:30:03 GMTVary: Accept-EncodingContent-Encoding: gzipContent-Length: 23243Keep-Alive: timeout=5, max=99Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 8f e4 36 92 e0 f7 03 ee 3f e4 96 d1 e8 6e 3b 33 5b ca 77 66 c1 c6 3c 30 8b 1b 60 3c 1f c6 bb c0 02 be 3e 40 99 52 3e a6 95 8f 93 b2 ba 54 2e d4 fe f6 e3 53 62 90 11 94 94 a5 b2 bd 77 37 1e bb 94 54 30 18 8c 08 06 23 28 32 f8 e9 db 7f f9 ef ff ad f7 6d ef 4f e7 f3 35 bf 66 d1 a5 f7 75 32 1c 0f c3 de 87 fd f5 7a c9 57 9f 3e ed 92 eb 5a bf 1c 6e ce c7 4f 1f 45 85 3f 9f 2f 4f d9 61 b7 bf f6 46 41 18 0e d8 7f 96 bd 7f db 27 06 a2 3f 3e 5c f7 e7 2c a7 a1 1f 0f d7 6b 92 f5 7b 7f 3d 6d 86 02 ea 6f 87 4d 72 ca 93 b8 f7 70 8a 93 ac f7 e3 5f ff cd 20 e3 70 dd 3f ac 05 01 d7 c7 75 fe a9 a4 e9 d3 3a 3d af 3f 1d a3 9c e1 fa f4 b7 bf fe f9 2f 7f ff e9 2f 82 c4 4f ab 8c c1 3c 0f 06 eb f4 21 59 7d 13 04 f3 f5 76 7b 3f 18 1c 4e f1 61 77 5e 7d 33 9b 85 c1 76 c4 0a 2e 0f d9 25 65 10 b3 ed 64 b4 09 79 c1 e1 f4 65 f5 4d b2 18 27 8b 0d fb 99 25 f1 ea 9b 78 33 9e 4e a6 ec d7 39 8b 4e 3b 06 bd 8d e7 49 38 61 05 4f 49 9a 9e 1f 59 c1 76 13 06 73 56 b0 cb 92 e4 b4 fa 66 b4 88 e6 a2 c6 35 89 52 f6 33 d8 2c 97 fc f5 e6 29 62 6f c3 79 34 5a 2f d8 cf c7 fd e1 ca d1 09 da 76 59 f4 c4 08 d9 cc a7 f3 58 fd 1c c4 51 c6 a8 19 4f c6 d1 24 e0 c4 65 87 63 94 3d 19 1d ca 93 cd f9 14 8b b2 b2 66 fe b0 d9 24 79 6e 50 71 38 6d cf 66 b3 51 76 3a 9c 76 06 d9 31 ef 57 66 f4 34 e5 02 63 00 8b ed 72 1b 09 00 40 c8 3a 4b a2 2f 97 f3 e1 74 1d 14 f9 ca 2a c9 8f ab e9 7c 76 29 60 e9 31 5e cd 67 0b bb 34 dd ad 96 cb 91 5d 5a a4 ab 70 14 04 a2 78 7b 66 05 db e8 78 48 9f 06 79 74 ca 59 97 b3 c3 76 35 88 2e 4c 70 83 fc 89 c9 fe d8 ff 53 ca c4 f6 63 b4 f9 49 fc fc 57 56 a5 7f f7 53 b2 3b 27 bd 7f ff eb 5d ff 1f e7 f5 f9 7a ee df fd 8f 24 fd 9a 5c 0f 9b a8 f7 f7 e4 21 b9 eb ff 31 3b 44 69 ff ee ef ec 65 ef 27 86 fa ae 5f 35 d0 bf fb 23 6f 80 69 6f 7a ce 7a 7f 39 9e ff 79 b8 ab 70 ba 05 3f 3d 1d d7 e7 f4 4e 61 33 6b 59 7d 38 9e 4f e7 fc 12 6d 92 d5 4f ff fa 23 7b 1e fc 23 d9 3d a4 51 d6 ff 31 39 a5 e7 3e 2b 8a 36 e7 fe 9f cf a7 fc 9c 46 79 ff ee 6f 87 75 92 45 d7 c3 f9 d4 e3 e0 ac 85 3f 9f 1f b2 03 1b 23 7f 4f 1e ef fa 25 ba 97 6f fb ab 55 b4 e5 a3 6a b5 5a 27 db 73 96 3c af cf c5 20 3f fc c2 65 bd 3e 67 6c 5c 0d 58 c9 cb fe 7a 4c 9f 0d 92 56 55 af ef 19 1f 93 c1 3e 11 d2 0f 87 21 53 85 c7 64 fd e5 70 65 8a 5c 5c 39 ae 64 10 c5 ff 7c c8 d9 db 20 78 57 bd 8d 2e 83 3d ab 24 d4 66 b0 e1 bd 5f b1 01 7a 62 94 65 c9 e9 fa 12 65 8c ed 69 d2 8f f2 43 9c f4 b7 87 dd 26 ba f0 2e f1 c7 87 8c 95 b0 d1 ca 08 df 27 51 cc ff ec b2 f3 c3 a5 7f 8c 0e a7 fe 29 fa da 67 4a ce 81 9f e3 43 7e 49 d9 20 61 a3 7e f3 e5 65 7d 8e 9f 9e d9 70 d8 1d 4e 4c 03 cd fe fc 17 d2 0d 41 36 67 eb
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 29 Apr 2024 08:30:03 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33Last-Modified: Wed, 09 Oct 2019 12:44:04 GMTAccept-Ranges: bytesCache-Control: max-age=2592000Expires: Wed, 29 May 2024 08:30:03 GMTVary: Accept-EncodingContent-Encoding: gzipContent-Length: 1065Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 56 db 6e db 46 10 7d 37 e0 7f 58 a4 30 12 1b 21 75 b1 e4 44 0c 5c 40 71 82 36 45 0b b9 69 1f fa ba 24 97 e2 22 cb 5d 76 b9 94 64 07 fd f7 ce 5e 78 a7 a5 c0 08 fa 52 3d d8 e4 70 38 33 e7 cc f0 cc a6 2a 63 3e 0b bd 98 16 38 64 c4 2b 22 29 18 a3 7c 8b be 9e 9f 21 24 76 44 26 4c ec 03 94 d2 38 26 fc 9d 36 4e ae d0 bd 28 a8 a2 82 a3 84 1e 48 8c 24 f9 bb a4 12 2e 12 21 11 dd fc e1 a3 5f ca 42 a1 bc 54 4a 87 1a 44 41 f0 a6 4a 09 0a 45 fc 80 68 81 b8 50 88 70 51 6e 53 1f 5d 4d 74 8e dc 25 08 6c 06 93 37 25 74 9b aa 00 cd a6 d3 5d 6a 2c 7b 1a ab d4 1a f6 60 f8 e7 fc ec fc cc 67 da 2b 14 87 0d 64 65 f8 c1 02 69 e2 e1 b0 10 ac 54 c4 04 50 22 0f d0 d4 5c 32 92 a8 ea fa d1 a3 3c 26 87 00 ad e0 67 2c 21 8e be 6c a5 28 79 ec 45 82 09 19 a0 90 81 c9 3c 4b 28 53 04 2c b9 14 5b 1a 07 1f fe fa 94 e1 2d f9 53 62 5e 00 1f 99 ff 1b 05 52 0b 91 28 7f cd f2 14 bf da e4 38 a2 ea e1 76 b5 bc 34 ef 0b 7b 0f c9 fd d5 d2 58 a0 1b 39 94 1e 00 31 9c 0c 80 1d 45 d4 86 d1 d0 73 d1 85 05 96 a9 75 51 e4 a0 3c 0c 91 21 4e 44 38 e0 b0 51 28 27 5e c5 b7 f5 4c 04 57 de de 99 38 e0 c2 6c 58 99 1e 25 aa d1 db 1a 6b 1c 21 13 8e ac 2a 28 2e 95 30 86 0c 1f 3c 57 28 e5 29 91 54 d5 e6 b4 ce c6 2d b8 50 c8 98 48 4f e2 98 96 45 80 96 f9 61 58 02 46 34 73 d3 6b dd fb 2c 86 9e 00 b2 e4 1d e0 c1 00 53 f6 e9 94 84 61 45 77 36 e3 d5 a3 10 19 10 d6 e6 73 be 9c 9a c4 0d 98 c6 92 61 b9 a5 10 64 da 00 ec 15 bd 70 9e c3 89 da a7 54 1d a9 33 c0 89 aa aa 8d c0 08 dd 0a d0 8b 17 dd 81 51 fa 2b 36 a6 88 11 ac c7 54 a8 b4 1d 93 09 1c 0f 31 0f 3f 8a c5 f5 c5 60 9e 1a b8 17 a3 f3 f5 ad c3 54 17 13 61 1e 11 f6 e4 ac b8 f8 d7 f3 1e dd b5 61 8c ed 9a d6 00 95 92 bd f2 fd 89 19 c8 62 a2 91 83 1a f9 5b 9a 5c c2 48 78 92 e4 04 ab 76 39 1c ef 9e a3 16 2d 5d 1a e7 a5 f5 dd 75 d0 d7 13 f8 23 f2 eb dc 4d e4 4e 5d d8 09 72 a9 34 9d ed 6f a2 99 23 03 d4 c2 7e 19 63 85 03 63 98 00 e0 77 21 2e c8 cd e2 f5 e7 29 fb 69 f3 81 a5 eb df d7 ef d7 f7 eb f5 fa 7e 32 99 ec e1 ff dd cf cb f7 eb 8f 6b fd fb d5 fc 85 e7 e6 fe d3 dd 67 f8 bf d9 df de be bc 6c d7 94 4b b2 7b 6d be 77 0e 5d b7 c5 0d 88 88 4a 59 e8 c9 ce 05 ad a7 61 d0 e7 2e cc 2a b6 8d 58 4d c0 62 38 8c b0 50 30 dc 68 d3 89 c6 eb 70 7e ce b7 97 c6 19 2d de 5e 74 da ff 7c 01 9f f6 f5 db dc 82 48 86 5f a8 f2 94 7e df 8d 91 73 01 85 bf 29 ac 53 26 1e 4f 78 88 e3 cf 8f 3c 1c 67 34 48 f5 1e b6 bc 3e 17 31 74 b6 87 79 36 9a af 99 09 d7 c1 1b d7 41 d9 59 29 b6 85 c6 76 a2 87 3a a0 ed a1 f1 fe 5f 36 51 73 f0 1f 34 51 2b 47 6f 39 8e e8 6c 8e 63 ad a6 9e d1 c4 a5 d3 e3 b1 6d 59 8b 81 db 83 b0 90 94 c8 3c fd 29 0e 77 62 c7 c5 74 ba e7 33 5e e5
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 29 Apr 2024 08:30:03 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33Last-Modified: Tue, 23 Jul 2019 09:49:52 GMTAccept-Ranges: bytesCache-Control: max-age=2592000Expires: Wed, 29 May 2024 08:30:03 GMTVary: Accept-EncodingContent-Encoding: gzipContent-Length: 1403Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 58 5b 6b e4 36 14 7e ce c2 fe 87 d3 94 85 24 c4 73 49 52 58 26 14 5a b2 81 66 09 d9 c2 96 42 29 5b 90 6d d9 56 47 96 8c 24 cf 25 a5 ff bd 47 b2 ec f1 78 6c cf e4 a1 b0 cc ae 8f ce 5d df b9 68 a7 57 57 ef df c1 15 7c 59 73 78 20 4a 96 9a 72 58 dd 4c 6e 27 77 8e fe 20 8b ad 62 69 66 e0 66 36 bf 0d f0 e7 23 7c 22 2b 16 c3 27 5a 1a 1d 65 8e eb 99 45 54 68 1a 43 29 62 aa 16 f0 f5 f1 11 9e 9f 1e 1e 5f be 3e c2 d3 0b 64 c6 14 7a 31 9d a6 cc 64 65 38 89 64 3e 45 7b b5 b9 9b fd 8f 90 cb 70 9a 13 6d a8 9a 7a 1d d6 c6 f4 fd bb 69 e5 ea be af 01 ba a8 a8 e7 98 c8 35 0f a2 fa e8 1f a4 42 cc 74 c1 c9 76 01 42 0a 7a 6f 29 6b 16 9b 6c 01 f3 d9 ec 83 fb 0e d6 34 5c 32 13 18 52 04 19 86 ca 6d b8 41 24 b9 c4 48 8c 22 42 17 44 51 61 1c f3 f4 0a 0a a9 99 61 52 80 a2 9c 18 b6 a2 40 44 0c af 01 c3 d8 37 90 b0 0d 54 0a f1 dc 66 83 89 14 12 29 8c 06 a6 75 49 9d 9f d0 28 59 34 5a 9c 7a af 05 bd bb 87 7f 2d 61 3f 22 f7 a5 0d 49 69 15 dc a0 1e 8c 2a d7 81 91 65 94 05 24 aa 18 0a 22 82 3f fc e9 fe 49 4e 04 2b 4a 2b 2e 45 23 2e 5f 83 90 44 cb 84 44 34 58 31 cd 42 c6 99 c1 3c 66 2c 8e 69 cd 86 e9 b0 01 27 4c d1 44 6e 30 11 2c 77 5a 20 45 e6 28 c3 60 c7 c3 58 90 04 ef b9 0e 26 c2 34 61 a2 17 70 3e 39 f7 06 9a eb 43 58 44 4b 4f 8c 38 25 78 37 a1 34 99 a7 0c 3a c8 99 a0 41 46 ed 95 2e 60 e6 89 bb ef 71 ef 02 59 b6 bc 1b 4c b5 5c 51 95 70 b9 1e c8 8d 54 90 70 a2 33 0b 04 9b d1 14 ed 20 60 2a 1c b4 e0 67 91 86 cc b9 07 1d 9a a0 b7 f1 c5 ac d8 5c 43 fd 73 39 ec f0 5a 91 a2 a0 ea 7a e0 98 19 9a d7 81 d4 16 8f 5f ef 89 28 b0 58 3b 81 eb 48 a0 18 21 fe b9 6c 9b 3e 95 55 1f e5 1c cc 5b 3b 31 83 37 9c 33 d1 80 68 5e 6c 3c 15 ef 9c 20 81 d3 c4 dc bf 39 b3 6f 69 3a 2d 76 57 b7 11 e1 1c a1 e9 7b da 78 68 2c 4f eb f0 7a 6b a9 dd 0d 07 35 09 b2 9a a0 34 09 39 8d 87 10 16 4b a3 1b a6 03 93 e3 9e a2 fe ea 1f 85 a2 ab 21 03 0d 93 a0 1b 33 e2 45 d3 4d 4a a5 6d 36 0b c9 b0 ad a8 4e 26 51 44 05 28 46 23 d3 9a 0d 78 be cc 4c ce 87 8f 2d 2c 87 0f f5 e0 d9 21 7d 34 1b 61 69 8c 14 27 e5 a4 c5 3a 90 99 16 47 2b 3f bb 5e b4 e7 a8 c7 20 13 19 ce ae 1a 7f a1 54 6e b0 b7 f8 0a 12 c7 d8 d2 b0 8b c2 77 2c 2f a4 32 a4 81 ab 9d 77 3b 15 3d 81 ba 0f 2c 9f b8 07 2a 15 3a c7 84 6c 27 f5 52 b2 20 91 ab ae ba b7 9f a8 a6 2a c6 1e 2d 43 02 38 e0 14 d5 d9 61 d3 e8 29 f1 21 1d b1 22 69 4f 3b ee 9d d4 5b 1f cf e1 b4 6e 9f 1e 45 f3 ff 0a 57 f7 91 2a 12 76 4b 2e 97 4d eb ac 49 96 6d 38 b9 86 ef 60 a0 a8 0f 14 a9 a3 12 07 99 f4 0d d9 ed ab 4e d2 ee 8c f0 22 e1 b3 ae d6 43 21 83 bf 75 a7 38 f6 b7 c4 1d 6a 06 f7 cd 9f dd 92 43 e1 57 5e a6 4c f4 6e 9e 93 6a 11 aa c1 dd ac 45 41 5c 2a 52
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 29 Apr 2024 08:30:03 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33Last-Modified: Fri, 06 Dec 2019 21:35:42 GMTAccept-Ranges: bytesCache-Control: max-age=2592000Expires: Wed, 29 May 2024 08:30:03 GMTVary: Accept-EncodingContent-Encoding: gzipContent-Length: 5682Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 73 db 48 72 df 55 a5 ff 80 d8 e5 58 72 08 18 20 05 4a a2 ea 72 af ac 53 5b 75 97 5c ad f7 c3 a5 92 7c 00 89 21 89 15 08 f0 00 50 92 57 a5 ff 9e 9e 27 e6 89 97 bd 5b 2e 67 25 53 26 80 e9 9e 99 9e 9e 9e 7e 4c 0f de bf 3b 3f 3b 3f fb 53 85 d0 cf 28 f5 7e 44 87 63 9e 34 08 df db 37 cd b1 5e bd 7f df b0 7b 87 32 d8 94 87 f7 cd c1 8f af 16 fe 9a 42 e0 82 ef de e3 bf ef df 79 fe 98 9f f3 b3 1f 93 75 8e bc 72 eb 6d ca a2 41 45 53 9f 9f 8d c2 40 90 84 51 e0 6d 01 de fb 67 af 42 35 6a bc 4d 0d 78 c2 79 40 2f e1 eb 22 f0 76 79 b9 4e 72 af 6e 3e e5 08 3f bd 0a bc 3d 4a 52 54 c1 f7 38 f0 d6 49 51 90 ef 4b c0 85 92 e6 54 91 52 d7 81 d7 a0 ba c9 0e 65 91 25 39 be 73 13 90 b6 26 1b 8c f7 16 57 5c 36 18 30 0a 03 ef 58 a1 bc a4 38 23 68 53 8d 92 6a b3 87 ef d0 92 63 59 35 db 32 cf 4a 4c a7 51 fd f3 30 6d 81 b2 23 c1 ce cf 4c 92 8c ab 97 8e ea 1f b2 03 6e bb 77 aa f2 8b 57 9c 1f 30 ea 3a d8 95 e5 2e 47 c9 31 ab 09 57 40 15 bf df 26 87 2c ff f4 bb bf 95 c7 63 56 d4 ab 28 0c 67 73 f8 2c e0 73 05 9f 18 3e 4b f8 5c c3 e7 06 3e b7 61 f8 ea f2 6e 5a f7 d8 d8 4e e9 d3 be 39 e4 33 6f 5d a6 9f 66 5e 9a 3d cc bc fa 98 14 33 2f 39 1e 73 d4 cc bc 72 fd 13 da c0 ff d9 b6 4a 0e 68 e6 ed 23 f8 cc e1 b3 80 cf 15 7c 62 f8 2c 67 de 11 70 e4 e5 e6 fe 1f 27 60 01 82 e9 fc 0c 58 00 10 c1 bf f5 ba 82 bf 9b aa 2c 3e 1d e0 4b 9a 42 7b 6b 00 c8 76 33 6f 93 e1 f2 9b 32 c5 50 08 9a 92 6e a1 7a 04 e5 30 61 a1 e2 03 14 02 fa cd bc fb 75 3a f3 fe 31 3b 3f 83 ef 75 72 80 1a eb 43 92 03 44 dd 54 d9 3d 22 ff 97 05 94 ae 4f 6b fc 07 0a 34 80 e0 21 81 ca e1 c6 09 d0 40 45 30 b1 10 dc 48 71 4d f0 34 05 9c 25 7c 3f c1 27 cf 00 f9 36 db 9d 70 bb e9 84 98 79 45 82 69 02 34 c8 4a 4c 96 aa c9 36 39 ee 56 9d e1 16 53 8e 87 ff b3 dd 26 39 e2 32 de f3 f9 99 e7 1d 92 6a 97 15 2b 2f bc c3 57 47 e8 72 56 ec f8 e5 ba ac 00 35 bf 2a 4f 4d 9e 15 88 5e be e0 29 11 40 0d 49 b5 cd 9e 56 c9 16 b0 53 8c 4c 28 ac bc 57 c1 2b 02 97 66 35 c8 a1 4f 2b 4a 77 72 8b c0 c1 8d b2 d9 93 eb 87 ac ce d6 59 9e 35 50 6a 9f a5 29 2a c8 6d 5c 9d bf 47 d9 6e df f0 46 c8 57 6a 1b 68 ed a2 b2 ac 20 d0 bc ce 17 2a 19 0f f9 7f 3f 1d f2 a2 fe 5f cf 05 a7 00 bc f3 30 88 5e 96 b7 21 7a c3 cb d1 41 a1 4f 35 1a aa 04 ce b3 ba f1 89 38 5b 79 45 59 20 d1 b2 51 83 b8 df 55 e5 e9 d8 dd f0 67 3a 80 4f 7e 9d fd 4c 9a 43 07 d3 87 5b 32 39 e8 8c a2 a5 31 1f fb 54 18 ac bc b7 3f 24 39 7a 4c 3e bd c5 3c 5c d4 7e 8d aa 6c 7b 27 8a 3d 32 1a 80 80 a0 ac 92 6c ee 71 ab 8a d4 df 94 79 09 83 fb 7a bb 95 ca 43 2b a0 cb d1 f2 f8 44 ee f9 87 da 6f d0 13 bd ef 27 e9 4f a7 1a 13 34 0c df d0 c7 8f 68 7d 9f 41 63 08 e8 01

Source: global traffic	DNS traffic detected: DNS query: sdfsd.s3.bhs.cloud.ovh.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: jantyport.com
Source: global traffic	DNS traffic detected: DNS query: persistdrum.cfd
Source: global traffic	DNS traffic detected: DNS query: ossiaband.cfd
Source: global traffic	DNS traffic detected: DNS query: trk-adulvion.com
Source: global traffic	DNS traffic detected: DNS query: trk-amropode.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: event.trk-adulvion.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 86

Chrome Cache Entry: 88

Windows Analysis Report
https://sdfsd.s3.bhs.cloud.ovh.net/v1/AUTH_8749f4abd4b14c57a9f85d6e4378c063/dsfdf/gfhfgh#cl/298587_smd/265/3571761/3180/201/26638