Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
REFUND STATUS.docx

Overview

General Information

Sample name:	REFUND STATUS.docx
Analysis ID:	1636171
MD5:	7a39f7c17a92dba8548dd5898f6839e4
SHA1:	67396645d9cfbae73a0d53bf686ea07538846234
SHA256:	657854ffa1be80294d5c94308ac4f96a0c33b3065afcc313c21eafd87ba26e7d
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Creates files inside the system directory

Deletes files inside the Windows folder

Document misses a certain OLE stream usually present in this Microsoft Office document type

HTML body contains low number of good links

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Sigma detected: Suspicious Office Outbound Connections

Suspicious form URL found

Classification

×

Process Tree

System is w10x64_ra

WINWORD.EXE (PID: 6924 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Desktop\REFUND STATUS.docx" /o "" MD5: 1A0C2C2E7D9C4BC18E91604E9B0C7678)

chrome.exe (PID: 2272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cloud.kdanmobile.com/share/gl/cm1xL08zelc5MjAwMDNyclIrU3U4RA MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2056,i,1929944603598537504,6097548482633458693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 1.1.1.1, DestinationIsIpv6: false, DestinationPort: 53, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE, Initiated: true, ProcessId: 6924, Protocol: tcp, SourceIp: 192.168.2.17, SourceIsIpv6: false, SourcePort: 49743

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML

Joe Sandbox AI: Score: 10 Reasons: HTML file with login form DOM: 1.11.pages.csv

Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML

HTTP Parser: Title: SARS.xls does not match URL

Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML

HTTP Parser: Form action: https://morganholdinged.com/newyear5.php

Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML

HTTP Parser: <input type="password" .../> found

Source: https://cloud.kdanmobile.com/share/gl/cm1xL08zelc5MjAwMDNyclIrU3U4RA	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML	HTTP Parser: No favicon

Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML

HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Downloads/INCOME%20TAX.HTML

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49777 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 172.64.146.215 172.64.146.215
Source: Joe Sandbox View	IP Address: 13.74.129.1 13.74.129.1
Source: Joe Sandbox View	IP Address: 52.152.143.207 52.152.143.207

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://preview.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js?hash=d122542073c4b9e61ae69896ffd98e9c HTTP/1.1Host: connect.facebook.netConnection: keep-aliveOrigin: https://preview.kdanmobile.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://preview.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /li.lms-analytics/insight.min.js HTTP/1.1Host: snap.licdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/68qk0gmwrd HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/433702377574628?v=2.9.187&r=stable&domain=cloud.kdanmobile.com&hme=9d6c2cc137748d003f279fac8d52b2defc993e1177ef802e0d5b230c72882031&ex_m=71%2C123%2C108%2C112%2C62%2C4%2C101%2C70%2C16%2C98%2C90%2C51%2C55%2C177%2C180%2C192%2C188%2C189%2C191%2C29%2C102%2C53%2C78%2C190%2C172%2C175%2C185%2C186%2C193%2C134%2C41%2C198%2C195%2C196%2C34%2C147%2C15%2C50%2C202%2C201%2C136%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C109%2C52%2C111%2C39%2C110%2C30%2C95%2C26%2C173%2C176%2C144%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C103%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C105%2C104%2C106%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C2%2C36%2C64%2C42%2C107%2C45%2C80%2C69%2C113%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C114 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attribution_trigger?pid=70022&time=1741782535936&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: *sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://cloud.kdanmobile.comAttribution-Reporting-Eligible: trigger=event-source;navigation-sourceAttribution-Reporting-Support: web=osSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/1012119460?random=1741782536465&cv=11&fst=1741782536465&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1012119460/?random=1741782536465&cv=11&fst=1741782536465&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=433702377574628&ev=PageView&dl=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&rl=&if=false&ts=1741782536920&sw=1280&sh=1024&v=2.9.187&r=stable&a=tmgoogletagmanager&ec=0&o=12318&fbp=fb.1.1741782536918.34096925478561532&ler=empty&cdl=API_unavailable&it=1741782535006&coo=false&exp=k0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.8.0/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CLID=157bc42111a543ff95e454648828403f.20250312.20260312
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=433702377574628&ev=PageView&dl=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&rl=&if=false&ts=1741782536920&sw=1280&sh=1024&v=2.9.187&r=stable&a=tmgoogletagmanager&ec=0&o=12318&fbp=fb.1.1741782536918.34096925478561532&ler=empty&cdl=API_unavailable&it=1741782535006&coo=false&exp=k0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Attribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceAttribution-Reporting-Support: web;osSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /attribution_trigger?pid=70022&time=1741782535936&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1012119460/?random=1741782536465&cv=11&fst=1741780800000&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCjtLzM3njAxswuce-Dd1NI81W3tjaptGx-NA&random=407532742&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=433702377574628&ev=PageView&dl=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&rl=&if=false&ts=1741782536920&sw=1280&sh=1024&v=2.9.187&r=stable&a=tmgoogletagmanager&ec=0&o=12318&fbp=fb.1.1741782536918.34096925478561532&ler=empty&cdl=API_unavailable&it=1741782535006&coo=false&exp=k0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; lidc="b=TGST07:s=T:r=T:a=T:p=T:g=3048:u=1:x=1:i=1741782539:t=1741868939:v=2:sig=AQFaaqCBSoaMjsjPtd7f0hTkuBAZpK9H"
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=433702377574628&ev=PageView&dl=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&rl=&if=false&ts=1741782536920&sw=1280&sh=1024&v=2.9.187&r=stable&a=tmgoogletagmanager&ec=0&o=12318&fbp=fb.1.1741782536918.34096925478561532&ler=empty&cdl=API_unavailable&it=1741782535006&coo=false&exp=k0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1012119460/?random=1741782536465&cv=11&fst=1741780800000&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCjtLzM3njAxswuce-Dd1NI81W3tjaptGx-NA&random=407532742&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; ar_debug=1; lidc="b=VGST07:s=V:r=V:a=V:p=V:g=3187:u=1:x=1:i=1741782541:t=1741868941:v=2:sig=AQGtrZbskB6ZJlKkgMEk34kovHlJn9Au"; UserMatchHistory=AQKS3FPrBS2JDAAAAZWKVGl5UJQjMevROUR9j0GKwmONJnpXaCPYPC0g0Frld1QDbU7KRkbQqppCqQ; AnalyticsSyncHistory=AQLKrQcXZs0pyAAAAZWKVGl5c_43fiKimSE77CtEcMQOwL6NuFBaAfYgdIo0chs_AAm9l_fD3M_-_GrX0yBbQw; bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; __cf_bm=PXtcuwfNoVXlKzu9J1szAOp2kq.Hs3xCTFvc8b.rEAY-1741782546-1.0.1.1-PhitQLvpb7vMGCUnUXM4MLfGOa.IOQt25BWCS4ZKPTVxwJe_5KZ_ylfgpZ0NkHIsUETrW66vULXlwHvRVg3PdZTep27hFJMBxfwbSPnEWgQ
Source: global traffic	HTTP traffic detected: GET /c5e21b1b8b2f0b8f4a7d7d7ea76ff76a/1741766845804940717/INCOME%2520TAX.HTML?response-content-disposition=attachment%3B%20filename%2A%3Dutf-8%27%27INCOME%2520TAX.HTML%3B%20version%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA3BMGHEXOO3RX33LI%2F20250312%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250312T122859Z&X-Amz-Expires=1800&X-Amz-SignedHeaders=host&X-Amz-Signature=2a14c8ee6fec1ba5eec0680262565739f0457d1985eda44978421c68157859c3 HTTP/1.1Host: pdfseries.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://preview.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; ar_debug=1; lidc="b=VGST07:s=V:r=V:a=V:p=V:g=3187:u=1:x=1:i=1741782541:t=1741868941:v=2:sig=AQGtrZbskB6ZJlKkgMEk34kovHlJn9Au"; UserMatchHistory=AQKS3FPrBS2JDAAAAZWKVGl5UJQjMevROUR9j0GKwmONJnpXaCPYPC0g0Frld1QDbU7KRkbQqppCqQ; AnalyticsSyncHistory=AQLKrQcXZs0pyAAAAZWKVGl5c_43fiKimSE77CtEcMQOwL6NuFBaAfYgdIo0chs_AAm9l_fD3M_-_GrX0yBbQw; bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; __cf_bm=PXtcuwfNoVXlKzu9J1szAOp2kq.Hs3xCTFvc8b.rEAY-1741782546-1.0.1.1-PhitQLvpb7vMGCUnUXM4MLfGOa.IOQt25BWCS4ZKPTVxwJe_5KZ_ylfgpZ0NkHIsUETrW66vULXlwHvRVg3PdZTep27hFJMBxfwbSPnEWgQ
Source: global traffic	HTTP traffic detected: GET /c.gif HTTP/1.1Host: c.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c.gif?ctsa=mr&CtsSyncId=C440A9458A39425A9F9FA13B8109DE52&MUID=10E82FB6E5A862AA29283A1BE406634B HTTP/1.1Host: c.clarity.msConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: SM=T; MUID=2E3F2DB474EB66961ADC381970EB6802
Source: global traffic	HTTP traffic detected: GET /c.gif?ctsa=mr&CtsSyncId=C440A9458A39425A9F9FA13B8109DE52&MUID=10E82FB6E5A862AA29283A1BE406634B HTTP/1.1Host: c.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: SM=C; MUID=10E82FB6E5A862AA29283A1BE406634B; MR=0; ANONCHK=0

Source: chromecache_173.12.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_209.12.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Rk:function(){e=sb()},Nd:function(){d()}}};var cc=wa(["data-gtm-yt-inspected-"]),AG=["www.youtube.com","www.youtube-nocookie.com"],BG,CG=!1; equals www.youtube.com (Youtube)
Source: chromecache_148.12.dr, chromecache_209.12.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=mD(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Db(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},pD=function(){var a=[],b=function(c){return gb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_209.12.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Vh:f,Th:g,Uh:k,Bi:m,Ci:n,pf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var u=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){u&&u();d()};E(function(){for(var v=A.getElementsByTagName("script"),t=v.length,w=0;w<t;w++){var x=v[w].getAttribute("src");if(LG(x,"iframe_api")\|\|LG(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!CG&&JG(y[C],q.pf))return uc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_154.12.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_154.12.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_154.12.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_211.12.dr, chromecache_148.12.dr, chromecache_206.12.dr	String found in binary or memory: return f}yG.K="internal.enableAutoEventOnTimer";var cc=wa(["data-gtm-yt-inspected-"]),AG=["www.youtube.com","www.youtube-nocookie.com"],BG,CG=!1; equals www.youtube.com (Youtube)
Source: chromecache_148.12.dr, chromecache_209.12.dr	String found in binary or memory: var NF=function(a,b,c,d,e){var f=KC("fsl",c?"nv.mwt":"mwt",0),g;g=c?KC("fsl","nv.ids",[]):KC("fsl","ids",[]);if(!g.length)return!0;var k=PC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!xB(k,zB(b, equals www.facebook.com (Facebook)
Source: chromecache_173.12.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1020818435","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: cloud.kdanmobile.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: web-static.kdanmobile.com
Source: global traffic	DNS traffic detected: DNS query: preview.kdanmobile.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: data-center-rails.kdanmobile.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: o.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: pdfseries.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com

Source: unknown

HTTP traffic detected: POST /collect HTTP/1.1Host: o.clarity.msConnection: keep-aliveContent-Length: 2232sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/x-clarity-gzipsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://cloud.kdanmobile.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://cloud.kdanmobile.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_209.12.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_178.12.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_211.12.dr, chromecache_148.12.dr, chromecache_209.12.dr, chromecache_206.12.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_154.12.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_154.12.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_188.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_212.12.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_148.12.dr	String found in binary or memory: https://google.com
Source: chromecache_148.12.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_154.12.dr	String found in binary or memory: https://gw.conversionsapigateway.com
Source: chromecache_173.12.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_189.12.dr, INCOME TAX.HTML.crdownload.11.dr	String found in binary or memory: https://morganholdinged.com/newyear5.php
Source: chromecache_209.12.dr, chromecache_206.12.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_211.12.dr, chromecache_148.12.dr, chromecache_209.12.dr, chromecache_206.12.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_173.12.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_211.12.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_209.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_209.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_178.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_178.12.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_211.12.dr, chromecache_148.12.dr, chromecache_209.12.dr, chromecache_206.12.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_211.12.dr, chromecache_206.12.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_178.12.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_178.12.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_178.12.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_206.12.dr	String found in binary or memory: https://www.google.com
Source: chromecache_178.12.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_210.12.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1012119460/?random
Source: chromecache_148.12.dr, chromecache_209.12.dr, chromecache_206.12.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_206.12.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_211.12.dr, chromecache_148.12.dr, chromecache_209.12.dr, chromecache_206.12.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_178.12.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_211.12.dr, chromecache_148.12.dr, chromecache_209.12.dr, chromecache_206.12.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_173.12.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_209.12.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_209.12.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.17:49777 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2272_1904681344

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2272_1904681344

Jump to behavior

Source: ~DFFEFB107ECCB97B7C.TMP.0.dr

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: classification engine

Classification label: mal48.phis.winDOCX@27/141@68/20

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\Desktop\~$FUND STATUS.docx

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\{CB987EB0-1DDB-4DCE-9410-29CFEC412F20} - OProcSessId.dat

Jump to behavior

Source: REFUND STATUS.docx

OLE indicator, Word Document stream: true

Source: ~DFFEFB107ECCB97B7C.TMP.0.dr	OLE document summary: title field not present or empty
Source: ~DFFEFB107ECCB97B7C.TMP.0.dr	OLE document summary: author field not present or empty
Source: ~DFFEFB107ECCB97B7C.TMP.0.dr	OLE document summary: edited time not present or 0

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Desktop\REFUND STATUS.docx" /o ""
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cloud.kdanmobile.com/share/gl/cm1xL08zelc5MjAwMDNyclIrU3U4RA
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2056,i,1929944603598537504,6097548482633458693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:3
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cloud.kdanmobile.com/share/gl/cm1xL08zelc5MjAwMDNyclIrU3U4RA			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2056,i,1929944603598537504,6097548482633458693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:3			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: REFUND STATUS.docx

Initial sample: OLE indicators vbamacros = False

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
REFUND STATUS.docx	0%	ReversingLabs

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
file:///C:/Users/user/Downloads/INCOME%20TAX.HTML	0%	Avira URL Cloud	safe
https://morganholdinged.com/newyear5.php	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
star-mini.c10r.facebook.com	157.240.253.35	true	false		high
web-static.kdanmobile.com	18.66.112.93	true	false		unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false		high
beacons-handoff.gcp.gvt2.com	142.251.143.67	true	false		high
c-msn-pme.trafficmanager.net	13.74.129.1	true	false		high
cloud.kdanmobile.com	18.66.147.71	true	false		high
clarity-ingest-eus-sc.eastus.cloudapp.azure.com	52.152.143.207	true	false		high
beacons.gvt2.com	142.251.143.35	true	false		high
ax-0001.ax-msedge.net	150.171.27.10	true	false		high
beacons6.gvt2.com	216.58.206.67	true	false		high
preview.kdanmobile.com	18.66.147.76	true	false		high
s3-w.us-east-1.amazonaws.com	52.217.171.193	true	false		high
l-0005.l-msedge.net	13.107.42.14	true	false		high
scontent.xx.fbcdn.net	157.240.0.6	true	false		high
www.linkedin.com.cdn.cloudflare.net	172.64.146.215	true	false		high
googleads.g.doubleclick.net	142.250.186.130	true	false		high
a726.dscd.akamai.net	2.22.242.121	true	false		high
data-center-rails.kdanmobile.com	18.66.147.76	true	false		high
www.google.com	142.250.186.132	true	false		high
td.doubleclick.net	142.250.185.130	true	false		high
s-0005.dual-s-msedge.net	52.123.128.14	true	false		high
a1916.dscg2.akamai.net	2.22.61.186	true	false		high
www.facebook.com	unknown	unknown	false		high
www.clarity.ms	unknown	unknown	false		high
www.linkedin.com	unknown	unknown	false		high
beacons.gcp.gvt2.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
px.ads.linkedin.com	unknown	unknown	false		high
pdfseries.s3.amazonaws.com	unknown	unknown	false		unknown
snap.licdn.com	unknown	unknown	false		high
o.clarity.ms	unknown	unknown	false		high
c.clarity.ms	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://px.ads.linkedin.com/wa/	false		high
https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703451v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700750v1s19.xml	false		high
https://cloud.kdanmobile.com/share/gl/cm1xL08zelc5MjAwMDNyclIrU3U4RA	false		unknown
https://c.clarity.ms/c.gif	false		high
https://o.clarity.ms/collect	false		high
https://connect.facebook.net/signals/config/433702377574628?v=2.9.187&r=stable&domain=cloud.kdanmobile.com&hme=9d6c2cc137748d003f279fac8d52b2defc993e1177ef802e0d5b230c72882031&ex_m=71%2C123%2C108%2C112%2C62%2C4%2C101%2C70%2C16%2C98%2C90%2C51%2C55%2C177%2C180%2C192%2C188%2C189%2C191%2C29%2C102%2C53%2C78%2C190%2C172%2C175%2C185%2C186%2C193%2C134%2C41%2C198%2C195%2C196%2C34%2C147%2C15%2C50%2C202%2C201%2C136%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C109%2C52%2C111%2C39%2C110%2C30%2C95%2C26%2C173%2C176%2C144%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C103%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C105%2C104%2C106%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C2%2C36%2C64%2C42%2C107%2C45%2C80%2C69%2C113%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C114	false		high
https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA	false		high
https://snap.licdn.com/li.lms-analytics/insight.min.js	false		high
https://connect.facebook.net/en_US/sdk.js	false		high
https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=C440A9458A39425A9F9FA13B8109DE52&MUID=10E82FB6E5A862AA29283A1BE406634B	false		high
https://connect.facebook.net/en_US/fbevents.js	false		high
https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700150v1s19.xml	false		high
file:///C:/Users/user/Downloads/INCOME%20TAX.HTML	true	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/attribution_trigger?pid=70022&time=1741782535936&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA	false		high
https://www.clarity.ms/s/0.8.0/clarity.js	false		high
https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true	false		high
https://www.clarity.ms/tag/68qk0gmwrd	false		high
https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true&liSync=true	false		high
https://connect.facebook.net/en_US/sdk.js?hash=d122542073c4b9e61ae69896ffd98e9c	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_209.12.dr	false		high
https://googleads.g.doubleclick.net	chromecache_148.12.dr	false		high
https://tagassistant.google.com/	chromecache_178.12.dr	false		high
https://gw.conversionsapigateway.com	chromecache_154.12.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_178.12.dr	false		high
https://cct.google/taggy/agent.js	chromecache_211.12.dr, chromecache_148.12.dr, chromecache_209.12.dr, chromecache_206.12.dr	false		high
https://connect.facebook.net/	chromecache_154.12.dr	false		high
https://www.google.com	chromecache_206.12.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_173.12.dr	false		high
https://www.youtube.com/iframe_api	chromecache_209.12.dr	false		high
https://www.google.com/pagead/1p-user-list/1012119460/?random	chromecache_210.12.dr	false		high
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_173.12.dr	false		high
https://www.google.com/ads/ga-audiences	chromecache_178.12.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_178.12.dr	false		high
https://td.doubleclick.net	chromecache_211.12.dr, chromecache_148.12.dr, chromecache_209.12.dr, chromecache_206.12.dr	false		high
https://connect.facebook.net/log/fbevents_telemetry/	chromecache_154.12.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_209.12.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_209.12.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_178.12.dr	false		high
https://google.com	chromecache_148.12.dr	false		high
https://github.com/microsoft/clarity	chromecache_212.12.dr	false		high
https://morganholdinged.com/newyear5.php	chromecache_189.12.dr, INCOME TAX.HTML.crdownload.11.dr	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_209.12.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States		15169	GOOGLEUS	false
52.217.171.193	s3-w.us-east-1.amazonaws.com	United States		16509	AMAZON-02US	false
52.216.44.33	unknown	United States		16509	AMAZON-02US	false
142.250.186.130	googleads.g.doubleclick.net	United States		15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States		32934	FACEBOOKUS	false
172.64.146.215	www.linkedin.com.cdn.cloudflare.net	United States		13335	CLOUDFLARENETUS	false
13.74.129.1	c-msn-pme.trafficmanager.net	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.132	www.google.com	United States		15169	GOOGLEUS	false
18.66.147.76	preview.kdanmobile.com	United States		3	MIT-GATEWAYSUS	false
18.66.147.71	cloud.kdanmobile.com	United States		3	MIT-GATEWAYSUS	false
52.152.143.207	clarity-ingest-eus-sc.eastus.cloudapp.azure.com	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.22.61.186	a1916.dscg2.akamai.net	European Union		20940	AKAMAI-ASN1EU	false
13.107.42.14	l-0005.l-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.66.112.93	web-static.kdanmobile.com	United States		3	MIT-GATEWAYSUS	false
13.107.253.72	s-part-0044.t-0009.fb-t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.130	td.doubleclick.net	United States		15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States		32934	FACEBOOKUS	false
157.240.251.35	unknown	United States		32934	FACEBOOKUS	false

Private

IP
192.168.2.17
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1636171
Start date and time:	2025-03-12 13:27:32 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	REFUND STATUS.docx
Detection:	MAL
Classification:	mal48.phis.winDOCX@27/141@68/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .docx

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.76.240, 52.109.68.129, 52.111.243.41, 52.111.243.43, 52.111.243.42, 52.111.243.40, 2.16.185.191, 20.189.173.14, 95.100.110.30, 95.100.110.28, 20.42.65.91, 142.250.185.238, 142.250.185.163, 142.250.185.110, 173.194.76.84, 142.250.186.174, 216.58.206.78, 142.250.74.202, 142.250.185.131, 216.58.206.40, 142.250.185.206, 142.250.186.104, 142.250.181.238, 142.250.184.206, 216.58.206.46, 142.250.185.78, 172.217.18.14, 142.250.186.99, 142.250.186.78, 216.58.212.131, 172.217.18.110, 52.123.128.14, 40.126.32.72, 4.175.87.197, 2.22.242.121, 2.22.242.98, 150.171.27.10
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, templatesmetadata.office.net.edgekey.net, onedscolprdeus17.eastus.cloudapp.azure.com, clientservices.googleapis.com, eur.roaming1.live.com.akadns.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, roaming.officeapps.live.com, dual-s-0005-office.config.skype.com, clients2.google.com, redirector.gvt1.com, login.live.com, otelrules.svc.static.microsoft, www.googletagmanager.com, update.googleapis.com, frc-azsc-000.roaming.officeapps.live.com, officeclient.microsoft.com, templatesmetadata.office.net, prod.fs.microsoft.com.akadns.net, www.google-analytics.com, clients1.google.com, ecs.office.com, self-events-data.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, onedscolprdwus13.westus.cloudapp.azure.com, accounts.google.com, fonts.gstatic.com, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, osiprod-frc-buff-azsc-000.francecentra
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
18.66.147.71	https://www.dottedsign.com/task?code=eyJhbGciOiJIUzUxMiJ9.eyJ0YXNrX2lkIjozNDU1ODM1LCJmaWxlX2lkIjoyMjU3NDQ4Mywic2lnbl9maWxlX2lkIjoyMzE3NTY1OCwic3RhZ2VfaWQiOjQ3MjQ2MTcsImVtYWlsIjoidmZhcmlhc0B3ZXN0bGFrZS5jb20iLCJleHBpcmVkX2F0IjoxNzQxNTUzNDgzfQ.HzZLgMMxAZSV_iVgO--XdcSNVOvVCdiCg8S3aUWMChplsdtgyqOWKyJi3vwVbeBh99sm9EHWsNwj41IZdYNjWA	Get hash	malicious	Unknown	Browse
	https://ccml.io/	Get hash	malicious	Unknown	Browse
	http://www.cpasmieux.buzz	Get hash	malicious	Unknown	Browse
	http://geolocator-prd-us-east-1.6c0ar7x14bpb.com	Get hash	malicious	Unknown	Browse
52.216.44.33	https://ttiktshop.com/	Get hash	malicious	Unknown	Browse
172.64.146.215	https://www.dkgroup.fr	Get hash	malicious	Unknown	Browse
	f1215887448.exe	Get hash	malicious	Unknown	Browse
	https://cdn-facxxx.b-cdn.net/	Get hash	malicious	Unknown	Browse
	https://www.cake.me/s--6UFs8h4LqTXxVNSd0lsitA--/jay-stafford	Get hash	malicious	Unknown	Browse
	https://prezi.com/i/ofxn8gyy1rps/	Get hash	malicious	Unknown	Browse
	https://app.hellobonsai.com/link/c8063f67300b3cd93813c8bb88f58154?utm_campaign=send_to_client&utm_content=primary-btn&utm_medium=email&utm_source=proposals	Get hash	malicious	Unknown	Browse
	http://islonline.org	Get hash	malicious	Unknown	Browse
	https://prezi.com/i/evbnoqzfxkjc/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://scribehow.com/page/Request_for_Proposal_RFP__qJcfOklYQRy3AAQjXCM51w	Get hash	malicious	Invisible JS	Browse
	http://www.windfieldalloy.com/	Get hash	malicious	Unknown	Browse
13.74.129.1	f1215887448.exe	Get hash	malicious	Unknown	Browse
	Message.eml	Get hash	malicious	Unknown	Browse
	https://0utl00k_secure_pdfsharing.wesendit.com/dl/9WeFG1R9WGJTbgaCO/a3Jpc3RhbC5wbGFpc3RlZEBzb2RleG8uY29t__;!!P5FZM7ryyeY!UznDjsW7gO6EJncqNmJhgeM1Zawk4R__aUyCoG6Jb-mYlr-79K2gn3tFm6bOpnkuKuN_n69fA8HZASZsr-9bQyk$	Get hash	malicious	Unknown	Browse
	https://0utl00k_secure_pdfsharing.wesendit.com/dl/9WeFG1R9WGJTbgaCO/a3Jpc3RhbC5wbGFpc3RlZEBzb2RleG8uY29t__;!!P5FZM7ryyeY!UznDjsW7gO6EJncqNmJhgeM1Zawk4R__aUyCoG6Jb-mYlr-79K2gn3tFm6bOpnkuKuN_n69fA8HZASZsr-9bQyk$	Get hash	malicious	Unknown	Browse
	f1215469392.dll	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Vidar	Browse
	https://www.cake.me/s--6UFs8h4LqTXxVNSd0lsitA--/jay-stafford	Get hash	malicious	Unknown	Browse
	https://www.cake.me/s--6UFs8h4LqTXxVNSd0lsitA--/jay-stafford	Get hash	malicious	Unknown	Browse
	ADFoyxP.exe	Get hash	malicious	KeyLogger, StormKitty, VenomRAT	Browse
	https://zsharepointonlinems.mysteriousroutes.it.com/kOPeS/#fuck@you.com	Get hash	malicious	Unknown	Browse
52.152.143.207	https://us.docs.wps.com/module/common/loadPlatform/?sa=16&st=0t&sid=sICb8ypVCkJ3kqQY&v=v2	Get hash	malicious	Unknown	Browse
	Untitled.msg	Get hash	malicious	Unknown	Browse
	051693_OFS FITEL.xlsb	Get hash	malicious	Unknown	Browse
	https://eu.docworkspace.com/d/sIOf32K_fAefj5KkG	Get hash	malicious	Unknown	Browse
	https://chipotle.app.link/?$3p=e_et&$fallback_url=https://quattropublicidades.com.br/owa/aa/brian.herman@viewtrade.com	Get hash	malicious	Unknown	Browse
18.66.147.76	http://landmarkcu.myftp.org/landmarkcu	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
beacons-handoff.gcp.gvt2.com	https://go.51.ca	Get hash	malicious	Unknown	Browse	142.250.180.67
	ca703fd579bbcee73544b9b37f8a6469.bin.exe	Get hash	malicious	LummaC Stealer	Browse	142.251.143.67
	http://rqst.qlyvasok.ru	Get hash	malicious	Unknown	Browse	142.251.143.35
	https://app.storylane.io/share/ttfgdirdpl74	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	142.250.185.67
	Inv#8653763981_2sfgPaymentAdvice.svg	Get hash	malicious	HTMLPhisher	Browse	142.251.143.35
	https://marktmagie.com/auth8523796254hfdhsf734/ogo00dex.html#uiptcgcu@uiprail.org	Get hash	malicious	HTMLPhisher	Browse	142.251.143.35
	https://www.directhealthcaregroup.com	Get hash	malicious	Unknown	Browse	142.250.180.99
	.svg	Get hash	malicious	HTMLPhisher	Browse	142.250.180.99
	https://wrasse-horse-3nb9.squarespace.com/	Get hash	malicious	Unknown	Browse	142.251.143.35
	20250031011(12 Mar 2025).pdf.html	Get hash	malicious	Unknown	Browse	142.250.180.67
beacons.gvt2.com	https://go.51.ca	Get hash	malicious	Unknown	Browse	142.250.185.227
	Inv#8653763981_2sfgPaymentAdvice.svg	Get hash	malicious	HTMLPhisher	Browse	142.250.180.99
	https://marktmagie.com/auth8523796254hfdhsf734/ogo00dex.html#uiptcgcu@uiprail.org	Get hash	malicious	HTMLPhisher	Browse	142.251.143.35
	https://www.directhealthcaregroup.com	Get hash	malicious	Unknown	Browse	142.250.180.99
	.svg	Get hash	malicious	HTMLPhisher	Browse	216.58.212.131
	https://wrasse-horse-3nb9.squarespace.com/	Get hash	malicious	Unknown	Browse	142.250.180.99
	20250031011(12 Mar 2025).pdf.html	Get hash	malicious	Unknown	Browse	142.251.143.35
	ATT48234.svg	Get hash	malicious	HTMLPhisher	Browse	142.251.143.35
	Remittance Advice.htm	Get hash	malicious	HTMLPhisher	Browse	142.251.143.35
	file_1741726008685.pdf	Get hash	malicious	Unknown	Browse	142.250.180.67
c-msn-pme.trafficmanager.net	f1215887448.exe	Get hash	malicious	Unknown	Browse	13.74.129.1
	FK0OQMzPxN.exe	Get hash	malicious	DBatLoader, PureLog Stealer	Browse	13.74.129.1
	Message.eml	Get hash	malicious	Unknown	Browse	13.74.129.1
	https://0utl00k_secure_pdfsharing.wesendit.com/dl/9WeFG1R9WGJTbgaCO/a3Jpc3RhbC5wbGFpc3RlZEBzb2RleG8uY29t__;!!P5FZM7ryyeY!UznDjsW7gO6EJncqNmJhgeM1Zawk4R__aUyCoG6Jb-mYlr-79K2gn3tFm6bOpnkuKuN_n69fA8HZASZsr-9bQyk$	Get hash	malicious	Unknown	Browse	13.74.129.1
	https://0utl00k_secure_pdfsharing.wesendit.com/dl/9WeFG1R9WGJTbgaCO/a3Jpc3RhbC5wbGFpc3RlZEBzb2RleG8uY29t__;!!P5FZM7ryyeY!UznDjsW7gO6EJncqNmJhgeM1Zawk4R__aUyCoG6Jb-mYlr-79K2gn3tFm6bOpnkuKuN_n69fA8HZASZsr-9bQyk$	Get hash	malicious	Unknown	Browse	13.74.129.1
	f1215469392.dll	Get hash	malicious	Unknown	Browse	13.74.129.1
	f492136216_mpengine_dll	Get hash	malicious	Unknown	Browse	20.110.205.119
	EaseUS Partition Master (Repack & Portable) 16.0 UE.exe	Get hash	malicious	DCRat	Browse	13.74.129.1
	jki-dragon-release-online-setup.exe	Get hash	malicious	Unknown	Browse	13.74.129.1
	AyciQgru1X.exe	Get hash	malicious	Remcos	Browse	13.74.129.1
cloud.kdanmobile.com	https://cloud.kdanmobile.com/share/gl/NSsrS2IwTEczODc5MDNpTFFsUmlLMg	Get hash	malicious	HTMLPhisher	Browse	52.45.20.66
s-part-0044.t-0009.fb-t-msedge.net	Message.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	Purchase Inquiry.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.253.72
	Inv#8653763981_2sfgPaymentAdvice.svg	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	Remittance Advice.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	Bozza nuovo ordine 0010979742.xls	Get hash	malicious	Unknown	Browse	13.107.253.72
	Bozza nuovo ordine 0010979742.xls	Get hash	malicious	Unknown	Browse	13.107.253.72
	Quote 09052022_1.xlsx	Get hash	malicious	Unknown	Browse	13.107.253.72
	Denise Salvano shared _Kerry Ingredients Flooring Standards_ with you.eml	Get hash	malicious	Unknown	Browse	13.107.253.72
	o1.svg	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	https://surveymars.com/q/78graAmKo	Get hash	malicious	Unknown	Browse	13.107.253.72

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	https://go.51.ca	Get hash	malicious	Unknown	Browse	18.155.192.71
	Purchase order003.exe	Get hash	malicious	FormBook	Browse	18.162.124.14
	main_mpsl.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	https://we.tl/t-BnGuynUcjL	Get hash	malicious	Unknown	Browse	18.245.86.79
	LXEbg3nYnB.exe	Get hash	malicious	Unknown	Browse	76.223.67.189
	LXEbg3nYnB.exe	Get hash	malicious	Unknown	Browse	76.223.67.189
	na.elf	Get hash	malicious	Prometei	Browse	13.251.16.150
	na.elf	Get hash	malicious	Prometei	Browse	54.171.230.55
	na.elf	Get hash	malicious	Prometei	Browse	13.251.16.150
	45.126.126.33-sora.arm-2025-03-12T01_48_26.elf	Get hash	malicious	Mirai	Browse	54.217.10.153
CLOUDFLARENETUS	.svg	Get hash	malicious	HTMLPhisher	Browse	172.67.158.181
	https://go.51.ca	Get hash	malicious	Unknown	Browse	188.114.96.3
	ca703fd579bbcee73544b9b37f8a6469.bin.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.61.68
	https://we.tl/t-BnGuynUcjL	Get hash	malicious	Unknown	Browse	104.18.27.193
	PENDING PAYMENT FOR March SOA.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.64.1
	DEVM24-clean.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.64.1
	https://jkhmonteithfgintcoukjg.taplink.ws	Get hash	malicious	Unknown	Browse	104.19.147.54
	kumori.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.96.1
	TOUR_PACKAGE.vbe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	http://www.tfeweb.co.uk	Get hash	malicious	Unknown	Browse	104.17.24.14
MICROSOFT-CORP-MSN-AS-BLOCKUS	Purchase order003.exe	Get hash	malicious	FormBook	Browse	20.2.217.253
	https://we.tl/t-BnGuynUcjL	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://www.dkgroup.fr	Get hash	malicious	Unknown	Browse	13.107.42.14
	Purchase Inquiry.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.60
	Purchase Inquiry.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.253.72
	Purchase Inquiry.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	PURCHASE-ORDER-SINCOAUTOMATION-PO3223090781-Ref 6421SINCO-AUTOMATION.exe	Get hash	malicious	FormBook	Browse	204.79.197.203
	Purchase Inquiry.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.76
	Purchase Inquiry.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.76
	resgod.mpsl.elf	Get hash	malicious	Mirai	Browse	20.62.103.71
AMAZON-02US	https://go.51.ca	Get hash	malicious	Unknown	Browse	18.155.192.71
	Purchase order003.exe	Get hash	malicious	FormBook	Browse	18.162.124.14
	main_mpsl.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	https://we.tl/t-BnGuynUcjL	Get hash	malicious	Unknown	Browse	18.245.86.79
	LXEbg3nYnB.exe	Get hash	malicious	Unknown	Browse	76.223.67.189
	LXEbg3nYnB.exe	Get hash	malicious	Unknown	Browse	76.223.67.189
	na.elf	Get hash	malicious	Prometei	Browse	13.251.16.150
	na.elf	Get hash	malicious	Prometei	Browse	54.171.230.55
	na.elf	Get hash	malicious	Prometei	Browse	13.251.16.150
	45.126.126.33-sora.arm-2025-03-12T01_48_26.elf	Get hash	malicious	Mirai	Browse	54.217.10.153

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	ca703fd579bbcee73544b9b37f8a6469.bin.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.253.72
	https://jkhmonteithfgintcoukjg.taplink.ws	Get hash	malicious	Unknown	Browse	13.107.253.72
	TOUR_PACKAGE.vbe	Get hash	malicious	AgentTesla	Browse	13.107.253.72
	http://www.tfeweb.co.uk	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://www.dkgroup.fr	Get hash	malicious	Unknown	Browse	13.107.253.72
	bootservice (2).php.html	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://na4.docusign.net/Signing/EmailStart.aspx?a=98613b3e-4358-4628-9b7d-41ec67471533&acct=c0dc35b2-63fe-4f1c-a73a-e32c0fbf9ad5&er=57612189-98c9-4115-b187-cb70a302a3ee	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://app.storylane.io/share/ttfgdirdpl74	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	13.107.253.72
	Shinhan_DocuSign_312047735687684052652423710713974466111628395562753690xqIDWOeXtHYBeNKrTAww.html	Get hash	malicious	Unknown	Browse	13.107.253.72
	20250031011(12 Mar 2025).pdf.html	Get hash	malicious	Unknown	Browse	13.107.253.72

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Temp\~DFFEFB107ECCB97B7C.TMP

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	2560
Entropy (8bit):	1.9159249645858138
Encrypted:	false
SSDEEP:	12:rl3baF2vwTis7VCuuHKEFHWRyRguuHKEFHW4U:rlU/up7JupVU
MD5:	38E5E9F2A85732870D858959628A1595
SHA1:	2F7FFE756135563977BA28659330E053B95B2EF2
SHA-256:	8AA7A895E536587BA4B176ED26B2D750C90AB600C39DFB53C35ADAC9534C3EBE
SHA-512:	3EFBA55B7398DC88F8421D1BE3DE4FAB4AB293456AF86AF44C3DB69148F96E4D506F1434168D0F2C4AB0184E56CBB4B7FEDCEF7CAC8E00ECAD7E823DDAACF6D2
Malicious:	false
Reputation:	low
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\~$FUND STATUS.docx

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.792504655672808
Encrypted:	false
SSDEEP:	3:yNWK991S6bIWad73+qDqZOBfxuliOkt/RtZjy:ycB6bId53lqZOBfYlA/dW
MD5:	9654462391729808EC342340B5B0131D
SHA1:	B8EC9FCD192AD527F8FF7CC25A0661713F678EE1
SHA-256:	B2F1F1F9DC77E50C5AF078C73963FA82182D2C8C9AA55C7EA65F38DC05CB91C7
SHA-512:	609A784CF387B9A69455E2B85AFFE099486FA5FEC98F32B88C800666FC1D7B827CDD28D5FD93361137955791674D14B45578DD88A5AF3C068C7F5B0D4AA0EC08
Malicious:	false
Reputation:	low
Preview:	...........................................................J.:...w.G...X.i..q..U.....@..*...[....C.O3.....>...o...@.....@..RwJ.......F.&.\|...}.Gk.....W...=.k

C:\Users\user\Downloads\28fe35aa-a930-4e29-8856-3a0fca6a8ca6.tmp

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16743), with no line terminators
Category:	dropped
Size (bytes):	16743
Entropy (8bit):	5.994892438796537
Encrypted:	false
SSDEEP:	384:G77wQC75nY6k5ol5szWG0aFxtFShSUqA8f7gr7gr7g7:G77wQwpwyGzUhRqffkkO
MD5:	5673DB7990ED954D88779905CF15DABE
SHA1:	A754E7193E15ECC04392C179708BE181CDFE515D
SHA-256:	D578D6C6EE31E02C10F5E9168E333C4B0CC7916BE21A03570E5E01547B5B18D3
SHA-512:	EE5CCC6C285EA40151EC4E0F875458719AA7D349CF416008CB7680A341504DCF58AC8FC6437717A7E027185017FEE66593380C83C635CD00B8E9D190B52AC1CC
Malicious:	false
Reputation:	low
Preview:	<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>SARS.xls</title><meta name="generator" content="WYSIWYG Web Builder 10 - http://www.wysiwygwebbuilder.com"><style>body a{color:#00F;text-decoration:underline}a:visited{color:#800080}a:active{color:#F00}a:hover{color:#00F;text-decoration:underline}h1{font-family:Arial;font-size:32px;font-weight:bold;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h2{font-family:Arial;font-size:27px;font-weight:bold;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h3{font-family:Arial;font-size:24px;font-weight:normal;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h4{font-family:Arial;font-size:21px;font-weight:normal;font-style:italic;text-decor

C:\Users\user\Downloads\INCOME TAX.HTML (copy)

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	260485
Entropy (8bit):	6.028038472623416
Encrypted:	false
SSDEEP:	6144:G7Mb2fmxSkpXqxM/Xp6dn3efhNj9s7vYe00T:7KMXq9dn4y7vS0T
MD5:	76F1F4B59819576FC7F30F040CCBBC8F
SHA1:	1097CD3DE37DB9E233FCD6142FC687C62E5DD435
SHA-256:	3CC6315E850BEC386DCD5746F185F799067E552D5B799ABC3D8984492249AF22
SHA-512:	13E2BCE3142EF9989FDC62A7C203D8F1453FC1A7CE6611E4A50B5D026EA02025147C6BBC94906DB29EEDB3917EF71B84EB4E2A5F91EDD934A53F949730A6EEA0
Malicious:	false
Reputation:	low
Preview:	<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>SARS.xls</title><meta name="generator" content="WYSIWYG Web Builder 10 - http://www.wysiwygwebbuilder.com"><style>body a{color:#00F;text-decoration:underline}a:visited{color:#800080}a:active{color:#F00}a:hover{color:#00F;text-decoration:underline}h1{font-family:Arial;font-size:32px;font-weight:bold;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h2{font-family:Arial;font-size:27px;font-weight:bold;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h3{font-family:Arial;font-size:24px;font-weight:normal;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h4{font-family:Arial;font-size:21px;font-weight:normal;font-style:italic;text-decor

C:\Users\user\Downloads\INCOME TAX.HTML.crdownload

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	260485
Entropy (8bit):	6.028038472623416
Encrypted:	false
SSDEEP:	6144:G7Mb2fmxSkpXqxM/Xp6dn3efhNj9s7vYe00T:7KMXq9dn4y7vS0T
MD5:	76F1F4B59819576FC7F30F040CCBBC8F
SHA1:	1097CD3DE37DB9E233FCD6142FC687C62E5DD435
SHA-256:	3CC6315E850BEC386DCD5746F185F799067E552D5B799ABC3D8984492249AF22
SHA-512:	13E2BCE3142EF9989FDC62A7C203D8F1453FC1A7CE6611E4A50B5D026EA02025147C6BBC94906DB29EEDB3917EF71B84EB4E2A5F91EDD934A53F949730A6EEA0
Malicious:	false
Reputation:	low
Preview:	<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>SARS.xls</title><meta name="generator" content="WYSIWYG Web Builder 10 - http://www.wysiwygwebbuilder.com"><style>body a{color:#00F;text-decoration:underline}a:visited{color:#800080}a:active{color:#F00}a:hover{color:#00F;text-decoration:underline}h1{font-family:Arial;font-size:32px;font-weight:bold;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h2{font-family:Arial;font-size:27px;font-weight:bold;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h3{font-family:Arial;font-size:24px;font-weight:normal;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h4{font-family:Arial;font-size:21px;font-weight:normal;font-style:italic;text-decor

Chrome Cache Entry: 146

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 397489
Category:	downloaded
Size (bytes):	130580
Entropy (8bit):	7.998149846728502
Encrypted:	true
SSDEEP:	3072:oInUiHarTWbAnQyRGF+XEBFJSljeBlDzjA5KlFNsh:oInd2A6XGwEYl6DAoljY
MD5:	79A5D525B75D2DEEC16765C93F86BA08
SHA1:	10B571BF157B4831D5663367AF3097E432DEEAC9
SHA-256:	DE7D72F219E8A9378BDD18853B5B8E3DD2F3B7088996C0FAE6EDA8D981C1F82E
SHA-512:	E4F9927B23F0D6F3118564477485BAF94FF74DA55038A234917AD1460CCACDC1EBE60E0BF2F337E0AC0CD326C5E89E1264834DBB1B5687B343CFD5159A94C6F1
Malicious:	false
Reputation:	low
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/f10e284a.d5cf625ed04cc29e8696.js
Preview:	...........z...(....."H...../.r..},9....HPbL...Jv$.OU...BYNr..or..F/.{uuUuU.n.L.....&....`....SwK...h.7V...:.Y..q....W.l.L.y.T}#1"..#..3b5".......jf..6Lmp.E..k.i.....:...y.O5.u..+?.U&..Z...U%yG&.....QU{...KMwJ.... ..B1]........^.e..6....V....p......j..>a..m7.:4s.M.;cXN.m..a..n...a.=..Zv.A.V..7;..Z.V...TeX...5!`c..v.......m..0..z..t..la...m.{`7).i@~.N...;..q.s....w...?..A..S..F.........q...@.V.U.~]......[......C.........~c..... :.`D#=.EP_cr.E'..?J..>..d...d.....0x..P....$...X...0....UH..A.D.....q.I4....(\......H...j.~p....4...AU......_.u..Q...+[..)..i-..n..8.......:3/.FiS`5]}E.A.^N...i,..a.....f..h..."nL......J......w>,.SZ...A+w}.?<.u.[..th.\|V...$.-.....<;}....?........}w~.......7.j.C}}3...b...?.8Y..}...i..V....k......`......\M..n.......E<o....X.....$...s....:..ZM...m(Vm...<[.U.4O..V......j\....v...1._{.....1-.}.....H./.(<.k2...^.].m.6..A....hp...,....w....Kw..m.....;}.1C.0v"....a.oM.!.^.-.@.&.`....A....2......u..L`..:...vp..d;.X

Chrome Cache Entry: 147

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	7.793472914219327
Encrypted:	false
SSDEEP:	24:Ng3XvhyhvdfiqKOoZ8JEY4ArlGGlS88H3YQ0QSj:N60z1oZA4AIGH+bO
MD5:	B4B6566823192EE8BE239824CEE6E8C5
SHA1:	79748F5871CAA3B9512278E721BFE584A51B6567
SHA-256:	3A6F5EEB2A3E17085B194990B30B2F0CE3CF75A5E565EB0781039640311153EE
SHA-512:	7E637455D278DE14F16C7AE7B9A93A2972D4BECD897B345F827543C79FF0716C91F1B70FE7B71673F4505B014165CF586EC851E771B35839346C5D2C397FF48B
Malicious:	false
Reputation:	low
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/d4pdq3aNTY9Fpuow9H4gP/_buildManifest.js
Preview:	....d.4}}=z9...DKi.u... .9.]....H.....e?..Y2...Z..;.._VVE........O......oO.}..O.....>...s......r...vo..=.u....4I...o......\|.......M......._]...w.._.2Nh.Z.>.........}.{~...a...l.&...m)..n.ZuPla..O.....i.8\|\|E.g..1r.@t..>.8........Z.N.CV...+.\...s..,..b....Se.x..?.e+(AFh...L...5p....Gq..j..if..(.HP.B.J..S..1.Z.6J...."....P..\...)......9A.0.../...(!..4..>....0..z.....}..;..h.\|..P..G.........7.]........A$c.."...e.U.P..a-j...N,.\..L..g.J.I.1...Ke../.i.[@..}J..(Y.-.=]u.<.).!......r..n..03....P.oo+L....&.P.:?...4._...5..j..AGg..."p..\|...A.u..`...P...+z.... ...@..%KtZy.,.h...Zt...S:..<..E.K.x..:......o...D.:.c@.F7......Y..M...#7F...5.:X52m..yK..bR....)3.I&.....C.....P..+Y.A.............M...+qy..\|..s.2t).'.....L......CF..7.7..2...P..........wS..0.. ]9..Y.E.9.ps..1.....T..!....!+. Q.<..b.\0".R....P...Y.y8....r.A.....`T).6....v~..}..s.>Zg.).....p4..q\YYB.K.CqVu..?....r..7_.Ho.t....

Chrome Cache Entry: 148

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	downloaded
Size (bytes):	319771
Entropy (8bit):	5.5771842524456385
Encrypted:	false
SSDEEP:	3072:+Us9SdUYwSAxEELHtff0VKIDUgb1ZRtN6MZUqeuv1/KhUNeauF7N44R:uDlZxRiRtN6oUqei/KONeafC
MD5:	74E0555424C2F753431C7BBBF566603A
SHA1:	71E302D430D8E1FF603AAC59720C18AC33E88B36
SHA-256:	4CAC309571460CCB89511F00CE38931D86B023ACEFC0E359021C8D547CB1CB2C
SHA-512:	7101C8FE6B37B9438B3CFB3DE2B1F3E2103C2B67BE5CC277BE7C716DD956A4304EA3A0317C68E3FDF51D5B95BB5B67E2ED3802C29774B658ADF7836256FC4183
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-1012119460&cx=c&gtm=45je53a1v9102072116za200zb811347510&tag_exp=102482433~102587591~102640600~102643510~102717422~102788824~102791784~102813108~102814059~102825837
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_cross_domain","priority":16,"vtp_rules":["list","^kdandoc\\.com"],"tag_id":11},{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-1012119460","tag_id":18},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":9},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_po

Chrome Cache Entry: 149

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	130977
Entropy (8bit):	7.992793061331281
Encrypted:	true
SSDEEP:	3072:zjikWMZ4DJeuX6j6KakNpv7C47I99/dzedbmvaT+638YX:zjilJeuX6jVakjv777I99/dabmvayXYX
MD5:	1DFE7A8914D45E29734B13B84DAC2AD4
SHA1:	DCD5AD3DD9B710D11DA09DA9511FEA30241BD7E3
SHA-256:	4593C9EFD91EFD06BDE590FC3598B9755D23876B15EDD89E2FDC1EB582BFA880
SHA-512:	87DD4E57D7177BCCF279B8C451439E27DDA40EBEBE98EA203B9D58109ECF8BEC1789F2114240833729215C855540D8A65B619EBC1C83CAA9BA8FB63C9BA135E4
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/dff27125.f926801bcb22711379a7.js
Preview:	U.e\F....C......{......@...@U-...U..................&.f...V.6.v...N...n...^.>.~...o.}....S.Iv&t.0.'...6.$...=....h.T.}W.....Uq....S..@^.r+...Zt..r.oI D.o...wU.........M.. h......tu80zFqka..gW....$.Yi%.d.[...,..........K...p8.]U3s.U.....^B.3?'...".B.p2[...;.B......KV.7.k,.h..Y.i..q.G..=.....#....Z.Vjs....ls...UV.o...(Qo.Y#.P...y.)...=..zq..,GV&8.. .%LXp....3.T.]H\|...5...p...~Q.=.fy..J.....#?_U.....H2..=......-...skt...<.".6..=.>..\.'.p)......4..P....,...a..I..iT.....G.l-...12#-.....{.&...y[!.[.Y.;..f.$..%.'..ed.AM.....p..B..._~Y.....ET).("......G...f....p....r.E..d.l.8....Y.;u.G?.c.T[...y...A.\f.....,....h.-9.%.C..K....7....RG....c..)....OI.R...w.uK._~./;...i.,!.`@.`....Nr...........i; ....}y.I.........1.pS.X..9..5........D0...~F........I..X.o..n.e_..a.{....gf.Z..6.$....C?..M.v.U..m..}.:.\?.+.g.2;..1...........i..a.....Wl..O..,.S..u...F.;...l..Xc_..f..V....y./..*.....5vi..6F....O.#..W..bR1..52....n.{fv........S..^.....t.VRJ.yg.L......H..Z\|.D.

Chrome Cache Entry: 150

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2637
Category:	downloaded
Size (bytes):	1286
Entropy (8bit):	7.851245711944362
Encrypted:	false
SSDEEP:	24:XEYHI/5UT/MZzXuEb68SmEUWWjVW4PJ+kZRTzm3tkmnC7z4pf89hKNmWtb:XzHm5wozXx6TUGuJ+y03tznCX0MWtb
MD5:	F107F7D55E245D7E742D3207604432FC
SHA1:	A345DC2BE4137D3CF601C91FC7B22FBFE2F09860
SHA-256:	2A73E1C4B01BDDE3B6C2C6E3BDDB4C57ABF2128BDF3ED3D8EA861F0FC8EBB736
SHA-512:	EB8A5DA78286CEDB12391354104B8322027FDBD7394B67C7FD2669363138E1502EEB0BB0CC18E13D7AF1009B293668469FFCBDD73B765D1A312B647A722511F7
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/pages/unsupported-38b7686f49ab968560a7.js
Preview:	...........V.n.6.~......T..D.0tm.......aP.%3.H...3..$.N.K..t.....\|:.L....\.+...1R..[xD.......1...f\|6#...hDf...#.X.E.a.c5.,..T.db=.yh..&<...$&.)......N......3'/.W WI.dA.....K).^z..U...,B.n...h).L#..ZI....a=..yZ.5~.v.AJ...hjd.X.[..0N.....b......k.K...+...."...Z...n.>s...9.e4...`.4..9..9oL4lU.f.e#r?......]..(**.....f-...lj..6..b.......L...e.....<..7r.5U.{..;.,[[..wl.Q?6r....0.,.t.w....W......a0......I.2e....K..~.<.c'..i.D...+......\.=....^.Nd.-.A<`.hr.)a..tr...'!.......l\|.....;0..cnk\.....].M.]P..Q8..^.z..t.R/$..0....eR.......ve.wU.....$.r.iF-..X.....Z..."...Gi!6y..B.x:.ns..0Uk.{h!k.p`c.l...x..MU......z.....!uM. .BH;H.@i..l.r..1^C..2.....w.Z.,4+"AZ.ud.f..3.)...4.d[V..8.D...\|-.L.].y.."..w..rV...T&..#.!..E@..#..............o...;z...(%.......\..t..z7.;....6...q.\|.V<....8..~^d...f.(_Lo_#..@~...[.......#..uv>.Y.z.qV.'.]M%.....y..Oo?9C......:...r}..%.d......Z..8.t..(F$.hU....7.....0I..+B...X.E.5....s..&..7....\........W.u.pY.

Chrome Cache Entry: 151

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41188)
Category:	downloaded
Size (bytes):	41191
Entropy (8bit):	5.506999044193401
Encrypted:	false
SSDEEP:	768:j21xCdwV79Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8udEN:iO3kr8V8vShi98Iiph3IGC
MD5:	C87DE4D7E7181BDE799030FF1B7758C7
SHA1:	C657AEF6004AAE9137CBBDB45587B8C8D4F7E70D
SHA-256:	01D3C44791671916A95A17E3810A0BBB0817110F01C035D6E0FAADCBCC581D2D
SHA-512:	187F3B3A6BC8CE92838AD1B554E5C9D95AA368ED81117E5DA1992FAD5960B8AC8E994E9C09EAC3B3290135274629E6AC1CD0C3CC13626175DB2568EEFD49F732
Malicious:	false
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 152

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	684
Entropy (8bit):	4.597056694616325
Encrypted:	false
SSDEEP:	12:P+KGOmSxt7hLHFHuVeVVFPqupqulfbkAV+o+yQqEWrRHBMwJPIGWSkWZ3/k7:1mSxt7hLHFHuknPqSxeobxEKBMaWhWZK
MD5:	E08535FC5DF7F165B04B17DF3B490416
SHA1:	A6F57741743FB31D0143AD0984CA36991A9696D6
SHA-256:	C89B63FFEF75BA9C02B8942D28E76B4F7A094BBA87B9EC75F51E905804E522BB
SHA-512:	E8C52E2260FC6373BFCF25E16F1AB241A3635F4A8FAF1FD97B98990A82492FA3964380E418822CB96BD9E3794CB8AF02485BC309FF2C9B0FBA8C27A4F318149D
Malicious:	false
Preview:	{. "The file format cannot be previewed": "The file format cannot be previewed. Please download the file.",. "Download": "Download",. "Search": "Search",. "Print": "Print",. "Rotate": "Rotate",. "Details": "Details",. "Loading": "Loading",. "Summary": "Summary",. "Information": "Information",. "Type": "Type",. "Size": "Size",. "Created": "Created",. "Last Modified": "Last Modified",. "Shared": "Shared",. "Owner": "Owner",. "Can Edit": "Can Edit",. "Can View": "Can View",. "Description": "Description",. "Anyone": "Anyone",. "Required password": "Required password",. "Process file": "Processing file preview. It might take a while. Please come back later.".}

Chrome Cache Entry: 153

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	116396
Entropy (8bit):	7.997016567361792
Encrypted:	true
SSDEEP:	1536:N+BAT72rCGUD9AUgB3zPFR+o/lRJncgSyiGM3BTQr+tTsXX0GcuZPtEWQzytRt4e:N+BAN5yjvdnDSbGMdQStTaRcuDEDzoRd
MD5:	24026D52AB62A9CA96FF0C3C764D0495
SHA1:	99ADB213977B7A9C550EF36DD5227C318EB65E2F
SHA-256:	D0DCD16FE6FCD1ADDF1A2143BE12DD558381DD0DB92389109384DAF5C8E7CB30
SHA-512:	D0CC2BC3BE59753719AFC6BEBB39A0ECC1DFF5D0C06D56824AE444431E470C3B67BD1BC42EE5896FCED7E4A5430778BF4333E1151EC8F04A43172421B7ECA141
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/c5e25a8af32c014952027e2d9a8efeee61701694.61628cc074f4c0309f15.js
Preview:	U`.SE`...@.<4.I[..s..I..@U...;.U.............N.....=.s._.l>..s.e.>.&`.[_...........z.u....)...JEt..S..^..._.....)M....TCnV...j.Du...../...pB.Y.Q=i.i.=vW./WF.[.HT.v........_....)...2].u.T"..>.PI.....J.w........p'.6`.Ipz..>.N.+%@.j#..dc'....75...%9R..... ...!/..E..........w.......Hz. Yn(...........%..R.&%P...8p..f....-8............b....M.J)i.s.nxA.Yjmz.E......f..r..R. E].cAJSEJ...... . ....NQZ.<....M.I3....4?S,f...rq.D6...gl..EJ2.{.=wm.P=....[..I...\|7.sX.,..J>.../..).c.....C.{_.""".f...lt..<X..;..j..".+M......<...<..2....z..+..~N....[.!.4..J.5......L..EE.D..Y....k..1`.#....l....~......{.=D.Z.x.>.\A....p..kh5n.._..M......2...+W._c..g.Psr...;aQ.o.o........?._...hh.1.v4.....0R. M...N..zB...$3...4(T.X....s...P.,C...6.e....b...Y...(.7..k.(U...P9....H.......j..._..@Y.....O.r4I......@7Dt..f...S..2F]I{..\.....}.>*(t..0.R......N.j...s...N]H7...!{N8Y....;..X....}..Z.W..-+.....>q\.i.H.{v.=$.<.uj.....,o.z.8..$...:n.....@...vG.L,.2Y.B......@.L.@..NV..<

Chrome Cache Entry: 154

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9516)
Category:	downloaded
Size (bytes):	247578
Entropy (8bit):	5.45563914078899
Encrypted:	false
SSDEEP:	3072:5FLeYs8IxWJr3iOeL8NteqZEbkxZNsucrl0xYurPKid3Rx:5FLeY/OWJWJ8NNfFcrHurPKid3/
MD5:	F01D6648EC4F8345F51E9BFEF6BB9637
SHA1:	90FEFB52301EA9A3DF1FE58D79164290F11BACA0
SHA-256:	60371527774AE318686446D60E425283E0BEBCEF635D9F070AA93318E069A1EC
SHA-512:	4A86785FE9752B701362B604214BA2B74D88A2E997243826D5AB92250F0631B711C2AD60FC7DC05A13F6EA944F68F49FFC0DA048A095F51F6033FB2754493D8D
Malicious:	false
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 155

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 156

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5594)
Category:	downloaded
Size (bytes):	72727
Entropy (8bit):	5.341591442624704
Encrypted:	false
SSDEEP:	1536:RJeUNT7cpT6oj5+IHM9ZVKo1QYTZ02LKVwpyKc569nr:RFT7as9ZVK1Yj8ZKcQ9r
MD5:	A76FC0243BC949237D27DBDA59241E56
SHA1:	F3F6E2F55E9FA1161E0232C3EBC325470C87A00F
SHA-256:	B317C859BC29805F4A29FE641950CAEC11815CB679F178C75E80CD351C3B147D
SHA-512:	629F97114DEB57AF8D0E9EE7D5CCE543A1F7FEE362F333ABE29164E57AC523B200087591A6F4F91DF9013051589C578702AAEE85954D55B1B1E5BB82DDAE24C8
Malicious:	false
URL:	https://connect.facebook.net/signals/config/433702377574628?v=2.9.187&r=stable&domain=cloud.kdanmobile.com&hme=9d6c2cc137748d003f279fac8d52b2defc993e1177ef802e0d5b230c72882031&ex_m=71%2C123%2C108%2C112%2C62%2C4%2C101%2C70%2C16%2C98%2C90%2C51%2C55%2C177%2C180%2C192%2C188%2C189%2C191%2C29%2C102%2C53%2C78%2C190%2C172%2C175%2C185%2C186%2C193%2C134%2C41%2C198%2C195%2C196%2C34%2C147%2C15%2C50%2C202%2C201%2C136%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C109%2C52%2C111%2C39%2C110%2C30%2C95%2C26%2C173%2C176%2C144%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C103%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C105%2C104%2C106%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C2%2C36%2C64%2C42%2C107%2C45%2C80%2C69%2C113%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C114
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 157

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	6727
Entropy (8bit):	7.973681024270497
Encrypted:	false
SSDEEP:	192:J6mNhgSO4eSelOo5LodAkZ2q8gaRfrDn1fQS3xHn1haxH:cmNhgSJen4o5gfbutN39n1YH
MD5:	FDFB2B29C4C837A06929C49A3C2F5362
SHA1:	16523FEA962BA4023CED1DFDDD73F702B25CA6C9
SHA-256:	2B219FD62BD9D4645D0A88AB1C5C454FF8A6982411CAF6EC9A4A3D521F72EB19
SHA-512:	716D46AE118BA009D4B70FC82094799123F1B83D36DFC72934A1AC20A7B2D7CF8DD7E5B3399CF92F7D4A130A52F09075A55D27FE80ABB4ACC9DCC99787333015
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/main-37810cee3961299d27b7.js
Preview:	.BK.HM.....>....._.t\..C1Iz..29..IO/.(...1...$.._.......\....R.\tn..{...`f.R6H.m...'/...b.Q ..P.o..n<.~...kc...........OV.l.Fum ".2.}...w.>.c\|$....j~..0...../..Mf.;<.C...FY.g.<\.2y.A..F.....V.....xb...=O.D.r.=tA...._....Wpj..$...Qy..f......\C.A.U.o..,..-/ki,...t....0.%."...v..\........."..9...&T.g..z...x..n...}.....V.......t.G.....a.3...,.".55..s.&..qs..A.4.+..~........x....zx..M..{.o.r.tf.YZ....b@.7.q...83...*..\|..W\..x....p....'......'...r0..{...!AB6.....R....g$A/..cP^.........1.sRT."~....u...C..^./.qVT........X..V:\?[^y..M.=Z.2N..)_.....z..9...iH[r....o.[...cm.A..T...;..s....w..sv..yb..<.Iy...s.B....q.H...kH...$<..q........<_..\|N...mCj.........X?tJ...g..5..o...VI,.Y.:.1>@.HH....6..-..yM.6.E.QG....=.<t...<],...[.B.dR.m..{..Wo...-<"`....._#..!.....;\..`..........XD....#%<.s.s.S..RF......>.A.....P..(HK.)ET..>...v#..I.3..iO.`..+...n......Q,.?..N..c...g..?.eg.J.S..D.6...-....l8....8._..YV...r^+.....8...5....&.RTL/..A.......!f.#(.}...

Chrome Cache Entry: 158

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	58909
Entropy (8bit):	7.995456697382752
Encrypted:	true
SSDEEP:	1536:uSTri+Lafgka9ACetp1DcURC0E6oB0k7obLj1jQqHFPT:9TOaafgka9ACetMUw0E6oBn0/jVQmFr
MD5:	3A256DF467C2373AE14D269C130D4D13
SHA1:	8C748BB97CA46FBFDF502BEFC3FD609AB41ABF58
SHA-256:	4EDC3DEEBD9244ADA8F40B59FD42656939FAEF24841749D8AD8C27184995609B
SHA-512:	1CFCC9A494C437FEEF95F98D1CD1F0979EBCA016F5D900CC88EC6B4E98FB390AAEE712924D0A12A3945CE1E4BF5EE317F193A66EF5D7182EDAD2147F3F25E9AC
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/ea88be26.783adbd92b7f6cb598ad.js
Preview:	U0.#......q....@e`...e;.........o..H...N....K.....4..a.^2...$F..]..7.rK.X).......>...S.[...^..j..NU..(PD.d..@vG.=.\|.......p..8.d.o..nP..-.c...S.;...4..X.:..3..}.,K..Fw.s.Lll.....b)rI.>..{..}...F.Fw..&..f........s...E.....8..>....l.Ce.8r..VI......!..{[.=...F.w.DQ.....3kBn.RZ......!..L.7....V....4...........w.e.I....%YN..&.........l......r.o..Z....=...!...ErQ.{.2......;.8..8..M&.fI..f#.......nn...y.....z.v..q..../...T.....3o...w.w..h...-...}.B.\|i.Nsbc#i......[qf....2J.....3z].....^.jy..w..+.._.h..D..J.....&....... ^Q.y...{.O.~'.H...n$........I.mSF...^.....oZ.j...ou......~.m...7....C?..~{....v...#..>.[{..=`3.3z.9.........R}.To.I..$...1..4g. U..r.4..4..y>/+.._....[..+.S..u+..u..n......s.5nK..>q.....s..].0x.q..Qv'<.....\O......=..p..A..............,7...8.v...=q!.....v.{.}..!....}...cz.?/.....]..../.f..~.`PX4....8.3.6..1.%.B..,.>.Zh!.=.~..5D.....dC.M..y.,/:.w.Pa^.`p.#..,.....~$`..DGpY.a....l.Q..g.+D.l;f.0...[.Pi7...(..n../b1..........

Chrome Cache Entry: 159

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 8566
Category:	downloaded
Size (bytes):	3103
Entropy (8bit):	7.932612046273237
Encrypted:	false
SSDEEP:	96:E3MBYevoN9B2wSIqKZeXwNBKb8BfkOpQ4fG9K:dYevofB2wlqKZwwNBRBfkOPH
MD5:	5EE3206C9CC60134016885BC47870DAE
SHA1:	87C2818690F10D076893F5B59470AEBD80884F95
SHA-256:	23C095C39F564E9BF0701B23C2D3E3EBB5CE5125F735FEB5D0FBF6093CFD54DE
SHA-512:	D5783C0E21A77D0F943E5623A6266C01B093555FCE1D72BA947B49B0277ABB342777EC8EA278524C02D71D4F9843D257D02F30FC5C2F2D1CE6D5E48C44297804
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/commons.053c8cf1c782edb84cd2.js
Preview:	...........Z......+\.PHx..:AjP.(..Ms..E...@Q#.^.....U%...7..:6n..A,....;.w.F...m.e.M...P.j3};.......$N6M.........._a.h.\...$..^&.q..i..XDW.....Y.3..D....b...n.n.."..dU.e.ge.dA^fu.d._`..q...._......2.T.E.o...0.>.N..]Q.\|.i0.....q...f.D.4..k....Z...+....w.\...&6.K.g.w..,.I.X&Y..n..s...M..H..e.RI....d..5...b....1A..P.f.~....Y... ..I..\.A$......(SF.IEQ....v......g..j.&T.....FTA.........f...d2...g>oJ6..~..YS.T.x.7.f...._...R.J.V.v../...V?Nf.B2...G...,.z.l..[..=...S4L..+..3...:u...o......^v.e.O:....<....X.V.j.P.1b.c"...........E/...E.7!mv$..9F{#I..YL....p8.wL..).L....4\|-..U.6.?.w4J.Q...+..^.n.:\|."..o.l.a.XS...d..X<.wK.x1........D.aS......j..9.B....nFz.uE....4u#-.p.....:.-.[3.7..w...].F.s....t7...gw..sVV.x..e^.w.....H.P.{...U.P..1....W7.J\|...{....C.k....0..s..nQ1..@...;Ur.v..`<o.0eE.6...X.Rc......~...">..Xw./..,Ye..me.%.^F...'..(wp.^..7.#$.Le.....{#!.a.....R-..Sh./.B.{p..V~(.....X..7.-..9..wQ.....dZT......B7.I........m..w..7..H.J`d..DSU.k..l.h.S.

Chrome Cache Entry: 160

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, original size modulo 2^32 3468
Category:	downloaded
Size (bytes):	1491
Entropy (8bit):	7.85824631827244
Encrypted:	false
SSDEEP:	24:XCUICYQVEDB+Q0pMbSzDiLTa11oUO365M93jA8FHChiMEAotezboIR9b3LLJpg2d:XC7IEDQhpMuzmI1oUq6iDziXbzRVLfgC
MD5:	AD3D580B26B7D81F5588647698ADBB07
SHA1:	E77B058DBD49DDAECCE4D304C1A653D90255C70E
SHA-256:	525A6A2766B20AD7A99F6DB4F59609860CDBD66F875A16AF145766C76BE52F3D
SHA-512:	9350B2AE28DD21A19BF5BC3998C181EE02CE93F5C619C36F517C886863770DB44DBC72FD9EBA93EA6F858EE36F77506E3CD790C79FABAD369C7E1F8063C9411C
Malicious:	false
URL:	https://data-center-rails.kdanmobile.com/api/v4/share_links?url_token=cm1xL08zelc5MjAwMDNyclIrU3U4RA
Preview:	...........WYo.6..+....AR..F.9.h.....n....]z..R^....P.Z.Q....C...o...Q.-G.{.2. ......#k..\|/.1.&.lx-yZ.VN....4.Y..%Z .#7.q\|'...^-......>...wK4A.0^.k...n....he..k.i0...3./p...YB.%.5.$.M=..H.9.kY......B..I.%....2.hQ6E1>M.........S.(]...{{....a.xU.>7].X.....N'm./....(+g..;.B..(t.M...Z..!8.B...F..kJ..O.?..@X.#3...@.x....M.ji.v.....~.Jy..........\....^IaY..;T..C ..G.t%.....T.......T...d.D>..0......#.....}...ZHC..=.].P..G].......K.w....y.......luv..2.....!..1tYh...O....Z.u.!....k]..Vi#......um..........-.".....d!....EC.]....y..C..QS..gN.f..-.c.>t........l..UY>.....u.1.h.#...........(.......O.n.]Z...C..o.fpl.....`..i.V(..+]U+]+..h.1B...(J.......V.....]4u-K.\..K.l<ii.9En.X.....sN.M.5Nn...U..s..;...Z.. .<..!.C\|df...WWury.f.....+.U.!%.b.4..;...3...D )II..4.i..<..G.(..(.s..l..9.x4#m9.?q4..8..$.@T....v\|........t<1@.....!...j.^....6........RTe9.ZI.zB.*`K..D.m?...{...c...k_.$NhH`3..........Bza......b..!l....m.....-..6.TL.\|..E......1T..l..gM.".n.^&..P...

Chrome Cache Entry: 161

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 87960
Category:	downloaded
Size (bytes):	26605
Entropy (8bit):	7.990710738482722
Encrypted:	true
SSDEEP:	384:K3xNaq79fuhql66YAizvYV0WODgtH/1crQXJp4L/TL7FY9s1076c3dmj/hRH9jkK:K319fuo+ADfODgtfirz37Sa1ckH9kqp
MD5:	55F35CF126FCA3D8EB67D118CE9FB182
SHA1:	8E1E30A20782FEE46CFC65C97EC3DBB508C7BD6E
SHA-256:	58E74291AE0B27F4BBB9D34419A049A53E85392A2ED3032003BEB38CE8706469
SHA-512:	A4E2F4F0880ED33DCF91A1267DADF0F861F063538C262A7DA6A0B2FF29547C200CA234E366FDECBECFA69A60961F9EC3579E98118AE637E22806C20D5F560242
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/main-6850a16cdab52a2b.js
Preview:	..............F.(.U(lV.F-..n0...8ql..$..5\.lJ.)...:F........%+.....6;k.@.]]wW...N.7.\|..>........A....3.=.g...iww...ou.vw..<..Q.....3.x+..h.;.....Q...I...4..4.ss...<.9...a...t.....cy;...9....1..Fu..4.t/..O[<...i?..<..y...8..x.3?.7.c...l.......0s.B....t.e...,.^s.k.<v]..h.A.p.^v.u..~...$=.G.VyN..i..v.V;....U...S.F..'.<......$.3.......y..s....).\../..n.O..e.'..=J.Q...V.s.^8g/<....E.T..\|...:..........B..@.{L.....DA..\|....i...Uc..q.0.H,.(...F..t...%.l..\8l7..F...2M.;.......G...x..,.+A....\]u./...N.+...s...`N..shq..(.f.sV..+E..........c...$...^q...s<.?.....4.....1......a.....>.....a~u.S7.-.........`.g)...y&.?..a^...Q....E\\\|X...A.)>...5........_.(.O.4....g...^..<y....5...yx,VW...2..l...p..^{.Ms.qa..z.0.4...<../...i?_[.......YA~k..f.h...t=..]...e...~....SZj~9... 4G.dO1WS...\%..5.24.].I}...... .W.Jq....}..h].sm"..;%.tD\o.uN...... .7..~.C..y.qS2y...l......a...w.......4.2..;....j.6I}......`...w.q....D.s.QO..&.2.+Q"..6b.9I.......xZ....A#..s...

Chrome Cache Entry: 162

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 33158
Category:	downloaded
Size (bytes):	10897
Entropy (8bit):	7.979697400062672
Encrypted:	false
SSDEEP:	192:/OqDvU9lhw6oECXrjGNTHlKBNcCxo4IZ2Jmqe1/aPJ1rA6j3zAGjV:2+SojIBKBPq31CPV8G
MD5:	F02B46F8B9343F2926A64B726F0F453E
SHA1:	5125D00AE92522280E1946BF04870E3B1B7D555E
SHA-256:	35BA02BE3193BE601014E70127150B56643DBA35E7935F5603B6541DF8138621
SHA-512:	62F868FEA68EE22A84A65D8502EC95B796C70CD41608410BF76E244543E56FAFE53CC1BFB3D68966858E97B9BF22D9B1815B34377190B605B868C0AC8E8E77A1
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/ca465c2913442cee474c1c419869e47a6047c75c.788ac100922b60e6ee8c.js
Preview:	...........}.s.H.._....`UB...6.g[..n.R[>..Q8 ..`....:,q..~.U8H...=o.E.8,.U.3++...~0...k.l../_.a0....!..~pj..y\|...V.T.i.._k.x...?..Dx"0.....Q.;w#o..'.........!>....p4.x.Vm..2...Tx..j..x.>...'wt.M>.&..x..B....f.'..pBM.&.....m.\|t...&..Ga.&.3.h...........O.w.Ox.....a.y;_....y..5.:. <.....[.}=.G.}...y.T.AB.....Q...8.g....+/.Q'.D.@w.L.$...u....h.6.G.fk...hb..n#..".....J.f.{^..c.x.._U.o.........../..?..../4._>C..HO.!'.`b..v...dx......e.7Y.A.......NM..\..^ZD%.j4.j..........l6.EQ7:.O. .Q....V...........Vq............I.i.......[.v~Oq.{..0N..E.0..(\.&....>...c*.e......i.='..j...8.R..fh../.....[......A%...b.h$.Qx]y....Ea..;.zq.Fq%..J<..h...PK..].....U=.x.N`r.@I.o.x.K).'.]4.......gkF.0....L.a.yIz.......EP\.~..U\|9u7..<.\|......{y..m..i.@..H.r....$.."..nr.8..+s.J.7.W..Y.@i. ......5C7.Z0..y..\|.\|.....6...?<..g.G.Rl~....b..Z....,.h.?\|.. ....\|.....F..#.O..;51v...1 .T.Is#.r.j5...I.:..50........'q..".7...OQR...>F....N.ZcZ..OV..\?}}:.9L..M.,QG

Chrome Cache Entry: 163

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1236)
Category:	downloaded
Size (bytes):	20750
Entropy (8bit):	5.471886129166343
Encrypted:	false
SSDEEP:	384:q3M0XPNhlV9mErXLBKTl/OtalGXujO+1vGcEZStk4BXTum7uFTea7eIN1tfOeD47:qc61hlV9mGLBQO4la2O+dtEZS+4YmCFY
MD5:	5CB1CF14821CBCFBAD41445942D76A4E
SHA1:	250ABBF94EDB1A71E521625B9D91C96E0D304CD4
SHA-256:	4438C9E0028612351BFD7324D2FEE5D085FB5BDE36C7D9B044CD0DD3EABDACC6
SHA-512:	92EEF54B8643C44F60826F9B2BF7BCD98A661DC2682B9310AA1B6DDF8035B73F65ADC9BB0785253B9E925B5014532C096C8087FCEA200D2AFB1E40A2C7675E69
Malicious:	false
URL:	https://www.googletagmanager.com/static/service_worker/53b0/sw.js?origin=https%3A%2F%2Fcloud.kdanmobile.com
Preview:	'use strict';var aa=function(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})},h=function(a){return aa(a())};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n={},r=null,A=function(a){var b=3;b===void 0&&(b=0);z();const c=n[b],d=Array(Math.floor(a.length/3)),e=c[64]\|\|"";let f=0,g=0;for(;f<a.length-2;f+=3){const p=a[f],q=a[f+1],x=a[f+2],v=c[p>>2],m=c[(p&3)<<4\|q>>4],t=c[(q&15)<<2\|x>>6],u=c[x&63];d[g++]=""+v+m+t+u}let k=0,l=e;switch(a.length-f){case 2:k=a[f+1],l=c[(k&15)<<2]\|\|e;case 1:const p=a[f];d[g]=""+c[p>>2]+c[(p&3)<<4\|k>>4]+l+e}return d.join("")},D=function(a){const b=a.length;let c=b*3/4;c%3?c=Math.floor(c):"=.".indexOf(a[b-1])!=-1&&(c="=.".indexOf(a[b-.2])!=-1?c-2:c-1);const d=new Uint8Array(c);let e=0;ba(a,function(f){d[e++]=f});return e!==c?d.subarray(0,e):d},ba=function(a,b){function c(e){for(;d<a.len

Chrome Cache Entry: 164

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	536
Entropy (8bit):	7.353378291297956
Encrypted:	false
SSDEEP:	12:6v/72LZMprc9lxSSBtnCsRWEtB2yZVy+p0mTU042ILSXCizeDk0aH1:RLwMqox98YVt42vXCiClaV
MD5:	2145BE318D7D475AF353AFD5C689F46B
SHA1:	9E5652EADE4E3A15B2173E1E9A43EE4354CAC8C4
SHA-256:	3B0D267B9F903FF5000F80E08B4CACE439FCCAA41DDFB38B9C09F4DEDF8FBD22
SHA-512:	17792466012F8053E947E45D5E19C0976CE271EE2E152E6ECD81FC3A037177B156A2A64DDD9B4BC299AAB29A8E09911EFFAD0A4B2C20DF54A737FC9FDF65CDA5
Malicious:	false
Preview:	.PNG........IHDR.............h.......sRGB.........IDAT8.c`..%.=..V....30N;ko..._6\.a.lq...DL?iS..............v....,....f.....)....N.Ng....##....C=X...Z9..,u..+........s`...~...r..Pf..].%.V...bN#......V...b....q.I.9Y.GR.....0......G.+-....^&NF...j.G.?..L~ >0 ^g.......?.i...........<......k...p.Cq..Y>......3/a`a.`..7...e#.?- .3D.. .g.qf.q....G.?.._.n9.f....h..B....C..G..P...v...~..49R....31Og....... >(..."....\.L".......?.\|.r.......@!N...c.^H...(.......H)<.....8..?V6&...q.0..?......D...."d(d....6m..j....IEND.B`.

Chrome Cache Entry: 165

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 24304
Category:	downloaded
Size (bytes):	5214
Entropy (8bit):	7.960781325339099
Encrypted:	false
SSDEEP:	96:PyZzttxfMcf4s1Dyq7T+esYhCglIJlpENULQMFHGSeATuTlaxkgR:QHfFDd/+es3gdNyQMJG6XigR
MD5:	A1E105953F3D53308B5DB88B1A59D65D
SHA1:	88C619DB3C118757AC4D6B42BD7D7ECA056ECF4D
SHA-256:	A7747B72DAA02B81EB905F98F81147EB89446EEA8E668DDA4734DD6DEE43071D
SHA-512:	E77165DE6D177E30FF0BFDA1D3DCE524BDCCD0CA606336D32AD17FDF7060A168012B86AD2E3C0ACCB6DB118DCE68F2E8F8890EE4A23125F8D27532308A9EB973
Malicious:	false
URL:	https://preview.kdanmobile.com/
Preview:	...........\ys..............r.{..i.fqcw.d< .J.)R!)yk..;.(..E.i,.y.8.H..... ..._O^?>.}.;mT....;....4.N.......E....<..\|..z2.C.;3T...@......L4.......H&..x.....;.N...$..o.w....o...s2-G........j..U.O.'.....!...1.......w\n}...B.....]..p.\|t~H..(./..w;_..uVp.....v.t..k..............o.....I....b..,..QUM.~.wzzj..\|....4...&..=..?I..$.D.nlNh..^..7...E...y......_}.~p.dQ....T ..R...i .............[..{5w...y.5....@....%p..;&6..g....~..#..GU.#.?...L... x...~..._%.w...y.P..q.i4...czf.&Q5....m_.L.h...y5Csl.;.Q.dC..'}..a1...9$o.s.<;:...>..&./.I.8....]..UB.tEuG_.e......W..%.$..}.'Ie$..97....R...q.lo.kvWL...Y!..(.?...^...J..gy..s.]+g..y..}[3.V.r.....[.v._....W).\|.zw9gCU.."Ah\.^i..............g..wo..E.X...e.N+.+t..<...Y...:MH...Yd.<....> ..3.!.o_O./Q^.r.5.G..b.<..$.{Jk0"...&..&....w?\.}.Xkt..0...!..9..z .....R-U`.......r.R.\.[Zj.*>.R.[..[...7..%..,.IK..~G.........s...t2..\2....3;2P3F+...07Cu.C..Iq9g.$!....`......_5x.a...03....>........

Chrome Cache Entry: 166

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	5675
Entropy (8bit):	7.962058734264919
Encrypted:	false
SSDEEP:	96:aqx2huWPb4lV5lwEs24+q+79RWKww4r7ykHgTEVIgJz53FqbExY0TAKOfzCKB3N9:aqITPUnwEs23q+7bWKUvykcLgF53FvYD
MD5:	485DB8FB6EABA6C11A5B0DBDE0A2A390
SHA1:	15E70A9398403C9A16C5F734838CD08DDD50DDAB
SHA-256:	7E1C062B6BC33962E13A6D909E52D5B2F353C06165A2C8DC8EFAA95C0ECD54FE
SHA-512:	A8BAD72ADBFA75B4ED6F6A9DBBFAC9D7C81D99F58E4363B3EF5E40F5A5A0431C64F678002C9B003B8E636A48719F780A3322D2F1CCB669E1096C8B2F4D16C577
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/2240-e0d3f8cb62f80b6c.js
Preview:	..UQT.~..\|.4R...?B..y..S..WQ.t..Q$.+.y=.......!...?....e.[...ebXBZ.xI...1"i....6...^@..>9.8......}...U-..4...>...bkf.Xc.&.^..~.....E&.6.........P!T.[.C......g.....)f....e..'..0vU.9!%f/.......~~...BS..4...n'..{X.."....K..@..j.a..,.j..6.....h.{..$KUj(..C.TJ......~x..CW..Q..,M..=.</..CS.,..9...V..(..^=>.[.......Rr.\|{.7....u..!Iy#6...Ku...7....k..Gi.uP\..`...2.Jn.V.E-21.......b.....VGfJ.e..%_.d.Af6h.a%..S.......z...#.M._.9.l..}i]iI.3h.7..\|..S.."......!..9.....A......;..O................J=......FWc..Fq.9...$...(...$k.`~3R,G.}<.J"....g)M...U...iRX".A.hYR.QJ....U$E-#.r.!....+.o......bm}.#.. ..."_.'../:&.tY.]...R_...d...........OU.../....9...OzE6.2.6.[......V......E`%,.K..h....g4..G..).."rQ".....V-...G..4}n#.n..f%~I...%.?MA.'+...F.t$(...K.S.q';/.QV.A..'.k8.(.X7}.Mb\....C.dW...6F\3.....wW....UFPf{A(........#IV..d.}.....X.@H..O..k..8.W........ZP.Q..%{.H]...+.T..$R.T=f.&..`.W(..\|..y.....$.G.B....gF]h`AK.....\.B.*.....^.#u...y.[....)..B.L_...A

Chrome Cache Entry: 167

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.440074751043314
Encrypted:	false
SSDEEP:	3:kw3dA4jgWYHJiv3dA4jgW6QfpXD3dA4jgW6Qen:FtDjdYHJwtDjd6EpXDtDjd6h
MD5:	7C3F7E060745668041278118C0BB3D6D
SHA1:	E639F56695B3CC30D78DCE7A0084AA8299A1311A
SHA-256:	DE5341313A4DC5D982CA50AE4A491E84BC5E80B0F439D87F05FC3973C1B7E59A
SHA-512:	B12A692EF9BE5857423F2DF563B986E241F7161573B5A7F23190696D1B0A50C5DA453C7BD35641FE61695B459D0A7D76F8053A8E0E0CCBC6811F800AAB1532C6
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/sOG4OPYnV9fV-ZrkacZ6k/_middlewareManifest.js
Preview:	self.__MIDDLEWARE_MANIFEST=[];self.__MIDDLEWARE_MANIFEST_CB&&self.__MIDDLEWARE_MANIFEST_CB()

Chrome Cache Entry: 168

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	5893
Entropy (8bit):	7.9637703515544525
Encrypted:	false
SSDEEP:	96:Nm4U5fJhN5rGyWdLUKHf32BsUwZc6TZoRCzrnnrWloQDWMNwyCJkKBMTgOt:nUVJXpBsUwLtLfKWMNUJdBME+
MD5:	1974381D74352121B6B897FC8C6746DD
SHA1:	02CEE41DFB8143A56D35FC9D9B598635F08EC72A
SHA-256:	C0183CADBD0272B23584AD42C586C7BAE9E3D4D334C2F60F26E2FE076EC464FD
SHA-512:	34000A2C0C300C2E91A22882040929776DF115312EF65B1F01B47273620CC68EF715691078ECF9C496F849CE65476A170770E1F375B522A3883F5009D1178DA8
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/pages/index-1d864c839511f30821c9.js
Preview:	..fDT.z..!......h.ti46.).&G....<...r.[6.[..2.e........K...T.7......N..E%....f.....j..$=." .3.(.0..._@..".C..CI.9......eCS..B.(J.6f.X~.[.1@.H..{g2......}.....p..y.k.(7Yn.UZ..mf<.#G...W......4x.X.%g....{.z.....1A.3.+..."..E....C..0:..+D@pE.6..k...2......"%"....W'.\|.\|..j.t=.u.L...8I.-.-.x....).y8..l2..f.......M.4....A.8d&o..:....m.....O..\.T.i...6..V.u....s. #.1 ..,_..z..:hn(.D!..<OR..c...G...0Idd.>..g.n..ye......I@.7...q.8..5......i..-...Pq....3we.H.9.I.}QS.S.A7_;.MN.8i..8M...\|V...l...lK...Tf3.O....^.....hi.3..qd+...(.&.L..A@D..j.....'.HT..D....K.Q`..\e(..f.W.........tDU........#.T1J.p.;a...I.!$.T.E.d^da.Y..3.T....l3.%.i...u.e...=..[a...B -r....3b..L....r ;..m.K..$ .-....:G..[.(.......-!.......v.o..s..`.k7\W..>.@..{.\\Us...!uU......lj....F.....#w.N...}.i.. .?.qA.....Nk@.i@.Z.ve...a.....r.s.Lv.....HN..2.q..9.E.G:..[.)B....-m.c.2..>.S".9>.,ny.s.xv...1..k...j...&g..V.!\....=.O;.ws.....j.a...f4.qv..e...,.g..L..!..[.a8..LI. .....0.b....

Chrome Cache Entry: 169

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 26581
Category:	downloaded
Size (bytes):	7518
Entropy (8bit):	7.97079696455204
Encrypted:	false
SSDEEP:	192:ybBJFV9KcuCbrBQ3VPCR/MK1gYxnvJAzLxtKSsY:2BHJy34R/JpVSsY
MD5:	45D4FFCBD27A5F48EFE5F00A34A803A9
SHA1:	92B8B980435D2B7455B3A36B747FAE9CC1E43A59
SHA-256:	1EAF046E758FBE724C0B41FC37E081FC53D0D1039EA4C0765B39F53E9543E9D7
SHA-512:	D412B71336DFF6335308FDF2334B2ABBE360A56DFF297CB509F12C7CA5B542A22ADED393A4BB2F542BB265119877BE4BA0A6B12DD4C7E44F47A61E901A3D6C9F
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/294feeee4aaffe8ae2985fd34948f5b4b2984fbc.defef7526d7d60f6eff3.js
Preview:	...........=.V...Bt.d.A(..L....C..[......@[......U.......sf.@........y`..7..T....z.....nsF.....q.oo..w.h..W...Y.+S5R]e$.!]...2"..'..i......%E.....DQ......C..i.\|.......#)...V_.XQ....+.L+.m2<"..Ka4.....eR. .O.I5<..\.Fm...+U..W....4V.[.!.+..z...........['q.5\|/.p&u....G..y~...(..H...........c.>.#.3\1<7......A..V.].".I..~c...?...\Zw...X.ST..iD3.J".kS.Z.a3C.2B.FM...@...X6.f..O%...Mhf..0N5......F@.8p..oe.y..S#...(2t.9..c7.t..\.......-[...j..QG....K..%..00.....UG^`.^.+,..d.D..d...+..FF..4.WG}.D.A......Da/...2.$..X...P3i..vt.x~..ql.%IM.Yg..0Q.....Pq.4.....=...g....0.....B....G..T+._.?)I.D....S2~m".....O......j...;A.Aw.CB...-V..u....O..b....{H..UH..&.........!..c........?-..B....{.#..L/....]V..mB.........>..C..i.<...@o.l.O....H...-..Z.(..Xmg...0.`.~..c..(G.u....$.......K.R......o7.b...../......+..j.....+K...a.A.-}.b,..8X.~.{6....9\...('& ..]V.S[..............}...+....Y+.Y..p..=? n.....R.Uz-..W~Q.:........H.%..._3....S..3N_..i.a}..%rW

Chrome Cache Entry: 170

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1193
Entropy (8bit):	7.824122628345347
Encrypted:	false
SSDEEP:	24:rzsgda7qBoLgC2v1lhFe8wBhGM/3/9yWGz53wa5X1h/szx3gW3P58C7:/XvBPXvre8wv7NGXL0zx3Z3B7
MD5:	D321CFC14F010C181D27A7C642DA58B9
SHA1:	5C981E30E1584612962CB65F8AEF64803A280676
SHA-256:	113EEDAFB2E9B879E04847325E39DE1AE7B86CB349449AB87EA115CADFB4B773
SHA-512:	B330CA5555F10D4412C6B2B38964A1D5D23C9A91B2BB94262989573D364EAFB86C879A9BCC3F9CF22D3D9DE55F56CC64AA39A8BB39DB494CD7ED1E983D756208
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/webpack-87509e60941eee2d476f.js
Preview:	.....o..N..w..\|.k....R4..3....\|...c...".....9..6U..m.$i\[.&i!....%."Ej....p..}.=!..X^.6.'..y...=.^.h(....R..x#.3.Cw..Dzlw.Q....a.%...Q...?.)...7i.4.E0..206..Od".;D...a.....F..(n.0... .4...x..C.b....;Ri.J...y...1...3..y.e..o1....;)U..C2.>..h..S...,..{.....S[...1.h[.50......<..a-.R.E....+l.].t8-+FZT.V.~1....:...AL...........h.m...(.j.Uw...rz[.Tfg[.0.3.]E.._...=MoKd,m..u(..,..."-."@]...0S...y.T+..x.)R..}3..N....@..l.H......M....'..D..C..f..D#..z...FP..;.z.E..K..QXd0..l+.!.cA. ph2;...-.V...{..c............J..xiFw=]kwu...r..Q.jNF...c.;W7ge.X{;..[Q..j9..u...k....i.w'.X.[.q.kk..I_.{....Q-4........\..xR....@.7....q.V..S.....N.h.3E=R.`le....45.s..%.D.@.1.:...%I....K.......e.I.2.....vFR_6./Q....v..T...}'.&....PA..JW ...&....f{.gX7....G.....7b........;...E.I,...l.....~X.W........m....`...^.=I.. .....E>.."..,r...0...8...w..N.,....Ne..m...j.R,2...k.......lt....qb.w..=.....-.q.g._.X&..@.y..`gQ9.U..f...s.,.....xf.9.F'.%.p?.D..X.2...\..L...!..

Chrome Cache Entry: 171

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	650499
Entropy (8bit):	7.9583388574979015
Encrypted:	false
SSDEEP:	12288:uxraJIE9LMUiPSju2H5DZeYY89RvwfrlgbH+YVqxC1uAFLcaNw54vtt9Z7ZwortO:uxiIKwUiPSju29g8zwfaeYVoHaW5exPM
MD5:	89015895F8566959436F9F3069839998
SHA1:	4F1CBEF214EEE2A57E11E030B6DF98AA7A49776A
SHA-256:	1AE1787325246644630A841D5CD3E3F38F748D8ABAE1828F62254F86F51ECB10
SHA-512:	BEC81E3572D430E7A39125E6AE73C5A2F3F6EA40D29831AD2C4DFEA2DC993680A265E715768D0B92BFBB9AC6395BD6B2B7211470A70ACFA4FFFBFC7C3CC56E38
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/pages/_app-37ba75ab926994ee.js
Preview:	...W1..<j./.C.:.....@..xk0.....B@.I...P.!..{U...........................................'.^.z.../.~..................D...i.....xYa.Pc$W..P.{..j..+.nU..T.=. .c....I.r.....%..E"...$+r......wB.Y.s...I.."..(.@.I..VZmE.......i._.A....?.$...!i.i.,...,W..+..l..]..._.I..qJuvp.u...Y..;........k....{.k.....+.j..3.W.J..V,$V..'...[Z)..L .b;.g.\.H~.2......\|u.Q5:{.\....a.'".Ld..!..L&@....w......"#..L ...h6H.....8....W...f.Z.....V.E....q<Z.r.Zj....[i.K......M.v..3r.I9R.._s`...;"2S/"3.).L........@..>'...U..L.ee..B....z...$v.l...'e..1f2.......H..].._6.\...].:.$<...!I....U3.j..s.......f5..9.>0g...F.:.....?U... n~..m....._X..v.j..o...X..s..7;.t..........9..].....H'I...].e...j....A.I.y.....)..\|..s.u....`.j4P..G.`...j..4@.."G.A.,.4..@.c.;".^l...6l5...........n.m.}.E.....f.vg..0>...).u..~....H...D.`..D\.o.>..d.8.S.o....x..y.r..5+...HwX..3........D.(m..=3`..C.<..9s..6O.-.{c...(p...K.m{.Dc.....`.....6...........:..S^..[.....m............b...HL.1.~..o;..H.B.........

Chrome Cache Entry: 172

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	3160
Entropy (8bit):	7.943150278893823
Encrypted:	false
SSDEEP:	96:G4j4fAqyzanTgmc+flv7ZSpj+qBRrVgBzro:G4s4qvcmpSESraBvo
MD5:	A61E244A497328B31F85F650B3E814F2
SHA1:	3E065CDA9741106C49AAA3AB7C8B34128E84D4EE
SHA-256:	1ED3185C647852B5B528D44716D775C62B8230658693869DEC0E39DB8E8A1C8A
SHA-512:	3D069ADFA36703BEFDB8B3E91EAF09B486B339D6B0AE36D38707A79D478AC22C7113FCDE9CF1ECBD1D085C3B3D9162FC8FCF9C862183FC6A86A9C027A255BC1D
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/caac4c03eb86e934afd67821b04cb9b251ec469b.c13b7f3e36c7bd729676.js
Preview:	..D...P..s_..^_....u#..Q.....{v..u.d...........f.... ...m/...^.4.....) ....@...&....j.....F.!.\.._......fn&{W;n. ?.RW....~.Tt.Y....:..-.1.........p.(.:.....9Ka.~..wL!..iRR._..V.7R.../..i..)..U.g..=m.7...8..E.".g.&.-..N.=...#r8f...v{..Uc..b.?.6.c......$.c...5.!...q.L7.p?.Xx.^.w...s....5x..c.<)o'.:7..:..(..,...w..xC.eg..k.6 g(...9......7....hX.Q0...G<..)....$...G......7`.u......v3dm...WX.d..#.v".8...}s...b'W.....d.N..b.JH....-2].t..t.{Q.g.0.....i.\|...~q.B.r.[k`...!.....T.... _..1....#...>....4......L>..j&.V.+..L.....l7#......3...b...j[. k.k..x..dm..TB..t.-"..}C..6ITd.m........\..M.$%1.Z.6...fCa.V.7.............-t.JxlaO...4.`.R.LK.k.BHs...lJ.....J}.......)mE.....a1.%.R........1\|U'...... .P...*U&a.ix.Lt{e.......J......W..lTc.....BC.U.Wi...ZP.u..z....j......g.D....\...E...\|.K.}.F...u...7...l...%...B....D....^..8.Y.\|.[........I+;7u.%.q4..&7..\|/..-.:..G.(..ZH.:{>s...;...S....@..v.....t......J..z.....Pp..G(2...yG..uI.....lW...1.b....r.....

Chrome Cache Entry: 173

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9836)
Category:	downloaded
Size (bytes):	254711
Entropy (8bit):	5.461937016272475
Encrypted:	false
SSDEEP:	3072:qogVPCQkGPQGoKfGpc0vMp8r/yBNtaOR4JXchAgs:aVPCQkGPkpcrk/yBNtFR4JXchAgs
MD5:	42523A00EFD868AD0913C5702A312E90
SHA1:	601EB40797643BDF62DD6C388D90F4DFB2E4066F
SHA-256:	6F591C61FBE6065AD9DBB31858B408C45D67B62F88DAD10F7A960BF9177774BA
SHA-512:	000CCE72A0AC5BF7F34724CFA297A5C2DCFA85ED25E8966044037F5BF751852B978312CC1A317F1E3291E2C2FF095C4B875F51702C31EF936A0C04B49F0BF5E6
Malicious:	false
URL:	https://connect.facebook.net/en_US/sdk.js?hash=d122542073c4b9e61ae69896ffd98e9c
Preview:	/1741781635,,JIT Construction: v1020818435,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 174

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	10542
Entropy (8bit):	7.981374714799249
Encrypted:	false
SSDEEP:	192:512Ik0KKVyKtOp5BChzPF9Kl/Tn+mLsELcGvGBD1vv2f36JVkSgLgBpFmd:51fuK7sp5BEhMl/Tn9sSEMiqLqpE
MD5:	E89F2F7D082402B9C3052CC5ACB43C6E
SHA1:	B08F64FD890C14A3A06100672C1C1084063240E2
SHA-256:	872929CE1B7C3E09401AFB227E284464AC7820B50774259AE075D1239686F10E
SHA-512:	4AEF46FC05CF7BE72A29B26A478B53ECFF5F1D48C3B4F804E2ECA127B49BD54ACCA2337F23CFCA10FDB2E0E04FC88E904066E6F65AACDC070D3AA449BD321F22
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/14f0540936a9c5595654a15672c6be3d0589ac20.9377530db9a095983195.js
Preview:	....H......>......._P.T.9.....z.i..E.....,QI$.....WM. ..b..Sp.r..Z{.}.y...~....8....0.mi...........P....d:e9.....n.uW.!.Wm. .:.!....O.....:@.j...w.....`.......A\/~.9.. .9.....R...?B..].{%l....w.h._B.<X.%...y.O2..f.M.5(..\|...F...L.Q@.bl.Z.{.L$.i..=.....Q..?.4....-..@.3.F..\|x..Sk..CJ...F...<...r.....1..K..R..].r...;..~..Q6.gl....D+.ds.....!...U......]..i_T.M-%.R?!....C..............I..w..F.:..jf.,y6.......+...k..q..,..O...^ +.^........cm^...m_Or...Vuo..)..Ox.k...K>Z.....'X.W..A.K....H.l`..!#7..^....9..\|.%e.........}.......A.tN...}zI.....QX...(....7.Y..1.J=(... .......s+.\.{.`.....vk;...c.0.RV..!R..n`q.....s-...Z.....iG...w.....g.,.........{3....4...w.GJ.#..zmP....aX.;C...9.HJP.#...A.\..&/.......60.Y...M.Id...rS.R.T...q.,......i.wS.0."...}.wv.-.nZN...dE?.w.3}.Q).qZp....J.8.6...;.j.~...-......c_.....[...d.....!........Q.....Y#y.."-.f..h=.........B.B......Z.'#.aB..f._N.5r..=V.k.Sn.V.l./....b..6.0....f..+...GA.....i...P..;z7.<R.DG..}.y

Chrome Cache Entry: 175

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	23927
Entropy (8bit):	7.991045414471618
Encrypted:	true
SSDEEP:	384:81d9JqeP9TFMTsxc+RN2JWFm2NVbRG9/XXUqgV15LBUR+tRxWnogzHJbEi7fF:49Jr9JMTRTOmOVb8dUqELBDtaokHb
MD5:	F95344050DE87A82522B2CFF5D6B6F01
SHA1:	30AFED413C9193A4AE046A0A0355389CC7A1FB97
SHA-256:	40D0D98D49A4505E5819B1CE2C022A000A8DCB57B115DF8C03FD230466E9DA20
SHA-512:	440758C117532AB0DBFDD1001CC60F66A29918DC5861F84D8BF3584615BD8F33D2E3C38D6AA2EF4920F4805D6DBB12E51240F561E95A5484DB7FA80EC41A3CB7
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/29107295.c3f4e27255de18263d5a.js
Preview:	U...Q..!.H....HY8....7......\..[...u.fp.n3..a....j.cU..o....7...R{.r.z.........&w...H....,%....eZ.+.UY ..YY{r'.....u']..{..?.iJ.e..U.6.@P[......l....;3..(`&..;..e....{Z.2.l.c.G.t..H.c.:.u.c.%......aj.W}.o^.R 95.'5.......+.7.....&6..]Z.<...R....0#..H.rC.C$..KrZ.r5...X.>.#....0.D.}..p.?...D.FE..0.F....Z...K...J.K"k.f.b.9..\|Yfq.:....@@.{h6...1P..G,....2w.K..b.>.2...y.!.;.............L&...e\|....M.....0ca....\|.0......N..O@oM.ZEl..0.%.)..\|Y...n.\.J...p.#0...D.....b. \|..QkO-......#..U......i..r)b....G..ZD.....)U......D...W...a].(...]....H..D.8[).~..v.Z.oE%..k\|+..5Q.]\|'.=....\.O...-)....'......j..:..,....t2....5.2.=..e...3.{..'R....;......g...Uv}..`...D..,.W.s .\|.3f.d>_...Z...^.#8$..i..iq.^....\|.8...N..WkNi..\...0H..o.f...n.a5n..Mh.........D...Y2.$9...V..x.^............w........r.]]].\M.S.V.C...K.h.!!t"J...[....Q.E...R..($.O.~l.m.%....;0I}u..xf.....L.P..7{...<jH..F..9....iSj/...7...mm...n.}o.K.ri..Rz?.q\.6.*.+......#$..v....7.ZM.7.L...6.i.e`c..a.......U2.=h.

Chrome Cache Entry: 176

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	38355
Entropy (8bit):	7.993574403680285
Encrypted:	true
SSDEEP:	768:zvfYW8va1jrfhM8LEtQE+3CDVxwF8Y/HSgNLIrvx6d/KSxin0:zXYWdf5lI+EeCwiG9pKSsn0
MD5:	97CF412914D736D9F423511654F07C63
SHA1:	66DA574839C1800DD0D316F22223C1F53BE32B12
SHA-256:	EBE795B37998CA56EE1619ABABCDB84526B876D34207D4D631B8A0EEEE72BFDD
SHA-512:	A6A5C476A89619AF914CAE9B99CAC35FF91016EF685832744FDC6812EABFF4840C18A7BF7A2A07ECE60CF9604996AF8AA3C8F5A4A4E7A5A13B92DB3B0F1A1640
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/framework.d5de68f984688a408b25.js
Preview:	U..A..Jm....q...<........5~Y..p.QN.7c...dl67.1eP#$Z...}..).nX9.O:..)oO.a....^;...H..&...70N.Y....^..w7._......\7..?....zw;}'g....:.7c..)t8.5T..w...,1M....p.~V...D.9..P.{.f......a.....Z:.w..b....Uv.... :..L. \....".J...w.......r.}..aw.[......w..8.\|.W%y..2w~..o.....D..R.....G.k.La7....[..7..n......a./.J.te....B.........%...OmV.'.kE@.......+z..&K.8../2G!.......(.@.h...$...6U._2 .X......(....9...'....<.2.M....\|K+n.0...U....Q......x,!R......a.E...v.;M$D....N...}u...f .C...:...k+...B%i0...D...<-..9.z..<3R.n^...1..L6.2oa..JyR{w....,Co.....>.W8...Y.:u..9..*.q.d....5..-".yf....]..w....^f.ID..e......ij.0.V._F..N.3.5F.:Tz?..\+...w......6:....{.v.R1...v.^O../..<.3.E.Z.......x....w...}J.C....x..d.i.J...Kc...F...7..wa1.~..{.m~.g...{p..!.f7Y...F.........5R{......v...aq..d...[...gU...2....._H0.k..E.@..5....Q7..1o.....nO..W.i.4......5.......h.'$.cY....-.N\|rr..B..I.N.......U.D..L..G.]....;:........w...j.T..#...,..Tc..P.\!@..I:..f...P..-...%.....

Chrome Cache Entry: 177

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	59650
Entropy (8bit):	7.996267704312814
Encrypted:	true
SSDEEP:	1536:O4dkmS9ded0pBbRCAYdMaKtk5xeoKQVYuCEt/qH6W1hBRzS:OSkmS906HbRCf5VDVQRD6mhq
MD5:	D61360F790086461F86ED1A9819B4EFA
SHA1:	999CBD01C237AAF485406705F1599782A0FE4052
SHA-256:	245E83F488B5E3580BDD730CDD224E7D8F265BC7F54AA4066D520C424F939BD6
SHA-512:	247BE8092C8B28228461CDBD79E8EE39E0E4C71BED8DD29C97EACF0DFC436B284CD5C288F151B8F05C1B02AF15F8D29D9223EDAB2FC8C1696CBDAE672281467C
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/071799227321494732ed11b30c58eb6c0182a15d.9391760ab1c58e80fb13.js
Preview:	U..3.aV.{HDu../3.z^K{............l..\|..?.....]G..c...9.O..6m.hH.r.\a.`$W.!..^....N....Yf....e.ci.7V.;.M.E$..a....e../qrlH..e..N.M.6..-2z..!1....k..{S{=,..dg.~"%Y.I.z0...~..0....}...}...U...... .]`X.@j-P...W.{.....j#..HQZ....).S....n.4.`*..id.G..:......g..2...L..S.8wZ{......=..\|.....2.3..nU...h6@....T........YE.P...H.P...8.../i.....0..&.x.z.=....Pi.DE.<....hu.....(#_j2.?7..t.,..1...W.df..L.=...........!...,C.}.9....R..(.$!y.cV..g..4w......XTZ.n.......b...w.1K..?\|".WO......~G.@....8P..+z...;....4La....!.+.>_...@..@......=v..saou.T......~..p.)..~)l.e..c..F.....:....b...\|.....w..?.............7.mt.....~K..Dc.^V ....=...v.(.:....a?..k..m..M....K.;.y^.F.,...(KVx........8\.9....y.....@..X\|..A.q.u...e..P\|T....jUfxt.`A....V...VF.zJ.zPI.F.}..UG..7A..J+...m.b.K\.R.u...TP..V.......5.!..>...J...Z.g.....a>.#..A.m.N_.Sj..j}%..MD..}UZOQ?....r.:..b...lP.\......y&M8....4\|w..y..........K....`...Yd.....RXZJr?..k.S..~}V.v..U..z1.....S.c_.`....k....6.$.n...}.z

Chrome Cache Entry: 178

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 179

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	154
Entropy (8bit):	4.535303929616118
Encrypted:	false
SSDEEP:	3:Tr09rrHnCDM5PXfA6xOKX6Jq097nNVFEsvLSAoMLFmmfzA:TrIriDMflfLYn/FEszSAoMbfzA
MD5:	677204FBBB8E6137C57A1380ACCCED18
SHA1:	8861AA19301EC8BB9C7CDAEA4E67994DF612B8CF
SHA-256:	3FA204C4167D6A03DB9978930F35946572242EC9491C09B784436131FC00D201
SHA-512:	80AA1CC22DE663978C3DCD0C6ADF9690D076E7D40D701B4A69A3F2B8B6112FCF392F8E67919CFA1E6FB321CA445247545FA016966FEC662A39D47688EE95631C
Malicious:	false
Preview:	{. "Default meta title": "The Best Creative & Productivity Platform",. "Default meta description": "Create a collaborative workspace with Kdan Cloud.".}

Chrome Cache Entry: 180

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	2942
Entropy (8bit):	7.932425510922283
Encrypted:	false
SSDEEP:	48:Jh5md380vTxg671Zk6QtEFQ0tm/OyQoKo4RgpI0sIcEjB:1as0vC6bkpEFVtm/OQR2zGB
MD5:	5ED6770FA58E6D4BBA15BAB25A347749
SHA1:	12A98CF36FD027113AD675C6C0EBBD8E3710D579
SHA-256:	6040DA5C196C8DFCA8C8B94477279C0E49289C6CEC016B1F3D5D783E095C977A
SHA-512:	37D09E7188043E4E848DF7D6A1C145414F345F2E0EF32C13FB05237E6435F84477EF3F534109E7CC957EC32FFDBBF46CA5DBE017B5A07AE6D1D1B57A96C8CFC7
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/3966-8aad12e5cba5b3f6.js
Preview:	..&..oo..._e6.#M.q!.r.e.Y]1!J.!..3....f... .4f..)):7..{.......X.t.5.L]MPW....7K..V..O .W......iW..Im...?.uf.....L.=@.../[...t..>.s>....)...^.....<1\5...HXo..b.X.....l..D...d:.a..L.E...,R...."R.L.i.....c.......{...G.<..(@.r{}.,.d.XU.yO:..TG..V.....G..w{jM.../.a..ob..J._..3o....$..r...~=$...^.p....q...J.IsW.R...........s!.s...<..9.SPK.yNY#D.s.n..].D.t.9.H.~=V..E...#$:$'H...Q....p..z(.. ...Pf.........\u .{$k.."...].....z.%M.KO...C...E'g.?.y-#m.s.u.9Y..Q...... ...].f.........E...8....0C.)e...NB:G....7+..)..E..L..9!.b...O..t9..........a..}....3.se.L%..cw.....,+bwQ.....wP8...t......i.?...."..)........E..,..L...'.A5....~.5...b.8..L..#G.G....D-....G....r..g..[..,.....;n...l<......l.HK....h....J..jS..5\|...JD. .,.N...:..."(.C.)'.._c-..Kx......Z..(....Y.t.0.w...t.90..{.u.....2..<r.....R.#.>V..c<........HH...m.OR.=....V...F.(....r.Q=......$.4..A..G('.?nID.'..".Fi....QB..Y...A.ZG....F.r.....U.D.....'.2D.P.wV.AK....,..zC-..^.7.J...S..*_(..\]...]..7.,

Chrome Cache Entry: 181

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 21836
Category:	downloaded
Size (bytes):	7280
Entropy (8bit):	7.971400010032781
Encrypted:	false
SSDEEP:	96:tOv7FfJWkeZSrbGfmr1/6a1jTQL6zodjR6iqI6ODnCg+YbEtdShhaLXmIOuc6qlb:0xEkAULmlbvgYGQ2XmDuw76kHrjNQLW
MD5:	B00F2DBB248C0516557136AC47F29E48
SHA1:	065CAF78CE0E9AE24FB6BDD624A7BC4359976299
SHA-256:	B222CE209A4995000CCB57B775CABC388C7DAD311DE92F625259509AF25406A6
SHA-512:	51A1BFA995079CD9AB9CB76A9636CD9243C02D4B379ED68A5F6C248323F4268FC4E72390D00A40D20CCC74E0136837F81846C2F1F54BB9078EC9D4AFF4111986
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/pages/share/%5Bviewer%5D/%5Burl_token%5D-4bc4a5298986c52a.js
Preview:	...........\.w.H..+2;...&<%@!...v..'Iw......%P..cd.o..V....g;.EQ.....[U.Y..+....]./6.....zwwz&).M..OO.j.m.g..q....7.,..X..X.....A..H[a...,O.Y.L....J...'.,.......K.4.7).}.V.!=.....7..g.wU.>G!Gr"......K.T..P.S1.;.5.3/..o......'.&.gu.A..T..}1..w....L.....b.]>.w....b......[&.M....I....sq..Ix.![gw...o...6t9<.L......7oL.....66t.65...>.a..y..V.Ly.o..<I..S'..PY..E...<.3..r..e.[.Ko!..@\.sy%/.!?.....V...1F...Ddb....v&k.\|h....e#..9.0.....X..#M.l..8.y.k..8.uT...i.a..>.W&...G.f....b04]UU[5...#..P3!.C3L..d...X.......6...a.Z.4....!...6...T......i.4.G5U4.wah:...&.l.G+..b..j=0.B......>.v..Y....#.yC..+ g..F...Y.J8f-...C..9.....p..8h....40T.....>.W1...acC.+...........h].$qG6l PI.....p8....6.......0U...m.]....F.i.+v.......P..{...ah.....H........(N.. .JL.5s4."...K..@W.0.....tmc.P#...m04.I(..Cr.aJM...4.:!.Y....i.ag....$......j.,.#K.}R..V,Cu,kT.l.O.'.w0.....!...n;P\|..1.J,.......r...@Z..T{.......66;@.@.....u....0...5g.ta....H...v...&..3F.i... }..S.

Chrome Cache Entry: 182

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	8528
Entropy (8bit):	7.976102832074506
Encrypted:	false
SSDEEP:	192:yhFpOs2ZfWxrbjdMF9i004YdCpb89qdHXd+:yhFY5Sbj1009dQ89qdHQ
MD5:	D58AE4D02289D698326CED6037C6CB41
SHA1:	596A49E4CA665532CC9AC405352CBD874C32FD2F
SHA-256:	4F82F1CFF08D0E3F2E736241DB1DBBF27DE4CDDBAB2E1DF118FFACD7B49E50AB
SHA-512:	55BFB0DE6ACFCECBC3597878F03735EAC661F3ED69D860BB2A5D58E5B44FB26A71939B3016E1BE51FF35FF1D67FECD49BA387356679E0BAFC9AF861E6DFD145C
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/3169-73346b712e988911.js
Preview:	.Zd.HM.....>....W.....Y.i...2..;L.8=}&'.cN../......I$q...2......W.6T)....sAJ.....3....T.@R5.)...].....`..O........q>...2E.]vI*.....m&.c..:..V...`.Be4.o6..SEB...v..0x..c.#.=..a.e..=t.....[UU.eE..y\.sq6...9.........g.....B.yV,"........I.....".j9.t...y..q._.\|...~..(......g%....a.$.A...l.a...,..t].8).../.,.....Vz...ud).b.8.2...~..'..n~.w...o=.;......3..Y...F....u..:.....u)....O..q...K.=.4.5.z.LG~g.....SjrO.F..dfZ......{n..N.k......ci\|6./`PV.^.@^..%.;............T......Q.3.2:....).,.T...g.L. O`.4..........4....#.@s0..... ......8)$L(P...6.M..=Hb...@LJ.IrB...J...6....xi.{sph...5g?..).7....)e.25...\....3...PFq`....C.e.".F..8M..R..0t..q.:...;U7M.#[C.#..6.Sz....#J..p..s,Y..H(..^..^o....Z+d..y...zv..M......../g...B.tP......F.-.G8..9.G` ........AZ.h..%...P ..6..n6(Q.\|I.(......P3.fK.L1etv........j).R.X...<...x......)..r....AW.?..)....r.@.G.t..D.....S.?eJ..23.s...ig..n.."C.o....y.".N........ ..I&)e...<.u.....b.K....'..v..Q.fEa.C5K.y^..Alj.U{=....d.".......j..

Chrome Cache Entry: 183

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	7209
Entropy (8bit):	7.977715250572881
Encrypted:	false
SSDEEP:	96:rqyC+EpLIEaQBVunffBzpXOixUI6H1/ZE1Vjnq6j06FS3D0nwhR6Fa+B8D9gj3+i:rqj+gLIaEOWv6jEO6ugnoua/ZCphaK7
MD5:	6761ADE244F945EB63F814FFAA9440B0
SHA1:	511ED8D49FC0BB9582DD47C27D0E830C615276BA
SHA-256:	A9239DC5E02B29C829A62CB31C3A2C8BFFA1CAD8E213FC891361C9EC7652C9D8
SHA-512:	63925A6A9BAE26DAA2C74222A95A4636826263579EE15C97BB40B0D57ED9F9D57A44C872202B17E9698C46DD95C037F75A31C9E2D96304F30CE52D7EC071FA6B
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/6653e76d.80e07f1fe80cf82684b7.js
Preview:	U.c.......q=.y..S..w.\iR...U.IB.....e.p..M...W..K.3...$.2OO.v.n.t....@.i.=Z.>.GF.S.0.....&...G...Ha...... ...\|6.:.R..^...m.k.......EE.."..+w.........g.oO........X..?}:>....^m.u._.W.mO.....v..H.y........898...B`...@.....$_....M..10`.....6.!.#O..Yy...d.Q;H L.A...g8dr .{p..i...g..k..!.O!..7.........s ...~..I...{.%...g......<.....BB.0..m7R_(..^.?gy.....n...}.....Qu..N;.......=....f.C^..@.~.7^A....^.)...{........9I...MG.b. a.T(.....F.[)O..O..)`......B..=....).<....@..Ww..OL=.A.D!..9C....^ _........q ...$....q4/..+...b#.\|..$k.h>o-..a..z.s3...Q..f.[...+....[.OK.~<f...iE. h}+UR}..*..`g....@<.....49<.G.;.N.j....6~.9.......@<M.Dk..[.....G.......N....aa....<.....K.t8../!^.:}(K`x..,...g(....4..F......RI..C.>. .....i......4..X.y...........>.].!j..Kr...6..i.12....s.M:..IXBFK..U..k.4...fl.j7..7.^.#.....s.:...T3...K...=...m.2.'C.....;s.\|.l.o.H..]2S.s.D..@.5\|#.g.V.1..s&%....D.[r;..........a...m..^).G.b.x.W..Y..7tR5..9.........t.S..?.O.R.`...r..o.y..}.Ot

Chrome Cache Entry: 184

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 185

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=70022&time=1741782535936&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA
Preview:	{}

Chrome Cache Entry: 186

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	6588
Entropy (8bit):	7.968670906764139
Encrypted:	false
SSDEEP:	192:gzoyq97xU1RrhtaMFO8p6VQL1pVReDoTYPpWKCma1fh:g8yq97cdTFgQ/Nq4K/aZh
MD5:	789F62D6D58A728631A8C08838CD4DCC
SHA1:	D32728AF46F237AF5E7739A9E6C45B9FA784960D
SHA-256:	515EA1F56EB7109443641E7925F724397D7720B12804C7A4B404667803065ECF
SHA-512:	DBFD18EE858A386FC4591BB4B0479C3B304C3B2DA3A7560D476BD6030138BBF3D3D9C185B7CD914DCFC7A902B39EBAFEB61B69D831F8D002B2F67CA8F066A9C9
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/aad5f160ac3d92dfb7b1fbf3479bdc6a3f027ca3.aa22e3f4aff99774a37a.js
Preview:	..V.HM.....>.........U.mI.$0v..+.p...\|yY.J.z\)O....e..T.c...^n.ec..r.{....jF.[5Z(<......tK...=..!.. G....1.gv.^.7qi.KFd.e....G..m...h..Lmh.............-l......:y.p{s...........].~....)..h.D".T.X..F.>H.7...q...o.;..mY...N..g+p.^...z3.....g....3......<.d...1....[.kw..8.`....$.....g...`s..$_.M.\..Y.D..-jD....f.....i3...&t.K...d....?^.L.3l.`..6....2..h..n.ZS, .=..x....A_E..o.._.!n.........TFy...M....C..2S.meb.....6..B.9..b..\....C-.+"..s.m...&..X\|..s.O`..~`.~.3.....e....M....f.g...^\|..D6...v.j......#..As.._.;..U=u..4EV.=M.S...GXE.=0.7..(.@...EhG...V......)..e.&e.S......{.C.B.....$.{2..S..G..L...<}...........y....7o..............O.....0.......b[...."%.gH....(......a.=.no7C.s....].[[C.......I.q.g!.@._.yG;...7....[\N....p.7I.z;..4...C..O....,#....f..C'...GE.F.0..A..e...v.P...0..j5K..,wR.{......Y.U?A...b..3../.h.m.^.n..V..W...y.{..g.`.)Oi....T......Y........1...[b.Y>)o.~.._[.d...43p.8..d....Qw..J....J....@.^tw.)......k...E>.)..ZQ{

Chrome Cache Entry: 187

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 20924
Category:	downloaded
Size (bytes):	4908
Entropy (8bit):	7.9626069700468145
Encrypted:	false
SSDEEP:	96:yFSIP/0vYGYL8U6dsrcypyhF+CKnLGo319tdfhM14LB/0wXW5Yd2T/vKkXwP0cR:yAZvYG5U6dsTpynKn6uhdfh2wurvKkXE
MD5:	5113AEF07361300AA719C34664E3C0F7
SHA1:	3A6418EE5F601C50EF3DF8FCA2A3D7002E9AD2A0
SHA-256:	72A1DF1D0554DBCD2ED0BF41D8B1DC042CDF13AE50362C4E719EBFAE936F5FE0
SHA-512:	DFA4C4EAA64316AEF3208FDA7EE38C14C588B5FDA7F5CDCDEDB8F90966E51EF1B944F47D58F0499948DEF3044B6B6F21D9FF2854C250AB60135CD9FAF6B31A77
Malicious:	false
URL:	https://preview.kdanmobile.com/unsupported?preview_token=0338dc3811183a2b20298b63818144ea&share_link=https://cloud.kdanmobile.com/share/gl/cm1xL08zelc5MjAwMDNyclIrU3U4RA
Preview:	...........\{W.....BU..SK..a0.4.4i......b...-..d....w...l...hzWC0..o.k..l......./o...e...W.....q.^.9..b1....B.g.(.....QB&tx%.iN.8,JRF.0$.X,.8<./.<...O.y.Q.>Y..A1......m.n........>.y1}r.3)......g)].G..Ov..-O........;/v>..].\...6.:....O..d.@.b...n..9..9...&P1..q..x' %9&K...{......hgg.\&.2..e>..R.....iY..p.X,.I.MbZ.IBR.I..Y2....0L.e....@.U.P9J...Oi..... ......E....&..l....3h ..\|s.Rzy...'........~Q.c`K.=.cQl.J.4/..c.UY.........fJ......?{...PD#.<...}.........$4....(M.....\I.((.#C3gW.7.C.$...$..4.. ..Tf....}X..O...9........fiI....4....n@.JT..S........O...t....d9....J)JA..eW}UaL.uI.,ovk6.L!.2.X...y^d.h.E.<...%v..Y..s.](.'7=.l.}[1...b..fyB.w...i...[K\|......eN....$..V.vK....sm.#J....`.{wl..IV.X..xE..K......4,..GFY.v{.....<....g1.-.x.f...[.......;...qE.[.g.$p.k..h...&..&f3.G..gp[.Z.:tC.(....!...z 7.>?..Zb........Q...O.R.g.{,.....".O.R.P>b......d.J.R....~..4T..nv...iW..J.*?A#.e.w..[.z.&z7.a.....~.E......68;{.A.O9.. .-\|I...+#..fx.W..7..C.

Chrome Cache Entry: 188

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	18042
Entropy (8bit):	5.340064948945447
Encrypted:	false
SSDEEP:	192:fePz+qS4fq4rbqGIwV4GVPpneKWbqXJfqJrbqGIwV4jcPY2e7HqqmUfqUrbqGIwG:WWOqY4txlqY4TaqqY4j
MD5:	3B561EC187F248D8ED60615B866BE327
SHA1:	9D2FDF8B2F9EA537A638F3280656348CE4D0A44B
SHA-256:	B419D993477EE546303F5F56D3A3A8F6B35EAD8DB1250CE6C5EC27A17466295C
SHA-512:	053791438973B98CE1406DBA415829A3FB109B633C3D074663BF66CBB5287ED54F5B8B88C6B4B3124341B6D853668C7B8F5D455A9A23A214934AFFBB36089D88
Malicious:	false
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300,400,700&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek

Chrome Cache Entry: 189

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	260485
Entropy (8bit):	6.028038472623416
Encrypted:	false
SSDEEP:	6144:G7Mb2fmxSkpXqxM/Xp6dn3efhNj9s7vYe00T:7KMXq9dn4y7vS0T
MD5:	76F1F4B59819576FC7F30F040CCBBC8F
SHA1:	1097CD3DE37DB9E233FCD6142FC687C62E5DD435
SHA-256:	3CC6315E850BEC386DCD5746F185F799067E552D5B799ABC3D8984492249AF22
SHA-512:	13E2BCE3142EF9989FDC62A7C203D8F1453FC1A7CE6611E4A50B5D026EA02025147C6BBC94906DB29EEDB3917EF71B84EB4E2A5F91EDD934A53F949730A6EEA0
Malicious:	false
URL:	https://pdfseries.s3.amazonaws.com/c5e21b1b8b2f0b8f4a7d7d7ea76ff76a/1741766845804940717/INCOME%2520TAX.HTML?response-content-disposition=attachment%3B%20filename%2A%3Dutf-8%27%27INCOME%2520TAX.HTML%3B%20version%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA3BMGHEXOO3RX33LI%2F20250312%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250312T122859Z&X-Amz-Expires=1800&X-Amz-SignedHeaders=host&X-Amz-Signature=2a14c8ee6fec1ba5eec0680262565739f0457d1985eda44978421c68157859c3
Preview:	<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>SARS.xls</title><meta name="generator" content="WYSIWYG Web Builder 10 - http://www.wysiwygwebbuilder.com"><style>body a{color:#00F;text-decoration:underline}a:visited{color:#800080}a:active{color:#F00}a:hover{color:#00F;text-decoration:underline}h1{font-family:Arial;font-size:32px;font-weight:bold;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h2{font-family:Arial;font-size:27px;font-weight:bold;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h3{font-family:Arial;font-size:24px;font-weight:normal;font-style:normal;text-decoration:none;color:#000;background-color:transparent;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px;display:inline}h4{font-family:Arial;font-size:21px;font-weight:normal;font-style:italic;text-decor

Chrome Cache Entry: 190

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.588969099298801
Encrypted:	false
SSDEEP:	48:B+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwtKDuExjGx:B+5AQHAray48f5JMYHIqUDu9
MD5:	B84F49C6183196615C3DEEB2A9D570E2
SHA1:	9529BF7ECB213AC31E889065B90121AB88E18B76
SHA-256:	E62C97EB71E2629C4B7417910E6555D2735C100D7353CBACC3FB158B93133B0C
SHA-512:	8A802FE2111A5B86B0B2C295622AFC93071F232A564359D667DB17FE83A29A809A2B45DCA37D18585739E4593E71AEA7EC3105E6DA1FF3C6F88349058F4DEC13
Malicious:	false
URL:	https://connect.facebook.net/en_US/sdk.js
Preview:	/1741782053,,JIT Construction: v1020818435,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 191

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, original size modulo 2^32 4051
Category:	downloaded
Size (bytes):	2163
Entropy (8bit):	7.898175588879618
Encrypted:	false
SSDEEP:	48:Xoe/jpDLnIxVgOg7G/YlNKkKuRb9KVYHUvwa40kSJ9:4YSxy7Bl9RBovwuRX
MD5:	FC975EB24C6DA5AC446F59E9C17149C8
SHA1:	4245196869C316B5BFCF9ADD8B16698787118AD2
SHA-256:	9450C9D17681F9419575BD77F9B82152CB96C61FB72D714DFB62A91EB6AD89F0
SHA-512:	FFD8D8CE70F7C00CB47021CA96D6BE5688FCE039B49EBC470E5D0D9B89D420A248C5741ABE5FA8A3AFCAF9965B42C2465FF38FBD067DCFA41DEE5FCE27152B44
Malicious:	false
URL:	https://data-center-rails.kdanmobile.com/api/v4/file_objects/preview_info?token=0338dc3811183a2b20298b63818144ea
Preview:	...........W.n.8.....<%..Z..`F..%.....@.$j.%Q.)+....)y....0..K'.a..S.S....E.q....a.',D...-..q0.........1..Rs..I_...Ko.=q....>..TM4/y.V.<.n}.<.os{`...QG....u....vJC.X..q.[.S.bK/.V....%jmV..z.8.../...l.;..j.R.}M.5..O.....1......=..[w9>9Fh...j..oVi..I..;....w..6:)..>.ZQ.........c....F./...'m.....x..0.WK{P..r...ln...1..uG.A8E..)fQs..rj3....l/^I..i..".Z..E.vH:[.%-...`...p.Yb.........vd..=..aU....km).Ms.tU..b<{_.2................<u........~.<....g/..w..]w.}.kG.y.N..j?/zvm..y..^_...Gg...gs.Hf.W...X$..~./.Y..{j.f..*.lW1S}<~.......\|..N.....4.....+t..].3..=.y...['pG...;4......r.y{...c..m....l<6Sv.....2..v..Ws..k.3._g...7.,.(.....n.F8&....[.D3..[...G....t.l..b.\....`W.^...]?^..N...K.u_.....E1YcF..0b.>.>..#m..4.......g..K.=j....4.Ef\|.>.......m.n.....E.e..L..z.......qmU.....t..q0D.5.q4...g...r.....d...... ..G.8....x....0C.:.zM.E..K.A\.RC...^.y~..\|.<.b0..S..z.}..]@P.M.x^S.....W@.\.........6..m.......\...c.JI.:'..g.5.:,.9,0.M]...1.OT."...(

Chrome Cache Entry: 192

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	39808
Entropy (8bit):	7.99382866932937
Encrypted:	true
SSDEEP:	768:IW3QH5pr/1A6d/dYVBLLzs0DtnrJ/3bdkumW+HGOBrMi1Nkj3FziEcY:/Y11dCVNLJZrJ/Ldkt9ZBMuNC+Et
MD5:	3D06EDE2146D6149C88C01439DDB8492
SHA1:	3BF82A55732A2B1867AA88E29113DCA05B8FC8E4
SHA-256:	99191C52B90DB1A1725831BDE76CEC3CE3D0BFD83923D8129F35F1909646743F
SHA-512:	AF31C8C426493B1C97D6DB693C4662B827193FB918BCA2A26642D114A9C43AA6450B82188ED488E4DAE90105E5FD68F690A640B37953F52069613118A00C52AA
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/framework-93b89dc25365d5c7.js
Preview:	U..A.I[g..........}...../.v.J...y%.3....!i....a."$....^......./.pgNa.a....s{0.V...}R...~.h......\.I.I.i.u..sN7u...s..}&!.JN$..K..z.).\.y..D.i0.i6....`..o...?..,Xl.-..Z...q."......1!..N...}.3.J...3..B..].....J..m.a....e8.wo.QJ).!D....'Z.[Y.(#..z.bQ.......%... !m...tzrt4..a<....6.7...t....5...O....3'..x....O.........G=F+.s.kk..(-..).......Kd.4..s..Q.k.QG..4.-.....N...F1.K7.Ew:.c...f.u..$..T.6.xQt+...([...-$..Z.O...(k...u\|'..#...n.Z.=j..jo.....n2\|...V.`....(.KW.s hmb._...}#...t..~e.k.2...~.......Z..&..C........&.#:.9..`E..6q).v.?DN..=.L2q...)^.z.,....m.>..M.-W.^..."nR.1.?\|....+M... ....SR(...?eg.?s.}._H...]...c.....7.....Q.....5...*...$...W\.O........W^]~. I...(]vur._]..........f..._..tO.O?...1..`.zp..a2....a..(...{+.._....'.{X..[.},h........w.E!..}6F....;z....K.."G.l.o8.m...6...7..g'.j....0.hE@.LI_.q-.\|..7..D,._n.~.x....w....-MZ...j?..Zka..."........l.........:.5.m....2J.x....u+....K^..C#A...t.:.x....../.N...R.N..x...['\|..N.x..4..Fh

Chrome Cache Entry: 193

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	21768
Entropy (8bit):	7.990533335561367
Encrypted:	true
SSDEEP:	384:m4fknJ/eH4Nrs8OZ9I5+4TQVTtSwvvLp+e4rJvDzUBKk5dV2+G6Tlmn2R:mgY/6atpst/vTarJ7gBKkzg+G0lm2R
MD5:	17703151C19DDFFE1553506C1F947833
SHA1:	CD2CDE0C80DA22007BAB7D0637768370BB858ECA
SHA-256:	EF5E45F65BDB7368174D858D6AF725FBB50C58844DB27FB5870FF819108974F1
SHA-512:	F9AEBE8E66F2870E0433E93AD859709492FC0C1DFD418DE33B79F54387E7F991DCD89B90A590CBA8C140CAD3EAA9554022D648FDAA0E7131CF24097ABAE3C0CE
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/4322cd96.095fe72894fc054bf2c2.js
Preview:	U."1.a.z=TDrR..PG..?.."0n.c.........k...HeC.x..2+I.39.&.I:.R.K6r..K.Bn..Qm@.p..N:M...^......`.......~y[,[>~..)...aV....l............oZ&e(.R.VfO..F...R..q.}....k.....W..T... .[..-.....U...... ..R#.....m..b.c.Rf..7.{.H.F.gv}dl..m........D<P..n.Cl.2D.;..c..../.+"..n.1....oo[..5......L.#.W$X...D......o...Z.7..5...~.Xt......5..C~9...,.0.\|....%..I.0...5.,..x....:.]../...>.mn..7.?...?n.....+..x=jc.f.....S.7...wy\|xS.?.pV7.S.v.2......+j....J...xEoH....x.;l_..>..I.x...J...yz.y..w...U...=./..WP....u'........z.:...4..*...:.H@...U...ynn...p\....!.lg..L.....!....y_....:j....<.?........;.~%?OSQ....v..Q.+).....K..ij..W$..G.'.-dG.....P.L.Lz.~9...XX...8....a.T.U-w8.3.k....1...;..E....sqy.i}.._n..../.w_......o....w..b.........7.=.\|y}{....$]dK.#s.....`...Y...3.......:.........W7..2.....+.......jEA3....e<"..3bh.V...,....?.....A....I\..ci..}....b.Y.Rn..h..O...R'.w..........x.................................^fC..........!..lB..\7....x...X.....t...,.X...k;2..x.

Chrome Cache Entry: 194

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	536
Entropy (8bit):	7.353378291297956
Encrypted:	false
SSDEEP:	12:6v/72LZMprc9lxSSBtnCsRWEtB2yZVy+p0mTU042ILSXCizeDk0aH1:RLwMqox98YVt42vXCiClaV
MD5:	2145BE318D7D475AF353AFD5C689F46B
SHA1:	9E5652EADE4E3A15B2173E1E9A43EE4354CAC8C4
SHA-256:	3B0D267B9F903FF5000F80E08B4CACE439FCCAA41DDFB38B9C09F4DEDF8FBD22
SHA-512:	17792466012F8053E947E45D5E19C0976CE271EE2E152E6ECD81FC3A037177B156A2A64DDD9B4BC299AAB29A8E09911EFFAD0A4B2C20DF54A737FC9FDF65CDA5
Malicious:	false
URL:	https://cloud.kdanmobile.com/favicon.ico
Preview:	.PNG........IHDR.............h.......sRGB.........IDAT8.c`..%.=..V....30N;ko..._6\.a.lq...DL?iS..............v....,....f.....)....N.Ng....##....C=X...Z9..,u..+........s`...~...r..Pf..].%.V...bN#......V...b....q.I.9Y.GR.....0......G.+-....^&NF...j.G.?..L~ >0 ^g.......?.i...........<......k...p.Cq..Y>......3/a`a.`..7...e#.?- .3D.. .g.qf.q....G.?.._.n9.f....h..B....C..G..P...v...~..49R....31Og....... >(..."....\.L".......?.\|.r.......@!N...c.^H...(.......H)<.....8..?V6&...q.0..?......D...."d(d....6m..j....IEND.B`.

Chrome Cache Entry: 195

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/1012119460?random=1741782536465&cv=11&fst=1741782536465&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg
Preview:	<html></html>

Chrome Cache Entry: 196

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, original size modulo 2^32 4051
Category:	dropped
Size (bytes):	2165
Entropy (8bit):	7.904478578006112
Encrypted:	false
SSDEEP:	48:Xj4NGhPxT0roRg5rbEbjDrFodH5cMwkLgqacIMRkiRmM0RFOy++Kg:rakRgFejPu59w/XMRh8RAJ+B
MD5:	04425CE238EFF045607F59F52DC4569C
SHA1:	9C527F111C43D1791858E134D552CF897DD96865
SHA-256:	155364ED43FDE2FF8B71EE54FE28B6C09773E84309901602E90E971EE3573A5D
SHA-512:	75748594BAFF76CCF620A38835790A733C103AD44753FAEFDB9155825A2908ED77DD07F852BF2F6B847BA01615D7D465A9168D6D161B5DE1399FA8C0CD7B4D49
Malicious:	false
Preview:	...........WY.....+W..i...;.(1...`.$..vc......8:.=e...&.>$.}................a...s...8.....;...:...\.3f]C....j..G.u..p...f}j.j%._....#Y.Fj..z.=....93.oWo.eS{/.S.G.....hw..l..oP....ov...2....s.)..z.asZ..f.4....Y.o..k.`#.E[...v............N..U....N.1yuR.f.u.........}...g..+..Z.i...p.q...C..h\...zegf..u...p}....N{j\...L.-....-.........fI}.....r.zz6`kg...:...F.....Kx.}ar.....d..N.^(.o...#j..1.8+..Qo.^kXP..L...@...W..I...BT..a..1........`.&=....fo.;Ae..Y5'.f...p&/...e...~.`........%.l_.O..~...Z.RW:...I.qFAj......;>X....EG..#!;.....h..c.7..I.Y?...........jv..>.N.I..m.5o....v0k:V..wc..7.-.}>PN..S........j.a.Jo.a?n+.r.=.G.2...Jb..X...y........:yk..W...u...b8b.e.M....l4...Y...7...f...Q.5\.k.m.vF].g...l..s.z.N.I+.e...m...x..........19.Rg....m...iz..H......u}.....[.....?..3.Vo...o..i..}.s7k92.....:].p....F..`.....x$.x.$.. V.^..2.......%..E.Z)%I...%V....i..k..h.........$...Y...RF......\|..(...s ..G..\,._.WE.l.)l0...[..'.<Q..".q%G&H.

Chrome Cache Entry: 197

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 4085
Category:	downloaded
Size (bytes):	2060
Entropy (8bit):	7.908022098022868
Encrypted:	false
SSDEEP:	48:XLQ5FYWG8y9GAXsLwtppXZFmvp0abKi9EB0nsB7nPX/fewe+j/A:7EqhfQjLwtHJcvp0abKi9EBCsBbnfo+k
MD5:	0FB9C44EDADDB32C4A6E3DCE9DDB5A79
SHA1:	2F8BFC60306E7A313CD04C0E705111675E7F0EFE
SHA-256:	132F95F13663B011277B8CF7431F2AA286706586D560C8C3258C93CF457F3908
SHA-512:	F8993A96C3E7E694457C0DD1795911C4DEEF4A86C509A30CF4ADEB47C9276EFCD5BEFC7211620D1675671069BBBEF3B1894826B66649EB021B9A232613AA7A35
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/webpack-568feabefe0811c8.js
Preview:	..........}W[s...+..4D...W......t&...h1.H...xd.....${.;.@\....0+...m\|D]+.V..k...%.'....]Vm+\|4k....]....)...(m...S..8..Q.....Nz,E.H.0!E6..iKv.{...]k.r.....r.AJr........a....BVRK...O.KgT.R/g...SIj...?..z..g....R.... ^Z..u..\Z..a..(.....\....k..E.&.4..G....1N.;w]..A.. .J.z....>*7b.q...G.........f\..x.AM.;8n.y...?...._..`..$_Z....).m...o..,o..V.n.{.?).=T%.v.\..g6h.H...ms..M..>.i......hc.h...hZ.~J..K.F.go....;...K....\.\l....z.o..n....^;d.jA... ....U..U.NVH...J...~}...,.Y.{Lt...:..q...\|...C.gf(..).cE.[5...Y#GYw{.X^..r.(u6.06..s.jG....).....$o.]`GI.AR..B..u.....j....(p)...j5.%..~j.r)...e...^..q..A..hQ...w._.q....0/D....+..o.0..(M.`.x.y....#.n......8H.0].I..\|..7.K.$...e..y..Q"#.V....^..:e.q...<.\|.&I.'.mD..@.Z....pE.FAQ.<MD.B.s.8C......n.2f)"..&..`I.EL@.V.......P....M\|.5...Y%..3.0t}/,...AN.&... ...\|_..0.`>H...,..z^.F<.....!....,d.{E..C$..e(../..O..E\ ..a..<....?.I(=?..(.....;`%...<6...e`..I.I^@.=ij./....)..d.\|..(A. ..@.e]~n....Yx..

Chrome Cache Entry: 198

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/sOG4OPYnV9fV-ZrkacZ6k/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 199

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3300
Category:	downloaded
Size (bytes):	1194
Entropy (8bit):	7.860311902760432
Encrypted:	false
SSDEEP:	24:XS4YoyjLPFVeBacPH0GsZn9y48N7Yk7FHLpdoyr:XexjL9sBacPUP99zo7d7Cyr
MD5:	496C7F5FA98D40AF467F600ED96D68E4
SHA1:	6FCB7450234195FBFFBA4989B94A1C83300CE88F
SHA-256:	FE6AD00060852781317075BE3A2F89F5DBBF54AF12C024DA95A0E7AE5D8375AA
SHA-512:	5B33250DE1410BBD0E575DC9A7E29689BED5D344DA18B86F9836FC28B04A78BFE12B468F9EBA63C0B42ED718E030501CF344783CBC5F0F83B570B6821F297849
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/sOG4OPYnV9fV-ZrkacZ6k/_buildManifest.js
Preview:	...........W..F...}..@..sK..m..mQ ...083.X]G.Jr.`....+_Vv6O. ....9.:Z............x.......7M..u...V}.Tu.V.W..T7U.V..Z.7ms.X....{.........p=.0..O.W.......fWo..-.U.c_.Y\n..nv.....M....ZaHA..r4..?......>.X^1.DQ.#.'.]xt[P..s...,...y.B.h.x...j.p........6,{...1....n...)m.@.982d...Jz.VB4v....].b....jo.@p.....X...$.E.X...7..T.?.=..>.....V9.=d.t....M..LE.QF..SfLH^.......N.m$.8N..y-...............Ir-..$.u...........t.`..HH&.../Y..P..nzj..g;...9.P%N:...;..u......`.@.(St. {z.i)R..O.w.;....M.a.gcK.{..7...U...7.j.o..?/...A.$.,..p,NG....-..0y..Y$..Sp..$F^wKl.A.......S..E..ZR..Cp.....UT.R.8......Km..V....E.L..}....m..b..Y.qd.k.B.\|2.....M.2..PK_..D-...k.3......L)z".w..B.P..}. .......V...q...n.......A.D....~..(...A...I.(.9J.Ee.h.6R%..(.}...B....^......[..q...B....h........l......d..99Q..h.Fn~Y~e7...lX.+.3q...C..u.S.s0,.<.z...q^...~'8..O....G......)p..{M.$.{.;..K.q...L;...c.6zZ.}I.../OW...qN.%......@J..xR...e..\....$......>E........3....)$y.

Chrome Cache Entry: 200

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
URL:	https://www.googletagmanager.com/static/service_worker/53b0/sw_iframe.html?origin=https%3A%2F%2Fcloud.kdanmobile.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 201

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 271217
Category:	downloaded
Size (bytes):	67992
Entropy (8bit):	7.996644371112582
Encrypted:	true
SSDEEP:	1536:+Nm84FJH3jsvf0zqVvPkYLOysF7IQq21DiR4VMAIvlLd/dUOc2Z:+N+XjmKq1kYLOZF7RTVytdUOrZ
MD5:	BCF2359035B3DC4DA124C83E9A93ADEC
SHA1:	4E33F2235711BA9AD02712C698ABBC5ABA719DF6
SHA-256:	4C12F42816EB95AF945EDC2E71391F6B85AB49D835849DF39EE6C3185D03D942
SHA-512:	8A51001B2DF8C15FAC24592511C295165C5C5FABEAF28EF51379A6AF4FD7C59816F484461F0379508BCFEC37928B0D7529D4E14FF8D6B5608A78CD655A203930
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/ea88be26-78fb58968e6ea4e1.js
Preview:	.............{.V.0...2s.#....+)..kR3U..TM.{<>~d...$Z.....k.}....Jzz..Kw...}.......}..,..........o.}\|..r..U6s./{/_\y..n.......Q.;.d...^x.L.<.y..i..U......:H.]_....Wo......o....._.}.._...4Iro...$....x.N.8.7.\|?.,.d.,...4...C.s.wQ<N......./;....*..ey.....{...?}...<_.......w'.$...:..1.6.y2.....p.7.^.Gy....`5...".[/.?....Kx.$..S...e....x..7.p..t.h\|.5E.X..R.f..].W.(...s0...?...gx0..."\|..q.Dc...e.\|...0..9.mh9}5....F.h...$.$.\|..../...^$w.. ......?.=.Y8./.x?O...L...>..,b..c0.y.....~B..1.....p....0.E...!..U.?l..r5....l.7Y.k..D...7.b.C.<......w.Fs..Is...\t18...R.F^!$._......(..m.....+.i.L.....x...0...:....SX.d....,.....b.8...F....0.....}..j..........w...........u....W^..y.O..`..N.w..Y:.~.e.r.^.WW...:._.6.}..X.ufr.!.8...W.......u..!.g..A.~.~...4.82.......:..E..;.^.....C.....,.....n....{.J...p..=....7.._._.q...p......I..Nd....RmWJ.5..B........`Z_...\|...d.f......)..+.0....Wy..DZ.,.....I...Q.....q. .V+.....-~N#..~..R...F...<7...8..e.M4.rhd...X..}...}..@ ..j

Chrome Cache Entry: 202

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 62962
Category:	downloaded
Size (bytes):	15415
Entropy (8bit):	7.974011435166911
Encrypted:	false
SSDEEP:	384:BFHXKAxxXeRCvwjG+dR5C8WkVYKeV9Gb+3TEedkg:BtDxYCv+15ZKTEeyg
MD5:	D19B880B315F5B4654E1AC44AB533C60
SHA1:	73F21AA75E7CF43A51FF5EC096D759734D1E7885
SHA-256:	2DAF36294B20BE97D5B4A8AF4B2FC3F4EB4B4288D35A1EAB7A55ECF7A9CBB994
SHA-512:	EA5688DE1FB3BEAE482A884A13A9F725728F4D77B6A43FF77D9FF79DE3CBC89372ECCA5436BD348411CDF7053BD3E402567A09A2BB0522ED025BA2C7D27ECC49
Malicious:	false
URL:	https://preview.kdanmobile.com/css/video-react.css
Preview:	...........}..X..{}.............@..!@.b.E..... ..wy-..g_............}4 .....v;...$.a.}...Q.M}..]cS.^..o.....o..pn..o...e....f..l..Oc..Y.?..{..r.v.e..+.^...X...]..n.....y..P.o....z.d3..P.../..eN7.u.o..KC.1v...L.U7..cMg../...E..V....?.....=.........~.^_mK.p..o...{.....7?.5...(2&!M....".........;9..<..YzU..iE..LL.4d2..7...n26i.D.."6.L.G...yL.4<......Mf.....4.d.1[..".dK8:..4U.....=.!M...H&IX;t....%.M4?u.{.n...PmH...<...%B..t...E#<...QyW...q.....O....P...=....5.S...[....(...$u..fzs.i7voj..m.@..}..LS.....~.E.9^.7..f..BWf....y.+2..BJAeq.po.....=........y.@.y...Yw)Yp{..........S...asz....:....j.o...w{.r{..wo....W..bl.......p^...F:.{..!..2.Z.....^..1d...).......rky\....v..}........#.zEF:...*.g.3...R_.@....-...eS....x8.t.(...#....K.E.N=.}..U2.y...{d.tBXe.d.%....^x.9.....U....%Z.\|.UY~......X...}.8zx....]s....brn..d5.M^.I..G.,8..l...$.....#.....a..?.....[..j.a.r..e....5..8>E$.1..{bW..\|W....uB.%3...g..H.8L&^.f].]y........(.^J$1....

Chrome Cache Entry: 203

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	3880
Entropy (8bit):	7.948594299526929
Encrypted:	false
SSDEEP:	96:32ybb4nN+nmZrUx+HtLlTwrclq7pWQ9NquRns3w4:GOCNXR/R0Ilq7pWYNqu1sA4
MD5:	27F7E102A6580F82487B4A7FBF2F1B72
SHA1:	04D46077D65BC2F2166060A4FCB5DB58296F751F
SHA-256:	97DE0CE88D3BE457E8F818C6774ADD9D145918B37266C8EFDEF6B78282CA1877
SHA-512:	6140373CBF82221ABD015632A812C7FABB087EBF906190BD528E23A01F7A627B96C2E84F7DD2500A07D26F811D65569047E0CBD5BA770615A8313DDDBFD0DDA8
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-cloud/_next/static/chunks/6749-00e4c2462b297960.js
Preview:	..+D...P..s...._......e.O.yq.:z.9N.....M..Z@v<..?..H."...Q...&..v.....G.y...&..}.g[]..L..l...R...D..ztSh."zO.y....it.<...+!'}h@.............V.epka0a....,b..b....w........${v...f...+h.$4.q.....p...O..;..jj.tF[7.vw..8&?.=.......f'.=..\.f/.....L...s+m.......E.......T.DeUJ."B....u.....q.P.:.V..2.....}.[......xH+..[.....+i..TT.s..XK]B...6.../..F9F......%OX(.....w..rde0.wg....F#O..X...9.p..)...i.0.3...<..q..s.A...s.<.....`Gm..j..x&#e..Od......{)..kZ..@..DA..U.;2...g...t...+.p4C;..Y..Dj...."5..g...F.\|7U.Lr..j.w....j......h.b.S....DN......4.....J}..N..bv....^8.....h...0...F..)2..8...WP.{._........g.f..L$....Qi5E..Q<t.]5..t..p^8......'..RF..v..G..+&..i...+zg'K.y.i.C.C.V.ec`.7.Hk.rX....i..\|...j.8b..`...0...p4IzG.P....6.&\|./{.0......_.Z \&{.....y6.<9...&?.S.G.O..=..N.l.b..-..g..l)...U....@]..L....L..S..3V...b.G..5..D5f.,.r..'..G....8P.......%W....+/hRx2H....f_f.9...Vz...W./....Y.8....X........P\|4.*..G.2.pW1...X...M.t..Gs...a...M..N'.#.F

Chrome Cache Entry: 204

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 56550
Category:	downloaded
Size (bytes):	17759
Entropy (8bit):	7.986738245314875
Encrypted:	false
SSDEEP:	384:/h6U3B0m6xyZxRvx6a8Hapf0Oz2K5ONQkYaGknjLJ85:/Iy6xSnvx8HgjOZYgi
MD5:	71A56E6250241F9F8066D7D1A150539F
SHA1:	129F97C074597259185429FECBFD7EDEA583DB6E
SHA-256:	E63AEAFE82EEBB1C0AA7C83D4CF6138A46E13375537DBC101069FD186C608054
SHA-512:	3ED23BF4AAEA20A1F9A7D695787A8DCBBABA4AB94473488C7FB812D31B284A01012C737D9534D16B148D01354D8282A767127A24A7579E64D82169902DBD2A9D
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/pages/_app-48674e9bd3d6b7acf074.js
Preview:	...........}.W.H.._1:=\|.K..@.i....$.......'.-.%G.Y.....V.2...{..9..J.....Aw7po..4o..$..~..d...K.g..s.9..C..l}..;......?M."N....%.3.y#/.8.v....k_.Y#.....C.x,..f.f.K11.....#\|~..U..c\|.<..-<O....{=x.../{.7..s....<.......<O...z...U.A..{........!q......./(..cw.....1%.y.&8...Q...<.$....w.O3.GX..v.c...c..ys.A1l..y..=......e.8i$.l`..EZ.Mxs..7.Q.NxV.5.p4r..y...?....x...,i.9....+'...#.7N....hu...a.K3.x..i..$k.9.........(M....T..u..z6c....Ev.,..........y.....3.v........X..>...x.{.o....u...^v.e{.`{.c...p..d.R/1.d..Vwk.t....N(i.....qK~8..OC'.Y...vp.y. ....V].\|.V..=...R@&..f.M...,K3.9.5...E#,..GW..g..i.b.7...S;.#.d.=.Fuw..IZ\|Nz.........T.~p?.u.LG#Xg>.].q....s..[V....I.X....&w..a......./....A]n.;......8._.....+.MCs.X.......-t.d...{.`..q.4...t.7.!..fj.>.=.W.p.._..iNlW....UP...Y..WK.gG.s..g....."..............xR...^q.}2-p.....,...o......B.O^..L5H.jz..h.&..=..nG.4.y...d.<...s............)....<._o...... .*.c......<(..g!.7.. x..0-..}.....5...

Chrome Cache Entry: 205

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	684
Entropy (8bit):	4.597056694616325
Encrypted:	false
SSDEEP:	12:P+KGOmSxt7hLHFHuVeVVFPqupqulfbkAV+o+yQqEWrRHBMwJPIGWSkWZ3/k7:1mSxt7hLHFHuknPqSxeobxEKBMaWhWZK
MD5:	E08535FC5DF7F165B04B17DF3B490416
SHA1:	A6F57741743FB31D0143AD0984CA36991A9696D6
SHA-256:	C89B63FFEF75BA9C02B8942D28E76B4F7A094BBA87B9EC75F51E905804E522BB
SHA-512:	E8C52E2260FC6373BFCF25E16F1AB241A3635F4A8FAF1FD97B98990A82492FA3964380E418822CB96BD9E3794CB8AF02485BC309FF2C9B0FBA8C27A4F318149D
Malicious:	false
URL:	https://preview.kdanmobile.com/static/locales/en/home.json
Preview:	{. "The file format cannot be previewed": "The file format cannot be previewed. Please download the file.",. "Download": "Download",. "Search": "Search",. "Print": "Print",. "Rotate": "Rotate",. "Details": "Details",. "Loading": "Loading",. "Summary": "Summary",. "Information": "Information",. "Type": "Type",. "Size": "Size",. "Created": "Created",. "Last Modified": "Last Modified",. "Shared": "Shared",. "Owner": "Owner",. "Can Edit": "Can Edit",. "Can View": "Can View",. "Description": "Description",. "Anyone": "Anyone",. "Required password": "Required password",. "Process file": "Processing file preview. It might take a while. Please come back later.".}

Chrome Cache Entry: 206

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2562)
Category:	downloaded
Size (bytes):	263432
Entropy (8bit):	5.5574252635689
Encrypted:	false
SSDEEP:	3072:rU4AarP9SdUYwSAx4ELCI0VeCDUgb1ZRtpfdeWvZ/KhUNedPvbZZK7b6:rU4AazDlZx0RtxdeG/KONedLO6
MD5:	E96CCD9F748BED7DD3AAD1A6325C2177
SHA1:	C91021CD79479A264891C98E19D843945D9E724E
SHA-256:	38AF14A9830FD0EDFFDBB6725175700F2CD3ED962381EE68771D079A472FF465
SHA-512:	A94D5A92B0AE5907429FA9813E24273B7A3E85353E662ABC606B90E76172A78DBBFBA7173D253950856E23E192A920BCEE72E43E8B51A373985E82D198EE5768
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-MTGLVS8
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"9",. . "macros":[{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-10552544-27","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":false},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableI

Chrome Cache Entry: 207

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 375967
Category:	downloaded
Size (bytes):	104436
Entropy (8bit):	7.996567863222872
Encrypted:	true
SSDEEP:	1536:ST+tTGgh1D2urgr3ZT29U/WZzrCv1gTRnaN0qu64FOVsP/w51Gzr6ztW7SaMs6/3:Q+UgX2dhWnTRaNQFfASSMS9r3
MD5:	5C817019A3496BAFFBB6871CB4744A45
SHA1:	081EB3FBB3FBCEED362AD178EC7F80D95C31264D
SHA-256:	EF711C0C6B95ECE7FACFE36E9B361EDA9298E9C993AC4A24BE3690E9D9466A30
SHA-512:	0E3F7C70DE4D770CD5B55A80C8B319B0395386E747082CAE2B65232A8A25EB468EDB2DCCF6537F551487A5425812C5D4FB50071B8265851D171A65205C821C80
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/39b97175.c686e5515689a720089f.js
Preview:	............_.F.(.U.....ec...../.:a......%...e.i#y%.n.....sN=TU.:...wv'.U.....>..8...;...E8...y.,.._..5...~g..g..E.w........t...8M...,....<j.E.....+...Yg...9m...J.b.%./......:...U"g..EZ......Un.U>.U..U.E.2vV).....^.o.wz.....V..Y#.2.....wM.%A.I..g1..g.8...c..Xx..o?B......?h..I4..h.....~......!..wV.....y4.nn..9...AE.>..!..H.".?.V..'.....M..g....X.:Zufa..sr...(+..fPi.f.V...K...A..f7..()..<Jn.. l.xoI..]...x.%.E,'.`a.a=.i.A.."$...(.'?.%......T>......^.*Y'\,.P..........o..$.O.?m.I#..8......fr.^nn..R......[.'^...W.\...d}q...0......<..n.4..I...(..[o?..].....lf.:<x.u...M65_.rpr~...&[..\..x....?6.Y._R.jy..Z...G.Mvo...?j.s.lt\|..u;...C.kg...w..q..+...........W.?..........G.....\|....l......G#...\|..-....qtJ.rd..\|..7......\..V/..o.b.I.>.......\..............?`.?Xc8;.p.$..}...Bg.E..#....I........P._0.W....c.;.[...gb?..CD..t.._3m.........v....._1k....._.C&v...............0mm..._...F......d2...dT.Y.7.e.....`!i..}....1ox.&.......0..7.6.....,K

Chrome Cache Entry: 208

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 11296
Category:	downloaded
Size (bytes):	4056
Entropy (8bit):	7.952966608968067
Encrypted:	false
SSDEEP:	96:b7S/YROTeH4rq94UPqLa4SPn1F1O8a7mg/+NPM3QyMfZug/:bDETeHyqrqLa5Pn13O8a6M+NUKZ
MD5:	EC273A5FB47C301537237C382CDABC1C
SHA1:	633FBF2DA47D066E24C13CDBD728D6278CD0BB7D
SHA-256:	7989ED1655C0E9A94D3DC274D25D823614699B8E283C2240666D34DD323CA257
SHA-512:	36C487DCAF787ACBFE5CAE46BF5E3D05C2FDDD0128EDDC2034E40F6CB1AB4FF907FE0F9905A341B5BF8F57CBE8512B7F9644E66601A38683603F0450A4FD0FFC
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/5756f6589c00a2a186653a5977e6d12edcf3b847.7e025e0fedc385935451.js
Preview:	...........Z.s.H..+XSCI.!.v^......z&...3..RT#..cI.m.......nI..6.......s.=}[.%..;s:N...{.tt5...<......I.lj~.....4.wwS.....'....XK#.h+.....fD.. 1....a.....?O....'1..Q...V.%....W.KS8..$.Z.Q..@~.~....}....HZ...0.k.4wZL...b..K.M..x;...<S:,3.v}kX..I 8.......H.j.. ...n........DfO.x.F..k.,.,o/Y...YD].Z.l.w.....O....11.5...+.....D^+A.K...Ac..V"l,..J..K...~c..J..6.N.J..G.\|SX[.A..`.....e...4......n7].6......M.(.,..../S\.:t..d..%.8x...n.[I.]"...Jt........;..9s&..<...\.,K#.pEb.D&.`p........IS...q.-&.2p.q:M..v.....a.-h....<v{....PB.M....1a..../:....;."........Ft..........>.H.&I.I.g.Oq...<.,\|(.\>.R...+......9u.......X...>%A.....@@...$.F#.\1...k...+.[...Z....V..J..I....!0.........MJ#u..`mj.%......@:.!.g...k.<Q0.....g]......(...B..W.$.Eek..I......d...X...2.8......+De)I...2y.N=...$...f..{V...0.f...X2.....+Oq.....V=.!.#.s.3...p....k.g_..h...ys...)!.jd.....O...K...{].y.b...@t..n..W`h..I.Z.F..t......=.D.....S..x..dG.Z).U....b.(.N..6.Z.t..K...w..f,.........

Chrome Cache Entry: 209

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	downloaded
Size (bytes):	358112
Entropy (8bit):	5.585301899850744
Encrypted:	false
SSDEEP:	6144:o0KE2HGU1kCYGZj8DlZxcOIIpuRtN5oCe6/KONeMhO0Gh3RZZ:Yj2lYOK9eoUz
MD5:	0B7D39A898F63704D9A24B371FC42A1D
SHA1:	D4258174EC4B971927A6AD314C5395C5501770C3
SHA-256:	6820A8AE80FD4B26042DA22D17ED4FF6A68B75065C916C07C4A7C1DF783878BB
SHA-512:	3F48235F9687615405DEE99C1CC0CF14347A6D850C189C864D659D899D200CA97C732052FA50D29275DA50F1A91B2B6C7BBAFC9DAAB1D223FD136F49E3D64B59
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-VV5ECC5ZT2&l=dataLayer&cx=c&gtm=45He53a1v811347510za200&tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813108~102814059~102825837
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ip_mark","priority":12,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":9},{"function":"__ogt_ip_mark","priority":12,"vtp_instanceOrder":1,"vtp_paramValue":"internal","vtp_ruleResult":["macro",2],"tag_id":11},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vt

Chrome Cache Entry: 210

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3896), with no line terminators
Category:	downloaded
Size (bytes):	3896
Entropy (8bit):	5.797687078239436
Encrypted:	false
SSDEEP:	96:Eg1BcYm9PbxGKVk54Ele/3V6oGh1fc2l7vP:EfLoh1wVg117vP
MD5:	CEBE561516BD67C08BFFC8874C16EA54
SHA1:	10FE28A87F23D996145A246D2290E9027515A7EE
SHA-256:	D00E1ABD8403563AA7364741D6AF5EBFD851F0BB5E6E13758BE71F6958DB39BF
SHA-512:	4F6958FBA0C993ABE0696642F98B2586028F7664F30630C666D07431AE2CE77191F6CEB3B11C19CD56844C8F23E7E811AE102B1BCC87834FA824BC1F57A9CB02
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1012119460/?random=1741782536465&cv=11&fst=1741782536465&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,d,b){if(a==Array.prototype\|\|a==Object.prototype)return a;a[d]=b.value;return a};function l(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var d=0;d<a.length;++d){var b=a[d];if(b&&b.Math==Math)return b}throw Error("Cannot find global object");} var p=l(this),q=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},t={};function u(a,d,b){if(!b\|\|a!=null){b=t[d];if(b==null)return a[d];b=a[b];return b!==void 0?b:a[d]}} function v(a,d,b){if(d)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in r?g=r:g=p;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];b=q&&b==="es6"?g[c]:null;d=d(b);d!=null&&(a?k(r,c,{configurable:!0,writable:!0,value:d}):d!==b&&(t[c]===void 0&&(a=Math.random()*1E9>>>0,t[c]=q?p.Symbol(c):"$jscp$"+a+"$"+c),k(g,t[c],{co

Chrome Cache Entry: 211

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29821)
Category:	downloaded
Size (bytes):	367574
Entropy (8bit):	5.575906633804771
Encrypted:	false
SSDEEP:	3072:qo05h4v9SdUYwSAxGELxtzf0VMmDUgb1ZRtN6MZUqeuvZ/KhUNerzxAMZZEYdM:qo05hUDlZx5MRtN6oUqeu/KONerh4x
MD5:	A8DB76913F9F7ABB72C9F318E2572CAA
SHA1:	FC9ECD713A3441CFD79AB5677FD9C5CFEC883C0E
SHA-256:	257B2010011F92584283E009B055E83D65F796F06544EBE36FA04757BD6F3674
SHA-512:	8E38536B1A05D4AA22ECC48FCC977CF97FB5AB48FA94AA1E8890982F38E048D36DCF844E3A6FFB67AE6A0F6734081A20BE8BA777E3E714BFE40F25BCB55172FA
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WLZZG2L&gtm_auth=&gtm_preview=&gtm_cookies_win=x
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"38",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__c","vtp_value":"ViewFile"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-10552544-27","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__c","vtp_value":"PV"},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__c","vtp_value":"Cllbrt"},{"function":"__c","vtp_value":"Btn"},{"function":"__c","vtp_value":"KdanMmbr"},{"function":"__c","vtp_value":"Upgrade"},{"function":"__c","vtp_value":"

Chrome Cache Entry: 212

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65442), with CRLF line terminators
Category:	downloaded
Size (bytes):	71179
Entropy (8bit):	5.359313860212824
Encrypted:	false
SSDEEP:	768:EYXTroH2glrGmpVAUOgCPuWdQvc+bh/ClW2MQZ8UoztQZOsdb8pWXftzFi2zuEGC:EYfgrlrbfdvc+bwhWUoxQZOsdULlDHg
MD5:	8F26715EAB9A3FD91125C359FBE32E2C
SHA1:	6F211900A4DA731B3882C19309C68F664B5E6EDA
SHA-256:	DA23D0FD8EBB243F856C64B23B0239C889ED55AA09BC2DD700B3935CDDD5EF1D
SHA-512:	848C0B59DE6EA65D4782ABF27A91132564DF3773E3F1A317C091A16C73D9FE4DA2EDABAD0C00126F9E99330BB567B49C4E5462E5C026952DE3C127C726A19B21
Malicious:	false
URL:	https://www.clarity.ms/s/0.8.0/clarity.js
Preview:	/* clarity-js v0.8.0: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Sr},get start(){return kr},get stop(){return Tr},get track(){return gr}}),e=Object.freeze({__proto__:null,get clone(){return Ur},get compute(){return Fr},get data(){return jr},get keys(){return Ar},get reset(){return Vr},get start(){return Hr},get stop(){return Jr},get trigger(){return qr},get update(){return Br}}),n=Object.freeze({__proto__:null,get check(){return ti},get compute(){return ni},get data(){return Yr},get start(){return $r},get stop(){return ai},get trigger(){return ei}}),a=Object.freeze({__proto__:null,get compute(){return li},get data(){return ri},get log(){return si},get reset(){return di},get start(){return ui},get stop(){return ci},get updates(){return ii}}),r=Object.freeze({__proto__:null,get callback(){return Ti},get callbacks(){return hi},get clear(){return Si},get consent(){return ki},get data(){return pi},g

Chrome Cache Entry: 213

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	4.535303929616118
Encrypted:	false
SSDEEP:	3:Tr09rrHnCDM5PXfA6xOKX6Jq097nNVFEsvLSAoMLFmmfzA:TrIriDMflfLYn/FEszSAoMbfzA
MD5:	677204FBBB8E6137C57A1380ACCCED18
SHA1:	8861AA19301EC8BB9C7CDAEA4E67994DF612B8CF
SHA-256:	3FA204C4167D6A03DB9978930F35946572242EC9491C09B784436131FC00D201
SHA-512:	80AA1CC22DE663978C3DCD0C6ADF9690D076E7D40D701B4A69A3F2B8B6112FCF392F8E67919CFA1E6FB321CA445247545FA016966FEC662A39D47688EE95631C
Malicious:	false
URL:	https://preview.kdanmobile.com/static/locales/en/meta.json
Preview:	{. "Default meta title": "The Best Creative & Productivity Platform",. "Default meta description": "Create a collaborative workspace with Kdan Cloud.".}

Chrome Cache Entry: 214

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	62830
Entropy (8bit):	7.995855919147575
Encrypted:	true
SSDEEP:	1536:edQLBNbKL6Ab9lXSSn0jwlQrQkNk3LFLv0Fdf7r1p:KQLbM6Ab9lCSn0MlcQkNk7FLcFX
MD5:	4D4ACF9E1E5D45825D7A984CBEA9FF1E
SHA1:	FBC114DF8C875BB08A7BD3DD3A76CD45ADC11EA9
SHA-256:	31D136048965758774419B7B4F637E6962353B9CCB635FFDA34E930D9427B19C
SHA-512:	E4F860ACBA75091BF229E1D3405E62F2FCCFB4E0391A38ED4E1CA05D629F728DD338ABE7E35250A9A04C5C2602A0916312CC3A69CA407373990C85E082C41F07
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/chunks/2e46bc7f5bd21f1d69a53f98f6f685dde0effe6b.b3ff9f26f139ec96b5ae.js
Preview:	U..3.aY..n..q.....@.......o......l....x}~.......5:3.T/...LG.%..L...S.....M..Jr..}-.S}})!.x......_..NS.L.R8.-.......5..B.s...}..@.Mv..tLF5N...$o.F...[j.gV.K.SKm.SjgW......x....uO..T...=..]..X...I.d..R.{....DB.. ;......IP.C..n.v.L9;.f=.U..]...r.KT.Fc.7.....E.+.?ME5..5.Xc."....2T-I.^b..!..m&.E... ..Lf...i..I..wy.).. ..5.....X..."..dLs._...R.! E^C6l..5...%..o.....L.u...........h..cA..."....3}.],R\......2..>...b..\........Uk.!.[....r.........g.y...<\|. zD.K...../...H...Ih..\|>u....t1S......n.0.Y.d.a...a..o..W.z-.vF..7.j..P..........r>.9)\J.}.b.mcC.0..r#..#<d..OR..1\|.yI.....G.v...EKY.J4\|...^.~{...b2...NO@.s.. .J.....Br'...p.....x..q.I...0.........P..v.k.8..m.F....z...A..V.!......\...#..[M.(Hgb.-4J4...3.+H.Ad...:@..?V.=E.(...C.z...P.{>.h.F.....b......FrE.......rU..\...G#...QT.N.].......Eq.#@ ](t.....pN.k7MU../.(...o..1._.2.WO.(I_n<........,x..+..s.....-!@.,.T..L..'e..g...N..>......?`.g.E.l...k.!......\QU..I..m..N.weI.!.E...w+a$.yd....V.}.J.Jp...

Chrome Cache Entry: 215

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.327646996939871
Encrypted:	false
SSDEEP:	3:k0WYL12AkZ/W6QfpX/W6Qen:UYR2Ak06EpXO6h
MD5:	ABEE47769BF307639ACE4945F9CFD4FF
SHA1:	C0A0DC51EE8A2852BAF5FF30C33B1478FF302585
SHA-256:	653F3E53E89B4F8548FF86C19E92BB3C6B84B6BE7485A320B1E00893ED877479
SHA-512:	2B074799106698DF69A28FCD8255C3CFD1CCF40FD4C1BF5D463C42E63B32856F801E066706FBD960A0DA4EBE645C070C398DCF01BD722DC4FA592266361AE81A
Malicious:	false
URL:	https://web-static.kdanmobile.com/kdan-preview/_next/static/d4pdq3aNTY9Fpuow9H4gP/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set;self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()

Chrome Cache Entry: 216

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, original size modulo 2^32 3468
Category:	dropped
Size (bytes):	1494
Entropy (8bit):	7.875288681154188
Encrypted:	false
SSDEEP:	24:XZQzYRyg4Ltdog6QvHVpYQScDjStRim9mpnsv6OV81OMkDN5TSS8Xh+Iconx:XizCyg4B/bYeDjSd9mpnK6OVk9kDNsSu
MD5:	AE17000DBF0B4A55E07CB6E63318502E
SHA1:	B5313C247B21DD820AE83CC7B858E8F26BAAB23B
SHA-256:	16122580E3CFC7202AC8066F97680B12C32D4EF9E70C97D6D2E6F1B5AB6B29B1
SHA-512:	753855A825AC924E2AFF525603E915688BC671C857BCD44FD95D440709631A8646E9D3D79E0B3D1E6FFCAC356773478D67B044F77E8314AD1CBC17D8528635B0
Malicious:	false
Preview:	...........W.n.6....@.\|.(......E7..n...-.J.l...T....=....Q.K....=....9....N..Dfd.....i..Yk...`B..'.h.......Q[Q.%Iw..k'..E..^.........;...H.x!..Y.....".......C...M]z.DK'\z.,..%.5.....Og.".~...-3..R..I...xo.e..l.b\|..yUU/d!.ZKU......6.aBxU..7].X..mS...O.Y.0....F../wA.YZ.&....Z...........n-(}...F....L.n.....;...J.B.-....6.~......\|..g&...-@%W"5./.^G.Hd..... ./.......T.j#Y.qC......".}'tC.lj..w....?.....'.....'q......z....._.V......dp.'... ...PN.....9.{..r.Q...97b....T.[aZ.y...6lty\|d_f.p..d....Bc.0P.(.....4..!.....3........3k.1.......ar.Xany...lX...%*..^..CF....l:....e.,..._...%.M.KJ....=N..l.........O.R.w.uU-U-...VcRU..4.MN.f}}N.......M]..0.#.t`;.V&.u..M).A.9.n...v...q.U...H.^.rU...4...34.v.O....U../..,..}.{e~.}H.m1{. ..C.0.l+.!......D..$.}.f..<\.y..s...w.rD........`.9.%..Pe.."...;...p<P...@M...._c.!JK..Q,..H.Y......M).....B./U..j.........a\|."~VX.....\l.4UMi..^.[].Tx. ...C1CB..-!?l.5..CX.)l.tL.\|........#tG.l..WMa3b7\|..[.\>.

Static File Info

General

File type:	Microsoft Word 2007+
Entropy (8bit):	7.78180536772278
TrID:	Word Microsoft Office Open XML Format document (49504/1) 58.23% Word Microsoft Office Open XML Format document (27504/1) 32.35% ZIP compressed archive (8000/1) 9.41%
File name:	REFUND STATUS.docx
File size:	95'472 bytes
MD5:	7a39f7c17a92dba8548dd5898f6839e4
SHA1:	67396645d9cfbae73a0d53bf686ea07538846234
SHA256:	657854ffa1be80294d5c94308ac4f96a0c33b3065afcc313c21eafd87ba26e7d
SHA512:	f60edb90273d1041a288f2693494831a761fbb1ab3ec6d00980d4bff6388c9014d7574b9caf9a04dfdd748fa7a8d1845b5f7036b604017d37f85ef91cdd002e5
SSDEEP:	1536:nyQh3+o6kzJEurKwSjPLTzLFX/L67MhW4KiU/b6dNQXkGRAYBEujDngL0:nxtzrtSLz1LaMhW4KH/3Uo1j0L0
TLSH:	B293AE578E148B83E06887F8FE074D6D2B19274CF99379FE09161ECB3E516470C9A0AE
File Content Preview:	PK..........!..A..f...T.......[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	35e5c48caa8a8599

Static OLE Info

General

Document Type:	OpenXML
Number of OLE Files:	1

OLE File "REFUND STATUS.docx"

Indicators

Has Summary Info:
Application Name:
Encrypted Document:	False
Contains Word Document Stream:	True
Contains Workbook/Book Stream:	False
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	False

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 12, 2025 13:28:13.794327021 CET	49682	443	192.168.2.17	51.132.193.104
Mar 12, 2025 13:28:13.809442997 CET	49683	80	192.168.2.17	2.17.190.73
Mar 12, 2025 13:28:13.809533119 CET	49671	443	192.168.2.17	52.109.28.46
Mar 12, 2025 13:28:14.096237898 CET	49682	443	192.168.2.17	51.132.193.104
Mar 12, 2025 13:28:14.112251043 CET	49683	80	192.168.2.17	2.17.190.73
Mar 12, 2025 13:28:14.112302065 CET	49671	443	192.168.2.17	52.109.28.46
Mar 12, 2025 13:28:14.703243971 CET	49682	443	192.168.2.17	51.132.193.104
Mar 12, 2025 13:28:14.719250917 CET	49683	80	192.168.2.17	2.17.190.73
Mar 12, 2025 13:28:14.719291925 CET	49671	443	192.168.2.17	52.109.28.46
Mar 12, 2025 13:28:15.374648094 CET	49673	443	192.168.2.17	204.79.197.203
Mar 12, 2025 13:28:15.677289963 CET	49673	443	192.168.2.17	204.79.197.203
Mar 12, 2025 13:28:15.917251110 CET	49682	443	192.168.2.17	51.132.193.104
Mar 12, 2025 13:28:15.933228970 CET	49683	80	192.168.2.17	2.17.190.73
Mar 12, 2025 13:28:15.933263063 CET	49671	443	192.168.2.17	52.109.28.46
Mar 12, 2025 13:28:16.284245014 CET	49673	443	192.168.2.17	204.79.197.203
Mar 12, 2025 13:28:17.498086929 CET	49673	443	192.168.2.17	204.79.197.203
Mar 12, 2025 13:28:18.321222067 CET	49682	443	192.168.2.17	51.132.193.104
Mar 12, 2025 13:28:18.336241007 CET	49683	80	192.168.2.17	2.17.190.73
Mar 12, 2025 13:28:18.336278915 CET	49671	443	192.168.2.17	52.109.28.46
Mar 12, 2025 13:28:19.900257111 CET	49673	443	192.168.2.17	204.79.197.203
Mar 12, 2025 13:28:23.122248888 CET	49682	443	192.168.2.17	51.132.193.104
Mar 12, 2025 13:28:23.138267994 CET	49683	80	192.168.2.17	2.17.190.73
Mar 12, 2025 13:28:23.138283968 CET	49671	443	192.168.2.17	52.109.28.46
Mar 12, 2025 13:28:24.701287985 CET	49673	443	192.168.2.17	204.79.197.203
Mar 12, 2025 13:28:32.731311083 CET	49682	443	192.168.2.17	51.132.193.104
Mar 12, 2025 13:28:32.747298956 CET	49683	80	192.168.2.17	2.17.190.73
Mar 12, 2025 13:28:32.747354984 CET	49671	443	192.168.2.17	52.109.28.46
Mar 12, 2025 13:28:34.309294939 CET	49673	443	192.168.2.17	204.79.197.203
Mar 12, 2025 13:28:37.165299892 CET	49719	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:37.165327072 CET	443	49719	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:37.165391922 CET	49719	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:37.168299913 CET	49719	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:37.168315887 CET	443	49719	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:37.924164057 CET	49719	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:37.924452066 CET	49722	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:37.924503088 CET	443	49722	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:37.924568892 CET	49722	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:37.925477028 CET	49722	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:37.925492048 CET	443	49722	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:37.964334011 CET	443	49719	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:39.258949995 CET	443	49719	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:39.261928082 CET	49719	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:40.555349112 CET	49722	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:40.555495024 CET	443	49722	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:40.555536032 CET	49722	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:40.555895090 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:40.555938959 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:40.556003094 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:40.556339025 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:40.556355953 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:41.886344910 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:41.886393070 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:41.886473894 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:41.886801958 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:41.886816025 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:43.913387060 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:43.913786888 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:43.913824081 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:43.914849997 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:43.914975882 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:43.915852070 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:43.915925980 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:43.969850063 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:43.969896078 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:44.017352104 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:44.517762899 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:44.517802000 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:44.517865896 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:44.517895937 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:44.517913103 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:44.519646883 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:44.519659996 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:44.519934893 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:44.519939899 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:44.520261049 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:44.520267963 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:45.038259029 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:45.038674116 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:45.038703918 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:45.158025026 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:45.212296009 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:45.466947079 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:45.468729019 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:45.468797922 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:45.475413084 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:45.475486994 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:45.516149044 CET	49731	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516235113 CET	443	49731	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.516247988 CET	49732	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516278982 CET	443	49732	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.516294956 CET	49731	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516343117 CET	49732	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516664028 CET	49733	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516778946 CET	443	49733	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.516818047 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516848087 CET	49733	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516854048 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.516907930 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516968012 CET	49735	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.516994953 CET	443	49735	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.517055035 CET	49735	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.517297983 CET	49732	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.517317057 CET	443	49732	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.517580032 CET	49731	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.517616987 CET	443	49731	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.517841101 CET	49733	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.517896891 CET	443	49733	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.518093109 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.518110037 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.518342972 CET	49735	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:45.518369913 CET	443	49735	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:45.547718048 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:45.547734022 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:46.291500092 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:46.295016050 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:46.295124054 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:46.299741030 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:46.299844027 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:46.307051897 CET	49736	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:46.307115078 CET	443	49736	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:46.307198048 CET	49736	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:46.307487011 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:46.307501078 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:46.308602095 CET	49736	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:46.308614969 CET	443	49736	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:47.138551950 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.140281916 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.140361071 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:47.140399933 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.146934986 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.146948099 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.147013903 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:47.147032976 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.147067070 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:47.153628111 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.153647900 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.153732061 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:47.153743029 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.160587072 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.160655022 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:47.160662889 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.167407990 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.167460918 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:47.167469978 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.213376999 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:47.213404894 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.261300087 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:47.261337996 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:47.309320927 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:49.310353994 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.310446024 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.310467005 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.310518026 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.313102007 CET	443	49733	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.313174963 CET	49733	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.313204050 CET	443	49733	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.313261032 CET	49733	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.313570023 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.363297939 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.363312006 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.364973068 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.364989042 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.365137100 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365143061 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.365303993 CET	49731	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365381956 CET	49732	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365437031 CET	49733	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365483046 CET	49735	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365500927 CET	443	49731	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.365523100 CET	443	49732	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.365552902 CET	49736	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365571976 CET	49731	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365581036 CET	443	49735	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.365595102 CET	49732	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365628958 CET	49735	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365649939 CET	443	49733	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.365670919 CET	443	49736	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.365700006 CET	49733	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.365725994 CET	49736	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.366991997 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.366996050 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367023945 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367027044 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367050886 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367054939 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367073059 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367075920 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367101908 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367105007 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367122889 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367126942 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367172956 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367177963 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367188931 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367192030 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367201090 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367203951 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367225885 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367228985 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367254019 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367257118 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367280960 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367284060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367307901 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367311001 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367337942 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367341995 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367357016 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367366076 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367383003 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367393970 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367410898 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367427111 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367428064 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367439032 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367456913 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367469072 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367481947 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367492914 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367506981 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367521048 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367523909 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367533922 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367547989 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367572069 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367573023 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367585897 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367599964 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367613077 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367620945 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367640018 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367646933 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367651939 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.367671013 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.367686987 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.833201885 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.833528996 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.833571911 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.837203979 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.838870049 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.838924885 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.838934898 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.845681906 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.845717907 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.845750093 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.845761061 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.845813036 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.852511883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.852545023 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.852612019 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.859350920 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.859412909 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.866199970 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.866249084 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.866290092 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.872987032 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.873012066 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.873050928 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.873087883 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.924040079 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.924113989 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.931052923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.931114912 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.934384108 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.934494019 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.934542894 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.941282988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.941358089 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.948479891 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.948544979 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.954845905 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.954952002 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.954998970 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.955007076 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.961831093 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.961889029 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.968786955 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.968846083 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.976555109 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.976610899 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.981261969 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.981276035 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.981322050 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.981331110 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.981384039 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.986892939 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.986943007 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.992460012 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.992523909 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:49.998182058 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:49.998258114 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.003849983 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.010766983 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.010793924 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.010828972 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.010839939 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.010854959 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.014772892 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.014820099 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.017775059 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.020360947 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.020416975 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.020762920 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.020816088 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.026129961 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.026185989 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.031629086 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.031698942 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.035418034 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.035474062 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.038980007 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.039030075 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.042522907 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.042577982 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.046073914 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.046129942 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.049525976 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.049587965 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.053138018 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.053194046 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.053205967 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.056643009 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.056698084 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.060061932 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.060116053 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.060121059 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.060133934 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.060174942 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.063651085 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.063702106 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.063705921 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.067240000 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.067274094 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.067296982 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.070729971 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.070781946 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.070786953 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.074306965 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.074357986 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.074363947 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.074383974 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.074424982 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.077863932 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.077910900 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.077915907 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.085767031 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.085779905 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.085819006 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.085827112 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.085867882 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.088749886 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.088808060 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.088816881 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.091042995 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.091095924 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.091101885 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.097687960 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.097749949 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.097907066 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.097954035 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.097960949 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.098067999 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.098119020 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.104676962 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.104743004 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.104885101 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.104948997 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.104998112 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.105004072 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.108392954 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.108432055 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.108452082 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.111470938 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.111490011 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.111521006 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.111526966 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.111573935 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.114725113 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.114804029 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.114808083 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.117830038 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.117906094 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.117913008 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.121537924 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.121550083 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.121587038 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.121592999 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.121635914 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.125252008 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.125332117 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.125336885 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.128550053 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.128582954 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.128634930 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.131213903 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.131303072 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.131388903 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.133048058 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.133059025 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.133102894 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.133109093 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.133152008 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.133352995 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.135216951 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.135303974 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.136285067 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.136344910 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.136349916 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.136389017 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.138355017 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.138442993 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.138448000 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.140352964 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.140408993 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.140414000 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.142558098 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.142616987 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.142647028 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.142668009 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.142708063 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.142714024 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.157593966 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.157609940 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.157641888 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.157649040 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.157706022 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.159290075 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.159343958 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.159348011 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.161032915 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.161091089 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.161097050 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.162993908 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.163042068 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.163047075 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.163975954 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.164011002 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.164031982 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.165476084 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.165519953 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.165576935 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.167135954 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.167148113 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.167206049 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.167212009 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.167263985 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.168875933 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.168941021 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.168946028 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.170607090 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.170681000 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.170698881 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.171911955 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.171976089 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.171981096 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.174196959 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.174264908 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.174272060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.174299955 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.174360037 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.174365044 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.178340912 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.178425074 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.178457975 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.180140018 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.180185080 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.180207014 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.180845022 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.180891991 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.182414055 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.182472944 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.182487011 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.182523966 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.183947086 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.184009075 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.184016943 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.187388897 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.187446117 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.187452078 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.187491894 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.190639973 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.190782070 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.190831900 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.191310883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.194837093 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.194869041 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.194906950 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.194971085 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.195013046 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.198152065 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.198673010 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.198731899 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.198774099 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.198827982 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.198843956 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.201883078 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.201941967 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.201970100 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.202028990 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.204598904 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.206048012 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.206070900 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.206131935 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.206159115 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.206209898 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.206757069 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.206811905 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.209817886 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.209889889 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.209896088 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.213646889 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.213689089 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.213706017 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.213849068 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.213893890 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.213907003 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.217264891 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.217281103 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.217327118 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.217333078 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.217370033 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.217422962 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.220907927 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.220963001 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.220968962 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.221043110 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.221070051 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.221101999 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.222992897 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.223037958 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.225586891 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.225641012 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.225702047 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.225708961 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.226165056 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.226202011 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.226236105 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.227440119 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.227492094 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.227497101 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.227534056 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.228575945 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.228634119 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.228638887 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.232147932 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.232197046 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.232202053 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.232469082 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.232522964 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.232527971 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.232572079 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.235857964 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.235920906 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.235927105 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.235977888 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.236381054 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.236427069 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.236432076 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.237456083 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.237510920 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.237517118 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.239870071 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.239919901 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.239927053 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.240370035 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.240396976 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.240437031 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.244283915 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.244378090 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.244402885 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.244458914 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.244466066 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.244638920 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.244694948 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.244704008 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.247831106 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.247859955 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.247905970 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.247966051 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.247977972 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.248018026 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.248022079 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.248030901 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.248069048 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.248485088 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.248533964 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.251122952 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.252360106 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.252425909 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.252439976 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.252486944 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.253930092 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.253952026 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.254005909 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.254015923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.254060030 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.254132032 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.257545948 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.257603884 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.257615089 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.258708954 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.258763075 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.258807898 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.261019945 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.261092901 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.261111975 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.261292934 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.261303902 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.261349916 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.261357069 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.261400938 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.267164946 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.267208099 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.267257929 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.267263889 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.267292023 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.269391060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.269413948 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.269447088 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.270858049 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.270879984 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.270920038 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.270941019 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.271224022 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.277594090 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.277607918 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.277720928 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.277728081 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.277757883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.277767897 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.277771950 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.277779102 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.277825117 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.285104990 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.285157919 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.285202980 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.285202980 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.285231113 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.285235882 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.285248995 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.285276890 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.288775921 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.288788080 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.288830042 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.288844109 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.288887024 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.292781115 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.292846918 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.292857885 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.292965889 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.292982101 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.292992115 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.293015957 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.293023109 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.293036938 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.296654940 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.296672106 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.296720982 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.296744108 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.296758890 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.304858923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.304883003 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.304917097 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.304924011 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.304935932 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.307856083 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.307893038 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.307918072 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.308208942 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.308257103 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.308273077 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.313167095 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.313184023 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.313241005 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.313249111 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.319264889 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.319278002 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.319366932 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.319375038 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.319400072 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.319417000 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.319422960 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.319469929 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.323314905 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.323349953 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.323396921 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.323643923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.323694944 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.323704958 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.323973894 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.324027061 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.324034929 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.327734947 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.327764988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.327812910 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.327831984 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.327863932 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.331456900 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.331487894 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.331516981 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.331546068 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.331887007 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.332076073 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.332125902 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.332146883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.335072041 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.335122108 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.335134029 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.335175991 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.335223913 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.335275888 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.335395098 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.335445881 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.345730066 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.345891953 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.345904112 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.345958948 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.345987082 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.346034050 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.349900961 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.350042105 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.350060940 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.350085974 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.350090027 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.350100994 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.350116014 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.350146055 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.355139017 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.355307102 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.355380058 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.355395079 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.355690956 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.355777979 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.355783939 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.356342077 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.356359959 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.356393099 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.356393099 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.356403112 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.356421947 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.356441021 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.373434067 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.373497009 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.373646975 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.373683929 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.373703003 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.373708963 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.373730898 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.374248028 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.374296904 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.374303102 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.374331951 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.374371052 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.374376059 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.374500036 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.374514103 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.374541998 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.374547958 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.374586105 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.380099058 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.380112886 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.380145073 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.380182028 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.380187988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.380225897 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.380273104 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.380923033 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.380954027 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.380976915 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.380981922 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.381006002 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.383387089 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.383444071 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.383481026 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.383512020 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.383532047 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.383537054 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.383552074 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.395405054 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.395433903 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.395467997 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.395482063 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.395510912 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.395526886 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.395565987 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.400340080 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.400427103 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.400433064 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.400562048 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.400614977 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.400629997 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.400635958 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.400660038 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.405936956 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.405993938 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.406001091 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.406009912 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.406060934 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.406065941 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.406519890 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.406557083 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.406564951 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.406569958 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.406606913 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.410041094 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.410067081 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.410090923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.410106897 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.410114050 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.410147905 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.410453081 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.410509109 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.410514116 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.414118052 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.414149046 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.414165974 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.414202929 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.414370060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.414422035 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.414432049 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.418040991 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.418092966 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.418167114 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.418217897 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.418222904 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.418426037 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.418452978 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.418467999 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.418473005 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.418512106 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.422142029 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:50.422177076 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:50.423748016 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.423774958 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.423793077 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.423808098 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.423811913 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.423856020 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.423856020 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.431629896 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.431664944 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.431684971 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.431689978 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.431704044 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.431763887 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.431803942 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.431809902 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.434915066 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.434964895 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.435261965 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.435277939 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.435312033 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.435316086 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.435327053 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.441023111 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.441035032 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.441071987 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.441078901 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.441118002 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.441334009 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.441344976 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.441384077 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.441389084 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.441427946 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.443028927 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.443099976 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.443104982 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.443190098 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.443239927 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.443245888 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.443459034 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.443500042 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.443505049 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.459229946 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.459249973 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.459279060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.459281921 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.459291935 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.459317923 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.459338903 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.459952116 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.459970951 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.459997892 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.460002899 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.460007906 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.460032940 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.460053921 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.466418028 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.466475964 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.466481924 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.466521025 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.466532946 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.466557980 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.466564894 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.466594934 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.467108965 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.467159986 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.467165947 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.467207909 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.467267990 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.467456102 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.467500925 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.467504978 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.467936993 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.467947960 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.467988014 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.467993975 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.468030930 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.482215881 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.482255936 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.482275009 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.482286930 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.482300043 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.482307911 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.482347012 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.482374907 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.487420082 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.487442017 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.487468004 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.487487078 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.487490892 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.487525940 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.487545013 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.508171082 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.508171082 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.508208036 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517096043 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517144918 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517158031 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517225027 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.517232895 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517267942 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.517746925 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517764091 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517800093 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517802000 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.517811060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.517822981 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.517848015 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.518619061 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.518656969 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.518670082 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.518676996 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.518681049 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.518698931 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.518723965 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.519344091 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.519382000 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.519393921 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.519408941 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.519413948 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.519423962 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.519443989 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.519943953 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.519973993 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.520004988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.520041943 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.520049095 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.520584106 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.520612955 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.520647049 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.520652056 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.520663023 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.521929026 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.523107052 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.523140907 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.523161888 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.523168087 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.523200035 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.523220062 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.526696920 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.526710033 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.526772022 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.526880980 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.527560949 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.527594090 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.527637959 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.528158903 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.528181076 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.528237104 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.528240919 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.530122995 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.530178070 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.530184031 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.530194998 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.530225039 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.547794104 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.547832012 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.547858000 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.547873974 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.547885895 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.547903061 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.547904968 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.547935963 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.553528070 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.553564072 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.553597927 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.553607941 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.553612947 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.553648949 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.553745985 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.553819895 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.553823948 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.569715023 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.569761038 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.569780111 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.569796085 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.569802046 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.569843054 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.570256948 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.570326090 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.570331097 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.570852041 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.570869923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.570924044 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.570928097 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.571851015 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.573673010 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.573714972 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.573733091 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.573739052 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.573756933 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.573801041 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.575856924 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.575862885 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.584240913 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.584265947 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.584285021 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.584316969 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.584317923 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.584332943 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.584367037 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.584788084 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.584835052 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.584847927 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.588216066 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.588236094 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.588272095 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.588279963 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.588304043 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.603656054 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.603748083 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.603858948 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.603882074 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.603900909 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.603916883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.603919983 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.603929043 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.603943110 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.603974104 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.603980064 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.604427099 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.605129004 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.605169058 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.605175018 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.605180025 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.605200052 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.605209112 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.605269909 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.605274916 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.611218929 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.612631083 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.612653017 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.616328001 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.616369963 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.616394043 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.616425991 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.616425991 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.616441011 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.616465092 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.616487026 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.617002964 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.617023945 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.617073059 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.617078066 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.617105961 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.617125034 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.620922089 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.632436037 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.632457018 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.632477999 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.632549047 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.632555962 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.632596970 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.632612944 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.634160995 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.634191990 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.634215117 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.634234905 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.634239912 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.634290934 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.640099049 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640172005 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.640181065 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640225887 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.640274048 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640348911 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.640373945 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640408039 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640420914 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640434027 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.640438080 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640480042 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.640638113 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640651941 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.640682936 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.640687943 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.643845081 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.647068977 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.655420065 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655503988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655535936 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655572891 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.655579090 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655591011 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655635118 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.655694008 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655721903 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655750036 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655775070 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.655781031 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.655833960 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.660439968 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.660475016 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.660495996 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.660510063 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.660546064 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.660551071 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.660590887 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.670536041 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.670567989 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.670603037 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.670608044 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.670634031 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.670646906 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.670677900 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.670845032 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.670913935 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.670918941 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.670953035 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.671204090 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.671210051 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.671291113 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.674566984 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.674597979 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.674633026 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.674638987 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.674675941 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.674690962 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.674726963 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.674736023 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.674745083 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.690603018 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.690670013 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.690701962 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.690706968 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.690718889 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.690735102 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.690757036 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.690895081 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.690924883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.690953016 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.690963984 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.690975904 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.691728115 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.691765070 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.691780090 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.691787004 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.691792965 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.691807032 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.691831112 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.696357965 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.701360941 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.701390028 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.701402903 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.701438904 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.701447010 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.701477051 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.701554060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.701570034 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.701623917 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.701630116 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.703407049 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.703433990 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.703478098 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.703497887 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.703507900 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.703525066 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.703543901 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.703567028 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.703572989 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.703845978 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.721332073 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.721374989 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.721405029 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.721421957 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.721426964 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.721477985 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.721482038 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.721494913 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.721538067 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.727180958 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727291107 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727325916 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727355003 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.727360010 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727371931 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.727384090 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727397919 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.727402925 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727416039 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727427006 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.727443933 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727473974 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.727479935 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.727488995 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.742585897 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.742651939 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.742661953 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.742669106 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.742688894 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.742695093 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.742707968 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.742737055 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.742741108 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.742772102 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.746376991 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:50.746419907 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:50.746495008 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:50.746828079 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:50.746843100 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:50.747397900 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.747438908 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.747462988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.747483969 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.747490883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.747520924 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.757603884 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.757632017 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.757652998 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.757695913 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.757702112 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.757714987 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.757733107 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.757750034 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.757781029 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.757796049 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.757817030 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.757822990 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.757843018 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.761482954 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.761616945 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.761635065 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.761662960 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.761682987 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.761687994 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.761723042 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.762166977 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:50.762200117 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:50.777447939 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.777472973 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.777501106 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.777554035 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.777601957 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.777650118 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.777656078 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.777679920 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.777693033 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.777698994 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.777723074 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.777753115 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.777921915 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.777966976 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.778620958 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.778655052 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.778671026 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.778714895 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.778721094 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.778748035 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.778767109 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.788377047 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.788424969 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.788443089 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.788460016 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.788475990 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.788503885 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.790426016 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.790461063 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.790473938 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.790488005 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.790493011 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.790504932 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.790534019 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.808182001 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.808211088 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.808265924 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.808279037 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.808294058 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.808326006 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.808327913 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.808356047 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.808360100 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.808382034 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.808399916 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.813952923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814037085 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814099073 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.814105034 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814141035 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.814187050 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814213037 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814265013 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.814270020 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814291954 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.814440966 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814471006 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814491987 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.814496994 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.814507008 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.829472065 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.829493046 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.829509020 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.829557896 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.829566002 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.829593897 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.829596996 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.829617977 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.829663992 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.829668999 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.834304094 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.834323883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.834367037 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.834389925 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.834413052 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.834451914 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.844454050 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844484091 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844515085 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844516993 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.844526052 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844540119 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844567060 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.844583988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844644070 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.844767094 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844799995 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844829082 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.844835997 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.844861031 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.848721981 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.848745108 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.848830938 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.848836899 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.864253998 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.864330053 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.864367008 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.864403009 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.864442110 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.864448071 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.864458084 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.865794897 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.865847111 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.865866899 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.865873098 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.865890980 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.865895987 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.865927935 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.865931988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.865942955 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.875142097 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875224113 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.875344038 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875376940 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875401974 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.875406981 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875452995 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.875457048 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875473022 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875494003 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875508070 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.875509977 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875543118 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.875546932 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.875575066 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.875629902 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.877309084 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.877355099 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.877374887 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.877378941 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.877388954 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.877403975 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.877432108 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.894926071 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895015955 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.895040989 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895073891 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895098925 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.895103931 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895113945 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.895124912 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895165920 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.895172119 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895343065 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895375013 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895399094 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.895404100 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.895422935 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.901185036 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.901225090 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.901243925 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.901288033 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.901293993 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.901319981 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.901340008 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.901354074 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.901375055 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.901407957 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.901412964 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.901483059 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.916404963 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.916450024 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.916496038 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.916507959 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.916522026 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.916537046 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.916543007 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.916555882 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.916559935 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.916600943 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.916721106 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.916785955 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.916790009 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.921384096 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.921411037 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.921442986 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.921492100 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.921498060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.921508074 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.931297064 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.931386948 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.931476116 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.931529999 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.931546926 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.931551933 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.931576967 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.931694984 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.931720972 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.931747913 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.931750059 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.931757927 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.931780100 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.931807995 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.935487986 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.935523987 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.935569048 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.935574055 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.935589075 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.952441931 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.952471972 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.952559948 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.952564955 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.952583075 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.952635050 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.952639103 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.952733040 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.952753067 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.952790976 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.952820063 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.953100920 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.953126907 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.953154087 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.953161955 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.953166008 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.953176975 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.953193903 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.962302923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.962356091 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.962373018 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.962380886 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.962397099 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.962408066 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.962431908 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.962440968 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.962450981 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.962599993 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.963771105 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.963776112 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.964180946 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.964215040 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.964235067 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.964265108 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.964270115 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.964289904 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.981904984 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.981966972 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.981987953 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.981997013 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.982026100 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.982043028 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.988040924 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988085985 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988142967 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.988147974 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988172054 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.988178968 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988188982 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.988197088 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988217115 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988253117 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.988289118 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988352060 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988374949 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988400936 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.988405943 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988423109 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.988627911 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988643885 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988677025 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:50.988682032 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:50.988745928 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.003851891 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.003899097 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.003931999 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.003945112 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.003948927 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.003993034 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.008260012 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.008286953 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.008335114 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.008341074 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.008348942 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.008385897 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.018343925 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.018379927 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.018448114 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.018454075 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.018472910 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.018615007 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.018635988 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.018663883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.018668890 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.018691063 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.022360086 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.022396088 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.022439003 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.022444010 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.022459030 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.022483110 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.039331913 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.039491892 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.039534092 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.039578915 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.039581060 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.039592028 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.039596081 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.039625883 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.039632082 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.041109085 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.041134119 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.041152000 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.041174889 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.041181087 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.041203022 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.041238070 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.049027920 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.049062967 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.049093008 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.049108028 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.049113989 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.049135923 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.049155951 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.049406052 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.049427986 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.049463034 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.049468040 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.049484015 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.051029921 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.051065922 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.051090002 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.051090956 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.051100969 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.051110029 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.051132917 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.068670034 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.068744898 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.069798946 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.069834948 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.069883108 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.069886923 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.069928885 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.074779034 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.074800014 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.074873924 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.074879885 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.074970961 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075126886 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075161934 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075190067 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.075195074 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075221062 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.075284958 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075326920 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.075331926 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075386047 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075402975 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075431108 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.075431108 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075440884 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.075450897 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.075464010 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.090046883 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090116024 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090120077 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.090130091 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090161085 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090178967 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.090186119 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090224981 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.090295076 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090316057 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090344906 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090351105 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.090354919 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.090373993 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.090401888 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.095057964 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.095097065 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.095124006 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.095129967 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.095170975 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.095249891 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.095304966 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.105207920 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.105252028 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.105288982 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.105298042 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.105309010 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.105334044 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.108990908 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109005928 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109024048 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109052896 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.109057903 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109070063 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109113932 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.109124899 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.109128952 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109313965 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109349966 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109365940 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.109370947 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109397888 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.109503984 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.109560013 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.109565973 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126076937 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126166105 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.126168966 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126180887 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126211882 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126224995 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.126276016 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.126281977 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126323938 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.126554012 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126583099 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126616001 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.126621962 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126646996 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.126665115 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.126858950 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126879930 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126893044 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126919031 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.126924992 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.126948118 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.135971069 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.136020899 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.136039972 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.136092901 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.136131048 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.136245966 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.136284113 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.136298895 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.136303902 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.136327028 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.136349916 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.136504889 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.136548996 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.137877941 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.138006926 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.164756060 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:51.168690920 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:51.168715954 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:51.180481911 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.195278883 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:51.195307016 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:51.195924044 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:51.196177006 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:51.196183920 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:51.222342968 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.239037991 CET	49695	80	192.168.2.17	142.250.185.67
Mar 12, 2025 13:28:51.239109039 CET	49696	80	192.168.2.17	199.232.210.172
Mar 12, 2025 13:28:51.244055986 CET	80	49695	142.250.185.67	192.168.2.17
Mar 12, 2025 13:28:51.244493961 CET	80	49696	199.232.210.172	192.168.2.17
Mar 12, 2025 13:28:51.244574070 CET	49695	80	192.168.2.17	142.250.185.67
Mar 12, 2025 13:28:51.244581938 CET	49696	80	192.168.2.17	199.232.210.172
Mar 12, 2025 13:28:51.261976004 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:51.261997938 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:51.263575077 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.274276018 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:51.274285078 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:51.304411888 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:51.304460049 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:51.304552078 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:51.304882050 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:51.304898977 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:51.318325996 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.318337917 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.350559950 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:51.366314888 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:51.366334915 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:51.398327112 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:51.414340973 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:52.046274900 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:52.096327066 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:52.187638998 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:52.187657118 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:52.450201988 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.450256109 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:52.450351954 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.451172113 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.451189995 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:52.456429005 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:52.456454992 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:52.872086048 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:52.872384071 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.872399092 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:52.873922110 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:52.873990059 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.874947071 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.875097036 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:52.875129938 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.920322895 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:52.926306009 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.926328897 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:52.932993889 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:52.974298000 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:52.974512100 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:53.261176109 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:53.310319901 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:53.486838102 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.486932993 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.486959934 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.515286922 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.515353918 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.515367031 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.515387058 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.515413046 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.515439987 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.515860081 CET	49742	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.515875101 CET	443	49742	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.519319057 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.519355059 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.519874096 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.520196915 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.520214081 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.575215101 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:53.575289011 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:53.575409889 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:53.612162113 CET	49729	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:28:53.612179041 CET	443	49729	142.250.186.132	192.168.2.17
Mar 12, 2025 13:28:53.894977093 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.895009041 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.895134926 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.895590067 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:53.895605087 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:53.900335073 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:53.900343895 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:53.900402069 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:53.900715113 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:53.900729895 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:53.903330088 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:53.903338909 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:53.903407097 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:53.903696060 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:53.903707981 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:54.546905041 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:54.548726082 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:54.548755884 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:54.549813986 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:54.549870014 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:54.551126957 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:54.551192999 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:54.555104017 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:54.555113077 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:54.604330063 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.187422037 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.187500954 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.187511921 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.187525988 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.187571049 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.187582016 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.227602005 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.301145077 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.301173925 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.301214933 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.301233053 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.301234961 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.301259041 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.301287889 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.301316023 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.347659111 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.347687006 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.347731113 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.347744942 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.347784996 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.347798109 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.347848892 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.396812916 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.396842003 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.396893024 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.396908045 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.396929979 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.396967888 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.441602945 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.441628933 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.441688061 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.441745043 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.441771984 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.441807985 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.441829920 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.471674919 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.471766949 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.471780062 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.471807957 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.471865892 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.472258091 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.472354889 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.472397089 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.472425938 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.472444057 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.472495079 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.472502947 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.513319969 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.513377905 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.516752958 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.516788960 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.516827106 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.516834974 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.516875029 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.527910948 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.527939081 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.528013945 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.528024912 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.528372049 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.560575962 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.565510035 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.565536976 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.565661907 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.565670967 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.565778971 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.565797091 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.572381020 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.572424889 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.572501898 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.572535038 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.572568893 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.574537039 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.574568987 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.574587107 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.574604988 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.574646950 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.574655056 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.574666977 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.574697018 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.574719906 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.574749947 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.575879097 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.576329947 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.576361895 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.576456070 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.576467991 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.576826096 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:55.576837063 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:55.583609104 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.583662033 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.583719015 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.583740950 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.583767891 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.583791018 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.596779108 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.596801043 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.596884966 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.596898079 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.599865913 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.606954098 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.606980085 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.607048035 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.607060909 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.607861042 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.618490934 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.618514061 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.618612051 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.618621111 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.619865894 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.620512962 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.620584965 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.629547119 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.629611969 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.629635096 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.629642010 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.629674911 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.638696909 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.638725042 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.638773918 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.638791084 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.638803005 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.652189016 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.652214050 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.652273893 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.652292013 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.652316093 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.655322075 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.655380011 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.655389071 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.655416012 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.655467987 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.655695915 CET	49751	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.655713081 CET	443	49751	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.659333944 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.659794092 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.659815073 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.663938999 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.664027929 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.664536953 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.664614916 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.664741039 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.708323956 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.716325998 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.716351032 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.764348030 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.889117002 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.889482975 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.889508963 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.889913082 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.890232086 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.890332937 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:55.903853893 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:55.904124022 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:55.904139996 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:55.905646086 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:55.905725956 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:55.906687021 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:55.906775951 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:55.906886101 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:55.938306093 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:55.948332071 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:55.953310013 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:55.953320980 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.001391888 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.035527945 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.035830975 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:56.035851955 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.046057940 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.046241999 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:56.046261072 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.163130045 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.174978018 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.208321095 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:56.219443083 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:56.219744921 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:56.219768047 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:56.220832109 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:56.220920086 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:56.222007990 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:56.222074986 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:56.222201109 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:56.222210884 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:56.224320889 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:56.245409012 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.245501041 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.245517015 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.271353006 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:56.287379026 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.287403107 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.335320950 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.336292028 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.336313009 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.336330891 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.336360931 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.336371899 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.336379051 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.336435080 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.336436033 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.383385897 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.403047085 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.403059959 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.403103113 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.403116941 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.403150082 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.403161049 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.403168917 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.403208017 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.403218985 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.443114996 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.444482088 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:56.444502115 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.456176996 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.457629919 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.457684040 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:56.457720041 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:56.462544918 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.462558031 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.462593079 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.462604046 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.462646961 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.462661028 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.462691069 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.462723970 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.500324965 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.517812014 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.517842054 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.517879963 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.517960072 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.517972946 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.517992020 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.518207073 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.518243074 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.518254995 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.518285036 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.518304110 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.518306017 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.518316031 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.518332958 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.518337011 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.518366098 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.518377066 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.542824984 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.542860985 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.542937994 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.542949915 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.543019056 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.566399097 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.566437960 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.566555977 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.566555977 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.566569090 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.566616058 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.576155901 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.576189041 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.576240063 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.576263905 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.576292992 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.576323032 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.584249020 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.584325075 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.593487024 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.593519926 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.593595028 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.593606949 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.593652964 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.593652964 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.600682974 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.600771904 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.600790977 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.600826025 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.600836039 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.600874901 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.601058006 CET	49758	443	192.168.2.17	2.22.61.186
Mar 12, 2025 13:28:56.601070881 CET	443	49758	2.22.61.186	192.168.2.17
Mar 12, 2025 13:28:56.614887953 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:56.614927053 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:56.615006924 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:56.615314960 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:56.615329027 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:56.619852066 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.619946003 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.619949102 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.619968891 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.620024920 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.622550011 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.622654915 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.622664928 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.634092093 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.634164095 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.634186029 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.634196997 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.634241104 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.648195982 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.648224115 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.648292065 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.648314953 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.648338079 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.664469957 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.664501905 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.664544106 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.664557934 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.664609909 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.678807020 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.678832054 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.678879023 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.678890944 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.679016113 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.680455923 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.680531025 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.691170931 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.691246033 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.691302061 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.691302061 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.691309929 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.705977917 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.706001043 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.706053019 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.706062078 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.706131935 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.706410885 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:56.706521034 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:56.706569910 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:56.707365990 CET	49759	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:56.707393885 CET	443	49759	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:56.716957092 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.716979027 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.717071056 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.717082024 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.717089891 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.730267048 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.730319023 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.730329990 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.730340958 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.730357885 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:56.730371952 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.730389118 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.730415106 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.730624914 CET	49754	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:56.730642080 CET	443	49754	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.156409025 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:57.156462908 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:57.156537056 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:57.156892061 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:57.156908989 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:57.191123962 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:57.230837107 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:57.244328976 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:57.247595072 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.247678041 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.247677088 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.247704029 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.247762918 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.255659103 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.255726099 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.276345968 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:57.276380062 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:57.324419022 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:57.324448109 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:57.342502117 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:57.342555046 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:57.342627048 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:57.342956066 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:57.343003035 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:57.343188047 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:57.343255043 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:57.343277931 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:57.345177889 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:57.345211029 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:57.345585108 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:57.345613003 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:57.351192951 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:57.351236105 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:57.351306915 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:57.351608038 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:57.351624012 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:57.371193886 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:57.371215105 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:57.371339083 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:57.376264095 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.376277924 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.376331091 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.376367092 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.376395941 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.376416922 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.383558989 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.383646965 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.383671999 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.389966965 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.390064955 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.390084982 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.428184032 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.428251982 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.428329945 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.428355932 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.428381920 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.437491894 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.437535048 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.437567949 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.437587976 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.437628984 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.484420061 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.484433889 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.484479904 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.484489918 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.484520912 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.484540939 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.484558105 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.487934113 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.487993002 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.488003969 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.488049030 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.529113054 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.529180050 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.529206038 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.529237032 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.529267073 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.529309988 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.535660982 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.535758018 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.541912079 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.541989088 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.547787905 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.547885895 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.547916889 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.547959089 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.547969103 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.548036098 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.558001995 CET	49756	443	192.168.2.17	157.240.0.6
Mar 12, 2025 13:28:57.558036089 CET	443	49756	157.240.0.6	192.168.2.17
Mar 12, 2025 13:28:57.598804951 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:57.598830938 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:57.598929882 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:57.599281073 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:57.599303007 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:58.098663092 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.100567102 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.100584030 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.100672007 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:58.100704908 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.100771904 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:58.101546049 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:58.101563931 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.114964008 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:58.115075111 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:58.115103006 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.160331964 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:58.164264917 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:58.208515882 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:58.208556890 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.216335058 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:58.252583981 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:58.296334982 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:58.452440977 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:58.452476978 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:58.452574015 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:58.452891111 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:58.452907085 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:58.591350079 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:58.631373882 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:58.631383896 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:58.632265091 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:28:58.632277966 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:28:58.662956953 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:58.662977934 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.664115906 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:58.664150953 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:58.786401033 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:58.786731958 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:58.786748886 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:58.788265944 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:58.788333893 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:58.788341045 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:58.788381100 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:58.789290905 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:58.789370060 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:58.789542913 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:58.789556026 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:58.793906927 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.839296103 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:58.840889931 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:58.921730042 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:58.925441027 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:58.925462961 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:58.966387987 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:59.132294893 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:59.132577896 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:59.132606030 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:59.133722067 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:59.133783102 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:59.134660006 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:59.134726048 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:59.134856939 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:59.134864092 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:59.188328028 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:59.271167994 CET	49697	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.271228075 CET	49698	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.271229029 CET	49699	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.271255016 CET	49700	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.271303892 CET	49701	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.276262999 CET	443	49697	13.107.246.60	192.168.2.17
Mar 12, 2025 13:28:59.276324034 CET	49697	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.277005911 CET	443	49699	13.107.246.60	192.168.2.17
Mar 12, 2025 13:28:59.277050018 CET	443	49698	13.107.246.60	192.168.2.17
Mar 12, 2025 13:28:59.277050972 CET	49699	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.277062893 CET	443	49700	13.107.246.60	192.168.2.17
Mar 12, 2025 13:28:59.277096033 CET	49698	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.277127028 CET	49700	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.277127981 CET	443	49701	13.107.246.60	192.168.2.17
Mar 12, 2025 13:28:59.277173042 CET	49701	443	192.168.2.17	13.107.246.60
Mar 12, 2025 13:28:59.282661915 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.282701969 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.282766104 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.282784939 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.282830000 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.282879114 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.282887936 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.282906055 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.282928944 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.282942057 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.282954931 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283034086 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283049107 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.283050060 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283066988 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.283071995 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283101082 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.283150911 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283205986 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283222914 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283226013 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.283236980 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.283293962 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283355951 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.283368111 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.369868994 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.377809048 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.378052950 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.378071070 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.379539013 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.379602909 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.380597115 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.380743980 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.380781889 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.392632961 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.392720938 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.393373966 CET	49765	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.393393040 CET	443	49765	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.403548956 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.403588057 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.403669119 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.404113054 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.404129028 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.410890102 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:28:59.414125919 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:59.414134026 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:59.418617964 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:59.419678926 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:59.419699907 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:59.424323082 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.426321030 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.426328897 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.458326101 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:28:59.474332094 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.514929056 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:59.569320917 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:28:59.602108002 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:59.602405071 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:59.602432013 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:59.603425980 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:59.603497982 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:59.604471922 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:59.604548931 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:59.604662895 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:59.604675055 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:28:59.649286032 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:28:59.657927990 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.658200026 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.658209085 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.659246922 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.659310102 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.659320116 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.659358978 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.659619093 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.659686089 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.659790993 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.659800053 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:28:59.664349079 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.664554119 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.664582014 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.664937973 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.665225029 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.665283918 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.665311098 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.712333918 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:28:59.713310957 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:28:59.713320971 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:28:59.739660025 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:59.742549896 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:59.742614985 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:59.742961884 CET	49766	443	192.168.2.17	142.250.185.130
Mar 12, 2025 13:28:59.742980957 CET	443	49766	142.250.185.130	192.168.2.17
Mar 12, 2025 13:28:59.972187042 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.972250938 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.972291946 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.972313881 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.972336054 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.972378016 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.972388983 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.973397017 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.973442078 CET	443	49770	142.250.186.130	192.168.2.17
Mar 12, 2025 13:28:59.973499060 CET	49770	443	192.168.2.17	142.250.186.130
Mar 12, 2025 13:28:59.979934931 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:28:59.984296083 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:28:59.984339952 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:28:59.984400034 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:28:59.984743118 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:28:59.984757900 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:00.011637926 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:00.012319088 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:00.012367010 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:00.012382030 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:00.015213013 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:00.015230894 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:00.063302994 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:00.169075012 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:00.172739029 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:00.172796965 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:00.173440933 CET	49768	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:00.173456907 CET	443	49768	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:00.175172091 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:00.175210953 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:00.175319910 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:00.175615072 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:00.175627947 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:00.187016964 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.187040091 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.187048912 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.187082052 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.187105894 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.187134027 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.187134027 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.187150002 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.187165022 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.187223911 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.193581104 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:00.193640947 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:00.193695068 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:00.194132090 CET	49771	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:00.194147110 CET	443	49771	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:00.205091000 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:00.205132008 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:00.205214024 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:00.205538034 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:00.205553055 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:00.290971994 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.291011095 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.291095018 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.291120052 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.291166067 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.291166067 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.360898018 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.360930920 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.360990047 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.361011982 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.361027002 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.361082077 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.388555050 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.388581991 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.388727903 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.388746023 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.388859034 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.425640106 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.425715923 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.425724983 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.425808907 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.425997019 CET	49769	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:00.426021099 CET	443	49769	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:00.548958063 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:00.548979044 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:00.549048901 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:00.549379110 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:00.549398899 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:00.562968016 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:00.563225985 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:00.563240051 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:00.564553976 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:00.564619064 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:00.564934969 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:00.564992905 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:00.565079927 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:00.565088034 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:00.616373062 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:00.849677086 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:00.849807978 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:00.849821091 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:00.904326916 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:00.938163042 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:00.939076900 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:00.939090014 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:01.348427057 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:01.348481894 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:01.348532915 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:01.348545074 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:01.348603010 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:01.348650932 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:01.348659992 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:01.349509954 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:01.349553108 CET	443	49772	157.240.253.35	192.168.2.17
Mar 12, 2025 13:29:01.349611044 CET	49772	443	192.168.2.17	157.240.253.35
Mar 12, 2025 13:29:01.351742983 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:01.351798058 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:01.351878881 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:01.352205038 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:01.352221966 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:01.556397915 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.556525946 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.558408022 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.558418989 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.558681011 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.559309006 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.559375048 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.560591936 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.560602903 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.560849905 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.567617893 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.567715883 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.591310978 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.591453075 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.592658997 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.592668056 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.593635082 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.594398975 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.604053974 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:01.604357004 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:01.604370117 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:01.605391979 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:01.605456114 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:01.605462074 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:01.605509996 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:01.605792999 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:01.605878115 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:01.605971098 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:01.605978012 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:01.607450008 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.607521057 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.608766079 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.608774900 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.609031916 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.609850883 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.612314939 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.612324953 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.636332035 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.647413969 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:01.652340889 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.734241962 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.734325886 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.735889912 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.735901117 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.736195087 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:01.737004042 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:01.784327030 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.034070969 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.034395933 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.034454107 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.035366058 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.035442114 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.036417961 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.036494017 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.036668062 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.036685944 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.054822922 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.054894924 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.054955959 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.055185080 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.055202007 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.055212975 CET	49775	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.055218935 CET	443	49775	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.077368021 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.122009993 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.122189999 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.122276068 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.122359037 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.122359037 CET	49778	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.122375011 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.122384071 CET	443	49778	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.132960081 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.134262085 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.134329081 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:02.135173082 CET	49779	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:02.135185957 CET	443	49779	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.176460028 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.179369926 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.179451942 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.179500103 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.179517984 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.179528952 CET	49776	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.179534912 CET	443	49776	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.268404961 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.271344900 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.271409035 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.271414995 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.271471024 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.271529913 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.271579027 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.271605968 CET	49774	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.271621943 CET	443	49774	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.284699917 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.287166119 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:02.287487984 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:02.287508011 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:02.287586927 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.287658930 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.287703991 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.287703991 CET	49777	443	192.168.2.17	13.107.253.72
Mar 12, 2025 13:29:02.287723064 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.287734032 CET	443	49777	13.107.253.72	192.168.2.17
Mar 12, 2025 13:29:02.288588047 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:02.288654089 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:02.289129972 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:02.289191008 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:02.289323092 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:02.289330959 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:02.332349062 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:02.382829905 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.383193970 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:02.383213997 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.383589983 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.383919954 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:02.383985996 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.384078026 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:02.428373098 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.658986092 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.661958933 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.662039995 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.662300110 CET	49781	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.662312984 CET	443	49781	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.671935081 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.671982050 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.672091961 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.672452927 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:02.672467947 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:02.899056911 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:02.899117947 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:02.899322033 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:02.899848938 CET	49783	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:02.899863958 CET	443	49783	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:02.918762922 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.918915033 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:02.919828892 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:02.919867992 CET	443	49782	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:02.919934034 CET	49782	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:02.929377079 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:02.929398060 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:02.929476976 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:02.929783106 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:02.929800034 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:02.934497118 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:02.934752941 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:02.934767962 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:02.935846090 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:02.935924053 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:02.939640999 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:02.939714909 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:02.939965963 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:02.939973116 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:02.939991951 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:02.940004110 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:02.984329939 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:03.323409081 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:03.323677063 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:03.323704958 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:03.324721098 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:03.324795008 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:03.325102091 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:03.325227976 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:03.325344086 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:03.366369009 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:03.366383076 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:03.414340019 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:03.524487972 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:03.524580956 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:03.524651051 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:03.525141954 CET	49784	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:03.525171995 CET	443	49784	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:04.131227970 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:04.131294966 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:04.131345034 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:04.131371021 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:04.139729023 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:04.139965057 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:04.139991999 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:04.140271902 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:04.140331030 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:04.140918016 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:04.140942097 CET	443	49787	157.240.251.35	192.168.2.17
Mar 12, 2025 13:29:04.140986919 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:04.140986919 CET	49787	443	192.168.2.17	157.240.251.35
Mar 12, 2025 13:29:04.650134087 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:04.650630951 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:04.650652885 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:04.651657104 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:04.651835918 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:04.652040958 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:04.652105093 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:04.652201891 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:04.652210951 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:04.703471899 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:05.243571997 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:05.250379086 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:05.250617981 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:05.251012087 CET	49788	443	192.168.2.17	142.250.186.68
Mar 12, 2025 13:29:05.251035929 CET	443	49788	142.250.186.68	192.168.2.17
Mar 12, 2025 13:29:06.470483065 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:06.470679998 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:06.470696926 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:06.470751047 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:06.472362995 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:06.472369909 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:06.472559929 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:06.472564936 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:06.472733974 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:06.472739935 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:06.853818893 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:06.854058027 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:06.854080915 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:06.951308966 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:07.000530958 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:07.095876932 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:07.104794979 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:07.104840994 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:07.104927063 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:07.105240107 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:07.105254889 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:07.142307043 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:07.702349901 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:07.702369928 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:07.702465057 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:07.702760935 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:07.702790022 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:07.777159929 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:07.777203083 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:07.777283907 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:07.777610064 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:07.777625084 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:09.215774059 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:09.215823889 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:09.215886116 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:09.216222048 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:09.216238976 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:09.314186096 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.314626932 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.314656019 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.315730095 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.315814972 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.315820932 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.315869093 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.316111088 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.316175938 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.316334963 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.316343069 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.371479034 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.527096033 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:09.527589083 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:09.527601957 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:09.529232025 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:09.529325962 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:09.530524969 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:09.530805111 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:09.579344034 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:09.579355955 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:09.581127882 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:09.581397057 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:09.581425905 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:09.582524061 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:09.582602978 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:09.582931995 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:09.582989931 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:09.583106041 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:09.583112955 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:09.627439976 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:09.627441883 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:09.836441040 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.837467909 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.837547064 CET	443	49790	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.837613106 CET	49790	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.841430902 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.841475010 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.841633081 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.841963053 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.841976881 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.845947981 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.845978975 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:09.846036911 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.846388102 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:09.846399069 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:10.156122923 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.186753035 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.186762094 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.186780930 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.186861992 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.186883926 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.186902046 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.186907053 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.186924934 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.198363066 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:29:10.198409081 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:10.198421001 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:29:10.198426962 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:10.203535080 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:10.203615904 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:10.203700066 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:10.205079079 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:10.205113888 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:10.234396935 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.263947964 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.263968945 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.263993025 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.264002085 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.264036894 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.264102936 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.264153957 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.264188051 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.304889917 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.304924965 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.304958105 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.305054903 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.305090904 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.305119038 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.346342087 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.352464914 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.352477074 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.352499008 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.352509022 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.352552891 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.352562904 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.352586985 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.352622986 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.369784117 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.369833946 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.369854927 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.369867086 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.369882107 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.369925022 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.369956017 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.390130997 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.390176058 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.390196085 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.390206099 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.390225887 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.390268087 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.390297890 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.410207033 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.410270929 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.410284042 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.410296917 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.410377026 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.410413980 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.410461903 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.439184904 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.439281940 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.439281940 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.439335108 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.439372063 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.439373970 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.439380884 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.439404964 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.439429045 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.446274996 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.446285009 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.446321964 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.446352005 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.446372032 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.446403980 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.446455956 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.460562944 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.460587978 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.460629940 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.460650921 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.460671902 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.460700035 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.473154068 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.473185062 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.473284960 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.473305941 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.484592915 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.484628916 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.484679937 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.484704018 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.484734058 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.521398067 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.521498919 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.521514893 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.521565914 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.521625996 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.523713112 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.523724079 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.523761988 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.523789883 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.523811102 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.523838043 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.523869038 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.523890018 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.525640965 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.525665045 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.525708914 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.525713921 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.525726080 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.525732994 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.525768995 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.525856972 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.525909901 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.526118040 CET	49793	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:10.526150942 CET	443	49793	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:10.658282042 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:10.708367109 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:29:10.941989899 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:10.942826986 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:29:10.942858934 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:11.028702021 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:11.031438112 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:29:11.031455994 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:11.063265085 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:11.063308001 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:11.063323021 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:11.063335896 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:11.137579918 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:11.137876034 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:11.137887955 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:11.138890028 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:11.138953924 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:11.139345884 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:11.139401913 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:11.184328079 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:11.184336901 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:11.202796936 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:11.202850103 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:11.202917099 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:11.203233957 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:11.203248978 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:11.232340097 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:11.530144930 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:11.581324100 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:11.659389973 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:11.660224915 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:11.660260916 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:11.858865976 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:11.907345057 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:11.907365084 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:11.913362980 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:29:12.054208994 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.054606915 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.054624081 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.054995060 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.055350065 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.055414915 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.055489063 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.063632011 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.063883066 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.063910961 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.064970016 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.065043926 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.065052986 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.065095901 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.065321922 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.065385103 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.065495014 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.065506935 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.065522909 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.096339941 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.104363918 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.108330011 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.119345903 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.477516890 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:12.485265970 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.485354900 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.485413074 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.485615969 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.485632896 CET	443	49797	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.485651970 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.485691071 CET	49797	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.530566931 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:12.545732975 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.548779011 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.548875093 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.553313971 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.553329945 CET	443	49796	13.107.42.14	192.168.2.17
Mar 12, 2025 13:29:12.553361893 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.553405046 CET	49796	443	192.168.2.17	13.107.42.14
Mar 12, 2025 13:29:12.631751060 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:12.632072926 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:12.632082939 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:12.633282900 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:12.633357048 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:12.724435091 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:12.724544048 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:12.724632025 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:12.724642992 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:12.770375967 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:13.241900921 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:13.243134975 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:13.243185043 CET	443	49798	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:13.243231058 CET	49798	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:13.605976105 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:13.606369972 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:13.606379032 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:13.606777906 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:13.607131004 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:13.607206106 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:13.607247114 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:13.652313948 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:13.654373884 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:14.107614994 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:14.107692003 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:14.107774973 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:14.108100891 CET	49800	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:14.108119965 CET	443	49800	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:15.050874949 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:15.050941944 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:15.051028967 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:15.051392078 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:15.051415920 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:15.965226889 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:15.965276957 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:15.965352058 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:15.965671062 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:15.965687990 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:17.307768106 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:17.308151960 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:17.308222055 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:17.309447050 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:17.309763908 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:17.309916019 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:17.309947968 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:17.362365007 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:17.931368113 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:17.931530952 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:17.931610107 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:17.931874037 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:17.931874037 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:17.931921959 CET	443	49803	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:17.931983948 CET	49803	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:18.372450113 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.372812033 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.372910023 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.373826981 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.373925924 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.374196053 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.374264956 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.374351978 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.374372005 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.417367935 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.871196985 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.896802902 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.896910906 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.897439003 CET	49804	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.897456884 CET	443	49804	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.907074928 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.907109022 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:18.907188892 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.907504082 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:18.907519102 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:20.065269947 CET	49806	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:20.065310001 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:20.065395117 CET	49806	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:20.065737009 CET	49806	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:20.065762043 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:21.365202904 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:21.365597963 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:21.365628004 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:21.366727114 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:21.366830111 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:21.367089987 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:21.367157936 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:21.367253065 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:21.367260933 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:21.417365074 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:21.812503099 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:21.815836906 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:21.815907001 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:21.816068888 CET	49805	443	192.168.2.17	13.74.129.1
Mar 12, 2025 13:29:21.816082001 CET	443	49805	13.74.129.1	192.168.2.17
Mar 12, 2025 13:29:22.380759954 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:22.381055117 CET	49806	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:22.381072998 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:22.381442070 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:22.381752014 CET	49806	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:22.381817102 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:22.381948948 CET	49806	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:22.424365044 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:22.888104916 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:22.888225079 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:22.888283968 CET	49806	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:22.890058994 CET	49806	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:22.890074968 CET	443	49806	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:26.049509048 CET	49807	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:26.049597025 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:26.049705982 CET	49807	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:26.050076008 CET	49807	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:26.050108910 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:28.391293049 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:28.391697884 CET	49807	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:28.391769886 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:28.392105103 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:28.392433882 CET	49807	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:28.392503977 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:28.392601967 CET	49807	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:28.436363935 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:28.992892027 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:28.992971897 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:28.993068933 CET	49807	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:28.993335962 CET	49807	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:28.993381023 CET	443	49807	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:32.902906895 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:32.903032064 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:32.903094053 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:33.328011036 CET	49791	443	192.168.2.17	52.217.171.193
Mar 12, 2025 13:29:33.328032017 CET	443	49791	52.217.171.193	192.168.2.17
Mar 12, 2025 13:29:34.523112059 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:34.523178101 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:34.523256063 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:35.328021049 CET	49795	443	192.168.2.17	52.216.44.33
Mar 12, 2025 13:29:35.328049898 CET	443	49795	52.216.44.33	192.168.2.17
Mar 12, 2025 13:29:41.936542988 CET	49810	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:29:41.936589003 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:41.936676979 CET	49810	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:29:41.937022924 CET	49810	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:29:41.937040091 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:43.642399073 CET	49734	443	192.168.2.17	18.66.112.93
Mar 12, 2025 13:29:43.642416000 CET	443	49734	18.66.112.93	192.168.2.17
Mar 12, 2025 13:29:43.990042925 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:43.990442991 CET	49810	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:29:43.990459919 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:43.990768909 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:43.991192102 CET	49810	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:29:43.991250038 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:44.041975975 CET	49810	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:29:45.014473915 CET	49746	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:45.014503956 CET	443	49746	18.66.147.76	192.168.2.17
Mar 12, 2025 13:29:47.059917927 CET	49812	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:47.059961081 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:47.060036898 CET	49812	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:47.060421944 CET	49812	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:47.060436010 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:49.343297005 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:49.343652010 CET	49812	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:49.343669891 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:49.344049931 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:49.344381094 CET	49812	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:49.344450951 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:49.344532967 CET	49812	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:49.392321110 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:49.838809013 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:49.838898897 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:49.838985920 CET	49812	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:49.839370966 CET	49812	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:29:49.839394093 CET	443	49812	52.152.143.207	192.168.2.17
Mar 12, 2025 13:29:52.108391047 CET	49789	443	192.168.2.17	172.64.146.215
Mar 12, 2025 13:29:52.108417988 CET	443	49789	172.64.146.215	192.168.2.17
Mar 12, 2025 13:29:53.648794889 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:53.648883104 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:53.648977041 CET	49810	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:29:55.318995953 CET	49810	443	192.168.2.17	142.250.186.132
Mar 12, 2025 13:29:55.319030046 CET	443	49810	142.250.186.132	192.168.2.17
Mar 12, 2025 13:29:56.866420031 CET	49727	443	192.168.2.17	18.66.147.71
Mar 12, 2025 13:29:56.866446018 CET	443	49727	18.66.147.71	192.168.2.17
Mar 12, 2025 13:29:57.490436077 CET	49744	443	192.168.2.17	18.66.147.76
Mar 12, 2025 13:29:57.490452051 CET	443	49744	18.66.147.76	192.168.2.17
Mar 12, 2025 13:30:03.067620993 CET	49816	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:30:03.067653894 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:03.067738056 CET	49816	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:30:03.068039894 CET	49816	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:30:03.068051100 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:05.294210911 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:05.294624090 CET	49816	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:30:05.294640064 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:05.294958115 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:05.295351028 CET	49816	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:30:05.295403957 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:05.295538902 CET	49816	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:30:05.336324930 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:05.787441015 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:05.787504911 CET	443	49816	52.152.143.207	192.168.2.17
Mar 12, 2025 13:30:05.787586927 CET	49816	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:30:05.787965059 CET	49816	443	192.168.2.17	52.152.143.207
Mar 12, 2025 13:30:05.787978888 CET	443	49816	52.152.143.207	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 12, 2025 13:28:37.138156891 CET	61273	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:37.138317108 CET	59817	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:37.145853043 CET	53	61833	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:37.153209925 CET	53	59817	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:37.154603958 CET	53	55363	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:37.160029888 CET	53	61273	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:40.625094891 CET	53	59979	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:41.878665924 CET	65297	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:41.878792048 CET	62738	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:41.885385990 CET	53	65297	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:41.885473967 CET	53	62738	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:45.490163088 CET	59107	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:45.490359068 CET	58422	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:45.508150101 CET	53	52096	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:45.509884119 CET	53	58422	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:45.515780926 CET	53	59107	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:45.521820068 CET	51237	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:45.521969080 CET	57945	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:45.537431002 CET	53	57945	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:45.547127962 CET	53	51237	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:50.616897106 CET	53	64808	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:50.738964081 CET	54688	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:50.739098072 CET	51524	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:50.745728016 CET	53	51524	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:50.745807886 CET	53	54688	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:51.171251059 CET	58313	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:51.171413898 CET	55632	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:51.189023972 CET	53	55632	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:51.193686962 CET	53	58313	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:51.277084112 CET	53345	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:51.277228117 CET	53075	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:51.292989016 CET	53	53075	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:51.300510883 CET	53	53345	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:53.892421961 CET	59363	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:53.892584085 CET	63802	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:53.895979881 CET	59357	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:53.896136999 CET	65263	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:53.898247957 CET	53	50335	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:53.899072886 CET	53	59363	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:53.899890900 CET	53	63802	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:53.902820110 CET	53	59357	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:53.902982950 CET	53	65263	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:56.606880903 CET	53975	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:56.607217073 CET	55491	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:56.614240885 CET	53	53975	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:56.614305973 CET	53	55491	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.148859978 CET	53134	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:57.149050951 CET	53546	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:57.155648947 CET	53	53546	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.155667067 CET	53	53134	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.186513901 CET	53	65299	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.343741894 CET	62336	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:57.343883038 CET	57788	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:57.344372988 CET	54652	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:57.344556093 CET	63222	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:57.350579023 CET	53	57788	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.350660086 CET	53	62336	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.363195896 CET	53	63222	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.370347977 CET	53	54652	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.566463947 CET	53	53419	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.591383934 CET	53228	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:57.591562986 CET	54462	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:57.598175049 CET	53	54462	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:57.598211050 CET	53	53228	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:59.396300077 CET	49743	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:59.396460056 CET	57824	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:59.403003931 CET	53	49743	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:59.403181076 CET	53	57824	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:59.976273060 CET	58177	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:59.976630926 CET	63267	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:28:59.983082056 CET	53	58177	1.1.1.1	192.168.2.17
Mar 12, 2025 13:28:59.983824968 CET	53	63267	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:00.196542025 CET	51272	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:00.196686983 CET	54585	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:00.203322887 CET	53	51272	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:00.204492092 CET	53	54585	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:00.540589094 CET	61978	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:00.540738106 CET	60905	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:00.547550917 CET	53	61978	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:00.548413992 CET	53	60905	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:01.195048094 CET	53	61350	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:02.664689064 CET	49432	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:02.664905071 CET	50632	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:02.671344042 CET	53	49432	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:02.671355963 CET	53	50632	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:02.921417952 CET	49894	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:02.921572924 CET	65055	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:02.928206921 CET	53	49894	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:02.928417921 CET	53	65055	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:07.660037994 CET	62789	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:07.662121058 CET	60248	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:07.684524059 CET	53	60248	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:07.701302052 CET	53	62789	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:07.753446102 CET	64821	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:07.753596067 CET	64811	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:07.775051117 CET	53	64811	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:07.776662111 CET	53	64821	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:10.195887089 CET	65530	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:10.195887089 CET	59251	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:10.202578068 CET	53	59251	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:10.203020096 CET	53	65530	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:11.033102989 CET	57838	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:11.033256054 CET	55256	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:11.056524038 CET	53	57838	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:11.062791109 CET	53	55256	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:16.650494099 CET	53	61311	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:18.899868965 CET	51303	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:18.900024891 CET	50064	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:18.906337976 CET	53	51303	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:18.906697989 CET	53	50064	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:27.092000008 CET	138	138	192.168.2.17	192.168.2.255
Mar 12, 2025 13:29:37.077719927 CET	53	62314	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:39.117202044 CET	53	49570	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:42.453030109 CET	53	60582	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:51.329376936 CET	60631	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:51.329552889 CET	52728	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:51.336622000 CET	53	52728	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:51.336685896 CET	53	60631	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:52.347940922 CET	49734	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:52.348088026 CET	52131	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:52.356538057 CET	53	52131	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:52.356554985 CET	53	49734	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:54.377154112 CET	58131	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:54.383846998 CET	53	58131	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:55.381513119 CET	58131	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:55.388811111 CET	53	58131	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:56.387504101 CET	58131	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:56.394489050 CET	53	58131	1.1.1.1	192.168.2.17
Mar 12, 2025 13:29:58.398483038 CET	58131	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:29:58.406521082 CET	53	58131	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:02.403568983 CET	58131	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:02.410325050 CET	53	58131	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:03.059695005 CET	50766	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:03.059777021 CET	51749	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:03.067049980 CET	53	50766	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:03.067214012 CET	53	51749	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:07.328222036 CET	61976	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:07.328392029 CET	65347	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:07.334964037 CET	53	61976	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:07.335256100 CET	53	65347	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:08.347997904 CET	61666	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:08.354720116 CET	53	61666	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:09.345022917 CET	53	55009	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:10.376141071 CET	52872	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:10.382720947 CET	53	52872	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:11.380511045 CET	52872	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:11.387134075 CET	53	52872	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:12.383553028 CET	52872	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:12.391100883 CET	53	52872	1.1.1.1	192.168.2.17
Mar 12, 2025 13:30:14.396506071 CET	52872	53	192.168.2.17	1.1.1.1
Mar 12, 2025 13:30:14.403151989 CET	53	52872	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 12, 2025 13:28:37.138156891 CET	192.168.2.17	1.1.1.1	0x202e	Standard query (0)	cloud.kdanmobile.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:37.138317108 CET	192.168.2.17	1.1.1.1	0x7252	Standard query (0)	cloud.kdanmobile.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:41.878665924 CET	192.168.2.17	1.1.1.1	0x676f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:41.878792048 CET	192.168.2.17	1.1.1.1	0x81fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:45.490163088 CET	192.168.2.17	1.1.1.1	0xb379	Standard query (0)	web-static.kdanmobile.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.490359068 CET	192.168.2.17	1.1.1.1	0x2f72	Standard query (0)	web-static.kdanmobile.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:45.521820068 CET	192.168.2.17	1.1.1.1	0x6a42	Standard query (0)	preview.kdanmobile.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.521969080 CET	192.168.2.17	1.1.1.1	0x5040	Standard query (0)	preview.kdanmobile.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:50.738964081 CET	192.168.2.17	1.1.1.1	0x9295	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:50.739098072 CET	192.168.2.17	1.1.1.1	0x8240	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Mar 12, 2025 13:28:51.171251059 CET	192.168.2.17	1.1.1.1	0x30db	Standard query (0)	preview.kdanmobile.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.171413898 CET	192.168.2.17	1.1.1.1	0xb809	Standard query (0)	preview.kdanmobile.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:51.277084112 CET	192.168.2.17	1.1.1.1	0xb43	Standard query (0)	data-center-rails.kdanmobile.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.277228117 CET	192.168.2.17	1.1.1.1	0x7278	Standard query (0)	data-center-rails.kdanmobile.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:53.892421961 CET	192.168.2.17	1.1.1.1	0x642a	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.892584085 CET	192.168.2.17	1.1.1.1	0x103a	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:53.895979881 CET	192.168.2.17	1.1.1.1	0xcf01	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.896136999 CET	192.168.2.17	1.1.1.1	0xc717	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Mar 12, 2025 13:28:56.606880903 CET	192.168.2.17	1.1.1.1	0x551a	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:56.607217073 CET	192.168.2.17	1.1.1.1	0xe677	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:57.148859978 CET	192.168.2.17	1.1.1.1	0xd166	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.149050951 CET	192.168.2.17	1.1.1.1	0xfb36	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Mar 12, 2025 13:28:57.343741894 CET	192.168.2.17	1.1.1.1	0x8f00	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.343883038 CET	192.168.2.17	1.1.1.1	0xfcae	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 12, 2025 13:28:57.344372988 CET	192.168.2.17	1.1.1.1	0xe80c	Standard query (0)	data-center-rails.kdanmobile.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.344556093 CET	192.168.2.17	1.1.1.1	0xf520	Standard query (0)	data-center-rails.kdanmobile.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:57.591383934 CET	192.168.2.17	1.1.1.1	0xe063	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.591562986 CET	192.168.2.17	1.1.1.1	0x3824	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:59.396300077 CET	192.168.2.17	1.1.1.1	0x6428	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:59.396460056 CET	192.168.2.17	1.1.1.1	0x131a	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 12, 2025 13:28:59.976273060 CET	192.168.2.17	1.1.1.1	0x87b4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:59.976630926 CET	192.168.2.17	1.1.1.1	0x62b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:00.196542025 CET	192.168.2.17	1.1.1.1	0xe1fa	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:00.196686983 CET	192.168.2.17	1.1.1.1	0x60c0	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:00.540589094 CET	192.168.2.17	1.1.1.1	0xba85	Standard query (0)	o.clarity.ms	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:00.540738106 CET	192.168.2.17	1.1.1.1	0x625f	Standard query (0)	o.clarity.ms	65	IN (0x0001)	false
Mar 12, 2025 13:29:02.664689064 CET	192.168.2.17	1.1.1.1	0x41c4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:02.664905071 CET	192.168.2.17	1.1.1.1	0x8f14	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:02.921417952 CET	192.168.2.17	1.1.1.1	0xacb8	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:02.921572924 CET	192.168.2.17	1.1.1.1	0x2b85	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:07.660037994 CET	192.168.2.17	1.1.1.1	0xd188	Standard query (0)	pdfseries.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.662121058 CET	192.168.2.17	1.1.1.1	0xea3c	Standard query (0)	pdfseries.s3.amazonaws.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:07.753446102 CET	192.168.2.17	1.1.1.1	0x14cf	Standard query (0)	pdfseries.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.753596067 CET	192.168.2.17	1.1.1.1	0xd5ed	Standard query (0)	pdfseries.s3.amazonaws.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:10.195887089 CET	192.168.2.17	1.1.1.1	0x65e2	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Mar 12, 2025 13:29:10.195887089 CET	192.168.2.17	1.1.1.1	0x349f	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:11.033102989 CET	192.168.2.17	1.1.1.1	0xad0d	Standard query (0)	cloud.kdanmobile.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:11.033256054 CET	192.168.2.17	1.1.1.1	0xc81	Standard query (0)	cloud.kdanmobile.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:18.899868965 CET	192.168.2.17	1.1.1.1	0x63be	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:18.900024891 CET	192.168.2.17	1.1.1.1	0x53bb	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Mar 12, 2025 13:29:51.329376936 CET	192.168.2.17	1.1.1.1	0x3ffd	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:51.329552889 CET	192.168.2.17	1.1.1.1	0x7f5e	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:52.347940922 CET	192.168.2.17	1.1.1.1	0xe65e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:52.348088026 CET	192.168.2.17	1.1.1.1	0x406	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 12, 2025 13:29:54.377154112 CET	192.168.2.17	1.1.1.1	0xde8e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:55.381513119 CET	192.168.2.17	1.1.1.1	0xde8e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:56.387504101 CET	192.168.2.17	1.1.1.1	0xde8e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:58.398483038 CET	192.168.2.17	1.1.1.1	0xde8e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:02.403568983 CET	192.168.2.17	1.1.1.1	0xde8e	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:03.059695005 CET	192.168.2.17	1.1.1.1	0x9aac	Standard query (0)	o.clarity.ms	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:03.059777021 CET	192.168.2.17	1.1.1.1	0xd6bb	Standard query (0)	o.clarity.ms	65	IN (0x0001)	false
Mar 12, 2025 13:30:07.328222036 CET	192.168.2.17	1.1.1.1	0x98c1	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:07.328392029 CET	192.168.2.17	1.1.1.1	0xe4ab	Standard query (0)	beacons.gvt2.com	65	IN (0x0001)	false
Mar 12, 2025 13:30:08.347997904 CET	192.168.2.17	1.1.1.1	0x1344	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:10.376141071 CET	192.168.2.17	1.1.1.1	0xc818	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:11.380511045 CET	192.168.2.17	1.1.1.1	0xc818	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:12.383553028 CET	192.168.2.17	1.1.1.1	0xc818	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:14.396506071 CET	192.168.2.17	1.1.1.1	0xc818	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 12, 2025 13:28:10.582995892 CET	1.1.1.1	192.168.2.17	0x30d9	No error (0)	ecs-office.s-0005.dual-s-msedge.net	s-0005.dual-s-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:10.582995892 CET	1.1.1.1	192.168.2.17	0x30d9	No error (0)	s-0005.dual-s-msedge.net		52.123.128.14	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:10.582995892 CET	1.1.1.1	192.168.2.17	0x30d9	No error (0)	s-0005.dual-s-msedge.net		52.123.129.14	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:37.160029888 CET	1.1.1.1	192.168.2.17	0x202e	No error (0)	cloud.kdanmobile.com		18.66.147.71	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:37.160029888 CET	1.1.1.1	192.168.2.17	0x202e	No error (0)	cloud.kdanmobile.com		18.66.147.47	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:37.160029888 CET	1.1.1.1	192.168.2.17	0x202e	No error (0)	cloud.kdanmobile.com		18.66.147.23	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:37.160029888 CET	1.1.1.1	192.168.2.17	0x202e	No error (0)	cloud.kdanmobile.com		18.66.147.76	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:41.885385990 CET	1.1.1.1	192.168.2.17	0x676f	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:41.885473967 CET	1.1.1.1	192.168.2.17	0x81fa	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 12, 2025 13:28:45.515780926 CET	1.1.1.1	192.168.2.17	0xb379	No error (0)	web-static.kdanmobile.com		18.66.112.93	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.515780926 CET	1.1.1.1	192.168.2.17	0xb379	No error (0)	web-static.kdanmobile.com		18.66.112.82	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.515780926 CET	1.1.1.1	192.168.2.17	0xb379	No error (0)	web-static.kdanmobile.com		18.66.112.55	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.515780926 CET	1.1.1.1	192.168.2.17	0xb379	No error (0)	web-static.kdanmobile.com		18.66.112.66	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.547127962 CET	1.1.1.1	192.168.2.17	0x6a42	No error (0)	preview.kdanmobile.com		18.66.147.76	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.547127962 CET	1.1.1.1	192.168.2.17	0x6a42	No error (0)	preview.kdanmobile.com		18.66.147.71	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.547127962 CET	1.1.1.1	192.168.2.17	0x6a42	No error (0)	preview.kdanmobile.com		18.66.147.23	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:45.547127962 CET	1.1.1.1	192.168.2.17	0x6a42	No error (0)	preview.kdanmobile.com		18.66.147.47	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	res-stls-prod.edgesuite.net.globalredir.akadns88.net	a726.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.121	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.146	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.120	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.137	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.131	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.145	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.136	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.224	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:48.520327091 CET	1.1.1.1	192.168.2.17	0x77c2	No error (0)	a726.dscd.akamai.net		2.22.242.144	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:50.745728016 CET	1.1.1.1	192.168.2.17	0x8240	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:50.745728016 CET	1.1.1.1	192.168.2.17	0x8240	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 12, 2025 13:28:50.745728016 CET	1.1.1.1	192.168.2.17	0x8240	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 12, 2025 13:28:50.745807886 CET	1.1.1.1	192.168.2.17	0x9295	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:50.745807886 CET	1.1.1.1	192.168.2.17	0x9295	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.193686962 CET	1.1.1.1	192.168.2.17	0x30db	No error (0)	preview.kdanmobile.com		18.66.147.76	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.193686962 CET	1.1.1.1	192.168.2.17	0x30db	No error (0)	preview.kdanmobile.com		18.66.147.47	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.193686962 CET	1.1.1.1	192.168.2.17	0x30db	No error (0)	preview.kdanmobile.com		18.66.147.71	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.193686962 CET	1.1.1.1	192.168.2.17	0x30db	No error (0)	preview.kdanmobile.com		18.66.147.23	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.300510883 CET	1.1.1.1	192.168.2.17	0xb43	No error (0)	data-center-rails.kdanmobile.com		18.66.147.76	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.300510883 CET	1.1.1.1	192.168.2.17	0xb43	No error (0)	data-center-rails.kdanmobile.com		18.66.147.71	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.300510883 CET	1.1.1.1	192.168.2.17	0xb43	No error (0)	data-center-rails.kdanmobile.com		18.66.147.23	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:51.300510883 CET	1.1.1.1	192.168.2.17	0xb43	No error (0)	data-center-rails.kdanmobile.com		18.66.147.47	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	res-stls-prod.edgesuite.net.globalredir.akadns88.net	a726.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.98	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.10	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.80	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.104	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.224	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.146	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.81	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.9	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.429092884 CET	1.1.1.1	192.168.2.17	0xa5ce	No error (0)	a726.dscd.akamai.net		2.22.242.225	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.899072886 CET	1.1.1.1	192.168.2.17	0x642a	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.899072886 CET	1.1.1.1	192.168.2.17	0x642a	No error (0)	od.linkedin.edgesuite.net	a1916.dscg2.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.899072886 CET	1.1.1.1	192.168.2.17	0x642a	No error (0)	a1916.dscg2.akamai.net		2.22.61.186	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.899072886 CET	1.1.1.1	192.168.2.17	0x642a	No error (0)	a1916.dscg2.akamai.net		2.22.61.163	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.899890900 CET	1.1.1.1	192.168.2.17	0x103a	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.899890900 CET	1.1.1.1	192.168.2.17	0x103a	No error (0)	od.linkedin.edgesuite.net	a1916.dscg2.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902820110 CET	1.1.1.1	192.168.2.17	0xcf01	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902820110 CET	1.1.1.1	192.168.2.17	0xcf01	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902820110 CET	1.1.1.1	192.168.2.17	0xcf01	No error (0)	azurefd-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902820110 CET	1.1.1.1	192.168.2.17	0xcf01	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902820110 CET	1.1.1.1	192.168.2.17	0xcf01	No error (0)	azurefd-t-fb-prod.trafficmanager.net	dual.s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902820110 CET	1.1.1.1	192.168.2.17	0xcf01	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902820110 CET	1.1.1.1	192.168.2.17	0xcf01	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902982950 CET	1.1.1.1	192.168.2.17	0xc717	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902982950 CET	1.1.1.1	192.168.2.17	0xc717	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:53.902982950 CET	1.1.1.1	192.168.2.17	0xc717	No error (0)	azurefd-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:56.614240885 CET	1.1.1.1	192.168.2.17	0x551a	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:56.614240885 CET	1.1.1.1	192.168.2.17	0x551a	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:56.614240885 CET	1.1.1.1	192.168.2.17	0x551a	No error (0)	www-linkedin-com.l-0005.l-msedge.net	l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:56.614240885 CET	1.1.1.1	192.168.2.17	0x551a	No error (0)	l-0005.l-msedge.net		13.107.42.14	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:56.614305973 CET	1.1.1.1	192.168.2.17	0xe677	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:56.614305973 CET	1.1.1.1	192.168.2.17	0xe677	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:57.155667067 CET	1.1.1.1	192.168.2.17	0xd166	No error (0)	td.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.350579023 CET	1.1.1.1	192.168.2.17	0xfcae	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 12, 2025 13:28:57.350660086 CET	1.1.1.1	192.168.2.17	0x8f00	No error (0)	googleads.g.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.370347977 CET	1.1.1.1	192.168.2.17	0xe80c	No error (0)	data-center-rails.kdanmobile.com		18.66.147.76	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.370347977 CET	1.1.1.1	192.168.2.17	0xe80c	No error (0)	data-center-rails.kdanmobile.com		18.66.147.23	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.370347977 CET	1.1.1.1	192.168.2.17	0xe80c	No error (0)	data-center-rails.kdanmobile.com		18.66.147.71	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.370347977 CET	1.1.1.1	192.168.2.17	0xe80c	No error (0)	data-center-rails.kdanmobile.com		18.66.147.47	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:57.598175049 CET	1.1.1.1	192.168.2.17	0x3824	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:57.598175049 CET	1.1.1.1	192.168.2.17	0x3824	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Mar 12, 2025 13:28:57.598175049 CET	1.1.1.1	192.168.2.17	0x3824	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Mar 12, 2025 13:28:57.598211050 CET	1.1.1.1	192.168.2.17	0xe063	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:57.598211050 CET	1.1.1.1	192.168.2.17	0xe063	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:59.403003931 CET	1.1.1.1	192.168.2.17	0x6428	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:59.403003931 CET	1.1.1.1	192.168.2.17	0x6428	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:59.403003931 CET	1.1.1.1	192.168.2.17	0x6428	No error (0)	www-linkedin-com.l-0005.l-msedge.net	l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:59.403003931 CET	1.1.1.1	192.168.2.17	0x6428	No error (0)	l-0005.l-msedge.net		13.107.42.14	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:59.403181076 CET	1.1.1.1	192.168.2.17	0x131a	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:59.403181076 CET	1.1.1.1	192.168.2.17	0x131a	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:28:59.983082056 CET	1.1.1.1	192.168.2.17	0x87b4	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:28:59.983824968 CET	1.1.1.1	192.168.2.17	0x62b	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 12, 2025 13:29:00.203322887 CET	1.1.1.1	192.168.2.17	0xe1fa	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:00.203322887 CET	1.1.1.1	192.168.2.17	0xe1fa	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:00.204492092 CET	1.1.1.1	192.168.2.17	0x60c0	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:00.204492092 CET	1.1.1.1	192.168.2.17	0x60c0	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Mar 12, 2025 13:29:00.204492092 CET	1.1.1.1	192.168.2.17	0x60c0	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Mar 12, 2025 13:29:00.547550917 CET	1.1.1.1	192.168.2.17	0xba85	No error (0)	o.clarity.ms	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:00.547550917 CET	1.1.1.1	192.168.2.17	0xba85	No error (0)	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		52.152.143.207	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:00.548413992 CET	1.1.1.1	192.168.2.17	0x625f	No error (0)	o.clarity.ms	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:02.671344042 CET	1.1.1.1	192.168.2.17	0x41c4	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:02.671355963 CET	1.1.1.1	192.168.2.17	0x8f14	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 12, 2025 13:29:02.928206921 CET	1.1.1.1	192.168.2.17	0xacb8	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:02.928206921 CET	1.1.1.1	192.168.2.17	0xacb8	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:02.928206921 CET	1.1.1.1	192.168.2.17	0xacb8	No error (0)	www.linkedin.com.cdn.cloudflare.net		172.64.146.215	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:02.928206921 CET	1.1.1.1	192.168.2.17	0xacb8	No error (0)	www.linkedin.com.cdn.cloudflare.net		104.18.41.41	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:02.928417921 CET	1.1.1.1	192.168.2.17	0x2b85	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:02.928417921 CET	1.1.1.1	192.168.2.17	0x2b85	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:02.928417921 CET	1.1.1.1	192.168.2.17	0x2b85	No error (0)	www.linkedin.com.cdn.cloudflare.net			65	IN (0x0001)	false
Mar 12, 2025 13:29:07.684524059 CET	1.1.1.1	192.168.2.17	0xea3c	No error (0)	pdfseries.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:07.684524059 CET	1.1.1.1	192.168.2.17	0xea3c	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	pdfseries.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.171.193	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-w.us-east-1.amazonaws.com		16.15.217.187	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.25.113	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.74.145	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.43.17	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.90.204	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.204.241	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.701302052 CET	1.1.1.1	192.168.2.17	0xd188	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.61	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.775051117 CET	1.1.1.1	192.168.2.17	0xd5ed	No error (0)	pdfseries.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:07.775051117 CET	1.1.1.1	192.168.2.17	0xd5ed	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	pdfseries.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.44.33	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.223.41	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.198.185	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-w.us-east-1.amazonaws.com		16.15.193.16	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.205.75	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.98.121	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.112	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:07.776662111 CET	1.1.1.1	192.168.2.17	0x14cf	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.37.201	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:10.202578068 CET	1.1.1.1	192.168.2.17	0x349f	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:10.202578068 CET	1.1.1.1	192.168.2.17	0x349f	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:10.202578068 CET	1.1.1.1	192.168.2.17	0x349f	No error (0)	c-msn-pme.trafficmanager.net		13.74.129.1	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:10.203020096 CET	1.1.1.1	192.168.2.17	0x65e2	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:10.203020096 CET	1.1.1.1	192.168.2.17	0x65e2	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:11.056524038 CET	1.1.1.1	192.168.2.17	0xad0d	No error (0)	cloud.kdanmobile.com		18.66.147.76	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:11.056524038 CET	1.1.1.1	192.168.2.17	0xad0d	No error (0)	cloud.kdanmobile.com		18.66.147.47	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:11.056524038 CET	1.1.1.1	192.168.2.17	0xad0d	No error (0)	cloud.kdanmobile.com		18.66.147.23	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:11.056524038 CET	1.1.1.1	192.168.2.17	0xad0d	No error (0)	cloud.kdanmobile.com		18.66.147.71	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:13.250475883 CET	1.1.1.1	192.168.2.17	0x7cb0	No error (0)	c-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:13.250475883 CET	1.1.1.1	192.168.2.17	0x7cb0	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:13.250475883 CET	1.1.1.1	192.168.2.17	0x7cb0	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:18.906337976 CET	1.1.1.1	192.168.2.17	0x63be	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:18.906337976 CET	1.1.1.1	192.168.2.17	0x63be	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:18.906337976 CET	1.1.1.1	192.168.2.17	0x63be	No error (0)	c-msn-pme.trafficmanager.net		13.74.129.1	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:18.906697989 CET	1.1.1.1	192.168.2.17	0x53bb	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:18.906697989 CET	1.1.1.1	192.168.2.17	0x53bb	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:51.336622000 CET	1.1.1.1	192.168.2.17	0x7f5e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:51.336685896 CET	1.1.1.1	192.168.2.17	0x3ffd	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:51.336685896 CET	1.1.1.1	192.168.2.17	0x3ffd	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:52.356538057 CET	1.1.1.1	192.168.2.17	0x406	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:52.356554985 CET	1.1.1.1	192.168.2.17	0xe65e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:52.356554985 CET	1.1.1.1	192.168.2.17	0xe65e	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:54.383846998 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:54.383846998 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:55.388811111 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:55.388811111 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:56.394489050 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:56.394489050 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:29:58.406521082 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:29:58.406521082 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:02.410325050 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:30:02.410325050 CET	1.1.1.1	192.168.2.17	0xde8e	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:03.067049980 CET	1.1.1.1	192.168.2.17	0x9aac	No error (0)	o.clarity.ms	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:30:03.067049980 CET	1.1.1.1	192.168.2.17	0x9aac	No error (0)	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		52.152.143.207	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:03.067214012 CET	1.1.1.1	192.168.2.17	0xd6bb	No error (0)	o.clarity.ms	clarity-ingest-eus-sc.eastus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:30:07.334964037 CET	1.1.1.1	192.168.2.17	0x98c1	No error (0)	beacons.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:08.354720116 CET	1.1.1.1	192.168.2.17	0x1344	No error (0)	beacons.gvt2.com	beacons6.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 12, 2025 13:30:08.354720116 CET	1.1.1.1	192.168.2.17	0x1344	No error (0)	beacons6.gvt2.com		216.58.206.67	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:10.382720947 CET	1.1.1.1	192.168.2.17	0xc818	No error (0)	beacons.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:11.387134075 CET	1.1.1.1	192.168.2.17	0xc818	No error (0)	beacons.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:12.391100883 CET	1.1.1.1	192.168.2.17	0xc818	No error (0)	beacons.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 12, 2025 13:30:14.403151989 CET	1.1.1.1	192.168.2.17	0xc818	No error (0)	beacons.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

preview.kdanmobile.com

connect.facebook.net

pdfseries.s3.amazonaws.com

cloud.kdanmobile.com

snap.licdn.com

www.clarity.ms

px.ads.linkedin.com

td.doubleclick.net

googleads.g.doubleclick.net

www.facebook.com

www.google.com

o.clarity.ms

c.clarity.ms

otelrules.svc.static.microsoft

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49742	157.240.0.6	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:52 UTC	579	OUT	GET /en_US/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://preview.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:53 UTC	1826	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: b84f49c6183196615c3deeb2a9d570e2 ETag: "f9726a194256e9094734ff2b6d705eeb" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: uE9JxhgxlmFcPe6yqdVw4g== Expires: Wed, 12 Mar 2025 12:40:53 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2025-03-12 12:28:53 UTC	877	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2025-03-12 12:28:53 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-03-12 12:28:53 UTC	3092	IN	Data Raw: 2a 31 37 34 31 37 38 32 30 35 33 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 32 30 38 31 38 34 33 35 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1741782053,,JIT Construction: v1020818435,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49751	157.240.0.6	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:54 UTC	582	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:55 UTC	1678	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' blob: ;script-src 'nonce-k3LCONiw' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: .cdninstagram.com https://.google-analytics.com;font-src 'self' data: blob: ;img-src 'self' data: blob: https://.google-analytics.com;media-src 'self' data: blob: ;child-src 'self' data: blob: ;frame-src 'self' data: blob: ;manifest-src 'self' data: blob: ;object-src 'self' data: blob: ;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-12 12:28:55 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-12 12:28:55 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-03-12 12:28:55 UTC	14444	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-03-12 12:28:55 UTC	16384	IN	Data Raw: 72 20 62 3d 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 2c 63 3d 61 2e 65 76 65 6e 74 5f 74 79 70 65 2c 64 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3b 61 3d 61 2e 69 64 3b 62 3d 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 63 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 63 21 3d 3d 22 22 3f 63 3a 6e 75 6c 6c 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 64 3d 64 3d 3d 3d 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 7c 7c 64 3d 3d 3d 22 43 53 53 22 7c 7c 64 3d 3d 3d 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 7c 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 Data Ascii: r b=a.domain_uri,c=a.event_type,d=a.extractor_type;a=a.id;b=typeof b==="string"?b:null;c=c!=null&&typeof c==="string"&&c!==""?c:null;a=a!=null&&typeof a==="string"&&a!==""?a:null;d=d==="CONSTANT_VALUE"\|\|d==="CSS"\|\|d==="GLOBAL_VARIABLE"\|\|d==="GTM"\|\|d==="JS
2025-03-12 12:28:55 UTC	16384	IN	Data Raw: 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 2e 65 78 70 6f 72 74 73 3d 7b 42 41 54 43 48 49 4e 47 5f 45 58 50 45 52 49 4d 45 4e 54 3a 22 62 61 74 63 68 69 6e 67 22 2c 53 45 4e 44 5f 58 48 52 5f 45 58 50 45 52 49 4d 45 4e 54 3a 22 73 65 6e 64 5f 78 68 72 22 2c 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 3a 22 75 73 65 5f 66 62 63 5f 61 73 5f 63 61 63 68 65 5f 6b 65 79 22 2c 4e 45 54 57 4f 52 4b 5f 52 45 54 52 59 5f 45 58 50 45 52 49 4d 45 4e 54 3a 22 6e 65 74 77 6f 72 6b 5f 72 65 74 72 79 5f 77 68 65 6e 5f 6e 6f 74 5f 73 75 63 63 65 73 73 22 2c 42 55 46 46 45 52 5f 45 56 45 4e 54 53 5f 45 58 50 45 52 49 4d 45 4e 54 3a 22 62 75 66 66 65 72 5f 65 76 65 6e 74 73 Data Ascii: orts;(function(){"use strict";j.exports={BATCHING_EXPERIMENT:"batching",SEND_XHR_EXPERIMENT:"send_xhr",USE_FBC_AS_CACHE_KEY_EXPERIMENT:"use_fbc_as_cache_key",NETWORK_RETRY_EXPERIMENT:"network_retry_when_not_success",BUFFER_EVENTS_EXPERIMENT:"buffer_events
2025-03-12 12:28:55 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 41 65 6d 52 65 73 75 6c 74 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 2c 63 29 Data Ascii: );return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetAemResultEvent",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsBaseEvent");function b(a,b,c)
2025-03-12 12:28:55 UTC	1939	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 61 3e 30 26 26 61 3c 31 65 34 7d 5d 7d 29 29 2c 64 69 73 61 62 6c 65 4d 69 63 72 6f 64 61 74 61 45 76 65 6e 74 3a 61 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 61 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 65 6e 61 62 6c 65 50 61 67 65 48 61 73 68 3a 61 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 61 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 62 69 6c 65 41 70 70 42 72 69 64 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 Data Ascii: ){return a>0&&a<1e4}]})),disableMicrodataEvent:a.allowNull(a["boolean"]()),enablePageHash:a.allowNull(a["boolean"]())});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsMobileAppBridge",function(){return function(g,h
2025-03-12 12:28:55 UTC	14445	IN	Data Raw: 75 28 29 7b 76 61 72 20 62 3d 74 3b 74 3d 30 3b 61 2e 6c 6f 67 4d 6f 62 69 6c 65 4e 61 74 69 76 65 46 6f 72 77 61 72 64 69 6e 67 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 64 29 7b 63 28 6e 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 73 65 6e 64 45 76 65 6e 74 28 61 2e 69 64 2c 70 28 62 29 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 28 64 29 29 29 7d 29 2c 74 2b 2b 2c 73 65 74 54 69 6d 65 6f 75 74 28 75 2c 30 29 7d 6c 2e 65 78 70 6f 72 74 73 3d 7b 70 69 78 65 6c 48 61 73 41 63 74 69 76 65 42 72 69 64 67 65 3a 6f 2c 72 65 67 69 73 74 65 72 42 72 69 64 67 65 3a 6d 2c 73 65 6e 64 45 76 65 6e 74 3a 76 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a Data Ascii: u(){var b=t;t=0;a.logMobileNativeForwarding(b)}function v(a,b,d){c(n(a),function(c){return c.sendEvent(a.id,p(b),JSON.stringify(s(d)))}),t++,setTimeout(u,0)}l.exports={pixelHasActiveBridge:o,registerBridge:m,sendEvent:v}})();return l.exports}(a,b,c,d)});
2025-03-12 12:28:55 UTC	16384	IN	Data Raw: 61 63 6b 22 2c 64 5d 2e 63 6f 6e 63 61 74 28 62 2e 73 6c 69 63 65 28 31 29 29 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 61 3d 62 28 61 29 3b 76 61 72 20 64 3d 61 2e 61 72 67 73 3b 61 3d 61 2e 69 73 4c 65 67 61 63 79 53 79 6e 74 61 78 3b 64 3d 63 28 64 29 3b 72 65 74 75 72 6e 7b 61 72 67 73 3a 64 2c 69 73 4c 65 67 61 63 79 53 79 6e 74 61 78 3a 61 7d 7d 6c 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e Data Ascii: ack",d].concat(b.slice(1))}return b}function d(a){a=b(a);var d=a.args;a=a.isLegacySyntax;d=c(d);return{args:d,isLegacySyntax:a}}l.exports=d})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsResolveLink",function(){return function
2025-03-12 12:28:55 UTC	16384	IN	Data Raw: 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 3b 76 61 72 20 64 3d 2e 30 31 2c 65 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 68 3d 67 2e 66 62 71 26 26 67 2e 66 62 71 2e 5f 72 65 6c 65 61 73 65 53 65 67 6d 65 6e 74 3f 67 2e 66 62 71 2e 5f 72 65 6c 65 61 73 65 53 65 67 6d 65 6e 74 3a 22 75 6e 6b 6e 6f 77 6e 22 2c 69 3d 65 3c 64 7c 7c 68 3d 3d 3d 22 63 61 6e 61 72 79 22 2c 6a 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 2f 6c 6f 67 2f 66 62 65 76 65 6e 74 73 5f 74 65 6c 65 6d 65 74 72 79 2f 22 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 64 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d Data Ascii: sFBEventsSendBeacon");var d=.01,e=Math.random(),h=g.fbq&&g.fbq._releaseSegment?g.fbq._releaseSegment:"unknown",i=e<d\|\|h==="canary",j="https://connect.facebook.net/log/fbevents_telemetry/";function l(d){var e=arguments.length>1&&arguments[1]!==void 0?argum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49754	157.240.0.6	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:55 UTC	620	OUT	GET /en_US/sdk.js?hash=d122542073c4b9e61ae69896ffd98e9c HTTP/1.1 Host: connect.facebook.net Connection: keep-alive Origin: https://preview.kdanmobile.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://preview.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:56 UTC	1840	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 42523a00efd868ad0913c5702a312e90 ETag: "58febcf2f2a79c59cdf2286cbfc905a8" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: QlI6AO/YaK0JE8VwKjEukA== Expires: Thu, 12 Mar 2026 12:13:55 GMT Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2025-03-12 12:28:56 UTC	879	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2025-03-12 12:28:56 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-03-12 12:28:56 UTC	15079	IN	Data Raw: 2a 31 37 34 31 37 38 31 36 33 35 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 32 30 38 31 38 34 33 35 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1741781635,,JIT Construction: v1020818435,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2025-03-12 12:28:56 UTC	16384	IN	Data Raw: 63 29 7d 7d 72 65 74 75 72 6e 20 62 2b 27 22 27 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 2c 69 2c 6a 2c 6b 2c 6d 2c 72 2c 73 2c 74 2c 7a 2c 42 3b 74 72 79 7b 68 3d 62 5b 61 5d 7d 63 61 74 63 68 28 61 29 7b 7d 69 66 28 74 79 70 65 6f 66 20 68 3d 3d 22 6f 62 6a 65 63 74 22 26 26 68 29 7b 69 3d 6e 2e 63 61 6c 6c 28 68 29 3b 69 66 28 69 3d 3d 75 26 26 21 6f 2e 63 61 6c 6c 28 68 2c 22 74 6f 4a 53 4f 4e 22 29 29 69 66 28 68 3e 2d 31 2f 30 26 26 68 3c 31 2f 30 29 7b 69 66 28 43 29 7b 6d 3d 41 28 68 2f 38 36 34 65 35 29 3b 66 6f 72 28 6a 3d 41 28 6d 2f 33 36 35 2e 32 34 32 35 29 2b 31 39 37 30 2d 31 3b 43 28 6a 2b 31 2c 30 29 3c 3d 6d 3b 6a 2b 2b 29 3b 66 6f 72 28 6b 3d 41 28 28 6d 2d 43 28 6a 2c 30 29 29 Data Ascii: c)}}return b+'"'},I=function(a,b,c,d,e,f,g){var h,i,j,k,m,r,s,t,z,B;try{h=b[a]}catch(a){}if(typeof h=="object"&&h){i=n.call(h);if(i==u&&!o.call(h,"toJSON"))if(h>-1/0&&h<1/0){if(C){m=A(h/864e5);for(j=A(m/365.2425)+1970-1;C(j+1,0)<=m;j++);for(k=A((m-C(j,0))
2025-03-12 12:28:56 UTC	16384	IN	Data Raw: 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 66 72 6f 6d 28 23 37 33 38 61 62 61 29 2c 20 74 6f 28 23 32 63 34 39 38 37 29 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 34 33 62 38 37 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 77 68 69 74 65 20 30 70 78 20 31 70 78 20 31 70 78 20 2d 31 70 78 20 69 6e 73 65 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 3a 62 6f 6c 64 20 31 34 70 78 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 33 30 2c 38 34 2c 2e 32 39 36 38 37 35 29 20 30 70 78 20 2d 31 70 78 20 30 70 78 3b 76 65 72 74 69 63 61 Data Ascii: :linear-gradient(from(#738aba), to(#2c4987));border-bottom:1px solid;border-color:#043b87;box-shadow:white 0px 1px 1px -1px inset;color:#fff;font:bold 14px Helvetica, sans-serif;text-overflow:ellipsis;text-shadow:rgba(0,30,84,.296875) 0px -1px 0px;vertica
2025-03-12 12:28:56 UTC	16384	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 22 29 3f 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 62 28 22 41 73 73 65 72 74 22 29 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 3b 69 66 28 61 26 26 61 2e 70 72 6f 74 6f 74 79 70 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 3d 3d 3d 21 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 70 61 72 65 6e 74 20 74 79 70 65 20 64 6f 65 73 20 6e 6f 74 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 20 54 79 70 65 22 29 3b 61 3d 61 7c 7c 67 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 7d 66 2e 70 72 6f 74 6f 74 79 70 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 66 Data Ascii: onstructor")?c.constructor:function(){this.parent.apply(this,arguments)};b("Assert").isFunction(e);if(a&&a.prototype instanceof g===!1)throw new Error("parent type does not inherit from Type");a=a\|\|g;function f(){}f.prototype=a.prototype;e.prototype=new f
2025-03-12 12:28:56 UTC	1500	IN	Data Raw: 73 74 43 6f 6f 6b 69 65 20 77 61 73 20 65 6d 70 74 79 2e 22 29 3b 6a 28 22 66 62 73 72 5f 22 2c 61 2c 62 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 6c 28 29 2c 6a 28 22 66 62 73 72 5f 22 2c 22 22 2c 30 2c 21 30 29 7d 67 2e 73 65 74 52 61 77 3d 6a 3b 67 2e 67 65 74 52 61 77 3d 6b 3b 67 2e 73 65 74 44 6f 6d 61 69 6e 3d 61 3b 67 2e 67 65 74 44 6f 6d 61 69 6e 3d 62 3b 67 2e 6c 6f 61 64 4d 65 74 61 3d 6c 3b 67 2e 6c 6f 61 64 53 69 67 6e 65 64 52 65 71 75 65 73 74 3d 65 3b 67 2e 73 65 74 53 69 67 6e 65 64 52 65 71 75 65 73 74 43 6f 6f 6b 69 65 3d 66 3b 67 2e 63 6c 65 61 72 53 69 67 6e 65 64 52 65 71 75 65 73 74 43 6f 6f 6b 69 65 3d 6d 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 73 64 6b 2e 4f 62 73 65 72 76 61 62 6c 65 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 Data Ascii: stCookie was empty.");j("fbsr_",a,b,!0)}function m(){l(),j("fbsr_","",0,!0)}g.setRaw=j;g.getRaw=k;g.setDomain=a;g.getDomain=b;g.loadMeta=l;g.loadSignedRequest=e;g.setSignedRequestCookie=f;g.clearSignedRequestCookie=m}),98);__d("sdk.Observable",[],(functi
2025-03-12 12:28:56 UTC	14884	IN	Data Raw: 28 73 2e 4c 4f 47 4f 55 54 5f 43 4f 4f 4b 49 45 5f 50 52 45 46 49 58 2c 22 79 22 2c 44 61 74 65 2e 6e 6f 77 28 29 2b 68 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 61 3d 73 2e 43 4f 4e 4e 45 43 54 45 44 5f 52 45 56 41 4c 49 44 41 54 45 5f 50 45 52 49 4f 44 29 3b 76 61 72 20 62 3d 63 28 22 73 64 6b 2e 41 75 74 68 53 74 61 74 65 22 29 2e 67 65 74 53 74 61 74 65 28 29 2e 74 69 6d 65 72 3b 62 26 26 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 62 29 3b 62 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 69 6e 66 6f 72 6d 28 73 2e 52 45 56 41 4c 49 44 41 54 45 5f 54 49 4d 45 52 5f 54 49 4d 45 4f 55 54 29 7d 2c 61 29 3b 63 28 22 73 64 6b 2e 41 75 74 Data Ascii: (s.LOGOUT_COOKIE_PREFIX,"y",Date.now()+h,!1)}function j(a){a===void 0&&(a=s.CONNECTED_REVALIDATE_PERIOD);var b=c("sdk.AuthState").getState().timer;b&&window.clearTimeout(b);b=window.setTimeout(function(){r.inform(s.REVALIDATE_TIMER_TIMEOUT)},a);c("sdk.Aut
2025-03-12 12:28:56 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 64 28 61 2c 62 29 7b 69 66 28 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 29 29 72 65 74 75 72 6e 3b 62 2e 74 79 70 65 26 26 28 28 21 61 2e 74 79 70 65 7c 7c 43 5b 61 2e 74 79 70 65 5d 3e 43 5b 62 2e 74 79 70 65 5d 29 26 26 28 61 2e 74 79 70 65 3d 62 2e 74 79 70 65 29 29 3b 76 61 72 20 63 3d 62 2e 6d 65 74 61 64 61 74 61 3b 69 66 28 63 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 64 3b 64 3d 28 64 3d 61 2e 6d 65 74 61 64 61 74 61 29 21 3d 3d 6e 75 6c 6c 26 26 64 21 3d 3d 76 6f 69 64 20 30 3f 64 3a 6e 65 77 20 42 28 29 3b 63 21 3d 6e 75 6c 6c 26 26 64 2e 61 64 64 45 6e 74 72 69 65 73 2e 61 70 70 6c 79 28 64 2c 63 2e 67 65 74 41 6c 6c 28 29 29 3b 61 2e 6d 65 74 61 64 61 74 61 3d 64 7d 62 2e 70 72 6f 6a 65 63 74 21 3d 6e 75 6c 6c 26 26 28 Data Ascii: nction d(a,b){if(Object.isFrozen(a))return;b.type&&((!a.type\|\|C[a.type]>C[b.type])&&(a.type=b.type));var c=b.metadata;if(c!=null){var d;d=(d=a.metadata)!==null&&d!==void 0?d:new B();c!=null&&d.addEntries.apply(d,c.getAll());a.metadata=d}b.project!=null&&(
2025-03-12 12:28:56 UTC	16384	IN	Data Raw: 4e 6f 72 6d 61 6c 69 7a 65 55 74 69 6c 73 3a 4d 2c 45 72 72 6f 72 50 6f 73 74 65 72 3a 78 61 2c 45 72 72 6f 72 50 75 62 53 75 62 3a 52 2c 45 72 72 6f 72 53 65 72 69 61 6c 69 7a 65 72 3a 44 2c 45 72 72 6f 72 53 65 74 75 70 3a 6b 2c 45 72 72 6f 72 58 46 42 44 65 62 75 67 3a 47 2c 46 42 4c 6f 67 67 65 72 3a 63 2c 67 65 74 45 72 72 6f 72 53 61 66 65 3a 76 2c 67 65 74 53 69 6d 70 6c 65 48 61 73 68 3a 48 2c 54 41 41 4c 3a 64 2c 54 41 41 4c 4f 70 63 6f 64 65 3a 67 2c 72 65 6e 61 6d 65 46 75 6e 63 74 69 6f 6e 3a 47 61 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 66 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 46 42 4c 6f 67 67 65 72 22 2c 5b 22 66 62 2d 65 72 72 6f 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 Data Ascii: NormalizeUtils:M,ErrorPoster:xa,ErrorPubSub:R,ErrorSerializer:D,ErrorSetup:k,ErrorXFBDebug:G,FBLogger:c,getErrorSafe:v,getSimpleHash:H,TAAL:d,TAALOpcode:g,renameFunction:Ga};e.exports=f}),null);__d("FBLogger",["fb-error"],(function(a,b,c,d,e,f,g){"use st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49758	2.22.61.186	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:55 UTC	590	OUT	GET /li.lms-analytics/insight.min.js HTTP/1.1 Host: snap.licdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:56 UTC	413	IN	HTTP/1.1 200 OK Last-Modified: Wed, 22 Jan 2025 19:41:57 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Type: application/javascript;charset=utf-8 Date: Wed, 12 Mar 2025 12:28:56 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" Content-Length: 41191 Connection: close X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-CDN: AKAM
2025-03-12 12:28:56 UTC	15971	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 6e 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 74 2c 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 6e 5b 74 5d 3d 65 2c 6e 7d 76 61 72 20 74 2c 65 2c 72 2c 69 2c 6f 3d 7b 41 44 56 45 52 54 49 53 49 4e 47 3a 22 41 44 56 45 52 54 49 53 49 4e 47 22 2c 41 4e 41 4c 59 54 49 43 53 5f 41 4e 44 5f 52 45 53 45 41 52 43 48 3a 22 41 4e 41 4c 59 54 49 43 53 5f 41 4e 44 5f 52 45 53 45 41 52 43 48 22 2c 46 55 4e 43 54 49 4f 4e 41 4c 3a 22 46 55 4e 43 54 49 4f 4e 41 Data Ascii: !function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONA
2025-03-12 12:28:56 UTC	16384	IN	Data Raw: 2e 70 75 73 68 28 6e 2e 5f 62 69 7a 6f 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 29 29 2c 6e 2e 5f 62 69 7a 6f 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 29 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 6e 2e 5f 62 69 7a 6f 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 3b 72 3c 69 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 21 74 5b 75 3d 69 5b 72 5d 5d 26 26 43 6e 28 75 29 26 26 28 74 5b 75 5d 3d 21 30 2c 65 2e 70 75 73 68 28 75 29 29 7d 69 66 28 6e 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 26 26 21 74 5b 6e 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 5d 26 26 28 74 5b 6e 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 5d 3d 21 30 2c 65 2e 70 75 Data Ascii: .push(n._bizo_data_partner_id)),n._bizo_data_partner_ids)for(var r=0,i=n._bizo_data_partner_ids;r<i.length;r++){!t[u=i[r]]&&Cn(u)&&(t[u]=!0,e.push(u))}if(n._linkedin_data_partner_id&&!t[n._linkedin_data_partner_id]&&(t[n._linkedin_data_partner_id]=!0,e.pu
2025-03-12 12:28:56 UTC	3235	IN	Data Raw: 22 74 65 78 74 61 72 65 61 22 2c 22 73 65 6c 65 63 74 22 2c 22 6f 70 74 69 6f 6e 22 2c 22 61 22 5d 2c 5f 65 3d 5b 22 62 75 74 74 6f 6e 22 2c 22 62 74 6e 22 5d 2c 45 65 3d 5b 22 77 72 61 70 70 65 72 22 2c 22 63 6f 6e 74 61 69 6e 65 72 22 2c 22 68 6f 6c 64 65 72 22 5d 2c 62 65 3d 5b 22 63 68 65 63 6b 62 6f 78 22 5d 2c 79 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 2e 74 61 67 4e 61 6d 65 29 26 26 2d 31 3c 49 65 2e 69 6e 64 65 78 4f 66 28 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 41 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 21 21 28 6e 3d 6e 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 4b 74 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 Data Ascii: "textarea","select","option","a"],_e=["button","btn"],Ee=["wrapper","container","holder"],be=["checkbox"],ye=function(n){return(n=n.tagName)&&-1<Ie.indexOf(n.toLowerCase())},Ae=function(n){return!!(n=n.attributes)&&Kt(Object.keys(n),(function(n){return n&
2025-03-12 12:28:56 UTC	5601	IN	Data Raw: 65 5b 74 5d 2c 42 65 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 72 65 70 6c 61 63 65 28 6b 65 2c 6a 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 65 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 5b 46 65 2c 4b 65 2c 7a 65 2c 71 65 2c 24 65 2c 59 65 2c 57 65 5d 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 28 6e 29 7d 29 2c 6e 29 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 75 72 6c 3d 4a 65 28 6e 2e 75 72 6c 29 2c 6e 2e 68 72 65 66 26 26 28 6e 2e 68 72 65 66 3d 4a 65 28 6e 2e 68 72 65 66 29 29 2c 6e 2e 70 61 67 65 54 69 74 6c 65 26 26 28 6e 2e 70 61 67 65 54 69 74 6c Data Ascii: e[t],Be);return n}function ze(n){return n.replace(ke,je)}function Je(n){return n&&"string"==typeof n?[Fe,Ke,ze,qe,$e,Ye,We].reduce((function(n,t){return t(n)}),n):n}function Ze(n){return n.url=Je(n.url),n.href&&(n.href=Je(n.href)),n.pageTitle&&(n.pageTitl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49759	13.107.253.72	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:56 UTC	573	OUT	GET /tag/68qk0gmwrd HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:56 UTC	528	IN	HTTP/1.1 200 OK Date: Wed, 12 Mar 2025 12:28:56 GMT Content-Type: application/x-javascript Content-Length: 723 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=157bc42111a543ff95e454648828403f.20250312.20260312; expires=Thu, 12 Mar 2026 12:28:56 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111 x-azure-ref: 20250312T122856Z-r194b7c9999q8zdhhC1BN14xhs00000004kg00000000359u X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2025-03-12 12:28:56 UTC	723	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49756	157.240.0.6	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:56 UTC	1438	OUT	GET /signals/config/433702377574628?v=2.9.187&r=stable&domain=cloud.kdanmobile.com&hme=9d6c2cc137748d003f279fac8d52b2defc993e1177ef802e0d5b230c72882031&ex_m=71%2C123%2C108%2C112%2C62%2C4%2C101%2C70%2C16%2C98%2C90%2C51%2C55%2C177%2C180%2C192%2C188%2C189%2C191%2C29%2C102%2C53%2C78%2C190%2C172%2C175%2C185%2C186%2C193%2C134%2C41%2C198%2C195%2C196%2C34%2C147%2C15%2C50%2C202%2C201%2C136%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C109%2C52%2C111%2C39%2C110%2C30%2C95%2C26%2C173%2C176%2C144%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C103%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C105%2C104%2C106%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C2%2C36%2C64%2C42%2C107%2C45%2C80%2C69%2C113%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C114 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:57 UTC	1678	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' blob: ;script-src 'nonce-RMeoEBzX' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: .cdninstagram.com https://.google-analytics.com;font-src 'self' data: blob: ;img-src 'self' data: blob: https://.google-analytics.com;media-src 'self' data: blob: ;child-src 'self' data: blob: ;frame-src 'self' data: blob: ;manifest-src 'self' data: blob: ;object-src 'self' data: blob: ;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-12 12:28:57 UTC	1673	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-12 12:28:57 UTC	1491	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2025-03-12 12:28:57 UTC	14893	IN	Data Raw: 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f Data Ascii: urn!1}return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbo
2025-03-12 12:28:57 UTC	1500	IN	Data Raw: 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 69 Data Ascii: logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;function g(a,b){i
2025-03-12 12:28:57 UTC	1482	IN	Data Raw: 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 29 3f 21 31 3a 63 28 61 2c 62 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 62 2c 63 29 7b 63 3d 61 2e 67 65 74 28 63 2c 22 67 61 74 69 6e 67 22 29 3b 69 66 28 63 3d 3d 6e 75 6c 6c 7c 7c 63 2e 67 61 74 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 31 3b 63 3d 63 2e 67 61 74 69 6e 67 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 61 2e 6e 61 6d 65 3d 3d 3d 62 7d 29 3b 72 65 74 75 72 6e 20 63 21 3d 6e 75 6c 6c 26 26 63 2e 70 61 73 73 65 64 3d 3d 3d 21 30 7d 65 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 Data Ascii: EventsConfigStore");function b(a,b){return isNaN(b)?!1:c(a,b.toString())}function c(b,c){c=a.get(c,"gating");if(c==null\|\|c.gatings==null)return!1;c=c.gatings.find(function(a){return a!=null&&a.name===b});return c!=null&&c.passed===!0}e.exports=b})();retur
2025-03-12 12:28:57 UTC	13402	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6a 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 21 31 3b 61 3d 61 2e 6d 61 74 63 68 28 2f 5e 28 2e 2a 5c 2e 29 2a 28 66 61 63 65 62 6f 6f 6b 5c 2e 63 6f 6d 7c 69 6e 74 65 72 6e 61 6c 66 62 5c 2e 63 6f 6d 7c 77 6f 72 6b 70 6c 61 63 65 5c 2e 63 6f 6d 7c 69 6e 73 74 61 67 72 61 6d 5c 2e 63 6f 6d 7c 6f 63 75 6c 75 73 5c 2e 63 6f 6d 7c 6e 6f 76 69 5c 2e 63 6f 6d 29 5c 2e 3f 24 2f 69 29 Data Ascii: ,function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";j.exports=function(a){if(typeof a!=="string")return!1;a=a.match(/^(.\.)(facebook\.com\|internalfb\.com\|workplace\.com\|instagram\.com\|oculus\.com\|novi\.com)\.?$/i)
2025-03-12 12:28:57 UTC	1500	IN	Data Raw: 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 62 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 7d 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 73 74 61 72 74 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 76 61 72 20 68 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 55 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 21 68 29 72 65 74 75 72 6e 7b 7d 3b 68 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 Data Ascii: etFbeventsModules("SignalsParamList");e.exports=new a(function(a,e){b.listen(function(b,c,f){if(b==null)return{};a.performanceMark("fbevents:start:unwantedDataProcessing",b.id);var h=e.optIns.isOptedIn(b.id,"UnwantedData");if(!h)return{};h=e.optIns.isOpte
2025-03-12 12:28:57 UTC	1482	IN	Data Raw: 65 6e 67 74 68 3e 30 26 26 61 2e 61 70 70 65 6e 64 28 22 72 70 5f 75 72 6c 22 2c 68 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 3b 72 65 74 75 72 6e 20 66 2e 74 6f 53 74 72 69 6e 67 28 29 7d 72 65 74 75 72 6e 22 22 7d 63 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 2c 69 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 73 74 61 72 74 3a 76 61 6c 69 64 61 74 65 55 72 6c 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 76 61 72 20 6a 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 55 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 21 6a 29 72 65 74 75 72 6e 3b 6a 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 Data Ascii: ength>0&&a.append("rp_url",h.join(",")));return f.toString()}return""}c.listen(function(b,c,f,i){if(b==null)return;a.performanceMark("fbevents:start:validateUrlProcessing",b.id);var j=e.optIns.isOptedIn(b.id,"UnwantedData");if(!j)return;j=e.optIns.isOpted
2025-03-12 12:28:57 UTC	13402	IN	Data Raw: 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d Data Ascii: eturn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]}
2025-03-12 12:28:57 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6c 69 65 6e 74 48 69 6e 74 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 3b 61 2e 63 6f 65 72 63 65 3b 61 3d 61 2e 54 79 70 65 64 3b 76 61 72 20 62 3d 61 2e 6f 62 6a 65 63 74 57 69 74 Data Ascii: Modules[b]=a)});f.ensureModuleRegistered("SignalsFBEventsClientHintTypedef",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped");a.coerce;a=a.Typed;var b=a.objectWit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49765	13.107.42.14	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:58 UTC	806	OUT	GET /attribution_trigger?pid=70022&time=1741782535936&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: * sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Attribution-Reporting-Eligible: trigger=event-source;navigation-source Attribution-Reporting-Support: web=os Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:59 UTC	1049	IN	HTTP/1.1 200 OK Content-Length: 2 Content-Type: application/json Set-Cookie: ar_debug=1; Max-Age=2629746; Expires=Fri, 11 Apr 2025 22:58:05 GMT; Path=/; Secure; HTTPOnly; SameSite=None Set-Cookie: bcookie="v=2&cc3dd398-b1ac-441b-8e0c-019059bba4ef"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 12-Mar-2026 12:28:59 GMT; SameSite=None Set-Cookie: lidc="b=OGST07:s=O:r=O:a=O:p=O:g=3133:u=1:x=1:i=1741782539:t=1741868939:v=2:sig=AQHxgb7x21f_EEPvlpNlHL0P_04wwcI9"; Expires=Thu, 13 Mar 2025 12:28:59 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-RestLi-Protocol-Version: 1.0.0 Access-Control-Allow-Headers: * X-FS-UUID: 00063024598515831da37ce59f45f8b9 X-Li-Fabric: prod-lor1 X-Li-Pop: afd-prod-lor1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYwJFmFFYMdo3zln0X4uQ== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5F13236B2FEB43D6AAC9E8FF266124F6 Ref B: BNA30EDGE0317 Ref C: 2025-03-12T12:28:59Z Date: Wed, 12 Mar 2025 12:28:58 GMT Connection: close
2025-03-12 12:28:59 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49766	142.250.185.130	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:59 UTC	1555	OUT	GET /td/rul/1012119460?random=1741782536465&cv=11&fst=1741782536465&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CLf3ygE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:59 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 12 Mar 2025 12:28:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 12-Mar-2025 12:43:59 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-12 12:28:59 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-03-12 12:28:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49770	142.250.186.130	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:59 UTC	1260	OUT	GET /pagead/viewthroughconversion/1012119460/?random=1741782536465&cv=11&fst=1741782536465&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CLf3ygE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:28:59 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 12 Mar 2025 12:28:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 12-Mar-2025 12:43:59 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-12 12:28:59 UTC	536	IN	Data Raw: 66 33 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 62 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 64 5d 3d 62 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 Data Ascii: f38(function(){var s = {};(function(){var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,d,b){if(a==Array.prototype\|\|a==Object.prototype)return a;a[d]=b.value;return a};function l(a){a=["object"==typeof globalThis&&globalT
2025-03-12 12:28:59 UTC	1378	IN	Data Raw: 22 2c 72 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 64 2c 62 29 7b 69 66 28 21 62 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 62 3d 74 5b 64 5d 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 64 5d 3b 62 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 62 21 3d 3d 76 6f 69 64 20 30 3f 62 3a 61 5b 64 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 64 2c 62 29 7b 69 66 28 64 29 61 3a 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 72 3f 67 3d 72 3a 67 3d 70 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 Data Ascii: ",r={},t={};function u(a,d,b){if(!b\|\|a!=null){b=t[d];if(b==null)return a[d];b=a[b];return b!==void 0?b:a[d]}} function v(a,d,b){if(d)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in r?g=r:g=p;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))bre
2025-03-12 12:28:59 UTC	1378	IN	Data Raw: 29 7b 64 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 64 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 64 2e 73 72 63 3d 61 7d 3b 76 61 72 20 47 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 76 61 72 20 64 3d 61 2e 73 65 61 72 63 68 28 47 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 61 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 64 3b 29 7b 76 61 72 20 63 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 28 63 3d 3d 33 38 7c 7c 63 3d 3d 36 33 29 69 66 28 63 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 33 29 2c 21 63 7c 7c 63 3d 3d 36 31 7c 7c 63 3d 3d 33 38 7c 7c 63 3d 3d 33 35 29 62 72 65 61 6b 20 61 3b 62 2b 3d 34 7d 62 3d Data Ascii: ){d.onload=null};d.onerror=function(){d.onerror=null};d.src=a};var G=/#\|$/;function H(a){var d=a.search(G),b;a:{for(b=0;(b=a.indexOf("fmt",b))>=0&&b<d;){var c=a.charCodeAt(b-1);if(c==38\|\|c==63)if(c=a.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)break a;b+=4}b=
2025-03-12 12:28:59 UTC	611	IN	Data Raw: 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6c 6f 75 64 2e 6b 64 61 6e 6d 6f 62 69 6c 65 2e 63 6f 6d 25 32 46 73 68 61 72 65 25 32 46 67 6c 25 32 46 63 6d 31 78 4c 30 38 7a 65 6c 63 35 4d 6a 41 77 4d 44 4e 79 63 6c 49 72 55 33 55 34 52 41 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4b 44 41 4e 25 32 30 43 6c 6f 75 64 25 32 30 25 37 43 25 32 30 44 6f 77 6e 6c 6f 61 64 25 32 30 4c 69 6e 6b 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 Data Ascii: \x3d1024\x26url\x3dhttps%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dKDAN%20Cloud%20%7C%20Download%20Link\x26npa\x3d0\x26pscdl\x3dnoapi\x26uaa\x3dx86\x26uab\x3d64\x26u
2025-03-12 12:28:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49771	157.240.253.35	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:59 UTC	951	OUT	GET /tr/?id=433702377574628&ev=PageView&dl=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&rl=&if=false&ts=1741782536920&sw=1280&sh=1024&v=2.9.187&r=stable&a=tmgoogletagmanager&ec=0&o=12318&fbp=fb.1.1741782536918.34096925478561532&ler=empty&cdl=API_unavailable&it=1741782535006&coo=false&exp=k0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:00 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=121, rtx=0, c=10, mss=1380, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 12 Mar 2025 12:28:59 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49768	13.107.42.14	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:59 UTC	802	OUT	GET /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:00 UTC	1106	IN	HTTP/1.1 302 Found Location: /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true Set-Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; Max-Age=7776000; Expires=Tue, 10 Jun 2025 12:28:59 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure Set-Cookie: bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 12-Mar-2026 12:28:59 GMT; SameSite=None Set-Cookie: lidc="b=TGST07:s=T:r=T:a=T:p=T:g=3048:u=1:x=1:i=1741782539:t=1741868939:v=2:sig=AQFaaqCBSoaMjsjPtd7f0hTkuBAZpK9H"; Expires=Thu, 13 Mar 2025 12:28:59 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure LinkedIn-Action: 1 X-Li-Fabric: prod-ltx1 X-Li-Pop: afd-prod-ltx1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYwJFmSEcu4NOqWpMKpJA== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9D50275A2A81414591EC78D32C6D0DFD Ref B: BNA30EDGE0313 Ref C: 2025-03-12T12:28:59Z Date: Wed, 12 Mar 2025 12:28:59 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49769	13.107.253.72	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:28:59 UTC	642	OUT	GET /s/0.8.0/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: CLID=157bc42111a543ff95e454648828403f.20250312.20260312
2025-03-12 12:29:00 UTC	571	IN	HTTP/1.1 200 OK Date: Wed, 12 Mar 2025 12:28:59 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 71179 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 11 Mar 2025 10:33:46 GMT ETag: "0x8DD608834152624" x-ms-request-id: 757faa23-801e-0067-45c5-923e27000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20250312T122859Z-r194b7c9999mbrhnhC1BN108nc00000002fg000000002brn Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 79034942 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-12 12:29:00 UTC	15813	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 38 2e 30 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 53 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 6b 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 54 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 67 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 Data Ascii: /* clarity-js v0.8.0: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Sr},get start(){return kr},get stop(){return Tr},get track(){return gr}}),e=Object.freeze({__prot
2025-03-12 12:29:00 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 65 28 74 29 7b 72 65 74 75 72 6e 20 43 74 2e 68 61 73 28 74 29 3f 43 74 2e 67 65 74 28 74 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 65 28 74 29 7b 76 61 72 20 65 3d 47 74 28 74 29 3b 72 65 74 75 72 6e 20 65 20 69 6e 20 44 74 3f 44 74 5b 65 5d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 58 74 3f 58 74 5b 74 5d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 72 65 28 74 29 7b 72 65 74 75 72 6e 20 43 74 2e 68 61 73 28 47 74 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 2c 6e 3d 50 74 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 65 5d 3b 61 20 69 6e 20 44 74 26 26 74 2e 70 75 73 68 28 44 Data Ascii: nction ee(t){return Ct.has(t)?Ct.get(t):null}function ne(t){var e=Gt(t);return e in Dt?Dt[e]:null}function ae(t){return t in Xt?Xt[t]:null}function re(t){return Ct.has(Gt(t))}function ie(){for(var t=[],e=0,n=Pt;e<n.length;e++){var a=n[e];a in Dt&&t.push(D
2025-03-12 12:29:00 UTC	16384	IN	Data Raw: 31 2c 70 5b 31 5d 3d 6e 2c 70 5b 30 5d 3e 3d 31 30 7c 7c 64 29 72 65 74 75 72 6e 20 70 5b 32 5d 3d 74 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 2c 6e 3e 61 2b 33 65 33 3f 74 2e 74 79 70 65 3a 28 6f 2e 64 72 6f 70 4d 75 74 61 74 69 6f 6e 73 7c 7c 28 4c 6e 5b 66 5d 3d 7b 6d 75 74 61 74 69 6f 6e 3a 74 2c 74 69 6d 65 73 74 61 6d 70 3a 61 7d 29 2c 22 74 68 72 6f 74 74 6c 65 22 29 7d 72 65 74 75 72 6e 20 74 2e 74 79 70 65 7d 28 65 2c 74 2c 6e 2c 61 29 3a 65 2e 74 79 70 65 2c 75 26 26 69 26 26 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 4a 74 28 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 2c 75 26 26 69 26 26 69 2e 6e 6f 64 65 54 79 70 65 3d 3d 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 46 52 41 47 4d 45 4e 54 5f 4e 4f 44 45 26 26 69 2e 68 6f 73 74 26 26 Data Ascii: 1,p[1]=n,p[0]>=10\|\|d)return p[2]=t.removedNodes,n>a+3e3?t.type:(o.dropMutations\|\|(Ln[f]={mutation:t,timestamp:a}),"throttle")}return t.type}(e,t,n,a):e.type,u&&i&&i.ownerDocument&&Jt(i.ownerDocument),u&&i&&i.nodeType==Node.DOCUMENT_FRAGMENT_NODE&&i.host&&
2025-03-12 12:29:00 UTC	16384	IN	Data Raw: 6c 74 3a 70 72 2e 70 75 73 68 28 72 29 7d 4c 28 32 35 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 3d 3d 3d 6f 2e 6c 65 61 6e 26 26 6d 72 3e 30 3f 31 30 30 3a 58 69 2e 73 65 71 75 65 6e 63 65 2a 6f 2e 64 65 6c 61 79 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 75 70 6c 6f 61 64 3f 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 6d 69 6e 28 74 2c 33 65 34 29 2c 31 30 30 29 3a 6f 2e 64 65 6c 61 79 7d 28 29 3b 6e 2d 77 72 3e 32 2a 69 26 26 28 71 28 62 72 29 2c 62 72 3d 6e 75 6c 6c 29 2c 65 26 26 6e 75 6c 6c 3d 3d 3d 62 72 26 26 28 32 35 21 3d 3d 61 26 26 42 28 29 2c 62 72 3d 48 28 45 72 2c 69 29 2c 77 72 3d 6e 2c 74 69 28 79 72 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 72 28 29 7b 71 28 62 72 29 Data Ascii: lt:pr.push(r)}L(25);var i=function(){var t=!1===o.lean&&mr>0?100:Xi.sequenceo.delay;return"string"==typeof o.upload?Math.max(Math.min(t,3e4),100):o.delay}();n-wr>2i&&(q(br),br=null),e&&null===br&&(25!==a&&B(),br=H(Er,i),wr=n,ti(yr))}}function Tr(){q(br)
2025-03-12 12:29:00 UTC	6214	IN	Data Raw: 26 26 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 3d 79 61 26 26 28 79 61 3d 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 2c 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 6f 28 29 26 26 28 57 28 33 36 2c 31 29 2c 45 61 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 5b 77 61 5d 29 3e 2d 31 26 26 4e 61 28 73 28 29 2c 74 68 69 73 5b 77 61 5d 2c 31 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 2c 79 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 6e 75 6c 6c 3d 3d 3d 62 61 26 26 28 62 61 3d 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 Data Ascii: &&CSSStyleSheet.prototype&&(null===ya&&(ya=CSSStyleSheet.prototype.replace,CSSStyleSheet.prototype.replace=function(){return eo()&&(W(36,1),Ea.indexOf(this[wa])>-1&&Na(s(),this[wa],1,arguments[0])),ya.apply(this,arguments)}),null===ba&&(ba=CSSStyleSheet.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49772	157.240.253.35	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:00 UTC	1105	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=433702377574628&ev=PageView&dl=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&rl=&if=false&ts=1741782536920&sw=1280&sh=1024&v=2.9.187&r=stable&a=tmgoogletagmanager&ec=0&o=12318&fbp=fb.1.1741782536918.34096925478561532&ler=empty&cdl=API_unavailable&it=1741782535006&coo=false&exp=k0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Attribution-Reporting-Support: web;os Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:01 UTC	839	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7480899050847252643&cpp=C3e&cv=1020818435", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7480899050847252643&cpp=C3e&cv=1020818435"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2025-03-12 12:29:01 UTC	2061	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 6e 6f 6e 63 65 2d 49 4a 38 57 48 65 32 56 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d Data Ascii: content-security-policy: default-src blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'nonce-IJ8WHe2V' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.google-
2025-03-12 12:29:01 UTC	1674	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2025-03-12 12:29:01 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2025-03-12 12:29:01 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.17	49775	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:01 UTC	199	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-12 12:29:02 UTC	522	IN	HTTP/1.1 200 OK Date: Wed, 12 Mar 2025 12:29:01 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: f13adc60-101e-0046-1523-9391b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250312T122901Z-16cb5c89b7bjx79bhC1BN1k32s00000001rg000000000f9q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-12 12:29:02 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.17	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:01 UTC	199	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-12 12:29:02 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 12 Mar 2025 12:29:02 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: acdbac62-101e-008e-614a-93cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20250312T122901Z-r194b7c999995w9fhC1BN1uhkc00000004pg000000001985 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-12 12:29:02 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.17	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:01 UTC	199	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-12 12:29:02 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 12 Mar 2025 12:29:01 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: d836b941-f01e-0071-094a-93431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250312T122901Z-16cb5c89b7bcrst9hC1BN1nbg000000001x00000000004d0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-12 12:29:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49779	13.107.42.14	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:01 UTC	516	OUT	GET /attribution_trigger?pid=70022&time=1741782535936&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:02 UTC	1049	IN	HTTP/1.1 200 OK Content-Length: 2 Content-Type: application/json Set-Cookie: ar_debug=1; Max-Age=2629746; Expires=Fri, 11 Apr 2025 22:58:07 GMT; Path=/; Secure; HTTPOnly; SameSite=None Set-Cookie: bcookie="v=2&b8ec12fe-8de5-442e-8322-9f58ea8360f2"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 12-Mar-2026 12:29:01 GMT; SameSite=None Set-Cookie: lidc="b=VGST07:s=V:r=V:a=V:p=V:g=3187:u=1:x=1:i=1741782541:t=1741868941:v=2:sig=AQGtrZbskB6ZJlKkgMEk34kovHlJn9Au"; Expires=Thu, 13 Mar 2025 12:29:01 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-RestLi-Protocol-Version: 1.0.0 Access-Control-Allow-Headers: * X-FS-UUID: 0006302459afaef25f48da9081368075 X-Li-Fabric: prod-lva1 X-Li-Pop: afd-prod-lva1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYwJFmvrvJfSNqQgTaAdQ== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B1E5F6337BA94199B6CDAA47062E2191 Ref B: BNA30EDGE0418 Ref C: 2025-03-12T12:29:01Z Date: Wed, 12 Mar 2025 12:29:01 GMT Connection: close
2025-03-12 12:29:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.17	49776	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:01 UTC	199	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-12 12:29:02 UTC	522	IN	HTTP/1.1 200 OK Date: Wed, 12 Mar 2025 12:29:01 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: c75e01ba-c01e-00a1-7024-937e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250312T122901Z-16cb5c89b7b87gnnhC1BN17pwg00000001x0000000002fb6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-12 12:29:02 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.17	49777	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:01 UTC	199	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-12 12:29:02 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 12 Mar 2025 12:29:02 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: d6c9825a-a01e-0098-554a-938556000000 x-ms-version: 2018-03-28 x-azure-ref: 20250312T122901Z-r194b7c9999xbmtxhC1BN1nuu400000001n00000000029gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-12 12:29:02 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49781	142.250.186.68	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:02 UTC	1387	OUT	GET /pagead/1p-user-list/1012119460/?random=1741782536465&cv=11&fst=1741780800000&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCjtLzM3njAxswuce-Dd1NI81W3tjaptGx-NA&random=407532742&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CLf3ygE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:02 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 12 Mar 2025 12:29:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-12 12:29:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49783	157.240.251.35	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:02 UTC	710	OUT	GET /tr/?id=433702377574628&ev=PageView&dl=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&rl=&if=false&ts=1741782536920&sw=1280&sh=1024&v=2.9.187&r=stable&a=tmgoogletagmanager&ec=0&o=12318&fbp=fb.1.1741782536918.34096925478561532&ler=empty&cdl=API_unavailable&it=1741782535006&coo=false&exp=k0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=127, rtx=0, c=10, mss=1380, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 12 Mar 2025 12:29:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49782	13.107.42.14	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:02 UTC	1040	OUT	GET /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; lidc="b=TGST07:s=T:r=T:a=T:p=T:g=3048:u=1:x=1:i=1741782539:t=1741868939:v=2:sig=AQFaaqCBSoaMjsjPtd7f0hTkuBAZpK9H"
2025-03-12 12:29:02 UTC	1471	IN	HTTP/1.1 302 Found Location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D70022%26time%3D1741782535936%26li_adsId%3D5161daed-8aa4-4efc-b9a0-a9cbe96e79ee%26url%3Dhttps%253A%252F%252Fcloud.kdanmobile.com%252Fshare%252Fgl%252Fcm1xL08zelc5MjAwMDNyclIrU3U4RA%26cookiesTest%3Dtrue%26liSync%3Dtrue Set-Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; Max-Age=7776000; Expires=Tue, 10 Jun 2025 12:29:02 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure Set-Cookie: UserMatchHistory=AQKS3FPrBS2JDAAAAZWKVGl5UJQjMevROUR9j0GKwmONJnpXaCPYPC0g0Frld1QDbU7KRkbQqppCqQ; Max-Age=2592000; Expires=Fri, 11 Apr 2025 12:29:02 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure Set-Cookie: AnalyticsSyncHistory=AQLKrQcXZs0pyAAAAZWKVGl5c_43fiKimSE77CtEcMQOwL6NuFBaAfYgdIo0chs_AAm9l_fD3M_-_GrX0yBbQw; Max-Age=2592000; Expires=Fri, 11 Apr 2025 12:29:02 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure Set-Cookie: bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 12-Mar-2026 12:29:02 GMT; SameSite=None LinkedIn-Action: 1 X-Li-Fabric: prod-ltx1 X-Li-Pop: afd-prod-ltx1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYwJFm7xULm8ko7N2EfiA== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5ABF14EB42584913916070634E33FC1A Ref B: BNA30EDGE0114 Ref C: 2025-03-12T12:29:02Z Date: Wed, 12 Mar 2025 12:29:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49784	52.152.143.207	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:02 UTC	644	OUT	POST /collect HTTP/1.1 Host: o.clarity.ms Connection: keep-alive Content-Length: 2232 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:02 UTC	2232	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ad 57 7b 6f db 38 12 ff 2a 3c 2e 6c b4 3d ca 26 a9 87 65 1b 42 2f 4d db dd 5c db 64 af 4d b7 57 b8 86 41 49 b4 cc 9a 22 55 89 b2 9d e4 b2 9f fd 30 b2 f3 dc dd de fd d1 08 70 86 e4 cc 70 c8 79 fd 78 85 25 9e cc 30 1d c4 03 8a 09 23 94 30 1a 13 1c c5 df d6 b4 28 b7 75 8e 09 fe 56 66 6e 15 61 82 77 b1 fc 66 8b 3d 1b 7c 78 e5 5c d5 4c 86 c3 4c db 36 1f ac 73 61 4a 9b 2a 2d 07 99 2d 87 cd 4a d4 72 58 e8 61 56 b2 dd 5b 1a 5f 4a 9d 85 ef be 1e 6d df bd 3c bd c8 f4 49 fd d1 ff 18 bc 3f c2 73 82 05 9e cc 66 3e 89 09 e3 31 25 f1 78 34 27 b3 98 30 f6 70 cc 63 82 37 aa 51 a9 96 78 4e 66 60 a8 1f 10 7c bc 38 f9 80 c9 0c 53 d0 74 bc f8 0d e8 cd c2 ad 6a eb 9c 96 c7 d6 b8 da 6a 3c 3f 48 80 ed 33 fc ce 5e 2a ad c5 30 1c 50 f4 e4 93 32 b9 dd Data Ascii: W{o8<.l=&eB/M\dMWAI"U0ppyx%0#0(uVfnawf=\|x\LL6saJ--JrXaV[_Jm<I?sf>1%x4'0pc7QxNf`\|8Stjj<?H3^*0P2
2025-03-12 12:29:03 UTC	279	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 12 Mar 2025 12:29:03 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cloud.kdanmobile.com Vary: Origin Request-Context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49787	157.240.251.35	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:03 UTC	747	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=433702377574628&ev=PageView&dl=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&rl=&if=false&ts=1741782536920&sw=1280&sh=1024&v=2.9.187&r=stable&a=tmgoogletagmanager&ec=0&o=12318&fbp=fb.1.1741782536918.34096925478561532&ler=empty&cdl=API_unavailable&it=1741782535006&coo=false&exp=k0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:04 UTC	789	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7480899059807168763&cpp=C3&cv=1020818435", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7480899059807168763&cpp=C3&cv=1020818435"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2025-03-12 12:29:04 UTC	2061	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 6e 6f 6e 63 65 2d 35 77 6a 68 54 30 78 78 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f 6f 67 6c 65 2d Data Ascii: content-security-policy: default-src blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'nonce-5wjhT0xx' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.google-
2025-03-12 12:29:04 UTC	1707	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49788	142.250.186.68	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:04 UTC	1146	OUT	GET /pagead/1p-user-list/1012119460/?random=1741782536465&cv=11&fst=1741780800000&bg=ffffff&guid=ON&async=1&gtm=45be53a1v9178171903z8811347510za201zb9102072116&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102640600~102693808~102717422~102788824~102791784~102814059~102825837&u_w=1280&u_h=1024&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&hn=www.googleadservices.com&frm=0&tiba=KDAN%20Cloud%20%7C%20Download%20Link&npa=0&pscdl=noapi&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCjtLzM3njAxswuce-Dd1NI81W3tjaptGx-NA&random=407532742&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:05 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 12 Mar 2025 12:29:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-12 12:29:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49790	13.107.42.14	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:09 UTC	1450	OUT	GET /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true&liSync=true HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; ar_debug=1; lidc="b=VGST07:s=V:r=V:a=V:p=V:g=3187:u=1:x=1:i=1741782541:t=1741868941:v=2:sig=AQGtrZbskB6ZJlKkgMEk34kovHlJn9Au"; UserMatchHistory=AQKS3FPrBS2JDAAAAZWKVGl5UJQjMevROUR9j0GKwmONJnpXaCPYPC0g0Frld1QDbU7KRkbQqppCqQ; AnalyticsSyncHistory=AQLKrQcXZs0pyAAAAZWKVGl5c_43fiKimSE77CtEcMQOwL6NuFBaAfYgdIo0chs_AAm9l_fD3M_-_GrX0yBbQw; bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; __cf_bm=PXtcuwfNoVXlKzu9J1szAOp2kq.Hs3xCTFvc8b.rEAY-1741782546-1.0.1.1-PhitQLvpb7vMGCUnUXM4MLfGOa.IOQt25BWCS4ZKPTVxwJe_5KZ_ylfgpZ0NkHIsUETrW66vULXlwHvRVg3PdZTep27hFJMBxfwbSPnEWgQ
2025-03-12 12:29:09 UTC	714	IN	HTTP/1.1 200 OK Content-Type: application/javascript Set-Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; Max-Age=7776000; Expires=Tue, 10 Jun 2025 12:29:09 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure Set-Cookie: bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 12-Mar-2026 12:29:09 GMT; SameSite=None LinkedIn-Action: 1 X-Li-Fabric: prod-lva1 X-Li-Pop: afd-prod-lva1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYwJFold1GPmlOdh1jW9Q== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 30D7E0A2B28F4FAB89583E0A9E399676 Ref B: BNA30EDGE0315 Ref C: 2025-03-12T12:29:09Z Date: Wed, 12 Mar 2025 12:29:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49793	52.216.44.33	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:09 UTC	1201	OUT	GET /c5e21b1b8b2f0b8f4a7d7d7ea76ff76a/1741766845804940717/INCOME%2520TAX.HTML?response-content-disposition=attachment%3B%20filename%2A%3Dutf-8%27%27INCOME%2520TAX.HTML%3B%20version%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA3BMGHEXOO3RX33LI%2F20250312%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250312T122859Z&X-Amz-Expires=1800&X-Amz-SignedHeaders=host&X-Amz-Signature=2a14c8ee6fec1ba5eec0680262565739f0457d1985eda44978421c68157859c3 HTTP/1.1 Host: pdfseries.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://preview.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:10 UTC	665	IN	HTTP/1.1 200 OK x-amz-id-2: U6FDqynzvX23tov8iFP3fb6eop+O+H2FYDOTlFpPx+RronM7nnTG//JHCQYr+xqlWphbXMg9qfk= x-amz-request-id: EMVH47T9N49RPKP8 Date: Wed, 12 Mar 2025 12:29:10 GMT Last-Modified: Wed, 12 Mar 2025 08:07:28 GMT ETag: "76f1f4b59819576fc7f30f040ccbbc8f" x-amz-server-side-encryption: AES256 x-amz-meta-access_token: d39KyeipJAjLJqI8IeOi2faFvlmLNNw5fNgTJGAPW4Y x-amz-meta-mission_id: 21787733 x-amz-version-id: s.GUjbGjr9Zvg_8x.Ww3nfH8Vb1kl.Bb Content-Disposition: attachment; filename*=utf-8''INCOME%20TAX.HTML; version= Accept-Ranges: bytes Content-Type: application/octet-stream Content-Length: 260485 Server: AmazonS3 Connection: close
2025-03-12 12:29:10 UTC	16384	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 53 41 52 53 2e 78 6c 73 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 57 59 53 49 57 59 47 20 57 65 62 20 42 75 69 6c 64 65 72 20 31 30 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 79 73 69 77 79 67 77 65 62 62 75 69 6c 64 65 72 2e 63 6f 6d 22 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 61 7b 63 6f 6c 6f 72 3a 23 30 30 46 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 3a 76 69 73 69 74 65 64 7b 63 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>SARS.xls</title><meta name="generator" content="WYSIWYG Web Builder 10 - http://www.wysiwygwebbuilder.com"><style>body a{color:#00F;text-decoration:underline}a:visited{c
2025-03-12 12:29:10 UTC	359	IN	Data Raw: 72 38 45 47 4c 64 33 31 6f 2b 63 69 39 5a 4f 37 36 30 66 4f 52 65 73 73 70 37 31 38 2f 35 68 33 56 2b 43 64 36 2b 66 38 77 37 71 2f 42 42 69 33 64 39 61 50 6e 49 76 57 54 75 2b 74 48 7a 6b 58 72 4c 4b 65 39 66 50 2b 59 64 31 66 67 6e 65 76 6e 2f 4d 4f 36 76 77 51 59 74 33 66 57 6a 35 79 4c 31 6b 37 76 72 52 38 35 46 36 79 79 6e 76 58 7a 2f 6d 48 64 58 34 4a 33 72 35 2f 77 41 77 37 71 2f 42 42 69 33 64 39 61 50 6e 49 76 57 54 75 2b 74 48 7a 6b 58 72 4c 4b 65 39 66 50 38 41 6d 48 64 58 34 4a 33 72 35 2f 7a 44 75 72 38 45 47 4c 64 33 31 6f 2b 63 69 39 5a 4f 37 36 30 66 4f 52 65 73 73 70 37 31 38 2f 35 68 33 56 2b 43 64 36 2b 66 38 77 37 71 2f 42 42 69 33 64 39 61 50 6e 49 76 57 54 75 2b 74 48 7a 6b 58 72 4c 4b 65 39 66 50 2b 59 64 31 66 67 6e 65 76 6e 2f 4d Data Ascii: r8EGLd31o+ci9ZO760fORessp718/5h3V+Cd6+f8w7q/BBi3d9aPnIvWTu+tHzkXrLKe9fP+Yd1fgnevn/MO6vwQYt3fWj5yL1k7vrR85F6yynvXz/mHdX4J3r5/wAw7q/BBi3d9aPnIvWTu+tHzkXrLKe9fP8AmHdX4J3r5/zDur8EGLd31o+ci9ZO760fORessp718/5h3V+Cd6+f8w7q/BBi3d9aPnIvWTu+tHzkXrLKe9fP+Yd1fgnevn/M
2025-03-12 12:29:10 UTC	16384	IN	Data Raw: 37 36 30 66 4f 52 65 73 73 70 37 31 38 2f 35 68 33 56 2b 43 64 36 2b 66 38 77 37 71 2f 42 42 69 33 64 39 61 50 6e 49 76 57 54 75 2b 74 48 7a 6b 58 72 4c 4b 65 39 66 50 2b 59 64 31 66 67 6e 65 76 6e 2f 4d 4f 36 76 77 51 57 2b 79 38 75 70 39 38 52 74 59 72 37 69 50 72 46 62 45 35 44 5a 56 54 63 79 2b 44 70 52 48 6d 70 48 47 56 44 6c 6d 35 73 35 31 6b 56 70 31 4c 2f 58 6f 72 59 44 49 6a 49 69 5a 6c 48 77 69 36 47 35 74 43 4d 57 33 49 4e 74 73 68 37 52 69 78 6f 55 4c 54 4a 49 63 42 78 31 55 2f 77 42 6e 45 75 68 4e 4a 78 2b 43 67 7a 49 79 79 49 6b 74 44 68 36 54 61 41 41 59 71 64 5a 42 68 5a 43 61 44 73 72 66 36 6b 46 78 52 45 51 45 52 45 42 45 52 41 52 45 51 45 52 45 42 45 52 41 52 45 51 45 52 45 42 45 52 41 52 45 51 45 52 45 42 45 52 41 52 45 51 45 52 45 46 Data Ascii: 760fORessp718/5h3V+Cd6+f8w7q/BBi3d9aPnIvWTu+tHzkXrLKe9fP+Yd1fgnevn/MO6vwQW+y8up98RtYr7iPrFbE5DZVTcy+DpRHmpHGVDlm5s51kVp1L/XorYDIjIiZlHwi6G5tCMW3INtsh7RixoULTJIcBx1U/wBnEuhNJx+CgzIyyIktDh6TaAAYqdZBhZCaDsrf6kFxREQEREBERAREQEREBERAREQEREBERAREQEREBERAREQEREF
2025-03-12 12:29:10 UTC	1024	IN	Data Raw: 2b 54 6e 4b 6d 34 79 45 50 71 72 30 69 73 6a 4a 32 52 64 43 62 57 47 30 33 56 77 43 79 49 5a 4e 53 42 77 68 74 36 46 48 45 74 33 39 4b 69 4e 31 37 4c 53 38 74 33 66 4a 77 6c 63 64 77 51 7a 58 38 4d 45 72 34 50 6b 34 53 70 50 39 42 44 48 72 68 42 65 70 66 63 76 49 2b 62 5a 30 4a 33 4c 79 50 49 5a 30 4b 59 33 6e 75 38 76 37 4a 34 58 73 74 4d 50 4c 64 76 79 63 5a 5a 76 2f 41 49 4d 50 71 55 58 50 77 64 4a 62 30 47 48 31 56 36 69 39 79 38 6a 79 47 64 43 64 79 38 6a 79 47 64 43 70 34 6d 75 2f 4f 61 6b 63 4c 57 57 6c 35 64 48 35 4f 63 73 62 6a 49 77 2b 71 6e 67 35 79 77 2f 38 47 48 31 56 36 69 39 79 38 6a 79 47 64 43 64 79 38 6a 79 47 64 43 63 53 33 65 6f 34 57 73 74 4c 79 37 38 48 4f 56 34 35 46 6e 55 42 51 2f 4a 7a 6c 65 4b 52 68 2b 31 6c 46 36 69 64 79 38 6a Data Ascii: +TnKm4yEPqr0isjJ2RdCbWG03VwCyIZNSBwht6FHEt39KiN17LS8t3fJwlcdwQzX8MEr4Pk4SpP9BDHrhBepfcvI+bZ0J3LyPIZ0KY3nu8v7J4XstMPLdvycZZv/AIMPqUXPwdJb0GH1V6i9y8jyGdCdy8jyGdCp4mu/OakcLWWl5dH5OcsbjIw+qng5yw/8GH1V6i9y8jyGdCdy8jyGdCcS3eo4WstLy78HOV45FnUBQ/JzleKRh+1lF6idy8j
2025-03-12 12:29:10 UTC	16384	IN	Data Raw: 4b 55 4a 33 4b 32 37 62 44 43 73 6b 54 4e 42 4b 4d 66 38 41 30 72 4b 31 35 49 58 6f 57 37 4a 57 45 36 48 58 56 31 4a 46 61 61 49 6f 4f 78 59 72 50 35 4b 77 32 75 4a 45 4c 6a 32 4b 59 33 6f 76 4d 73 75 33 4a 47 36 64 6c 48 7a 37 44 54 61 52 7a 51 53 62 67 41 5a 5a 68 4a 4f 4a 61 43 72 78 46 7a 4e 53 6d 72 71 5a 61 47 4c 75 51 46 74 76 5a 32 54 72 41 34 41 77 2b 6b 42 5a 46 47 79 64 68 47 43 52 6f 58 36 4f 78 52 47 38 39 35 6c 38 36 6a 68 4f 78 6e 2f 44 7a 6e 74 76 4e 54 4b 51 51 34 62 6d 5a 63 62 2b 43 4b 68 52 31 4e 35 76 5a 53 47 38 6a 55 4e 72 58 6b 72 66 2f 4b 6e 4a 30 4e 62 45 41 68 6b 56 48 45 42 51 71 45 4c 52 79 64 64 72 6e 65 4c 50 6c 63 62 62 31 4d 62 30 33 75 6f 6a 64 53 79 2b 58 2f 45 66 70 72 68 4b 5a 76 5a 53 49 34 44 63 37 4b 31 32 43 39 5a Data Ascii: KUJ3K27bDCskTNBKMf8A0rK15IXoW7JWE6HXV1JFaaIoOxYrP5Kw2uJELj2KY3ovMsu3JG6dlHz7DTaRzQSbgAZZhJOJaCrxFzNSmrqZaGLuQFtvZ2TrA4Aw+kBZFGydhGCRoX6OxRG895l86jhOxn/DzntvNTKQQ4bmZcb+CKhR1N5vZSG8jUNrXkrf/KnJ0NbEAhkVHEBQqELRyddrneLPlcbb1Mb03uojdSy+X/EfprhKZvZSI4Dc7K12C9Z
2025-03-12 12:29:10 UTC	1024	IN	Data Raw: 7a 4e 77 75 75 38 55 56 51 52 4d 77 6b 31 44 78 6c 58 48 2f 41 45 49 58 36 4c 62 53 2b 54 48 41 67 51 79 2f 65 39 6f 75 72 66 43 41 70 32 4b 49 4c 66 7a 43 79 38 71 35 2f 77 41 79 62 63 65 51 42 2f 78 4f 5a 4f 46 48 6e 55 63 73 4d 58 50 4f 61 58 68 4f 63 78 30 63 47 68 6c 58 44 6d 4c 43 55 62 6d 4f 6a 6b 30 33 4d 65 6f 51 76 59 79 61 7a 51 79 30 4e 35 62 75 55 41 41 30 72 6f 68 66 5a 58 4e 42 4b 78 48 4e 2b 61 6a 32 73 42 55 38 79 4d 50 4c 2b 78 48 77 77 78 73 2f 36 2b 2f 6b 38 65 57 35 69 4a 6c 31 32 35 58 56 35 6d 6b 72 6b 63 77 73 79 4d 5a 56 33 55 4b 39 71 35 58 4d 6e 4b 76 41 4f 34 32 6d 70 48 31 41 54 2b 69 72 59 6d 5a 47 57 61 77 6b 79 54 52 7a 36 48 77 56 50 4d 69 6a 55 63 73 4d 62 54 37 2b 54 78 43 64 6d 4c 6d 47 34 79 72 75 71 61 72 6f 64 6d 50 Data Ascii: zNwuu8UVQRMwk1DxlXH/AEIX6LbS+THAgQy/e9ourfCAp2KILfzCy8q5/wAybceQB/xOZOFHnUcsMXPOaXhOcx0cGhlXDmLCUbmOjk03MeoQvYyazQy0N5buUAA0rohfZXNBKxHN+aj2sBU8yMPL+xHwwxs/6+/k8eW5iJl125XV5mkrkcwsyMZV3UK9q5XMnKvAO42mpH1AT+irYmZGWawkyTRz6HwVPMijUcsMbT7+TxCdmLmG4yruqarodmP
2025-03-12 12:29:10 UTC	16384	IN	Data Raw: 65 2f 6b 38 54 4f 38 37 4f 65 6a 4f 36 70 2f 5a 66 65 38 35 4f 48 43 57 65 66 38 41 51 2f 73 76 61 33 77 66 59 66 6f 4c 66 64 71 72 68 66 4a 35 59 34 44 35 67 32 37 69 4d 4f 6e 2f 41 42 52 7a 4a 77 74 52 79 76 78 59 38 36 50 54 2f 77 43 50 45 66 76 4f 54 76 6f 72 2b 6f 66 32 54 76 4f 54 67 78 6c 6e 6a 2f 51 2f 73 76 63 41 2f 4a 33 68 41 56 33 41 7a 32 77 71 4b 33 78 66 6b 2f 51 6d 6d 68 6b 57 6a 2f 38 41 4e 54 7a 4a 77 2b 76 71 63 72 38 54 36 55 50 45 37 76 4f 7a 6e 6f 7a 75 71 66 32 58 50 76 4f 54 66 6f 72 2f 41 48 62 6c 37 55 4e 7a 41 77 62 2f 41 4a 69 77 66 2f 6e 70 4b 6f 62 38 6e 2b 43 52 66 4a 4e 72 7a 73 78 55 52 38 53 63 4f 66 38 41 58 71 52 38 4c 38 58 36 30 65 6e 2f 41 4d 65 4a 2f 65 63 6d 2f 52 58 2b 37 63 75 62 63 7a 55 35 56 70 33 49 2b 6c 65 Data Ascii: e/k8TO87OejO6p/Zfe85OHCWef8AQ/sva3wfYfoLfdqrhfJ5Y4D5g27iMOn/ABRzJwtRyvxY86PT/wCPEfvOTvor+of2TvOTgxlnj/Q/svcA/J3hAV3Az2wqK3xfk/QmmhkWj/8ANTzJw+vqcr8T6UPE7vOznozuqf2XPvOTfor/AHbl7UNzAwb/AJiwf/npKob8n+CRfJNrzsxUR8ScOf8AXqR8L8X60en/AMeJ/ecm/RX+7cubczU5Vp3I+le
2025-03-12 12:29:10 UTC	1024	IN	Data Raw: 61 62 4b 71 4b 38 70 6f 7a 32 73 69 30 72 64 78 6a 69 78 55 73 52 77 53 77 30 32 4b 4f 38 6f 4c 50 64 47 68 78 42 51 31 49 75 4b 44 55 2f 4b 79 31 49 38 4a 38 55 68 7a 73 63 52 63 6f 4c 74 50 4b 32 5a 6c 34 6a 71 52 48 67 56 6f 4c 37 77 74 6b 38 72 63 6e 49 73 54 58 55 61 54 55 6e 6e 72 69 74 63 38 6f 73 6b 4a 6c 7a 6e 6c 73 4e 78 46 39 4c 73 45 46 42 4b 35 66 7a 44 44 51 78 6e 69 2f 6a 4e 77 56 37 62 6c 39 48 65 30 65 4e 63 66 39 71 4b 4d 7a 6b 72 50 4d 69 47 6a 48 30 72 73 56 79 68 5a 4f 7a 75 6a 35 44 2b 67 6f 4c 2f 50 35 64 7a 49 4a 70 46 49 48 4d 36 39 59 2b 37 4f 4e 4d 77 33 55 4d 5a 39 51 65 55 71 61 63 79 59 6d 33 74 4e 59 5a 4a 49 32 58 31 57 47 54 6d 53 38 38 78 35 49 68 75 78 76 75 77 51 53 74 4b 35 7a 49 39 42 34 39 31 51 4f 56 67 71 69 4a 6e Data Ascii: abKqK8poz2si0rdxjixUsRwSw02KO8oLPdGhxBQ1IuKDU/Ky1I8J8UhzscRcoLtPK2Zl4jqRHgVoL7wtk8rcnIsTXUaTUnnritc8oskJlznlsNxF9LsEFBK5fzDDQxni/jNwV7bl9He0eNcf9qKMzkrPMiGjH0rsVyhZOzuj5D+goL/P5dzIJpFIHM69Y+7ONMw3UMZ9QeUqacyYm3tNYZJI2X1WGTmS88x5IhuxvuwQStK5zI9B491QOVgqiJn
2025-03-12 12:29:10 UTC	16384	IN	Data Raw: 6b 50 32 58 44 6e 51 54 72 49 5a 78 6f 38 53 6e 6a 7a 66 39 36 39 58 57 5a 79 36 6a 4f 68 6d 6b 56 32 48 4b 6f 6f 59 73 79 77 70 31 70 61 48 4d 66 36 79 31 5a 59 4c 42 6d 33 4d 6f 57 75 76 47 78 42 30 57 35 6c 31 4d 73 44 71 52 53 4d 61 48 53 76 55 63 7a 57 63 43 63 62 45 2b 6d 66 53 76 48 56 5a 44 62 47 53 38 35 45 44 6a 71 33 45 30 6f 4c 6c 67 45 7a 6b 64 50 76 69 56 45 4b 4a 31 53 67 75 68 7a 67 54 6a 68 64 47 64 64 7a 6b 4b 6d 69 5a 65 7a 35 75 31 72 72 78 74 56 4c 43 79 48 6e 6e 47 68 67 76 32 47 6f 56 61 4d 67 4a 30 67 48 56 50 72 54 6a 43 43 68 4f 58 63 38 48 31 31 72 37 72 73 56 6c 4e 6b 5a 65 7a 6d 73 59 44 46 65 52 57 2b 6a 38 46 6a 4d 62 49 4f 65 5a 55 69 43 34 2b 78 56 4e 6e 5a 49 54 30 4a 37 61 77 6e 69 68 76 75 75 51 54 78 59 2b 57 30 64 7a Data Ascii: kP2XDnQTrIZxo8Snjzf969XWZy6jOhmkV2HKooYsywp1paHMf6y1ZYLBm3MoWuvGxB0W5l1MsDqRSMaHSvUczWcCcbE+mfSvHVZDbGS85EDjq3E0oLlgEzkdPviVEKJ1SguhzgTjhdGddzkKmiZez5u1rrxtVLCyHnnGhgv2GoVaMgJ0gHVPrTjCChOXc8H11r7rsVlNkZezmsYDFeRW+j8FjMbIOeZUiC4+xVNnZIT0J7awnihvuuQTxY+W0dz
2025-03-12 12:29:10 UTC	1024	IN	Data Raw: 77 57 4f 50 79 4d 6b 32 46 77 31 4c 42 78 58 42 62 47 64 2b 63 66 56 36 74 62 47 34 4e 76 48 7a 6d 6c 35 64 6e 4d 49 30 67 2f 4d 36 66 2f 6d 46 31 6e 4d 41 77 34 79 68 39 65 72 58 71 41 37 4a 43 54 42 6f 49 4c 50 61 78 64 6b 50 4a 43 54 4e 44 71 57 58 33 48 67 4b 6d 4e 2b 63 66 55 72 6e 63 47 33 6e 35 39 6c 35 65 6a 35 50 6f 78 45 72 53 6f 35 43 37 75 38 49 57 69 36 55 75 35 6d 42 65 70 38 48 49 6d 56 69 41 55 67 4d 4e 31 33 42 56 79 47 62 2b 55 63 32 75 35 32 33 33 65 51 4b 66 6f 6b 37 38 59 2b 70 54 77 46 67 78 35 55 76 4a 70 2b 59 6c 77 70 38 30 4e 50 38 46 77 47 59 75 68 76 6c 61 56 78 71 78 65 71 38 7a 6b 44 4b 73 30 71 51 47 43 6d 48 41 56 69 69 35 46 79 7a 54 54 55 74 36 74 45 34 33 78 76 4c 4e 50 41 65 44 35 64 6c 35 6c 44 4d 55 48 59 53 70 50 71 Data Ascii: wWOPyMk2Fw1LBxXBbGd+cfV6tbG4NvHzml5dnMI0g/M6f/mF1nMAw4yh9erXqA7JCTBoILPaxdkPJCTNDqWX3HgKmN+cfUrncG3n59l5ej5PoxErSo5C7u8IWi6Uu5mBep8HImViAUgMN13BVyGb+Uc2u5233eQKfok78Y+pTwFgx5UvJp+Ylwp80NP8FwGYuhvlaVxqxeq8zkDKs0qQGCmHAVii5FyzTTUt6tE43xvLNPAeD5dl5lDMUHYSpPq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49796	13.107.42.14	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:12 UTC	1209	OUT	GET /collect?v=2&fmt=js&pid=70022&time=1741782535936&li_adsId=5161daed-8aa4-4efc-b9a0-a9cbe96e79ee&url=https%3A%2F%2Fcloud.kdanmobile.com%2Fshare%2Fgl%2Fcm1xL08zelc5MjAwMDNyclIrU3U4RA&cookiesTest=true&liSync=true HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; ar_debug=1; lidc="b=VGST07:s=V:r=V:a=V:p=V:g=3187:u=1:x=1:i=1741782541:t=1741868941:v=2:sig=AQGtrZbskB6ZJlKkgMEk34kovHlJn9Au"; UserMatchHistory=AQKS3FPrBS2JDAAAAZWKVGl5UJQjMevROUR9j0GKwmONJnpXaCPYPC0g0Frld1QDbU7KRkbQqppCqQ; AnalyticsSyncHistory=AQLKrQcXZs0pyAAAAZWKVGl5c_43fiKimSE77CtEcMQOwL6NuFBaAfYgdIo0chs_AAm9l_fD3M_-_GrX0yBbQw; bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; __cf_bm=PXtcuwfNoVXlKzu9J1szAOp2kq.Hs3xCTFvc8b.rEAY-1741782546-1.0.1.1-PhitQLvpb7vMGCUnUXM4MLfGOa.IOQt25BWCS4ZKPTVxwJe_5KZ_ylfgpZ0NkHIsUETrW66vULXlwHvRVg3PdZTep27hFJMBxfwbSPnEWgQ
2025-03-12 12:29:12 UTC	714	IN	HTTP/1.1 200 OK Content-Type: application/javascript Set-Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; Max-Age=7776000; Expires=Tue, 10 Jun 2025 12:29:12 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure Set-Cookie: bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 12-Mar-2026 12:29:12 GMT; SameSite=None LinkedIn-Action: 1 X-Li-Fabric: prod-lva1 X-Li-Pop: afd-prod-lva1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYwJFpO/8P2bI+igWyFUg== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 8EAC75E6820B494090EF7C896448C606 Ref B: BNA30EDGE0409 Ref C: 2025-03-12T12:29:12Z Date: Wed, 12 Mar 2025 12:29:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49797	13.107.42.14	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:12 UTC	1280	OUT	POST /wa/ HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive Content-Length: 400 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: * sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: li_sugr=2ea44f54-6828-4f6c-b585-11a9f5f7592b; ar_debug=1; lidc="b=VGST07:s=V:r=V:a=V:p=V:g=3187:u=1:x=1:i=1741782541:t=1741868941:v=2:sig=AQGtrZbskB6ZJlKkgMEk34kovHlJn9Au"; UserMatchHistory=AQKS3FPrBS2JDAAAAZWKVGl5UJQjMevROUR9j0GKwmONJnpXaCPYPC0g0Frld1QDbU7KRkbQqppCqQ; AnalyticsSyncHistory=AQLKrQcXZs0pyAAAAZWKVGl5c_43fiKimSE77CtEcMQOwL6NuFBaAfYgdIo0chs_AAm9l_fD3M_-_GrX0yBbQw; bcookie="v=2&8df21564-6f28-4a12-8c9a-cec34c2f564c"; __cf_bm=PXtcuwfNoVXlKzu9J1szAOp2kq.Hs3xCTFvc8b.rEAY-1741782546-1.0.1.1-PhitQLvpb7vMGCUnUXM4MLfGOa.IOQt25BWCS4ZKPTVxwJe_5KZ_ylfgpZ0NkHIsUETrW66vULXlwHvRVg3PdZTep27hFJMBxfwbSPnEWgQ
2025-03-12 12:29:12 UTC	400	OUT	Data Raw: 7b 22 70 69 64 73 22 3a 5b 37 30 30 32 32 5d 2c 22 73 63 72 69 70 74 56 65 72 73 69 6f 6e 22 3a 31 39 39 2c 22 74 69 6d 65 22 3a 31 37 34 31 37 38 32 35 34 39 31 37 33 2c 22 64 6f 6d 61 69 6e 22 3a 22 63 6c 6f 75 64 2e 6b 64 61 6e 6d 6f 62 69 6c 65 2e 63 6f 6d 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 2e 6b 64 61 6e 6d 6f 62 69 6c 65 2e 63 6f 6d 2f 73 68 61 72 65 2f 67 6c 2f 63 6d 31 78 4c 30 38 7a 65 6c 63 35 4d 6a 41 77 4d 44 4e 79 63 6c 49 72 55 33 55 34 52 41 22 2c 22 70 61 67 65 54 69 74 6c 65 22 3a 22 4b 44 41 4e 20 43 6c 6f 75 64 20 7c 20 44 6f 77 6e 6c 6f 61 64 20 4c 69 6e 6b 22 2c 22 77 65 62 73 69 74 65 53 69 67 6e 61 6c 52 65 71 75 65 73 74 49 64 22 3a 22 30 61 39 65 36 65 33 66 2d 38 33 38 33 2d 66 36 31 39 2d 35 38 36 Data Ascii: {"pids":[70022],"scriptVersion":199,"time":1741782549173,"domain":"cloud.kdanmobile.com","url":"https://cloud.kdanmobile.com/share/gl/cm1xL08zelc5MjAwMDNyclIrU3U4RA","pageTitle":"KDAN Cloud \| Download Link","websiteSignalRequestId":"0a9e6e3f-8383-f619-586
2025-03-12 12:29:12 UTC	455	IN	HTTP/1.1 204 No Content Vary: Origin LinkedIn-Action: 1 Access-Control-Allow-Origin: https://cloud.kdanmobile.com Access-Control-Allow-Credentials: true X-Li-Fabric: prod-lva1 X-Li-Pop: afd-prod-lva1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYwJFpN09j0aezhmePSlw== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 57B4F37EBD544ED384CF53265A40F62E Ref B: BNA30EDGE0319 Ref C: 2025-03-12T12:29:12Z Date: Wed, 12 Mar 2025 12:29:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49798	13.74.129.1	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:12 UTC	622	OUT	GET /c.gif HTTP/1.1 Host: c.clarity.ms Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:13 UTC	657	IN	HTTP/1.1 302 Redirect Cache-Control: private, no-cache, proxy-revalidate, no-store Pragma: no-cache Location: https://c.bing.com/c.gif?ctsa=mr&CtsSyncId=C440A9458A39425A9F9FA13B8109DE52&RedC=c.clarity.ms&MXFR=2E3F2DB474EB66961ADC381970EB6802 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Set-Cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; Set-Cookie: MUID=2E3F2DB474EB66961ADC381970EB6802; domain=.clarity.ms; expires=Mon, 06-Apr-2026 12:29:13 GMT; path=/; SameSite=None; Secure; Priority=High; Date: Wed, 12 Mar 2025 12:29:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49800	52.152.143.207	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:13 UTC	643	OUT	POST /collect HTTP/1.1 Host: o.clarity.ms Connection: keep-alive Content-Length: 489 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-12 12:29:13 UTC	489	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 52 cb 6e db 30 10 fc 97 3d 8f 69 92 7a 90 0a 90 83 81 5e 0a 34 3d 14 c8 49 d0 81 a6 68 99 35 25 d9 12 13 25 29 fa ef 85 1c 39 41 d2 a0 29 16 18 2c 86 dc d9 1d ec fe 22 47 57 25 71 a6 19 27 48 08 ae 21 78 9e a7 a0 5c 9f 0e bc 69 a7 a1 26 d0 a9 b5 71 9f 13 e8 41 bb 53 df 10 04 f8 39 68 1f e3 71 bc 5a af 6d e8 ef 6a 76 a8 4d d7 f6 5b 1f 1c b3 7d bb 1e f7 66 70 eb 26 ac 6d 2b 1e be 71 fd e4 82 cd 6e 7e 6e a6 9b 2f df 1f 6d f8 3a dc 26 b7 e9 8f 0d 55 20 43 57 65 59 a8 3c 83 2c 20 39 92 4c 67 50 59 5a 3c 83 ce 78 76 81 b4 40 92 48 a1 ce a8 cf 58 80 23 97 5c 83 3a 73 ef 1b 13 1d 81 f6 92 90 15 b3 23 2d 94 ac 50 ce ee 52 08 08 a9 39 74 a1 5e 13 fe 3f 71 56 50 4a 42 20 45 49 93 db ae c6 68 a2 b7 ef 6c 13 68 d7 77 71 64 4d df 37 c1 Data Ascii: Rn0=iz^4=Ih5%%)9A),"GW%q'H!x\i&qAS9hqZmjvM[}fp&m+qn~n/m:&U CWeY<, 9LgPYZ<xv@HX#\:s#-PR9t^?qVPJB EIhlhwqdM7
2025-03-12 12:29:14 UTC	279	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 12 Mar 2025 12:29:13 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cloud.kdanmobile.com Vary: Origin Request-Context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49803	52.152.143.207	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:17 UTC	690	OUT	POST /collect HTTP/1.1 Host: o.clarity.ms Connection: keep-alive Content-Length: 210 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=2E3F2DB474EB66961ADC381970EB6802
2025-03-12 12:29:17 UTC	210	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 6d 8e 41 6b c2 40 10 85 ff cb 9c 87 ec cc 66 4d 26 b9 09 bd 14 6a 0f 05 4f 21 87 74 77 49 a2 bb a6 89 29 5a a5 ff bd 68 45 2f f2 5d de 83 c7 c7 3b 83 87 b2 02 4a 24 21 c0 14 99 f2 5c 63 2a 46 10 32 19 b7 d4 c6 c3 e4 00 61 8c 76 ee 32 40 38 8a 1f 87 16 90 91 ae 40 37 cf 5f fb 52 29 1b 86 6f 97 6c 5d b3 8b c3 67 1f 7c 62 87 a8 f6 5d 33 79 d5 06 65 23 1f df 48 4e 3e d8 c5 6a b3 3c ac 5e de 7f 6c 78 9d d6 e9 da 7c 2c a1 46 68 a0 ac 2a d6 2c 29 6a 41 e8 7a e7 fc 0e 6a ac fe 3f 19 64 64 2d 84 52 e4 8f 40 37 98 74 56 dc db 13 2e 1e 93 f1 65 a3 d1 48 71 f5 e9 05 9a ba fe fd 03 84 23 22 e8 05 01 00 00 Data Ascii: mAk@fM&jO!twI)ZhE/];J$!\cF2av2@8@7_R)ol]g\|b]3ye#HN>j<^lx\|,Fh,)jAzj?dd-R@7tV.eHq#"
2025-03-12 12:29:17 UTC	279	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 12 Mar 2025 12:29:17 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cloud.kdanmobile.com Vary: Origin Request-Context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49804	13.74.129.1	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:18 UTC	764	OUT	GET /c.gif?ctsa=mr&CtsSyncId=C440A9458A39425A9F9FA13B8109DE52&MUID=10E82FB6E5A862AA29283A1BE406634B HTTP/1.1 Host: c.clarity.ms Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: SM=T; MUID=2E3F2DB474EB66961ADC381970EB6802
2025-03-12 12:29:18 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, proxy-revalidate, no-store Pragma: no-cache Content-Type: image/gif Last-Modified: Tue, 11 Feb 2025 23:11:09 GMT Accept-Ranges: bytes ETag: "14844c3cda7cdb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Set-Cookie: SM=C; domain=c.clarity.ms; path=/; SameSite=None; Secure; Set-Cookie: MUID=10E82FB6E5A862AA29283A1BE406634B; domain=.clarity.ms; expires=Mon, 06-Apr-2026 12:29:18 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=c.clarity.ms; expires=Wed, 19-Mar-2025 12:29:18 GMT; path=/; SameSite=None; Secure; Set-Cookie: ANONCHK=0; domain=c.clarity.ms; expires=Wed, 12-Mar-2025 12:39:18 GMT; path=/; SameSite=None; Secure; Date: Wed, 12 Mar 2025 12:29:18 GMT Connection: close Content-Length: 42
2025-03-12 12:29:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49805	13.74.129.1	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:21 UTC	540	OUT	GET /c.gif?ctsa=mr&CtsSyncId=C440A9458A39425A9F9FA13B8109DE52&MUID=10E82FB6E5A862AA29283A1BE406634B HTTP/1.1 Host: c.clarity.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: SM=C; MUID=10E82FB6E5A862AA29283A1BE406634B; MR=0; ANONCHK=0
2025-03-12 12:29:21 UTC	516	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, proxy-revalidate, no-store Pragma: no-cache Content-Type: image/gif Last-Modified: Tue, 11 Feb 2025 23:11:09 GMT Accept-Ranges: bytes ETag: "14844c3cda7cdb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Set-Cookie: ANONCHK=0; domain=c.clarity.ms; expires=Wed, 12-Mar-2025 12:39:21 GMT; path=/; SameSite=None; Secure; Date: Wed, 12 Mar 2025 12:29:20 GMT Connection: close Content-Length: 42
2025-03-12 12:29:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49806	52.152.143.207	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:22 UTC	690	OUT	POST /collect HTTP/1.1 Host: o.clarity.ms Connection: keep-alive Content-Length: 288 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=10E82FB6E5A862AA29283A1BE406634B
2025-03-12 12:29:22 UTC	288	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 85 90 cd 6a c3 30 10 84 df 65 cf 83 ad 95 64 45 0e e4 10 e8 a5 d0 f4 50 c8 c9 e8 e0 c8 6a ec 46 ae 13 db 25 3f a5 ef 5e 12 5a f7 52 08 df 65 66 77 19 86 fd a4 40 f3 82 44 62 13 41 d0 60 6d a4 40 26 98 41 c6 1e 76 62 db 1e fb 8a 40 87 d6 8f b5 21 d0 c9 86 43 b7 25 30 c4 0d aa c7 71 3f cc d3 d4 c7 ee a3 4a 76 55 f9 de 76 9b 26 86 c4 77 6d 3a d4 65 1f d2 6d 4c 7d cb a7 27 61 2f 21 fa 6c f5 b6 3c ae 1e 9e cf 3e 3e f6 6b b5 d6 2f 4b 72 a0 92 e6 45 c1 da 70 0e 0d 01 96 56 c0 e6 b3 3f 21 7e 60 c9 56 4d ee 1f 1c 0a ce 8d 62 30 34 0a f2 89 8f 65 df 8c e7 a4 1d c8 4d 4b 01 09 c9 02 0a 12 1a 12 d9 d5 67 c8 a6 03 65 60 50 70 66 64 0e e1 9c 03 ed 6f 15 6f 03 03 95 83 96 04 6a aa c5 d0 5c 2e 31 f0 4c f3 cc ca 4c 89 9c af cf 14 28 94 03 d5 Data Ascii: j0edEPjF%?^ZRefw@DbA`m@&Avb@!C%0q?JvUv&wm:emL}'a/!l<>>k/KrEpV?!~`VMb04eMKge`Ppfdooj\.1LL(
2025-03-12 12:29:22 UTC	279	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 12 Mar 2025 12:29:22 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cloud.kdanmobile.com Vary: Origin Request-Context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49807	52.152.143.207	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:28 UTC	690	OUT	POST /collect HTTP/1.1 Host: o.clarity.ms Connection: keep-alive Content-Length: 270 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=10E82FB6E5A862AA29283A1BE406634B
2025-03-12 12:29:28 UTC	270	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 85 8e bb 6a c3 40 14 44 ff e5 d6 83 b4 6f ad 0c 2e 04 69 02 71 8a 80 2b b1 85 2c ad 2d c5 ab c8 7a 04 3b 0a f9 f7 e0 38 b1 9b 80 99 66 e6 32 9c 3b 9f e4 69 91 13 8b 6c c4 08 1a 3c 35 92 43 a7 d6 82 8c ed f7 6c d7 1e 87 8a 40 7d 5b 4e b5 21 d0 c9 fa be db 11 38 d8 8f a8 9e a6 c3 b8 88 e3 32 74 ef 55 b4 af 8a b7 b6 db 34 c1 47 65 d7 c6 63 5d 0c 3e de 85 b8 6c f9 e9 89 d9 d9 87 52 af 5e b3 e3 ea e1 f9 a3 0c 8f c3 5a ae d5 4b 46 0e 54 d0 22 cf 2f ff 15 18 b8 b0 0c 36 4d 6e 86 fd 8a 6b 23 d2 6b fa 47 0e b9 d0 86 9f 3b 02 c2 5a 48 08 28 28 e8 73 d6 d0 d7 82 34 30 c8 05 33 22 01 73 ce 81 0e e7 15 97 83 81 92 a0 8c 40 4d b5 1c 9b 79 0e 9e 27 8a 27 56 68 c9 52 ce 08 4a 21 97 0e 54 0f 7e bb 24 50 d5 8c c5 26 f8 6a f9 67 c8 e1 06 d3 77 Data Ascii: j@Do.iq+,-z;8f2;il<5Cl@}[N!82tU4Gec]>lR^ZKFT"/6Mnk#kG;ZH((s403"s@My''VhRJ!T~$P&jgw
2025-03-12 12:29:28 UTC	279	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 12 Mar 2025 12:29:28 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cloud.kdanmobile.com Vary: Origin Request-Context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49812	52.152.143.207	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:29:49 UTC	690	OUT	POST /collect HTTP/1.1 Host: o.clarity.ms Connection: keep-alive Content-Length: 270 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=10E82FB6E5A862AA29283A1BE406634B
2025-03-12 12:29:49 UTC	270	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 85 8e 4d 4b c3 40 18 84 ff cb 7b 1e 92 77 3f b3 29 e4 50 f0 22 58 0f 42 4f 61 0f 69 b2 36 b1 1b d3 26 95 d6 8a ff 5d 6a d5 5e 44 79 2e 33 c3 30 cc 1b 05 9a 95 c4 89 4b 98 60 21 8d 15 39 a4 60 c1 20 eb 76 1b 5e f7 87 b1 21 d0 ae af f7 ad 25 d0 d1 85 dd b0 26 08 f0 27 d4 ee f7 db 69 96 a6 75 1c 5e 9a 64 d3 54 cf fd b0 ea 62 48 ea a1 4f a7 b6 1a 43 ba 8e 69 dd 8b e3 1d bb 53 88 b5 59 3c cd 0f 8b 9b fb d7 3a de 8e 4b b5 d4 0f 73 f2 a0 8a 66 65 79 39 a0 c1 10 d2 31 5c 9e 5d 05 7f 21 d9 ca ab fb 05 8f 52 5b 2b f3 73 17 32 63 28 48 68 28 98 b3 37 30 3f 05 65 61 51 6a b6 4a 83 bd f7 a0 ed f9 c5 25 b0 d0 19 68 4e a0 ae 29 a6 ee 74 8a 41 64 5a 64 4e 1a c5 b9 60 82 76 28 95 07 b5 63 78 2c 08 d4 74 53 b5 8a a1 29 be 05 79 5c c7 f2 bf c7 Data Ascii: MK@{w?)P"XBOai6&]j^Dy.30K`!9` v^!%&'iu^dTbHOCiSY<:Ksfey91\]!R[+s2c(Hh(70?eaQjJ%hN)tAdZdN`v(cx,tS)y\
2025-03-12 12:29:49 UTC	279	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 12 Mar 2025 12:29:49 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cloud.kdanmobile.com Vary: Origin Request-Context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49816	52.152.143.207	443	3092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-12 12:30:05 UTC	690	OUT	POST /collect HTTP/1.1 Host: o.clarity.ms Connection: keep-alive Content-Length: 272 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/x-clarity-gzip sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://cloud.kdanmobile.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://cloud.kdanmobile.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: MUID=10E82FB6E5A862AA29283A1BE406634B
2025-03-12 12:30:05 UTC	272	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 85 8e 4d 6b c2 40 14 45 ff cb 5b 5f 92 37 df a3 e0 42 e8 a6 50 bb 28 b8 0a b3 88 c9 d4 a4 4e 1a 4d 2c 5a 4b ff 7b b1 b6 ba 29 94 b3 b9 ef f2 38 dc 0f 8a 34 2d 88 33 9f 31 c1 41 5b 2b 27 10 96 99 41 d6 ef 36 bc ee 0e 43 4d a0 5d 57 ed 1b 4b a0 a3 8f bb 7e 4d 10 e0 6f a8 d9 ef b7 e3 34 cf ab d4 bf d5 d9 a6 2e 5f bb 7e d5 a6 98 55 7d 97 8f 4d 39 c4 7c 9d f2 aa 13 c7 07 f6 a7 98 2a b3 78 99 1f 16 77 8f ef 55 ba 1f 96 6a a9 9f e6 14 40 25 4d 8b e2 32 40 83 21 a4 67 f8 89 bb 05 fe 41 b3 55 fa 7a fd 41 40 61 e5 d9 c3 90 90 8e a1 20 1c 34 14 0c 24 1c 04 a4 81 b9 7e 29 0b 8b c2 18 6b 1d 38 84 00 da 9e a7 5c 0a 0b 23 40 73 02 b5 f5 6c 6c 4f a7 14 85 d3 c2 79 69 14 4f 04 13 8c 44 a1 02 a8 19 e2 f3 8c 40 75 3b 96 ab 14 eb d9 6f a0 80 9b Data Ascii: Mk@E[_7BP(NM,ZK{)84-31A[+'A6CM]WK~Mo4._~U}M9\|*xwUj@%M2@!gAUzA@a 4$~)k8\#@sllOyiOD@u;o
2025-03-12 12:30:05 UTC	279	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 12 Mar 2025 12:30:05 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cloud.kdanmobile.com Vary: Origin Request-Context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: WINWORD.EXEPID: 6924, Parent PID: 4280

General

Target ID:	0
Start time:	08:28:06
Start date:	12/03/2025
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Desktop\REFUND STATUS.docx" /o ""
Imagebase:	0x190000
File size:	1'620'872 bytes
MD5 hash:	1A0C2C2E7D9C4BC18E91604E9B0C7678
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2272, Parent PID: 6924

General

Target ID:	11
Start time:	08:28:35
Start date:	12/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cloud.kdanmobile.com/share/gl/cm1xL08zelc5MjAwMDNyclIrU3U4RA
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3092, Parent PID: 2272

General

Target ID:	12
Start time:	08:28:36
Start date:	12/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2056,i,1929944603598537504,6097548482633458693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:3
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly