Edit tour

Windows Analysis Report
https://invisus.com/account

Overview

General Information

Sample URL:	https://invisus.com/account
Analysis ID:	1438589
Infos:

Errors URL not reachable

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2024,i,8826224301019814186,5666340583850186982,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://invisus.com/account" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /account HTTP/1.1Host: invisus.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/ HTTP/1.1Host: invisus.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/login.aspx HTTP/1.1Host: invisus.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/login HTTP/1.1Host: invisus.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/Content/main.min.css HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/images/invisus_logo.svg HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZNzcWy4VkCE-pSLsJrbESazStTjgF5zcYJPjBE4j4SlLsGUUZ-oN7Iiednzf2vbMNQ2&t=638464878520000000 HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/Scripts/jquery-3.4.1.min.js HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/images/invisus_logo.svg HTTP/1.1Host: invisus.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/WebResource.axd?d=x2nkrMJGXkMELz33nwnakOVznLNCwusHXPNDBb9MPPMftu_Be29Y9hlHzd2WRIiiVWyDjrTJuDvKOwTFWV1mLECPK2HfRUpEIQ60X67GvtU1&t=638464878520000000 HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/WebResource.axd?d=JoBkLzP19aTuxbWOhHobYqk7SUCKLWendEjliccfqRZIRxp_Bwjjme415Bta2hDR3pYqvhn0f0wUqSCO1ehyJg2&t=638464878520000000 HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/images/authorization-image.png HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/images/infosafe_logo2.svg HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/images/idefend_logo.svg HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /npm/uikit@3.5.5/dist/js/uikit.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://invisus.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/uikit@3.5.5/dist/js/uikit-icons.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://invisus.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/images/info_safe_certified.png HTTP/1.1Host: invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://invisus.com/account/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/images/idefend_logo.svg HTTP/1.1Host: invisus.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/images/infosafe_logo2.svg HTTP/1.1Host: invisus.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/images/authorization-image.png HTTP/1.1Host: invisus.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
Source: global traffic	HTTP traffic detected: GET /account/Scripts/site.js HTTP/1.1Host: www.invisus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://invisus.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/images/info_safe_certified.png HTTP/1.1Host: invisus.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf

Source: global traffic	DNS traffic detected: DNS query: invisus.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.invisus.com

Source: chromecache_48.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/uikit
Source: chromecache_48.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Nunito:ital
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIMeaBXso.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIO-aBXso.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOOaBXso.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofIOuaBXso.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaDRs4.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaHRs71cA.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaMRs71cA.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaNRs71cA.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaORs71cA.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_44.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_48.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-C0Q0TYEXQ4
Source: chromecache_48.2.dr	String found in binary or memory: https://www.invisus.com
Source: chromecache_48.2.dr	String found in binary or memory: https://www.invisus.com/account/Scripts/site.js
Source: chromecache_48.2.dr	String found in binary or memory: https://www.invisus.com/wp-content/uploads/cropped-favicon-180x180.png
Source: chromecache_48.2.dr	String found in binary or memory: https://www.invisus.com/wp-content/uploads/cropped-favicon-192x192.png
Source: chromecache_48.2.dr	String found in binary or memory: https://www.invisus.com/wp-content/uploads/cropped-favicon-270x270.png
Source: chromecache_48.2.dr	String found in binary or memory: https://www.invisus.com/wp-content/uploads/cropped-favicon-32x32.png

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: classification engine

Classification label: unknown0.win@18/17@10/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2024,i,8826224301019814186,5666340583850186982,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://invisus.com/account"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2024,i,8826224301019814186,5666340583850186982,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://invisus.com/account	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://www.invisus.com/wp-content/uploads/cropped-favicon-180x180.png	0%	Avira URL Cloud	safe
https://invisus.com/account/Content/main.min.css	0%	Avira URL Cloud	safe
https://invisus.com/account/images/infosafe_logo2.svg	0%	Avira URL Cloud	safe
https://invisus.com/account/	0%	Avira URL Cloud	safe
https://invisus.com/account/images/authorization-image.png	0%	Avira URL Cloud	safe
https://www.invisus.com	0%	Avira URL Cloud	safe
https://www.invisus.com/wp-content/uploads/cropped-favicon-32x32.png	0%	Avira URL Cloud	safe
https://invisus.com/account/login	0%	Avira URL Cloud	safe
https://invisus.com/account/images/invisus_logo.svg	0%	Avira URL Cloud	safe
https://invisus.com/account/login.aspx	0%	Avira URL Cloud	safe
https://www.invisus.com/wp-content/uploads/cropped-favicon-192x192.png	0%	Avira URL Cloud	safe
https://invisus.com/account/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZNzcWy4VkCE-pSLsJrbESazStTjgF5zcYJPjBE4j4SlLsGUUZ-oN7Iiednzf2vbMNQ2&t=638464878520000000	0%	Avira URL Cloud	safe
https://invisus.com/account/images/idefend_logo.svg	0%	Avira URL Cloud	safe
https://invisus.com/account/images/info_safe_certified.png	0%	Avira URL Cloud	safe
https://invisus.com/account/Scripts/jquery-3.4.1.min.js	0%	Avira URL Cloud	safe
https://www.invisus.com/wp-content/uploads/cropped-favicon-270x270.png	0%	Avira URL Cloud	safe
https://www.invisus.com/account/Scripts/site.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.google.com	172.217.14.228	true	false	high
invisus.com	91.246.36.32	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
www.invisus.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.jsdelivr.net/npm/uikit@3.5.5/dist/js/uikit.min.js	false		high
https://invisus.com/account/images/invisus_logo.svg	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/images/authorization-image.png	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/Content/main.min.css	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/uikit@3.5.5/dist/js/uikit-icons.min.js	false		high
https://invisus.com/account	false		unknown
https://invisus.com/account/login	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/images/infosafe_logo2.svg	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/login.aspx	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/images/idefend_logo.svg	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZNzcWy4VkCE-pSLsJrbESazStTjgF5zcYJPjBE4j4SlLsGUUZ-oN7Iiednzf2vbMNQ2&t=638464878520000000	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/images/info_safe_certified.png	false	Avira URL Cloud: safe	unknown
https://invisus.com/account/Scripts/jquery-3.4.1.min.js	false	Avira URL Cloud: safe	unknown
https://www.invisus.com/account/Scripts/site.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.invisus.com/wp-content/uploads/cropped-favicon-32x32.png	chromecache_48.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/uikit	chromecache_48.2.dr	false		high
https://www.invisus.com	chromecache_48.2.dr	false	Avira URL Cloud: safe	unknown
https://www.invisus.com/wp-content/uploads/cropped-favicon-180x180.png	chromecache_48.2.dr	false	Avira URL Cloud: safe	unknown
https://www.invisus.com/wp-content/uploads/cropped-favicon-192x192.png	chromecache_48.2.dr	false	Avira URL Cloud: safe	unknown
https://www.invisus.com/wp-content/uploads/cropped-favicon-270x270.png	chromecache_48.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.14.228	www.google.com	United States	15169	GOOGLEUS	false
91.246.36.32	invisus.com	Ukraine	39906	COPROSYSCZ	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1438589
Start date and time:	2024-05-08 21:40:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://invisus.com/account
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	UNKNOWN
Classification:	unknown0.win@18/17@10/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.67, 142.251.33.110, 142.250.99.84, 34.104.35.123, 40.127.169.103, 199.232.210.172, 192.229.211.108, 20.3.187.198, 20.242.39.171, 13.85.23.206, 142.251.215.227, 142.251.33.106, 142.251.211.227, 142.250.217.72, 172.217.14.202, 142.251.33.74, 142.251.215.234, 142.250.217.106, 142.250.217.74, 142.250.69.202, 142.251.211.234, 172.217.14.234, 216.239.34.36, 216.239.32.36
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, ctldl.windowsupdate.com, region1.google-analytics.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, clients.l.google.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://invisus.com/account

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2573
Entropy (8bit):	4.199071783905958
Encrypted:	false
SSDEEP:	48:ZxHgBlUsYctblXQjHsghTtGC1hfVoq5RGqMjIoUtxUmd5KH7bs6cXg5:W6shtblAjThTtGEhOq5RWUAm7Kbbs6cM
MD5:	1604C246903B12D3AB7514FD148D205E
SHA1:	64E8143F7E5308B41E8A6587F3EEABE9E2C97594
SHA-256:	AD4F45F9A81E3EC3BC8BDE7AD28BC703C6088B70E81D3F9E7FBA16FB65B8DC6A
SHA-512:	12B7508EFC80C98E252F7F4BCD1109EBF114CC266EF1D13515F3E9331F3805D75A087FED2D78466D6E0356C3C307F36EDE332C0D864D2C4621A76ECBCB660EBA
Malicious:	false
Reputation:	low
Preview:	<svg width="184" height="40" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#464745" d="M43.503 32.683h6.964V5.43h-6.964zm26.415 0c-5.723-10.814-7.484-14.485-8.765-17.477h-.12l.16 7.102v10.375H54.67V5.43h8.004c2.842 5.507 5.603 10.734 8.205 16.878h.12l-.2-7.062V5.43h6.524v27.253h-7.405m17.852 0L79.484 5.43h7.604l3.842 15.282 1.2 5.706h.081l1.16-5.706L97.176 5.43h7.445l-8.406 27.253H87.77m18.971 0h6.965V5.43h-6.965zm22.212-7.622c0-4.11-11.527-3.391-11.527-11.97 0-5.067 4.484-8.06 10.327-8.06 2.881 0 5.403.519 7.284 1.317l-.96 5.626c-1.562-.599-3.842-1.237-6.324-1.237-2.042 0-3.321.798-3.321 2.115 0 3.75 11.645 3.072 11.645 11.73 0 5.108-3.922 8.5-11.005 8.5-2.882 0-6.243-.679-7.926-1.477l.881-5.745c1.962.877 4.804 1.516 7.284 1.516 2.283 0 3.642-.758 3.642-2.315M139.2 21.39V5.43h6.964v16.36c0 3.47 1.4 5.745 4.323 5.745 2.96 0 4.362-1.995 4.362-5.745V5.43h6.925v14.803c0 8.26-3.162 12.849-11.447 12.849-7.364 0-11.128-3.91-11.128-11.692m37.663 3.671c0-4.1

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2573
Entropy (8bit):	4.199071783905958
Encrypted:	false
SSDEEP:	48:ZxHgBlUsYctblXQjHsghTtGC1hfVoq5RGqMjIoUtxUmd5KH7bs6cXg5:W6shtblAjThTtGEhOq5RWUAm7Kbbs6cM
MD5:	1604C246903B12D3AB7514FD148D205E
SHA1:	64E8143F7E5308B41E8A6587F3EEABE9E2C97594
SHA-256:	AD4F45F9A81E3EC3BC8BDE7AD28BC703C6088B70E81D3F9E7FBA16FB65B8DC6A
SHA-512:	12B7508EFC80C98E252F7F4BCD1109EBF114CC266EF1D13515F3E9331F3805D75A087FED2D78466D6E0356C3C307F36EDE332C0D864D2C4621A76ECBCB660EBA
Malicious:	false
Reputation:	low
URL:	https://invisus.com/account/images/invisus_logo.svg
Preview:	<svg width="184" height="40" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#464745" d="M43.503 32.683h6.964V5.43h-6.964zm26.415 0c-5.723-10.814-7.484-14.485-8.765-17.477h-.12l.16 7.102v10.375H54.67V5.43h8.004c2.842 5.507 5.603 10.734 8.205 16.878h.12l-.2-7.062V5.43h6.524v27.253h-7.405m17.852 0L79.484 5.43h7.604l3.842 15.282 1.2 5.706h.081l1.16-5.706L97.176 5.43h7.445l-8.406 27.253H87.77m18.971 0h6.965V5.43h-6.965zm22.212-7.622c0-4.11-11.527-3.391-11.527-11.97 0-5.067 4.484-8.06 10.327-8.06 2.881 0 5.403.519 7.284 1.317l-.96 5.626c-1.562-.599-3.842-1.237-6.324-1.237-2.042 0-3.321.798-3.321 2.115 0 3.75 11.645 3.072 11.645 11.73 0 5.108-3.922 8.5-11.005 8.5-2.882 0-6.243-.679-7.926-1.477l.881-5.745c1.962.877 4.804 1.516 7.284 1.516 2.283 0 3.642-.758 3.642-2.315M139.2 21.39V5.43h6.964v16.36c0 3.47 1.4 5.745 4.323 5.745 2.96 0 4.362-1.995 4.362-5.745V5.43h6.925v14.803c0 8.26-3.162 12.849-11.447 12.849-7.364 0-11.128-3.91-11.128-11.692m37.663 3.671c0-4.1

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (418), with CRLF line terminators
Category:	downloaded
Size (bytes):	1232167
Entropy (8bit):	5.914671274337003
Encrypted:	false
SSDEEP:	12288:7YhWoW/MGYSiS30YoiAIE2odAwJfOL+szqktd9cX86NVdHwPxS+:/wt+Wa
MD5:	E914B959011003F0C1408AFDB013B08A
SHA1:	07184685EEC569A7190886BB5E8005CFE96AF1C1
SHA-256:	646D3D011FEFEC90A0B77AD689A48920E2776DA2E9F7ED3BE7F405F5BB81DE3A
SHA-512:	B49D34D499316CE98A5CB147BD03F790544518FA379B46ACA54AF9968BC297EC5286DF507D60C3DE65C49AB452CCC313FCFE8608B3CD09D5F070EE00C11B31CA
Malicious:	false
Reputation:	low
URL:	https://invisus.com/account/Content/main.min.css
Preview:	.@charset "UTF-8";....:root {....--global-font-family: 'Open Sans',sans-serif;....--secondary-font-family: 'Nunito',sans-serif;....--global-font-size: 14px;....--global-line-height: 1.4;....--global-xxlarge-font-size: 42px;....--global-xlarge-font-size: 32px;....--global-large-font-size: 24px;....--global-medium-font-size: 20px;....--global-small-font-size: 14px;....--global-color: #333333;....--global-emphasis-color: #4D4E4E;....--global-inverse-color: #ffffff;....--global-background: #E7E7E8;....--global-inside-background: #f9fafb;....--global-primary-background: #1e87f0;....--global-secondary-background: #222;....--global-success-background: #32d296;....--global-warning-background: #faa05a;....--global-danger-background: #f0506e;....--global-border-width: 1px;....--global-border: #e5e5e5..}....* {....box-sizing: border-box;....min-width: 0..}....:last-child {....margin-bottom: 0..}....body {....height: 100%..}.....wrapper {....position: relative;....overflow-x: hidden;....height:

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	65401
Entropy (8bit):	5.388546564302107
Encrypted:	false
SSDEEP:	384:mH2AbeZsA2Rb1AvsDPFNOQ/5tqaZBq99CnbpgOFuGtFjZoq997nO26ODoct3JZmm:uv/BNVfvPpwcsUMK
MD5:	7631B1EAA183663E032383B98CD61C4B
SHA1:	F4BF02998D8B28C9C751ABC9E96AA91CB82461E9
SHA-256:	643FBE63EDD0DDAC38233C84998BCB78041AAD557AEBE0889B3CADC953D56CAA
SHA-512:	52A6433893F43F6C46918F7A9B4D318720F5735C14C87C22A10CA6A8F62492B7007BAC67BB006AC1889814E8CCED6FD5A3BEA99E66A4C7A846F7B5AE05460024
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Nunito:ital,wght@0,400;0,700;1,400;1,700&family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Nunito';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaORs71cA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Nunito';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaHRs71cA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Nunito';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaMRs71cA.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://invisus.com/account/WebResource.axd?d=x2nkrMJGXkMELz33nwnakOVznLNCwusHXPNDBb9MPPMftu_Be29Y9hlHzd2WRIiiVWyDjrTJuDvKOwTFWV1mLECPK2HfRUpEIQ60X67GvtU1&t=638464878520000000
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://invisus.com/account/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZNzcWy4VkCE-pSLsJrbESazStTjgF5zcYJPjBE4j4SlLsGUUZ-oN7Iiednzf2vbMNQ2&t=638464878520000000
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (311), with CRLF line terminators
Category:	downloaded
Size (bytes):	9673
Entropy (8bit):	5.28707354425821
Encrypted:	false
SSDEEP:	192:ro7XC+1eyH6bEj2i9U/BcTQBwEUytTyIavTqRW:rY1ebyU/BcTQqEU+RW
MD5:	743D8344E80D9340ED6847170181C496
SHA1:	C9C20C501E55E6862C4315084241268A6B91468A
SHA-256:	024BC98174D3A5AB21B378A822A5BF8C140B4468F7B62E6A3EC8DF117C300CC1
SHA-512:	F212C37B9DA532D0C3F0D9AF444A39FF5046E1E1BEE9824CB6EB1D92B06D85F3DE3B7A8467FBFDAF59F89ACB2D0A04E8EE1F3DB5F4C5B65A7A617F3A3D073F6B
Malicious:	false
Reputation:	low
URL:	https://invisus.com/account/login
Preview:	..........<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8" />.. <meta.. name="viewport".. content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0" />.. <meta http-equiv="X-UA-Compatible" content="ie=edge" />.. <link.. href="https://fonts.googleapis.com/css2?family=Nunito:ital,wght@0,400;0,700;1,400;1,700&family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap".. rel="stylesheet" />.. <link rel="stylesheet" href="./Content/main.min.css" />.. <link rel="icon" href="https://www.invisus.com/wp-content/uploads/cropped-favicon-32x32.png" sizes="32x32" />.. <link rel="icon" href="https://www.invisus.com/wp-content/uploads/cropped-favicon-192x192.png" sizes="192x192" />.. <link rel="apple-touch-icon" href="https://www.invisus.com/wp-content/uploads/cropped-favicon-180x180.png" />.. <meta name="msapplication-TileImage" content="https://www.invisus.com/wp-content/uploa

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://invisus.com/account/Scripts/jquery-3.4.1.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 8, 2024 21:41:03.587661028 CEST	49675	443	192.168.2.4	173.222.162.32
May 8, 2024 21:41:04.634495974 CEST	49678	443	192.168.2.4	104.46.162.224
May 8, 2024 21:41:11.572535038 CEST	49735	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:11.572587013 CEST	443	49735	91.246.36.32	192.168.2.4
May 8, 2024 21:41:11.572645903 CEST	49735	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:11.573851109 CEST	49736	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:11.573901892 CEST	443	49736	91.246.36.32	192.168.2.4
May 8, 2024 21:41:11.573970079 CEST	49736	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:11.574104071 CEST	49735	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:11.574122906 CEST	443	49735	91.246.36.32	192.168.2.4
May 8, 2024 21:41:11.574232101 CEST	49736	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:11.574244022 CEST	443	49736	91.246.36.32	192.168.2.4
May 8, 2024 21:41:13.195581913 CEST	49675	443	192.168.2.4	173.222.162.32
May 8, 2024 21:41:14.983728886 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:14.983757973 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:14.983983994 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:14.984183073 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:14.984196901 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:15.324536085 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:15.330014944 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:15.330044031 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:15.331300020 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:15.331444025 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:15.333164930 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:15.333239079 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:15.387073040 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:15.387101889 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:15.430526972 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:15.473340034 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:15.473372936 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:15.473551035 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:15.476325989 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:15.476340055 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:15.809448957 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:15.809535027 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:15.815568924 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:15.815584898 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:15.815840960 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:15.856657028 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:15.946436882 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:15.988118887 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.129901886 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.129964113 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.130023003 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.130122900 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.130136967 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.130151033 CEST	49740	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.130156040 CEST	443	49740	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.169370890 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.169433117 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.169529915 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.169853926 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.169864893 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.498729944 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.498804092 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.502037048 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.502046108 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.502253056 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.504482985 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.552107096 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.830965042 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.831029892 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.834182024 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.841449022 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.841449022 CEST	49741	443	192.168.2.4	23.192.208.109
May 8, 2024 21:41:16.841471910 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:16.841480017 CEST	443	49741	23.192.208.109	192.168.2.4
May 8, 2024 21:41:25.362855911 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:25.362927914 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:25.362974882 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:27.180175066 CEST	49739	443	192.168.2.4	172.217.14.228
May 8, 2024 21:41:27.180212021 CEST	443	49739	172.217.14.228	192.168.2.4
May 8, 2024 21:41:41.576199055 CEST	49735	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:41.576378107 CEST	49736	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:41.620129108 CEST	443	49735	91.246.36.32	192.168.2.4
May 8, 2024 21:41:41.624123096 CEST	443	49736	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.110486984 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.110529900 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.110606909 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.110860109 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.110902071 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.110968113 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.111373901 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.111382008 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.111747026 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.111761093 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.608218908 CEST	443	49736	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.608316898 CEST	49736	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.608390093 CEST	443	49735	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.608467102 CEST	49735	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.757424116 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.757775068 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.757795095 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.758970976 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.759048939 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.764834881 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.785994053 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.786138058 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.786796093 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.786808968 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.787198067 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.787240028 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.788422108 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.788490057 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.794684887 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.794761896 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.835983992 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.835985899 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.836013079 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.888969898 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:43.999715090 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.999808073 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:43.999890089 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.000838995 CEST	49751	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.000858068 CEST	443	49751	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.003844976 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.048121929 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.216841936 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.216944933 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.217107058 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.217843056 CEST	49750	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.217861891 CEST	443	49750	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.221546888 CEST	49752	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.221582890 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.221802950 CEST	49752	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.222218037 CEST	49752	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.222230911 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.648984909 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.649307013 CEST	49752	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.649332047 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.649696112 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.650013924 CEST	49752	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.650084972 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:44.650146961 CEST	49752	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:44.692125082 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.127619028 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.127727985 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.127783060 CEST	49752	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.128132105 CEST	49752	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.128150940 CEST	443	49752	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.130666971 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.130693913 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.130778074 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.131256104 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.131266117 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.556411028 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.556797028 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.556811094 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.557161093 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.557622910 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.557703018 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:45.557789087 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.599700928 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:45.599713087 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.037817955 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.037842989 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.037852049 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.037884951 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.037903070 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.037916899 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.037955999 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.037971020 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.038055897 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.039222956 CEST	49753	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.039237976 CEST	443	49753	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.062787056 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.062820911 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.063075066 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.063159943 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.063198090 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.063251019 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.063616991 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.063647032 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.063719988 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.063961983 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.063967943 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.064235926 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.064244032 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.064366102 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.064373970 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.493768930 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.493787050 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.494115114 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.494146109 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.494405985 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.494432926 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.494505882 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.495402098 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.495467901 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.495548964 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.495562077 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.495611906 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.496289015 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.496354103 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.496356010 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.496622086 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.496630907 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.496753931 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.496773958 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.497122049 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.498476028 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.498543024 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.498651028 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.536128998 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.539882898 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.540122032 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.543863058 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.975230932 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.975246906 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.975322962 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.975338936 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.975410938 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.976085901 CEST	49756	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.976106882 CEST	443	49756	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.984929085 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.984958887 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:46.985517025 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.985579014 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:46.985589027 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.151170969 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.151209116 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.151705027 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.151705027 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.151737928 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.184381008 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.184407949 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.184427023 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.184645891 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.184653997 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.184819937 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.186743975 CEST	49754	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.186758041 CEST	443	49754	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187115908 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187139988 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187148094 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187158108 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187184095 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187272072 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.187272072 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.187292099 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187328100 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187344074 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.187354088 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187370062 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.187390089 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.187462091 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.191543102 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.191579103 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.191658020 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.191917896 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.191931963 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398022890 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398049116 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398128033 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.398134947 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398148060 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398171902 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398205042 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.398217916 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398242950 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.398313999 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.398379087 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398399115 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398490906 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.398499012 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.398564100 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.410756111 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.411039114 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.411056995 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.411396980 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.411823034 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.411919117 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.411919117 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.456114054 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.460650921 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.576006889 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.576292038 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.576314926 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.577317953 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.577522039 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.577785015 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.577838898 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.577903032 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.608808994 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.608834028 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.608922958 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.608922005 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.608922005 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.608937025 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.608963966 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.608992100 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609003067 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609028101 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609210968 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609230042 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609296083 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609296083 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609306097 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609380007 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609410048 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609425068 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609544992 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609551907 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609616995 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609652042 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609673977 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609749079 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609749079 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.609756947 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.609817982 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.617249012 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.617770910 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.617800951 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.618323088 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.618355989 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.618367910 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.618892908 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.619030952 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.619138002 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.660120964 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.664339066 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.664340019 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.819596052 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.819622040 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.819674969 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.819691896 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.819705009 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.819741011 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.819744110 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.819761038 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.819766045 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.819797993 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.819818974 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.819940090 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.819957018 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.819999933 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.820005894 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820096016 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.820127964 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820154905 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820183039 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.820189953 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820215940 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.820235014 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.820399046 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820415974 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820470095 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.820476055 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820507050 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.820545912 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820560932 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820615053 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.820622921 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.820785046 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.826010942 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826031923 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826081991 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.826088905 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826127052 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.826145887 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.826198101 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826205015 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826255083 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.826261997 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826347113 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.826714039 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826730967 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826786995 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.826793909 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.826885939 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.827683926 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.827701092 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.827765942 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.827774048 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.827821016 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.827995062 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.828007936 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.828058958 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.828066111 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.828114033 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.861641884 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.861656904 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.861715078 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:47.861725092 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:47.861886978 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034149885 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034172058 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034252882 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034270048 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034312010 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034327030 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034333944 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034348011 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034358978 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034409046 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034413099 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034424067 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034435034 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034452915 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034460068 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034490108 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034497976 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034590006 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034604073 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034642935 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034648895 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034696102 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034723043 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034755945 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034771919 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034776926 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.034807920 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.034828901 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.035552979 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.035568953 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.035623074 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.035629034 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.035656929 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.038623095 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.038656950 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.038686037 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.038691044 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.038738966 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.038880110 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.038894892 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.038955927 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.038960934 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.038994074 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.039052010 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.039067030 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.039110899 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.039117098 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.039150953 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.039196968 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.039211035 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.039243937 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.039252043 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.039474010 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.040654898 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.040676117 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.040715933 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.040720940 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.040766001 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.042735100 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.042752028 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.042798996 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.042804956 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.042833090 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.044404030 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.044435024 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.044457912 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.044462919 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.044483900 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.044502974 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.045433998 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.045460939 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.045490980 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.045495987 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.045597076 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.046463013 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.046478987 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.046509981 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.046514988 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.046570063 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.048297882 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.048314095 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.048357964 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.048382044 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.048393965 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.048435926 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.048460007 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.048491001 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.048520088 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.048527002 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.048578978 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.049559116 CEST	49760	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.049572945 CEST	443	49760	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.050322056 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.050335884 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.050405025 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.050410032 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.050509930 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.050611973 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.050626040 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.050657034 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.050662994 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.050687075 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.050704002 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.052516937 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.052536964 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.052567005 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.052572966 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.052608013 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.054508924 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.054526091 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.054559946 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.054565907 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.054599047 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.054704905 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.054721117 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.054748058 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.054754019 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.054776907 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.054795027 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.073761940 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.073792934 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.073841095 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.073856115 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.073873997 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.073892117 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.089756966 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089780092 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089788914 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089812040 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089828014 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089835882 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089843035 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.089865923 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089886904 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.089895964 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089910030 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.089915991 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089929104 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.089929104 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089965105 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.089970112 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.089981079 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.134779930 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.242731094 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.242754936 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.242805958 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.242829084 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.242877960 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.244704008 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.244720936 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.244803905 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.244817019 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.245063066 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.245088100 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.245121956 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.245129108 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.245146036 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.245177984 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.245569944 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.245584011 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.245640993 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.245649099 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.245795965 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.246089935 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246117115 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246160030 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.246165991 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246186972 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.246202946 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.246217966 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246237993 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246298075 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.246304035 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246315002 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246349096 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246387005 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.246395111 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.246403933 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.246433973 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.248645067 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.248677969 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.248713017 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.248719931 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.248750925 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.248766899 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.249032021 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.249049902 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.249083996 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.249090910 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.249123096 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.249161005 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.250194073 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.250251055 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.250255108 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.250274897 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.250303984 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.250324965 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.251056910 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.251082897 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.251111031 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.251125097 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.251151085 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.251168966 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.253071070 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.253092051 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.253129959 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.253137112 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.253175974 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.254036903 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.254834890 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.254874945 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.254901886 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.254909992 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.254956007 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.255049944 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.255067110 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.255098104 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.255104065 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.255126953 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.255141973 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.255498886 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.255518913 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.259129047 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.259146929 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.259217978 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.259227037 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.259252071 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.261730909 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.261753082 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.261801958 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.261810064 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.261838913 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.261852026 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.262809992 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.262851954 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.262870073 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.262876987 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.262922049 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.264714956 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.264734983 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.264828920 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.264836073 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.264945984 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.265820026 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.265839100 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.265872002 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.265877008 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.265903950 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.265922070 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.266810894 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.266829014 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.266875982 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.266882896 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.266932011 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.268739939 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.268759012 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.268800974 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.268806934 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.268838882 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.269701958 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.269738913 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.269768000 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.269773960 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.269795895 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.269809961 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.271013975 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.271059036 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.271078110 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.271084070 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.271121979 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.272701979 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.272732973 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.272775888 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.272782087 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.272816896 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.272953033 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.274528027 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.274559021 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.274586916 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.274593115 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.274626017 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.275830984 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.275861025 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.275886059 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.275892019 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.275918961 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.275944948 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.277694941 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.277724981 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.277764082 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.277770042 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.277810097 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.277880907 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.282757044 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.282800913 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.282850027 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.282856941 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.282890081 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.284714937 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.284732103 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.284776926 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.284784079 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.284816980 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.286818027 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.286834955 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.286887884 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.286895037 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.287010908 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.287714005 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.287729979 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.287782907 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.287791967 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.287797928 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.287828922 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.287864923 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.287925959 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.288400888 CEST	49755	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.288417101 CEST	443	49755	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301018953 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301028013 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301069975 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301074028 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301094055 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301119089 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301129103 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301134109 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301141024 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301162004 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301163912 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301187992 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301193953 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301219940 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301244974 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301290989 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301306009 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301337957 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301342964 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.301368952 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.301382065 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.307415009 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.307435989 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.307449102 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.307461977 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.307487965 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.307516098 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.307529926 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.307554007 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.307560921 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.307579041 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.307626963 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.307641029 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.307799101 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.364515066 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.364557981 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.364680052 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.365503073 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.365536928 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.365685940 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.366060972 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.366087914 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.366149902 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.366491079 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.366516113 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.366723061 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.376157045 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.376168013 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.376705885 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.376722097 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.376907110 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.376920938 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.377505064 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.377518892 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.378618956 CEST	49761	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.378632069 CEST	443	49761	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.514924049 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.514997959 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.515007973 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.515093088 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.517096043 CEST	49758	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.517108917 CEST	443	49758	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.538693905 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.538716078 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.538892031 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.539282084 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.539304018 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.539370060 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.541102886 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.541111946 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.541646957 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.541662931 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.800719976 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.800869942 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.800977945 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.800997019 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.801002026 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.801232100 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.801266909 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.801352024 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.801367998 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.801373959 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.801662922 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.801947117 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.802006006 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.802052975 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.802259922 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.802320957 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.802433968 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.802453041 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.802469969 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.802525997 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.802568913 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.802848101 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.803107977 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.803195953 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.803433895 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.803482056 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.804116964 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.804176092 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.804212093 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.804222107 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.804284096 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.804296017 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.844130039 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.848119974 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:48.852241993 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.852320910 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:48.874350071 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.875372887 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.881458044 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.881469011 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.881880999 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.881891012 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.883038044 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.883112907 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.883265018 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.883321047 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.886125088 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.886209965 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.888083935 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.888274908 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.888534069 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.888540983 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.888766050 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.888773918 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:48.931524038 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:48.931523085 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.198304892 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.198760986 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.198801994 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.198816061 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.198833942 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.198884964 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.198929071 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.198936939 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.198972940 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.199433088 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.199862957 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.199902058 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.199908018 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.199924946 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.199960947 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.199965954 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.204087019 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.205157995 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.205198050 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.205239058 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.205246925 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.205280066 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.209445000 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.209474087 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.209610939 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.209619045 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.209754944 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.210607052 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.214937925 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.216025114 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.216073036 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.216077089 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.220309973 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.220359087 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.220374107 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.221421003 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.221478939 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.221493006 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.225754023 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.225800991 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.225811005 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.227360964 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.227408886 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.227416039 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.231205940 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.231278896 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.231287003 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.232305050 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.232377052 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.232382059 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.236623049 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.236665964 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.236676931 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.237730026 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.237871885 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.237876892 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.242012978 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.242115974 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.242122889 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.243087053 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.243132114 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.243135929 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.247490883 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.247591972 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.247598886 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.248508930 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.248595953 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.248600960 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.258246899 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.258280039 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.258332968 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.258342028 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.258382082 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.259344101 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.259381056 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.259412050 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.259418964 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.259464979 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.263643026 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.264760971 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.268846989 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.268872023 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.268913031 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.268929958 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.268937111 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.268939972 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.268964052 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.269001007 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.269001007 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.269018888 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.269031048 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.269058943 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.269092083 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.269860029 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.269881964 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.269910097 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.269953966 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.269958973 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.270001888 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.272728920 CEST	49763	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.272742033 CEST	443	49763	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.306229115 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.306257963 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.361155033 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.362122059 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.363683939 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.363717079 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.363749027 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.363766909 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.363806009 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.364629030 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.364665031 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.364684105 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.364691019 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.364728928 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.369988918 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.371037960 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.374872923 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.375519991 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.375614882 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.375623941 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.375633955 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.375643969 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.379142046 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.379189968 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.379206896 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.380011082 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.380165100 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.380171061 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.383409977 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.383479118 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.383486032 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.384396076 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.384535074 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.384538889 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.387393951 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.387439966 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.387448072 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.388443947 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.388530970 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.388535023 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.390875101 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.391062975 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.391087055 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.391094923 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.391107082 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.391110897 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.393632889 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.393690109 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.393698931 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.395334959 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.395843983 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.395850897 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.397207975 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.397269964 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.397278070 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.398684978 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.398756981 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.398762941 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.400530100 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.400604010 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.400607109 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.400654078 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.414745092 CEST	49764	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.414772034 CEST	443	49764	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.423587084 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.423595905 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.423616886 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.423680067 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.423701048 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.423729897 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.423752069 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.439486980 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.439515114 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.439630032 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.440841913 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.440865993 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.440934896 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.440942049 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.441232920 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.442286968 CEST	49767	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.442301035 CEST	443	49767	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.455197096 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.455209017 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.458899975 CEST	49765	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.458926916 CEST	443	49765	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.480140924 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.480169058 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.480185032 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.480232954 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.480245113 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.480289936 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.480396986 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.480416059 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.480448961 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.480453968 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.480482101 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.522212982 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.522243023 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.522295952 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.522769928 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.522784948 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.525332928 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.531006098 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.531027079 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.531219959 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.531455994 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.531469107 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.533525944 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.533545017 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.533602953 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.533615112 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.533719063 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.550662994 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.550681114 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.550729990 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.550738096 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.550782919 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.553002119 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.553060055 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.553064108 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.553080082 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.553122997 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.554119110 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.554130077 CEST	443	49766	151.101.129.229	192.168.2.4
May 8, 2024 21:41:49.554138899 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.554181099 CEST	49766	443	192.168.2.4	151.101.129.229
May 8, 2024 21:41:49.610271931 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.610317945 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.610447884 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.611495972 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.611507893 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.693994999 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.694024086 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.694067955 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.694077969 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.694086075 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.694099903 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.694108009 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.694112062 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.694145918 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.694149971 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.694191933 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.694209099 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.694324017 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.696904898 CEST	49762	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.696918011 CEST	443	49762	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.735529900 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.735572100 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.735660076 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.735941887 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.735953093 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.882317066 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.887020111 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.887043953 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.887422085 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.889642954 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.889703989 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.890079975 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.936124086 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.947356939 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.947772026 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.947793961 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.948132992 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.950026035 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.950086117 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.950268030 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.955777884 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.956006050 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.956022024 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.956357002 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.956944942 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.957006931 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:49.957041979 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:49.992111921 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.001249075 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.001261950 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.160039902 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.160309076 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.160334110 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.161386967 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.161439896 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.170648098 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.170720100 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.170783043 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.170792103 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.214899063 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.258568048 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.258898020 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.258922100 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.261955023 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.262011051 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.263001919 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.263154030 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.263159037 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.263320923 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.304954052 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.304975033 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.352313995 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.422900915 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.422902107 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.422924995 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.422924995 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.422960043 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.423033953 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.423037052 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.423043013 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.423046112 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.423094988 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.423095942 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.425558090 CEST	49771	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.425575972 CEST	443	49771	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.426919937 CEST	49770	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.426938057 CEST	443	49770	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.475414038 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.475507021 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.475579977 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.476591110 CEST	49772	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.476607084 CEST	443	49772	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.571744919 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.571768045 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.571784973 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.571861029 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.571885109 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.571950912 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.571950912 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.572020054 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.572875977 CEST	49769	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.572889090 CEST	443	49769	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.587568998 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.587605000 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.587708950 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.587924957 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.587932110 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.836920023 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.836949110 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.836956978 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.836966038 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.836983919 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.837279081 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:50.837308884 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.837321043 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:50.837609053 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.012720108 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.012985945 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.013000011 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.013284922 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.013744116 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.013816118 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.013897896 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.047799110 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.047828913 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.047892094 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.047899961 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.047923088 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.047945976 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.047954082 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.047996998 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.048361063 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.048368931 CEST	443	49774	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.048397064 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.048460007 CEST	49774	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.060112000 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.068701982 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.700155973 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700181961 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700189114 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700222015 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700236082 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700244904 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700259924 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.700295925 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700308084 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700318098 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.700318098 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.700361013 CEST	443	49777	91.246.36.32	192.168.2.4
May 8, 2024 21:41:51.700385094 CEST	49777	443	192.168.2.4	91.246.36.32
May 8, 2024 21:41:51.700432062 CEST	49777	443	192.168.2.4	91.246.36.32

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 8, 2024 21:41:10.734277964 CEST	53	51830	1.1.1.1	192.168.2.4
May 8, 2024 21:41:10.757879972 CEST	53	63846	1.1.1.1	192.168.2.4
May 8, 2024 21:41:11.403953075 CEST	50725	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:11.404088020 CEST	52505	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:11.569282055 CEST	53	52505	1.1.1.1	192.168.2.4
May 8, 2024 21:41:11.571331024 CEST	53	50725	1.1.1.1	192.168.2.4
May 8, 2024 21:41:11.670296907 CEST	53	55354	1.1.1.1	192.168.2.4
May 8, 2024 21:41:14.812850952 CEST	56270	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:14.812978983 CEST	61986	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:14.977421999 CEST	53	56270	1.1.1.1	192.168.2.4
May 8, 2024 21:41:14.977444887 CEST	53	61986	1.1.1.1	192.168.2.4
May 8, 2024 21:41:28.753492117 CEST	53	63807	1.1.1.1	192.168.2.4
May 8, 2024 21:41:35.171176910 CEST	138	138	192.168.2.4	192.168.2.255
May 8, 2024 21:41:41.629376888 CEST	53	57483	1.1.1.1	192.168.2.4
May 8, 2024 21:41:46.225495100 CEST	53	61884	1.1.1.1	192.168.2.4
May 8, 2024 21:41:46.984924078 CEST	58617	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:46.985229969 CEST	57991	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:47.069942951 CEST	53	59334	1.1.1.1	192.168.2.4
May 8, 2024 21:41:47.150552988 CEST	53	57991	1.1.1.1	192.168.2.4
May 8, 2024 21:41:47.150571108 CEST	53	58617	1.1.1.1	192.168.2.4
May 8, 2024 21:41:47.469782114 CEST	53	54248	1.1.1.1	192.168.2.4
May 8, 2024 21:41:48.367748976 CEST	54637	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:48.374150038 CEST	49409	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:48.530877113 CEST	53	54637	1.1.1.1	192.168.2.4
May 8, 2024 21:41:48.537333965 CEST	53	49409	1.1.1.1	192.168.2.4
May 8, 2024 21:41:49.434809923 CEST	53813	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:49.438174009 CEST	58050	53	192.168.2.4	1.1.1.1
May 8, 2024 21:41:49.602097034 CEST	53	52376	1.1.1.1	192.168.2.4
May 8, 2024 21:41:49.604511976 CEST	53	53813	1.1.1.1	192.168.2.4
May 8, 2024 21:41:49.604549885 CEST	53	58050	1.1.1.1	192.168.2.4
May 8, 2024 21:41:50.663662910 CEST	53	64872	1.1.1.1	192.168.2.4
May 8, 2024 21:41:51.358859062 CEST	53	54882	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 8, 2024 21:41:11.403953075 CEST	192.168.2.4	1.1.1.1	0x7cf8	Standard query (0)	invisus.com	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:11.404088020 CEST	192.168.2.4	1.1.1.1	0xac6b	Standard query (0)	invisus.com	65	IN (0x0001)	false
May 8, 2024 21:41:14.812850952 CEST	192.168.2.4	1.1.1.1	0xd66b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:14.812978983 CEST	192.168.2.4	1.1.1.1	0xd42d	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 8, 2024 21:41:46.984924078 CEST	192.168.2.4	1.1.1.1	0xaa1d	Standard query (0)	invisus.com	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:46.985229969 CEST	192.168.2.4	1.1.1.1	0x9ec6	Standard query (0)	invisus.com	65	IN (0x0001)	false
May 8, 2024 21:41:48.367748976 CEST	192.168.2.4	1.1.1.1	0x5fa7	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:48.374150038 CEST	192.168.2.4	1.1.1.1	0xa132	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
May 8, 2024 21:41:49.434809923 CEST	192.168.2.4	1.1.1.1	0xf678	Standard query (0)	www.invisus.com	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:49.438174009 CEST	192.168.2.4	1.1.1.1	0xe498	Standard query (0)	www.invisus.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 8, 2024 21:41:11.571331024 CEST	1.1.1.1	192.168.2.4	0x7cf8	No error (0)	invisus.com		91.246.36.32	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:14.977421999 CEST	1.1.1.1	192.168.2.4	0xd66b	No error (0)	www.google.com		172.217.14.228	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:14.977444887 CEST	1.1.1.1	192.168.2.4	0xd42d	No error (0)	www.google.com			65	IN (0x0001)	false
May 8, 2024 21:41:27.163278103 CEST	1.1.1.1	192.168.2.4	0x51f9	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:27.163278103 CEST	1.1.1.1	192.168.2.4	0x51f9	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:28.004359961 CEST	1.1.1.1	192.168.2.4	0x52f9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 21:41:28.004359961 CEST	1.1.1.1	192.168.2.4	0x52f9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:41.286041975 CEST	1.1.1.1	192.168.2.4	0x69a9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 21:41:41.286041975 CEST	1.1.1.1	192.168.2.4	0x69a9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:47.150571108 CEST	1.1.1.1	192.168.2.4	0xaa1d	No error (0)	invisus.com		91.246.36.32	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:48.530877113 CEST	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 21:41:48.530877113 CEST	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:48.530877113 CEST	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:48.530877113 CEST	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:48.530877113 CEST	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:48.537333965 CEST	1.1.1.1	192.168.2.4	0xa132	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 21:41:49.604511976 CEST	1.1.1.1	192.168.2.4	0xf678	No error (0)	www.invisus.com	invisus.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 21:41:49.604511976 CEST	1.1.1.1	192.168.2.4	0xf678	No error (0)	invisus.com		91.246.36.32	A (IP address)	IN (0x0001)	false
May 8, 2024 21:41:49.604549885 CEST	1.1.1.1	192.168.2.4	0xe498	No error (0)	www.invisus.com	invisus.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

invisus.com

https:

cdn.jsdelivr.net

www.invisus.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	23.192.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:15 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-08 19:41:16 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=40925 Date: Wed, 08 May 2024 19:41:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	23.192.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-08 19:41:16 UTC	538	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0MNkrYwAAAADiUL7L3dxqSIABzBrl++yWQ082QUEzMTUwODEwMDIxAGNlZmMyNTgzLWE5YjItNDRhNy05NzU1LWI3NmQxN2UwNWY3Zg== Cache-Control: public, max-age=40991 Date: Wed, 08 May 2024 19:41:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-08 19:41:16 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49751	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:43 UTC	687	OUT	GET /account HTTP/1.1 Host: invisus.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 19:41:43 UTC	242	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://invisus.com/account/ Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:44 GMT Connection: close Content-Length: 151
2024-05-08 19:41:43 UTC	151	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 76 69 73 75 73 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://invisus.com/account/">here</a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:43 UTC	688	OUT	GET /account/ HTTP/1.1 Host: invisus.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 19:41:44 UTC	362	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: /account/login.aspx Server: Microsoft-IIS/10.0 Set-Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf; path=/; HttpOnly; SameSite=Lax X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:44 GMT Connection: close Content-Length: 136
2024-05-08 19:41:44 UTC	136	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 61 63 63 6f 75 6e 74 2f 6c 6f 67 69 6e 2e 61 73 70 78 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/account/login.aspx">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49752	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:44 UTC	750	OUT	GET /account/login.aspx HTTP/1.1 Host: invisus.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:45 UTC	228	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: /account/login Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:45 GMT Connection: close Content-Length: 131
2024-05-08 19:41:45 UTC	131	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 61 63 63 6f 75 6e 74 2f 6c 6f 67 69 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/account/login">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:45 UTC	745	OUT	GET /account/login HTTP/1.1 Host: invisus.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:46 UTC	241	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:45 GMT Connection: close Content-Length: 9673
2024-05-08 19:41:46 UTC	9673	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 3c 6d 65 74 61 0d 0a 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0" /> <meta http-equiv="X-UA-Compati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49755	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:46 UTC	614	OUT	GET /account/Content/main.min.css HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:47 UTC	270	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 11 Apr 2024 18:54:10 GMT Accept-Ranges: bytes ETag: "bd9ab2a3418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:47 GMT Connection: close Content-Length: 1232167
2024-05-08 19:41:47 UTC	16114	IN	Data Raw: ef bb bf 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 09 2d 2d 67 6c 6f 62 61 6c 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4e 75 6e 69 74 6f 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 2d 2d 67 6c 6f 62 61 6c 2d 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 09 09 2d 2d 67 6c 6f 62 61 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0d 0a 09 09 2d 2d 67 6c 6f 62 61 6c 2d 78 78 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 32 70 78 3b 0d 0a 09 09 2d 2d 67 6c 6f 62 61 6c 2d 78 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: @charset "UTF-8";:root {--global-font-family: 'Open Sans',sans-serif;--secondary-font-family: 'Nunito',sans-serif;--global-font-size: 14px;--global-line-height: 1.4;--global-xxlarge-font-size: 42px;--global-xlarge-font-size:
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 66 66 20 31 30 30 25 29 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 33 32 70 78 20 31 36 70 78 20 31 32 70 78 0d 0a 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 6f 66 66 2d 63 61 6e 76 61 73 2d 74 72 69 67 67 65 72 20 7b 0d 0a 09 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 32 70 78 3b 0d 0a 09 09 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 09 09 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 36 70 78 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 64 79 20 7b 0d 0a 09 09 09 09 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0d 0a 09 09 09 09 70 61 64 64 69 6e 67 3a 20 31 36 70 78 20 30 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 64 79 20 2e 75 6b 2d 75 73 65 72 20 7b Data Ascii: ff 100%);padding: 32px 16px 12px}.uk-off-canvas-trigger {font-size: 32px;display: inline-block;margin-right: 16px}.uk-offcanvas-body {flex-grow: 1;padding: 16px 0}.uk-offcanvas-body .uk-user {
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 64 74 68 3a 20 31 30 30 25 0d 0a 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 64 69 76 69 64 65 72 2d 69 63 6f 6e 3a 3a 61 66 74 65 72 20 7b 0d 0a 09 09 09 09 09 09 6c 65 66 74 3a 20 63 61 6c 63 28 35 30 25 20 2b 20 28 35 30 70 78 20 2f 20 32 29 29 3b 0d 0a 09 09 09 09 09 09 77 69 64 74 68 3a 20 31 30 30 25 0d 0a 09 09 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 64 69 76 69 64 65 72 2d 73 6d 61 6c 6c 20 7b 0d 0a 09 09 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 64 69 76 69 64 65 72 2d 73 6d 61 6c 6c 3a 3a 61 66 74 65 72 20 7b 0d 0a 09 09 09 09 09 09 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 09 09 09 09 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 09 09 09 09 09 77 Data Ascii: dth: 100%}.uk-divider-icon::after {left: calc(50% + (50px / 2));width: 100%}.uk-divider-small {line-height: 0}.uk-divider-small::after {content: "";display: inline-block;w
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 0d 0a 09 09 7d 0d 0a 0d 0a 2e 75 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 72 67 65 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 77 69 64 74 68 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 72 61 64 69 6f 20 7b 0d 0a 09 09 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 63 68 65 63 6b 62 6f 78 3a 66 6f 63 75 73 2c 20 2e 75 6b 2d 72 61 64 69 6f 3a 66 6f 63 75 73 20 7b 0d 0a 09 09 09 09 09 09 6f 75 74 6c 69 6e 65 3a 20 30 0d 0a 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 63 68 65 63 6b Data Ascii: ius: 2px;background-color: #fff}.uk-checkbox-large {height: 20px !important;width: 20px !important;}.uk-radio {border-radius: 50%}.uk-checkbox:focus, .uk-radio:focus {outline: 0}.uk-check
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 0a 0d 0a 09 09 2e 75 6b 2d 63 61 72 64 2d 73 6d 61 6c 6c 20 2e 75 6b 2d 63 61 72 64 2d 62 6f 64 79 2c 20 2e 75 6b 2d 63 61 72 64 2d 73 6d 61 6c 6c 2e 75 6b 2d 63 61 72 64 2d 62 6f 64 79 20 7b 0d 0a 09 09 09 09 70 61 64 64 69 6e 67 3a 20 32 34 70 78 20 32 34 70 78 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 63 61 72 64 2d 73 6d 61 6c 6c 20 2e 75 6b 2d 63 61 72 64 2d 68 65 61 64 65 72 20 7b 0d 0a 09 09 09 09 70 61 64 64 69 6e 67 3a 20 31 36 70 78 20 32 34 70 78 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 63 61 72 64 2d 73 6d 61 6c 6c 20 2e 75 6b 2d 63 61 72 64 2d 66 6f 6f 74 65 72 20 7b 0d 0a 09 09 09 09 70 61 64 64 69 6e 67 3a 20 31 36 70 78 20 32 34 70 78 0d 0a 09 09 7d 0d 0a 0d 0a 2e 75 6b 2d 63 61 72 64 2d 78 73 6d 61 6c 6c 20 2e 75 6b 2d 63 61 72 64 Data Ascii: .uk-card-small .uk-card-body, .uk-card-small.uk-card-body {padding: 24px 24px}.uk-card-small .uk-card-header {padding: 16px 24px}.uk-card-small .uk-card-footer {padding: 16px 24px}.uk-card-xsmall .uk-card
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 79 3a 20 68 69 64 64 65 6e 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 73 74 69 63 6b 79 5b 63 6c 61 73 73 2a 3d 75 6b 2d 61 6e 69 6d 61 74 69 6f 6e 2d 5d 20 7b 0d 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 32 73 3b 0d 0a 09 09 09 09 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 32 73 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 73 74 69 63 6b 79 2e 75 6b 2d 61 6e 69 6d 61 74 69 6f 6e 2d 72 65 76 65 72 73 65 20 7b 0d 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 32 73 3b 0d 0a 09 09 09 09 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 32 73 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 6f 66 66 63 61 6e 76 61 Data Ascii: y: hidden}.uk-sticky[class*=uk-animation-] {-webkit-animation-duration: .2s;animation-duration: .2s}.uk-sticky.uk-animation-reverse {-webkit-animation-duration: .2s;animation-duration: .2s}.uk-offcanva
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 0d 0a 09 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 0d 0a 7d 0d 0a 0d 0a 2e 75 6b 2d 6e 61 76 2d 64 69 76 69 64 65 72 2d 6c 69 6e 65 2d 70 61 64 64 69 6e 67 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 3b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 0d 0a 7d 0d 0a 0d 0a 2e 64 69 76 69 64 65 72 2d 70 61 64 64 69 6e 67 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 Data Ascii: -bottom:0px;border-top: 1px solid #e5e5e5}.uk-nav-divider-line-padding {margin-top: 15px;margin-bottom: 0px;border-top: 1px solid #e5e5e5;margin-left:10px;margin-right:10px}.divider-padding {display: flex;align-items:
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 61 64 65 2d 6c 65 66 74 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 6c 69 64 65 2d 72 69 67 68 74 20 7b 0d 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 75 6b 2d 66 61 64 65 2d 72 69 67 68 74 3b 0d 0a 09 09 09 09 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 75 6b 2d 66 61 64 65 2d 72 69 67 68 74 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 61 6e 69 6d 61 74 69 6f 6e 2d 73 6c 69 64 65 2d 74 6f 70 2d 73 6d 61 6c 6c 20 7b 0d 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 75 6b 2d 66 61 64 65 2d 74 6f 70 2d 73 6d 61 6c 6c 3b 0d 0a 09 09 09 09 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 75 6b 2d 66 61 64 65 2d 74 6f 70 2d 73 6d 61 6c 6c 0d Data Ascii: ade-left}.uk-animation-slide-right {-webkit-animation-name: uk-fade-right;animation-name: uk-fade-right}.uk-animation-slide-top-small {-webkit-animation-name: uk-fade-top-small;animation-name: uk-fade-top-small
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 20 34 30 25 0d 0a 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 77 69 64 74 68 2d 33 2d 35 5c 40 6d 20 7b 0d 0a 09 09 09 09 09 09 77 69 64 74 68 3a 20 36 30 25 0d 0a 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 77 69 64 74 68 2d 34 2d 35 5c 40 6d 20 7b 0d 0a 09 09 09 09 09 09 77 69 64 74 68 3a 20 38 30 25 0d 0a 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 77 69 64 74 68 2d 31 2d 36 5c 40 6d 20 7b 0d 0a 09 09 09 09 09 09 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2a 20 31 20 2f 20 36 2e 30 30 31 29 0d 0a 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 2e 75 6b 2d 77 69 64 74 68 2d 35 2d 36 5c 40 6d 20 7b 0d 0a 09 09 09 09 09 09 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2a 20 35 20 2f 20 36 2e 30 30 31 29 0d 0a 09 09 09 09 7d 0d 0a Data Ascii: 40%}.uk-width-3-5\@m {width: 60%}.uk-width-4-5\@m {width: 80%}.uk-width-1-6\@m {width: calc(100% * 1 / 6.001)}.uk-width-5-6\@m {width: calc(100% * 5 / 6.001)}
2024-05-08 19:41:47 UTC	16384	IN	Data Raw: 09 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 75 6b 2d 64 69 73 70 6c 61 79 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 0d 0a 09 09 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 5b 63 6c 61 73 73 2a 3d 75 6b 2d 69 6e 6c 69 6e 65 5d 20 7b 0d 0a 09 09 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 09 09 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 09 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 09 09 09 2d 77 65 62 6b 69 74 2d 62 61 Data Ascii: display: inline !important}.uk-display-inline-block {display: inline-block !important}[class*=uk-inline] {display: inline-block;position: relative;max-width: 100%;vertical-align: middle;-webkit-ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49756	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:46 UTC	663	OUT	GET /account/images/invisus_logo.svg HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:46 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 11 Apr 2024 18:51:45 GMT Accept-Ranges: bytes ETag: "82afd74c418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:47 GMT Connection: close Content-Length: 2573
2024-05-08 19:41:46 UTC	2573	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 34 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 36 34 37 34 35 22 20 64 3d 22 4d 34 33 2e 35 30 33 20 33 32 2e 36 38 33 68 36 2e 39 36 34 56 35 2e 34 33 68 2d 36 2e 39 36 34 7a 6d 32 36 2e 34 31 35 20 30 63 2d 35 2e 37 32 33 2d 31 30 2e 38 31 34 2d 37 2e 34 38 34 2d 31 34 2e 34 38 35 2d 38 2e 37 36 35 2d 31 37 2e 34 37 37 68 2d 2e 31 32 6c 2e 31 36 20 37 2e 31 30 32 76 31 30 2e 33 37 35 48 35 34 2e 36 37 56 35 2e 34 33 68 38 2e 30 30 34 63 32 2e 38 34 32 20 35 2e 35 30 Data Ascii: <svg width="184" height="40" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#464745" d="M43.503 32.683h6.964V5.43h-6.964zm26.415 0c-5.723-10.814-7.484-14.485-8.765-17.477h-.12l.16 7.102v10.375H54.67V5.43h8.004c2.842 5.50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49754	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:46 UTC	706	OUT	GET /account/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZNzcWy4VkCE-pSLsJrbESazStTjgF5zcYJPjBE4j4SlLsGUUZ-oN7Iiednzf2vbMNQ2&t=638464878520000000 HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:47 UTC	327	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Thu, 08 May 2025 12:32:05 GMT Last-Modified: Wed, 20 Mar 2024 04:30:52 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:47 GMT Connection: close Content-Length: 23063
2024-05-08 19:41:47 UTC	16057	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-05-08 19:41:47 UTC	7006	IN	Data Raw: 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 Data Ascii: lse { if (document.documentElement && document.documentElement.scrollLeft) { return document.documentElement.scrollLeft; } else if (document.body) { return document.body.scrollLeft; } }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:47 UTC	607	OUT	GET /account/Scripts/jquery-3.4.1.min.js HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:48 UTC	282	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 11 Apr 2024 18:52:15 GMT Accept-Ranges: bytes ETag: "5a1bfc5e418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:47 GMT Connection: close Content-Length: 88145
2024-05-08 19:41:48 UTC	16102	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-05-08 19:41:48 UTC	16384	IN	Data Raw: 65 74 75 72 6e 28 64 2d 3d 76 29 3d 3d 3d 67 7c 7c 64 25 67 3d 3d 30 26 26 30 3c 3d 64 2f 67 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 74 2c 61 3d 62 2e 70 73 65 75 64 6f 73 5b 65 5d 7c 7c 62 2e 73 65 74 46 69 6c 74 65 72 73 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 73 65 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 61 5b 6b 5d 3f 61 28 6f 29 3a 31 3c 61 2e 6c 65 6e 67 74 68 3f 28 74 3d 5b 65 2c 65 2c 22 22 2c 6f 5d 2c 62 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 Data Ascii: eturn(d-=v)===g\|\|d%g==0&&0<=d/g}}},PSEUDO:function(e,o){var t,a=b.pseudos[e]\|\|b.setFilters[e.toLowerCase()]\|\|se.error("unsupported pseudo: "+e);return a[k]?a(o):1<a.length?(t=[e,e,"",o],b.setFilters.hasOwnProperty(e.toLowerCase())?le(function(e,t){var n,r
2024-05-08 19:41:48 UTC	16384	IN	Data Raw: 21 30 7d 29 29 29 2c 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 74 68 69 73 2e 63 61 63 68 65 28 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 5b 56 28 74 29 5d 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 56 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 74 68 69 73 2e 63 61 63 68 65 28 65 29 3a 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 26 26 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 5b 56 28 74 29 5d 7d 2c 61 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c Data Ascii: !0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[V(t)]=n;else for(r in t)i[V(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][V(t)]},access:function(e,t,n){return void 0===t\|\|
2024-05-08 19:41:48 UTC	16384	IN	Data Raw: 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4d 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4d 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 6b 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 47 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 51 2e 65 78 Data Ascii: lue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Me(o[r],a[r]);else Me(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=k.event.special,o=0;void 0!==(n=e[o]);o++)if(G(n)){if(t=n[Q.ex
2024-05-08 19:41:48 UTC	16384	IN	Data Raw: 30 2c 69 3d 74 26 26 74 2e 6d 61 74 63 68 28 52 29 3b 69 66 28 69 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 77 68 69 6c 65 28 6e 3d 69 5b 72 2b 2b 5d 29 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 7d 7d 29 2c 68 74 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 21 31 3d 3d 3d 74 3f 6b 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 6e 29 2c 6e 7d 7d 2c 6b 2e 65 61 63 68 28 6b 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 73 6f 75 72 63 65 2e 6d 61 74 63 68 28 2f 5c 77 2b 2f 67 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 67 74 5b 74 5d 7c 7c 6b 2e 66 69 6e 64 2e 61 74 74 72 3b 67 74 5b 74 5d 3d 66 75 6e 63 74 69 6f Data Ascii: 0,i=t&&t.match(R);if(i&&1===e.nodeType)while(n=i[r++])e.removeAttribute(n)}}),ht={set:function(e,t,n){return!1===t?k.removeAttr(e,n):e.setAttribute(n,n),n}},k.each(k.expr.match.bool.source.match(/\w+/g),function(e,t){var a=gt[t]\|\|k.find.attr;gt[t]=functio
2024-05-08 19:41:48 UTC	6507	IN	Data Raw: 28 29 7d 7d 7d 29 2c 6b 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 65 2e 63 6f 6e 74 65 6e 74 73 2e 73 63 72 69 70 74 3d 21 31 29 7d 29 2c 6b 2e 61 6a 61 78 53 65 74 75 70 28 7b 61 63 63 65 70 74 73 3a 7b 73 63 72 69 70 74 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 65 63 6d 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 73 63 72 69 70 74 3a 2f 5c 62 28 3f 3a 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 5c 62 2f 7d 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 Data Ascii: ()}}}),k.ajaxPrefilter(function(e){e.crossDomain&&(e.contents.script=!1)}),k.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java\|ecma)script\b/},converters:{"t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49760	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:47 UTC	418	OUT	GET /account/images/invisus_logo.svg HTTP/1.1 Host: invisus.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:48 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 11 Apr 2024 18:51:45 GMT Accept-Ranges: bytes ETag: "82afd74c418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:48 GMT Connection: close Content-Length: 2573
2024-05-08 19:41:48 UTC	2573	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 34 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 36 34 37 34 35 22 20 64 3d 22 4d 34 33 2e 35 30 33 20 33 32 2e 36 38 33 68 36 2e 39 36 34 56 35 2e 34 33 68 2d 36 2e 39 36 34 7a 6d 32 36 2e 34 31 35 20 30 63 2d 35 2e 37 32 33 2d 31 30 2e 38 31 34 2d 37 2e 34 38 34 2d 31 34 2e 34 38 35 2d 38 2e 37 36 35 2d 31 37 2e 34 37 37 68 2d 2e 31 32 6c 2e 31 36 20 37 2e 31 30 32 76 31 30 2e 33 37 35 48 35 34 2e 36 37 56 35 2e 34 33 68 38 2e 30 30 34 63 32 2e 38 34 32 20 35 2e 35 30 Data Ascii: <svg width="184" height="40" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#464745" d="M43.503 32.683h6.964V5.43h-6.964zm26.415 0c-5.723-10.814-7.484-14.485-8.765-17.477h-.12l.16 7.102v10.375H54.67V5.43h8.004c2.842 5.50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:47 UTC	727	OUT	GET /account/WebResource.axd?d=x2nkrMJGXkMELz33nwnakOVznLNCwusHXPNDBb9MPPMftu_Be29Y9hlHzd2WRIiiVWyDjrTJuDvKOwTFWV1mLECPK2HfRUpEIQ60X67GvtU1&t=638464878520000000 HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:48 UTC	327	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Thu, 08 May 2025 12:32:05 GMT Last-Modified: Wed, 20 Mar 2024 04:30:52 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:48 GMT Connection: close Content-Length: 26951
2024-05-08 19:41:48 UTC	16057	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-05-08 19:41:48 UTC	10894	IN	Data Raw: 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 76 61 6c 2e 76 61 6c 75 65 74 6f 63 6f 6d 70 61 72 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 6f 70 65 72 61 74 6f 72 20 3d 20 22 45 71 75 61 6c 22 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 6f 70 65 72 61 74 6f 72 Data Ascii: if (typeof(val.valuetocompare) == "string") { compareTo = val.valuetocompare; } } else { compareTo = ValidatorGetValue(val.controltocompare); } var operator = "Equal"; if (typeof(val.operator

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:48 UTC	706	OUT	GET /account/WebResource.axd?d=JoBkLzP19aTuxbWOhHobYqk7SUCKLWendEjliccfqRZIRxp_Bwjjme415Bta2hDR3pYqvhn0f0wUqSCO1ehyJg2&t=638464878520000000 HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:49 UTC	326	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: application/x-javascript Expires: Thu, 08 May 2025 12:32:05 GMT Last-Modified: Wed, 20 Mar 2024 04:30:52 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:49 GMT Connection: close Content-Length: 3005
2024-05-08 19:41:49 UTC	3005	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 46 69 6e 64 46 69 72 73 74 46 6f 63 75 73 61 62 6c 65 43 68 69 6c 64 28 63 6f 6e 74 72 6f 6c 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 21 63 6f 6e 74 72 6f 6c 20 7c 7c 20 21 28 63 6f 6e 74 72 6f 6c 2e 74 61 67 4e 61 6d 65 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 74 61 67 4e 61 6d 65 20 3d 20 63 6f 6e 74 72 6f 6c 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 61 67 4e 61 6d 65 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 63 68 69 6c 64 72 65 6e Data Ascii: function WebForm_FindFirstFocusableChild(control) { if (!control \|\| !(control.tagName)) { return null; } var tagName = control.tagName.toLowerCase(); if (tagName == "undefined") { return null; } var children

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49762	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:48 UTC	670	OUT	GET /account/images/authorization-image.png HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:49 UTC	269	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 11 Apr 2024 18:51:25 GMT Accept-Ranges: bytes ETag: "26141241418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:49 GMT Connection: close Content-Length: 52302
2024-05-08 19:41:49 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 3e 08 06 00 00 00 fc b8 c9 1b 00 00 cc 15 49 44 41 54 78 da ec bd 07 78 1b d7 95 f7 fd 66 37 9b 37 bb 5f b6 65 37 d9 f2 6e 76 b3 bb 89 9d c4 49 1c c7 71 e2 96 d8 8e 1d 47 b6 6c d9 96 45 50 bd 57 4b 56 a1 25 d1 92 d5 ac de 7b 17 45 8a 62 91 48 4a 62 a7 c4 4e b1 77 b0 81 00 2b 58 40 00 04 08 10 95 9d 3c df bd 83 19 60 66 30 03 80 14 9b c8 b9 cf 73 9e 01 40 10 24 06 c0 0f ff 53 ef ff f9 3f c2 12 d6 53 b0 24 12 c9 b7 b4 5a ed bf a9 d5 ea 5f 68 34 9a d7 db db db ff 8c 6c 36 ba ee 8d 6c 1e fa d9 3c 74 fd 53 95 4a 35 13 d9 9b e8 f2 2f 75 3a dd 7f 00 c0 5f 09 67 4f 58 c2 12 d6 53 b7 f4 7a fd df 23 b8 fd 1c 01 6f 06 02 da 82 91 18 06 23 b2 b7 d0 e5 ff 41 30 fc 4b e1 ac 0a 4b 58 c2 9a ec 4a ef 19 Data Ascii: PNGIHDR@>IDATxxf77_e7nvIqGlEPWKV%{EbHJbNw+X@<`f0s@$S?S$Z_h4l6l<tSJ5/u:_gOXSz#o#A0KKXJ
2024-05-08 19:41:49 UTC	16384	IN	Data Raw: 00 36 3a 01 f0 7e 46 23 31 05 66 64 49 8d a1 2e ad 65 b0 b5 c6 ad 8b 3c d4 d2 d3 3f 64 75 f7 78 5a eb e8 01 90 84 e0 7f 0b 24 1b e1 d2 eb f5 ff c9 1d 03 d4 ba 8c 01 fa 25 8d 4e 06 18 9b b8 c6 78 fa 69 02 a0 51 56 7e 70 30 3f b5 66 28 3b 51 0e a9 31 7a 3a 04 7b 6f 6c f5 08 78 ae ac ea f0 52 d8 7e 2a 8c 99 25 3e cb 8a 09 b2 40 48 14 50 5f 64 2a 42 ba 1a f4 62 27 4a c8 52 19 2f 96 22 c4 45 d7 f4 e4 07 b6 9a 79 cf da 01 78 7a bb 2f 5c 8c 2d 82 f3 d1 85 70 04 41 30 21 a7 0c f2 c4 12 b8 53 d8 c6 d8 a4 9d 0f 80 18 68 f4 bd 3c 30 04 71 dd 20 03 82 34 10 62 c5 67 ec 19 80 6a bc 4f 32 7b c4 16 6d c0 c2 b5 42 2d 5c 29 d0 f0 02 90 b2 47 05 2d 50 af 30 42 ff c0 f0 73 1a e8 ff c6 2e 32 4e 6a 34 f0 25 35 6c 59 e4 fe 6a 1c ef c3 71 bf f1 00 20 f2 e2 66 0a 25 31 23 5c 6d Data Ascii: 6:~F#1fdI.e<?duxZ$%NxiQV~p0?f(;Q1z:{olxR~%>@HP_dBb'JR/"Eyxz/\-pA0!Sh<0q 4bgjO2{mB-\)G-P0Bs.2Nj4%5lYjq f%1#\m
2024-05-08 19:41:49 UTC	16384	IN	Data Raw: dc 59 7c 1b c4 09 8b a8 eb bc b6 6f a1 e0 a7 2a c8 6c 6c ac 40 28 14 c2 ca e5 aa d7 08 ad ac cc fc b0 51 a1 1a f8 f4 7e 4f 14 5f 08 0b 7c 7c ad 18 2a cd 0d 37 fc 27 d6 b9 a1 a3 c7 12 18 66 52 cf ad 70 32 e4 a6 47 50 e0 63 c2 2f fb 55 48 65 87 40 bf cf a5 88 67 5b c7 82 c9 97 06 c0 9f 4d 40 b7 7a 14 34 90 68 44 18 7e af 2d 57 86 b2 14 59 57 0e 42 3a 55 56 a8 0c 69 18 8e 57 00 44 89 2a 7c e7 3c 11 dc bf 33 f8 a4 03 10 2c 16 f8 82 8d 0b 01 1f 02 d0 e5 7e 37 08 72 d5 20 c2 90 99 12 d3 69 f1 90 06 a0 74 4d f1 08 00 d5 de 01 36 ef 71 5f 60 19 8c 5e b9 16 37 54 65 95 76 15 5f 17 89 e3 e7 0f 2a 08 d1 52 d3 9c 77 93 b2 d4 64 64 aa 0e 3f ec 0e 47 46 86 81 c3 62 bb 3e 8c c0 32 3f a4 b2 ea 8b d2 fe 1d 79 de b2 19 e0 6b 03 be f6 a2 5e d2 e4 89 5d 7c 5d 28 7c f5 00 32 Data Ascii: Y\|oll@(Q~O_\|\|7'fRp2GPc/UHe@g[M@z4hD~-WYWB:UViWD\|<3,~7r itM6q_`^7Tev_Rwdd?GFb>2?yk^]\|](\|2
2024-05-08 19:41:49 UTC	3419	IN	Data Raw: 5e 4c 79 f7 2c 20 16 00 6a 22 0d c6 e2 01 f2 43 90 f6 29 b0 05 80 9b 6a 0b b8 21 48 50 a4 c1 48 3c c0 28 0d a6 a9 1d 00 69 06 f8 8c 3c 04 a1 25 f0 d3 7d 0e 50 00 5c b6 f0 a9 92 71 0b 9f 2c 19 d4 58 d5 ef c8 24 32 96 eb f8 de 1e 26 ae e0 e4 79 fc dd 32 f9 1a c1 b5 d5 b5 33 c0 40 ef 5c 04 c0 bf de 72 e1 9b 3e 03 e0 37 e5 e5 43 87 e4 21 f8 91 81 fc 12 71 a9 8f f3 6f 46 71 c0 be 53 b0 e3 e9 3f 99 9f 9b 48 79 79 22 b7 be 8f 7e 19 93 4e 09 24 67 ff 28 1a 50 99 1c 0c 91 99 ed b6 f7 8b cc a1 07 00 90 a7 c1 44 a7 c0 bc 14 6e 87 6d 0a 1c 8f 06 53 24 d0 60 62 3c c0 1e c2 10 04 19 e0 5b 53 8b 0f bd f9 6c af 4f 1b a7 14 d7 35 fc a3 e4 41 fa 2a 69 99 9c bc f9 83 25 f5 9a 2a 53 38 92 99 e8 3a c9 be c0 c7 eb da 3d c0 c0 a0 5c 04 c0 bb 6f bc 70 99 8f 25 ef 97 e5 e5 97 90 Data Ascii: ^Ly, j"C)j!HPH<(i<%}P\q,X$2&y23@\r>7C!qoFqS?Hyy"~N$g(PDnmS$`b<[SlO5Ai%S8:=\op%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49765	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:48 UTC	665	OUT	GET /account/images/infosafe_logo2.svg HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:49 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 11 Apr 2024 18:51:44 GMT Accept-Ranges: bytes ETag: "d3666c4c418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:49 GMT Connection: close Content-Length: 7211
2024-05-08 19:41:49 UTC	7211	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 0a 20 20 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 0a 20 20 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 0a 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 35 2e 39 39 39 39 39 20 33 39 2e 39 39 39 39 39 39 22 0a 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 73 6f 64 69 70 6f 64 69 3a 64 6f 63 6e 61 6d 65 3d 22 69 6e 66 6f 73 61 66 65 5f 6c 6f 67 6f 32 2e 73 76 67 22 0a 20 20 20 77 69 64 74 68 3d 22 31 37 36 22 0a 20 20 20 68 65 69 67 68 74 3d 22 34 30 22 0a 20 20 20 69 6e 6b 73 63 61 70 65 3a 76 65 72 73 69 6f 6e 3d 22 31 2e 31 20 28 63 36 38 65 32 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg id="Layer_1" data-name="Layer 1" viewBox="0 0 175.99999 39.999999" version="1.1" sodipodi:docname="infosafe_logo2.svg" width="176" height="40" inkscape:version="1.1 (c68e2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49764	91.246.36.32	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:48 UTC	663	OUT	GET /account/images/idefend_logo.svg HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:49 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 11 Apr 2024 18:51:41 GMT Accept-Ranges: bytes ETag: "d9c6e74a418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:49 GMT Connection: close Content-Length: 7046
2024-05-08 19:41:49 UTC	7046	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 36 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 32 33 37 20 31 33 2e 35 30 32 6c 34 2e 36 39 39 2d 2e 31 33 39 76 31 37 2e 32 35 34 68 2d 34 2e 36 39 39 56 31 33 2e 35 30 32 7a 6d 32 2e 33 33 32 2d 38 2e 31 37 34 61 32 2e 36 30 36 20 32 2e 36 30 36 20 30 20 30 31 32 2e 36 31 20 32 2e 36 30 38 63 30 20 31 2e 34 36 31 2d 31 2e 31 34 38 20 32 2e 35 37 35 2d 32 2e 36 31 20 32 2e 35 37 35 61 32 2e 35 34 37 20 32 2e 35 34 37 20 30 20 30 31 2d 32 2e 35 37 35 2d 32 2e 35 37 35 63 Data Ascii: <svg width="156" height="40" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M41.237 13.502l4.699-.139v17.254h-4.699V13.502zm2.332-8.174a2.606 2.606 0 012.61 2.608c0 1.461-1.148 2.575-2.61 2.575a2.547 2.547 0 01-2.575-2.575c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49766	151.101.129.229	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:48 UTC	547	OUT	GET /npm/uikit@3.5.5/dist/js/uikit.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://invisus.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 19:41:49 UTC	777	IN	HTTP/1.1 200 OK Connection: close Content-Length: 132907 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.5.5 X-JSD-Version-Type: version ETag: W/"2072b-ymct4rOx4rRJNiMUDpz4ukE1nqY" Accept-Ranges: bytes Age: 1364121 Date: Wed, 08 May 2024 19:41:49 GMT X-Served-By: cache-fra-eddf8230087-FRA, cache-bfi-krnt7300042-BFI X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 2f 2a 21 20 55 49 6b 69 74 20 33 2e 35 2e 35 20 7c 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 65 74 75 69 6b 69 74 2e 63 6f 6d 20 7c 20 28 63 29 20 32 30 31 34 20 2d 20 32 30 32 30 20 59 4f 4f 74 68 65 6d 65 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 75 69 6b 69 74 22 2c 65 29 3a 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 55 49 6b 69 74 3d 65 28 29 7d 28 74 Data Ascii: /! UIkit 3.5.5 \| https://www.getuikit.com \| (c) 2014 - 2020 YOOtheme \| MIT License /!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define("uikit",e):(t=t\|\|self).UIkit=e()}(t
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 53 28 74 29 26 26 39 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 72 65 74 75 72 6e 20 53 28 74 29 26 26 21 21 74 2e 6a 71 75 65 72 79 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 29 7b 72 65 74 75 72 6e 20 53 28 74 29 26 26 31 3c 3d 74 2e 6e 6f 64 65 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 53 28 74 29 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 74 29 7b 72 65 74 75 72 6e 20 49 2e 63 61 6c 6c 28 74 29 2e 6d 61 74 63 68 28 2f 5e 5c 5b 6f 62 6a 65 63 74 20 28 4e 6f 64 65 4c 69 73 74 7c 48 54 4d 4c 43 6f 6c 6c 65 63 74 69 6f 6e 29 5c 5d 24 2f 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e Data Ascii: eturn S(t)&&9===t.nodeType}function C(t){return S(t)&&!!t.jquery}function A(t){return S(t)&&1<=t.nodeType}function N(t){return S(t)&&1===t.nodeType}function M(t){return I.call(t).match(/^\[object (NodeList\|HTMLCollection)\]$/)}function z(t){return"boolean
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 3d 4f 62 6a 65 63 74 28 74 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 69 5d 3b 69 66 28 6e 75 6c 6c 21 3d 3d 72 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6c 28 72 2c 6f 29 26 26 28 74 5b 6f 5d 3d 72 5b 6f 5d 29 7d 72 65 74 75 72 6e 20 74 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 21 31 3d 3d 3d 65 28 74 5b 6e 5d 2c 6e 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 74 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 Data Ascii: =Object(t);for(var i=0;i<e.length;i++){var r=e[i];if(null!==r)for(var o in r)l(r,o)&&(t[o]=r[o])}return t};function J(t){return t[t.length-1]}function K(t,e){for(var n in t)if(!1===e(t[n],n))return!1;return!0}function Z(t,r){return t.sort(function(t,e){va
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 65 29 26 26 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 68 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 69 3d 5b 65 2c 22 64 61 74 61 2d 22 2b 65 5d 3b 6e 3c 69 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 73 74 28 74 2c 69 5b 6e 5d 29 29 72 65 74 75 72 6e 20 6f 74 28 74 2c 69 5b 6e 5d 29 7d 76 61 72 20 75 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2c 63 74 3d 75 74 26 26 2f 6d 73 69 65 7c 74 72 69 64 65 6e 74 2f 69 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6e Data Ascii: (function(e){return t.forEach(function(t){return t.hasAttribute(e)&&t.removeAttribute(e)})})}function ht(t,e){for(var n=0,i=[e,"data-"+e];n<i.length;n++)if(st(t,i[n]))return ot(t,i[n])}var ut="undefined"!=typeof window,ct=ut&&/msie\|trident/i.test(window.n
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 29 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 2c 6f 3d 7a 74 28 72 2c 74 2e 73 75 62 73 74 72 28 31 29 29 3f 72 3a 6e 75 6c 6c 2c 74 3d 69 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 6f 3f 28 6f 2e 69 64 7c 7c 28 6f 2e 69 64 3d 22 75 6b 2d 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 65 2c 61 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 74 28 6f 2c 22 69 64 22 29 7d 29 29 2c 22 23 22 2b 48 74 28 6f 2e 69 64 29 2b 22 20 22 2b 74 29 3a 6e 75 6c 6c 7d 29 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 2e 6a 6f 69 6e 28 22 2c 22 29 2c 73 3d 64 6f 63 75 6d 65 6e 74 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 73 5b 65 5d 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 Data Ascii: ).previousElementSibling,o=zt(r,t.substr(1))?r:null,t=i.slice(1).join(" ")),o?(o.id\|\|(o.id="uk-"+Date.now()+e,a.push(function(){return at(o,"id")})),"#"+Ht(o.id)+" "+t):null}).filter(Boolean).join(","),s=document);try{return s[e](t)}catch(t){return null}f
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 74 61 72 65 61 2c 62 75 74 74 6f 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 56 74 28 74 29 7b 72 65 74 75 72 6e 20 56 28 74 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 74 2c 57 74 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 56 28 74 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 74 2c 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 44 28 65 29 3f 7a 74 28 74 2c 65 29 7c 7c 21 21 42 74 28 74 2c 65 29 3a 74 3d 3d 3d 65 7c 7c 28 5f 28 65 29 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 57 28 65 29 29 2e 63 6f 6e 74 61 69 6e 73 28 57 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 55 74 28 74 2c Data Ascii: tarea,button";function Vt(t){return V(t).some(function(t){return zt(t,Wt)})}function Rt(t,e){return V(t).filter(function(t){return zt(t,e)})}function qt(t,e){return D(e)?zt(t,e)\|\|!!Bt(t,e):t===e\|\|(_(e)?e.documentElement:W(e)).contains(W(t))}function Ut(t,
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 74 29 7b 76 61 72 20 65 3d 21 68 7c 7c 68 28 74 29 3b 65 26 26 28 75 28 29 2c 73 28 74 2c 65 29 29 7d 2c 61 29 3b 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 69 65 28 74 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 26 26 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 5a 74 28 6e 2c 21 30 2c 21 30 2c 69 29 29 7d 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 74 2c 65 2c 6e 2c 69 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 30 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 31 29 2c 44 28 74 29 26 26 28 28 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f Data Ascii: t){var e=!h\|\|h(t);e&&(u(),s(t,e))},a);return u}function Kt(t,n,i){return ie(t).reduce(function(t,e){return t&&e.dispatchEvent(Zt(n,!0,!0,i))},!0)}function Zt(t,e,n,i){var r;return void 0===e&&(e=!0),void 0===n&&(n=!1),D(t)&&((r=document.createEvent("Custo
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 20 6e 65 77 20 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 69 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 63 65 2e 72 65 73 6f 6c 76 65 28 69 5b 6e 5d 29 2e 74 68 65 6e 28 74 2c 65 29 7d 29 7d 3b 76 61 72 20 6c 65 3d 63 65 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 64 65 28 73 2c 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 47 28 7b 64 61 74 61 3a 6e 75 6c 6c 2c 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 68 65 61 64 65 72 73 3a 7b 7d 2c 78 68 72 3a 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 62 65 66 6f 72 65 53 65 6e 64 3a 65 74 2c 72 65 73 70 6f 6e 73 65 54 79 70 65 3a 22 22 7d 2c 61 29 3b 6e 2e 62 65 66 6f 72 65 53 65 Data Ascii: new ce(function(t,e){for(var n=0;n<i.length;n+=1)ce.resolve(i[n]).then(t,e)})};var le=ce.prototype;function de(s,a){return new ae(function(t,e){var n=G({data:null,method:"GET",headers:{},xhr:new XMLHttpRequest,beforeSend:et,responseType:""},a);n.beforeSe
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 69 6f 6e 20 76 65 28 74 29 7b 72 65 74 75 72 6e 28 74 3d 4e 65 28 74 29 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 77 65 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 4e 65 28 74 29 2c 48 28 65 29 3f 74 2e 69 6e 6e 65 72 48 54 4d 4c 3a 62 65 28 74 2e 68 61 73 43 68 69 6c 64 4e 6f 64 65 73 28 29 3f 76 65 28 74 29 3a 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 4e 65 28 65 29 2c 6b 65 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 4e 65 28 65 29 2c 6b 65 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e Data Ascii: ion ve(t){return(t=Ne(t)).innerHTML="",t}function we(t,e){return t=Ne(t),H(e)?t.innerHTML:be(t.hasChildNodes()?ve(t):t,e)}function be(e,t){return e=Ne(e),ke(t,function(t){return e.appendChild(t)})}function xe(e,t){return e=Ne(e),ke(t,function(t){return e.
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 29 7b 69 66 28 6f 2e 73 74 61 74 65 21 3d 3d 68 65 29 66 6f 72 28 3b 6f 2e 64 65 66 65 72 72 65 64 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 74 3d 6f 2e 64 65 66 65 72 72 65 64 2e 73 68 69 66 74 28 29 2c 65 3d 74 5b 30 5d 2c 6e 3d 74 5b 31 5d 2c 69 3d 74 5b 32 5d 2c 72 3d 74 5b 33 5d 3b 74 72 79 7b 30 3d 3d 3d 6f 2e 73 74 61 74 65 3f 24 28 65 29 3f 69 28 65 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 6f 2e 76 61 6c 75 65 29 29 3a 69 28 6f 2e 76 61 6c 75 65 29 3a 31 3d 3d 3d 6f 2e 73 74 61 74 65 26 26 28 24 28 6e 29 3f 69 28 6e 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 6f 2e 76 61 6c 75 65 29 29 3a 72 28 6f 2e 76 61 6c 75 65 29 29 7d 63 61 74 63 68 28 74 29 7b 72 28 74 29 7d 7d 7d 29 7d 2c 6c 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 76 61 72 Data Ascii: ){if(o.state!==he)for(;o.deferred.length;){var t=o.deferred.shift(),e=t[0],n=t[1],i=t[2],r=t[3];try{0===o.state?$(e)?i(e.call(void 0,o.value)):i(o.value):1===o.state&&($(n)?i(n.call(void 0,o.value)):r(o.value))}catch(t){r(t)}}})},le.then=function(n,i){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49767	151.101.129.229	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:48 UTC	553	OUT	GET /npm/uikit@3.5.5/dist/js/uikit-icons.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://invisus.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 19:41:49 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 63986 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.5.5 X-JSD-Version-Type: version ETag: W/"f9f2-qSe/o+A554mibCjrBN4qkNzQelM" Accept-Ranges: bytes Age: 146266 Date: Wed, 08 May 2024 19:41:49 GMT X-Served-By: cache-fra-eddf8230061-FRA, cache-bfi-krnt7300053-BFI X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 2f 2a 21 20 55 49 6b 69 74 20 33 2e 35 2e 35 20 7c 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 65 74 75 69 6b 69 74 2e 63 6f 6d 20 7c 20 28 63 29 20 32 30 31 34 20 2d 20 32 30 32 30 20 59 4f 4f 74 68 65 6d 65 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 69 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 75 69 6b 69 74 69 63 6f 6e 73 22 2c 69 29 3a 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 55 49 6b 69 74 49 63 Data Ascii: /! UIkit 3.5.5 \| https://www.getuikit.com \| (c) 2014 - 2020 YOOtheme \| MIT License /!function(t,i){"object"==typeof exports&&"undefined"!=typeof module?module.exports=i():"function"==typeof define&&define.amd?define("uikiticons",i):(t=t\|\|self).UIkitIc
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 2c 30 63 2d 30 2e 36 35 32 2c 30 2e 36 35 32 2d 31 2e 34 32 2c 31 2e 31 36 39 2d 32 2e 32 36 38 2c 31 2e 35 32 31 20 63 2d 30 2e 38 37 37 2c 30 2e 33 37 31 2d 31 2e 38 31 34 2c 30 2e 35 35 31 2d 32 2e 37 37 39 2c 30 2e 35 35 31 63 2d 30 2e 39 36 31 2c 30 2d 31 2e 38 39 36 2d 30 2e 31 38 39 2d 32 2e 37 37 35 2d 30 2e 35 36 34 63 2d 30 2e 38 34 38 2d 30 2e 33 36 2d 31 2e 36 31 32 2d 30 2e 38 37 39 2d 32 2e 32 36 38 2d 31 2e 35 33 20 63 2d 30 2e 36 38 32 2d 30 2e 36 38 38 2d 31 2e 31 39 36 2d 31 2e 34 35 35 2d 31 2e 35 32 39 2d 32 2e 32 36 38 63 2d 30 2e 33 32 35 2d 30 2e 37 39 39 2d 30 2e 34 37 31 2d 31 2e 36 34 33 2d 30 2e 34 37 31 2d 31 2e 36 34 33 63 2d 30 2e 30 34 35 2d 30 2e 32 34 2d 30 2e 32 35 38 2d 30 2e 32 34 39 2d 30 2e 35 36 37 2d 30 2e 32 30 33 Data Ascii: ,0c-0.652,0.652-1.42,1.169-2.268,1.521 c-0.877,0.371-1.814,0.551-2.779,0.551c-0.961,0-1.896-0.189-2.775-0.564c-0.848-0.36-1.612-0.879-2.268-1.53 c-0.682-0.688-1.196-1.455-1.529-2.268c-0.325-0.799-0.471-1.643-0.471-1.643c-0.045-0.24-0.258-0.249-0.567-0.203
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 32 2c 31 2e 34 30 38 2c 33 2e 34 30 35 63 30 2c 31 2e 32 38 38 2d 30 2e 35 30 38 2c 32 2e 34 39 36 2d 31 2e 34 30 38 2c 33 2e 34 30 35 63 2d 30 2e 39 2c 30 2e 38 39 36 2d 32 2e 31 35 32 2c 31 2e 34 30 36 2d 33 2e 34 33 38 2c 31 2e 34 30 36 20 63 2d 30 2e 38 37 37 2c 30 2d 31 2e 37 31 31 2d 30 2e 32 32 39 2d 32 2e 34 33 33 2d 30 2e 36 37 31 76 2d 34 2e 31 35 38 63 30 2d 30 2e 35 35 33 2c 30 2e 32 33 37 2d 31 2e 31 35 31 2c 30 2e 36 34 33 2d 31 2e 36 31 34 63 30 2e 34 36 32 2d 30 2e 35 31 39 2c 31 2e 30 39 34 2d 30 2e 37 39 39 2c 31 2e 37 38 32 2d 30 2e 37 39 39 20 63 30 2e 36 36 34 2c 30 2c 31 2e 32 39 33 2c 30 2e 32 35 33 2c 31 2e 37 35 38 2c 30 2e 37 31 35 63 30 2e 34 35 39 2c 30 2e 34 35 39 2c 30 2e 37 30 39 2c 31 2e 30 37 31 2c 30 2e 37 30 39 2c 31 2e Data Ascii: 2,1.408,3.405c0,1.288-0.508,2.496-1.408,3.405c-0.9,0.896-2.152,1.406-3.438,1.406 c-0.877,0-1.711-0.229-2.433-0.671v-4.158c0-0.553,0.237-1.151,0.643-1.614c0.462-0.519,1.094-0.799,1.782-0.799 c0.664,0,1.293,0.253,1.758,0.715c0.459,0.459,0.709,1.071,0.709,1.
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 69 6e 74 73 3d 22 31 30 20 31 34 20 35 20 39 2e 35 20 31 30 20 35 22 2f 3e 3c 6c 69 6e 65 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 78 31 3d 22 31 36 22 20 79 31 3d 22 39 2e 35 22 20 78 32 3d 22 35 22 20 79 32 3d 22 39 2e 35 32 22 2f 3e 3c 2f 73 76 67 3e 27 2c 22 61 72 72 6f 77 2d 72 69 67 68 74 22 3a 27 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 6f 6c 79 6c 69 6e 65 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 70 6f 69 6e 74 73 3d 22 31 30 20 35 20 31 35 20 39 2e 35 20 31 Data Ascii: ints="10 14 5 9.5 10 5"/><line fill="none" stroke="#000" x1="16" y1="9.5" x2="5" y2="9.52"/></svg>',"arrow-right":'<svg width="20" height="20" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg"><polyline fill="none" stroke="#000" points="10 5 15 9.5 1
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 35 2c 30 2e 36 63 2d 30 2e 34 2d 30 2e 34 2d 30 2e 36 2d 31 2e 31 2d 30 2e 36 2d 31 2e 37 48 32 30 43 32 30 2c 31 31 2e 37 2c 31 39 2e 39 2c 31 30 2e 39 2c 31 39 2e 39 2c 31 30 2e 39 7a 20 4d 31 33 2e 35 2c 31 30 2e 36 63 30 2d 31 2e 36 2c 32 2e 33 2d 32 2e 37 2c 33 2e 35 2d 31 2e 34 20 63 30 2e 34 2c 30 2e 34 2c 30 2e 35 2c 30 2e 39 2c 30 2e 36 2c 31 2e 34 48 31 33 2e 35 4c 31 33 2e 35 2c 31 30 2e 36 7a 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 33 22 20 79 3d 22 34 22 20 77 69 64 74 68 3d 22 35 22 20 68 65 69 67 68 74 3d 22 31 2e 34 22 2f 3e 3c 2f 73 76 67 3e 27 2c 62 65 6c 6c 3a 27 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 Data Ascii: 5,0.6c-0.4-0.4-0.6-1.1-0.6-1.7H20C20,11.7,19.9,10.9,19.9,10.9z M13.5,10.6c0-1.6,2.3-2.7,3.5-1.4 c0.4,0.4,0.5,0.9,0.6,1.4H13.5L13.5,10.6z"/><rect x="13" y="4" width="5" height="1.4"/></svg>',bell:'<svg width="20" height="20" viewBox="0 0 20 20" xmlns="http
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 4d 34 2e 37 34 2c 32 30 20 4c 37 2e 37 33 2c 31 32 20 4c 33 2c 31 32 20 4c 31 35 2e 34 33 2c 31 20 4c 31 32 2e 33 32 2c 39 20 4c 31 37 2e 30 32 2c 39 20 4c 34 2e 37 34 2c 32 30 20 4c 34 2e 37 34 2c 32 30 20 4c 34 2e 37 34 2c 32 30 20 5a 20 4d 39 2e 31 38 2c 31 31 20 4c 37 2e 31 2c 31 36 2e 33 39 20 4c 31 34 2e 34 37 2c 31 30 20 4c 31 30 2e 38 36 2c 31 30 20 4c 31 32 2e 39 39 2c 34 2e 36 37 20 4c 35 2e 36 31 2c 31 31 20 4c 39 2e 31 38 2c 31 31 20 4c 39 2e 31 38 2c 31 31 20 4c 39 2e 31 38 2c 31 31 20 5a 22 2f 3e 3c 2f 73 76 67 3e 27 2c 62 6f 6f 6b 6d 61 72 6b 3a 27 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 Data Ascii: M4.74,20 L7.73,12 L3,12 L15.43,1 L12.32,9 L17.02,9 L4.74,20 L4.74,20 L4.74,20 Z M9.18,11 L7.1,16.39 L14.47,10 L10.86,10 L12.99,4.67 L5.61,11 L9.18,11 L9.18,11 L9.18,11 Z"/></svg>',bookmark:'<svg width="20" height="20" viewBox="0 0 20 20" xmlns="http://www
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 6f 6c 79 6c 69 6e 65 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 31 22 20 70 6f 69 6e 74 73 3d 22 34 2c 31 30 20 38 2c 31 35 20 31 37 2c 34 22 2f 3e 3c 2f 73 76 67 3e 27 2c 22 63 68 65 76 72 6f 6e 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 22 3a 27 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 Data Ascii: ="20" height="20" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg"><polyline fill="none" stroke="#000" stroke-width="1.1" points="4,10 8,15 17,4"/></svg>',"chevron-double-left":'<svg width="20" height="20" viewBox="0 0 20 20" xmlns="http://www.w3.or
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 76 67 22 3e 3c 70 6f 6c 79 6c 69 6e 65 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 30 33 22 20 70 6f 69 6e 74 73 3d 22 34 20 31 33 20 31 30 20 37 20 31 36 20 31 33 22 2f 3e 3c 2f 73 76 67 3e 27 2c 63 6c 6f 63 6b 3a 27 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 31 22 20 63 78 3d 22 31 30 22 20 63 79 3d 22 31 30 22 20 72 3d Data Ascii: vg"><polyline fill="none" stroke="#000" stroke-width="1.03" points="4 13 10 7 16 13"/></svg>',clock:'<svg width="20" height="20" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg"><circle fill="none" stroke="#000" stroke-width="1.1" cx="10" cy="10" r=
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 30 2e 35 2c 39 2e 37 36 20 31 2e 37 32 2c 38 2e 34 31 20 33 2e 33 31 2c 38 2e 32 20 43 33 2e 33 38 2c 35 2e 33 31 20 35 2e 37 35 2c 33 20 38 2e 36 38 2c 33 20 43 31 31 2e 31 39 2c 33 20 31 33 2e 33 31 2c 34 2e 37 31 20 31 33 2e 38 39 2c 37 2e 30 32 20 43 31 34 2e 33 39 2c 36 2e 38 20 31 34 2e 39 33 2c 36 2e 36 38 20 31 35 2e 35 2c 36 2e 36 38 20 43 31 37 2e 37 31 2c 36 2e 36 38 20 31 39 2e 35 2c 38 2e 34 35 20 31 39 2e 35 2c 31 30 2e 36 34 20 43 31 39 2e 35 2c 31 32 2e 38 33 20 31 37 2e 37 31 2c 31 34 2e 36 20 31 35 2e 35 2c 31 34 2e 36 20 4c 31 32 2e 35 2c 31 34 2e 36 22 2f 3e 3c 70 6f 6c 79 6c 69 6e 65 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 70 6f 69 6e 74 73 3d 22 37 2e 32 35 20 31 31 2e 37 35 20 39 2e 35 20 39 Data Ascii: 0.5,9.76 1.72,8.41 3.31,8.2 C3.38,5.31 5.75,3 8.68,3 C11.19,3 13.31,4.71 13.89,7.02 C14.39,6.8 14.93,6.68 15.5,6.68 C17.71,6.68 19.5,8.45 19.5,10.64 C19.5,12.83 17.71,14.6 15.5,14.6 L12.5,14.6"/><polyline fill="none" stroke="#000" points="7.25 11.75 9.5 9
2024-05-08 19:41:49 UTC	1378	IN	Data Raw: 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2c 31 38 2e 37 31 20 4c 36 2c 31 34 20 4c 31 2c 31 34 20 4c 31 2c 31 20 4c 31 39 2c 31 20 4c 31 39 2c 31 34 20 4c 31 30 2e 37 31 2c 31 34 20 4c 36 2c 31 38 2e 37 31 20 4c 36 2c 31 38 2e 37 31 20 5a 20 4d 32 2c 31 33 20 4c 37 2c 31 33 20 4c 37 2c 31 36 2e 32 39 20 4c 31 30 2e 32 39 2c 31 33 20 4c 31 38 2c 31 33 20 4c 31 38 2c 32 20 4c 32 2c 32 20 4c 32 2c 31 33 20 4c 32 2c 31 33 20 5a 22 2f 3e 3c 2f 73 76 67 3e 27 2c 63 6f 6d 6d 65 6e 74 69 6e 67 3a 27 3c 73 76 67 20 77 69 64 74 68 3d Data Ascii: vg width="20" height="20" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg"><path d="M6,18.71 L6,14 L1,14 L1,1 L19,1 L19,14 L10.71,14 L6,18.71 L6,18.71 Z M2,13 L7,13 L7,16.29 L10.29,13 L18,13 L18,2 L2,2 L2,13 L2,13 Z"/></svg>',commenting:'<svg width=

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49769	91.246.36.32	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:49 UTC	670	OUT	GET /account/images/info_safe_certified.png HTTP/1.1 Host: invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://invisus.com/account/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:50 UTC	269	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 11 Apr 2024 18:51:44 GMT Accept-Ranges: bytes ETag: "8eee944c418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:50 GMT Connection: close Content-Length: 24475
2024-05-08 19:41:50 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ed 00 00 00 e7 08 06 00 00 00 aa ba 68 28 00 00 5f 62 49 44 41 54 78 5e ed 9d 07 7c 1c c5 f5 c7 d7 f4 16 08 2d 84 92 40 0a f0 4f 02 69 84 10 92 10 4c 8a c1 96 f6 d6 22 31 25 10 c0 92 2c b0 c1 60 4c b1 25 d9 58 f4 6e 5a 68 a1 f7 de 7b 35 d5 d8 ba 93 7b ef bd 5b 96 65 dd 9d 64 49 9e ff 7b 7b 27 23 bf 99 95 ee b6 dd ee dd fb 7e 3e bf 8f c1 9e 9d 37 bb b3 e5 b7 7b 33 6f 34 8d 61 18 86 61 18 86 61 18 a6 60 39 67 fc be da 79 df 1c a6 95 c6 fe 0c ea a5 95 c5 ce d5 ca 6a 2f d1 4a a3 a3 b4 f2 68 0d fc ff 63 a6 4a a3 cf 6a 65 d1 31 69 c5 e0 ef 16 5a 2b da 0e 12 a0 36 f9 df 3a a9 3c 5a d7 a9 ce e7 b6 c6 2a 8b 5d 6d c6 2f 8b 5e aa a5 da 73 0a e8 2f 66 3b fb 4f d8 9f ee 02 c3 30 0c c3 30 0c c3 84 93 73 c6 1e ac Data Ascii: PNGIHDRh(_bIDATx^\|-@OiL"1%,`L%XnZh{5{[edI{{'#~>7{3o4aaa`9gyj/JhcJje1iZ+6:<Z*]m/^s/f;O00s
2024-05-08 19:41:50 UTC	8360	IN	Data Raw: c3 30 0c c3 04 1f fc ea 58 1e 5b a6 30 37 5b d5 ff d1 85 d4 1f 89 a5 f5 e1 19 22 d3 a1 7f dc 3e 5b 99 d3 db 6b 2a 9e 08 6e 6e fb b0 6a a4 22 1d e9 b8 f9 4d 52 39 49 a5 d1 08 bd 04 18 86 61 18 86 61 c2 41 69 ed 5d 92 b9 e9 24 5c 6d 74 73 9b 3c 44 e6 84 9b 82 9f 45 86 4a bf 7b ae 72 5f bc e2 f9 da f5 52 1b 58 ce 85 c3 8d 28 97 75 3f 34 a6 41 1b 3c 77 67 7a fa 33 0c c3 30 0c c3 84 83 0c 86 c8 bc 37 55 1e 22 f3 d4 37 eb a4 72 61 50 bf fb e7 89 b6 76 ef 8d 3b 2e f2 b4 e7 45 13 a4 f8 2c 67 fa 33 bc 2c 52 70 68 cc 61 c3 a6 48 65 89 9e a4 a7 3e c3 30 0c c3 30 4c 88 10 3d ba 1b 22 83 a9 0a 29 38 d4 64 df 4b 26 4a 65 c3 a0 73 1e 59 20 bc f4 ed 38 79 f7 77 d7 86 67 b2 6e 98 f4 34 bc 2c 52 3e 9f dd 28 95 93 55 ab d3 33 9f 61 18 86 61 18 26 5c 74 33 44 06 57 f0 5c bb Data Ascii: 0X[07[">[k*nnj"MR9IaaAi]$\mts<DEJ{r_RX(u?4A<wgz307U"7raPv;.E,g3,RphaHe>00L=")8dK&JesY 8ywgn4,R>(U3aa&\t3DW\

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49770	91.246.36.32	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:49 UTC	418	OUT	GET /account/images/idefend_logo.svg HTTP/1.1 Host: invisus.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:50 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 11 Apr 2024 18:51:41 GMT Accept-Ranges: bytes ETag: "d9c6e74a418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:50 GMT Connection: close Content-Length: 7046
2024-05-08 19:41:50 UTC	7046	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 36 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 34 31 2e 32 33 37 20 31 33 2e 35 30 32 6c 34 2e 36 39 39 2d 2e 31 33 39 76 31 37 2e 32 35 34 68 2d 34 2e 36 39 39 56 31 33 2e 35 30 32 7a 6d 32 2e 33 33 32 2d 38 2e 31 37 34 61 32 2e 36 30 36 20 32 2e 36 30 36 20 30 20 30 31 32 2e 36 31 20 32 2e 36 30 38 63 30 20 31 2e 34 36 31 2d 31 2e 31 34 38 20 32 2e 35 37 35 2d 32 2e 36 31 20 32 2e 35 37 35 61 32 2e 35 34 37 20 32 2e 35 34 37 20 30 20 30 31 2d 32 2e 35 37 35 2d 32 2e 35 37 35 63 Data Ascii: <svg width="156" height="40" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M41.237 13.502l4.699-.139v17.254h-4.699V13.502zm2.332-8.174a2.606 2.606 0 012.61 2.608c0 1.461-1.148 2.575-2.61 2.575a2.547 2.547 0 01-2.575-2.575c

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49771	91.246.36.32	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:49 UTC	420	OUT	GET /account/images/infosafe_logo2.svg HTTP/1.1 Host: invisus.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:50 UTC	272	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 11 Apr 2024 18:51:44 GMT Accept-Ranges: bytes ETag: "d3666c4c418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:50 GMT Connection: close Content-Length: 7211
2024-05-08 19:41:50 UTC	7211	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 0a 20 20 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 0a 20 20 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 0a 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 35 2e 39 39 39 39 39 20 33 39 2e 39 39 39 39 39 39 22 0a 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 73 6f 64 69 70 6f 64 69 3a 64 6f 63 6e 61 6d 65 3d 22 69 6e 66 6f 73 61 66 65 5f 6c 6f 67 6f 32 2e 73 76 67 22 0a 20 20 20 77 69 64 74 68 3d 22 31 37 36 22 0a 20 20 20 68 65 69 67 68 74 3d 22 34 30 22 0a 20 20 20 69 6e 6b 73 63 61 70 65 3a 76 65 72 73 69 6f 6e 3d 22 31 2e 31 20 28 63 36 38 65 32 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg id="Layer_1" data-name="Layer 1" viewBox="0 0 175.99999 39.999999" version="1.1" sodipodi:docname="infosafe_logo2.svg" width="176" height="40" inkscape:version="1.1 (c68e2

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49774	91.246.36.32	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:50 UTC	425	OUT	GET /account/images/authorization-image.png HTTP/1.1 Host: invisus.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:50 UTC	269	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 11 Apr 2024 18:51:25 GMT Accept-Ranges: bytes ETag: "26141241418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:50 GMT Connection: close Content-Length: 52302
2024-05-08 19:41:50 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 3e 08 06 00 00 00 fc b8 c9 1b 00 00 cc 15 49 44 41 54 78 da ec bd 07 78 1b d7 95 f7 fd 66 37 9b 37 bb 5f b6 65 37 d9 f2 6e 76 b3 bb 89 9d c4 49 1c c7 71 e2 96 d8 8e 1d 47 b6 6c d9 96 45 50 bd 57 4b 56 a1 25 d1 92 d5 ac de 7b 17 45 8a 62 91 48 4a 62 a7 c4 4e b1 77 b0 81 00 2b 58 40 00 04 08 10 95 9d 3c df bd 83 19 60 66 30 03 80 14 9b c8 b9 cf 73 9e 01 40 10 24 06 c0 0f ff 53 ef ff f9 3f c2 12 d6 53 b0 24 12 c9 b7 b4 5a ed bf a9 d5 ea 5f 68 34 9a d7 db db db ff 8c 6c 36 ba ee 8d 6c 1e fa d9 3c 74 fd 53 95 4a 35 13 d9 9b e8 f2 2f 75 3a dd 7f 00 c0 5f 09 67 4f 58 c2 12 d6 53 b7 f4 7a fd df 23 b8 fd 1c 01 6f 06 02 da 82 91 18 06 23 b2 b7 d0 e5 ff 41 30 fc 4b e1 ac 0a 4b 58 c2 9a ec 4a ef 19 Data Ascii: PNGIHDR@>IDATxxf77_e7nvIqGlEPWKV%{EbHJbNw+X@<`f0s@$S?S$Z_h4l6l<tSJ5/u:_gOXSz#o#A0KKXJ
2024-05-08 19:41:50 UTC	16384	IN	Data Raw: 00 36 3a 01 f0 7e 46 23 31 05 66 64 49 8d a1 2e ad 65 b0 b5 c6 ad 8b 3c d4 d2 d3 3f 64 75 f7 78 5a eb e8 01 90 84 e0 7f 0b 24 1b e1 d2 eb f5 ff c9 1d 03 d4 ba 8c 01 fa 25 8d 4e 06 18 9b b8 c6 78 fa 69 02 a0 51 56 7e 70 30 3f b5 66 28 3b 51 0e a9 31 7a 3a 04 7b 6f 6c f5 08 78 ae ac ea f0 52 d8 7e 2a 8c 99 25 3e cb 8a 09 b2 40 48 14 50 5f 64 2a 42 ba 1a f4 62 27 4a c8 52 19 2f 96 22 c4 45 d7 f4 e4 07 b6 9a 79 cf da 01 78 7a bb 2f 5c 8c 2d 82 f3 d1 85 70 04 41 30 21 a7 0c f2 c4 12 b8 53 d8 c6 d8 a4 9d 0f 80 18 68 f4 bd 3c 30 04 71 dd 20 03 82 34 10 62 c5 67 ec 19 80 6a bc 4f 32 7b c4 16 6d c0 c2 b5 42 2d 5c 29 d0 f0 02 90 b2 47 05 2d 50 af 30 42 ff c0 f0 73 1a e8 ff c6 2e 32 4e 6a 34 f0 25 35 6c 59 e4 fe 6a 1c ef c3 71 bf f1 00 20 f2 e2 66 0a 25 31 23 5c 6d Data Ascii: 6:~F#1fdI.e<?duxZ$%NxiQV~p0?f(;Q1z:{olxR~%>@HP_dBb'JR/"Eyxz/\-pA0!Sh<0q 4bgjO2{mB-\)G-P0Bs.2Nj4%5lYjq f%1#\m
2024-05-08 19:41:51 UTC	16384	IN	Data Raw: dc 59 7c 1b c4 09 8b a8 eb bc b6 6f a1 e0 a7 2a c8 6c 6c ac 40 28 14 c2 ca e5 aa d7 08 ad ac cc fc b0 51 a1 1a f8 f4 7e 4f 14 5f 08 0b 7c 7c ad 18 2a cd 0d 37 fc 27 d6 b9 a1 a3 c7 12 18 66 52 cf ad 70 32 e4 a6 47 50 e0 63 c2 2f fb 55 48 65 87 40 bf cf a5 88 67 5b c7 82 c9 97 06 c0 9f 4d 40 b7 7a 14 34 90 68 44 18 7e af 2d 57 86 b2 14 59 57 0e 42 3a 55 56 a8 0c 69 18 8e 57 00 44 89 2a 7c e7 3c 11 dc bf 33 f8 a4 03 10 2c 16 f8 82 8d 0b 01 1f 02 d0 e5 7e 37 08 72 d5 20 c2 90 99 12 d3 69 f1 90 06 a0 74 4d f1 08 00 d5 de 01 36 ef 71 5f 60 19 8c 5e b9 16 37 54 65 95 76 15 5f 17 89 e3 e7 0f 2a 08 d1 52 d3 9c 77 93 b2 d4 64 64 aa 0e 3f ec 0e 47 46 86 81 c3 62 bb 3e 8c c0 32 3f a4 b2 ea 8b d2 fe 1d 79 de b2 19 e0 6b 03 be f6 a2 5e d2 e4 89 5d 7c 5d 28 7c f5 00 32 Data Ascii: Y\|oll@(Q~O_\|\|7'fRp2GPc/UHe@g[M@z4hD~-WYWB:UViWD\|<3,~7r itM6q_`^7Tev_Rwdd?GFb>2?yk^]\|](\|2
2024-05-08 19:41:51 UTC	3419	IN	Data Raw: 5e 4c 79 f7 2c 20 16 00 6a 22 0d c6 e2 01 f2 43 90 f6 29 b0 05 80 9b 6a 0b b8 21 48 50 a4 c1 48 3c c0 28 0d a6 a9 1d 00 69 06 f8 8c 3c 04 a1 25 f0 d3 7d 0e 50 00 5c b6 f0 a9 92 71 0b 9f 2c 19 d4 58 d5 ef c8 24 32 96 eb f8 de 1e 26 ae e0 e4 79 fc dd 32 f9 1a c1 b5 d5 b5 33 c0 40 ef 5c 04 c0 bf de 72 e1 9b 3e 03 e0 37 e5 e5 43 87 e4 21 f8 91 81 fc 12 71 a9 8f f3 6f 46 71 c0 be 53 b0 e3 e9 3f 99 9f 9b 48 79 79 22 b7 be 8f 7e 19 93 4e 09 24 67 ff 28 1a 50 99 1c 0c 91 99 ed b6 f7 8b cc a1 07 00 90 a7 c1 44 a7 c0 bc 14 6e 87 6d 0a 1c 8f 06 53 24 d0 60 62 3c c0 1e c2 10 04 19 e0 5b 53 8b 0f bd f9 6c af 4f 1b a7 14 d7 35 fc a3 e4 41 fa 2a 69 99 9c bc f9 83 25 f5 9a 2a 53 38 92 99 e8 3a c9 be c0 c7 eb da 3d c0 c0 a0 5c 04 c0 bb 6f bc 70 99 8f 25 ef 97 e5 e5 97 90 Data Ascii: ^Ly, j"C)j!HPH<(i<%}P\q,X$2&y23@\r>7C!qoFqS?Hyy"~N$g(PDnmS$`b<[SlO5Ai%S8:=\op%

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49772	91.246.36.32	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:50 UTC	532	OUT	GET /account/Scripts/site.js HTTP/1.1 Host: www.invisus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://invisus.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 19:41:50 UTC	281	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 11 Apr 2024 18:52:17 GMT Accept-Ranges: bytes ETag: "afcc1760418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:50 GMT Connection: close Content-Length: 1200
2024-05-08 19:41:50 UTC	1200	IN	Data Raw: ef bb bf 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 24 28 22 69 6e 70 75 74 22 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 6b 2d 69 6e 70 75 74 2d 65 72 72 6f 72 22 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 24 28 22 73 65 6c 65 63 74 22 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 6b 2d 69 6e 70 75 74 2d 65 72 72 6f 72 22 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 24 28 22 73 65 6c 65 63 74 22 29 2e 66 6f 63 75 73 28 66 75 6e 63 Data Ascii: $(document).ready(function () { $("input").change(function () { $(this).removeClass("uk-input-error"); }); $("select").change(function () { $(this).removeClass("uk-input-error"); }); $("select").focus(func

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49777	91.246.36.32	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 19:41:51 UTC	425	OUT	GET /account/images/info_safe_certified.png HTTP/1.1 Host: invisus.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=hvmyejix5z5bnzlde4au0edf
2024-05-08 19:41:51 UTC	269	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Thu, 11 Apr 2024 18:51:44 GMT Accept-Ranges: bytes ETag: "8eee944c418cda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 08 May 2024 19:41:52 GMT Connection: close Content-Length: 24475
2024-05-08 19:41:51 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ed 00 00 00 e7 08 06 00 00 00 aa ba 68 28 00 00 5f 62 49 44 41 54 78 5e ed 9d 07 7c 1c c5 f5 c7 d7 f4 16 08 2d 84 92 40 0a f0 4f 02 69 84 10 92 10 4c 8a c1 96 f6 d6 22 31 25 10 c0 92 2c b0 c1 60 4c b1 25 d9 58 f4 6e 5a 68 a1 f7 de 7b 35 d5 d8 ba 93 7b ef bd 5b 96 65 dd 9d 64 49 9e ff 7b 7b 27 23 bf 99 95 ee b6 dd ee dd fb 7e 3e bf 8f c1 9e 9d 37 bb b3 e5 b7 7b 33 6f 34 8d 61 18 86 61 18 86 61 18 a6 60 39 67 fc be da 79 df 1c a6 95 c6 fe 0c ea a5 95 c5 ce d5 ca 6a 2f d1 4a a3 a3 b4 f2 68 0d fc ff 63 a6 4a a3 cf 6a 65 d1 31 69 c5 e0 ef 16 5a 2b da 0e 12 a0 36 f9 df 3a a9 3c 5a d7 a9 ce e7 b6 c6 2a 8b 5d 6d c6 2f 8b 5e aa a5 da 73 0a e8 2f 66 3b fb 4f d8 9f ee 02 c3 30 0c c3 30 0c c3 84 93 73 c6 1e ac Data Ascii: PNGIHDRh(_bIDATx^\|-@OiL"1%,`L%XnZh{5{[edI{{'#~>7{3o4aaa`9gyj/JhcJje1iZ+6:<Z*]m/^s/f;O00s
2024-05-08 19:41:51 UTC	8360	IN	Data Raw: c3 30 0c c3 04 1f fc ea 58 1e 5b a6 30 37 5b d5 ff d1 85 d4 1f 89 a5 f5 e1 19 22 d3 a1 7f dc 3e 5b 99 d3 db 6b 2a 9e 08 6e 6e fb b0 6a a4 22 1d e9 b8 f9 4d 52 39 49 a5 d1 08 bd 04 18 86 61 18 86 61 c2 41 69 ed 5d 92 b9 e9 24 5c 6d 74 73 9b 3c 44 e6 84 9b 82 9f 45 86 4a bf 7b ae 72 5f bc e2 f9 da f5 52 1b 58 ce 85 c3 8d 28 97 75 3f 34 a6 41 1b 3c 77 67 7a fa 33 0c c3 30 0c c3 84 83 0c 86 c8 bc 37 55 1e 22 f3 d4 37 eb a4 72 61 50 bf fb e7 89 b6 76 ef 8d 3b 2e f2 b4 e7 45 13 a4 f8 2c 67 fa 33 bc 2c 52 70 68 cc 61 c3 a6 48 65 89 9e a4 a7 3e c3 30 0c c3 30 4c 88 10 3d ba 1b 22 83 a9 0a 29 38 d4 64 df 4b 26 4a 65 c3 a0 73 1e 59 20 bc f4 ed 38 79 f7 77 d7 86 67 b2 6e 98 f4 34 bc 2c 52 3e 9f dd 28 95 93 55 ab d3 33 9f 61 18 86 61 18 26 5c 74 33 44 06 57 f0 5c bb Data Ascii: 0X[07[">[k*nnj"MR9IaaAi]$\mts<DEJ{r_RX(u?4A<wgz307U"7raPv;.E,g3,RphaHe>00L=")8dK&JesY 8ywgn4,R>(U3aa&\t3DW\

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5088, Parent PID: 3164

General

Target ID:	0
Start time:	21:41:05
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4500, Parent PID: 5088

General

Target ID:	2
Start time:	21:41:08
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2024,i,8826224301019814186,5666340583850186982,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6352, Parent PID: 3164

General

Target ID:	3
Start time:	21:41:10
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://invisus.com/account"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://invisus.com/account

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Chrome Cache Entry: 43

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5088, Parent PID: 3164

General

Chronological Activities

Analysis Process: chrome.exePID: 4500, Parent PID: 5088

General

Chronological Activities

Windows Analysis Report
https://invisus.com/account